Edit tour

Windows Analysis Report
https://www.about-fraud.com/2025solution-providers-infographic/

Overview

General Information

Sample URL:	https://www.about-fraud.com/2025solution-providers-infographic/
Analysis ID:	1647493
Infos:

Detection

Score:	52
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

HTTP GET or POST without a user agent

PE file contains an invalid checksum

PE file overlay found

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w11x64_office

chrome.exe (PID: 2068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

chrome.exe (PID: 4416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,6829857613089241591,15149102483079325840,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=1976 /prefetch:11 MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

chrome.exe (PID: 6564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.about-fraud.com/2025solution-providers-infographic/" MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-24T22:18:04.584709+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.24	60869	104.21.80.1	443	TCP

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Data Obfuscation
• Persistence and Installation Behavior
• HIPS / PFW / Operating System Protection Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://s16.cloudcdnstatic.com/favicon.ico

Avira URL Cloud: Label: malware

Phishing

AI detected suspicious Javascript

Source: 4.8..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://tannideoutkill.shop/ivZVOPKshreBOHHLQJ/846... This script exhibits several high-risk behaviors, including data exfiltration, dynamic code execution, and suspicious redirection. The use of `postMessage` to the `window.opener` object and the manipulation of the browser history suggest potential phishing or malicious intent. Additionally, the obfuscated URL and the redirection to an unknown domain ('webulls.info') further increase the risk score.

Source: https://ta.churchxxv.com/iRoFHGK8eh1naZ/gVEQE

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 142.250.176.196:443 -> 192.168.2.24:60838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.113.136.33:443 -> 192.168.2.24:60840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.113.136.33:443 -> 192.168.2.24:60839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.61:443 -> 192.168.2.24:60850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.88:443 -> 192.168.2.24:60851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.40.68:443 -> 192.168.2.24:60848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.31:443 -> 192.168.2.24:60847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.77.100:443 -> 192.168.2.24:60859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.77.100:443 -> 192.168.2.24:60858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.113.136.33:443 -> 192.168.2.24:60864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.113.136.33:443 -> 192.168.2.24:60866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.113.136.33:443 -> 192.168.2.24:60865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.24:60868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.24:60867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.24:60870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.24:60871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.88.21.119:443 -> 192.168.2.24:60872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.88.21.119:443 -> 192.168.2.24:60874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.24:60882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.24:60881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.24:60883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.250.119:443 -> 192.168.2.24:60886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.250.119:443 -> 192.168.2.24:60887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.250.119:443 -> 192.168.2.24:60888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.24:60889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.75:443 -> 192.168.2.24:60894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.75:443 -> 192.168.2.24:60893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.19.112:443 -> 192.168.2.24:60896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.151:443 -> 192.168.2.24:60897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.206:443 -> 192.168.2.24:60898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.151:443 -> 192.168.2.24:60899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.169:443 -> 192.168.2.24:60900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.171:443 -> 192.168.2.24:60901 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.171:443 -> 192.168.2.24:60902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.90.194.86:443 -> 192.168.2.24:60904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.90.194.86:443 -> 192.168.2.24:60903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.96.20:443 -> 192.168.2.24:60905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.229:443 -> 192.168.2.24:60909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.96.20:443 -> 192.168.2.24:60913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.96.20:443 -> 192.168.2.24:60914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.33.206:443 -> 192.168.2.24:60925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.33.206:443 -> 192.168.2.24:60933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.96.20:443 -> 192.168.2.24:60943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.96.20:443 -> 192.168.2.24:60944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 139.45.195.6:443 -> 192.168.2.24:60945 version: TLS 1.2

Source:	Binary string: C:\CodeBases\isdev\redist\Language Independent\i386\setupPreReq.pdb source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, 5e012228-73a7-4201-af21-15ca08ed2d95.tmp.0.dr, chromecache_120.1.dr
Source:	Binary string: .pDb&# source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: webulls.info to https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7ff20c80-08f5-11f0-9e8f-6b1fce3162ec&cost=0.0033&os=win

Source: global traffic

HTTP traffic detected: POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1742851064070&w=0&anoncknm=al_app_anon&NoResponseBody=true HTTP/1.1Accept-Encoding: gzip, deflateContent-Length: 3656Content-Type: application/json; charset=UTF-8Host: browser.events.data.msn.cnConnection: Keep-AliveCache-Control: no-cache

Source: Network traffic

Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.24:60869 -> 104.21.80.1:443

Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /2025solution-providers-infographic/ HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlaHLAQiKo8sBCIWgzQEI/aXOAQiB1s4BCPzbzgEIxeDOAQjJ4c4BCK7kzgEI3+TOAQiM5c4BGJblzgE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.7.1 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/bb-plugin/cache/8249-layout.css?ver=0d50454ac8b5e91004636fe3c21fb004 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sharethis-share-buttons/css/mu-style.css?ver=1737649506 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/useanyfont/uaf.css?ver=1736968112 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dashicons.min.css?ver=6.7.1 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/bb-plugin/cache/dec5eac5dd1d23d4cc2cc5a31bf69310-layout-bundle.css?ver=2.7.1-1.4.3.2 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/sharethis.js?ver=2.3.4 HTTP/1.1Host: platform-api.sharethis.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javascript/copypastesubscribeformlogic.js HTTP/1.1Host: js.createsend1.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /releases/v5.15.4/css/all.css?ver=2.7.1 HTTP/1.1Host: pro.fontawesome.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: sync.gsyndication.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/mailin/css/mailin-front.css?ver=6.7.1 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bb-plugin/css/jquery.magnificpopup.min.css?ver=2.7.1 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bb-theme/css/base.min.css?ver=1.7.11 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/bb-theme/skin-6730b00894092.css?ver=1.7.11 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?s16 HTTP/1.1Host: s16.cloudcdnstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/bb-theme-ccmvalue/style.css?ver=6.7.1 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bbpowerpack/assets/css/animate.min.css?ver=3.5.1 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: www.about-fraud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.about-fraud.com/2025solution-providers-infographic/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /matomo.js HTTP/1.1Host: www.yametric.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://s16.cloudcdnstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/tag.js HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://s16.cloudcdnstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_check?scid=c524d8c2-d933-79cd-aba0-0eed0f4ca9db&cid=97642159 HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://s16.cloudcdnstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://s16.cloudcdnstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/metrika_match.html HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://s16.cloudcdnstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_start?cid=97642159&redirect_domain=mc.yandex.com&scid=c524d8c2-d933-79cd-aba0-0eed0f4ca9db&token=10616.A1eoc79P-C9CJ3tAQ897goX-9mao9sYZ62jfDbqaR_ef3FXpdteoK0sb7td8mgdf.vr3nJjQELQTQvS1M6DXfCGMkMDE%2C HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://s16.cloudcdnstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; yandexuid=2043304611742851083; yashr=5907731641742851083; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCLmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=2042210951fake; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCNmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; i=kvVruxLMESopGELArVTHaAg4z3ICSApK8yKyZ9p8DtgeBII6xCxmt968Tiw2uE3NUvIVPOAxx8jioA49fgFwk6XR2hk=; yandexuid=2954212361742851085; yashr=8797851331742851085
Source: global traffic	HTTP traffic detected: GET /watch/97642159?wmode=7&page-url=https%3A%2F%2Fs16.cloudcdnstatic.com%2F%3Fs16&page-ref=https%3A%2F%2Fwww.about-fraud.com%2F2025solution-providers-infographic%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.89%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.89%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.89%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A15.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A198327968879%3Ahid%3A632398787%3Az%3A-240%3Ai%3A20250324171803%3Aet%3A1742851084%3Ac%3A1%3Arn%3A980039089%3Arqn%3A1%3Au%3A1742851084221397305%3Aw%3A1280x889%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C220%2C394%2C1%2C5%2C0%2C%2C44%2C0%2C%2C%2C%2C790%3Aco%3A0%3Acpf%3A1%3Ans%3A1742851080949%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1742851085%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42009092)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://s16.cloudcdnstatic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://s16.cloudcdnstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=2042210951fake; i=G/88HMBY0kDSwFbXF7y9RtkYDWn/FM8+hxJZe3D/S75vLjWDZIJI4oqer1oOnQ0bB6iSS6giJUOXmn3iEwDipx56NdQ=; yandexuid=920677321742851086; yashr=2854451741742851086; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCOmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?cid=97642159&scid=c524d8c2-d933-79cd-aba0-0eed0f4ca9db&token=10616.L3tLyg-CEtF5Lb3jDVe60BtteAGCN9o36junsUy-_oqLFpxeaXLFEuREeIHxltHnG0KVRtTLFdZcHX-NZlTYXjl062TR_U9czKjpAYvbaaHXowbTgSHndMjo_4wOPukUx2LSNe2kSHJU2BRHglYDIZ31P08kPb9aGwkywzlTpId0kQtHArS207Zc5lEhJKyCkbsoDvALLwYydguoE9N7SCcsIt3-lemw16Y3XacQEfw%2C.XObYeaAabOC9JqRvtH4N6P0fCbQ%2C HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://s16.cloudcdnstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=2042210951fake; i=G/88HMBY0kDSwFbXF7y9RtkYDWn/FM8+hxJZe3D/S75vLjWDZIJI4oqer1oOnQ0bB6iSS6giJUOXmn3iEwDipx56NdQ=; yandexuid=920677321742851086; yashr=2854451741742851086; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCOmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: s16.cloudcdnstatic.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s16.cloudcdnstatic.com/?s16Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _pk_ref.22.5027=%5B%22%22%2C%22%22%2C1742851083%2C%22https%3A%2F%2Fwww.about-fraud.com%2F2025solution-providers-infographic%2F%22%5D; _pk_id.22.5027=b094c1704ae130c3.1742851083.; _pk_ses.22.5027=1; _ym_uid=1742851084221397305; _ym_d=1742851084; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /watch/97642159/1?wmode=7&page-url=https%3A%2F%2Fs16.cloudcdnstatic.com%2F%3Fs16&page-ref=https%3A%2F%2Fwww.about-fraud.com%2F2025solution-providers-infographic%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.89%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.89%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.89%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A15.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A198327968879%3Ahid%3A632398787%3Az%3A-240%3Ai%3A20250324171803%3Aet%3A1742851084%3Ac%3A1%3Arn%3A980039089%3Arqn%3A1%3Au%3A1742851084221397305%3Aw%3A1280x889%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C220%2C394%2C1%2C5%2C0%2C%2C44%2C0%2C%2C%2C%2C790%3Aco%3A0%3Acpf%3A1%3Ans%3A1742851080949%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1742851085%3At%3A&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842009092%29ti%281%29 HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://s16.cloudcdnstatic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://s16.cloudcdnstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=2042210951fake; i=G/88HMBY0kDSwFbXF7y9RtkYDWn/FM8+hxJZe3D/S75vLjWDZIJI4oqer1oOnQ0bB6iSS6giJUOXmn3iEwDipx56NdQ=; yandexuid=920677321742851086; yashr=2854451741742851086; yabs-sid=1415017431742851087; yuidss=920677321742851086; ymex=1774387087.yrts.1742851087; receive-cookie-deprecation=1; bh=Ej8iQ2hyb21pdW0iO3Y9IjEzNCIsIk5vdDpBLUJyYW5kIjt2PSIyNCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNCIaA3g4NiINMTM0LjAuNjk5OC44OSoCPzA6B1dpbmRvd3NCBjE1LjAuMEoCNjRSWSJDaHJvbWl1bSI7dj0iMTM0LjAuNjk5OC44OSIsIk5vdDpBLUJyYW5kIjt2PSIyNC4wLjAuMCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNC4wLjY5OTguODkiYI+Yh78G
Source: global traffic	HTTP traffic detected: GET /ecm HTTP/1.1Host: www2.citadores.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://s16.cloudcdnstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?cid=97642159&scid=c524d8c2-d933-79cd-aba0-0eed0f4ca9db&token=10616.L3tLyg-CEtF5Lb3jDVe60BtteAGCN9o36junsUy-_oqLFpxeaXLFEuREeIHxltHnG0KVRtTLFdZcHX-NZlTYXjl062TR_U9czKjpAYvbaaHXowbTgSHndMjo_4wOPukUx2LSNe2kSHJU2BRHglYDIZ31P08kPb9aGwkywzlTpId0kQtHArS207Zc5lEhJKyCkbsoDvALLwYydguoE9N7SCcsIt3-lemw16Y3XacQEfw%2C.XObYeaAabOC9JqRvtH4N6P0fCbQ%2C HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=2042210951fake; yashr=2854451741742851086; _yasc=y1/BbgxeskQWU0YJ3W9b3KUYGcOi0cZ0+l5zl8XD9lt5vtrva3YFXX1a09ksDsmCQMs=; yabs-sid=1415017431742851087; bh=Ej8iQ2hyb21pdW0iO3Y9IjEzNCIsIk5vdDpBLUJyYW5kIjt2PSIyNCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNCIaA3g4NiINMTM0LjAuNjk5OC44OSoCPzA6B1dpbmRvd3NCBjE1LjAuMEoCNjRSWSJDaHJvbWl1bSI7dj0iMTM0LjAuNjk5OC44OSIsIk5vdDpBLUJyYW5kIjt2PSIyNC4wLjAuMCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNC4wLjY5OTguODkiYI+Yh78G; yandexuid=2043304611742851083; yuidss=2043304611742851083; i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; yp=1742937487.yu.920677321742851086; ymex=1745443087.oyu.920677321742851086; sync_cookie_ok=synced
Source: global traffic	HTTP traffic detected: GET /ecm/ HTTP/1.1Host: www2.citadores.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://s16.cloudcdnstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch/97642159/1?wmode=7&page-url=https%3A%2F%2Fs16.cloudcdnstatic.com%2F%3Fs16&page-ref=https%3A%2F%2Fwww.about-fraud.com%2F2025solution-providers-infographic%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.89%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.89%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.89%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A15.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A198327968879%3Ahid%3A632398787%3Az%3A-240%3Ai%3A20250324171803%3Aet%3A1742851084%3Ac%3A1%3Arn%3A980039089%3Arqn%3A1%3Au%3A1742851084221397305%3Aw%3A1280x889%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C220%2C394%2C1%2C5%2C0%2C%2C44%2C0%2C%2C%2C%2C790%3Aco%3A0%3Acpf%3A1%3Ans%3A1742851080949%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1742851085%3At%3A&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842009092%29ti%281%29 HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=2042210951fake; yashr=2854451741742851086; _yasc=y1/BbgxeskQWU0YJ3W9b3KUYGcOi0cZ0+l5zl8XD9lt5vtrva3YFXX1a09ksDsmCQMs=; yabs-sid=1415017431742851087; yandexuid=2043304611742851083; yuidss=2043304611742851083; i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; yp=1742937487.yu.920677321742851086; ymex=1745443087.oyu.920677321742851086; sync_cookie_ok=synced; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCQmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI
Source: global traffic	HTTP traffic detected: GET /metrika/tag.js HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www2.citadores.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; yandexuid=2043304611742851083; yashr=5907731641742851083; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCLmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; sync_cookie_csrf=3216403026fake
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_check?scid=32fee966-40c8-80b2-5b18-12cc1508c892&cid=99199815 HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www2.citadores.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=2042210951fake; yashr=2854451741742851086; yabs-sid=1415017431742851087; yandexuid=2043304611742851083; yuidss=2043304611742851083; i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; sync_cookie_ok=synced; yp=1742937488.yu.2043304611742851083; ymex=1745443088.oyu.2043304611742851083; bh=YJCYh78Gah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPx4POhwg=
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www2.citadores.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=2042210951fake; yashr=2854451741742851086; yabs-sid=1415017431742851087; yandexuid=2043304611742851083; yuidss=2043304611742851083; i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; sync_cookie_ok=synced; yp=1742937488.yu.2043304611742851083; ymex=1745443088.oyu.2043304611742851083; bh=YJCYh78Gah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPx4POhwg=
Source: global traffic	HTTP traffic detected: GET /metrika/metrika_match.html HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www2.citadores.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=2042210951fake; yashr=2854451741742851086; yabs-sid=1415017431742851087; yandexuid=2043304611742851083; yuidss=2043304611742851083; i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; sync_cookie_ok=synced; yp=1742937488.yu.2043304611742851083; ymex=1745443088.oyu.2043304611742851083; bh=YJCYh78Gah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPx4POhwg=
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_check?scid=32fee966-40c8-80b2-5b18-12cc1508c892&cid=99199815 HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=2042210951fake; yashr=2854451741742851086; _yasc=y1/BbgxeskQWU0YJ3W9b3KUYGcOi0cZ0+l5zl8XD9lt5vtrva3YFXX1a09ksDsmCQMs=; yabs-sid=1415017431742851087; yandexuid=2043304611742851083; yuidss=2043304611742851083; i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; sync_cookie_ok=synced; yp=1742937488.yu.2043304611742851083; ymex=1745443088.oyu.2043304611742851083; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCTmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI
Source: global traffic	HTTP traffic detected: GET /watch/99199815?wmode=7&page-url=https%3A%2F%2Fwww2.citadores.com%2Fecm%2F&page-ref=https%3A%2F%2Fs16.cloudcdnstatic.com%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.89%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.89%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.89%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A15.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1711686899839%3Ahid%3A290976575%3Az%3A-240%3Ai%3A20250324171809%3Aet%3A1742851090%3Ac%3A1%3Arn%3A140299344%3Arqn%3A1%3Au%3A1742851090820532166%3Aw%3A1280x889%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C346%2C1%2C864%2C858%2C1%2C51%2C0%2C%2C%2C%2C1265%3Aco%3A0%3Acpf%3A1%3Ans%3A1742851086531%3Anp%3AV2luMzI%3D%3Arqnl%3A1%3Ast%3A1742851091%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42009092)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www2.citadores.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www2.citadores.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=2042210951fake; yashr=2854451741742851086; yabs-sid=1415017431742851087; yandexuid=2043304611742851083; yuidss=2043304611742851083; i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; sync_cookie_ok=synced; yp=1742937488.yu.2043304611742851083; ymex=1745443088.oyu.2043304611742851083; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCTmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www2.citadores.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www2.citadores.com/ecm/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ym_uid=1742851090820532166; _ym_d=1742851090; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /iRoFHGK8eh1naZ/gVEQE HTTP/1.1Host: ta.churchxxv.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www2.citadores.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ta.churchxxv.comConnection: keep-alivesec-ch-ua-full-version-list: "Chromium";v="134.0.6998.89", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.89"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.89"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua-platform-version: "15.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ta.churchxxv.com/iRoFHGK8eh1naZ/gVEQEAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: GL_UI4=eJw9jU1ugzAYRCH8JW2gHYkD9Ag4QFCXVQ%2FRJTL2F%2BIG7Mi4oN6%2BVqV2NU%2BjN5ogCHblE8I1PSD64i1e6guv2dCepDzTIFrWUdu8nmRTy66jMxM4qKV3fJjIxdgvM7eud2uM40iarBK9MJJyPHvrr7lps%2BkYyWC5ljmS2RtTjmywZlvIlhFizWdC%2Bn61xmcy809jEbG68ay057DCzixlVDwg%2B1Ba%2BmFxxI5VRZEGeLxP3F2MnXsl0xDJaLkkhG%2FYC%2B5oNPYbmaTl5swdMJPs%2F%2F3f32hjFVJJqxL%2B3Lgr2R9tjU6O; GL_GI10=eJwNzLEKwjAURuHkIhWpDj8W5z5BoQp2ls6dSh8gpLEN2iTcpD6%2FGc70wRFCUHUG2YCyfbZN1zXto7lDLqBpBGmHy%2BRsMnM9JpVMhGTQ8AJxlkHFqPS6R5NSFo1yDGzd8rbmO0Na3Hr2%2BmO47v227c5qlax3EZQ79Z6D5zyFDIUAJX88gOJcCchfcf0Dp%2BsoYw%3D%3D
Source: global traffic	HTTP traffic detected: GET /watch/99199815?wmode=7&page-url=https%3A%2F%2Fwww2.citadores.com%2Fecm%2F&page-ref=https%3A%2F%2Fs16.cloudcdnstatic.com%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.89%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.89%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.89%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A15.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A1711686899839%3Ahid%3A290976575%3Az%3A-240%3Ai%3A20250324171809%3Aet%3A1742851090%3Ac%3A1%3Arn%3A140299344%3Arqn%3A1%3Au%3A1742851090820532166%3Aw%3A1280x889%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C346%2C1%2C864%2C858%2C1%2C51%2C0%2C%2C%2C%2C1265%3Aco%3A0%3Acpf%3A1%3Ans%3A1742851086531%3Anp%3AV2luMzI%3D%3Arqnl%3A1%3Ast%3A1742851091%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42009092)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=2042210951fake; yashr=2854451741742851086; _yasc=y1/BbgxeskQWU0YJ3W9b3KUYGcOi0cZ0+l5zl8XD9lt5vtrva3YFXX1a09ksDsmCQMs=; yabs-sid=1415017431742851087; yandexuid=2043304611742851083; yuidss=2043304611742851083; i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; sync_cookie_ok=synced; yp=1742937488.yu.2043304611742851083; ymex=1745443088.oyu.2043304611742851083#1774387092.yrts.1742851092; bh=Ej8iQ2hyb21pdW0iO3Y9IjEzNCIsIk5vdDpBLUJyYW5kIjt2PSIyNCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNCIaA3g4NiINMTM0LjAuNjk5OC44OSoCPzA6B1dpbmRvd3NCBjE1LjAuMEoCNjRSWSJDaHJvbWl1bSI7dj0iMTM0LjAuNjk5OC44OSIsIk5vdDpBLUJyYW5kIjt2PSIyNC4wLjAuMCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNC4wLjY5OTguODkiYJSYh78G
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ta.churchxxv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: GL_UI4=eJw9jU1ugzAYRCH8JW2gHYkD9Ag4QFCXVQ%2FRJTL2F%2BIG7Mi4oN6%2BVqV2NU%2BjN5ogCHblE8I1PSD64i1e6guv2dCepDzTIFrWUdu8nmRTy66jMxM4qKV3fJjIxdgvM7eud2uM40iarBK9MJJyPHvrr7lps%2BkYyWC5ljmS2RtTjmywZlvIlhFizWdC%2Bn61xmcy809jEbG68ay057DCzixlVDwg%2B1Ba%2BmFxxI5VRZEGeLxP3F2MnXsl0xDJaLkkhG%2FYC%2B5oNPYbmaTl5swdMJPs%2F%2F3f32hjFVJJqxL%2B3Lgr2R9tjU6O; GL_GI10=eJwNzLEKwjAURuHkIhWpDj8W5z5BoQp2ls6dSh8gpLEN2iTcpD6%2FGc70wRFCUHUG2YCyfbZN1zXto7lDLqBpBGmHy%2BRsMnM9JpVMhGTQ8AJxlkHFqPS6R5NSFo1yDGzd8rbmO0Na3Hr2%2BmO47v227c5qlax3EZQ79Z6D5zyFDIUAJX88gOJcCchfcf0Dp%2BsoYw%3D%3D
Source: global traffic	HTTP traffic detected: GET /cuid/?f=https%3A%2F%2Fta.churchxxv.com HTTP/1.1Host: tealeryinsurer.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: a97fa794a0f9=67b9549c3023fe8a58b759
Source: global traffic	HTTP traffic detected: GET /ivZVOPKshreBOHHLQJ/84653/?md=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&pdc=nFnDEiAus_OFIPgd0guGG2098FAAq0Xz5KSyVfW3NNE HTTP/1.1Host: tannideoutkill.shopConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ta.churchxxv.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tds/Tgy82Iq?zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=win HTTP/1.1Host: webulls.infoConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://tannideoutkill.shop/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tds/Tgy82Iq/?zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=win HTTP/1.1Host: webulls.infoConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tannideoutkill.shop/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=win HTTP/1.1Host: buy.combocleaner.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://tannideoutkill.shop/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offers/scanner/css/style.min.css?_v=20240927114814 HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/checkmark-sertified.webp HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/virusbtn.webp HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /npm/@dotlottie/player-component@v1.3.0/dist/dotlottie-player.js?_v=20240927114814 HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://buy.combocleaner.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/antivirus.svg HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/pc.svg HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/virusbtn.webp HTTP/1.1Host: buy.combocleaner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/checkmark-sertified.webp HTTP/1.1Host: buy.combocleaner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/protection.svg HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/js/app.min.js?_v=20240927114814 HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/antivirus.svg HTTP/1.1Host: buy.combocleaner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/pc.svg HTTP/1.1Host: buy.combocleaner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/spyware.svg HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/virus-detected.svg HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/laptop.webp HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/screen-laptop.webp HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /131df8ca-e5e4-404a-a8e0-59bd3aec5ff9/tCyMtEhplM.json HTTP/1.1Host: lottie.hostConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://buy.combocleaner.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://buy.combocleaner.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/arrow.svg HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/protection.svg HTTP/1.1Host: buy.combocleaner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/spyware.svg HTTP/1.1Host: buy.combocleaner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/screen-laptop.webp HTTP/1.1Host: buy.combocleaner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/laptop.webp HTTP/1.1Host: buy.combocleaner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/virus-detected.svg HTTP/1.1Host: buy.combocleaner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491
Source: global traffic	HTTP traffic detected: GET /131df8ca-e5e4-404a-a8e0-59bd3aec5ff9/tCyMtEhplM.json HTTP/1.1Host: lottie.hostConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offers/scanner/img/arrow.svg HTTP/1.1Host: buy.combocleaner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491; _ga_VE05G7BX49=GS1.1.1742851098.1.0.1742851098.0.0.0; _ga=GA1.1.1658382525.1742851099
Source: global traffic	HTTP traffic detected: GET /offers/scanner/favicon.ico HTTP/1.1Host: buy.combocleaner.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=winAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491; _ga_VE05G7BX49=GS1.1.1742851098.1.0.1742851098.0.0.0; _ga=GA1.1.1658382525.1742851099
Source: global traffic	HTTP traffic detected: GET /offers/scanner/favicon.ico HTTP/1.1Host: buy.combocleaner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: prop_visitor_id=9278561748014725491; _ga_VE05G7BX49=GS1.1.1742851098.1.0.1742851098.0.0.0; _ga=GA1.1.1658382525.1742851099
Source: global traffic	HTTP traffic detected: GET /files/CCSetup.exe HTTP/1.1Host: www.combocleaner.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://buy.combocleaner.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1658382525.1742851099; _ga_VE05G7BX49=GS1.1.1742851098.1.0.1742851125.0.0.0
Source: global traffic	HTTP traffic detected: GET /conversion.php?aid=3602837&pid=&tid=136260&visitor_id=9278561748014725491 HTTP/1.1Host: ad.propellerads.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://buy.combocleaner.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://buy.combocleaner.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /files/CCSetup.exe HTTP/1.1Host: www.combocleaner.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://buy.combocleaner.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.1658382525.1742851099; _ga_VE05G7BX49=GS1.1.1742851098.1.1.1742851141.0.0.0If-None-Match: "370b20-6217013ecd2d0"If-Modified-Since: Fri, 06 Sep 2024 09:31:54 GMT
Source: global traffic	HTTP traffic detected: GET /conversion.php?aid=3602837&pid=&tid=136260&visitor_id=9278561748014725491 HTTP/1.1Host: ad.propellerads.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://buy.combocleaner.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://buy.combocleaner.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: chromecache_123.1.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/about-fraud.com/" target="_blank" rel="noopener" > equals www.linkedin.com (Linkedin)
Source: chromecache_123.1.dr	String found in binary or memory: <a href="https://www.youtube.com/channel/UC17vN_S_W5j7cS94uKmIYbg" target="_blank" rel="noopener" > equals www.youtube.com (Youtube)
Source: chromecache_123.1.dr	String found in binary or memory: <nav aria-label="Menu" itemscope="itemscope" itemtype="https://schema.org/SiteNavigationElement"><ul id="menu-aboutfraud-footer-menu" class="menu fl-menu-horizontal fl-toggle-none"><li id="menu-item-14130" class="menu-item menu-item-type-post_type menu-item-object-page"><a href="https://www.about-fraud.com/about-us/">About Us</a></li><li id="menu-item-14135" class="menu-item menu-item-type-post_type menu-item-object-page"><a href="https://www.about-fraud.com/contact/">Contact & Feedback</a></li><li id="menu-item-14139" class="menu-item menu-item-type-post_type menu-item-object-page"><a href="https://www.about-fraud.com/fraud-definitions-2024/">Fraud Definitions</a></li><li id="menu-item-14141" class="menu-item menu-item-type-post_type menu-item-object-page"><a href="https://www.about-fraud.com/events-2025/">Events 2025</a></li><li id="menu-item-13857" class="menu-item menu-item-type-custom menu-item-object-custom"><a target="_blank" href="https://www.linkedin.com/groups/8924296/">Jobs</a></li><li id="menu-item-13852" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-privacy-policy"><a href="https://www.about-fraud.com/policy-and-privacy/">Policy and Privacy</a></li><li id="menu-item-14146" class="menu-item menu-item-type-post_type menu-item-object-page"><a href="https://www.about-fraud.com/imprint/">Imprint</a></li></ul></nav></div> equals www.linkedin.com (Linkedin)
Source: chromecache_116.1.dr	String found in binary or memory: "false": "https://www.facebook.com/dialog/send?" + st.qs({ equals www.facebook.com (Facebook)
Source: chromecache_116.1.dr	String found in binary or memory: facebook: "https://www.facebook.com/sharer.php?" + st.qs({ equals www.facebook.com (Facebook)
Source: chromecache_116.1.dr	String found in binary or memory: linkedin: "https://www.linkedin.com/shareArticle?" + st.qs({ equals www.linkedin.com (Linkedin)
Source: chromecache_116.1.dr	String found in binary or memory: facebook: 'https://www.facebook.com/', equals www.facebook.com (Facebook)
Source: chromecache_116.1.dr	String found in binary or memory: linkedin: 'https://www.linkedin.com/', equals www.linkedin.com (Linkedin)
Source: chromecache_116.1.dr	String found in binary or memory: twitter: 'https://www.twitter.com/', equals www.twitter.com (Twitter)
Source: chromecache_116.1.dr	String found in binary or memory: youtube: 'https://www.youtube.com/', equals www.youtube.com (Youtube)
Source: chromecache_123.1.dr	String found in binary or memory: -100-px-1.png","width":800,"height":200,"caption":"About Fraud"},"image":{"@id":"https://www.about-fraud.com/#/schema/logo/image/"},"sameAs":["https://x.com/aboutfraudcom","https://www.instagram.com/aboutfraud/","https://www.linkedin.com/company/about-fraud-com","https://www.youtube.com/@about-fraud"]}]}</script> equals www.linkedin.com (Linkedin)
Source: chromecache_123.1.dr	String found in binary or memory: -100-px-1.png","width":800,"height":200,"caption":"About Fraud"},"image":{"@id":"https://www.about-fraud.com/#/schema/logo/image/"},"sameAs":["https://x.com/aboutfraudcom","https://www.instagram.com/aboutfraud/","https://www.linkedin.com/company/about-fraud-com","https://www.youtube.com/@about-fraud"]}]}</script> equals www.youtube.com (Youtube)
Source: chromecache_123.1.dr	String found in binary or memory: <a class="topnav-link" href="https://www.linkedin.com/groups/8924296/" target="_blank" rel="noopener">Jobs</a></p> equals www.linkedin.com (Linkedin)
Source: chromecache_123.1.dr	String found in binary or memory: <li id="menu-item-14233" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-14233"><a target="_blank" href="https://www.linkedin.com/groups/8924296/">Job Board</a></li> equals www.linkedin.com (Linkedin)
Source: chromecache_141.1.dr	String found in binary or memory: return f}ZG.K="internal.enableAutoEventOnTimer";var bc=wa(["data-gtm-yt-inspected-"]),aH=["www.youtube.com","www.youtube-nocookie.com"],bH,cH=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.about-fraud.com
Source: global traffic	DNS traffic detected: DNS query: sync.gsyndication.com
Source: global traffic	DNS traffic detected: DNS query: pro.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: platform-api.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: js.createsend1.com
Source: global traffic	DNS traffic detected: DNS query: s16.cloudcdnstatic.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: www.yametric.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com
Source: global traffic	DNS traffic detected: DNS query: www2.citadores.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ta.churchxxv.com
Source: global traffic	DNS traffic detected: DNS query: tech4u.app
Source: global traffic	DNS traffic detected: DNS query: tealeryinsurer.top
Source: global traffic	DNS traffic detected: DNS query: tannideoutkill.shop
Source: global traffic	DNS traffic detected: DNS query: webulls.info
Source: global traffic	DNS traffic detected: DNS query: buy.combocleaner.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: lottie.host
Source: global traffic	DNS traffic detected: DNS query: www.combocleaner.com
Source: global traffic	DNS traffic detected: DNS query: ad.propellerads.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com

Source: unknown

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 24 Mar 2025 21:18:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tS8VNp6nOyWpSIU8fClrDivE6znAnbH3lDTGhMk7JnF0BQEKm9klmh%2Bxgzae6ymKxmT58npeQ9yeAddGTT3vwkfoi2z71fq%2F%2BzjvsKLGXo4RJJTT3R7nlM76393wXTIIMbE3T6gabGrv"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 92593302a8954261-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=103140&min_rtt=96919&rtt_var=26979&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1448&delivery_rate=38420&cwnd=227&unsent_bytes=0&cid=98c1037fcc166551&ts=5557&x=0"

Source: chromecache_116.1.dr	String found in binary or memory: http://ajaxian.com/archives/creating-a-queryselector-for-ie-that-runs-at-native-speed
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalG3CodeSigningECCSHA3842021CA1.crt0
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootG3.crt0B
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: chromecache_116.1.dr	String found in binary or memory: http://compose.mail.yahoo.com/?
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalG3CodeSigningECCSHA3842021CA1.crl0N
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootG3.crl0
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalG3CodeSigningECCSHA3842021CA1.crl0
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://ocsp.digicert.com0W
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: chromecache_123.1.dr	String found in binary or memory: http://schema.org/WPFooter
Source: chromecache_123.1.dr	String found in binary or memory: http://schema.org/WPHeader
Source: chromecache_116.1.dr	String found in binary or memory: http://service.weibo.com/share/share.php?
Source: chromecache_116.1.dr	String found in binary or memory: http://share.naver.com/web/shareView.nhn?
Source: chromecache_116.1.dr	String found in binary or memory: http://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?
Source: chromecache_106.1.dr	String found in binary or memory: http://stuartk.com/jszip
Source: chromecache_116.1.dr	String found in binary or memory: http://surfingbird.ru/share?
Source: chromecache_94.1.dr, chromecache_109.1.dr	String found in binary or memory: http://tizen.org/system/tizenid
Source: chromecache_116.1.dr	String found in binary or memory: http://widget.renren.com/dialog/share?
Source: chromecache_116.1.dr	String found in binary or memory: http://wordpress.com/wp-admin/press-this.php?
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: chromecache_116.1.dr	String found in binary or memory: http://www.douban.com/recommend/?
Source: chromecache_116.1.dr	String found in binary or memory: http://www.evernote.com/clip.action?
Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, 5e012228-73a7-4201-af21-15ca08ed2d95.tmp.0.dr, chromecache_120.1.dr	String found in binary or memory: http://www.installshield.com/isetup/ProErrorCentral.asp?ErrorCode=%d
Source: chromecache_116.1.dr	String found in binary or memory: http://www.instapaper.com/edit?
Source: chromecache_116.1.dr	String found in binary or memory: http://www.plurk.com/?
Source: chromecache_93.1.dr	String found in binary or memory: https://ad.propellerads.com/conversion.php?aid=3602837&pid=&tid=136260&visitor_id=
Source: chromecache_141.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_116.1.dr	String found in binary or memory: https://api.qrserver.com/v1/create-qr-code/?
Source: chromecache_123.1.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_116.1.dr	String found in binary or memory: https://bitbucket.org/
Source: chromecache_116.1.dr	String found in binary or memory: https://bsky.app/intent/compose?
Source: chromecache_116.1.dr	String found in binary or memory: https://bsky.app/profile/
Source: chromecache_116.1.dr	String found in binary or memory: https://buffer.com/add?
Source: chromecache_116.1.dr	String found in binary or memory: https://buttons-config.sharethis.com/js/
Source: chromecache_141.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_93.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/
Source: chromecache_116.1.dr	String found in binary or memory: https://connect.mail.ru/share?
Source: chromecache_116.1.dr	String found in binary or memory: https://connect.ok.ru/dk?
Source: chromecache_116.1.dr	String found in binary or memory: https://count-server.sharethis.com/v2.0/get_counts?
Source: chromecache_110.1.dr	String found in binary or memory: https://createsend.com//t/getsecuresubscribelink
Source: chromecache_116.1.dr	String found in binary or memory: https://data.stbuttons.click/data
Source: chromecache_116.1.dr	String found in binary or memory: https://datasphere-sbsvc.sharethis.com?n=
Source: chromecache_116.1.dr	String found in binary or memory: https://del.icio.us/save?
Source: chromecache_89.1.dr	String found in binary or memory: https://developer.matomo.org/api-reference/tracking-javascript
Source: chromecache_89.1.dr	String found in binary or memory: https://developer.matomo.org/guides/tracking-javascript-guide#multiple-piwik-trackers
Source: chromecache_116.1.dr	String found in binary or memory: https://developers.gfycat.com/iframe/#gfycat-iframe
Source: chromecache_116.1.dr	String found in binary or memory: https://digg.com/submit?
Source: chromecache_116.1.dr	String found in binary or memory: https://discord.gg/
Source: chromecache_116.1.dr	String found in binary or memory: https://dribbble.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://electricbikereview.com/gocycle/gs/
Source: chromecache_116.1.dr	String found in binary or memory: https://embed.ly/code?url=http%3A%2F%2Fgoogle.com
Source: chromecache_116.1.dr	String found in binary or memory: https://en.support.wordpress.com/soundcloud-audio-player/
Source: chromecache_94.1.dr, chromecache_109.1.dr	String found in binary or memory: https://eu.asas.yango.com/mapuid
Source: chromecache_94.1.dr, chromecache_109.1.dr	String found in binary or memory: https://fcpe.beeline.ru/sync/me?guid
Source: chromecache_116.1.dr	String found in binary or memory: https://flipboard.com/
Source: chromecache_108.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_108.1.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_123.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_117.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_A8s52Hs.woff2)
Source: chromecache_117.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_Ass52Hs.woff2)
Source: chromecache_117.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHpv4kjgoGqM7E_DMs5.woff2)
Source: chromecache_117.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3_-gs51os.woff2)
Source: chromecache_117.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3_-gs6FospT4.woff2)
Source: chromecache_117.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3_-gs6VospT4.woff2)
Source: chromecache_117.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3p-ks51os.woff2)
Source: chromecache_117.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3p-ks6FospT4.woff2)
Source: chromecache_117.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3p-ks6VospT4.woff2)
Source: chromecache_117.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3t-4s51os.woff2)
Source: chromecache_117.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3t-4s6FospT4.woff2)
Source: chromecache_117.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/barlow/v12/7cHqv4kjgoGqM7E3t-4s6VospT4.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://foursquare.com/intent/venue/
Source: chromecache_116.1.dr	String found in binary or memory: https://foursquare.com/v/
Source: chromecache_116.1.dr	String found in binary or memory: https://gab.com/compose?url=
Source: chromecache_116.1.dr	String found in binary or memory: https://gdpr-api.sharethis.com/cmp-v2.js
Source: chromecache_116.1.dr	String found in binary or memory: https://gdpr-api.sharethis.com/cmp.js
Source: chromecache_116.1.dr	String found in binary or memory: https://gdpr-api.sharethis.com/is_eu
Source: chromecache_88.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_88.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/customize/)
Source: chromecache_116.1.dr	String found in binary or memory: https://getpocket.com/edit?
Source: chromecache_116.1.dr	String found in binary or memory: https://giphy.com/posts/how-to-embed-giphy-gifs-on-your-website
Source: chromecache_88.1.dr	String found in binary or memory: https://gist.githubusercontent.com/Pross/1b159e91a33484201c9df79e90937489/raw/231a41d424d9194d73fd5f
Source: chromecache_110.1.dr	String found in binary or memory: https://github.com/facebook/regenerator/issues/274
Source: chromecache_89.1.dr	String found in binary or memory: https://github.com/matomo-org/matomo/blob/master/js/piwik.js
Source: chromecache_106.1.dr	String found in binary or memory: https://github.com/nodeca/pako/blob/master/LICENSE
Source: chromecache_88.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_116.1.dr	String found in binary or memory: https://gitlab.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_116.1.dr	String found in binary or memory: https://goop.com/wellness/
Source: chromecache_116.1.dr	String found in binary or memory: https://help.imgur.com/hc/en-us/articles/211273743-Embed-Unit
Source: chromecache_116.1.dr	String found in binary or memory: https://iorbix.com/m-share?
Source: chromecache_116.1.dr	String found in binary or memory: https://jezebel.com/15-tiktoks-that-deserve-academy-awards-1838371668
Source: chromecache_123.1.dr	String found in binary or memory: https://js.createsend1.com/javascript/copypastesubscribeformlogic.js
Source: chromecache_116.1.dr	String found in binary or memory: https://l.sharethis.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://l.sharethis.com/log
Source: chromecache_116.1.dr	String found in binary or memory: https://lineit.line.me/share/ui?
Source: chromecache_93.1.dr	String found in binary or memory: https://lottie.host/131df8ca-e5e4-404a-a8e0-59bd3aec5ff9/tCyMtEhplM.json
Source: chromecache_116.1.dr	String found in binary or memory: https://mail.google.com/mail/?view=cm&
Source: chromecache_94.1.dr, chromecache_109.1.dr	String found in binary or memory: https://mc.yandex.
Source: chromecache_94.1.dr, chromecache_109.1.dr	String found in binary or memory: https://mc.yandex.md/cc
Source: chromecache_116.1.dr	String found in binary or memory: https://meneame.net/submit.php?
Source: chromecache_116.1.dr	String found in binary or memory: https://mix.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://news.ycombinator.com/submitlink?
Source: chromecache_116.1.dr	String found in binary or memory: https://nextdoor.com/sharekit/?
Source: chromecache_116.1.dr	String found in binary or memory: https://ok.ru/
Source: chromecache_116.1.dr	String found in binary or memory: https://open.spotify.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://outlook.live.com/mail/deeplink/compose?
Source: chromecache_141.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_141.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_110.1.dr	String found in binary or memory: https://people.mozilla.org/~jorendorff/es6-draft.html#sec-generatorresume
Source: chromecache_116.1.dr	String found in binary or memory: https://pinboard.in/add?
Source: chromecache_116.1.dr	String found in binary or memory: https://pinterest.com/pin/create/button/?
Source: chromecache_89.1.dr	String found in binary or memory: https://piwik.org
Source: chromecache_89.1.dr	String found in binary or memory: https://piwik.org/free-software/bsd/
Source: chromecache_116.1.dr	String found in binary or memory: https://platform-api.sharethis.com
Source: chromecache_116.1.dr	String found in binary or memory: https://platform-api.sharethis.com/atlas-exp.js
Source: chromecache_116.1.dr	String found in binary or memory: https://platform-api.sharethis.com/dmd.js
Source: chromecache_116.1.dr	String found in binary or memory: https://platform-api.sharethis.com/panorama.js
Source: chromecache_116.1.dr	String found in binary or memory: https://platform-api.sharethis.com/powr.js?platform=sharethis
Source: chromecache_116.1.dr	String found in binary or memory: https://platform-api.sharethis.com/ppg.js
Source: chromecache_116.1.dr	String found in binary or memory: https://platform-api.sharethis.com/rhombus.js
Source: chromecache_116.1.dr	String found in binary or memory: https://platform-cdn.sharethis.com
Source: chromecache_116.1.dr	String found in binary or memory: https://platform-cdn.sharethis.com/img/
Source: chromecache_116.1.dr	String found in binary or memory: https://platform-cdn.sharethis.com/img/share-this-logo%402x.png
Source: chromecache_116.1.dr	String found in binary or memory: https://platform-metrics-api.sharethis.com
Source: chromecache_123.1.dr	String found in binary or memory: https://pro.fontawesome.com/releases/v5.15.4/css/all.css?ver=2.7.1
Source: chromecache_116.1.dr	String found in binary or memory: https://pushtokindle.fivefilters.org/send.php?
Source: chromecache_106.1.dr	String found in binary or memory: https://raw.github.com/Stuk/jszip/master/LICENSE.markdown.
Source: chromecache_116.1.dr	String found in binary or memory: https://reddit.com/submit?
Source: chromecache_116.1.dr	String found in binary or memory: https://redditblog.com/2017/06/14/why-publishers-should-use-reddit-embeds/
Source: chromecache_116.1.dr	String found in binary or memory: https://refind.com?
Source: chromecache_124.1.dr	String found in binary or memory: https://s16.cloudcdnstatic.com/?s16
Source: chromecache_123.1.dr	String found in binary or memory: https://schema.org
Source: chromecache_123.1.dr	String found in binary or memory: https://schema.org/CreativeWork
Source: chromecache_123.1.dr	String found in binary or memory: https://schema.org/ImageObject
Source: chromecache_123.1.dr	String found in binary or memory: https://schema.org/SiteNavigationElement
Source: chromecache_123.1.dr	String found in binary or memory: https://schema.org/WebPage
Source: chromecache_116.1.dr	String found in binary or memory: https://secure.actblue.com/donate/ms_blm_homepage_2019
Source: chromecache_116.1.dr	String found in binary or memory: https://shar.es/
Source: chromecache_116.1.dr	String found in binary or memory: https://share.diasporafoundation.org/?
Source: chromecache_116.1.dr	String found in binary or memory: https://share.flipboard.com/bookmarklet/popout?
Source: chromecache_116.1.dr	String found in binary or memory: https://sharethis.com/platform/share-buttons?
Source: chromecache_116.1.dr	String found in binary or memory: https://snapchat.com/scan?
Source: chromecache_116.1.dr	String found in binary or memory: https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?
Source: chromecache_116.1.dr	String found in binary or memory: https://soundcloud.com/
Source: chromecache_94.1.dr, chromecache_109.1.dr	String found in binary or memory: https://spadsync.com/partner?brandid=pyan0002&consent=
Source: chromecache_116.1.dr	String found in binary or memory: https://stackoverflow.com/a/9493060/2688027
Source: chromecache_116.1.dr	String found in binary or memory: https://stackoverflow.com/users/
Source: chromecache_141.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_141.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_116.1.dr	String found in binary or memory: https://story.kakao.com/share?
Source: chromecache_116.1.dr	String found in binary or memory: https://sync.sharethis.com/panorama
Source: chromecache_116.1.dr	String found in binary or memory: https://sync.sharethis.com/powr/hem?
Source: chromecache_116.1.dr	String found in binary or memory: https://t.me/
Source: chromecache_116.1.dr	String found in binary or memory: https://t.me/share/url?
Source: chromecache_116.1.dr	String found in binary or memory: https://t.sharethis.com/1/k/t.dhj?
Source: chromecache_141.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_116.1.dr	String found in binary or memory: https://threads.net/intent/post?
Source: chromecache_116.1.dr	String found in binary or memory: https://time.com/4128887/kobe-bryant-retirement-celebrities-reaction/
Source: chromecache_116.1.dr	String found in binary or memory: https://trello.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://trello.com/add-card?
Source: chromecache_116.1.dr	String found in binary or memory: https://twitter.com/intent/tweet?
Source: chromecache_93.1.dr	String found in binary or memory: https://us.ahows.co/log?action=conversion&key=
Source: chromecache_116.1.dr	String found in binary or memory: https://vimeo.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://vimeo.zendesk.com/hc/en-us/articles/224969968-Embedding-videos-overview
Source: chromecache_116.1.dr	String found in binary or memory: https://vk.com/share.php?
Source: chromecache_116.1.dr	String found in binary or memory: https://wa.me/
Source: chromecache_116.1.dr	String found in binary or memory: https://web.skype.com/share?
Source: chromecache_116.1.dr	String found in binary or memory: https://web.wechat.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://web.whatsapp.com/send?
Source: chromecache_145.1.dr	String found in binary or memory: https://webulls.info/tds/Tgy82Iq?zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/#/schema/logo/image/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/#organization
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/#website
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/2024-solution-providers-infographic-download/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/2025solution-providers-infographic/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/2025solution-providers-infographic/#breadcrumb
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/2025solution-providers-infographic/#primaryimage
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/?p=8249
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/?s=
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/about-us/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/comments/feed/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/contact/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/events-2025/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/feed/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/fraud-definitions-2024/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/fraud-definitions-2024/?utm_source=homepagebutton&utm_medium=Definit
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/imprint/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/news/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/news/?utm_source=homepagebutton&utm_medium=Articles
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/policy-and-privacy/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/providers/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/resources/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/webinars/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/webinars/?utm_source=homepagebutton&utm_medium=Webinars
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/plugins/bb-plugin/css/jquery.magnificpopup.min.css?ver=2.7.1
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/plugins/bb-plugin/js/jquery.ba-throttle-debounce.min.js?ver=2
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/plugins/bb-plugin/js/jquery.magnificpopup.min.js?ver=2.7.1
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/plugins/bbpowerpack/assets/css/animate.min.css?ver=3.5.1
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-m
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/plugins/mailin/css/mailin-front.css?ver=6.7.1
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/plugins/mailin/js/mailin-front.js?ver=1737648979
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/plugins/sharethis-share-buttons/css/mu-style.css?ver=17376495
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/themes/bb-theme-ccmvalue/style.css?ver=6.7.1
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/themes/bb-theme/css/base.min.css?ver=1.7.11
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/themes/bb-theme/js/theme.min.js?ver=1.7.11
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2020/01/Black-White-Minimalist-Business-Logo-500-
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2020/01/Black-White-Minimalist-Business-Logo-500-%C3%
Source: chromecache_107.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2020/02/angle-down.png
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2020/02/cropped-af-icon-2-180x180.jpg
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2020/02/cropped-af-icon-2-192x192.jpg
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2020/02/cropped-af-icon-2-270x270.jpg
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2020/02/cropped-af-icon-2-32x32.jpg
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2023/02/about-fraud-provider-infographic-25.jpg
Source: chromecache_107.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2023/05/icon-play.png
Source: chromecache_107.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2023/05/stripe.png
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2025/02/fraud-provider-1024x595.jpg
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2025/02/fraud-provider-1536x893.jpg
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2025/02/fraud-provider-2048x1191.jpg
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2025/02/fraud-provider-300x174.jpg
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2025/02/fraud-provider-768x447.jpg
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/2025/02/fraud-provider.jpg
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/bb-plugin/cache/146288a04c1bc2db9b50f0332dbc8114-layo
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/bb-plugin/cache/8249-layout.css?ver=0d50454ac8b5e9100
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/bb-plugin/cache/8249-layout.js?ver=5ab47be3c5e6eb018b
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/bb-plugin/cache/dec5eac5dd1d23d4cc2cc5a31bf69310-layo
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/bb-theme/skin-6730b00894092.css?ver=1.7.11
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-content/uploads/useanyfont/uaf.css?ver=1736968112
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-includes/css/dashicons.min.css?ver=6.7.1
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-includes/css/dist/block-library/style.min.css?ver=6.7.1
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-includes/js/imagesloaded.min.js?ver=6.7.1
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-json/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.about-fraud.com%2F2025sol
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/wp-json/wp/v2/pages/8249
Source: chromecache_123.1.dr	String found in binary or memory: https://www.about-fraud.com/xmlrpc.php?rsd
Source: chromecache_116.1.dr	String found in binary or memory: https://www.airbnb.com/rooms/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.amazon.com/gp/profile/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.bbc.com/news/uk-wales-51311320
Source: chromecache_116.1.dr	String found in binary or memory: https://www.behance.net/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.blogger.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.blogger.com/blog-this.g?
Source: chromecache_107.1.dr	String found in binary or memory: https://www.ccmvalue.com
Source: chromecache_93.1.dr	String found in binary or memory: https://www.combocleaner.com/content/uploads/2023/07/combo_combo_current_cert.pdf
Source: chromecache_93.1.dr	String found in binary or memory: https://www.combocleaner.com/eula/
Source: chromecache_93.1.dr	String found in binary or memory: https://www.combocleaner.com/files/CCSetup.exe
Source: chromecache_93.1.dr	String found in binary or memory: https://www.combocleaner.com/privacy-policy/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.createsend.com/t/subscribeerror?description=
Source: chromecache_116.1.dr	String found in binary or memory: https://www.dexerto.com/entertainment/top-10-most-viewed-twitch-clips-of-all-time-2-310900
Source: chromecache_116.1.dr	String found in binary or memory: https://www.digg.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.diigo.com/post?
Source: chromecache_116.1.dr	String found in binary or memory: https://www.etsy.com/shop/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.fark.com/submit?
Source: chromecache_116.1.dr	String found in binary or memory: https://www.flickr.com/people/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.github.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.goodreads.com/quotes?
Source: chromecache_141.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_116.1.dr	String found in binary or memory: https://www.google.com/bookmarks/mark?
Source: chromecache_141.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_141.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_141.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_93.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-VE05G7BX49
Source: chromecache_123.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=GT-TWQTJBS
Source: chromecache_123.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-WD6RDMD
Source: chromecache_141.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.houzz.com/imageClipperUpload?
Source: chromecache_116.1.dr	String found in binary or memory: https://www.houzz.com/user/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.instagram.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.instagram.com/aboutfraud/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.kooapp.com/create?
Source: chromecache_116.1.dr	String found in binary or memory: https://www.linkedin.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.linkedin.com/company/about-fraud-com
Source: chromecache_123.1.dr	String found in binary or memory: https://www.linkedin.com/company/about-fraud.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.linkedin.com/groups/8924296/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.linkedin.com/shareArticle?
Source: chromecache_116.1.dr	String found in binary or memory: https://www.livejournal.com/update.bml?
Source: chromecache_116.1.dr	String found in binary or memory: https://www.medium.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.meetup.com/members/
Source: chromecache_141.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_116.1.dr	String found in binary or memory: https://www.messenger.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.patreon.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.pinterest.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.podcastinsights.com/podcast-embed-players/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.quora.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.reddit.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.sharethis.com
Source: chromecache_116.1.dr	String found in binary or memory: https://www.slideshare.net/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.snapchat.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.threads.net/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.tiktok.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.tripadvisor.com/Profile/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.tumblr.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.tumblr.com/share?
Source: chromecache_116.1.dr	String found in binary or memory: https://www.twitch.tv/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.twitter.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.usmagazine.com/entertainment/news/kim-kardashian-north-asks-if-she-can-visit-prisons-wit
Source: chromecache_93.1.dr	String found in binary or memory: https://www.virusbulletin.com/vb100/testing/rcs-lt/combo-cleaner
Source: chromecache_116.1.dr	String found in binary or memory: https://www.vk.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.weibo.com/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.xing.com/app/user?
Source: chromecache_116.1.dr	String found in binary or memory: https://www.xing.com/profile/
Source: chromecache_116.1.dr	String found in binary or memory: https://www.yelp.com/
Source: chromecache_116.1.dr, chromecache_123.1.dr	String found in binary or memory: https://www.youtube.com/
Source: chromecache_123.1.dr	String found in binary or memory: https://www.youtube.com/channel/UC17vN_S_W5j7cS94uKmIYbg
Source: chromecache_116.1.dr	String found in binary or memory: https://www.yummly.com/urb/verify?
Source: chromecache_116.1.dr	String found in binary or memory: https://www.zillow.com/profile/
Source: chromecache_123.1.dr	String found in binary or memory: https://x.com/aboutfraudcom
Source: chromecache_94.1.dr, chromecache_109.1.dr	String found in binary or memory: https://yastatic.net/s3/gdpr/v3/gdpr
Source: chromecache_94.1.dr, chromecache_109.1.dr	String found in binary or memory: https://yastatic.net/s3/taxi-front/yango-gdpr-popup/
Source: chromecache_94.1.dr, chromecache_109.1.dr	String found in binary or memory: https://ymetrica1.com/watch/3/1
Source: chromecache_123.1.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 60850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60894
Source: unknown	Network traffic detected: HTTP traffic on port 60838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60890
Source: unknown	Network traffic detected: HTTP traffic on port 60867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60896
Source: unknown	Network traffic detected: HTTP traffic on port 60906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60850
Source: unknown	Network traffic detected: HTTP traffic on port 60863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60852
Source: unknown	Network traffic detected: HTTP traffic on port 60886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60860
Source: unknown	Network traffic detected: HTTP traffic on port 60916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60868
Source: unknown	Network traffic detected: HTTP traffic on port 60940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60867
Source: unknown	Network traffic detected: HTTP traffic on port 60845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60863
Source: unknown	Network traffic detected: HTTP traffic on port 60852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60871
Source: unknown	Network traffic detected: HTTP traffic on port 60922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60870
Source: unknown	Network traffic detected: HTTP traffic on port 60917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60874
Source: unknown	Network traffic detected: HTTP traffic on port 60874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60888
Source: unknown	Network traffic detected: HTTP traffic on port 60900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60887
Source: unknown	Network traffic detected: HTTP traffic on port 60868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60886
Source: unknown	Network traffic detected: HTTP traffic on port 60885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60817
Source: unknown	Network traffic detected: HTTP traffic on port 60909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60937
Source: unknown	Network traffic detected: HTTP traffic on port 60915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60932
Source: unknown	Network traffic detected: HTTP traffic on port 60882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60930
Source: unknown	Network traffic detected: HTTP traffic on port 60933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60943
Source: unknown	Network traffic detected: HTTP traffic on port 60887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60940
Source: unknown	Network traffic detected: HTTP traffic on port 60932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60839
Source: unknown	Network traffic detected: HTTP traffic on port 60955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60838
Source: unknown	Network traffic detected: HTTP traffic on port 60875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60953
Source: unknown	Network traffic detected: HTTP traffic on port 60869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60951
Source: unknown	Network traffic detected: HTTP traffic on port 60847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60840
Source: unknown	Network traffic detected: HTTP traffic on port 60921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60847
Source: unknown	Network traffic detected: HTTP traffic on port 60881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60845
Source: unknown	Network traffic detected: HTTP traffic on port 60904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60841
Source: unknown	Network traffic detected: HTTP traffic on port 60848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60904
Source: unknown	Network traffic detected: HTTP traffic on port 60937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60903
Source: unknown	Network traffic detected: HTTP traffic on port 60866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60900
Source: unknown	Network traffic detected: HTTP traffic on port 60883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60915
Source: unknown	Network traffic detected: HTTP traffic on port 60894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60913
Source: unknown	Network traffic detected: HTTP traffic on port 60903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60911
Source: unknown	Network traffic detected: HTTP traffic on port 60888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60910
Source: unknown	Network traffic detected: HTTP traffic on port 60865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60927
Source: unknown	Network traffic detected: HTTP traffic on port 60914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60925
Source: unknown	Network traffic detected: HTTP traffic on port 60925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60920

Source: unknown	HTTPS traffic detected: 142.250.176.196:443 -> 192.168.2.24:60838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.113.136.33:443 -> 192.168.2.24:60840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.113.136.33:443 -> 192.168.2.24:60839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.61:443 -> 192.168.2.24:60850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.88:443 -> 192.168.2.24:60851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.40.68:443 -> 192.168.2.24:60848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.31:443 -> 192.168.2.24:60847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.77.100:443 -> 192.168.2.24:60859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.77.100:443 -> 192.168.2.24:60858 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.113.136.33:443 -> 192.168.2.24:60864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.113.136.33:443 -> 192.168.2.24:60866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.113.136.33:443 -> 192.168.2.24:60865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.24:60868 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.24:60867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.24:60870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.24:60871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.88.21.119:443 -> 192.168.2.24:60872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.88.21.119:443 -> 192.168.2.24:60874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.24:60882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.24:60881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.24:60883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.250.119:443 -> 192.168.2.24:60886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.250.119:443 -> 192.168.2.24:60887 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.250.119:443 -> 192.168.2.24:60888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.24:60889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.75:443 -> 192.168.2.24:60894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.75:443 -> 192.168.2.24:60893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.19.112:443 -> 192.168.2.24:60896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.151:443 -> 192.168.2.24:60897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.206:443 -> 192.168.2.24:60898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.151:443 -> 192.168.2.24:60899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.169:443 -> 192.168.2.24:60900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.171:443 -> 192.168.2.24:60901 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.0.146.171:443 -> 192.168.2.24:60902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.90.194.86:443 -> 192.168.2.24:60904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 91.90.194.86:443 -> 192.168.2.24:60903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.96.20:443 -> 192.168.2.24:60905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.229:443 -> 192.168.2.24:60909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.96.20:443 -> 192.168.2.24:60913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.96.20:443 -> 192.168.2.24:60914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.33.206:443 -> 192.168.2.24:60925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.33.206:443 -> 192.168.2.24:60933 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.96.20:443 -> 192.168.2.24:60943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.96.20:443 -> 192.168.2.24:60944 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 139.45.195.6:443 -> 192.168.2.24:60945 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2068_1780811372

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2068_1780811372

Jump to behavior

Source: 5e012228-73a7-4201-af21-15ca08ed2d95.tmp.0.dr

Static PE information: Data appended to the last section found

Source: classification engine

Classification label: mal52.win@29/125@73/27

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\4842ae25-dc66-43cc-a558-d9866a263941.tmp

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,6829857613089241591,15149102483079325840,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=1976 /prefetch:11
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.about-fraud.com/2025solution-providers-infographic/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,6829857613089241591,15149102483079325840,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=1976 /prefetch:11	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: C:\CodeBases\isdev\redist\Language Independent\i386\setupPreReq.pdb source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, 5e012228-73a7-4201-af21-15ca08ed2d95.tmp.0.dr, chromecache_120.1.dr
Source:	Binary string: .pDb&# source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, chromecache_120.1.dr

Source: 5e012228-73a7-4201-af21-15ca08ed2d95.tmp.0.dr

Static PE information: real checksum: 0x37ad50 should be: 0xdf6d5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\5e012228-73a7-4201-af21-15ca08ed2d95.tmp	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 914813.crdownload	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 120	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 59046.crdownload	Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 120
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 120			Jump to dropped file

Source: Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, 5e012228-73a7-4201-af21-15ca08ed2d95.tmp.0.dr, chromecache_120.1.dr

Binary or memory string: DBShell_TrayWnd0x0409H

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	2 Process Injection	21 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	2 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.about-fraud.com/2025solution-providers-infographic/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://buy.combocleaner.com/offers/scanner/css/style.min.css?_v=20240927114814	0%	Avira URL Cloud	safe
https://buy.combocleaner.com/offers/scanner/img/arrow.svg	0%	Avira URL Cloud	safe
https://del.icio.us/save?	0%	Avira URL Cloud	safe
https://www.about-fraud.com/comments/feed/	0%	Avira URL Cloud	safe
https://www.about-fraud.com/events-2025/	0%	Avira URL Cloud	safe
https://www.about-fraud.com/	0%	Avira URL Cloud	safe
https://www.about-fraud.com/wp-content/plugins/bb-plugin/js/jquery.magnificpopup.min.js?ver=2.7.1	0%	Avira URL Cloud	safe
https://www.about-fraud.com/contact/	0%	Avira URL Cloud	safe
https://www.about-fraud.com/wp-includes/css/dist/block-library/style.min.css?ver=6.7.1	0%	Avira URL Cloud	safe
https://www.about-fraud.com/about-us/	0%	Avira URL Cloud	safe
https://buy.combocleaner.com/offers/scanner/img/laptop.webp	0%	Avira URL Cloud	safe
https://www.about-fraud.com/policy-and-privacy/	0%	Avira URL Cloud	safe
https://tannideoutkill.shop/ivZVOPKshreBOHHLQJ/84653/?md=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&pdc=nFnDEiAus_OFIPgd0guGG2098FAAq0Xz5KSyVfW3NNE	0%	Avira URL Cloud	safe
https://www.about-fraud.com/wp-content/plugins/sharethis-share-buttons/css/mu-style.css?ver=17376495	0%	Avira URL Cloud	safe
https://www.about-fraud.com/wp-content/uploads/bb-plugin/cache/dec5eac5dd1d23d4cc2cc5a31bf69310-layout-bundle.css?ver=2.7.1-1.4.3.2	0%	Avira URL Cloud	safe
https://www.about-fraud.com/news/	0%	Avira URL Cloud	safe
http://widget.renren.com/dialog/share?	0%	Avira URL Cloud	safe
https://developers.gfycat.com/iframe/#gfycat-iframe	0%	Avira URL Cloud	safe
https://buy.combocleaner.com/offers/scanner/img/virus-detected.svg	0%	Avira URL Cloud	safe
https://www.about-fraud.com/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-m	0%	Avira URL Cloud	safe
https://people.mozilla.org/~jorendorff/es6-draft.html#sec-generatorresume	0%	Avira URL Cloud	safe
https://www.about-fraud.com/wp-includes/css/dashicons.min.css?ver=6.7.1	0%	Avira URL Cloud	safe
https://www.about-fraud.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	0%	Avira URL Cloud	safe
https://buy.combocleaner.com/offers/scanner/img/screen-laptop.webp	0%	Avira URL Cloud	safe
https://www.about-fraud.com/wp-content/uploads/2025/02/fraud-provider-768x447.jpg	0%	Avira URL Cloud	safe
https://www.about-fraud.com/wp-content/plugins/bbpowerpack/assets/css/animate.min.css?ver=3.5.1	0%	Avira URL Cloud	safe
https://s16.cloudcdnstatic.com/favicon.ico	100%	Avira URL Cloud	malware
https://www.about-fraud.com/wp-content/uploads/2025/02/fraud-provider-300x174.jpg	0%	Avira URL Cloud	safe
https://www.about-fraud.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.about-fraud.com%2F2025sol	0%	Avira URL Cloud	safe
https://www.about-fraud.com/wp-content/plugins/bb-plugin/css/jquery.magnificpopup.min.css?ver=2.7.1	0%	Avira URL Cloud	safe
https://iorbix.com/m-share?	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.193.229	true	false	high
pro.fontawesome.com.cdn.cloudflare.net	104.18.40.68	true	false	high
mc.yandex.ru	87.250.251.119	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
www.combocleaner.com	172.67.96.20	true	false	unknown
webulls.info	91.90.194.86	true	true	unknown
beacons-handoff.gcp.gvt2.com	173.194.219.94	true	false	high
s16.cloudcdnstatic.com	104.21.77.100	true	false	unknown
lottie.host	104.18.33.206	true	false	high
www.about-fraud.com	208.113.136.33	true	false	unknown
umebella.com	173.0.146.75	true	false	high
tealeryinsurer.top	173.0.146.151	true	false	high
d33w6v2v5ta015.cloudfront.net	13.33.252.88	true	false	high
ad.propellerads.com	139.45.195.6	true	false	high
tech4u.app	104.21.19.112	true	false	high
beacons.gvt2.com	108.177.122.94	true	false	high
www2.citadores.com	104.21.112.1	true	false	unknown
sync.gsyndication.com	172.67.206.31	true	false	high
platform-api.sharethis.com	13.249.91.61	true	false	high
www.google.com	142.250.176.196	true	false	high
tannideoutkill.shop	173.0.146.171	true	true	unknown
www.yametric.com	104.21.80.1	true	false	high
buy.combocleaner.com	172.67.96.20	true	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	high
mc.yandex.com	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
pro.fontawesome.com	unknown	unknown	false	high
js.createsend1.com	unknown	unknown	false	high
ta.churchxxv.com	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://mc.yandex.com/sync_cookie_image_check?scid=32fee966-40c8-80b2-5b18-12cc1508c892&cid=99199815	false		high
https://www.about-fraud.com/wp-includes/css/dist/block-library/style.min.css?ver=6.7.1	false	Avira URL Cloud: safe	unknown
https://buy.combocleaner.com/offers/scanner/img/arrow.svg	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/sync_cookie_image_check?scid=c524d8c2-d933-79cd-aba0-0eed0f4ca9db&cid=97642159	false		high
https://mc.yandex.com/sync_cookie_image_decide?cid=97642159&scid=c524d8c2-d933-79cd-aba0-0eed0f4ca9db&token=10616.L3tLyg-CEtF5Lb3jDVe60BtteAGCN9o36junsUy-_oqLFpxeaXLFEuREeIHxltHnG0KVRtTLFdZcHX-NZlTYXjl062TR_U9czKjpAYvbaaHXowbTgSHndMjo_4wOPukUx2LSNe2kSHJU2BRHglYDIZ31P08kPb9aGwkywzlTpId0kQtHArS207Zc5lEhJKyCkbsoDvALLwYydguoE9N7SCcsIt3-lemw16Y3XacQEfw%2C.XObYeaAabOC9JqRvtH4N6P0fCbQ%2C	false		high
https://buy.combocleaner.com/offers/scanner/css/style.min.css?_v=20240927114814	false	Avira URL Cloud: safe	unknown
https://mc.yandex.ru/metrika/tag.js	false		high
https://buy.combocleaner.com/offers/scanner/img/laptop.webp	false	Avira URL Cloud: safe	unknown
https://pro.fontawesome.com/releases/v5.15.4/css/all.css?ver=2.7.1	false		high
https://tannideoutkill.shop/ivZVOPKshreBOHHLQJ/84653/?md=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&pdc=nFnDEiAus_OFIPgd0guGG2098FAAq0Xz5KSyVfW3NNE	false	Avira URL Cloud: safe	unknown
https://www.about-fraud.com/wp-content/uploads/bb-plugin/cache/dec5eac5dd1d23d4cc2cc5a31bf69310-layout-bundle.css?ver=2.7.1-1.4.3.2	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=tS8VNp6nOyWpSIU8fClrDivE6znAnbH3lDTGhMk7JnF0BQEKm9klmh%2Bxgzae6ymKxmT58npeQ9yeAddGTT3vwkfoi2z71fq%2F%2BzjvsKLGXo4RJJTT3R7nlM76393wXTIIMbE3T6gabGrv	false		high
https://buy.combocleaner.com/offers/scanner/img/virus-detected.svg	false	Avira URL Cloud: safe	unknown
https://www.about-fraud.com/wp-includes/css/dashicons.min.css?ver=6.7.1	false	Avira URL Cloud: safe	unknown
https://www2.citadores.com/ecm/	false		unknown
https://www.about-fraud.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	false	Avira URL Cloud: safe	unknown
https://buy.combocleaner.com/offers/scanner/?utm_source=galaksion&utm_medium=cpc&affid=2209&utm_prid=9278561748014725491&zone=255193&click=7FF20C80-08F5-11F0-9E8F-6B1FCE3162EC&cost=0.0033&os=win	false		unknown
https://s16.cloudcdnstatic.com/favicon.ico	false	Avira URL Cloud: malware	unknown
https://buy.combocleaner.com/offers/scanner/img/screen-laptop.webp	false	Avira URL Cloud: safe	unknown
https://www.about-fraud.com/wp-content/plugins/bbpowerpack/assets/css/animate.min.css?ver=3.5.1	false	Avira URL Cloud: safe	unknown
https://www.about-fraud.com/wp-content/plugins/bb-plugin/css/jquery.magnificpopup.min.css?ver=2.7.1	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.about-fraud.com/events-2025/	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_141.1.dr	false		high
https://www.about-fraud.com/contact/	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://www.slideshare.net/	chromecache_116.1.dr	false		high
https://del.icio.us/save?	chromecache_116.1.dr	false	Avira URL Cloud: safe	unknown
https://www.about-fraud.com/wp-content/plugins/bb-plugin/js/jquery.magnificpopup.min.js?ver=2.7.1	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://www.quora.com/	chromecache_116.1.dr	false		high
https://www.airbnb.com/rooms/	chromecache_116.1.dr	false		high
https://www.fark.com/submit?	chromecache_116.1.dr	false		high
https://pinboard.in/add?	chromecache_116.1.dr	false		high
https://www.dexerto.com/entertainment/top-10-most-viewed-twitch-clips-of-all-time-2-310900	chromecache_116.1.dr	false		high
https://fontawesome.com	chromecache_108.1.dr	false		high
https://www.about-fraud.com/	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://giphy.com/posts/how-to-embed-giphy-gifs-on-your-website	chromecache_116.1.dr	false		high
https://www.about-fraud.com/comments/feed/	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://foursquare.com/v/	chromecache_116.1.dr	false		high
http://www.douban.com/recommend/?	chromecache_116.1.dr	false		high
https://www.tumblr.com/	chromecache_116.1.dr	false		high
https://open.spotify.com/	chromecache_116.1.dr	false		high
https://github.com/matomo-org/matomo/blob/master/js/piwik.js	chromecache_89.1.dr	false		high
https://sharethis.com/platform/share-buttons?	chromecache_116.1.dr	false		high
https://trello.com/add-card?	chromecache_116.1.dr	false		high
https://www.about-fraud.com/about-us/	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://electricbikereview.com/gocycle/gs/	chromecache_116.1.dr	false		high
http://wordpress.com/wp-admin/press-this.php?	chromecache_116.1.dr	false		high
https://foursquare.com/intent/venue/	chromecache_116.1.dr	false		high
https://createsend.com//t/getsecuresubscribelink	chromecache_110.1.dr	false		high
https://www.snapchat.com/	chromecache_116.1.dr	false		high
https://www.about-fraud.com/wp-content/plugins/sharethis-share-buttons/css/mu-style.css?ver=17376495	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://www.about-fraud.com/policy-and-privacy/	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://bsky.app/profile/	chromecache_116.1.dr	false		high
https://vimeo.com/	chromecache_116.1.dr	false		high
https://www.instagram.com/	chromecache_116.1.dr	false		high
https://ok.ru/	chromecache_116.1.dr	false		high
https://platform-api.sharethis.com	chromecache_116.1.dr	false		high
https://www.blogger.com/blog-this.g?	chromecache_116.1.dr	false		high
https://developers.gfycat.com/iframe/#gfycat-iframe	chromecache_116.1.dr	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/company/about-fraud.com/	chromecache_123.1.dr	false		high
https://schema.org	chromecache_123.1.dr	false		high
https://datasphere-sbsvc.sharethis.com?n=	chromecache_116.1.dr	false		high
https://t.me/share/url?	chromecache_116.1.dr	false		high
https://www.about-fraud.com/news/	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/	chromecache_116.1.dr, chromecache_123.1.dr	false		high
https://share.flipboard.com/bookmarklet/popout?	chromecache_116.1.dr	false		high
https://t.sharethis.com/1/k/t.dhj?	chromecache_116.1.dr	false		high
https://www.weibo.com/	chromecache_116.1.dr	false		high
http://widget.renren.com/dialog/share?	chromecache_116.1.dr	false	Avira URL Cloud: safe	unknown
https://gdpr-api.sharethis.com/cmp.js	chromecache_116.1.dr	false		high
http://www.plurk.com/?	chromecache_116.1.dr	false		high
https://www.about-fraud.com/wp-content/plugins/duracelltomi-google-tag-manager/dist/js/gtm4wp-form-m	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/shareArticle?	chromecache_116.1.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_88.1.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_141.1.dr	false		high
http://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?	chromecache_116.1.dr	false		high
https://sync.sharethis.com/powr/hem?	chromecache_116.1.dr	false		high
http://service.weibo.com/share/share.php?	chromecache_116.1.dr	false		high
https://www.meetup.com/members/	chromecache_116.1.dr	false		high
https://people.mozilla.org/~jorendorff/es6-draft.html#sec-generatorresume	chromecache_110.1.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/intent/tweet?	chromecache_116.1.dr	false		high
https://yoast.com/wordpress/plugins/seo/	chromecache_123.1.dr	false		high
https://dribbble.com/	chromecache_116.1.dr	false		high
https://api.qrserver.com/v1/create-qr-code/?	chromecache_116.1.dr	false		high
https://discord.gg/	chromecache_116.1.dr	false		high
https://www.linkedin.com/company/about-fraud-com	chromecache_123.1.dr	false		high
https://mail.google.com/mail/?view=cm&	chromecache_116.1.dr	false		high
http://stuartk.com/jszip	chromecache_106.1.dr	false		high
http://www.installshield.com/isetup/ProErrorCentral.asp?ErrorCode=%d	Unconfirmed 914813.crdownload.0.dr, Unconfirmed 59046.crdownload.0.dr, 5e012228-73a7-4201-af21-15ca08ed2d95.tmp.0.dr, chromecache_120.1.dr	false		high
https://stackoverflow.com/a/9493060/2688027	chromecache_116.1.dr	false		high
https://web.whatsapp.com/send?	chromecache_116.1.dr	false		high
https://secure.actblue.com/donate/ms_blm_homepage_2019	chromecache_116.1.dr	false		high
https://embed.ly/code?url=http%3A%2F%2Fgoogle.com	chromecache_116.1.dr	false		high
https://platform-api.sharethis.com/panorama.js	chromecache_116.1.dr	false		high
https://www.xing.com/profile/	chromecache_116.1.dr	false		high
https://connect.ok.ru/dk?	chromecache_116.1.dr	false		high
https://www.about-fraud.com/wp-content/uploads/2025/02/fraud-provider-768x447.jpg	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license	chromecache_108.1.dr	false		high
https://www.about-fraud.com/wp-content/uploads/2025/02/fraud-provider-300x174.jpg	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://www.about-fraud.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.about-fraud.com%2F2025sol	chromecache_123.1.dr	false	Avira URL Cloud: safe	unknown
https://iorbix.com/m-share?	chromecache_116.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
173.0.146.75	umebella.com	United States	7979	SERVERS-COMUS	false
104.18.40.68	pro.fontawesome.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
151.101.193.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
87.250.250.119	unknown	Russian Federation	13238	YANDEXRU	false
104.21.80.1	www.yametric.com	United States	13335	CLOUDFLARENETUS	false
104.21.112.1	www2.citadores.com	United States	13335	CLOUDFLARENETUS	false
104.21.19.112	tech4u.app	United States	13335	CLOUDFLARENETUS	false
173.0.146.151	tealeryinsurer.top	United States	7979	SERVERS-COMUS	false
173.0.146.171	tannideoutkill.shop	United States	7979	SERVERS-COMUS	true
208.113.136.33	www.about-fraud.com	United States	26347	DREAMHOST-ASUS	false
13.249.91.61	platform-api.sharethis.com	United States	16509	AMAZON-02US	false
87.250.251.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.67.96.20	www.combocleaner.com	United States	13335	CLOUDFLARENETUS	false
142.250.176.196	www.google.com	United States	15169	GOOGLEUS	false
172.67.206.31	sync.gsyndication.com	United States	13335	CLOUDFLARENETUS	false
104.21.77.100	s16.cloudcdnstatic.com	United States	13335	CLOUDFLARENETUS	false
13.33.252.88	d33w6v2v5ta015.cloudfront.net	United States	16509	AMAZON-02US	false
91.90.194.86	webulls.info	Bulgaria	50979	ITL-LV	true
139.45.195.6	ad.propellerads.com	Netherlands	9002	RETN-ASEU	false
104.18.33.206	lottie.host	United States	13335	CLOUDFLARENETUS	false
77.88.21.119	unknown	Russian Federation	13238	YANDEXRU	false
173.0.146.206	unknown	United States	7979	SERVERS-COMUS	false
173.0.146.169	unknown	United States	7979	SERVERS-COMUS	false

Private

IP
192.168.2.5
192.168.2.24
192.168.2.23

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1647493
Start date and time:	2025-03-24 22:16:53 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.about-fraud.com/2025solution-providers-infographic/
Analysis system description:	Windows 11 23H2 with Office Professional Plus 2021, Chrome 131, Firefox 133, Adobe Reader DC 24, Java 8 Update 431, 7zip 24.09
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@29/125@73/27
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): SystemSettingsBroker.exe, SIHClient.exe, appidcertstorecheck.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.176.206, 142.251.32.99, 142.250.81.238, 142.251.111.84, 142.251.40.110, 142.251.40.206, 142.250.80.110, 142.250.80.67, 142.251.41.10, 199.232.210.172, 142.251.32.110, 142.250.72.106, 142.250.72.99, 142.250.65.168, 172.217.165.142, 142.250.65.202, 142.250.80.42, 142.251.32.106, 142.250.81.234, 142.250.176.202, 142.250.65.234, 142.250.64.106, 142.251.40.138, 142.251.40.106, 142.251.35.170, 142.250.80.74, 142.250.80.106, 142.251.40.202, 142.251.40.170, 142.250.64.74, 142.251.40.238, 142.251.41.14, 142.250.65.174, 199.232.214.172, 142.250.64.99, 142.250.176.195, 142.250.65.238, 184.31.69.3, 23.204.23.20, 20.109.210.53
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, www.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, c.pki.goog, www.google-analytics.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.about-fraud.com/2025solution-providers-infographic/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	1536
Entropy (8bit):	1.2725499470876491
Encrypted:	false
SSDEEP:	3:YmsalTlLPltl2N81HRQjlORGt7R1t/iqFXul2oi5yP//W1XR9//3R9//:rl912N0xs+CFfiqFXul15XCB9Xh9X
MD5:	3D2007B41ADBDDB07CB2B073CFF33EF3
SHA1:	4C77A2ACA885D91F2346CF7ACE3FDC37EF8B7ADA
SHA-256:	74E3553435DD0612976386EE614DB439644B8D65AAADC1A55749DB349E000EEF
SHA-512:	5757B042F24A985E77C09E51FA7BBEB5091CF433A30B4931B43D15E1C3E424A9AFAEEFC2B9C7F10B22369C4BFD2107BA8D4490417A6DF17FD9569D79182F5A23
Malicious:	false
Reputation:	low
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 24, 2025 22:17:54.874330044 CET	53	53657	1.1.1.1	192.168.2.24
Mar 24, 2025 22:17:55.098799944 CET	53	49798	1.1.1.1	192.168.2.24
Mar 24, 2025 22:17:55.843269110 CET	53	49386	1.1.1.1	192.168.2.24
Mar 24, 2025 22:17:59.006247044 CET	60234	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:17:59.006375074 CET	57498	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:17:59.109865904 CET	53	57498	1.1.1.1	192.168.2.24
Mar 24, 2025 22:17:59.111030102 CET	53	60234	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:00.373557091 CET	49460	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:00.373774052 CET	53951	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:00.501357079 CET	53	53951	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:00.502494097 CET	53	49460	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:01.346968889 CET	60771	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:01.347668886 CET	59251	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:01.378593922 CET	60956	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:01.378736019 CET	60768	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:01.386023045 CET	51302	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:01.386207104 CET	57548	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:01.387176037 CET	54048	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:01.387334108 CET	65074	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:01.456598997 CET	53	59251	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:01.473237038 CET	53	60771	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:01.477654934 CET	53	60956	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:01.478494883 CET	53	60768	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:01.483879089 CET	53	64611	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:01.484035015 CET	53	57548	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:01.485269070 CET	53	51302	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:01.487087011 CET	53	65074	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:01.496048927 CET	53	54048	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:02.141963005 CET	49970	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:02.142229080 CET	58759	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:02.250294924 CET	53	49970	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:02.254511118 CET	53	58759	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:02.919811010 CET	51091	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:02.919966936 CET	61177	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:02.920383930 CET	64722	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:02.920542002 CET	63265	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:03.017441988 CET	53	51091	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:03.018141985 CET	53	61177	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:03.026866913 CET	53	64722	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:03.032609940 CET	53	63265	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:04.876292944 CET	59396	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:04.876852036 CET	61966	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:04.975130081 CET	53	59396	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:04.976018906 CET	53	61966	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:05.332128048 CET	53395	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:05.332340956 CET	60071	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:05.429389954 CET	53	53395	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:05.432497978 CET	53	60071	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:05.887437105 CET	62254	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:05.887593031 CET	57748	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:05.987127066 CET	53	62254	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:05.987142086 CET	53	57748	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:07.731689930 CET	51231	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:07.732112885 CET	61939	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:07.838764906 CET	53	51231	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:07.858819008 CET	53	61939	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:08.025840044 CET	53026	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:08.026213884 CET	63106	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:08.125627995 CET	53	63106	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:08.125670910 CET	53	53026	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:08.977262974 CET	52863	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:08.977741957 CET	56835	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:09.074567080 CET	53	52863	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:09.075483084 CET	53	56835	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:10.980407000 CET	55319	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:10.980633020 CET	57800	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:11.077992916 CET	53	57800	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:11.078340054 CET	53	55319	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:11.320103884 CET	56614	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:11.320259094 CET	49338	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:11.425297022 CET	53	49338	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:11.425801992 CET	53	56614	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:12.565597057 CET	50632	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:12.566184044 CET	54156	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:12.676757097 CET	53	50632	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:12.725770950 CET	53	54156	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:12.827411890 CET	53	50182	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:13.157238960 CET	53587	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:13.157391071 CET	50603	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:13.311865091 CET	53	50603	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:13.315435886 CET	53	53587	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:13.375797987 CET	49258	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:13.376007080 CET	53979	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:13.473737001 CET	53	53979	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:13.473800898 CET	53	49258	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:13.565804958 CET	61355	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:13.566051960 CET	55661	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:13.693272114 CET	53	55661	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:13.787282944 CET	53	61355	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:14.574331045 CET	59657	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:14.574645996 CET	58922	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:14.589407921 CET	62996	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:14.589864969 CET	54150	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:14.680969000 CET	53	59657	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:14.694900036 CET	53	58922	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:14.732589006 CET	53	62996	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:14.733643055 CET	53	54150	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:15.802025080 CET	57221	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:15.802186966 CET	64597	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:15.907895088 CET	53	57221	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:15.924206018 CET	53	64597	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:17.050565958 CET	63178	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:17.050717115 CET	57236	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:17.154220104 CET	53	63178	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:17.157810926 CET	53	57236	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:17.632529974 CET	137	137	192.168.2.24	192.168.2.255
Mar 24, 2025 22:18:17.885684013 CET	50421	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:17.886027098 CET	63131	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:17.982567072 CET	53	63131	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:17.983191967 CET	53	50421	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:18.387845039 CET	137	137	192.168.2.24	192.168.2.255
Mar 24, 2025 22:18:18.436631918 CET	54645	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:18.436789989 CET	61347	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:18.534512997 CET	53	60041	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:18.537265062 CET	53	54645	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:18.538328886 CET	53	61347	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:19.000765085 CET	60629	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:19.000912905 CET	61434	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:19.098517895 CET	53	60359	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:19.136363983 CET	53	61434	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:19.141115904 CET	53	60629	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:19.148890018 CET	137	137	192.168.2.24	192.168.2.255
Mar 24, 2025 22:18:19.741632938 CET	59991	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:19.741776943 CET	58880	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:19.842665911 CET	53	59991	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:19.844114065 CET	53	58880	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:20.149156094 CET	53	49728	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:25.111440897 CET	53	56533	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:37.008981943 CET	53	60484	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:46.945548058 CET	63542	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:46.945676088 CET	52272	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:46.954088926 CET	65345	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:46.954534054 CET	65407	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:18:47.048111916 CET	53	52272	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:47.050771952 CET	53	63542	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:47.054192066 CET	53	65345	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:47.092576981 CET	53	65407	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:54.721800089 CET	53	64286	1.1.1.1	192.168.2.24
Mar 24, 2025 22:18:57.079968929 CET	53	63440	1.1.1.1	192.168.2.24
Mar 24, 2025 22:19:00.827151060 CET	53	62812	1.1.1.1	192.168.2.24
Mar 24, 2025 22:19:02.599685907 CET	55931	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:19:02.599951982 CET	49220	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:19:02.699929953 CET	53	55931	1.1.1.1	192.168.2.24
Mar 24, 2025 22:19:02.700862885 CET	53	49220	1.1.1.1	192.168.2.24
Mar 24, 2025 22:19:03.615735054 CET	49368	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:19:03.615875959 CET	58101	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:19:03.718662977 CET	53	58101	1.1.1.1	192.168.2.24
Mar 24, 2025 22:19:03.719311953 CET	53	49368	1.1.1.1	192.168.2.24
Mar 24, 2025 22:19:05.649298906 CET	54920	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:19:05.748230934 CET	53	54920	1.1.1.1	192.168.2.24
Mar 24, 2025 22:19:06.661993980 CET	54920	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:19:06.762674093 CET	53	54920	1.1.1.1	192.168.2.24
Mar 24, 2025 22:19:07.669192076 CET	54920	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:19:07.767507076 CET	53	54920	1.1.1.1	192.168.2.24
Mar 24, 2025 22:19:09.680104971 CET	54920	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:19:09.780714035 CET	53	54920	1.1.1.1	192.168.2.24
Mar 24, 2025 22:19:13.677042007 CET	54920	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:19:13.777163029 CET	53	54920	1.1.1.1	192.168.2.24
Mar 24, 2025 22:19:19.134474039 CET	58089	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:19:19.134633064 CET	61356	53	192.168.2.24	1.1.1.1
Mar 24, 2025 22:19:19.234716892 CET	53	61356	1.1.1.1	192.168.2.24
Mar 24, 2025 22:19:19.234761000 CET	53	58089	1.1.1.1	192.168.2.24

Timestamp	Bytes transferred	Direction	Data
Mar 24, 2025 22:18:41.436929941 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 24, 2025 22:18:41.530087948 CET	222	IN	HTTP/1.1 304 Not Modified Date: Mon, 24 Mar 2025 21:09:48 GMT Expires: Mon, 24 Mar 2025 21:59:48 GMT Age: 533 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 24, 2025 22:18:41.543556929 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 24, 2025 22:18:41.638691902 CET	223	IN	HTTP/1.1 304 Not Modified Date: Mon, 24 Mar 2025 21:00:24 GMT Expires: Mon, 24 Mar 2025 21:50:24 GMT Age: 1097 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 24, 2025 22:18:41.644926071 CET	200	OUT	GET /r/r1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 24, 2025 22:18:41.738934040 CET	222	IN	HTTP/1.1 304 Not Modified Date: Mon, 24 Mar 2025 21:14:02 GMT Expires: Mon, 24 Mar 2025 22:04:02 GMT Age: 279 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:17:45 UTC	473	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1742851064070&w=0&anoncknm=al_app_anon&NoResponseBody=true HTTP/1.1 Accept-Encoding: gzip, deflate Content-Length: 3656 Content-Type: application/json; charset=UTF-8 Host: browser.events.data.msn.cn Connection: Keep-Alive Cache-Control: no-cache
2025-03-24 21:17:45 UTC	3656	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 53 65 72 76 65 72 4c 6f 67 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 63 34 39 38 37 31 31 66 30 32 36 35 34 65 64 63 61 38 61 37 31 35 63 61 36 65 31 63 62 34 64 34 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 35 2d 30 33 2d 32 34 54 32 31 3a 31 37 3a 33 34 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 64 61 74 61 22 3a 7b 22 70 61 67 65 22 3a 7b 22 70 72 6f 64 75 63 74 22 3a 22 65 6e 74 77 69 6e 64 6f 77 73 64 61 73 68 22 2c 22 61 70 70 54 79 70 65 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 6e 61 6d 65 22 3a 22 77 69 6e 70 32 62 61 63 6b 69 6e 67 61 70 70 22 2c 22 69 73 4d 6f 63 6b 45 6e 76 22 3a 66 61 6c 73 65 2c 22 68 6f 73 74 56 65 72 22 3a 22 35 32 34 2e 33 30 35 30 32 2e 33 30 2e 30 22 2c 22 Data Ascii: {"name":"MS.News.Web.ServerLog","iKey":"o:c498711f02654edca8a715ca6e1cb4d4","time":"2025-03-24T21:17:34Z","ver":"4.0","data":{"page":{"product":"entwindowsdash","appType":"winWidgets","name":"winp2backingapp","isMockEnv":false,"hostVer":"524.30502.30.0","

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:00 UTC	704	OUT	GET /2025solution-providers-infographic/ HTTP/1.1 Host: www.about-fraud.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:01 UTC	574	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 24 Mar 2025 21:18:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Expires: Mon, 24 Mar 2025 21:18:00 GMT Cache-Control: max-age=0 X-Cache-Status: HIT X-Rocket-Nginx-Serving-Static: MISS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:;
2025-03-24 21:18:01 UTC	15810	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 73 79 6e 63 2e 67 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 76 69 65 77 70 6f 72 74 27 20 63 6f 6e 74 65 6e 74 3d 27 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 27 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 27 20 63 6f 6e 74 65 6e 74 3d 27 49 45 3d 65 64 67 65 27 20 2f 3e 0a 3c 6c 69 6e Data Ascii: 8000<script src="//sync.gsyndication.com/"></script><!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8" /><meta name='viewport' content='width=device-width, initial-scale=1.0' /><meta http-equiv='X-UA-Compatible' content='IE=edge' /><lin
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 64 65 65 70 3a 20 31 32 70 78 20 31 32 70 78 20 35 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 73 68 61 72 70 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 6f 75 74 6c 69 6e 65 64 3a 20 36 70 78 20 36 70 78 20 30 70 78 20 2d 33 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 31 29 2c 20 36 70 78 20 36 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 31 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 73 68 61 64 6f 77 2d 2d 63 72 69 73 70 3a 20 36 70 78 20 Data Ascii: );--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6px rgba(0, 0, 0, 1);--wp--preset--shadow--crisp: 6px
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 2d 6d 6f 64 75 6c 65 20 66 6c 2d 6d 6f 64 75 6c 65 2d 70 68 6f 74 6f 20 66 6c 2d 6e 6f 64 65 2d 35 65 34 31 62 32 34 30 64 61 62 39 66 22 20 64 61 74 61 2d 6e 6f 64 65 3d 22 35 65 34 31 62 32 34 30 64 61 62 39 66 22 3e 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 2d 6d 6f 64 75 6c 65 2d 63 6f 6e 74 65 6e 74 20 66 6c 2d 6e 6f 64 65 2d 63 6f 6e 74 65 6e 74 22 3e 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 2d 70 68 6f 74 6f 20 66 6c 2d 70 68 6f 74 6f 2d 61 6c 69 67 6e 2d 6c 65 66 74 22 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 49 6d 61 67 65 4f 62 6a 65 63 74 22 3e 0a 09 3c 64 69 76 Data Ascii: </div></div><div class="fl-module fl-module-photo fl-node-5e41b240dab9f" data-node="5e41b240dab9f"><div class="fl-module-content fl-node-content"><div class="fl-photo fl-photo-align-left" itemscope itemtype="https://schema.org/ImageObject"><div
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 6f 6e 20 76 61 6c 75 65 3d 22 33 31 30 39 31 35 35 35 22 3e 4d 65 78 69 63 6f 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 31 30 39 31 35 35 36 22 3e 4d 69 64 77 61 79 20 49 73 6c 61 6e 64 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 31 30 39 31 35 35 37 22 3e 4d 6f 6c 64 6f 76 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 31 30 39 31 35 35 38 22 3e 4d 6f 6e 61 63 6f 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 31 30 39 31 35 35 39 22 3e 4d 6f 6e 67 6f 6c 69 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 31 30 39 31 35 36 30 22 3e 4d 6f 6e 74 65 6e 65 67 72 6f 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 Data Ascii: on value="31091555">Mexico</option><option value="31091556">Midway Islands</option><option value="31091557">Moldova</option><option value="31091558">Monaco</option><option value="31091559">Mongolia</option><option value="31091560">Montenegro</option><opti
2025-03-24 21:18:01 UTC	13168	IN	Data Raw: 33 22 3e 4d 61 75 72 69 74 69 75 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 30 35 37 37 30 36 34 22 3e 4d 61 79 6f 74 74 65 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 30 35 37 37 30 36 35 22 3e 4d 65 78 69 63 6f 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 30 35 37 37 30 36 36 22 3e 4d 69 64 77 61 79 20 49 73 6c 61 6e 64 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 30 35 37 37 30 36 37 22 3e 4d 6f 6c 64 6f 76 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 30 35 37 37 30 36 38 22 3e 4d 6f 6e 61 63 6f 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 33 30 35 37 37 30 36 39 22 Data Ascii: 3">Mauritius</option><option value="30577064">Mayotte</option><option value="30577065">Mexico</option><option value="30577066">Midway Islands</option><option value="30577067">Moldova</option><option value="30577068">Monaco</option><option value="30577069"

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:00 UTC	587	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIS2yQEIpbbJAQipncoBCIb0ygEIlaHLAQiKo8sBCIWgzQEI/aXOAQiB1s4BCPzbzgEIxeDOAQjJ4c4BCK7kzgEI3+TOAQiM5c4BGJblzgE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:01 UTC	1303	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 21:18:01 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-kVCgnMbmHLWPg-1fSkdzew' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-24 21:18:01 UTC	1303	IN	Data Raw: 64 63 66 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 76 61 6e 63 6f 75 76 65 72 20 63 61 6e 75 63 6b 73 22 2c 22 61 73 73 61 73 73 69 6e 20 63 72 65 65 64 20 73 68 61 64 6f 77 73 22 2c 22 74 72 61 76 65 6c 20 77 61 72 6e 69 6e 67 73 22 2c 22 32 33 61 6e 64 6d 65 20 67 65 6e 65 74 69 63 20 64 61 74 61 22 2c 22 6b 65 72 72 76 69 6c 6c 65 20 74 65 78 61 73 20 68 61 69 6c 20 73 74 6f 72 6d 22 2c 22 6a 65 66 66 20 61 72 65 76 61 6c 6f 20 67 6f 6f 73 65 20 62 61 6e 64 22 2c 22 6e 62 61 22 2c 22 73 65 76 65 72 61 6e 63 65 20 73 65 61 73 6f 6e 20 66 69 6e 61 6c 65 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c Data Ascii: dcf)]}'["",["vancouver canucks","assassin creed shadows","travel warnings","23andme genetic data","kerrville texas hail storm","jeff arevalo goose band","nba","severance season finale"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tl
2025-03-24 21:18:01 UTC	1303	IN	Data Raw: 79 56 6b 64 44 52 32 39 5a 4d 33 4d 30 52 32 38 78 56 33 4e 59 54 47 63 31 52 32 34 34 51 32 39 72 62 45 6c 54 62 57 55 35 54 33 64 76 59 30 70 59 4e 6d 63 79 4f 44 46 68 4d 32 6c 79 62 57 68 61 4d 55 70 6f 52 56 6c 6d 56 57 78 79 59 58 70 73 53 30 39 74 61 33 56 4e 56 31 46 56 62 46 5a 50 53 6b 5a 48 53 57 52 6f 55 6a 68 6b 4e 33 56 33 64 33 63 76 61 57 6c 4e 63 57 46 79 63 45 35 72 54 58 6c 6a 59 54 52 6d 54 33 68 79 4c 30 35 30 54 6a 68 32 53 45 5a 46 61 6e 52 45 4d 48 5a 55 51 6b 64 78 59 58 52 78 5a 47 39 68 64 55 78 79 4e 44 68 79 55 6c 52 73 54 47 4e 55 52 6e 5a 57 54 6b 5a 48 52 69 38 72 52 46 64 4a 4d 6c 4a 73 65 54 46 59 56 48 5a 5a 56 45 5a 69 4d 55 78 75 64 30 77 77 53 57 52 34 4e 31 4e 52 57 57 34 31 4e 30 39 46 5a 57 4a 4d 52 6b 6c 76 57 47 Data Ascii: yVkdDR29ZM3M0R28xV3NYTGc1R244Q29rbElTbWU5T3dvY0pYNmcyODFhM2lybWhaMUpoRVlmVWxyYXpsS09ta3VNV1FVbFZPSkZHSWRoUjhkN3V3d3cvaWlNcWFycE5rTXljYTRmT3hyL050Tjh2SEZFanREMHZUQkdxYXRxZG9hdUxyNDhyUlRsTGNURnZWTkZHRi8rRFdJMlJseTFYVHZZVEZiMUxud0wwSWR4N1NRWW41N09FZWJMRklvWG
2025-03-24 21:18:01 UTC	936	IN	Data Raw: 4e 69 4b 7a 5a 53 4e 7a 4d 76 63 32 5a 6e 65 6b 4a 74 51 57 74 46 52 30 74 77 56 6e 42 77 5a 30 74 54 56 6d 78 48 54 6a 56 56 53 45 46 33 53 55 70 6a 4c 33 4e 58 4f 58 42 6c 4c 31 42 32 4f 58 6c 71 55 7a 45 79 63 6e 4e 76 56 47 78 49 52 55 31 4e 54 6d 73 35 56 45 35 4a 59 6e 52 71 53 54 64 49 62 44 6c 50 55 45 34 31 54 55 64 78 56 45 74 35 55 55 31 33 54 6e 6c 34 59 6d 4e 68 57 45 35 42 4e 55 70 4e 53 46 6c 58 4c 30 6c 55 4e 30 4e 75 64 48 56 5a 52 32 74 68 5a 58 4a 78 62 7a 46 54 4f 46 59 76 4d 6b 4e 58 5a 30 52 36 5a 6c 46 58 64 30 31 61 4b 7a 4e 71 57 6b 56 56 52 47 59 30 55 58 70 4d 5a 6a 4a 4a 52 57 56 4f 61 6d 68 71 52 58 46 76 53 44 56 56 54 69 74 6b 4d 6c 56 49 53 45 39 55 63 48 5a 53 61 47 31 56 4d 7a 56 33 62 54 68 4a 63 30 46 43 56 55 4a 33 53 Data Ascii: NiKzZSNzMvc2ZnekJtQWtFR0twVnBwZ0tTVmxHTjVVSEF3SUpjL3NXOXBlL1B2OXlqUzEycnNvVGxIRU1NTms5VE5JYnRqSTdIbDlPUE41TUdxVEt5UU13Tnl4YmNhWE5BNUpNSFlXL0lUN0NudHVZR2thZXJxbzFTOFYvMkNXZ0R6ZlFXd01aKzNqWkVVRGY0UXpMZjJJRWVOamhqRXFvSDVVTitkMlVISE9UcHZSaG1VMzV3bThJc0FCVUJ3S
2025-03-24 21:18:01 UTC	91	IN	Data Raw: 35 35 0d 0a 5a 30 64 68 5a 58 4e 7a 62 69 74 74 52 44 64 47 59 6e 68 78 4c 7a 5a 33 5a 69 74 58 64 6c 6c 33 55 56 70 52 59 56 56 6a 53 48 68 70 55 33 68 77 61 47 35 4b 53 6b 31 56 64 54 64 45 51 32 5a 75 54 44 59 78 59 7a 64 49 51 6e 4e 56 62 6b 31 78 52 57 78 46 51 0d 0a Data Ascii: 55Z0dhZXNzbittRDdGYnhxLzZ3ZitXdll3UVpRYVVjSHhpU3hwaG5KSk1VdTdEQ2ZuTDYxYzdIQnNVbk1xRWxFQ
2025-03-24 21:18:01 UTC	1220	IN	Data Raw: 31 39 65 62 0d 0a 31 45 77 4f 55 30 32 5a 33 68 56 4d 55 31 76 52 48 4a 47 54 31 63 72 63 55 64 36 59 6a 5a 6a 4d 7a 4a 71 52 45 70 6f 61 32 39 4b 65 55 64 75 59 6b 73 76 4b 32 4a 6c 55 56 56 34 61 44 4a 6f 54 45 6c 72 4d 47 78 46 53 32 56 4c 65 55 35 5a 4e 32 68 74 64 57 51 72 55 32 52 53 52 55 6c 75 65 6a 56 6e 5a 48 4a 42 64 6b 78 6c 59 33 4a 5a 5a 30 68 6a 4e 55 51 32 64 6e 41 35 51 30 56 57 56 6d 6c 73 64 32 35 4e 4d 57 39 6d 54 47 4e 6f 4f 55 64 4e 56 56 56 33 5a 6e 4a 34 62 48 4e 4b 4b 32 31 6d 63 31 4a 35 4d 6c 6b 33 61 6d 56 51 63 47 5a 32 63 6a 46 68 51 56 64 6e 4c 33 5a 75 4f 45 74 6d 53 45 5a 35 55 57 59 30 4c 30 45 33 56 33 4e 45 55 31 52 4a 63 45 64 5a 51 55 46 42 51 55 46 54 56 56 5a 50 55 6b 73 31 51 31 6c 4a 53 54 30 36 45 56 5a 68 62 6d Data Ascii: 19eb1EwOU02Z3hVMU1vRHJGT1crcUd6YjZjMzJqREpoa29KeUduYksvK2JlUVV4aDJoTElrMGxFS2VLeU5ZN2htdWQrU2RSRUluejVnZHJBdkxlY3JZZ0hjNUQ2dnA5Q0VWVmlsd25NMW9mTGNoOUdNVVV3ZnJ4bHNKK21mc1J5Mlk3amVQcGZ2cjFhQVdnL3ZuOEtmSEZ5UWY0L0E3V3NEU1RJcEdZQUFBQUFTVVZPUks1Q1lJST06EVZhbm
2025-03-24 21:18:01 UTC	1220	IN	Data Raw: 6d 57 6e 46 6a 5a 43 38 34 4f 48 4d 33 5a 55 4d 31 62 47 74 78 4d 48 64 44 5a 30 5a 42 53 30 46 56 51 57 39 44 63 79 73 77 57 6a 6c 30 63 6d 68 4c 57 54 42 30 5a 31 42 31 55 33 52 4e 5a 47 68 7a 4f 44 46 50 53 30 39 43 61 6e 68 49 55 44 42 78 62 58 55 76 64 54 4a 6c 62 48 4e 74 52 47 56 4d 61 6b 70 50 65 57 70 74 4d 33 6c 58 64 6e 4e 53 4d 33 4e 78 56 6a 64 32 59 55 70 73 63 47 5a 68 52 46 55 79 4d 33 6c 73 62 32 5a 55 4d 7a 56 50 55 57 5a 31 55 46 4e 76 4e 47 4a 4c 54 47 6b 35 56 57 46 4f 64 48 4a 6d 63 6c 4a 79 65 47 51 30 65 6c 4e 68 54 48 5a 58 5a 7a 68 56 56 55 46 76 51 6c 46 44 5a 30 5a 42 56 6b 64 54 64 47 51 35 4e 44 5a 61 61 55 6f 7a 5a 31 64 57 51 57 56 6c 54 30 35 73 65 55 5a 6d 61 30 67 72 62 7a 4d 34 64 32 46 76 5a 6d 5a 78 4d 6a 52 4d 4d 56 Data Ascii: mWnFjZC84OHM3ZUM1bGtxMHdDZ0ZBS0FVQW9DcyswWjl0cmhLWTB0Z1B1U3RNZGhzODFPS09CanhIUDBxbXUvdTJlbHNtRGVMakpPeWptM3lXdnNSM3NxVjd2YUpscGZhRFUyM3lsb2ZUMzVPUWZ1UFNvNGJLTGk5VWFOdHJmclJyeGQ0elNhTHZXZzhVVUFvQlFDZ0ZBVkdTdGQ5NDZaaUozZ1dWQWVlT05seUZma0grbzM4d2FvZmZxMjRMMV
2025-03-24 21:18:01 UTC	1220	IN	Data Raw: 72 65 55 78 34 64 45 39 51 4e 6d 52 48 53 32 5a 74 4c 31 59 79 4b 32 68 4e 56 79 74 61 59 56 6c 4e 55 30 68 48 64 46 4e 52 63 47 67 33 4c 30 46 43 64 33 70 31 52 6a 56 55 63 6e 6c 44 56 48 59 78 59 32 35 32 4e 54 46 5a 61 32 74 79 53 58 67 78 53 32 73 32 63 32 35 50 59 6e 55 79 56 45 35 6b 53 55 4e 6e 52 6b 46 5a 61 33 49 7a 64 30 55 76 56 32 64 4a 51 57 4e 4e 54 55 64 55 4d 48 70 36 63 57 78 6b 53 7a 4e 77 62 45 6f 78 53 45 52 34 51 33 6b 30 52 6d 5a 4d 63 46 56 30 64 32 64 45 62 48 49 79 64 31 46 44 51 55 39 47 56 6e 4e 72 53 6d 52 71 55 45 35 52 54 6c 4d 35 56 48 70 35 4d 54 64 6f 56 45 52 74 61 6b 45 77 62 6b 38 72 63 6c 56 52 63 46 46 34 63 54 56 75 5a 6b 70 76 52 45 55 79 63 44 6c 76 51 58 4e 58 4f 55 39 56 53 6b 4e 46 51 6b 6c 56 54 6e 52 44 61 55 Data Ascii: reUx4dE9QNmRHS2ZtL1YyK2hNVytaYVlNU0hHdFNRcGg3L0FCd3p1RjVUcnlDVHYxY252NTFZa2tySXgxS2s2c25PYnUyVE5kSUNnRkFZa3Izd0UvV2dJQWNNTUdUMHp6cWxkSzNwbEoxSER4Q3k0RmZMcFV0d2dEbHIyd1FDQU9GVnNrSmRqUE5RTlM5VHp5MTdoVERtakEwbk8rclVRcFF4cTVuZkpvREUycDlvQXNXOU9VSkNFQklVTnRDaU
2025-03-24 21:18:01 UTC	1220	IN	Data Raw: 45 52 52 64 30 31 45 55 6e 4e 56 52 6c 4a 42 56 30 6c 43 4d 47 6c 4a 61 55 46 6b 53 48 67 34 61 30 74 45 55 58 4e 4b 51 31 6c 34 53 6e 67 34 5a 6b 78 55 4d 48 52 4e 56 46 55 7a 54 32 70 76 4e 6b 6c 35 63 79 39 53 52 44 67 30 55 58 70 52 4e 55 39 71 59 30 4a 44 5a 32 39 4c 52 46 46 33 54 6b 64 6e 4f 46 42 48 61 6d 4e 73 53 48 6c 56 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 65 6d 4d 7a 54 6e 70 6a 4d 30 35 36 59 7a 4e 4f 4c 79 39 42 51 55 4a 46 53 55 46 46 51 55 46 52 51 55 31 43 52 56 46 42 51 30 56 52 52 55 52 46 55 55 67 76 65 45 46 42 59 30 46 42 52 55 46 42 5a 30 31 42 51 58 64 42 Data Ascii: ERRd01EUnNVRlJBV0lCMGlJaUFkSHg4a0tEUXNKQ1l4Sng4ZkxUMHRNVFUzT2pvNkl5cy9SRDg0UXpRNU9qY0JDZ29LRFF3TkdnOFBHamNsSHlVM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOemMzTnpjM056YzNOLy9BQUJFSUFFQUFRQU1CRVFBQ0VRRURFUUgveEFBY0FBRUFBZ01BQXdB
2025-03-24 21:18:01 UTC	1220	IN	Data Raw: 33 68 51 4d 56 68 68 64 6a 68 4a 4e 30 34 30 4b 32 68 74 64 6d 46 49 64 44 68 70 51 6e 45 77 53 30 31 56 51 57 39 43 55 55 5a 71 4d 46 45 72 4e 30 5a 72 4d 31 64 55 53 47 4d 33 53 6a 56 74 4d 58 5a 50 54 6e 56 5a 4f 58 68 52 53 30 4e 45 4e 55 64 76 64 44 42 73 53 6c 4a 55 4d 48 70 53 54 48 52 48 4d 55 74 55 57 46 45 72 5a 30 64 56 62 45 52 54 52 58 46 6a 56 54 5a 76 53 6b 46 4d 61 58 4e 61 56 6a 52 75 51 55 45 31 4f 45 4a 58 5a 6d 56 77 5a 45 78 52 62 32 74 55 56 44 68 76 4e 6d 67 78 55 6b 49 33 52 58 46 30 59 7a 6c 7a 53 30 78 78 62 44 68 77 5a 45 6b 7a 53 6e 67 30 5a 33 46 57 4c 33 70 56 57 6c 46 6c 4d 55 70 6a 62 56 68 6a 4e 33 56 49 64 54 6c 44 5a 57 5a 34 65 47 56 75 65 54 41 76 65 47 56 61 65 6e 70 59 52 55 39 53 51 57 52 30 52 56 4e 5a 61 6c 6b 72 Data Ascii: 3hQMVhhdjhJN040K2htdmFIdDhpQnEwS01VQW9CUUZqMFErN0ZrM1dUSGM3SjVtMXZPTnVZOXhRS0NENUdvdDBsSlJUMHpSTHRHMUtUWFErZ0dVbERTRXFjVTZvSkFMaXNaVjRuQUE1OEJXZmVwZExRb2tUVDhvNmgxUkI3RXF0YzlzS0xxbDhwZEkzSng0Z3FWL3pVWlFlMUpjbVhjN3VIdTlDZWZ4eGVueTAveGVaenpYRU9SQWR0RVNZalkr
2025-03-24 21:18:01 UTC	543	IN	Data Raw: 44 46 79 62 44 41 30 55 47 74 71 4d 46 5a 54 59 54 52 4b 62 56 5a 59 51 32 4e 30 53 6c 4e 78 59 6b 70 56 61 32 70 43 51 6d 56 56 55 57 5a 75 57 48 70 6b 64 7a 5a 4a 59 6a 4a 6d 56 54 46 68 4e 31 42 4e 65 6c 46 44 5a 31 41 76 4c 31 6f 36 41 30 35 43 51 55 6f 48 49 32 45 7a 4d 6a 49 79 4e 6c 49 70 5a 33 4e 66 63 33 4e 77 50 57 56 4b 65 6d 6f 30 64 45 52 51 4d 56 52 6a 64 33 70 54 63 58 4a 4e 52 30 51 77 57 58 4d 31 54 46 4e 6e 55 55 46 4a 61 57 74 46 55 32 64 77 42 33 41 58 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 65 76 65 6e 74 69 64 22 3a 22 31 33 32 34 38 35 38 30 31 39 34 39 33 35 32 32 31 38 39 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e Data Ascii: DFybDA0UGtqMFZTYTRKbVZYQ2N0SlNxYkpVa2pCQmVVUWZuWHpkdzZJYjJmVTFhN1BNelFDZ1AvL1o6A05CQUoHI2EzMjIyNlIpZ3Nfc3NwPWVKemo0dERQMVRjd3pTcXJNR0QwWXM1TFNnUUFJaWtFU2dwB3AX","zl":10002},{"zl":10002}],"google:suggesteventid":"1324858019493522189","google:suggestrelevan

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:01 UTC	637	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.7.1 HTTP/1.1 Host: www.about-fraud.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:01 UTC	634	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 24 Mar 2025 21:18:01 GMT Content-Type: text/css Content-Length: 114706 Last-Modified: Tue, 19 Nov 2024 18:30:56 GMT Connection: close Vary: Accept-Encoding ETag: "673cd960-1c012" Expires: Tue, 22 Jul 2025 21:18:01 GMT Cache-Control: max-age=10368000 X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; Accept-Ranges: bytes
2025-03-24 21:18:01 UTC	15750	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 37 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 2e 37 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 20 2e 77 70 2d 62 6c 6f 63 6b Data Ascii: er.has-background-dim.has-background-dim-70:not(.has-background-gradient):before{opacity:.7}.wp-block-cover-image.has-background-dim.has-background-dim-80 .wp-block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-80 .wp-block
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 77 65 65 6b 5d 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 65 6d 7d 74 65 78 74 61 72 65 61 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e Data Ascii: -form-input__input[type=tel],.wp-block-form-input__input[type=text],.wp-block-form-input__input[type=time],.wp-block-form-input__input[type=url],.wp-block-form-input__input[type=week]{border:1px solid;line-height:2;min-height:2em}textarea.wp-block-form-in
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 68 35 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 68 36 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 70 61 64 64 69 6e 67 3a 31 2e 32 35 65 6d 20 32 2e 33 37 35 65 6d 7d 68 31 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 65 66 74 5b 73 74 79 6c 65 2a 3d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 5d 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 76 65 72 74 69 63 61 6c 2d 6c 72 5d 29 2c 68 31 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 5b 73 74 79 6c 65 2a 3d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 5d 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 76 65 72 74 69 63 61 6c 2d 72 6c 5d 29 2c 68 32 2e 68 61 73 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 65 66 74 5b 73 74 79 6c 65 2a 3d 77 72 69 74 69 6e 67 Data Ascii: as-background,h5.has-background,h6.has-background{padding:1.25em 2.375em}h1.has-text-align-left[style=writing-mode]:where([style=vertical-lr]),h1.has-text-align-right[style=writing-mode]:where([style=vertical-rl]),h2.has-text-align-left[style*=writing
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 68 65 69 67 68 74 3a 30 3b 6c 65 66 74 3a 2d 31 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 30 25 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 6c 69 6e 65 61 72 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 30 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 68 61 73 2d 63 68 69 6c 64 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 73 75 62 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 69 74 65 6d 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f Data Ascii: height:0;left:-1px;opacity:0;overflow:hidden;position:absolute;top:100%;transition:opacity .1s linear;visibility:hidden;width:0;z-index:2}.wp-block-navigation .has-child .wp-block-navigation__submenu-container>.wp-block-navigation-item>.wp-block-navigatio
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 77 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 2d 66 6f 72 6d 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 68 69 64 64 65 6e 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 2d 66 6f 72 6d 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 62 6f 78 2d 73 69 7a 69 6e Data Ascii: w:none;cursor:pointer;display:inline-block;overflow-wrap:break-word;text-align:center}.wp-block-post-comments-form .comment-form input:not([type=submit]):not([type=checkbox]):not([type=hidden]),.wp-block-post-comments-form .comment-form textarea{box-sizin
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 75 61 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 36 35 36 37 38 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 67 69 74 68 75 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 34 32 39 32 64 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 67 6f 6f 64 72 65 61 64 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f Data Ascii: uare{background-color:#e65678;color:#fff}:where(.wp-block-social-links:not(.is-style-logos-only)) .wp-social-link-github{background-color:#24292d;color:#fff}:where(.wp-block-social-links:not(.is-style-logos-only)) .wp-social-link-goodreads{background-colo
2025-03-24 21:18:01 UTC	652	IN	Data Raw: 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 68 74 6d 6c 20 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 77 69 64 74 68 5d 29 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 68 74 6d 6c 20 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 5d 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 68 74 6d 6c 20 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 5d 29 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 7d 68 74 6d 6c 20 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 5d 29 7b 62 6f 72 64 65 72 2d 62 6f Data Ascii: rder-left-style:solid}html :where([style=border-width]){border-style:solid}html :where([style=border-top-width]){border-top-style:solid}html :where([style=border-right-width]){border-right-style:solid}html :where([style=border-bottom-width]){border-bo

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:01 UTC	666	OUT	GET /wp-content/uploads/bb-plugin/cache/8249-layout.css?ver=0d50454ac8b5e91004636fe3c21fb004 HTTP/1.1 Host: www.about-fraud.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:02 UTC	632	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 24 Mar 2025 21:18:01 GMT Content-Type: text/css Content-Length: 21004 Last-Modified: Fri, 21 Feb 2025 20:00:20 GMT Connection: close Vary: Accept-Encoding ETag: "67b8db54-520c" Expires: Tue, 22 Jul 2025 21:18:01 GMT Cache-Control: max-age=10368000 X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; Accept-Ranges: bytes
2025-03-24 21:18:02 UTC	15752	IN	Data Raw: 2e 66 6c 2d 62 75 69 6c 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2a 2c 2e 66 6c 2d 62 75 69 6c 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2a 3a 62 65 66 6f 72 65 2c 2e 66 6c 2d 62 75 69 6c 64 65 72 2d 63 6f 6e 74 65 6e 74 20 2a 3a 61 66 74 65 72 20 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 2e 66 6c 2d 72 6f 77 3a 62 65 66 6f 72 65 2c 2e 66 6c 2d 72 6f 77 3a 61 66 74 65 72 2c 2e 66 6c 2d 72 6f 77 2d 63 6f 6e 74 65 6e 74 3a 62 65 66 6f 72 65 2c 2e 66 6c 2d 72 6f 77 2d 63 6f 6e 74 65 6e 74 3a 61 66 74 65 72 2c 2e 66 6c 2d 63 6f 6c 2d 67 72 6f 75 70 3a 62 65 66 6f Data Ascii: .fl-builder-content ,.fl-builder-content :before,.fl-builder-content *:after {-webkit-box-sizing: border-box;-moz-box-sizing: border-box;box-sizing: border-box;}.fl-row:before,.fl-row:after,.fl-row-content:before,.fl-row-content:after,.fl-col-group:befo
2025-03-24 21:18:02 UTC	5252	IN	Data Raw: 6c 2d 76 69 73 69 62 6c 65 2d 6d 6f 62 69 6c 65 20 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 7d 2e 66 6c 2d 76 69 73 69 62 6c 65 2d 6c 61 72 67 65 20 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 2e 66 6c 2d 63 6f 6c 2d 67 72 6f 75 70 2d 65 71 75 61 6c 2d 68 65 69 67 68 74 20 2e 66 6c 2d 63 6f 6c 2e 66 6c 2d 76 69 73 69 62 6c 65 2d 6c 61 72 67 65 20 7b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 7d 20 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 20 7b 20 2e 66 6c 2d 76 69 73 69 62 6c 65 2d 64 65 73 6b 74 6f 70 2c 2e 66 6c 2d 76 69 73 69 62 6c 65 2d 6c 61 72 67 65 2c 2e 66 6c 2d 76 69 73 69 62 6c 65 2d 6d 6f 62 69 6c 65 2c 2e 66 6c 2d 63 6f 6c 2d 67 72 6f 75 70 2d 65 71 75 61 6c 2d 68 65 69 67 68 74 20 2e 66 6c 2d 63 Data Ascii: l-visible-mobile {display: none;}.fl-visible-large {display: block;}.fl-col-group-equal-height .fl-col.fl-visible-large {display: flex;} }@media (max-width: 992px) { .fl-visible-desktop,.fl-visible-large,.fl-visible-mobile,.fl-col-group-equal-height .fl-c

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:01 UTC	653	OUT	GET /wp-content/plugins/sharethis-share-buttons/css/mu-style.css?ver=1737649506 HTTP/1.1 Host: www.about-fraud.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:01 UTC	627	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 24 Mar 2025 21:18:01 GMT Content-Type: text/css Content-Length: 26 Last-Modified: Thu, 23 Jan 2025 16:25:06 GMT Connection: close Vary: Accept-Encoding ETag: "67926d62-1a" Expires: Tue, 22 Jul 2025 21:18:01 GMT Cache-Control: max-age=10368000 X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; Accept-Ranges: bytes
2025-03-24 21:18:01 UTC	26	IN	Data Raw: 2f 2a 20 48 69 64 65 20 73 74 69 63 6b 79 20 62 75 74 74 6f 6e 73 20 2a 2f 0a Data Ascii: /* Hide sticky buttons */

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:01 UTC	631	OUT	GET /wp-content/uploads/useanyfont/uaf.css?ver=1736968112 HTTP/1.1 Host: www.about-fraud.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:02 UTC	629	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 24 Mar 2025 21:18:01 GMT Content-Type: text/css Content-Length: 346 Last-Modified: Wed, 15 Jan 2025 19:08:32 GMT Connection: close Vary: Accept-Encoding ETag: "678807b0-15a" Expires: Tue, 22 Jul 2025 21:18:01 GMT Cache-Control: max-age=10368000 X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; Accept-Ranges: bytes
2025-03-24 21:18:02 UTC	346	IN	Data Raw: 09 09 09 09 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 09 09 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 70 65 72 6d 61 6e 65 6e 74 2d 6d 61 72 6b 65 72 27 3b 0d 0a 09 09 09 09 09 73 72 63 3a 20 75 72 6c 28 27 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 75 73 65 61 6e 79 66 6f 6e 74 2f 37 34 35 30 50 65 72 6d 61 6e 65 6e 74 2d 4d 61 72 6b 65 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0d 0a 09 09 09 09 09 09 75 72 6c 28 27 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 75 73 65 61 6e 79 66 6f 6e 74 2f 37 34 35 30 50 65 72 6d 61 6e 65 6e 74 2d 4d 61 72 6b 65 72 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 0d 0a 09 09 09 09 09 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 Data Ascii: @font-face {font-family: 'permanent-marker';src: url('/wp-content/uploads/useanyfont/7450Permanent-Marker.woff2') format('woff2'),url('/wp-content/uploads/useanyfont/7450Permanent-Marker.woff') format('woff'); font-displa

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:01 UTC	622	OUT	GET /wp-includes/css/dashicons.min.css?ver=6.7.1 HTTP/1.1 Host: www.about-fraud.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:02 UTC	632	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 24 Mar 2025 21:18:01 GMT Content-Type: text/css Content-Length: 59016 Last-Modified: Wed, 21 Apr 2021 18:54:53 GMT Connection: close Vary: Accept-Encoding ETag: "608074fd-e688" Expires: Tue, 22 Jul 2025 21:18:01 GMT Cache-Control: max-age=10368000 X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; Accept-Ranges: bytes
2025-03-24 21:18:02 UTC	15752	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 64 61 73 68 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 22 29 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 Data Ascii: /! This file is auto-generated /@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:applicati
2025-03-24 21:18:02 UTC	16384	IN	Data Raw: 58 43 30 6e 72 66 73 70 7a 76 2f 2f 2b 6d 6e 6b 46 72 49 2f 59 4f 37 79 56 79 2b 4b 33 33 35 39 44 2b 32 6e 39 36 36 41 6b 39 76 7a 2b 74 47 56 56 71 76 4d 36 53 50 35 73 44 2f 54 53 30 66 2f 70 30 4a 6c 4e 75 61 46 50 72 76 69 71 4b 2b 6e 73 6d 52 59 6b 4a 77 65 4c 54 4d 2f 56 6c 39 34 4b 44 76 6b 61 76 77 54 51 35 7a 6d 47 35 45 4c 53 66 72 73 78 56 70 41 6d 67 72 37 51 51 71 30 2f 57 4a 4a 39 4b 76 43 50 64 51 6e 30 67 45 42 68 48 5a 46 51 54 73 2f 67 44 4f 30 4d 50 6a 71 38 48 68 49 64 6b 7a 64 4a 32 52 67 65 7a 4b 51 55 41 50 52 48 31 37 37 63 71 56 59 58 2b 65 62 79 46 74 6c 62 6d 52 59 77 72 6e 39 58 34 7a 4c 75 6d 6e 65 37 31 6f 38 6a 6e 43 48 52 33 4f 58 57 44 6d 39 34 68 68 52 69 64 57 6a 78 45 31 7a 66 58 4a 44 49 37 61 61 43 38 61 58 32 33 74 Data Ascii: XC0nrfspzv//+mnkFrI/YO7yVy+K3359D+2n966Ak9vz+tGVVqvM6SP5sD/TS0f/p0JlNuaFPrviqK+nsmRYkJweLTM/Vl94KDvkavwTQ5zmG5ELSfrsxVpAmgr7QQq0/WJJ9KvCPdQn0gEBhHZFQTs/gDO0MPjq8HhIdkzdJ2RgezKQUAPRH177cqVYX+ebyFtlbmRYwrn9X4zLumne71o8jnCHR3OXWDm94hhRidWjxE1zfXJDI7aaC8aX23t
2025-03-24 21:18:02 UTC	16384	IN	Data Raw: 6e 77 67 50 66 61 55 44 7a 44 38 76 4c 2f 33 54 2b 30 76 65 30 41 46 2f 2b 68 2f 63 39 4c 2f 5a 74 6e 33 43 30 58 38 76 57 6e 2f 4f 36 59 33 37 6b 5a 6a 6b 73 78 75 79 4b 2b 36 62 51 59 33 61 5a 77 4a 7a 72 6e 67 71 6f 47 6f 6d 46 7a 65 44 7a 32 68 6a 6b 48 34 4b 49 56 38 68 62 61 45 71 44 47 52 71 6c 69 49 32 58 4b 72 44 4c 49 61 76 2b 75 4f 6f 73 59 4c 77 76 6a 53 71 42 68 46 69 4f 56 31 73 66 53 32 69 71 43 7a 6e 4c 37 76 73 62 4c 41 73 37 75 50 48 50 49 6b 6e 63 66 53 78 4e 48 46 4b 6c 45 33 56 48 4c 6e 57 39 36 55 37 33 49 38 61 36 75 36 49 73 67 6f 6f 44 6e 71 71 4d 6a 78 43 53 33 49 59 73 47 51 77 34 45 30 72 31 65 53 6f 6b 42 32 67 77 59 58 45 73 55 73 46 78 53 44 76 58 47 52 4d 6d 56 71 49 30 6f 32 72 74 6d 51 4d 7a 71 4e 49 48 71 71 35 70 4c 78 Data Ascii: nwgPfaUDzD8vL/3T+0ve0AF/+h/c9L/Ztn3C0X8vWn/O6Y37kZjksxuyK+6bQY3aZwJzrngqoGomFzeDz2hjkH4KIV8hbaEqDGRqliI2XKrDLIav+uOosYLwvjSqBhFiOV1sfS2iqCznL7vsbLAs7uPHPIkncfSxNHFKlE3VHLnW96U73I8a6u6IsgooDnqqMjxCS3IYsGQw4E0r1eSokB2gwYXEsUsFxSDvXGRMmVqI0o2rtmQMzqNIHqq5pLx
2025-03-24 21:18:02 UTC	10496	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 34 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 65 64 69 74 6f 72 2d 61 6c 69 67 6e 63 65 6e 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 37 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 65 64 69 74 6f 72 2d 61 6c 69 67 6e 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 36 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 65 64 69 74 6f 72 2d 61 6c 69 67 6e 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 38 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 65 64 69 74 6f 72 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 30 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 65 64 69 74 6f 72 2d 62 72 65 61 6b 3a 62 65 66 6f 72 65 Data Ascii: before{content:"\f464"}.dashicons-editor-aligncenter:before{content:"\f207"}.dashicons-editor-alignleft:before{content:"\f206"}.dashicons-editor-alignright:before{content:"\f208"}.dashicons-editor-bold:before{content:"\f200"}.dashicons-editor-break:before

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:01 UTC	630	OUT	GET /js/sharethis.js?ver=2.3.4 HTTP/1.1 Host: platform-api.sharethis.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:01 UTC	598	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 210857 Connection: close Edge-control: cache-maxage=60m,downstream-ttl=60m X-Frame-Options: SAMEORIGIN Cache-Control: max-age=600, public Date: Mon, 24 Mar 2025 21:17:37 GMT ETag: W/"337a9-FHbkO2JUY2ewb+wCH4dS0MuS2SM" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 701ab3b5f13105928d49d7d81df91c8a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: B-tcrZhdnvbiq42-Y_S-Ko9OQS5lxSfryVsbg9JdWO1JkiEyIli1eg== Age: 24 Strict-Transport-Security: max-age=31536000; includeSubDomains
2025-03-24 21:18:01 UTC	15786	IN	Data Raw: 69 66 20 28 21 44 61 74 65 2e 6e 6f 77 29 20 7b 0a 20 20 44 61 74 65 2e 6e 6f 77 20 3d 20 66 75 6e 63 74 69 6f 6e 20 6e 6f 77 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 0a 20 20 7d 3b 0a 7d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 66 75 6e 63 4e 61 6d 65 2c 20 62 61 73 65 4f 62 6a 29 20 7b 0a 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 2f 2f 20 54 68 65 20 70 75 62 6c 69 63 20 66 75 6e 63 74 69 6f 6e 20 6e 61 6d 65 20 64 65 66 61 75 6c 74 73 20 74 6f 20 77 69 6e 64 6f 77 2e 64 6f 63 52 65 61 64 79 0a 20 20 2f 2f 20 62 75 74 20 79 6f 75 20 63 61 6e 20 6d 6f 64 69 66 79 20 74 68 65 20 6c 61 73 74 20 6c 69 6e 65 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 74 6f 20 70 61 73 Data Ascii: if (!Date.now) { Date.now = function now() { return new Date().getTime(); };}(function(funcName, baseObj) { "use strict"; // The public function name defaults to window.docReady // but you can modify the last line of this function to pas
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 3d 20 5b 24 65 6c 2e 63 6c 61 73 73 4e 61 6d 65 2c 20 24 65 6c 2e 69 64 5d 3b 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 2c 20 6c 65 6e 20 3d 20 72 65 66 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 73 74 72 20 3d 20 72 65 66 5b 69 5d 3b 0a 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 73 74 72 20 21 3d 3d 20 27 73 74 72 69 6e 67 27 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 69 6e 75 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 69 66 20 28 72 65 2e 74 65 73 74 28 28 73 74 72 20 7c 7c 20 27 27 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 66 Data Ascii: = [$el.className, $el.id]; for (i = 0, len = ref.length; i < len; i++) { str = ref[i]; if (typeof str !== 'string') { continue; } if (re.test((str \|\| '').toLowerCase())) { return true; } } return f
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 20 2b 20 28 73 74 2e 71 73 28 70 61 72 61 6d 73 29 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 6d 67 20 3d 20 6e 65 77 20 49 6d 61 67 65 28 31 2c 20 31 29 3b 0a 20 20 20 20 69 6d 67 2e 73 72 63 20 3d 20 72 65 73 6f 75 72 63 65 3b 0a 20 20 20 20 69 6d 67 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6e 65 78 74 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 20 6e 65 78 74 28 74 72 75 65 29 20 3a 20 76 6f 69 64 20 30 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 69 6d 67 2e 6f 6e 65 72 72 6f 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6e 65 78 74 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 Data Ascii: + (st.qs(params)); } img = new Image(1, 1); img.src = resource; img.onload = function() { return typeof next === "function" ? next(true) : void 0; }; return img.onerror = function() { return typeof next === "function"
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 20 20 65 72 72 6f 72 20 3d 20 65 72 72 6f 72 31 3b 0a 20 20 20 20 7d 0a 20 20 7d 3b 0a 0a 0a 20 20 2f 2a 0a 20 20 20 2a 20 41 64 64 20 4c 69 73 74 65 6e 65 72 73 0a 20 20 20 2a 2f 0a 0a 20 20 73 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 6f 63 75 6d 65 6e 74 2c 20 22 63 6c 69 63 6b 22 2c 20 73 74 2e 6f 62 6c 29 3b 0a 0a 20 20 73 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 6f 63 75 6d 65 6e 74 2c 20 22 63 6f 70 79 22 2c 20 73 74 2e 63 6f 70 79 29 3b 0a 0a 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 73 74 20 3d 20 77 69 6e 64 6f 77 2e 5f 5f 73 68 61 72 65 74 68 69 73 5f 5f 0a 0a 20 20 73 74 2e 43 75 73 74 6f 6d 43 6f 6c 6f 72 20 3d 20 63 6c 61 73 73 20 43 75 73 74 6f 6d 43 6f Data Ascii: error = error1; } }; /* * Add Listeners */ st.addEventListener(document, "click", st.obl); st.addEventListener(document, "copy", st.copy);}).call(this);(function(){ st = window.__sharethis__ st.CustomColor = class CustomCo
2025-03-24 21:18:02 UTC	16384	IN	Data Raw: 69 64 65 6f 27 2c 0a 20 20 20 20 27 2e 69 6e 73 74 61 67 72 61 6d 2d 6d 65 64 69 61 27 2c 0a 20 20 20 20 27 2e 72 65 64 64 69 74 27 2c 0a 20 20 20 20 27 2e 72 65 64 64 69 74 2d 63 61 72 64 27 2c 0a 20 20 20 20 27 2e 72 6d 2d 73 68 6f 72 74 63 6f 64 65 27 2c 0a 20 20 20 20 27 2e 73 70 6f 74 69 66 79 27 2c 0a 20 20 20 20 27 2e 74 75 6d 62 6c 72 2d 65 6d 62 65 64 27 2c 0a 20 20 20 20 27 2e 74 77 69 74 74 65 72 2d 65 6d 62 65 64 27 2c 0a 20 20 20 20 27 2e 74 77 69 74 74 65 72 2d 66 6f 6c 6c 6f 77 27 2c 0a 20 20 20 20 27 2e 74 77 69 74 74 65 72 2d 74 77 65 65 74 27 2c 0a 20 20 20 20 27 2e 74 77 69 74 74 65 72 2d 76 69 64 65 6f 27 2c 0a 20 20 20 20 27 2e 74 77 69 74 74 65 72 2d 77 69 64 67 65 74 27 2c 0a 20 20 20 20 27 65 6d 62 65 64 27 2c 0a 20 20 20 20 27 69 Data Ascii: ideo', '.instagram-media', '.reddit', '.reddit-card', '.rm-shortcode', '.spotify', '.tumblr-embed', '.twitter-embed', '.twitter-follow', '.twitter-tweet', '.twitter-video', '.twitter-widget', 'embed', 'i
2025-03-24 21:18:02 UTC	16384	IN	Data Raw: 77 6f 72 64 70 72 65 73 73 2e 73 76 67 27 29 2c 0a 20 20 20 20 78 69 6e 67 3a 20 69 6d 67 28 27 78 69 6e 67 2e 73 76 67 27 29 2c 0a 20 20 20 20 79 61 68 6f 6f 6d 61 69 6c 3a 20 69 6d 67 28 27 79 61 68 6f 6f 6d 61 69 6c 2e 73 76 67 27 29 2c 0a 20 20 20 20 79 65 6c 70 3a 20 69 6d 67 28 27 79 65 6c 70 2e 73 76 67 27 29 2c 0a 20 20 20 20 79 6f 75 74 75 62 65 3a 20 69 6d 67 28 27 79 6f 75 74 75 62 65 2e 73 76 67 27 29 2c 0a 20 20 20 20 79 75 6d 6d 6c 79 3a 20 69 6d 67 28 27 79 75 6d 6d 6c 79 2e 73 76 67 27 29 2c 0a 20 20 20 20 7a 69 6c 6c 6f 77 3a 20 69 6d 67 28 27 7a 69 6c 6c 6f 77 2e 73 76 67 27 29 2c 0a 20 20 20 20 7a 6f 6d 61 74 6f 3a 20 69 6d 67 28 27 7a 6f 6d 61 74 6f 2e 73 76 67 27 29 0a 20 20 7d 3b 0a 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 73 68 61 72 65 Data Ascii: wordpress.svg'), xing: img('xing.svg'), yahoomail: img('yahoomail.svg'), yelp: img('yelp.svg'), youtube: img('youtube.svg'), yummly: img('yummly.svg'), zillow: img('zillow.svg'), zomato: img('zomato.svg') }; window.__share
2025-03-24 21:18:02 UTC	16384	IN	Data Raw: 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 70 78 3b 5c 6e 20 20 7a 2d 69 6e 64 65 78 3a 20 32 30 3b 5c 6e 7d 5c 6e 23 22 20 2b 20 69 64 20 2b 20 22 20 2e 73 74 2d 6c 6f 67 6f 20 7b 5c 6e 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 34 63 34 63 34 63 3b 5c 6e 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 5c 6e 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 5c 6e 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 20 20 7a 2d 69 6e 64 65 78 3a 20 33 30 3b 5c 6e 7d 5c 6e 23 22 20 2b 20 69 64 20 2b 20 22 20 2e 73 74 2d 63 6c 6f 73 65 20 7b 5c 6e 20 20 22 20 2b 20 28 73 74 Data Ascii: text-align: center;\n min-width: 120px;\n z-index: 20;\n}\n#" + id + " .st-logo {\n background: #4c4c4c;\n bottom: 0;\n padding: 20px;\n position: fixed;\n text-align: center;\n width: 100%;\n z-index: 30;\n}\n#" + id + " .st-close {\n " + (st
2025-03-24 21:18:02 UTC	16384	IN	Data Raw: 69 66 20 28 21 6d 61 78 5f 61 67 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 78 5f 61 67 65 20 3d 20 33 33 36 39 36 30 30 30 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 68 6f 73 74 20 3d 20 28 77 69 6e 64 6f 77 20 26 26 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 26 26 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 20 7c 7c 20 27 27 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 61 72 74 73 20 3d 20 68 6f 73 74 2e 73 70 6c 69 74 28 27 2e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 61 72 74 73 2e 6c 65 6e 67 74 68 20 3e 20 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if (!max_age) { max_age = 33696000 } var host = (window && window.location && window.location.hostname) \|\| ''; var parts = host.split('.'); var domain = ""; if (parts.length > 1) {
2025-03-24 21:18:02 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 4f 76 65 72 72 69 64 65 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 7d 0a 7d 3b 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 76 61 72 20 5f 73 74 20 3d 20 77 69 6e 64 6f 77 2e 5f 5f 73 68 61 72 65 74 68 69 73 5f 5f 3b 0a 20 20 76 61 72 20 73 74 5f 70 76 69 65 77 5f 6c 6f 67 67 65 64 20 3d 20 74 79 70 65 6f 66 20 73 74 6c 69 62 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 73 74 6c 69 62 20 21 3d 3d 20 6e 75 6c 6c 20 26 26 20 73 74 6c 69 62 2e 6f 6e 73 63 72 69 70 74 6c 6f 61 64 3b 0a 0a 20 20 69 66 20 28 21 73 74 5f 70 76 69 65 77 5f 6c 6f 67 67 65 64 20 26 Data Ascii: } getOverride() }); }) }};(function(){ var _st = window.__sharethis__; var st_pview_logged = typeof stlib !== 'undefined' && stlib !== null && stlib.onscriptload; if (!st_pview_logged &
2025-03-24 21:18:02 UTC	16384	IN	Data Raw: 5f 63 6f 6c 6f 72 3a 20 67 65 61 72 5f 63 6f 6c 6f 72 2c 0a 20 20 20 20 20 20 67 65 61 72 5f 70 6f 73 69 74 69 6f 6e 3a 20 67 65 61 72 5f 70 6f 73 69 74 69 6f 6e 2c 0a 20 20 20 20 20 20 67 6c 6f 62 61 6c 3a 20 73 63 6f 70 65 20 21 3d 3d 20 27 70 75 62 6c 69 73 68 65 72 27 2c 0a 20 20 20 20 20 20 6c 61 6e 67 75 61 67 65 3a 20 6c 61 6e 67 75 61 67 65 2c 0a 20 20 20 20 20 20 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 3a 20 70 75 62 6c 69 73 68 65 72 5f 6e 61 6d 65 2c 0a 20 20 20 20 20 20 70 75 62 6c 69 73 68 65 72 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 20 70 75 62 6c 69 73 68 65 72 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 2c 0a 20 20 20 20 20 20 70 75 72 70 6f 73 65 73 3a 20 70 75 62 6c 69 73 68 65 72 5f 70 75 72 70 6f 73 65 73 2c 0a 20 20 20 20 20 20 74 65 Data Ascii: _color: gear_color, gear_position: gear_position, global: scope !== 'publisher', language: language, publisher_name: publisher_name, publisher_restrictions: publisher_restrictions, purposes: publisher_purposes, te

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:01 UTC	638	OUT	GET /javascript/copypastesubscribeformlogic.js HTTP/1.1 Host: js.createsend1.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:01 UTC	783	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 132504 Connection: close Server: csw Date: Mon, 24 Mar 2025 20:32:27 GMT Cache-Control: public, max-age=3461 Expires: Mon, 24 Mar 2025 21:30:08 GMT Last-Modified: Mon, 24 Mar 2025 20:30:08 GMT X-Frame-Options: SAMEORIGIN X-UA-Compatible: IE=edge Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 37c23a320daf1957772cba43d1a5bde0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: A39fis0o8Q8PDlEj1Ai2HdPZXU6jcpyPl6kBh94mbiy0S0Mf33Fk0w== Age: 2734
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 73 29 20 7b 20 2f 2f 20 77 65 62 70 61 63 6b 42 6f 6f 74 73 74 72 61 70 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 6d 6f 64 75 6c 65 20 63 61 63 68 65 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 76 61 72 20 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 20 3d 20 7b 7d 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 2f 2f 20 54 68 65 20 72 65 71 75 69 72 65 20 66 75 6e 63 74 69 6f 6e 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 6d 6f 64 75 6c 65 49 64 29 20 7b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 6d 6f 64 75 6c 65 20 69 73 20 69 6e Data Ascii: /****/ (function(modules) { // webpackBootstrap/**/ // The module cache/**/ var installedModules = {};/**//**/ // The require function/**/ function __webpack_require__(moduleId) {/**//****/ // Check if module is in
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 78 74 2e 6d 65 74 68 6f 64 20 3d 20 22 74 68 72 6f 77 22 3b 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 78 74 2e 61 72 67 20 3d 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 69 74 65 72 61 74 6f 72 20 64 6f 65 73 20 6e 6f 74 20 70 72 6f 76 69 64 65 20 61 20 27 74 68 72 6f 77 27 20 6d 65 74 68 6f 64 22 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 43 6f 6e 74 69 6e 75 65 53 65 6e 74 69 6e 65 6c 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 72 65 63 6f 72 64 20 3d 20 74 72 79 43 61 74 63 68 28 6d 65 74 68 6f 64 2c 20 64 65 6c 65 67 61 74 65 2e 69 74 65 72 61 74 6f 72 2c 20 63 6f 6e 74 65 78 74 2e 61 72 67 29 3b 0a 0a 20 20 20 20 69 66 20 28 72 65 Data Ascii: } context.method = "throw"; context.arg = new TypeError("The iterator does not provide a 'throw' method"); } return ContinueSentinel; } var record = tryCatch(method, delegate.iterator, context.arg); if (re
2025-03-24 21:18:01 UTC	1514	IN	Data Raw: 20 27 55 6e 69 74 65 64 20 4b 69 6e 67 64 6f 6d 27 0a 20 20 7d 3b 0a 0a 20 20 76 61 72 20 67 65 74 4d 6f 62 69 6c 65 49 6e 70 75 74 50 72 6f 70 73 42 79 43 6f 75 6e 74 72 79 20 3d 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 4d 6f 62 69 6c 65 49 6e 70 75 74 50 72 6f 70 73 42 79 43 6f 75 6e 74 72 79 28 63 6f 75 6e 74 72 79 29 20 7b 0a 20 20 20 20 73 77 69 74 63 68 20 28 63 6f 75 6e 74 72 79 29 20 7b 0a 20 20 20 20 20 20 63 61 73 65 20 6d 6f 62 69 6c 65 49 6e 70 75 74 43 6f 75 6e 74 72 79 4e 61 6d 65 2e 41 75 73 74 72 61 6c 69 61 3a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 61 74 74 65 72 3a 20 66 75 6e 63 74 69 6f 6e 20 66 6f 72 6d 61 74 74 65 72 28 69 6e 70 75 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 'United Kingdom' }; var getMobileInputPropsByCountry = function getMobileInputPropsByCountry(country) { switch (country) { case mobileInputCountryName.Australia: return { formatter: function formatter(input) {
2025-03-24 21:18:01 UTC	16384	IN	Data Raw: 7d 29 2f 29 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 56 61 6c 75 65 5b 31 5d 20 2b 20 28 6e 65 77 56 61 6c 75 65 5b 32 5d 20 3f 20 27 2d 27 20 2b 20 6e 65 77 56 61 6c 75 65 5b 32 5d 20 3a 20 27 27 29 20 2b 20 28 6e 65 77 56 61 6c 75 65 5b 33 5d 20 3f 20 27 2d 27 20 2b 20 6e 65 77 56 61 6c 75 65 5b 33 5d 20 3a 20 27 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 70 6c 61 63 65 68 6f 6c 64 65 72 3a 20 27 45 2e 67 2e 20 31 32 33 2d 34 35 36 2d 37 38 39 30 27 2c 0a 20 20 20 20 20 20 20 20 20 20 70 61 74 74 65 72 6e 3a 20 27 5b 30 2d 39 5d 7b 33 7d 2d 5b 30 2d 39 5d 7b 33 7d 2d 5b 30 2d 39 5d 7b 34 7d 27 2c 0a 20 20 20 20 20 20 20 20 20 20 6d 61 78 4c 65 6e 67 74 68 4f 66 4d 6f Data Ascii: })/) \|\| []; return newValue[1] + (newValue[2] ? '-' + newValue[2] : '') + (newValue[3] ? '-' + newValue[3] : ''); }, placeholder: 'E.g. 123-456-7890', pattern: '[0-9]{3}-[0-9]{3}-[0-9]{4}', maxLengthOfMo
2025-03-24 21:18:01 UTC	2804	IN	Data Raw: 46 50 4c 45 4e 42 51 55 4e 4d 4c 45 39 42 51 56 49 73 51 30 46 42 5a 30 4a 4a 4c 45 74 42 51 55 73 73 51 30 46 42 51 31 41 73 54 30 46 42 64 45 49 73 52 55 46 42 4b 30 4a 54 4c 45 6c 42 51 53 39 43 4c 45 4e 42 51 57 39 44 4c 46 56 42 51 56 4e 47 4c 45 74 42 51 56 51 73 52 55 46 42 5a 30 49 37 51 55 46 44 65 6b 52 4d 4c 47 74 43 51 55 46 4e 4c 45 4e 42 51 55 4d 73 54 55 46 42 52 43 78 46 51 55 46 54 53 79 78 4c 51 55 46 55 4c 45 56 42 51 57 64 43 53 69 78 50 51 55 46 6f 51 69 78 46 51 55 46 35 51 6b 4d 73 54 55 46 42 65 6b 49 73 51 30 46 42 54 6a 74 42 51 55 4e 45 4c 46 64 42 52 6b 30 73 52 55 46 46 53 69 78 56 51 55 46 54 4c 30 49 73 52 30 46 42 56 43 78 46 51 55 46 6a 4f 30 46 42 51 32 59 32 51 69 78 72 51 6b 46 42 54 53 78 44 51 55 46 44 4c 45 39 42 51 Data Ascii: FPLENBQUNMLE9BQVIsQ0FBZ0JJLEtBQUssQ0FBQ1AsT0FBdEIsRUFBK0JTLElBQS9CLENBQW9DLFVBQVNGLEtBQVQsRUFBZ0I7QUFDekRMLGtCQUFNLENBQUMsTUFBRCxFQUFTSyxLQUFULEVBQWdCSixPQUFoQixFQUF5QkMsTUFBekIsQ0FBTjtBQUNELFdBRk0sRUFFSixVQUFTL0IsR0FBVCxFQUFjO0FBQ2Y2QixrQkFBTSxDQUFDLE9BQ
2025-03-24 21:18:01 UTC	10018	IN	Data Raw: 46 42 52 7a 4e 45 4c 45 39 42 51 55 38 73 51 30 46 42 51 7a 4a 45 4c 46 46 42 51 58 5a 43 4f 7a 74 42 51 55 4e 42 4c 46 6c 42 51 55 6c 42 4c 46 46 42 51 55 6f 73 52 55 46 42 59 7a 74 42 51 55 4e 61 4c 47 4e 42 51 55 6c 44 4c 47 4e 42 51 57 4d 73 52 30 46 42 52 30 4d 73 62 55 4a 42 51 57 31 43 4c 45 4e 42 51 55 4e 47 4c 46 46 42 51 55 51 73 52 55 46 42 56 7a 4e 45 4c 45 39 42 51 56 67 73 51 30 46 42 65 45 4d 37 4f 30 46 42 51 30 45 73 59 30 46 42 53 54 52 45 4c 47 4e 42 51 55 6f 73 52 55 46 42 62 30 49 37 51 55 46 44 62 45 49 73 5a 30 4a 42 51 55 6c 42 4c 47 4e 42 51 57 4d 73 53 30 46 42 53 7a 64 44 4c 47 64 43 51 55 46 32 51 69 78 46 51 55 46 35 51 7a 74 42 51 55 4e 36 51 79 78 74 51 6b 46 42 54 7a 5a 44 4c 47 4e 42 51 56 41 37 51 55 46 44 52 44 74 42 51 Data Ascii: FBRzNELE9BQU8sQ0FBQzJELFFBQXZCOztBQUNBLFlBQUlBLFFBQUosRUFBYztBQUNaLGNBQUlDLGNBQWMsR0FBR0MsbUJBQW1CLENBQUNGLFFBQUQsRUFBVzNELE9BQVgsQ0FBeEM7O0FBQ0EsY0FBSTRELGNBQUosRUFBb0I7QUFDbEIsZ0JBQUlBLGNBQWMsS0FBSzdDLGdCQUF2QixFQUF5QztBQUN6QyxtQkFBTzZDLGNBQVA7QUFDRDtBQ
2025-03-24 21:18:01 UTC	6396	IN	Data Raw: 53 31 67 73 53 55 46 42 54 43 78 48 51 55 46 5a 63 6b 49 73 53 30 46 42 53 79 78 44 51 55 46 44 52 53 78 52 51 55 46 30 51 69 78 46 51 55 46 6e 51 7a 74 42 51 55 4d 35 51 69 78 78 51 6b 46 42 54 7a 4a 43 4c 45 31 42 51 55 30 73 51 30 46 42 51 7a 64 43 4c 45 74 42 51 55 73 73 51 30 46 42 51 30 55 73 55 55 46 42 55 43 78 46 51 55 46 70 51 69 78 4a 51 55 46 71 51 69 78 44 51 55 46 69 4f 30 46 42 51 30 51 37 51 55 46 46 52 69 78 58 51 55 78 4e 4c 45 31 42 53 30 45 73 53 55 46 42 53 53 74 43 4c 46 56 42 51 55 6f 73 52 55 46 42 5a 30 49 37 51 55 46 44 63 6b 49 73 5a 30 4a 42 51 55 6b 73 53 30 46 42 53 31 6f 73 53 55 46 42 54 43 78 48 51 55 46 5a 63 6b 49 73 53 30 46 42 53 79 78 44 51 55 46 44 52 79 78 56 51 55 46 30 51 69 78 46 51 55 46 72 51 7a 74 42 51 55 4e Data Ascii: S1gsSUFBTCxHQUFZckIsS0FBSyxDQUFDRSxRQUF0QixFQUFnQztBQUM5QixxQkFBTzJCLE1BQU0sQ0FBQzdCLEtBQUssQ0FBQ0UsUUFBUCxFQUFpQixJQUFqQixDQUFiO0FBQ0Q7QUFFRixXQUxNLE1BS0EsSUFBSStCLFVBQUosRUFBZ0I7QUFDckIsZ0JBQUksS0FBS1osSUFBTCxHQUFZckIsS0FBSyxDQUFDRyxVQUF0QixFQUFrQztBQUN
2025-03-24 21:18:02 UTC	12792	IN	Data Raw: 4c 45 6c 42 51 56 41 37 51 55 46 44 53 43 78 4c 51 56 70 45 4f 30 46 42 59 55 67 37 51 55 46 44 53 69 78 44 51 57 78 44 52 43 78 46 51 57 74 44 52 30 4d 73 54 55 46 42 54 53 78 44 51 55 46 44 51 79 78 50 51 55 46 51 4c 45 64 42 51 57 6c 43 52 43 78 4e 51 55 46 4e 4c 45 4e 42 51 55 4e 44 4c 45 39 42 51 56 41 73 51 30 46 42 5a 57 78 4c 4c 46 4e 42 51 57 68 44 4c 45 64 42 51 54 52 44 61 55 73 73 54 55 46 42 54 53 78 44 51 55 46 44 52 53 78 58 51 55 46 51 4c 45 4e 42 51 57 31 43 62 6b 73 73 55 30 46 73 51 32 78 46 4f 7a 74 42 51 57 39 44 51 53 78 44 51 55 46 44 4c 46 6c 42 51 56 6b 37 51 55 46 44 56 43 78 4e 51 55 46 4a 62 30 73 73 56 30 46 42 56 79 78 48 51 55 46 48 57 43 78 52 51 55 46 52 4c 45 4e 42 51 55 4e 5a 4c 47 56 42 51 56 51 73 53 55 46 42 4e 45 4a Data Ascii: LElBQVA7QUFDSCxLQVpEO0FBYUg7QUFDSixDQWxDRCxFQWtDR0MsTUFBTSxDQUFDQyxPQUFQLEdBQWlCRCxNQUFNLENBQUNDLE9BQVAsQ0FBZWxLLFNBQWhDLEdBQTRDaUssTUFBTSxDQUFDRSxXQUFQLENBQW1CbkssU0FsQ2xFOztBQW9DQSxDQUFDLFlBQVk7QUFDVCxNQUFJb0ssV0FBVyxHQUFHWCxRQUFRLENBQUNZLGVBQVQsSUFBNEJ
2025-03-24 21:18:02 UTC	6396	IN	Data Raw: 63 6d 56 78 64 57 6c 79 5a 56 39 66 4c 6d 34 67 50 53 42 6d 64 57 35 6a 64 47 6c 76 62 69 68 74 62 32 52 31 62 47 55 70 49 48 74 63 62 69 42 63 64 46 78 30 64 6d 46 79 49 47 64 6c 64 48 52 6c 63 69 41 39 49 47 31 76 5a 48 56 73 5a 53 41 6d 4a 69 42 74 62 32 52 31 62 47 55 75 58 31 39 6c 63 30 31 76 5a 48 56 73 5a 53 41 2f 58 47 34 67 58 48 52 63 64 46 78 30 5a 6e 56 75 59 33 52 70 62 32 34 67 5a 32 56 30 52 47 56 6d 59 58 56 73 64 43 67 70 49 48 73 67 63 6d 56 30 64 58 4a 75 49 47 31 76 5a 48 56 73 5a 56 73 6e 5a 47 56 6d 59 58 56 73 64 43 64 64 4f 79 42 39 49 44 70 63 62 69 42 63 64 46 78 30 58 48 52 6d 64 57 35 6a 64 47 6c 76 62 69 42 6e 5a 58 52 4e 62 32 52 31 62 47 56 46 65 48 42 76 63 6e 52 7a 4b 43 6b 67 65 79 42 79 5a 58 52 31 63 6d 34 67 62 57 39 Data Ascii: cmVxdWlyZV9fLm4gPSBmdW5jdGlvbihtb2R1bGUpIHtcbiBcdFx0dmFyIGdldHRlciA9IG1vZHVsZSAmJiBtb2R1bGUuX19lc01vZHVsZSA/XG4gXHRcdFx0ZnVuY3Rpb24gZ2V0RGVmYXVsdCgpIHsgcmV0dXJuIG1vZHVsZVsnZGVmYXVsdCddOyB9IDpcbiBcdFx0XHRmdW5jdGlvbiBnZXRNb2R1bGVFeHBvcnRzKCkgeyByZXR1cm4gbW9
2025-03-24 21:18:02 UTC	12792	IN	Data Raw: 49 47 5a 31 62 6d 4e 30 61 57 39 75 4b 47 46 79 5a 79 6b 67 65 31 78 75 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 64 47 68 70 63 79 35 66 61 57 35 32 62 32 74 6c 4b 47 31 6c 64 47 68 76 5a 43 77 67 59 58 4a 6e 4b 54 74 63 62 69 41 67 49 43 41 67 49 48 30 37 58 47 34 67 49 43 41 67 66 53 6b 37 58 47 34 67 49 48 31 63 62 6c 78 75 49 43 42 6c 65 48 42 76 63 6e 52 7a 4c 6d 6c 7a 52 32 56 75 5a 58 4a 68 64 47 39 79 52 6e 56 75 59 33 52 70 62 32 34 67 50 53 42 6d 64 57 35 6a 64 47 6c 76 62 69 68 6e 5a 57 35 47 64 57 34 70 49 48 74 63 62 69 41 67 49 43 42 32 59 58 49 67 59 33 52 76 63 69 41 39 49 48 52 35 63 47 56 76 5a 69 42 6e 5a 57 35 47 64 57 34 67 50 54 30 39 49 46 77 69 5a 6e 56 75 59 33 52 70 62 32 35 63 49 69 41 6d 4a 69 42 6e 5a 57 35 Data Ascii: IGZ1bmN0aW9uKGFyZykge1xuICAgICAgICByZXR1cm4gdGhpcy5faW52b2tlKG1ldGhvZCwgYXJnKTtcbiAgICAgIH07XG4gICAgfSk7XG4gIH1cblxuICBleHBvcnRzLmlzR2VuZXJhdG9yRnVuY3Rpb24gPSBmdW5jdGlvbihnZW5GdW4pIHtcbiAgICB2YXIgY3RvciA9IHR5cGVvZiBnZW5GdW4gPT09IFwiZnVuY3Rpb25cIiAmJiBnZW5

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:01 UTC	650	OUT	GET /releases/v5.15.4/css/all.css?ver=2.7.1 HTTP/1.1 Host: pro.fontawesome.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:01 UTC	477	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 21:18:01 GMT Content-Type: text/css Content-Length: 174294 Connection: close x-amz-id-2: gHF8bBjWLWkjHJD++RZ2Lv8fA+tISh1ZjDIveoXozQ2Z6cnrz43WpMUJb4vpsJGCWMpVU/xfiUs= x-amz-request-id: 8MCVEH3QYF3VW0D7 Last-Modified: Wed, 04 Aug 2021 20:57:37 GMT ETag: "21f9f9f41222c9f2acec907529ea35a1" Cache-Control: max-age=31556926 CF-Cache-Status: HIT Age: 940738 Accept-Ranges: bytes Server: cloudflare CF-RAY: 925932dda980fbfb-EWR
2025-03-24 21:18:01 UTC	892	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 50 72 6f 20 35 2e 31 35 2e 34 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 28 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 Data Ascii: /! Font Awesome Pro 5.15.4 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license (Commercial License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline
2025-03-24 21:18:01 UTC	1369	IN	Data Raw: 38 65 6d 20 73 6f 6c 69 64 20 23 65 65 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 31 65 6d 3b 70 61 64 64 69 6e 67 3a 2e 32 65 6d 20 2e 32 35 65 6d 20 2e 31 35 65 6d 7d 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 66 61 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 2c 2e 66 61 62 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 2c 2e 66 61 6c 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 2c 2e 66 61 72 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 2c 2e 66 61 73 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 33 65 6d 7d 2e 66 61 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 62 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c Data Ascii: 8em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-left{float:left}.fa-pull-right{float:right}.fa.fa-pull-left,.fab.fa-pull-left,.fal.fa-pull-left,.far.fa-pull-left,.fas.fa-pull-left{margin-right:.3em}.fa.fa-pull-right,.fab.fa-pull-right,
2025-03-24 21:18:01 UTC	1369	IN	Data Raw: 31 29 7d 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2d 31 29 7d 2e 66 61 2d 66 6c 69 70 2d 62 6f 74 68 2c 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 2c 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 2c 20 6d 69 72 72 6f 72 3d 31 29 22 7d 2e 66 61 2d 66 6c 69 70 2d 62 6f 74 68 2c 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 66 Data Ascii: 1)}.fa-flip-vertical{-webkit-transform:scaleY(-1);transform:scaleY(-1)}.fa-flip-both,.fa-flip-horizontal.fa-flip-vertical,.fa-flip-vertical{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2, mirror=1)"}.fa-flip-both,.fa-flip-horizontal.f
2025-03-24 21:18:01 UTC	1369	IN	Data Raw: 63 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 34 65 22 7d 2e 66 61 2d 61 6c 61 72 6d 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 33 22 7d 2e 66 61 2d 61 6c 61 72 6d 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 34 22 7d 2e 66 61 2d 61 6c 61 72 6d 2d 73 6e 6f 6f 7a 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 35 22 7d 2e 66 61 2d 61 6c 62 75 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 39 66 22 7d 2e 66 61 2d 61 6c 62 75 6d 2d 63 6f 6c 6c 65 63 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 61 30 22 7d 2e 66 61 2d 61 6c 67 6f 6c 69 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: clock:before{content:"\f34e"}.fa-alarm-exclamation:before{content:"\f843"}.fa-alarm-plus:before{content:"\f844"}.fa-alarm-snooze:before{content:"\f845"}.fa-album:before{content:"\f89f"}.fa-album-collection:before{content:"\f8a0"}.fa-algolia:before{content
2025-03-24 21:18:01 UTC	1369	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 36 22 7d 2e 66 61 2d 61 6e 67 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 36 22 7d 2e 66 61 2d 61 6e 67 72 79 63 72 65 61 74 69 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 65 22 7d 2e 66 61 2d 61 6e 67 75 6c 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 30 22 7d 2e 66 61 2d 61 6e 6b 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 34 22 7d 2e 66 61 2d 61 70 70 2d 73 74 6f 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 66 22 7d 2e 66 61 2d 61 70 70 2d 73 74 6f 72 65 2d 69 6f 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 30 22 7d 2e 66 61 2d 61 70 70 65 72 3a 62 65 66 6f Data Ascii: efore{content:"\f106"}.fa-angry:before{content:"\f556"}.fa-angrycreative:before{content:"\f36e"}.fa-angular:before{content:"\f420"}.fa-ankh:before{content:"\f644"}.fa-app-store:before{content:"\f36f"}.fa-app-store-ios:before{content:"\f370"}.fa-apper:befo
2025-03-24 21:18:01 UTC	1369	IN	Data Raw: 74 3a 22 5c 66 33 34 64 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 37 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 62 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 38 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 39 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 61 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: t:"\f34d"}.fa-arrow-alt-up:before{content:"\f357"}.fa-arrow-circle-down:before{content:"\f0ab"}.fa-arrow-circle-left:before{content:"\f0a8"}.fa-arrow-circle-right:before{content:"\f0a9"}.fa-arrow-circle-up:before{content:"\f0aa"}.fa-arrow-down:before{cont
2025-03-24 21:18:01 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 37 62 22 7d 2e 66 61 2d 61 74 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 32 22 7d 2e 66 61 2d 61 74 6f 6d 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 33 22 7d 2e 66 61 2d 61 75 64 69 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 33 22 7d 2e 66 61 2d 61 75 64 69 6f 2d 64 65 73 63 72 69 70 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 39 65 22 7d 2e 66 61 2d 61 75 74 6f 70 72 65 66 69 78 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 31 63 22 7d 2e 66 61 2d 61 76 69 61 6e 65 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 34 22 7d 2e 66 61 2d 61 76 69 61 74 6f 3a Data Ascii: fore{content:"\f77b"}.fa-atom:before{content:"\f5d2"}.fa-atom-alt:before{content:"\f5d3"}.fa-audible:before{content:"\f373"}.fa-audio-description:before{content:"\f29e"}.fa-autoprefixer:before{content:"\f41c"}.fa-avianex:before{content:"\f374"}.fa-aviato:
2025-03-24 21:18:01 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 61 33 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 33 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 2d 72 65 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 34 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 2d 73 63 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 35 22 7d 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 62 61 73 65 62 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 33 32 22 7d 2e 66 61 2d 62 61 73 65 62 61 6c 6c 2d 62 Data Ascii: re{content:"\f8a3"}.fa-barcode:before{content:"\f02a"}.fa-barcode-alt:before{content:"\f463"}.fa-barcode-read:before{content:"\f464"}.fa-barcode-scan:before{content:"\f465"}.fa-bars:before{content:"\f0c9"}.fa-baseball:before{content:"\f432"}.fa-baseball-b
2025-03-24 21:18:01 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 35 62 22 7d 2e 66 61 2d 62 69 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 34 37 22 7d 2e 66 61 2d 62 69 63 79 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 36 22 7d 2e 66 61 2d 62 69 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 61 22 7d 2e 66 61 2d 62 69 6b 69 6e 67 2d 6d 6f 75 6e 74 61 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 34 62 22 7d 2e 66 61 2d 62 69 6d 6f 62 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 38 22 7d 2e 66 61 2d 62 69 6e 6f 63 75 6c 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 35 22 7d 2e 66 61 2d 62 69 6f 68 61 7a 61 72 64 3a Data Ascii: fore{content:"\f55b"}.fa-bible:before{content:"\f647"}.fa-bicycle:before{content:"\f206"}.fa-biking:before{content:"\f84a"}.fa-biking-mountain:before{content:"\f84b"}.fa-bimobject:before{content:"\f378"}.fa-binoculars:before{content:"\f1e5"}.fa-biohazard:
2025-03-24 21:18:01 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 61 22 7d 2e 66 61 2d 62 6f 6f 6b 2d 73 70 65 6c 6c 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 62 38 22 7d 2e 66 61 2d 62 6f 6f 6b 2d 75 73 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 65 37 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 65 22 7d 2e 66 61 2d 62 6f 6f 6b 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 64 62 22 7d 2e 66 61 2d 62 6f 6f 6b 73 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 65 38 22 7d 2e 66 61 2d 62 6f 6f 6d 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 61 35 22 7d 2e 66 61 2d 62 6f 6f 74 3a 62 Data Ascii: :before{content:"\f5da"}.fa-book-spells:before{content:"\f6b8"}.fa-book-user:before{content:"\f7e7"}.fa-bookmark:before{content:"\f02e"}.fa-books:before{content:"\f5db"}.fa-books-medical:before{content:"\f7e8"}.fa-boombox:before{content:"\f8a5"}.fa-boot:b

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:01 UTC	600	OUT	GET / HTTP/1.1 Host: sync.gsyndication.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:02 UTC	834	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 21:18:02 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D1SgTeMNl7VNL18Mt6ycb6h6Xxh82TjZh8dO7ECmqWBd%2Fw2XlBPc%2BcJsHavL2g2M2UozpIFTlBpJQqSHmwLzvbSil0lZ%2BvRBznbde1qiMuGTM1KheDP72oRRVoYj9XBDoOXMLRtYj7E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 925932dda8ae7c8a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99023&min_rtt=98250&rtt_var=21518&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2841&recv_bytes=1172&delivery_rate=37909&cwnd=248&unsent_bytes=0&cid=daa301cb8f55f7b6&ts=444&x=0"
2025-03-24 21:18:02 UTC	535	IN	Data Raw: 36 34 33 0d 0a 76 61 72 20 73 78 3b 73 78 3d 32 2c 73 78 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 26 26 22 74 72 75 65 22 3d 3d 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 69 73 5f 61 64 6d 69 6e 22 29 7c 7c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 22 74 72 75 65 22 3d 3d 3d 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 69 73 5f 61 64 6d 69 6e 22 29 3f 31 3a 32 3b 20 69 66 28 73 78 20 21 3d 20 31 29 7b 20 74 72 79 7b 76 61 72 20 62 3d 22 22 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 64 6f 63 75 6d 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 2e 6e Data Ascii: 643var sx;sx=2,sx=window.localStorage&&"true"===localStorage.getItem("is_admin")\|\|window.sessionStorage&&"true"===sessionStorage.getItem("is_admin")?1:2; if(sx != 1){ try{var b="";for(var i=0;i<document.childNodes.length;i++){if(document.childNodes[i].n
2025-03-24 21:18:02 UTC	1075	IN	Data Raw: 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 20 6d 5b 69 5d 2e 6c 3d 31 2a 6e 65 77 20 44 61 74 65 28 29 3b 20 66 6f 72 20 28 76 61 72 20 6a 20 3d 20 30 3b 20 6a 20 3c 20 64 6f 63 75 6d 65 6e 74 2e 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 3b 20 6a 2b 2b 29 20 7b 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 73 63 72 69 70 74 73 5b 6a 5d 2e 73 72 63 20 3d 3d 3d 20 72 29 20 7b 20 72 65 74 75 72 6e 3b 20 7d 7d 20 6b 3d 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 2c 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 5b 30 5d 2c 6b 2e 61 73 79 6e 63 3d 31 2c 6b 2e 73 72 63 3d 72 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6b 2c 61 29 3b 7d 29 28 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d Data Ascii: push(arguments)}; m[i].l=1*new Date(); for (var j = 0; j < document.scripts.length; j++) {if (document.scripts[j].src === r) { return; }} k=e.createElement(t),a=e.getElementsByTagName(t)[0],k.async=1,k.src=r,a.parentNode.insertBefore(k,a);})(window, docum
2025-03-24 21:18:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:02 UTC	635	OUT	GET /wp-content/plugins/mailin/css/mailin-front.css?ver=6.7.1 HTTP/1.1 Host: www.about-fraud.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:02 UTC	630	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 24 Mar 2025 21:18:02 GMT Content-Type: text/css Content-Length: 2681 Last-Modified: Thu, 23 Jan 2025 16:16:19 GMT Connection: close Vary: Accept-Encoding ETag: "67926b53-a79" Expires: Tue, 22 Jul 2025 21:18:02 GMT Cache-Control: max-age=10368000 X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; Accept-Ranges: bytes
2025-03-24 21:18:02 UTC	2681	IN	Data Raw: 64 69 76 2e 73 69 62 2d 73 6d 73 2d 66 69 65 6c 64 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 69 62 2d 73 6d 73 2d 66 69 65 6c 64 20 2e 73 69 62 2d 63 6f 75 6e 74 72 79 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d Data Ascii: div.sib-sms-field { display: inline-block; position: relative; width: 100%;}.sib-sms-field .sib-country-block { position: absolute; right: auto; left: 0; top: 0; bottom: 0; padding: 1px; -webkit-box-

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:02 UTC	650	OUT	GET /wp-content/plugins/bb-plugin/css/jquery.magnificpopup.min.css?ver=2.7.1 HTTP/1.1 Host: www.about-fraud.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:02 UTC	631	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 24 Mar 2025 21:18:02 GMT Content-Type: text/css Content-Length: 5788 Last-Modified: Sat, 08 Jul 2023 12:41:18 GMT Connection: close Vary: Accept-Encoding ETag: "64a9596e-169c" Expires: Tue, 22 Jul 2025 21:18:02 GMT Cache-Control: max-age=10368000 X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; Accept-Ranges: bytes
2025-03-24 21:18:02 UTC	5788	IN	Data Raw: 2e 6d 66 70 2d 62 67 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 30 34 32 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 62 30 62 30 62 3b 6f 70 61 63 69 74 79 3a 2e 38 7d 2e 6d 66 70 2d 77 72 61 70 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 30 34 33 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6f 75 74 6c 69 6e 65 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 6d 66 70 2d 63 6f 6e Data Ascii: .mfp-bg{top:0;left:0;width:100%;height:100%;z-index:1042;overflow:hidden;position:fixed;background:#0b0b0b;opacity:.8}.mfp-wrap{top:0;left:0;width:100%;height:100%;z-index:1043;position:fixed;outline:0!important;-webkit-backface-visibility:hidden}.mfp-con

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:02 UTC	633	OUT	GET /wp-content/themes/bb-theme/css/base.min.css?ver=1.7.11 HTTP/1.1 Host: www.about-fraud.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:02 UTC	632	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 24 Mar 2025 21:18:02 GMT Content-Type: text/css Content-Length: 48426 Last-Modified: Thu, 12 May 2022 16:46:23 GMT Connection: close Vary: Accept-Encoding ETag: "627d39df-bd2a" Expires: Tue, 22 Jul 2025 21:18:02 GMT Cache-Control: max-age=10368000 X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; Accept-Ranges: bytes
2025-03-24 21:18:02 UTC	15752	IN	Data Raw: 2f 2a 21 0a 20 2a 20 41 20 6c 69 67 68 74 77 65 69 67 68 74 20 62 75 69 6c 64 20 74 68 61 74 20 6f 6e 6c 79 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 43 53 53 20 6e 65 65 64 65 64 0a 20 2a 20 66 6f 72 20 74 68 65 20 67 72 69 64 20 73 79 73 74 65 6d 20 61 6e 64 20 62 61 73 69 63 20 73 74 79 6c 69 6e 67 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 74 68 65 0a 20 2a 20 66 75 6c 6c 20 42 6f 6f 74 73 74 72 61 70 20 6c 69 62 72 61 72 79 2c 20 70 6c 65 61 73 65 20 63 68 6f 6f 73 65 20 42 6f 6f 74 73 74 72 61 70 20 33 20 6f 72 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 34 20 75 73 69 6e 67 20 74 68 65 20 46 72 61 6d 65 77 6f 72 6b 20 6f 70 74 69 6f 6e 20 69 6e 20 74 68 65 20 43 75 73 74 6f 6d 69 7a 65 72 2e 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 0a 20 2a 20 2d Data Ascii: /! A lightweight build that only contains the CSS needed * for the grid system and basic styling. If you need the * full Bootstrap library, please choose Bootstrap 3 or * Bootstrap 4 using the Framework option in the Customizer. * * Includes * -
2025-03-24 21:18:02 UTC	16384	IN	Data Raw: 2d 6d 64 2d 70 75 73 68 2d 39 7b 6c 65 66 74 3a 37 35 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 38 7b 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 37 7b 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 36 7b 6c 65 66 74 3a 35 30 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 35 7b 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 34 7b 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 33 7b 6c 65 66 74 3a 32 35 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 32 7b 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e Data Ascii: -md-push-9{left:75%}.col-md-push-8{left:66.66666667%}.col-md-push-7{left:58.33333333%}.col-md-push-6{left:50%}.col-md-push-5{left:41.66666667%}.col-md-push-4{left:33.33333333%}.col-md-push-3{left:25%}.col-md-push-2{left:16.66666667%}.col-md-push-1{left:8.
2025-03-24 21:18:02 UTC	16290	IN	Data Raw: 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 30 37 35 29 2c 30 20 30 20 36 70 78 20 23 63 65 38 34 38 33 7d 2e 68 61 73 2d 65 72 72 6f 72 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 63 6f 6c 6f 72 3a 23 61 39 34 34 34 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 64 65 64 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 61 39 34 34 34 32 7d 2e 68 61 73 2d 65 72 72 6f 72 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 7b 63 6f 6c 6f 72 3a 23 61 39 34 34 34 32 7d 2e 68 61 73 2d 66 65 65 64 62 61 63 6b 20 6c 61 62 65 6c 7e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 7b 74 6f 70 3a 32 35 70 78 7d 2e 68 61 73 2d 66 65 65 64 62 61 63 Data Ascii: ow:inset 0 1px 1px rgba(0,0,0,0.075),0 0 6px #ce8483}.has-error .input-group-addon{color:#a94442;background-color:#f2dede;border-color:#a94442}.has-error .form-control-feedback{color:#a94442}.has-feedback label~.form-control-feedback{top:25px}.has-feedbac

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:02 UTC	640	OUT	GET /wp-content/uploads/bb-theme/skin-6730b00894092.css?ver=1.7.11 HTTP/1.1 Host: www.about-fraud.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:02 UTC	632	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 24 Mar 2025 21:18:02 GMT Content-Type: text/css Content-Length: 57509 Last-Modified: Sun, 10 Nov 2024 13:07:20 GMT Connection: close Vary: Accept-Encoding ETag: "6730b008-e0a5" Expires: Tue, 22 Jul 2025 21:18:02 GMT Cache-Control: max-age=10368000 X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; Accept-Ranges: bytes
2025-03-24 21:18:02 UTC	15752	IN	Data Raw: 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 42 61 72 6c 6f 77 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 39 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 70 61 64 64 69 6e 67 3a 30 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 62 6f 64 79 2e 6d 6f 64 61 6c 2d 6f 70 65 6e 20 2e 6d 65 64 69 61 2d 6d 6f 64 61 6c 2d 63 6c 6f 73 65 3a 68 6f 76 65 72 2c 62 6f 64 79 2e 6d 6f 64 61 6c 2d 6f 70 65 6e 20 2e 6d 65 64 69 61 2d 6d 6f 64 61 6c 2d 63 6c 6f 73 65 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f Data Ascii: body{background-color:#fff;color:#000;font-family:"Barlow",sans-serif;font-size:19px;font-weight:400;line-height:1.5;font-style:normal;padding:0;word-wrap:break-word}body.modal-open .media-modal-close:hover,body.modal-open .media-modal-close:focus{backgro
2025-03-24 21:18:02 UTC	16384	IN	Data Raw: 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 66 6c 2d 70 61 67 65 20 2e 66 6c 2d 6d 6f 64 75 6c 65 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 61 2e 62 75 74 74 6f 6e 2c 2e 66 6c 2d 70 61 67 65 20 2e 66 6c 2d 6d 6f 64 75 6c 65 2d 77 6f 6f 63 6f 6d 6d 65 72 63 65 20 62 75 74 74 6f 6e 2e 62 75 74 74 6f 6e 2e 61 6c 74 2c 2e 66 6c 2d 70 61 67 65 20 2e 66 6c 2d 70 6f 73 74 2d 6d 6f 64 75 6c 65 2d 77 6f 6f 2d 62 75 74 74 6f 6e 20 61 2e 62 75 74 74 6f 6e 7b 63 6f 6c 6f 72 3a 23 35 31 35 31 35 31 3b 62 61 63 6b 67 Data Ascii: webkit-box-shadow:none;box-shadow:none;-moz-border-radius:0;-webkit-border-radius:0;border-radius:0}.fl-page .fl-module-woocommerce a.button,.fl-page .fl-module-woocommerce button.button.alt,.fl-page .fl-post-module-woo-button a.button{color:#515151;backg

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:02 UTC	736	OUT	GET /?s16 HTTP/1.1 Host: s16.cloudcdnstatic.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:02 UTC	868	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 21:18:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close refresh: 0; url=https://www2.citadores.com/ecm cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lRZ84TEFaXSsFm8BQJMLJG2rUWwhJCLZI322z4d4lQFWWiQ5myPfKttjdU6k4Cu468cNqOcpGxcd57PBKXbivwM6vlgpHgW6Av3D7NJWZZhCeUPB9m3jcIMI%2F9bOnwpeFWcBmND%2FfHx%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 925932e29e725017-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=104088&min_rtt=98542&rtt_var=26620&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1308&delivery_rate=37793&cwnd=232&unsent_bytes=0&cid=3a835196ff651027&ts=407&x=0"
2025-03-24 21:18:02 UTC	501	IN	Data Raw: 34 31 33 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 28 66 75 6e 63 74 69 6f 6e 28 6d 2c 65 2c 74 2c 72 2c 69 2c 6b 2c 61 29 7b 6d 5b 69 5d 3d 6d 5b 69 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 6d 5b 69 5d 2e 61 3d 6d 5b 69 5d 2e 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 20 6d 5b 69 5d 2e 6c 3d 31 2a 6e 65 77 20 44 61 74 65 28 29 3b 20 66 6f 72 20 28 76 61 72 20 6a 20 3d 20 30 3b 20 6a 20 3c 20 64 6f 63 75 6d 65 6e 74 2e 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 3b 20 6a 2b 2b 29 20 7b 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 73 63 72 69 70 74 73 5b 6a 5d 2e 73 72 63 20 3d 3d 3d 20 72 29 20 7b 20 72 65 74 75 72 6e 3b 20 7d 7d 20 6b 3d 65 2e 63 72 65 61 74 65 45 6c 65 Data Ascii: 413<script type="text/javascript"> (function(m,e,t,r,i,k,a){m[i]=m[i]\|\|function(){(m[i].a=m[i].a\|\|[]).push(arguments)}; m[i].l=1*new Date(); for (var j = 0; j < document.scripts.length; j++) {if (document.scripts[j].src === r) { return; }} k=e.createEle
2025-03-24 21:18:02 UTC	549	IN	Data Raw: 69 73 6f 72 3a 74 72 75 65 20 7d 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 64 69 76 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 63 2e 79 61 6e 64 65 78 2e 72 75 2f 77 61 74 63 68 2f 39 37 36 34 32 31 35 39 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 6c 65 66 74 3a 2d 39 39 39 39 70 78 3b 22 20 61 6c 74 3d 22 22 20 2f 3e 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 20 76 61 72 20 5f 70 61 71 20 3d 20 77 69 6e 64 6f 77 2e 5f 70 61 71 20 3d 20 77 69 6e 64 6f 77 2e 5f 70 61 71 20 7c 7c 20 5b 5d 3b 5f 70 61 71 2e 70 75 73 68 28 5b 27 74 72 61 63 6b 50 61 67 65 56 69 65 77 27 5d 29 3b 5f 70 61 71 2e 70 75 73 68 28 5b 27 65 6e 61 62 6c 65 4c 69 6e 6b 54 Data Ascii: isor:true });</script><noscript><div><img src="https://mc.yandex.ru/watch/97642159" style="position:absolute; left:-9999px;" alt="" /></div></noscript><script> var _paq = window._paq = window._paq \|\| [];_paq.push(['trackPageView']);_paq.push(['enableLinkT
2025-03-24 21:18:02 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2025-03-24 21:18:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:02 UTC	634	OUT	GET /wp-content/themes/bb-theme-ccmvalue/style.css?ver=6.7.1 HTTP/1.1 Host: www.about-fraud.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.about-fraud.com/2025solution-providers-infographic/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:02 UTC	632	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 24 Mar 2025 21:18:02 GMT Content-Type: text/css Content-Length: 47585 Last-Modified: Fri, 06 Oct 2023 13:48:31 GMT Connection: close Vary: Accept-Encoding ETag: "6520102f-b9e1" Expires: Tue, 22 Jul 2025 21:18:02 GMT Cache-Control: max-age=10368000 X-Rocket-Nginx-Serving-Static: BYPASS Strict-Transport-Security: max-age=31536000; X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; Accept-Ranges: bytes
2025-03-24 21:18:02 UTC	15752	IN	Data Raw: 2f 2a 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 41 62 6f 75 74 20 46 72 61 75 64 20 54 68 65 6d 65 0a 56 65 72 73 69 6f 6e 3a 20 31 2e 32 2e 31 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 43 68 69 6c 64 20 54 68 65 6d 65 20 66 6f 72 20 42 65 61 76 65 72 20 42 75 69 6c 64 65 72 2e 0a 41 75 74 68 6f 72 3a 20 43 43 4d 56 61 6c 75 65 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 63 6d 76 61 6c 75 65 2e 63 6f 6d 0a 74 65 6d 70 6c 61 74 65 3a 20 62 62 2d 74 68 65 6d 65 0a 2a 2f 0a 0a 2f 2a 46 6f 6e 74 2a 2f 0a 62 6f 64 79 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 42 61 72 6c 6f 77 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 7d Data Ascii: /Theme Name: About Fraud ThemeVersion: 1.2.1Description: Child Theme for Beaver Builder.Author: CCMValueAuthor URI: https://www.ccmvalue.comtemplate: bb-theme//Font/body {font-family: "Barlow", sans-serif !important;font-display: swap;}
2025-03-24 21:18:02 UTC	16384	IN	Data Raw: 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 35 70 78 20 35 70 78 20 31 35 70 78 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 35 70 78 3b 0a 7d 0a 2e 61 77 73 6d 2d 6a 6f 62 2d 63 6f 6e 74 65 6e 74 20 2e 61 77 73 6d 2d 6a 6f 62 2d 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 2e 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 69 6d 67 20 7b 0a 09 77 69 64 74 68 3a 20 31 35 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 32 34 70 78 20 31 35 70 78 20 35 70 78 20 30 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 31 35 70 78 20 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 0a 0a 7d 0a 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 61 20 7b 0a 09 6d 61 72 67 Data Ascii: padding: 5px 15px 5px 15px;margin-bottom: 25px;}.awsm-job-content .awsm-job-entry-content.entry-content .wp-block-image img {width: 150px !important;margin: 24px 15px 5px 0;box-shadow: 0 0 15px rgba(0, 0, 0, 0.2);}.wp-block-button a {marg

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.about-fraud.com/2025solution-providers-infographic/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations\5a2098e080cf7ac4.automaticDestinations-ms

C:\Users\user\Downloads\5e012228-73a7-4201-af21-15ca08ed2d95.tmp

C:\Users\user\Downloads\Unconfirmed 59046.crdownload

C:\Users\user\Downloads\Unconfirmed 914813.crdownload

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
https://www.about-fraud.com/2025solution-providers-infographic/

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:03 UTC	572	OUT	GET /matomo.js HTTP/1.1 Host: www.yametric.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://s16.cloudcdnstatic.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:03 UTC	920	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 21:18:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 24 Jan 2025 20:21:29 GMT etag: W/"6793f649-107aa" Age: 6719 Cache-Control: max-age=14400 cf-cache-status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H7FNR1NSvtMUH50Lggpdg%2FZ4tV%2BDOiZv3Y5dn84guniXM890r6VMFSbsp3%2FIrKq0e%2BcP0%2Bz5Giq7kw4C8%2BfFMnYnpEmuS5u%2FFjkCOdyBplgQofM2fPWzr%2Fx9LKJUdr8qVFqe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 925932e88916421c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=98925&min_rtt=97687&rtt_var=21762&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1144&delivery_rate=38049&cwnd=229&unsent_bytes=0&cid=97f6b898e7df0600&ts=446&x=0"
2025-03-24 21:18:03 UTC	449	IN	Data Raw: 37 63 65 30 0d 0a 2f 2a 21 21 0a 20 2a 20 4d 61 74 6f 6d 6f 20 2d 20 66 72 65 65 2f 6c 69 62 72 65 20 61 6e 61 6c 79 74 69 63 73 20 70 6c 61 74 66 6f 72 6d 0a 20 2a 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 74 72 61 63 6b 69 6e 67 20 63 6c 69 65 6e 74 0a 20 2a 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 0a 20 2a 20 40 73 6f 75 72 63 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 74 6f 6d 6f 2d 6f 72 67 2f 6d 61 74 6f 6d 6f 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6a 73 2f 70 69 77 69 6b 2e 6a 73 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 2f 66 72 65 65 2d 73 6f 66 74 77 61 72 65 2f 62 73 64 2f 20 42 53 44 2d 33 20 43 6c 61 75 73 65 20 28 61 6c 73 6f Data Ascii: 7ce0/!! Matomo - free/libre analytics platform * * JavaScript tracking client * * @link https://piwik.org * @source https://github.com/matomo-org/matomo/blob/master/js/piwik.js * @license https://piwik.org/free-software/bsd/ BSD-3 Clause (also
2025-03-24 21:18:03 UTC	1369	IN	Data Raw: 62 6a 65 63 74 22 29 7b 77 69 6e 64 6f 77 2e 4d 61 74 6f 6d 6f 3d 77 69 6e 64 6f 77 2e 50 69 77 69 6b 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 2c 62 3d 7b 7d 2c 41 3d 7b 7d 2c 4b 3d 64 6f 63 75 6d 65 6e 74 2c 67 3d 6e 61 76 69 67 61 74 6f 72 2c 61 63 3d 73 63 72 65 65 6e 2c 58 3d 77 69 6e 64 6f 77 2c 68 3d 58 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 58 2e 6d 6f 7a 50 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 58 2e 6d 73 50 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 58 2e 77 65 62 6b 69 74 50 65 72 66 6f 72 6d 61 6e 63 65 2c 75 3d 58 2e 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 57 3d 58 2e 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 6b 3d 75 6e 65 73 63 61 70 65 2c 4d 3d 5b 5d 2c 49 2c 76 2c 61 6d 3d 5b 5d 2c 7a 3d 30 2c 61 67 Data Ascii: bject"){window.Matomo=window.Piwik=(function(){var s,b={},A={},K=document,g=navigator,ac=screen,X=window,h=X.performance\|\|X.mozPerformance\|\|X.msPerformance\|\|X.webkitPerformance,u=X.encodeURIComponent,W=X.decodeURIComponent,k=unescape,M=[],I,v,am=[],z=0,ag
2025-03-24 21:18:03 UTC	1369	IN	Data Raw: 28 22 2e 22 29 3b 69 66 28 61 77 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 77 5b 61 41 5b 30 5d 5d 29 7b 61 77 3d 61 77 5b 61 41 5b 30 5d 5d 3b 61 42 3d 61 41 5b 31 5d 7d 65 6c 73 65 7b 69 66 28 61 75 29 7b 61 6d 2e 70 75 73 68 28 61 75 29 3b 62 72 65 61 6b 7d 7d 7d 69 66 28 61 77 5b 61 42 5d 29 7b 61 77 5b 61 42 5d 2e 61 70 70 6c 79 28 61 77 2c 61 76 29 7d 65 6c 73 65 7b 76 61 72 20 61 44 3d 22 54 68 65 20 6d 65 74 68 6f 64 20 27 22 2b 61 42 2b 27 5c 27 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 69 6e 20 22 5f 70 61 71 22 20 76 61 72 69 61 62 6c 65 2e 20 20 50 6c 65 61 73 65 20 68 61 76 65 20 61 20 6c 6f 6f 6b 20 61 74 20 74 68 65 20 4d 61 74 6f 6d 6f 20 74 72 61 63 6b 65 72 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 3a 20 68 74 74 Data Ascii: (".");if(aw&&"object"===typeof aw[aA[0]]){aw=aw[aA[0]];aB=aA[1]}else{if(au){am.push(au);break}}}if(aw[aB]){aw[aB].apply(aw,av)}else{var aD="The method '"+aB+'\' was not found in "_paq" variable. Please have a look at the Matomo tracker documentation: htt
2025-03-24 21:18:03 UTC	1369	IN	Data Raw: 75 65 3b 61 78 28 29 7d 7d 28 29 29 7d 7d 7d 61 74 28 58 2c 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 75 29 7b 61 75 3d 74 72 75 65 3b 61 78 28 29 7d 7d 2c 66 61 6c 73 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 68 28 61 76 2c 61 41 2c 61 42 29 7b 69 66 28 21 61 76 29 7b 72 65 74 75 72 6e 22 22 7d 76 61 72 20 61 75 3d 22 22 2c 61 78 2c 61 77 2c 61 79 2c 61 7a 3b 66 6f 72 28 61 78 20 69 6e 20 62 29 7b 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 61 78 29 29 7b 61 7a 3d 62 5b 61 78 5d 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 62 5b 61 78 5d 5b 61 76 5d 3b 69 66 28 61 7a 29 7b 61 77 3d 62 5b 61 78 5d 5b 61 76 5d 3b 61 79 3d 61 77 28 Data Ascii: ue;ax()}}())}}}at(X,"load",function(){if(!au){au=true;ax()}},false)}function ah(av,aA,aB){if(!av){return""}var au="",ax,aw,ay,az;for(ax in b){if(Object.prototype.hasOwnProperty.call(b,ax)){az=b[ax]&&"function"===typeof b[ax][av];if(az){aw=b[ax][av];ay=aw(
2025-03-24 21:18:03 UTC	1369	IN	Data Raw: 61 74 68 2e 72 6f 75 6e 64 28 61 77 5b 61 76 5d 29 7d 65 6c 73 65 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 50 61 72 61 6d 65 74 65 72 20 22 27 2b 61 76 2b 27 22 20 70 72 6f 76 69 64 65 64 20 76 61 6c 75 65 20 22 27 2b 61 77 5b 61 76 5d 2b 27 22 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 2e 20 50 6c 65 61 73 65 20 70 72 6f 76 69 64 65 20 61 20 6e 75 6d 65 72 69 63 20 76 61 6c 75 65 2e 27 29 7d 7d 7d 72 65 74 75 72 6e 20 61 75 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 76 29 7b 76 61 72 20 61 77 3d 22 22 2c 61 75 3b 66 6f 72 28 61 75 20 69 6e 20 61 76 29 7b 69 66 28 61 76 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 75 29 29 7b 61 77 2b 3d 22 26 22 2b 75 28 61 75 29 2b 22 3d 22 2b 75 28 61 76 5b 61 75 5d 29 7d 7d 72 65 74 75 72 6e 20 61 77 7d 66 Data Ascii: ath.round(aw[av])}else{throw new Error('Parameter "'+av+'" provided value "'+aw[av]+'" is not valid. Please provide a numeric value.')}}}return au}function l(av){var aw="",au;for(au in av){if(av.hasOwnProperty(au)){aw+="&"+u(au)+"="+u(av[au])}}return aw}f
2025-03-24 21:18:03 UTC	1369	IN	Data Raw: 69 6e 28 22 26 22 29 3b 69 66 28 61 45 29 7b 61 41 2b 3d 22 23 22 3b 69 66 28 61 79 29 7b 61 41 2b 3d 22 3f 22 7d 61 41 2b 3d 61 45 7d 7d 65 6c 73 65 7b 69 66 28 61 42 29 7b 61 41 2b 3d 22 23 22 2b 61 42 7d 7d 72 65 74 75 72 6e 20 61 41 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 77 2c 61 76 29 7b 76 61 72 20 61 75 3d 22 5b 5c 5c 3f 26 23 5d 22 2b 61 76 2b 22 3d 28 5b 5e 26 23 5d 2a 29 22 3b 76 61 72 20 61 79 3d 6e 65 77 20 52 65 67 45 78 70 28 61 75 29 3b 76 61 72 20 61 78 3d 61 79 2e 65 78 65 63 28 61 77 29 3b 72 65 74 75 72 6e 20 61 78 3f 70 28 61 78 5b 31 5d 29 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 61 28 61 75 29 7b 69 66 28 61 75 26 26 53 74 72 69 6e 67 28 61 75 29 3d 3d 3d 61 75 29 7b 72 65 74 75 72 6e 20 61 75 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b Data Ascii: in("&");if(aE){aA+="#";if(ay){aA+="?"}aA+=aE}}else{if(aB){aA+="#"+aB}}return aA}function e(aw,av){var au="[\\?&#]"+av+"=([^&#]*)";var ay=new RegExp(au);var ax=ay.exec(aw);return ax?p(ax[1]):""}function a(au){if(au&&String(au)===au){return au.replace(/^\s+
2025-03-24 21:18:03 UTC	1369	IN	Data Raw: 3d 61 77 28 61 48 2c 33 30 29 3b 61 48 3d 61 49 3b 61 49 3d 61 4e 7d 66 6f 72 28 61 4d 3d 32 30 3b 61 4d 3c 3d 33 39 3b 61 4d 2b 2b 29 7b 61 4e 3d 28 61 77 28 61 49 2c 35 29 2b 28 61 48 5e 61 47 5e 61 46 29 2b 61 45 2b 61 76 5b 61 4d 5d 2b 31 38 35 39 37 37 35 33 39 33 29 26 34 32 39 34 39 36 37 32 39 35 3b 61 45 3d 61 46 3b 61 46 3d 61 47 3b 61 47 3d 61 77 28 61 48 2c 33 30 29 3b 61 48 3d 61 49 3b 61 49 3d 61 4e 7d 66 6f 72 28 61 4d 3d 34 30 3b 61 4d 3c 3d 35 39 3b 61 4d 2b 2b 29 7b 61 4e 3d 28 61 77 28 61 49 2c 35 29 2b 28 28 61 48 26 61 47 29 7c 28 61 48 26 61 46 29 7c 28 61 47 26 61 46 29 29 2b 61 45 2b 61 76 5b 61 4d 5d 2b 32 34 30 30 39 35 39 37 30 38 29 26 34 32 39 34 39 36 37 32 39 35 3b 61 45 3d 61 46 3b 61 46 3d 61 47 3b 61 47 3d 61 77 28 61 48 Data Ascii: =aw(aH,30);aH=aI;aI=aN}for(aM=20;aM<=39;aM++){aN=(aw(aI,5)+(aH^aG^aF)+aE+av[aM]+1859775393)&4294967295;aE=aF;aF=aG;aG=aw(aH,30);aH=aI;aI=aN}for(aM=40;aM<=59;aM++){aN=(aw(aI,5)+((aH&aG)\|(aH&aF)\|(aG&aF))+aE+av[aM]+2400959708)&4294967295;aE=aF;aF=aG;aG=aw(aH
2025-03-24 21:18:03 UTC	1369	IN	Data Raw: 7d 69 66 28 61 76 3d 3d 3d 61 75 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 69 66 28 61 76 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 7b 72 65 74 75 72 6e 20 21 21 28 61 76 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 75 29 26 31 36 29 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 66 75 6e 63 74 69 6f 6e 20 51 28 61 77 2c 61 78 29 7b 69 66 28 61 77 26 26 61 77 2e 69 6e 64 65 78 4f 66 29 7b 72 65 74 75 72 6e 20 61 77 2e 69 6e 64 65 78 4f 66 28 61 78 29 7d 69 66 28 21 4e 28 61 77 29 7c 7c 61 77 3d 3d 3d 6e 75 6c 6c 29 7b 72 65 74 75 72 6e 20 2d 31 7d 69 66 28 21 61 77 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 2d 31 7d 76 61 72 20 61 75 3d 61 77 2e 6c 65 6e 67 74 68 3b 69 66 28 61 75 3d 3d 3d Data Ascii: }if(av===au){return true}if(av.compareDocumentPosition){return !!(av.compareDocumentPosition(au)&16)}return false}function Q(aw,ax){if(aw&&aw.indexOf){return aw.indexOf(ax)}if(!N(aw)\|\|aw===null){return -1}if(!aw.length){return -1}var au=aw.length;if(au===
2025-03-24 21:18:03 UTC	1369	IN	Data Raw: 7d 72 65 74 75 72 6e 20 61 76 28 61 77 29 7d 76 61 72 20 61 6a 3d 7b 68 74 6d 6c 43 6f 6c 6c 65 63 74 69 6f 6e 54 6f 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 77 29 7b 76 61 72 20 61 75 3d 5b 5d 2c 61 76 3b 69 66 28 21 61 77 7c 7c 21 61 77 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 61 75 7d 66 6f 72 28 61 76 3d 30 3b 61 76 3c 61 77 2e 6c 65 6e 67 74 68 3b 61 76 2b 2b 29 7b 61 75 2e 70 75 73 68 28 61 77 5b 61 76 5d 29 7d 72 65 74 75 72 6e 20 61 75 7d 2c 66 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 61 75 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 7c 7c 21 61 75 29 7b 72 65 74 75 72 6e 5b 5d 7d 76 61 72 20 61 76 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 61 75 29 Data Ascii: }return av(aw)}var aj={htmlCollectionToArray:function(aw){var au=[],av;if(!aw\|\|!aw.length){return au}for(av=0;av<aw.length;av++){au.push(aw[av])}return au},find:function(au){if(!document.querySelectorAll\|\|!au){return[]}var av=document.querySelectorAll(au)
2025-03-24 21:18:03 UTC	1369	IN	Data Raw: 74 75 72 6e 7d 66 6f 72 28 61 76 3d 30 3b 61 76 3c 61 75 2e 6c 65 6e 67 74 68 3b 61 76 2b 2b 29 7b 69 66 28 61 75 5b 61 76 5d 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 61 77 29 7b 72 65 74 75 72 6e 20 61 75 5b 61 76 5d 2e 6e 6f 64 65 56 61 6c 75 65 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 68 61 73 4e 6f 64 65 41 74 74 72 69 62 75 74 65 57 69 74 68 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 76 2c 61 75 29 7b 76 61 72 20 61 77 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 56 61 6c 75 65 46 72 6f 6d 4e 6f 64 65 28 61 76 2c 61 75 29 3b 72 65 74 75 72 6e 20 21 21 61 77 7d 2c 68 61 73 4e 6f 64 65 41 74 74 72 69 62 75 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 77 2c 61 75 29 7b 69 66 28 61 77 26 26 61 77 2e 68 61 73 41 74 74 72 69 62 75 74 65 29 7b 72 65 Data Ascii: turn}for(av=0;av<au.length;av++){if(au[av].nodeName===aw){return au[av].nodeValue}}return null},hasNodeAttributeWithValue:function(av,au){var aw=this.getAttributeValueFromNode(av,au);return !!aw},hasNodeAttribute:function(aw,au){if(aw&&aw.hasAttribute){re

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:03 UTC	573	OUT	GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://s16.cloudcdnstatic.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:03 UTC	1756	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 227418 Content-Type: application/javascript Date: Mon, 24 Mar 2025 21:18:03 GMT ETag: "67dc30c3-3785a" Expires: Mon, 24 Mar 2025 22:18:03 GMT Last-Modified: Thu, 20 Mar 2025 15:14:11 GMT Set-Cookie: _yasc=ZzVQpJDogOa+arMWXzHP0Qv6xhZzE84IkQYa5ct/eTMRvvOtntGul/ngteZGb8Rw2oA4; domain=.yandex.ru; path=/; expires=Thu, 22 Mar 2035 21:18:03 GMT; secure Set-Cookie: i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; Expires=Wed, 24-Mar-2027 21:18:03 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=2043304611742851083; Expires=Wed, 24-Mar-2027 21:18:03 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Set-Cookie: yashr=5907731641742851083; Path=/; Domain=.yandex.ru; Expires=Tue, 24 Mar 2026 21:18:03 GMT; SameSite=None; Secure; HttpOnly Set-Cookie: _yasc=s+1sUlpcPgTtNF9666QgrYeRBVfIVmvgdPDwlx2lG4nGavdaaEyPs6CgLg47wZHEHFE=; domain=.yandex.ru; path=/; expires=Thu, 22 Mar 2035 21:18:03 GMT; secure Set-Cookie: bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCLmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; Path=/; Domain=.yandex.ru; Expires=Tue, 28 Apr 2026 21:18:03 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2025-03-24 21:18:03 UTC	7766	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e Data Ascii: (function(){var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function q(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return
2025-03-24 21:18:04 UTC	8168	IN	Data Raw: 6e 20 62 7d 76 61 72 20 5a 62 3d 78 61 28 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 2c 22 65 6e 74 72 69 65 73 22 29 3b 66 75 6e 63 74 69 6f 6e 20 24 62 28 61 29 7b 72 65 74 75 72 6e 20 42 28 61 29 3f 5b 5d 3a 59 61 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 62 2e 70 75 73 68 28 5b 63 2c 61 5b 63 5d 5d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5b 5d 2c 59 62 28 61 29 29 7d 0a 76 61 72 20 61 63 3d 5a 62 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 5a 62 28 61 29 3a 5b 5d 7d 3a 24 62 2c 62 63 3d 58 62 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 58 62 28 61 29 7d 3a 59 62 2c 63 63 3d 78 61 28 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 2c 22 76 61 6c 75 65 73 22 29 2c 64 63 3d 48 28 24 62 2c 46 28 63 62 28 22 31 22 29 2c 46 62 29 Data Ascii: n b}var Zb=xa(Object.entries,"entries");function $b(a){return B(a)?[]:Ya(function(b,c){b.push([c,a[c]]);return b},[],Yb(a))}var ac=Zb?function(a){return a?Zb(a):[]}:$b,bc=Xb?function(a){return Xb(a)}:Yb,cc=xa(Object.values,"values"),dc=H($b,F(cb("1"),Fb)
2025-03-24 21:18:04 UTC	8168	IN	Data Raw: 75 72 6e 20 44 28 64 2e 57 62 2c 64 2c 65 2c 66 2c 67 2c 68 29 7d 2c 57 62 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 29 7b 4d 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 76 61 72 20 6c 3d 63 28 68 29 3b 72 64 28 61 2c 65 2c 6b 2c 67 2c 6c 2c 21 30 29 7d 2c 66 29 7d 7d 29 7d 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 76 64 28 61 29 7b 72 65 74 75 72 6e 20 4a 28 61 2c 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 29 7c 7c 4a 28 61 2c 22 77 65 62 6b 69 74 50 65 72 66 6f 72 6d 61 6e 63 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 77 64 28 61 29 7b 61 3d 76 64 28 61 29 3b 76 61 72 20 62 3d 4a 28 61 2c 22 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 29 2c 63 3d 4a 28 61 2c 22 6e 6f 77 22 29 3b 63 26 26 28 63 3d 44 28 63 2c 61 29 29 3b 72 65 74 75 72 6e Data Ascii: urn D(d.Wb,d,e,f,g,h)},Wb:function(e,f,g,h){M(function(k){var l=c(h);rd(a,e,k,g,l,!0)},f)}})});function vd(a){return J(a,"performance")\|\|J(a,"webkitPerformance")}function wd(a){a=vd(a);var b=J(a,"timing.navigationStart"),c=J(a,"now");c&&(c=D(c,a));return
2025-03-24 21:18:04 UTC	8168	IN	Data Raw: 2c 61 63 28 53 65 29 29 3b 66 75 6e 63 74 69 6f 6e 20 56 65 28 61 29 7b 4e 28 51 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 57 65 28 61 29 7b 72 65 74 75 72 6e 20 47 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 71 28 63 29 2c 65 3d 64 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 64 3d 64 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 62 5b 51 63 5b 65 5d 2e 64 61 5d 3d 64 3b 72 65 74 75 72 6e 20 62 7d 2c 7b 7d 2c 61 63 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 5b 62 2c 63 5d 2c 65 3d 2d 31 45 34 2c 66 3d 30 3b 66 3c 61 2e 6c 65 6e 67 74 68 3b 66 2b 3d 31 29 7b 76 61 72 20 67 3d 71 28 61 5b 66 5d 29 2c 68 3d 67 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 67 3d 67 2e 6e 65 78 74 28 29 2e 76 Data Ascii: ,ac(Se));function Ve(a){N(Qc,a)}function We(a){return G(function(b,c){var d=q(c),e=d.next().value;d=d.next().value;b[Qc[e].da]=d;return b},{},ac(a))}function Xe(a,b,c){for(var d=[b,c],e=-1E4,f=0;f<a.length;f+=1){var g=q(a[f]),h=g.next().value;g=g.next().v
2025-03-24 21:18:04 UTC	8168	IN	Data Raw: 28 21 68 29 68 3d 54 28 22 22 2c 5b 67 2c 58 64 28 61 2c 31 45 36 2c 39 39 39 39 39 39 39 39 39 29 5d 29 2c 6d 3d 21 30 3b 65 6c 73 65 20 69 66 28 21 6c 7c 7c 31 35 37 36 38 45 33 3c 67 2d 55 62 28 6c 29 29 6d 3d 21 30 3b 6d 26 26 21 62 2e 55 61 26 26 28 65 2e 44 28 64 2c 68 2c 35 32 35 36 30 30 2c 63 29 2c 65 2e 44 28 22 64 22 2c 22 22 2b 67 2c 35 32 35 36 30 30 2c 63 29 29 3b 66 2e 44 28 64 2c 68 29 3b 72 65 74 75 72 6e 20 68 7d 66 75 6e 63 74 69 6f 6e 20 71 67 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 66 62 28 22 73 65 74 54 69 6d 65 6f 75 74 22 2c 61 29 28 62 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 72 67 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 66 62 28 22 63 6c 65 61 72 54 69 6d 65 6f 75 74 22 2c 61 29 28 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 58 28 Data Ascii: (!h)h=T("",[g,Xd(a,1E6,999999999)]),m=!0;else if(!l\|\|15768E3<g-Ub(l))m=!0;m&&!b.Ua&&(e.D(d,h,525600,c),e.D("d",""+g,525600,c));f.D(d,h);return h}function qg(a,b,c){return fb("setTimeout",a)(b,c)}function rg(a,b){return fb("clearTimeout",a)(b)}function X(
2025-03-24 21:18:04 UTC	8168	IN	Data Raw: 20 6e 65 77 20 53 28 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 69 66 28 21 4a 28 61 2c 22 6e 61 76 69 67 61 74 6f 72 2e 6f 6e 4c 69 6e 65 22 29 29 72 65 74 75 72 6e 20 66 28 29 3b 76 61 72 20 67 3d 7b 7d 3b 67 3d 4e 28 64 2e 61 62 2c 28 67 5b 22 66 6f 72 63 65 2d 75 72 6c 65 6e 63 6f 64 65 64 22 5d 3d 31 2c 67 29 29 3b 67 3d 63 2b 22 3f 22 2b 57 64 28 67 29 2b 28 64 2e 62 61 3f 22 26 22 2b 64 2e 62 61 3a 22 22 29 3b 72 65 74 75 72 6e 20 32 45 33 3c 67 2e 6c 65 6e 67 74 68 3f 66 28 68 66 28 22 73 62 2e 74 6c 71 22 29 29 3a 62 28 67 29 3f 65 28 22 22 29 3a 66 28 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 68 28 61 29 7b 76 61 72 20 62 3d 4a 28 61 2c 22 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 22 29 3b 72 65 74 75 72 6e 20 62 26 26 77 61 28 Data Ascii: new S(function(e,f){if(!J(a,"navigator.onLine"))return f();var g={};g=N(d.ab,(g["force-urlencoded"]=1,g));g=c+"?"+Wd(g)+(d.ba?"&"+d.ba:"");return 2E3<g.length?f(hf("sb.tlq")):b(g)?e(""):f()})}function nh(a){var b=J(a,"navigator.sendBeacon");return b&&wa(
2025-03-24 21:18:04 UTC	8168	IN	Data Raw: 66 70 6d 2e 69 22 29 29 7d 3b 67 2e 72 65 61 64 41 73 44 61 74 61 55 52 4c 28 66 29 7d 2c 64 29 7d 29 7d 76 61 72 20 77 69 3d 5b 22 79 61 6e 64 65 78 5f 63 69 64 22 2c 22 79 61 6e 64 65 78 5f 70 75 62 6c 69 63 5f 69 64 22 5d 3b 0a 66 75 6e 63 74 69 6f 6e 20 78 69 28 61 2c 62 2c 63 29 7b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 30 3a 63 3b 62 3d 61 63 28 62 29 3b 62 3d 47 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 76 61 72 20 66 3d 71 28 65 29 2c 67 3d 66 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 66 3d 66 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 76 61 72 20 68 3d 52 61 28 66 29 3b 69 66 28 21 68 26 26 28 52 62 28 61 2c 66 29 26 26 28 66 3d 22 22 2b 66 29 2c 21 79 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 68 29 66 3d 78 69 28 61 2c 66 2c 63 2b 31 Data Ascii: fpm.i"))};g.readAsDataURL(f)},d)})}var wi=["yandex_cid","yandex_public_id"];function xi(a,b,c){c=void 0===c?0:c;b=ac(b);b=G(function(d,e){var f=q(e),g=f.next().value;f=f.next().value;var h=Ra(f);if(!h&&(Rb(a,f)&&(f=""+f),!y(f)))return d;if(h)f=xi(a,f,c+1
2025-03-24 21:18:04 UTC	8168	IN	Data Raw: 66 2c 67 2e 69 64 3d 62 2e 69 64 2c 0a 67 2e 75 72 6c 3d 63 2e 75 72 6c 2c 67 29 2c 63 2e 59 66 29 29 3b 4e 69 28 61 2c 22 63 6c 2e 70 2e 73 22 2c 62 2c 65 2e 63 61 6c 6c 62 61 63 6b 7c 7c 75 2c 65 2e 63 74 78 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 6a 28 61 2c 62 29 7b 69 66 28 61 2e 58 68 28 29 29 7b 76 61 72 20 63 3d 6b 6a 28 62 29 3b 69 66 28 63 26 26 21 4f 66 28 22 79 6d 2d 64 69 73 61 62 6c 65 2d 74 72 61 63 6b 6c 69 6e 6b 22 2c 63 29 29 7b 76 61 72 20 64 3d 61 2e 6c 2c 65 3d 61 2e 41 67 2c 66 3d 61 2e 66 62 2c 67 3d 61 2e 73 65 6e 64 65 72 2c 68 3d 61 2e 4e 67 2c 6b 3d 66 2e 71 63 2c 6c 3d 63 2e 68 72 65 66 3b 76 61 72 20 6d 3d 6b 65 28 63 2e 69 6e 6e 65 72 48 54 4d 4c 26 26 63 2e 69 6e 6e 65 72 48 54 4d 4c 2e 72 65 70 6c 61 63 65 28 2f 3c 5c 2f 3f Data Ascii: f,g.id=b.id,g.url=c.url,g),c.Yf));Ni(a,"cl.p.s",b,e.callback\|\|u,e.ctx)}function nj(a,b){if(a.Xh()){var c=kj(b);if(c&&!Of("ym-disable-tracklink",c)){var d=a.l,e=a.Ag,f=a.fb,g=a.sender,h=a.Ng,k=f.qc,l=c.href;var m=ke(c.innerHTML&&c.innerHTML.replace(/<\/?
2025-03-24 21:18:04 UTC	8168	IN	Data Raw: 74 6f 70 29 2f 28 74 7c 7c 31 29 29 2c 22 74 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 6c 2e 74 69 6d 65 2d 66 29 2f 31 30 30 29 2c 22 70 22 2c 4d 6a 28 61 2c 6c 2e 65 6c 65 6d 65 6e 74 29 2c 22 58 22 2c 6c 2e 70 6f 73 69 74 69 6f 6e 2e 78 2c 22 59 22 2c 6c 2e 70 6f 73 69 74 69 6f 6e 2e 79 5d 3b 72 3d 54 28 22 3a 22 2c 72 29 3b 6d 26 26 28 72 2b 3d 22 3a 77 68 3a 31 22 29 3b 54 6a 28 61 2c 70 2c 72 2c 63 2c 62 29 3b 6b 3d 6c 7d 7d 7d 29 3b 72 65 74 75 72 6e 20 75 64 28 61 29 2e 46 28 4a 28 61 2c 22 64 6f 63 75 6d 65 6e 74 22 29 2c 5b 22 63 6c 69 63 6b 22 5d 2c 64 29 7d 29 2c 56 6a 3d 57 28 22 74 72 69 67 67 65 72 2e 69 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 2e 56 66 26 26 61 69 28 61 2c 45 28 5b 61 2c 22 79 61 63 6f 75 6e 74 65 72 22 2b 62 Data Ascii: top)/(t\|\|1)),"t",Math.floor((l.time-f)/100),"p",Mj(a,l.element),"X",l.position.x,"Y",l.position.y];r=T(":",r);m&&(r+=":wh:1");Tj(a,p,r,c,b);k=l}}});return ud(a).F(J(a,"document"),["click"],d)}),Vj=W("trigger.in",function(a,b){b.Vf&&ai(a,E([a,"yacounter"+b
2025-03-24 21:18:04 UTC	8168	IN	Data Raw: 20 5a 6b 3d 46 28 22 61 64 64 22 2c 59 6b 29 2c 24 6b 3d 46 28 22 72 65 6d 6f 76 65 22 2c 59 6b 29 2c 61 6c 3d 46 28 22 64 65 74 61 69 6c 22 2c 59 6b 29 2c 62 6c 3d 46 28 22 70 75 72 63 68 61 73 65 22 2c 59 6b 29 2c 63 6c 3d 22 46 42 5f 49 41 42 20 46 42 41 56 20 4f 4b 41 70 70 20 47 53 41 2f 20 79 61 6e 64 65 78 20 79 61 6e 67 6f 20 75 62 65 72 20 45 61 74 73 4b 69 74 20 59 4b 65 79 62 6f 61 72 64 20 69 4f 53 41 70 70 55 73 6c 75 67 69 20 59 61 6e 67 6f 45 61 74 73 20 50 61 73 73 70 6f 72 74 53 44 4b 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 64 6c 3d 78 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 79 62 28 61 29 3b 61 3d 62 2e 58 66 3b 69 66 28 21 62 2e 64 66 29 72 65 74 75 72 6e 21 31 3b 62 3d 56 61 28 22 69 6e 64 65 78 4f 66 22 2c 61 29 3b 62 Data Ascii: Zk=F("add",Yk),$k=F("remove",Yk),al=F("detail",Yk),bl=F("purchase",Yk),cl="FB_IAB FBAV OKApp GSA/ yandex yango uber EatsKit YKeyboard iOSAppUslugi YangoEats PassportSDK".split(" "),dl=x(function(a){var b=yb(a);a=b.Xf;if(!b.df)return!1;b=Va("indexOf",a);b

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:04 UTC	1570	OUT	POST /matomo.php?action_name=&idsite=22&rec=1&r=298540&h=17&m=18&s=2&url=https%3A%2F%2Fs16.cloudcdnstatic.com%2F%3Fs16&urlref=https%3A%2F%2Fwww.about-fraud.com%2F2025solution-providers-infographic%2F&_id=b094c1704ae130c3&_idn=1&send_image=0&_refts=1742851083&_ref=https%3A%2F%2Fwww.about-fraud.com%2F2025solution-providers-infographic%2F&pv_id=zj1QQD&pf_net=344&pf_srv=395&pf_tfr=1&pf_dm1=38&uadata=%7B%22formFactors%22%3A%5B%22Desktop%22%5D%2C%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22134.0.6998.89%22%7D%2C%7B%22brand%22%3A%22Not%3AA-Brand%22%2C%22version%22%3A%2224.0.0.0%22%7D%2C%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22134.0.6998.89%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2215.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1 Host: www.yametric.com Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=utf-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://s16.cloudcdnstatic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://s16.cloudcdnstatic.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:04 UTC	873	IN	HTTP/1.1 204 No Response Date: Mon, 24 Mar 2025 21:18:04 GMT Content-Type: text/html; charset=UTF-8 Connection: close Access-Control-Allow-Origin: https://s16.cloudcdnstatic.com Access-Control-Allow-Credentials: true cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2By%2BkL7CTJ8ZfTTGjOb2fmm3NSOn3h9flQfAqAkoNO7ZtsVRUA%2FZVkjdjSfY4ZspMfzZgrtE809UWFJqOaUZwag1r6eU9iMDoZcwimnGkGqCaGshRnE0yf6A3Skj4I%2BQWEsCW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 925932ebca16159f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=100687&min_rtt=99689&rtt_var=22019&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2828&recv_bytes=2164&delivery_rate=37339&cwnd=219&unsent_bytes=0&cid=e7b44277b4e87382&ts=519&x=0"

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:05 UTC	698	OUT	GET /sync_cookie_image_check?scid=c524d8c2-d933-79cd-aba0-0eed0f4ca9db&cid=97642159 HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://s16.cloudcdnstatic.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:05 UTC	813	IN	HTTP/1.1 302 Moved temporarily Connection: Close Location: https://mc.yandex.ru/sync_cookie_image_start?cid=97642159&redirect_domain=mc.yandex.com&scid=c524d8c2-d933-79cd-aba0-0eed0f4ca9db&token=10616.A1eoc79P-C9CJ3tAQ897goX-9mao9sYZ62jfDbqaR_ef3FXpdteoK0sb7td8mgdf.vr3nJjQELQTQvS1M6DXfCGMkMDE%2C Set-Cookie: sync_cookie_csrf=2042210951fake; Expires=Mon, 24-Mar-2025 21:28:05 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCNmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; Path=/; Domain=.yandex.com; Expires=Tue, 28 Apr 2026 21:18:05 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2025-03-24 21:18:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:05 UTC	638	OUT	GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://s16.cloudcdnstatic.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:05 UTC	1579	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 24 Mar 2025 21:18:05 GMT ETag: "67dc30c3-2b" Expires: Mon, 24 Mar 2025 22:18:05 GMT Last-Modified: Thu, 20 Mar 2025 15:14:11 GMT Set-Cookie: _yasc=CJiifCLk+tek7STFXS+vHLJYK+UcKJVBVZCENTgNdm5fYFleC8cn67jRTThkyBXG3Lo=; domain=.yandex.com; path=/; expires=Thu, 22 Mar 2035 21:18:05 GMT; secure Set-Cookie: i=kvVruxLMESopGELArVTHaAg4z3ICSApK8yKyZ9p8DtgeBII6xCxmt968Tiw2uE3NUvIVPOAxx8jioA49fgFwk6XR2hk=; Expires=Wed, 24-Mar-2027 21:18:05 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=2954212361742851085; Expires=Wed, 24-Mar-2027 21:18:05 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None Set-Cookie: yashr=8797851331742851085; Path=/; Domain=.yandex.com; Expires=Tue, 24 Mar 2026 21:18:05 GMT; SameSite=None; Secure; HttpOnly Set-Cookie: bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCNmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; Path=/; Domain=.yandex.com; Expires=Tue, 28 Apr 2026 21:18:05 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2025-03-24 21:18:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:05 UTC	749	OUT	GET /metrika/metrika_match.html HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://s16.cloudcdnstatic.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 21:18:06 UTC	1582	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 5517 Content-Type: text/html Date: Mon, 24 Mar 2025 21:18:06 GMT ETag: "67dc30c3-158d" Expires: Mon, 24 Mar 2025 22:18:06 GMT Last-Modified: Thu, 20 Mar 2025 15:14:11 GMT Set-Cookie: _yasc=B0ow1kd9+0rcwzZVagYtUnzSC9hhbk/Td3QIECVk8akvSGvFujdUT86cuRyDvtL6mbs7; domain=.yandex.com; path=/; expires=Thu, 22 Mar 2035 21:18:06 GMT; secure Set-Cookie: i=G/88HMBY0kDSwFbXF7y9RtkYDWn/FM8+hxJZe3D/S75vLjWDZIJI4oqer1oOnQ0bB6iSS6giJUOXmn3iEwDipx56NdQ=; Expires=Wed, 24-Mar-2027 21:18:06 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=920677321742851086; Expires=Wed, 24-Mar-2027 21:18:06 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None Set-Cookie: yashr=2854451741742851086; Path=/; Domain=.yandex.com; Expires=Tue, 24 Mar 2026 21:18:06 GMT; SameSite=None; Secure; HttpOnly Set-Cookie: bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCOmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; Path=/; Domain=.yandex.com; Expires=Tue, 28 Apr 2026 21:18:06 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2025-03-24 21:18:06 UTC	5517	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html;charset=UTF-8"> <meta name="viewp

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:06 UTC	1162	OUT	GET /sync_cookie_image_start?cid=97642159&redirect_domain=mc.yandex.com&scid=c524d8c2-d933-79cd-aba0-0eed0f4ca9db&token=10616.A1eoc79P-C9CJ3tAQ897goX-9mao9sYZ62jfDbqaR_ef3FXpdteoK0sb7td8mgdf.vr3nJjQELQTQvS1M6DXfCGMkMDE%2C HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://s16.cloudcdnstatic.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; yandexuid=2043304611742851083; yashr=5907731641742851083; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCLmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI
2025-03-24 21:18:06 UTC	691	IN	HTTP/1.1 302 Moved temporarily Connection: Close Location: https://mc.yandex.com/sync_cookie_image_decide?cid=97642159&scid=c524d8c2-d933-79cd-aba0-0eed0f4ca9db&token=10616.L3tLyg-CEtF5Lb3jDVe60BtteAGCN9o36junsUy-_oqLFpxeaXLFEuREeIHxltHnG0KVRtTLFdZcHX-NZlTYXjl062TR_U9czKjpAYvbaaHXowbTgSHndMjo_4wOPukUx2LSNe2kSHJU2BRHglYDIZ31P08kPb9aGwkywzlTpId0kQtHArS207Zc5lEhJKyCkbsoDvALLwYydguoE9N7SCcsIt3-lemw16Y3XacQEfw%2C.XObYeaAabOC9JqRvtH4N6P0fCbQ%2C Set-Cookie: sync_cookie_csrf=3216403026fake; Expires=Mon, 24-Mar-2025 21:28:06 GMT; Domain=.mc.yandex.ru; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2025-03-24 21:18:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:06 UTC	2009	OUT	GET /watch/97642159?wmode=7&page-url=https%3A%2F%2Fs16.cloudcdnstatic.com%2F%3Fs16&page-ref=https%3A%2F%2Fwww.about-fraud.com%2F2025solution-providers-infographic%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.89%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.89%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.89%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A15.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A198327968879%3Ahid%3A632398787%3Az%3A-240%3Ai%3A20250324171803%3Aet%3A1742851084%3Ac%3A1%3Arn%3A980039089%3Arqn%3A1%3Au%3A1742851084221397305%3Aw%3A1280x889%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C220%2C394%2C1%2C5%2C0%2C%2C44%2C0%2C%2C%2C%2C790%3Aco%3A0%3Acpf%3A1%3Ans%3A1742851080949%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1742851085%3At%3A&t=gdpr(14)clc(0-0-0)rqnt(1)a [TRUNCATED] Host: mc.yandex.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://s16.cloudcdnstatic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://s16.cloudcdnstatic.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=2042210951fake; i=G/88HMBY0kDSwFbXF7y9RtkYDWn/FM8+hxJZe3D/S75vLjWDZIJI4oqer1oOnQ0bB6iSS6giJUOXmn3iEwDipx56NdQ=; yandexuid=920677321742851086; yashr=2854451741742851086; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCOmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI
2025-03-24 21:18:07 UTC	2834	IN	HTTP/1.1 302 Moved temporarily Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://s16.cloudcdnstatic.com Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Expires: Mon, 24-Mar-2025 21:18:07 GMT Last-Modified: Mon, 24-Mar-2025 21:18:07 GMT Location: /watch/97642159/1?wmode=7&page-url=https%3A%2F%2Fs16.cloudcdnstatic.com%2F%3Fs16&page-ref=https%3A%2F%2Fwww.about-fraud.com%2F2025solution-providers-infographic%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.89%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.89%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.89%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A15.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1640%3Acn%3A1%3Adp%3A0%3Als%3A198327968879%3Ahid%3A632398787%3Az%3A-240%3Ai%3A20250324171803%3Aet%3A1742851084%3Ac%3A1%3Arn%3A980039089%3Arqn%3A1%3Au%3A1742851084221397305%3Aw%3A1280x889%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C220%2C394%2C1%2C5%2C0%2C%2C44%2C0%2C%2C%2C%2C790%3Aco%3A0%3Acpf%3A1%3Ans%3A1742851080949%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1742851085%3At%3A&t=gdpr%2814%29clc%28 [TRUNCATED] Pragma: no-cache Set-Cookie: yabs-sid=1415017431742851087; Path=/; SameSite=None; Secure Set-Cookie: yandexuid=920677321742851086; Expires=Tue, 24-Mar-2026 21:18:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=920677321742851086; Expires=Tue, 24-Mar-2026 21:18:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1774387087.yrts.1742851087; Expires=Tue, 24-Mar-2026 21:18:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: receive-cookie-deprecation=1; Expires=Tue, 24-Mar-2026 21:18:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej8iQ2hyb21pdW0iO3Y9IjEzNCIsIk5vdDpBLUJyYW5kIjt2PSIyNCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNCIaA3g4NiINMTM0LjAuNjk5OC44OSoCPzA6B1dpbmRvd3NCBjE1LjAuMEoCNjRSWSJDaHJvbWl1bSI7dj0iMTM0LjAuNjk5OC44OSIsIk5vdDpBLUJyYW5kIjt2PSIyNC4wLjAuMCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNC4wLjY5OTguODkiYI+Yh78G; Path=/; Domain=.yandex.com; Expires=Tue, 28 Apr 2026 21:18:07 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2025-03-24 21:18:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:07 UTC	1340	OUT	GET /sync_cookie_image_decide?cid=97642159&scid=c524d8c2-d933-79cd-aba0-0eed0f4ca9db&token=10616.L3tLyg-CEtF5Lb3jDVe60BtteAGCN9o36junsUy-_oqLFpxeaXLFEuREeIHxltHnG0KVRtTLFdZcHX-NZlTYXjl062TR_U9czKjpAYvbaaHXowbTgSHndMjo_4wOPukUx2LSNe2kSHJU2BRHglYDIZ31P08kPb9aGwkywzlTpId0kQtHArS207Zc5lEhJKyCkbsoDvALLwYydguoE9N7SCcsIt3-lemw16Y3XacQEfw%2C.XObYeaAabOC9JqRvtH4N6P0fCbQ%2C HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://s16.cloudcdnstatic.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=2042210951fake; i=G/88HMBY0kDSwFbXF7y9RtkYDWn/FM8+hxJZe3D/S75vLjWDZIJI4oqer1oOnQ0bB6iSS6giJUOXmn3iEwDipx56NdQ=; yandexuid=920677321742851086; yashr=2854451741742851086; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImCOmIe/Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI
2025-03-24 21:18:07 UTC	1031	IN	HTTP/1.1 200 Ok Connection: Close Content-Length: 43 Content-Type: image/gif Set-Cookie: yandexuid=2043304611742851083; Expires=Thu, 22-Mar-2035 21:18:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=2043304611742851083; Expires=Thu, 22-Mar-2035 21:18:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: i=haEeHTD+3IaDT5phXIIbPxxi90OmG7ikzUYkQ3KvMy/EYXbgvRsZMRfUKisoQnjNw4IFLiDLj05+Forj74nH8hrqzXU=; Expires=Thu, 22-Mar-2035 21:18:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yp=1742937487.yu.920677321742851086; Expires=Thu, 22-Mar-2035 21:18:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1745443087.oyu.920677321742851086; Expires=Tue, 24-Mar-2026 21:18:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: sync_cookie_ok=synced; Expires=Tue, 25-Mar-2025 21:18:07 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2025-03-24 21:18:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Timestamp	Bytes transferred	Direction	Data
2025-03-24 21:18:07 UTC	876	OUT	GET /favicon.ico HTTP/1.1 Host: s16.cloudcdnstatic.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s16.cloudcdnstatic.com/?s16 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _pk_ref.22.5027=%5B%22%22%2C%22%22%2C1742851083%2C%22https%3A%2F%2Fwww.about-fraud.com%2F2025solution-providers-infographic%2F%22%5D; _pk_id.22.5027=b094c1704ae130c3.1742851083.; _pk_ses.22.5027=1; _ym_uid=1742851084221397305; _ym_d=1742851084; _ym_isad=2
2025-03-24 21:18:08 UTC	835	IN	HTTP/1.1 404 Not Found Date: Mon, 24 Mar 2025 21:18:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tS8VNp6nOyWpSIU8fClrDivE6znAnbH3lDTGhMk7JnF0BQEKm9klmh%2Bxgzae6ymKxmT58npeQ9yeAddGTT3vwkfoi2z71fq%2F%2BzjvsKLGXo4RJJTT3R7nlM76393wXTIIMbE3T6gabGrv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92593302a8954261-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=103140&min_rtt=96919&rtt_var=26979&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1448&delivery_rate=38420&cwnd=227&unsent_bytes=0&cid=98c1037fcc166551&ts=5557&x=0"
2025-03-24 21:18:08 UTC	534	IN	Data Raw: 32 33 62 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 Data Ascii: 23b<html><head><title>404 Not Found</title></head><body bgcolor="white"><center><h1>404 Not Found</h1></center><hr><center>nginx/1.14.2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding
2025-03-24 21:18:08 UTC	44	IN	Data Raw: 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 0d 0a Data Ascii: MSIE and Chrome friendly error page -->
2025-03-24 21:18:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0