Play interactive tourEdit tour

Windows Analysis Report
https://www.google.com/url?rct=j&sa=t&url=https://fischer-baupro.de/south-state-bank-locations.html&ct=ga&cd=CAEYASoTMjAxNTMxNTQ2Njc0Mjk3OTUyNDIaYTBmZWVhZTA3M2MyMDJhMDpjb206ZW46VVM&usg=AOvVaw3lhiJJ-nclIGfQxEWGuu5s

Overview

General Information

Sample URL:	https://www.google.com/url?rct=j&sa=t&url=https://fischer-baupro.de/south-state-bank-locations.html&ct=ga&cd=CAEYASoTMjAxNTMxNTQ2Njc0Mjk3OTUyNDIaYTBmZWVhZTA3M2MyMDJhMDpjb206ZW46VVM&usg=AOvVaw3lhiJJ-nc
Analysis ID:	693233
Infos:

Detection

GRQ Scam

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected GRQ Scam

Antivirus detection for URL or domain

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiFncUt0OEoL3ZCH7GZg5Vz2r9Zee2S4R8LscyE20oDyAMT7g9qgVNbSeilbKXmWVajp5iHUbLuQpm9WyZdtTW65

SlashNext: Label: Fraudulent Website type: Phishing & Social Engineering

Source: https://burnihhell.live/vKWM7L?return=js.client&&se_referrer=https%3A%2F%2Fwww.google.com%2F&default_keyword=south+state+bank+locations&sub_id_1=fischer-baupro.de&sub_id_2=fischer-baupro.de&sub_id_3=2207_1&sub_id_4=http%3A%2F%2Ffischer-baupro.de%2Fsouth-state-bank-locations.html&sub_id_5=2908_1_ID1952_USA032SP_7DE_700k_D_KEY_PIE&landing_url=fischer-baupro.de%2Fsouth-state-bank-locations.html&name=_cYQs8vMzBN584Mtz&host=https%3A%2F%2Fburnihhell.live%2FvKWM7L

Avira URL Cloud: Label: phishing

Compliance

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 141.95.108.187:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.95.108.187:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.58.240:443 -> 192.168.2.5:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.58.224:443 -> 192.168.2.5:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.58.240:443 -> 192.168.2.5:50039 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.58.224:443 -> 192.168.2.5:50041 version: TLS 1.2

Networking

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: accounts.google.com

Downloads compressed data via HTTP

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Tue, 30 Aug 2022 17:25:25 GMTContent-Type: text/htmlContent-Length: 40170Connection: keep-alivecache-control: privatecontent-encoding: gzipvary: Accept-Encodingset-cookie: sid=t1~oqlpyhtakt0grbwyudejb4zl; path=/set-cookie: sid=t1~oqlpyhtakt0grbwyudejb4zl; path=/set-cookie: p1=https://unsisany.live/kckgabmd/; path=/set-cookie: s1=rbeai42efuebfmb0; path=/Cache-Control: no-transformData Raw: 1f 8b 08 00 00 00 00 00 04 00 ed bd 07 60 1c 49 96 25 26 2f 6d ca 7b 7f 4a f5 4a d7 e0 74 a1 08 80 60 13 24 d8 90 40 10 ec c1 88 cd e6 92 ec 1d 69 47 23 29 ab 2a 81 ca 65 56 65 5d 66 16 40 cc ed 9d bc f7 de 7b ef bd f7 de 7b ef bd f7 ba 3b 9d 4e 27 f7 df ff 3f 5c 66 64 01 6c f6 ce 4a da c9 9e 21 80 aa c8 1f 3f 7e 7c 1f 3f 22 1e ff ae 4f bf 3c 79 f3 fb bc 3c 4d e7 ed a2 4c 5f 7e f5 e4 f9 d9 49 fa d1 f6 dd bb df bd 77 72 f7 ee d3 37 4f d3 df fb db 6f be 78 9e ee 8e 77 d2 d7 6d 5d 4c db bb 77 4f 5f 7c 94 7e 34 6f db d5 a3 bb 77 af ae ae c6 57 f7 c6 55 7d 71 f7 cd ab bb ef 00 65 17 af e9 af db 0d bf 33 9e b5 b3 8f 8e 7e e3 e4 31 3e 4c df 2d ca 65 f3 59 04 c2 ee c3 87 0f e5 45 69 9c 67 b3 a3 c7 cd b4 2e 56 ed d1 f9 7a 39 6d 8b 6a 99 d6 f9 2f 5a e7 4d fb bc 58 be dd ba f3 8b eb bc 5d d7 cb f4 17 37 79 d3 d0 b7 67 b3 47 df fb b8 29 66 1f 8f 3e 6e 77 7f 69 f5 8b ca d5 f5 bc cd de b6 3b 17 f5 e4 ea 7a 3d cb 7f 7a b2 ff 83 f2 e3 ef 8f 56 bb d4 90 5a 01 89 86 b0 58 2f 9b a2 c9 96 d7 e3 b2 b8 cc ef be 9d be bd c8 26 8b d9 5d 6a f9 d3 cd b3 d5 49 7d bd 6a ab df 2b bf 96 97 ea 49 9e 15 fb 7b f9 f9 3a 9f 9c 2f 26 3b 1f 7f ff 97 1c fe 92 c7 77 15 d3 df 38 f9 b1 c7 6d d1 96 f9 d1 e3 bb f2 13 9f 2c f2 36 4b 97 d9 22 ff ec a3 cb 22 bf 5a 55 75 fb 51 3a ad 96 6d be 6c 3f fb e8 aa 98 b5 f3 cf ee ed ed 8c 8a 65 d1 16 59 b9 dd 4c b3 32 ff 6c f7 a3 bb 78 9b 88 d1 b4 d7 65 9e b6 d7 2b 02 d0 e6 ef da bb d3 a6 01 95 be f5 8b 17 59 7d 51 2c 1f ed 1c ae b2 d9 ac 58 5e 3c da f9 25 93 6a 76 fd 8b 67 45 b3 2a b3 eb 47 e7 65 fe ee 10 ff 6c cf 8a 3a 67 22 3e 9a 56 e5 7a b1 3c 3c a7 fe 1f dd db d9 49 77 77 76 7e f7 bb bb e3 fb e9 b7 f3 f2 32 6f 8b 69 96 be c8 d7 f9 88 48 d2 6c 37 79 5d 9c 1f 4e 32 22 4a 5d ad 97 b3 47 3f 7e 6f 72 9f a6 ea 90 a0 54 f5 a3 1f 3f 3f 3f 3f 5c 14 cb ed 79 5e 5c cc db 47 04 eb 72 fe 4b 56 bf 98 81 ef ee 2a e0 27 59 f3 36 af 2f 8b b2 cc 47 2f b3 32 6b 8b 65 95 d2 24 56 18 92 fd 64 f4 79 4e 8c 50 64 5e c7 bf 04 6c 90 d7 e1 70 b2 b2 b8 58 d2 f7 e5 f9 a3 a6 cd ea f6 90 09 88 ae 7f f7 c3 49 f5 6e bb 29 7e 00 4a 4c aa 9a 5e dd a6 4f 2c 71 c6 f7 f3 45 30 96 9d 9d 1d ed 22 9d ef 32 d2 78 3b 67 cc 99 40 db 57 76 5c 87 a0 fc 76 5b 13 72 e7 55 bd 78 b4 5e ad f2 7a 9a 35 f9 61 99 b7 2d f5 d4 ac b2 29 f7 b2 f3 69 be 70 60 53 12 83 6a 79 f1 8b 2d c1 76 f7 1f de 33 5f 13 a5 68 48 8f 76 05 38 8f ec 51 8d 1e a5 77 9e f8 47 45 4b 5f 4c 79 62 8f 1a 99 44 4b 91 65 b5 cc 95 00 84 eb e4 6d d1 6e 2f b2 77 db ca 5c fa 8d ff 89 72 4c b6 6e 2b bf d3 29 7d 97 d7 41 1f 47 86 24 4a 03 e2 15 c5 0a 24 da bb b7 f3 bb 87 cd 57 86 1b c7 34 fe

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /url?rct=j&sa=t&url=https://fischer-baupro.de/south-state-bank-locations.html&ct=ga&cd=CAEYASoTMjAxNTMxNTQ2Njc0Mjk3OTUyNDIaYTBmZWVhZTA3M2MyMDJhMDpjb206ZW46VVM&usg=AOvVaw3lhiJJ-nclIGfQxEWGuu5s HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CKK1yQEIlbbJAQiktskBCMS2yQEIqZ3KAQiIgcsBCJWhywEI4LvMAQjjvMwBCObAzAEImsHMAQiywcwBCMXBzAEI1sHMAQicycwBCOPLzAE=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /south-state-bank-locations.html HTTP/1.1Host: fischer-baupro.deConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vKWM7L?return=js.client&&se_referrer=https%3A%2F%2Fwww.google.com%2F&default_keyword=south+state+bank+locations&sub_id_1=fischer-baupro.de&sub_id_2=fischer-baupro.de&sub_id_3=2207_1&sub_id_4=http%3A%2F%2Ffischer-baupro.de%2Fsouth-state-bank-locations.html&sub_id_5=2908_1_ID1952_USA032SP_7DE_700k_D_KEY_PIE&landing_url=fischer-baupro.de%2Fsouth-state-bank-locations.html&name=_cYQs8vMzBN584Mtz&host=https%3A%2F%2Fburnihhell.live%2FvKWM7L HTTP/1.1Host: burnihhell.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://fischer-baupro.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: fischer-baupro.deConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=mibo1ua9jkpdkfik8tp0acp1m6; _subid=2ahlv1ltcuuk7; dd066=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjQ3XCI6MTY2MTg4MDMyMn0sXCJjYW1wYWlnbnNcIjp7XCI2XCI6MTY2MTg4MDMyMn0sXCJ0aW1lXCI6MTY2MTg4MDMyMn0ifQ.KuetivPYYcqPfUoNMm9TrRlG3ZL-zbzBIb7E2uwqtmI
Source: global traffic	HTTP traffic detected: GET /kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiFncUt0OEoL3ZCH7GZg5Vz2r9Zee2S4R8LscyE20oDyAMT7g9qgVNbSeilbKXmWVajp5iHUbLuQpm9WyZdtTW65 HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/2008_2.css HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiFncUt0OEoL3ZCH7GZg5Vz2r9Zee2S4R8LscyE20oDyA
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/2008.css HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiFncUt0OEoL3ZCH7GZg5Vz2r9Zee2S4R8LscyE20oDyAMT
Source: global traffic	HTTP traffic detected: GET /media/mainstream/flag-icon/css/flag-icon.css HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiFncUt0OEoL3ZCH7GZg5Vz2r9Zee2S4R8L
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/2008_3.js HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiFncUt0OEoL3ZCH7GZg5Vz2r9Zee2S4R8LscyE20oDyAMT7g9qgVNbSeilb
Source: global traffic	HTTP traffic detected: GET /media/mainstream/icon.js HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiFncUt0OEoL3ZCH7GZg5Vz2r9Zee2S4R8LscyE20oDyAMT7g9qgVNbSeilbKXmWVajp5
Source: global traffic	HTTP traffic detected: GET /media/mainstream/sound.js HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiFncUt0OEoL3ZCH7GZg5Vz2r9Zee2S4R8LscyE20oDyAMT7g9qgVNbSeilbKXmWVajp
Source: global traffic	HTTP traffic detected: GET /media/mainstream/u.js HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiFncUt0OEoL3ZCH7GZg5Vz2r9Zee2S4R8LscyE20oDyAMT7g9qgVNbSeilbKXmWVajp5iHU
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/2008_1.js HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiFncUt0OEoL3ZCH7GZg5Vz2r9Zee2S4R8LscyE20oDyAMT7g9qgVNbSeilb
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/de/2.js HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiFncUt0OEoL3ZCH7GZg5Vz2r9Zee2S4R8LscyE20oDyAMT7g9qgVNbSeilbKX
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/logo.png HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1K
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/top_red.png HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRa
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/x1.png HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiF
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/iphone13pro.png HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/box-iphone13pro.png HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHT
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/muti_iphone13pro.png HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHH
Source: global traffic	HTTP traffic detected: GET /s/opensans/v17/mem8YaGs126MiZpBA-UFVZ0bf8pkAg.woff2 HTTP/1.1Host: fonts.gstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://3019.unsisany.livesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKK1yQEIlbbJAQiktskBCMS2yQEIqZ3KAQiVocsBCOC7zAEI47zMAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://3019.unsisany.live/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ExtService.svc/getextparams HTTP/1.1Host: jsontdsexit2.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://3019.unsisany.liveSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://3019.unsisany.live/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/like.png HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1K
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr2.jpg HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1Ki
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr3.jpg HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1Ki
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr1.jpg HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1Ki
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/box_open.png HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVR
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/box_closed.png HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2F
Source: global traffic	HTTP traffic detected: GET /media/mainstream/flag-icon/flags/1x1/ch.svg HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/media/mainstream/flag-icon/css/flag-icon.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie1=true
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr4.jpg HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1Ki
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr5.jpg HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1Ki
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr6.jpg HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1Ki
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr11.jpg HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1K
Source: global traffic	HTTP traffic detected: GET /media/mainstream/alert.mp3 HTTP/1.1Host: 3019.unsisany.liveConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://3019.unsisany.live/kckgabmd/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop&f=1&sid=t1~oqlpyhtakt0grbwyudejb4zl&fp=xIhT60nRvfEyp6BWQQIRTTE3xlKqNU2a2Y%2FfsZHnZ4wOH%2B3YwoVkT%2BUCLZJh%2B9EaXM7%2FlWE49AOACapohukpAs6mSaifuBHLLnPfEHUCntf1AEJoyMFJS4Vx0OyXKglyNEChlLMHkQUmb751itQzbNHQ%2BFOyNgiZBsG8y097%2FDD8Jerp98uYSqiaUEZA8wal%2BDTfMZtnwG0NcqfFsGsJKM8kgAzamEz7WK8jdr0tqcg2kDEkYo3FXGD9QzYlKV%2FwAvbJQ3056%2FJe73QcNL4iulPQj0nmMrRfeGfAto%2FnCs7%2FUiusgswjodVHSeYGXMihe1%2Bq1MtIK0kK0Sfp%2BBW0JgoFla1dQObOXkNFcZrQiQvO9JIlNkGY8SawEdC0eTuFm3J1enH2%2F6bY9vx51QAlCbOFYh94YnNzRvBgCAYQp4CJ0M88uHr8CtBqz4JCC4OlCBkjuyxjHm0zoIL8mbm3TDq%2Bqh0FKBnF8hqs8CKTVTRl4Bq4gzuryLlvhVg8tulKWUT6ngXxa5ogxJLnACR%2FjLHldMtFeoxUYRkAsxyRErd2wLDbWV9MqIK02zC8WlcfThKzg4QBpvNhOucLgyo4hrmuxk2NdKAkZZuZ4b9Em5D4LxjfzwAyj5WENIdJvBX%2FTeIV0yZ0LNeMCbeOlqysanFdym%2ByRwTTOczi7xA4SEYGN%2BGwbPAYWA6MwD%2BC8hHU3Q5MtwdABPT0fVYCulw1r1wxla%2B%2FktRoWKNgBeA8Wpx0Rzc%2B3q4Yu8LnneXqgVOvNKoNWu3XujrZg1CM3Z0dG6OXEg3PYCwnkPIyWIZE0BbS%2F%2FDu5xjZ2mIcRFYqZwU%2BWXsJkQ5WoNji9tbN092kipqAga4MpwV4GycgkYC98l9N0GoUmpNN5ZLurAcOjzdsZ0oS3%2F3xeLjk6nHj2uD4KiLtJMgRQcRFs8CvQs%2BVTmuA3MBapPRlcOK4asMTDuQ7SfZuX5qlexHs2GvyFnWBuYC5y0sIhN85JMFFvHNRF8IS592roz5gEfVnE7TPnYPtdzG5U%2FYVmDUsM86tk2tKvpY1Xhk0fxUbMe7XGKgPPVFVUzgvd6rIEJszSdLlcjDOsApWesVjBTUhvp6RKacRKSHutsS2EgLuSX6yYkWef1R29axPWxBTRfIekWbjHzLL6CnZte2s0f%2FqQLy93ASJaxxppUmNNEKpXsJCzZamqe03vFGt3jDGuAOREhMHbcnQ4E%2BVnR3I%2F9EClGBl2mRhMt%2FLNKC49guyHMSKM%2FugTKkRO6xYAIhwtoghfxnhog83s61ZEgAZT2nHGkOrhq3Nc6qx%2FCkVXV9CDhL%2FEkEmhuSAJdU107LC0mHXYWUa4IZWbP3GDV2Mm973UcO518yqoV0l3hH3IQ38YxlWWI6jg%2BeBYydJ1hVfvCY80JWHjfzWb7X3klP95LWrxq7kMUAP0rS4UmHMN98%2F%2FfVxBPkxzfxbBZ5bapEOoRn%2FqoPq2ozfF7%2FnZ7WhfNIzU55XrPNatP63K06b%2FLHFl4lPP87QROcQOaALGX4sLn64YxLDyss4pNkOuH0bwZJIeumpyWyGuPrXMrXtU2ykQhy37pYXFSqyEHyFKOPSQr5Hj9GX8kvcFYwiMOH5D72wchs%2FvT7sFIUIOM8fjS0%2FFOIjsBhwCZcCsbTKb9ZbAk08xEbSGZTSE9bjDCjo8irmLxEIG8ueNMThUcqxEIlu%2FZ0FsL7rA7ZNW6b9nt8fh7PS32pa10kOu0k4T1V2s5%2B33YDCa73ww3SrC4vJcn1IOnO6aKEyPMoT4KN%2BjL9kDq7HmssRbAsDGY6%2BZB0FjT6G793fL5q2LIikWYCuW5RU5HoXqDsU6iiq%2FhD4sjbQHlaTN9HlgRSdOdyUxipfylJ7fbMrIUzixp98MUkjmyDOZ%2BYmRasji491AO4hbcm%2FyJpk3uYBmu7O4LgHJP9lxHJxdrsuKpc9OLQI%2FbWP%2F54M9kTr7YgAXDZO%2BUE3jJ5dGFUaz5IXF3p%2BO10S%2Fzjy3dboWF%2FUlkwKKh%2BJ37N3o7Yb7THiZwZA%2B6VNu2c6YEutLYuNE8goh2YZh9wltztpS5x%2FovjxHOX%2FId0d9waK%2BnoMH%2F7XslwOkaTQj6oChpkb3HfJZvazvLsJfsKbVWoVv43CnkIKJeaQcy9ND7dFUv%2F4JRShI%2BIlH%2F7UEc9QlMXpG4cxShVL0fMjBCzPSES6qx%2B6kUqnIuK3HYt%2ByCRexHHTke%2FVRaz1KiFncUt0OEoL3ZCH7GZg5Vz2r9Zee2S4R8LscyE20oDyAMT7g9qgVNbSeilbKXmWVajp5iH
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/box-iphone13pro.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/x1.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/box_open.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/muti_iphone13pro.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/box_closed.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr1.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/like.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr2.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr3.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/logo.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/iphone13pro.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr4.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/top_red.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr5.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr6.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/all/ab/fr11.jpg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /media/mainstream/flag-icon/flags/1x1/ch.svg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: 3019.unsisany.live
Source: global traffic	HTTP traffic detected: GET /ffe176a3.js HTTP/1.1Host: use.fonticons.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legacy.export.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://legacy.export.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Universal-Federated-Analytics-Min.js?agency=DOC&subagency=ITA HTTP/1.1Host: dap.digitalgov.govConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legacy.export.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKK1yQEIlbbJAQiktskBCMS2yQEIqZ3KAQiVocsBCOC7zAEI47zMAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legacy.export.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1Host: fonts.gstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://legacy.export.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKK1yQEIlbbJAQiktskBCMS2yQEIqZ3KAQiVocsBCOC7zAEI47zMAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.googleapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ga.js HTTP/1.1Host: ssl.google-analytics.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legacy.export.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gtm.js?id=GTM-PGM46GV HTTP/1.1Host: www.googletagmanager.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://legacy.export.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://legacy.export.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kits/ffe176a3/publications/72113/woff2.css HTTP/1.1Host: fonticons-free-fonticons.netdna-ssl.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://legacy.export.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1105848083&utmhn=legacy.export.gov&utmcs=UTF-8&utmsr=1280x1024&utmvp=1280x913&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Terms%20of%20Sale%20%7C%20export.gov&utmhid=183006407&utmr=-&utmp=%2Farticle%3Fid%3DTerms-of-Sale&utmht=1661912752890&utmac=UA-28628707-1&utmcc=__utma%3D44725115.422870169.1661912753.1661912753.1661912753.1%3B%2B__utmz%3D44725115.1661912753.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1118422204&utmredir=1&utmu=qBAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1Host: ssl.google-analytics.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://legacy.export.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/lato/v23/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1Host: fonts.gstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://legacy.export.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKK1yQEIlbbJAQiktskBCMS2yQEIqZ3KAQiVocsBCOC7zAEI47zMAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.googleapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1Host: fonts.gstatic.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Origin: https://legacy.export.govsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKK1yQEIlbbJAQiktskBCMS2yQEIqZ3KAQiVocsBCOC7zAEI47zMAQiywcwBCMXBzAEI1sHMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://fonts.googleapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__utm.gif?utmwv=5.7.2&utms=2&utmn=1406500330&utmhn=legacy.export.gov&utmt=event&utme=5(10_seconds*read)&utmcs=UTF-8&utmsr=1280x1024&utmvp=1280x913&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Terms%20of%20Sale%20%7C%20export.gov&utmhid=183006407&utmr=-&utmp=%2Farticle%3Fid%3DTerms-of-Sale&utmht=1661912763071&utmac=UA-28628707-1&utmcc=__utma%3D44725115.422870169.1661912753.1661912753.1661912753.1%3B%2B__utmz%3D44725115.1661912753.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=6BAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1Host: ssl.google-analytics.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://legacy.export.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qscripts/quantum-cms.js HTTP/1.1Host: cdn.quantummetric.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cms.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/04d273ebc4?a=120065501&v=1216.487a282&to=ZgBRMRcAXxVRAENYX19KcgYRCF4IHydFREBQCW8LCgVUOnMMWUVCXglfABc9fwlUBmFYVUYmXAsRE14KXAZFHA5HDFYS&rst=22870&ck=1&ref=https://www.cms.gov/CCIIO/Resources/Regulations-and-Guidance&ap=6173&be=2137&fe=7321&dc=5902&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1661912756119,%22n%22:0,%22f%22:5,%22dn%22:223,%22dne%22:223,%22c%22:223,%22s%22:225,%22ce%22:448,%22rq%22:448,%22rp%22:1219,%22rpe%22:2134,%22dl%22:1337,%22di%22:5901,%22ds%22:5901,%22de%22:6005,%22dc%22:7320,%22l%22:7320,%22le%22:8735%7D,%22navigation%22:%7B%7D%7D&fp=5899&fcp=5899&at=SkdSR18aTBs%3D&jsonp=NREUM.setToken HTTP/1.1Host: gov-bam.nr-data.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cms.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gtag/js?id=G-NM9HLDVHLF HTTP/1.1Host: www.googletagmanager.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cms.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/chartbeat.js HTTP/1.1Host: static.chartbeat.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cms.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Universal-Federated-Analytics-Min.js?agency=DHHS&subagency=CMS HTTP/1.1Host: dap.digitalgov.govConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cms.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping?h=cms.gov&p=%2FCCIIO%2FResources%2FRegulations-and-Guidance&u=Bok29WD1wopdlOpNN&d=cms.gov&g=41112&g0=No%20Section&g1=No%20Author&n=1&f=00001&c=0&x=0&m=0&y=73988&o=1263&w=913&j=45&R=1&W=0&I=0&E=0&e=0&r=&b=7320&t=ekrNCSFB1hCkyzXxBzgI3sBiohlx&V=136&i=Regulations%20and%20Guidance%20%7C%20CMS&tz=420&sn=1&sv=CdPdKKCsgJR_CF3l82Dqlk-mBH3v4b&sd=1&im=062b0733&_ HTTP/1.1Host: ping.chartbeat.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cms.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wiki/Personal_data HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/load.php?lang=en&modules=ext.cite.styles%7Cext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediaBadges%7Cjquery.makeCollapsible.styles%7Cskins.vector.styles.legacy%7Cwikibase.client.init&only=styles&skin=vector HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://en.wikipedia.org/wiki/Personal_dataAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /w/load.php?lang=en&modules=site.styles&only=styles&skin=vector HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://en.wikipedia.org/wiki/Personal_dataAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /w/load.php?lang=en&modules=startup&only=scripts&raw=1&skin=vector HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://en.wikipedia.org/wiki/Personal_dataAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /wikipedia/en/thumb/f/f2/Edit-clear.svg/40px-Edit-clear.svg.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/en/thumb/6/62/PD-icon.svg/12px-PD-icon.svg.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/en/thumb/9/96/Symbol_category_class.svg/16px-Symbol_category_class.svg.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/thumb/1/17/Balance%2C_by_David.svg/21px-Balance%2C_by_David.svg.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/en/thumb/8/8a/OOjs_UI_icon_edit-ltr-progressive.svg/10px-OOjs_UI_icon_edit-ltr-progressive.svg.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/project-logos/enwiki.png HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/wiki/Personal_dataAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /static/images/mobile/copyright/wikipedia-wordmark-en.svg HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/w/load.php?lang=en&modules=ext.cite.styles%7Cext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediaBadges%7Cjquery.makeCollapsible.styles%7Cskins.vector.styles.legacy%7Cwikibase.client.init&only=styles&skin=vectorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /w/skins/Vector/resources/common/images/bullet-icon.svg?d4515 HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/w/load.php?lang=en&modules=ext.cite.styles%7Cext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediaBadges%7Cjquery.makeCollapsible.styles%7Cskins.vector.styles.legacy%7Cwikibase.client.init&only=styles&skin=vectorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /w/skins/Vector/resources/common/images/external-link-ltr-icon.svg?48e54 HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/w/load.php?lang=en&modules=ext.cite.styles%7Cext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediaBadges%7Cjquery.makeCollapsible.styles%7Cskins.vector.styles.legacy%7Cwikibase.client.init&only=styles&skin=vectorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/4/4d/Icon_pdf_file.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/a/aa/Lock-red-alt-2.svg HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/skins/Vector/resources/skins.vector.styles.legacy/images/user-avatar.svg?b7f58 HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/w/load.php?lang=en&modules=ext.cite.styles%7Cext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediaBadges%7Cjquery.makeCollapsible.styles%7Cskins.vector.styles.legacy%7Cwikibase.client.init&only=styles&skin=vectorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/6/65/Lock-green.svg HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/skins/Vector/resources/common/images/search.svg?bbf78 HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/w/load.php?lang=en&modules=ext.cite.styles%7Cext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediaBadges%7Cjquery.makeCollapsible.styles%7Cskins.vector.styles.legacy%7Cwikibase.client.init&only=styles&skin=vectorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /w/extensions/Wikibase/client/resources/images/edit.svg?34bc5 HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/w/load.php?lang=en&modules=ext.cite.styles%7Cext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediaBadges%7Cjquery.makeCollapsible.styles%7Cskins.vector.styles.legacy%7Cwikibase.client.init&only=styles&skin=vectorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /w/load.php?lang=en&modules=ext.gadget.ReferenceTooltips%2Ccharinsert%2Cextra-toolbar-buttons%2Cswitcher&skin=vector&version=1ak2q HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://en.wikipedia.org/wiki/Personal_dataAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /w/load.php?lang=en&modules=ext.visualEditor.core.utils.parsing%7Cext.visualEditor.desktopArticleTarget.init%7Cext.visualEditor.progressBarWidget%2CsupportCheck%2CtargetLoader%2CtempWikitextEditorWidget%2Ctrack%2Cve&skin=vector&version=1clqa HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://en.wikipedia.org/wiki/Personal_dataAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /w/load.php?lang=en&modules=ext.centralNotice.choiceData%2Cdisplay%2CgeoIP%2CimpressionDiet%2CkvStore%2CstartUp%7Cext.centralauth.centralautologin%7Cext.cite.ux-enhancements%7Cext.cx.eventlogging.campaigns%7Cext.eventLogging%2CnavigationTiming%2Cpopups%2CwikimediaEvents%7Cext.growthExperiments.SuggestedEditSession%7Cext.uls.common%2Ccompactlinks%2Cinterface%2Cpreferences%2Cwebfonts%7Cjquery%2Coojs%2Coojs-router%2Csite%7Cjquery.client%2Ccookie%2CmakeCollapsible%2CtextSelection%7Cjquery.uls.data%7Cmediawiki.String%2CTitle%2CUri%2Capi%2Cbase%2Ccldr%2Ccookie%2Cexperiments%2CjqueryMsg%2Clanguage%2Cstorage%2Ctoc%2Cuser%2Cutil%2CvisibleTimeout%7Cmediawiki.editfont.styles%7Cmediawiki.libs.pluralruleparser%7Cmediawiki.page.ready%7Cmediawiki.ui.button%2Cicon%7Cmmv.bootstrap%2Chead%7Cmmv.bootstrap.autostart%7Cskins.vector.legacy.js&skin=vector&version=1vakk HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://en.wikipedia.org/wiki/Personal_dataAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /wiki/Special:CentralAutoLogin/checkLoggedIn?type=script&wikiid=enwiki&proto=https HTTP/1.1Host: login.wikimedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://en.wikipedia.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/extensions/UniversalLanguageSelector/resources/images/cog-sprite.svg?cca73 HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/w/load.php?lang=en&modules=ext.cite.styles%7Cext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cext.wikimediaBadges%7Cjquery.makeCollapsible.styles%7Cskins.vector.styles.legacy%7Cwikibase.client.init&only=styles&skin=vectorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /static/favicon/wikipedia.ico HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/wiki/Personal_dataAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /w/extensions/UniversalLanguageSelector/resources/images/language-base20.svg?b7954 HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://en.wikipedia.org/wiki/Personal_dataAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /w/load.php?lang=en&modules=ext.popups.icons%2Cimages%2Cmain%7Cmediawiki.ui.checkbox&skin=vector&version=yvwhd HTTP/1.1Host: en.wikipedia.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-bitness: "64"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://en.wikipedia.org/wiki/Personal_dataAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /wikipedia/en/thumb/f/f2/Edit-clear.svg/40px-Edit-clear.svg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: upload.wikimedia.org
Source: global traffic	HTTP traffic detected: GET /static/favicon/wikipedia.ico HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: en.wikipedia.org
Source: global traffic	HTTP traffic detected: GET /wikipedia/en/thumb/6/62/PD-icon.svg/12px-PD-icon.svg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: upload.wikimedia.org
Source: global traffic	HTTP traffic detected: GET /static/images/footer/wikimedia-button.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: en.wikipedia.org
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/thumb/1/17/Balance%2C_by_David.svg/21px-Balance%2C_by_David.svg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: upload.wikimedia.org
Source: global traffic	HTTP traffic detected: GET /static/images/footer/poweredby_mediawiki_88x31.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: en.wikipedia.org
Source: global traffic	HTTP traffic detected: GET /wikipedia/en/thumb/9/96/Symbol_category_class.svg/16px-Symbol_category_class.svg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: upload.wikimedia.org
Source: global traffic	HTTP traffic detected: GET /w/skins/Vector/resources/common/images/external-link-ltr-icon.svg?48e54 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: en.wikipedia.org
Source: global traffic	HTTP traffic detected: GET /wikipedia/en/thumb/8/8a/OOjs_UI_icon_edit-ltr-progressive.svg/10px-OOjs_UI_icon_edit-ltr-progressive.svg.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: upload.wikimedia.org
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/4/4d/Icon_pdf_file.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: upload.wikimedia.org
Source: global traffic	HTTP traffic detected: GET /w/skins/Vector/resources/skins.vector.styles.legacy/images/user-avatar.svg?b7f58 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: en.wikipedia.org
Source: global traffic	HTTP traffic detected: GET /w/skins/Vector/resources/common/images/search.svg?bbf78 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: en.wikipedia.orgCookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /static/images/project-logos/enwiki.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: en.wikipedia.orgCookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /w/extensions/UniversalLanguageSelector/resources/images/cog-sprite.svg?cca73 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: en.wikipedia.orgCookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/a/aa/Lock-red-alt-2.svg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: upload.wikimedia.orgConnection: Keep-AliveCookie: WMF-Last-Access=30-Aug-2022
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/6/65/Lock-green.svg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: upload.wikimedia.orgConnection: Keep-AliveCookie: WMF-Last-Access=30-Aug-2022
Source: global traffic	HTTP traffic detected: GET /w/extensions/UniversalLanguageSelector/resources/images/language-base20.svg?b7954 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: en.wikipedia.orgCookie: WMF-Last-Access=30-Aug-2022; WMF-Last-Access-Global=30-Aug-2022; GeoIP=CH:ZG:Hunenberg:47.17:8.42:v4
Source: global traffic	HTTP traffic detected: GET /ping?h=cms.gov&p=%2FCCIIO%2FResources%2FRegulations-and-Guidance&u=Bok29WD1wopdlOpNN&d=cms.gov&g=41112&g0=No%20Section&g1=No%20Author&n=1&f=00001&c=0.76&x=0&m=0&y=73988&o=1263&w=913&j=60&R=0&W=0&I=1&E=0&e=0&r=&b=7320&t=ekrNCSFB1hCkyzXxBzgI3sBiohlx&V=136&tz=420&sn=2&sv=CdPdKKCsgJR_CF3l82Dqlk-mBH3v4b&sd=1&im=062b0733&_ HTTP/1.1Host: ping.chartbeat.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cms.gov/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuop HTTP/1.1Host: get-the-prize-ht3.liveConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/mainstream/frame.html HTTP/1.1Host: get-the-prize-ht3.liveConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Referer: http://get-the-prize-ht3.live/?u=1nup806&o=0wywy2l&t=LPk3_USA_PC&cid=2ahlv1ltcuuopAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: sid=t1~oqlpyhtakt0grbwyudejb4zl; p1=https://unsisany.live/kckgabmd/; s1=rbeai42efuebfmb0
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/a/aa/Lock-red-alt-2.svg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: upload.wikimedia.org
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/6/65/Lock-green.svg HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: upload.wikimedia.org

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable / 403 Forbidden)

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 30 Aug 2022 17:25:25 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDExpect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lg0QHY%2FKojM%2FQGzHAPjYeMiYyEhb9d7E%2FCrPAoBZ0Y4qGK4hodzHywTYiRitQZUv54ViWVQRLNjBtvX5tABmcurD5aW0tkSak1iqOW3gCV1Wq35EGie%2F6ENBx7a1Ee3VZbv9GA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 742f39c1da809bfa-FRAalt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 141.95.108.187:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 141.95.108.187:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.58.240:443 -> 192.168.2.5:50038 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.58.224:443 -> 192.168.2.5:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.58.240:443 -> 192.168.2.5:50039 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.58.224:443 -> 192.168.2.5:50041 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Yara detected GRQ Scam

Source: Yara match

File source: 53672.0.pages.csv, type: HTML

System Summary

Classification label

Source: classification engine

Classification label: mal56.phis.win@40/0@40/25

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1976 --field-trial-handle=1424,i,4887198518072802579,4383639118328206929,131072 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.com/url?rct=j&sa=t&url=https://fischer-baupro.de/south-state-bank-locations.html&ct=ga&cd=CAEYASoTMjAxNTMxNTQ2Njc0Mjk3OTUyNDIaYTBmZWVhZTA3M2MyMDJhMDpjb206ZW46VVM&usg=AOvVaw3lhiJJ-nclIGfQxEWGuu5s
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4012 --field-trial-handle=1424,i,4887198518072802579,4383639118328206929,131072 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1976 --field-trial-handle=1424,i,4887198518072802579,4383639118328206929,131072 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4012 --field-trial-handle=1424,i,4887198518072802579,4383639118328206929,131072 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Creates files inside the program directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior