Play interactive tourEdit tour

Windows Analysis Report
https://dolphin-app-gmqrc.ondigitalocean.app/c0678e7d922226400010b5657b4f5159/?client_id=0000007990-0000-0lty-ij00-000000000&y=6eamRuYXBpZXJAaGVuaWZmLmNvbQ%3D%3D&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=client_id&response_mode=form_post&response_type=code+id_token&scope=openid

Overview

General Information

Sample URL:	https://dolphin-app-gmqrc.ondigitalocean.app/c0678e7d922226400010b5657b4f5159/?client_id=0000007990-0000-0lty-ij00-000000000&y=6eamRuYXBpZXJAaGVuaWZmLmNvbQ%3D%3D&redirect_uri=https%3a%2f%2foutlook.off
Analysis ID:	699727
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on shot template match)

No HTML title found

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://dolphin-app-gmqrc.ondigitalocean.app/c0678e7d922226400010b5657b4f5159/?client_id=0000007990-0000-0lty-ij00-000000000&y=6eamRuYXBpZXJAaGVuaWZmLmNvbQ%3D%3D&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=client_id&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&client-request-id=45f4d5f9-4657-4816-9528-af3f59994174&protectedtoken=true

Avira URL Cloud: detection malicious, Label: malware

Phishing

Phishing site detected (based on shot template match)

Source: https://www.4shared.com/

Matcher: Template: generic matched

No HTML title found

Source: https://www.4shared.com/	HTTP Parser: HTML title missing
Source: https://www.4shared.com/	HTTP Parser: HTML title missing
Source: https://www.4shared.com/web/q#category=1	HTTP Parser: HTML title missing
Source: https://www.4shared.com/web/q#category=1	HTTP Parser: HTML title missing
Source: https://www.4shared.com/web/q#category=2	HTTP Parser: HTML title missing
Source: https://www.4shared.com/web/q#category=8	HTTP Parser: HTML title missing
Source: https://www.4shared.com/folder/ZfkVDMy4/Run_Windows_7_on_Android.html	HTTP Parser: HTML title missing

META author tag missing

Source: https://www.4shared.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.4shared.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.4shared.com/web/q#category=1	HTTP Parser: No <meta name="author".. found
Source: https://www.4shared.com/web/q#category=1	HTTP Parser: No <meta name="author".. found
Source: https://www.4shared.com/web/q#category=2	HTTP Parser: No <meta name="author".. found
Source: https://www.4shared.com/web/q#category=8	HTTP Parser: No <meta name="author".. found
Source: https://www.4shared.com/folder/ZfkVDMy4/Run_Windows_7_on_Android.html	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://www.4shared.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.4shared.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.4shared.com/web/q#category=1	HTTP Parser: No <meta name="copyright".. found
Source: https://www.4shared.com/web/q#category=1	HTTP Parser: No <meta name="copyright".. found
Source: https://www.4shared.com/web/q#category=2	HTTP Parser: No <meta name="copyright".. found
Source: https://www.4shared.com/web/q#category=8	HTTP Parser: No <meta name="copyright".. found
Source: https://www.4shared.com/folder/ZfkVDMy4/Run_Windows_7_on_Android.html	HTTP Parser: No <meta name="copyright".. found

Compliance

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 204.155.149.132:443 -> 192.168.2.3:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.148.11:443 -> 192.168.2.3:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.66:443 -> 192.168.2.3:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.53:443 -> 192.168.2.3:49906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.145.41:443 -> 192.168.2.3:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.76:443 -> 192.168.2.3:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.148.11:443 -> 192.168.2.3:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.147.29:443 -> 192.168.2.3:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.186:443 -> 192.168.2.3:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.135.229:443 -> 192.168.2.3:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.56:443 -> 192.168.2.3:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.117.178.186:443 -> 192.168.2.3:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.94.233.169:443 -> 192.168.2.3:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.145.44:443 -> 192.168.2.3:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.176:443 -> 192.168.2.3:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.139:443 -> 192.168.2.3:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.75:443 -> 192.168.2.3:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.88.227.143:443 -> 192.168.2.3:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.147.26:443 -> 192.168.2.3:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.80:443 -> 192.168.2.3:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.74:443 -> 192.168.2.3:49925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.88.227.173:443 -> 192.168.2.3:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.88.227.173:443 -> 192.168.2.3:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.81:443 -> 192.168.2.3:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.184:443 -> 192.168.2.3:50064 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.38:443 -> 192.168.2.3:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.135.232:443 -> 192.168.2.3:50067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.183:443 -> 192.168.2.3:50070 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.88.227.179:443 -> 192.168.2.3:50072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.72:443 -> 192.168.2.3:50075 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.84:443 -> 192.168.2.3:50076 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.99:443 -> 192.168.2.3:50085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.94:443 -> 192.168.2.3:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.65:443 -> 192.168.2.3:50199 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.117.178.177:443 -> 192.168.2.3:50200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.19:443 -> 192.168.2.3:50201 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.117.178.177:443 -> 192.168.2.3:50203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.145:443 -> 192.168.2.3:50204 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.177:443 -> 192.168.2.3:50208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.177:443 -> 192.168.2.3:50207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.36:443 -> 192.168.2.3:50210 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.189:443 -> 192.168.2.3:50212 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.117.178.93:443 -> 192.168.2.3:50460 version: TLS 1.2

Networking

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 50383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50405
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50404
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50406
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50400
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 50381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50457
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50571
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50574
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50461
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50463
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50586
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 50467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50559
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50552
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50433
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50442
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50565
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c0678e7d922226400010b5657b4f5159/?client_id=0000007990-0000-0lty-ij00-000000000&y=6eamRuYXBpZXJAaGVuaWZmLmNvbQ%3D%3D&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=client_id&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&client-request-id=45f4d5f9-4657-4816-9528-af3f59994174&protectedtoken=true HTTP/1.1Host: dolphin-app-gmqrc.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.4shared.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/lang/style-zh.css?ver=61884 HTTP/1.1Host: www.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/slick/slick.css?ver=355867433 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /css/index.css?ver=1108272612 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/bootstrap/css/bootstrap.min.css?ver=-1235434608 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /css/headerAndFooterResponsive.css?ver=-1724683969 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /css/ui/media-queries.css?ver=984185307 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /css/common.css?ver=-1718006158 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /css/tipTip.css?ver=1396815821 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /css/common_n.css?ver=1189333293 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /css/ui/elements.css?ver=-1689671951 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /auth-popup.css?ver=-1770157089 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /css/themes/account/icons.css?ver=-1203004047 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /css/popup_n.css?ver=2128089298 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /css/notifyBlock.css?ver=439758551 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/jquery/jquery-1.9.1.js?ver=-150635016 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/indexScripts.js?ver=1207223815 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/slick/slick.js?ver=622176192 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/jquery/jquery-migrate-1.2.1.js?ver=-551622522 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/bootstrap/js/bootstrap.min.js?ver=1454307403 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/jquery.validate.min.js?ver=-1447866770 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/favicon.js?ver=-1389416187 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/header.js?ver=-1803071847 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/purchaseStats.js?ver=824748598 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/login_fnc.js?ver=-736399152 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/utils.js?ver=1230697711 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/authScripts.js?ver=442800931 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/tips.js?ver=775574541 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/cookie.js?ver=891093458 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/jquery.jsonWithError.js?ver=-1354420552 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/smallPlugins.js?ver=-1491964040 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/Events.js?ver=2120478973 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/jquery.placeholder.patch.js?ver=1939222451 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/jquery.cookie.js?ver=-933942167 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/jquery.localStorage.js?ver=1720368027 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/jquery.slimscroll.min.js?ver=899909646 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/jquery.tipTip.js?ver=-735031947 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/jquery/jquery-ui-1.8.24.js?ver=-1410140803 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/json2.js?ver=-2138552661 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/jquery.cycle.all.min.js?ver=-713535238 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plugins/jquery.mousewheel.js?ver=2047993325 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/ld.js?ver=139638503 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/reloadBackground.js?ver=1591064902 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/PopupModule.js?ver=-1437295376 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/notifyBlock.js?ver=-1839329555 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/captcha.js?ver=1799712776 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/AjaxSuggestion.js?ver=1732030193 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /pfe/current/tag.min.js?z=3461303 HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dc9e97fb.js HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=3461303&is_mobile=false&domain=www.4shared.com&var=&ymid=&var_3= HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/header_logo.png?8935067551 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/headerAndFooterResponsive.css?ver=-1724683969Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /images/icon_search.png?2569931080 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plupload/plupload.js?ver=-927007831 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/plupload/plupload.flash.js?ver=-292159593 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /js/UploadModule.js?ver=405808321 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /pfe/current/universal.min.js?v=3.1.392 HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/Jsonp.js?ver=1807481537 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /analytics.js HTTP/1.1Host: ssl.google-analytics.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apu.php?zoneid=3423066 HTTP/1.1Host: cdn.itskiddoan.clubConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/ui/AnonUploadWidget.js?ver=-1398226088 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /images/blank.gif?ver=-360380335 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h
Source: global traffic	HTTP traffic detected: GET /images/image_discover_arrow.png?6614575304 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /icons/42x42/x1/icon_file_video.png?8071030114 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /icons/42x42/x1/icon_file_music.png?11043008758 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /icons/42x42/x1/icon_file_app_mobile.png?7657920264 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /icons/42x42/x1/icon_file_image.png?8690551772 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /icons/42x42/x1/icon_file_book.png?4020710938 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /img/JpMeSCECce/1575621d3c0/ROOM_-_Bitter_Place__Live_ HTTP/1.1Host: dc773.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /img/w5kwOXsRce/1575622d978/ROOM_-_Senseless__Live_ HTTP/1.1Host: dc597.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /img/OW4RFP1Dba/159957d9340/RollyWorms HTTP/1.1Host: dc773.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /img/9LDCJLcQce/15757361e38/Stream_Hub HTTP/1.1Host: dc696.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /img/P3YFtod2ce/157fc2333e0/4shared_Reader HTTP/1.1Host: dc584.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /img/tZlLyfIJce/1581a9fad30/Citrio_Browser HTTP/1.1Host: dc607.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /img/kzGmd20Fei/15afbd7b818/Ringtone_Maker_Wiz HTTP/1.1Host: dc730.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /img/PhB_gW_sce/15753b705b0/Jelly_Bang HTTP/1.1Host: dc701.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=&url=https%3A//www.4shared.com/&rand=0.28736531898321993 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/UmVanlTece/1575672e1c0/Fast_Download_Manager HTTP/1.1Host: dc527.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /images/icon_file.png?5599549453 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325
Source: global traffic	HTTP traffic detected: GET /images/noavatar.png HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/pgsYndcR/12f3b16b2d0/Level_5_-_The_War_Of_The_World HTTP/1.1Host: dc701.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/35qH2DwI/1419935aa08/The_Beagle_voyage_por_Charles_ HTTP/1.1Host: dc739.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/EmLkDxB8/1418916dd18/A_Tale_of_Two_Cities_Book__1_ HTTP/1.1Host: dc551.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/Fgx4xb_E/s20/13f9c632658/254326484 HTTP/1.1Host: dc628.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/XYN47cQT/11f87ef7458/Dracula HTTP/1.1Host: dc720.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/wFiub3f4/s20/1404b88a0e0/456073609 HTTP/1.1Host: dc530.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/I07VFtSb/13f1f90ae98/OfMiceAndMen HTTP/1.1Host: dc555.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/pQOHy60Zce/1580befe160/RockCrawler HTTP/1.1Host: dc587.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/rpxgVJGp/13b228b8860/catch-22 HTTP/1.1Host: dc699.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=dbaabe1a181e49fc9c45b74f887a1d0e&zoneId=3461303&checkDuplicate=true&ymid=&var= HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/hByd5Q5T/118c05e04f0/odyssey HTTP/1.1Host: dc693.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/background_get_app_right.png?3568512940 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icon_app_apple.png?8213050221 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/y8ZinIwq/1363bf2c660/The_Little_Prince HTTP/1.1Host: dc611.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icon_app_windows.png?7285129227 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icon_app_huawei.svg HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/6osAbAAxce/146e2795d18/One_Hundred_Years_of_Solitude HTTP/1.1Host: dc606.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/background_get_app_left.png?5873081342 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icon_app_android.png?5428342491 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/vABp3nbWce/157207a1048/The_Complete_Alice_in_Wonderla HTTP/1.1Host: dc605.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/placeholder_get_app_no_ads.png?9733042591 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/placeholder_get_app_space.png?7879868326 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/placeholder_get_app_speed.png?7349740639 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/placeholder_get_app_security.png?9095785624 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/placeholder_get_app_backup.png?4913225410 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/placeholder_get_app_links.png?4205223670 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/footer_logo.png?7487956398 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/headerAndFooterResponsive.css?ver=-1724683969Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icon_footer_language_world.png?9180538325 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/headerAndFooterResponsive.css?ver=-1724683969Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icon_footer_language_dropdown.png?4591820861 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/headerAndFooterResponsive.css?ver=-1724683969Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icon_social_facebook.png?5849915227 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/headerAndFooterResponsive.css?ver=-1724683969Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icon_social_youtube.png?5774490586 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/headerAndFooterResponsive.css?ver=-1724683969Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icon_social_twitter.png?4213407617 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/headerAndFooterResponsive.css?ver=-1724683969Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icon_social_google.png?8830209715 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/headerAndFooterResponsive.css?ver=-1724683969Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icon_grid_previous_hover.png?1285733061 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/index.css?ver=1108272612Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: www.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=&url=https%3A//www.4shared.com/&rand=0.28736531898321993 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: www.jscount.com
Source: global traffic	HTTP traffic detected: GET /img/JpMeSCECce/1575621d3c0/ROOM_-_Bitter_Place__Live_ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc773.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/w5kwOXsRce/1575622d978/ROOM_-_Senseless__Live_ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc597.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/P3YFtod2ce/157fc2333e0/4shared_Reader HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc584.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/tZlLyfIJce/1581a9fad30/Citrio_Browser HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc607.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/UmVanlTece/1575672e1c0/Fast_Download_Manager HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc527.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/Fgx4xb_E/s20/13f9c632658/254326484 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc628.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/9LDCJLcQce/15757361e38/Stream_Hub HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc696.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/pQOHy60Zce/1580befe160/RockCrawler HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc587.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/kzGmd20Fei/15afbd7b818/Ringtone_Maker_Wiz HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc730.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/35qH2DwI/1419935aa08/The_Beagle_voyage_por_Charles_ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc739.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/OW4RFP1Dba/159957d9340/RollyWorms HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc773.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/EmLkDxB8/1418916dd18/A_Tale_of_Two_Cities_Book__1_ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc551.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/wFiub3f4/s20/1404b88a0e0/456073609 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc530.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/XYN47cQT/11f87ef7458/Dracula HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc720.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/I07VFtSb/13f1f90ae98/OfMiceAndMen HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc555.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/6osAbAAxce/146e2795d18/One_Hundred_Years_of_Solitude HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc606.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/rpxgVJGp/13b228b8860/catch-22 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc699.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/hByd5Q5T/118c05e04f0/odyssey HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc693.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/y8ZinIwq/1363bf2c660/The_Little_Prince HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc611.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/vABp3nbWce/157207a1048/The_Complete_Alice_in_Wonderla HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc605.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/pgsYndcR/12f3b16b2d0/Level_5_-_The_War_Of_The_World HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc701.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/PhB_gW_sce/15753b705b0/Jelly_Bang HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc701.4shared.com
Source: global traffic	HTTP traffic detected: GET /web/q HTTP/1.1Host: www.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /css/search.css?ver=1000657701 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /js/plugins/jquery.timeago.js?ver=-1364881040 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /js/searchScripts.js?ver=-1723265826 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /js/plugins/timeago_i18n/jquery.timeago.zh.js?ver=-1467830523 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /js/relativeScript.js?ver=-798805249 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /js/headerSearch.js?ver=-562895585 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /pfe/current/tag.min.js?z=3461303 HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6315ec69-3a38"If-Modified-Since: Mon, 05 Sep 2022 12:32:41 GMT
Source: global traffic	HTTP traffic detected: GET /dc9e97fb.js HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "086fba488bb204138b0f7becc751bf094"
Source: global traffic	HTTP traffic detected: GET /js/batch/restBatch.js?ver=1325145229 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /js/batch/addToMyAccount.js?ver=-1344882056 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=3461303&is_mobile=false&domain=www.4shared.com&var=&ymid=&var_3= HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pfe/current/universal.min.js?v=3.1.392 HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6315ec69-20481"If-Modified-Since: Mon, 05 Sep 2022 12:32:41 GMT
Source: global traffic	HTTP traffic detected: GET /analytics.js HTTP/1.1Host: ssl.google-analytics.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Wed, 13 Apr 2022 21:02:38 GMT
Source: global traffic	HTTP traffic detected: GET /web/rest/v1_2/files?category=1&view=web&limit=12 HTTP/1.1Host: www.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/web/qAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D1&rand=0.5397534249065457 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/6619/84dd3495/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D1&rand=0.17482408323220722 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/no-files-search-bg.png?3303489180 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/search.css?ver=1000657701Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=dbaabe1a181e49fc9c45b74f887a1d0e&zoneId=3461303&checkDuplicate=true&ymid=&var= HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=dbaabe1a181e49fc9c45b74f887a1d0e
Source: global traffic	HTTP traffic detected: GET /images/icon_removeadv.png?5194855631 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/headerAndFooterResponsive.css?ver=-1724683969Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /apu.php?zoneid=3423066 HTTP/1.1Host: cdn.itskiddoan.clubConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icon-view-thumb.png?7785339050 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/search.css?ver=1000657701Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icons/all.png?2134374948 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/themes/account/icons.css?ver=-1203004047Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icon-add-blue.png?5812901516 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/search.css?ver=1000657701Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /images/icons/d1-music-sprite.png?4170018225 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/search.css?ver=1000657701Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/JHFPI5iAea/182b59ec328/Pink_Venom HTTP/1.1Host: dc612.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/0CPycSnciq/182cb13c618/IVE_-_After_LIKE HTTP/1.1Host: dc728.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/V-_ZUHXEea/182009b73e0/_-__60_ HTTP/1.1Host: dc579.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/JwlPl5Xzea/180508f72e0/_-_ HTTP/1.1Host: dc707.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/Ypr5fFm4ea/1806a2fd000/_-__ HTTP/1.1Host: dc605.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/4geYlYUMea/181e3ab1cb8/WSG HTTP/1.1Host: dc778.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/q2Q9eTztea/1827168a660/FOREVER_1 HTTP/1.1Host: dc603.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/6JDmWlydea/1802be8f8d0/__-_ HTTP/1.1Host: dc727.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/mRyPeT8tea/1825a02b880/Hype_Boy HTTP/1.1Host: dc763.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /img/h5du71tGiq/182b4b7c270/___online HTTP/1.1Host: dc615.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D1&rand=0.9041606590988178 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z3_QpWp9fd5M7Imhii_KiDdVNl5On1fE68rvqnzbkLivgj0PWIgYAGRUoMlproXeH-Y4ixV_J-v-f6hvVTHa3-hfO_WNqdTRSL1qIoHmcJl_eoD_c8xCVmwciim9JeTa_1hkWxNpFNGO5y-Nuz0RZ5fCdDydUy25TM-3elw_Iu8zReOuBNM4Fh_JUAxS8C51-scIAhAV90r0hBFFAU63Ibk7YeWzyZ7e6QzMsRyN6U4Y2AWAkc-LY04ajx7mav5nuGhXT4vCkJOc80qtH2_hh67IKtAOwXpIvl9LGvSPu8EWgFC9n6ympHgj0C8GjTvOToKsab93FFiZ6GY7PAd-yqHUcsM_9RtfLtWVLLiQbwHH7OOSn9hZ0yr-UBqoqkzUBAbU3esKMCfka-x3EErQf3rz7Oy6r5I3QR4xUadtK6Nh3ieIrlLs9zzkIiWjqB_QJt6qLh8iNuLWzQ8CUbW7piac3-WCYBoOIfH0MXEe_oxaspZXY67SCu_Gsmg6XonrLqs21oVoSf4ud1C9R5MRumUZZGyC27TCshAepMA6de4br_m81poU0XZLlwY5Jq57FcajQnOv4l69RtEixa30?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b
Source: global traffic	HTTP traffic detected: GET /zunnJKNAe639bUjMScKv54czlty5NatzuC3jM6vI6c8wI69SuGYM1VbXcjpWVv3vEoeEcpHFcP3N659mZsDMkn4INwJA4jc6cbmkHHtC_-Rdui6jPjiYx8VUUi3b5UCq8ZNHuQCNfx1OM1hEMWWsu1Q261c1KIYmeKjqec5Mgqq4llf6oIunTyyAVQ8PuqBXBVzYRSGPNslnwmhqFv9pPmVp6r43Wk4TPSmexAEEdGp9JjWmsQjjmj2i69OVRmjZjWQ1aED7T8jRDOLCqYekWRufMAC7YtvoBWeWawAjED0nswFxc91SsdMkAjOZKwEyzvMp1AkTg6A73DRmCAdvQATPbe_WciSoXOokcDYjMX1NWn8MtzdJvs0yT3s_sJQW9SwYZJdxIR7fu3AdbcCLX9cXgH3AxSuJa00O2S-SrGdN6h9eSl7jUGPsXLrq-W9SjUzy1v3DbbqZxp_OCGs1m8-LkAnAuSKVeK8HbXOLfdeFDzHWueOgEQ9odoXZVSgKqr0dcK3-ZtgJHFPayqYInbLX8IfrUP92aeSJROP1vH4ZgSfvFNgCE-TPQTbrTAal5zgyM7nJSLMdTGB2iSPA?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b
Source: global traffic	HTTP traffic detected: GET /a/6620/e12a795e/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D1&rand=0.9713922488083664 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/QvDjxKKjea/181e3ac41b0/WSG_ HTTP/1.1Host: dc701.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /zHfYfLYVRsOTSh1MjO_QALX5PJSfG6eB8V6MR1cSucltIyNxNc6_wovrHneqniGSySxvdcvBVCK1CK3EnuVPk0BVsiPNTGobRVSy8kS3PuDDzfVtC4A4SO6gJtsLBXCk8wvK6DOIezRPR7fdD6o38czUeqtgB4Pg9LaskSqcOX2FumRj_5vPWk4AJoJkCEKcjHT0XmdjEVct8e-Ve6yDPBAdIr6iP0y6_Ic3ZQBWILeQoki4C-oyud4LxdLxL7j86FMU8op31QY0ZZAWKD4zDs4fHpS9pOmnoDCxoP5gcSiF8I72bI5uuqQkisbQvROQuvPp6ql0p5eS59yiwCaZUUpWC-9mB-9pRfoT3l8U6uAdkClpiswr_u1DM0KLKrhSm1vSamZ93gHZYuhOjFPIPZv2J74VmlmrdlHZ1dZ7zph722eyttNcAmBNu06BgcidKlf2b91tQItnMDlGLwbSlbSXUM9jE9Ny0RVWK3s_JnKLm9T_uGw5Z34pzUOm4IVY7R3cAjyBm9qD4Fq971oZpRvPo7iWzZg0wN58Y3Qggpqf4xJOrHQijL_XNYyS5VSxC20XV_Ln3RWpS6C1T85mqjRfZb3aahQiTLzXUZvPhSPcsJg?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b
Source: global traffic	HTTP traffic detected: GET /zn4d6k8_qDN8-GnX3ahq9a3RCt5hYC4NnGE6dhM_dA8Usqr0dbsXbo9faVI9qUMp-sclHCldpLf29Pj1QhZlCpaU5t5aF3KAvaYH6UejEUxUStzShCFhSKqp4CKsMZNr85pjr8o-Boj1xD_qDqREGznscrOSQPZfVYNlTJ8bf6-ExswmABbaMdXoE984y9lqFRAxjhqpDxhm8tgma-PJj8QWSPHPFGKRQ-81uGl89fJ7Umy5F8IDr4k1ixQZ8kl-TP2S-ER3zHf2OzFyHwCz_c8Mx3cJS04pNfIDzQBtyDcRugQkl_L_4UEANcVv59Zj6dpDEvPbgv7ylgV_ZDa2LIX2RPLZ7pLVlydmngnh-O1uN_4Y0nV795ztUA30dg-NRGh7qQhF9gvQqGWbl-YD-wkbKiNTdKwVZHml-HcrcQSppfda_m86jlPHDjvxpHdMWrBCut74Y3dT8yMJlhHbUAI_fdTpBF2XtfYl_ebrGJG02Z3f8v8FqXg4kBw1tmgrHxVSCpY_jLtE1M3E6mIxET8agMuRcj5tFu6BzTsrbW6HSpOuMcg0pGoo45GyW0rO9r1Q_wYLifxS3DPSy-Hc?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b
Source: global traffic	HTTP traffic detected: GET /zJdEjIoDz1kuZ3YseO0RBLZR_1NdxS769if9PgYjzw4wPIKKN4Bk0zcG4WS5LfI7FJ7tA-uosHniyW9U3gVkqia2-d39Ups4LCdI9zTutdVUvdOuX9GGyAxiNoVWOV_CoRFTz9GZEqTtRCYD0UfN46jszL_LBEtZlGbln9aO89vcbdQjBeM0s3tif8oCHbkGtPUuHLkz9P-66O-wp5oguN00Q6maE2WL05o7eaUbwBvDZP2Q7YOu6LgWsqGOPeufz4BRDzkBK2yz-96CKSU3HVCfooGqcGoZYcFkYJF1xyaAZw6r3RFYpikM-4FG7BvbQ-VPH6yCjitwVvlYgdxob26bJfYBxEq1Jdg2qZrX-RQh5CC3Bf0dWb1-5vz5zNN3M3s5AfWhz17aZVenwwSdg4QAvrz89vsOIfAL88-noVGzQBWTwi_kC-cRJhsi8kvFrwUKakHQ_1rtG7wxKbo7rtRpsdpOsgBh4Fe_y8e7LrjvnsGMfbAhsP2MQ-2YvpuBQkdyqughECBdthDsoQ12jOEF6ZJDTwwVPEXuhei9rAf67NTUxe7gvN21a10-vpRRhBzHzGcHRqxJ0N1cHQxkiej_fKRFOaULxH1Nw_KsqEVteGaA?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b
Source: global traffic	HTTP traffic detected: GET /img/9XM1F2hPiq/s20/182f3981e68/1442394738 HTTP/1.1Host: dc742.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1
Source: global traffic	HTTP traffic detected: GET /zNf5GS13WEU3HcONOg6i95k7N1AK6Cq0-LE2Gma-g2QLftFQehoAKzNyHPnJm_X1Ev9UTYBcdksXgSp0nZd_4fxlRvuyBPuiQUauvs6Ra1tFmIh5-7lN3l264YR15sSqbRCBcp-LcFcE1B_sRa-ZzoNDkhhNeX6wGXFuGO9F_TMMKr_O9P61cycA9CNLbZ5fTsuizUPetXbfdMIQdBjM5_EcEg_zZ64-HfAGPeGzrY2I3__YSON2dxG2hlHYrqWsIeU1JcwZH4AE3v6q2ELAK8Clozc5-6OySx_rOIolpLfKqzDFwxQIWiSMOQXm2HsakyNmxVHi8z-5SBoNFZKxTwRO82_7pm_Aud8SQ71J5dzia_lnI1IUl9pgWu_oO62J6nE4qJSQgf13qYa_FMMDcHiC3mbm-lHmN4AiXPvezi5kmWjF-bsOVl4_C32iqpsknxCzqj0yFRTaXY1i9GDcQwXiG9dLKFP5UydXvAW7qAzD-lvgqsblD4mqOysJyYt8EA0j9fjaKrrBY7eKcwJet1Yq8afFg0QiFJkqkg2JeAF3lFrvSQTQwWl-TIdN9TsCuqBrrSusgw8dIw8VuchE7IcDywq_KQdCsFNbtj0SN2IsPKQjUNw?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20220901/r20190131/zrt_lookup.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkzjscYZ52NAY8n0cT95jijV6W0yuM6NwF8WWQoBrDcA-yxPPCjwWHtVTdU
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-9944716694200882&output=html&adk=1812271804&adf=2373185777&plat=1%3A16777216%2C2%3A16777216%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2Fwww.4shared.com%2Fweb%2Fq%23category%3D1&ea=0&pra=5&wgl=1&easpf=1&easpi=0&asntp=0&asntpv=0&asntpl=0&asntpm=0&asntpc=0&asna=5&asnd=5&asnp=5&asns=5&asmat=1&asptt=-1&uach=WyJXaW5kb3dzIiwiNi4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjgxIixbXSxmYWxzZSxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjgxIl0sWyIgTm90IEE7QnJhbmQiLCI5OS4wLjAuMCJdLFsiR29vZ2xlIENocm9tZSIsIjEwNC4wLjUxMTIuODEiXV0sZmFsc2Vd&dt=1662679345698&bpp=10&bdt=1955&idt=2166&shv=r20220901&mjsv=m202209010201&ptt=9&saldr=aa&nras=1&correlator=3917330461660&frm=23&ife=5&pv=2&ga_vid=173122340.1662679325&ga_sid=1662679348&ga_hid=836752351&ga_fc=1&nhd=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&isw=728&ish=90&ifk=140639143&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44761792%2C44769173%2C21065724%2C31067826%2C31068920&oid=2&pvsid=3171988019801440&tmod=1376365658&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C728%2C90&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32772&bc=31&ifi=1&uci=1.7hr4gfu8s6ce&fsb=1&dtd=2272 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkzjscYZ52NAY8n0cT95jijV6W0yuM6NwF8WWQoBrDcA-yxPPCjwWHtVTdU
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-9944716694200882&output=html&adk=1812271804&adf=3025194257&lmt=1662679348&plat=1%3A16777216%2C2%3A16777216%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2Fwww.4shared.com%2Fweb%2Fq%23category%3D1&ea=0&pra=5&wgl=1&easpf=1&easpi=0&asntp=0&asntpv=0&asntpl=0&asntpm=0&asntpc=0&asna=5&asnd=5&asnp=5&asns=5&asmat=1&asptt=-1&uach=WyJXaW5kb3dzIiwiNi4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjgxIixbXSxmYWxzZSxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjgxIl0sWyIgTm90IEE7QnJhbmQiLCI5OS4wLjAuMCJdLFsiR29vZ2xlIENocm9tZSIsIjEwNC4wLjUxMTIuODEiXV0sZmFsc2Vd&dt=1662679346450&bpp=6&bdt=4852&idt=1601&shv=r20220901&mjsv=m202209010201&ptt=9&saldr=aa&abxe=1&nras=1&correlator=3917330461660&frm=20&pv=1&ga_vid=173122340.1662679325&ga_sid=1662679348&ga_hid=37524893&ga_fc=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C31067826&oid=2&pvsid=2604719871431910&tmod=1726991591&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C913&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&ifi=1&uci=a!1&fsb=1&dtd=1632 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkzjscYZ52NAY8n0cT95jijV6W0yuM6NwF8WWQoBrDcA-yxPPCjwWHtVTdU
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-9944716694200882&output=html&h=90&slotname=4918453445&adk=2106422360&adf=3279755397&pi=t.ma~as.4918453445&w=728&psa=0&format=728x90&url=https%3A%2F%2Fwww.4shared.com%2Fweb%2Fq%23category%3D1&ea=0&wgl=1&uach=WyJXaW5kb3dzIiwiNi4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjgxIixbXSxmYWxzZSxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjgxIl0sWyIgTm90IEE7QnJhbmQiLCI5OS4wLjAuMCJdLFsiR29vZ2xlIENocm9tZSIsIjEwNC4wLjUxMTIuODEiXV0sZmFsc2Vd&dt=1662679345708&bpp=2&bdt=1965&idt=2434&shv=r20220901&mjsv=m202209010201&ptt=9&saldr=aa&prev_fmts=0x0&nras=1&correlator=3917330461660&frm=23&ife=5&pv=1&ga_vid=173122340.1662679325&ga_sid=1662679348&ga_hid=836752351&ga_fc=1&nhd=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=268&ady=237&biw=1263&bih=913&isw=728&ish=90&ifk=140639143&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C44761792%2C44769173%2C21065724%2C31067826%2C31068920&oid=2&pvsid=3171988019801440&tmod=1376365658&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C728%2C90&vis=1&rsz=%7C%7CE%7C&abl=CS&pfx=0&fu=4&bc=31&ifi=2&uci=2.qlo1vbxk74eh&fsb=1&dtd=2769 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkzjscYZ52NAY8n0cT95jijV6W0yuM6NwF8WWQoBrDcA-yxPPCjwWHtVTdU
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D1&rand=0.5397534249065457 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: www.jscount.com
Source: global traffic	HTTP traffic detected: GET /a/6619/84dd3495/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D1&rand=0.17482408323220722 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: www.jscount.com
Source: global traffic	HTTP traffic detected: GET /img/QvDjxKKjea/181e3ac41b0/WSG_ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc701.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/JHFPI5iAea/182b59ec328/Pink_Venom HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc612.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/0CPycSnciq/182cb13c618/IVE_-_After_LIKE HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc728.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/Ypr5fFm4ea/1806a2fd000/_-__ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc605.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/9XM1F2hPiq/s20/182f3981e68/1442394738 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc742.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/V-_ZUHXEea/182009b73e0/_-__60_ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc579.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/JwlPl5Xzea/180508f72e0/_-_ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc707.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/6JDmWlydea/1802be8f8d0/__-_ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc727.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/q2Q9eTztea/1827168a660/FOREVER_1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc603.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/h5du71tGiq/182b4b7c270/___online HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc615.4shared.com
Source: global traffic	HTTP traffic detected: GET /zrZa2CPFetnutBaeU2bpHc1uDSpr1Via-Jb329p_cUCAtzGxAltJ1ncYBjIFojV9DwqwvJkZekw_1sh3URsCK5NZhqq7huiddDvTOrKRqhq3anxHhxT-RQ9I9joFvtO_WJ0yYQMDu-369QgnzuD6z8EyO3HihG3PDY5T3bo7cGorKEWXZemQ_0JOmFIS4jJ-eJS3ZmMeFOkR0py-IG19N7bS8Gw8oSTsrMdbjmuwwgAJtcoZGdKslRnfXtao-BcoLlYItX_eohw2e4HawHhYaYOnf2YzZgiULpvu98vsOF0aaL0OkUIUABnqewNk_0dNljKE4vd4wD7Za_cp_iAhwoJNY0yNBwauLCHbvO3N4wFQdOdxPo2CLu82t--aeW7rpeNystLiJfNvJylBM8KYl2Neb6Xvp0FpptGvudCiQttTMSqLNYSD6GsLwy1dxe5c5bk03OreiI4jB4vypLD6g1YHzueA8pZsryKELfl6va7-AcFNLdzzmeTYioCeWtrDECZyIy_uXAp5MzIaLJ-SS5b8VEVIddqrpP6vb9ONlrSk2Wp8O?DC=DO&u=https%3A%2F%2Funtropiuson.com%2F4%2F2112606 HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--
Source: global traffic	HTTP traffic detected: GET /pfe/current/extra.html HTTP/1.1Host: push-decdahe-3884.boustahe.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/4geYlYUMea/181e3ab1cb8/WSG HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc778.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/mRyPeT8tea/1825a02b880/Hype_Boy HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc763.4shared.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: push-decdahe-3884.boustahe.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://push-decdahe-3884.boustahe.com/pfe/current/extra.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4/2112606 HTTP/1.1Host: untropiuson.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pfe/current/universal.min.js?v=3.1.392 HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://push-decdahe-3884.boustahe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/q HTTP/1.1Host: www.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=dbaabe1a181e49fc9c45b74f887a1d0e&zoneId=3423074&checkDuplicate=true&ymid=&var=pops HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://push-decdahe-3884.boustahe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://push-decdahe-3884.boustahe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=dbaabe1a181e49fc9c45b74f887a1d0e
Source: global traffic	HTTP traffic detected: GET /dc9e97fb.js HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--If-None-Match: "086fba488bb204138b0f7becc751bf094"
Source: global traffic	HTTP traffic detected: GET /pfe/current/tag.min.js?z=3461303 HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6315ec69-3a38"If-Modified-Since: Mon, 05 Sep 2022 12:32:41 GMT
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /pfe/current/universal.min.js?v=3.1.392 HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6315ec69-20481"If-Modified-Since: Mon, 05 Sep 2022 12:32:41 GMT
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=3461303&is_mobile=false&domain=www.4shared.com&var=&ymid=&var_3= HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics.js HTTP/1.1Host: ssl.google-analytics.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Wed, 13 Apr 2022 21:02:38 GMT
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D2&rand=0.49136712640214264 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/6619/84dd3495/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D2&rand=0.4531644338631291 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/rest/v1_2/files?category=2&view=web&limit=12 HTTP/1.1Host: www.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/web/qAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /zOmPVW2tJBz3asczvWRrsbQLOZCC6LNzHN7DGeOnuPnAqqA8NVcBTYwuqmuDftVjPv5HA7nv4CEAaXIIV_FOcPEY7d8tutGYcEJucK6cghyCGpXDVimJc4kc4nJssSLUQjs_74ZJhQT7483sWfQckxlHlaqW9-U2F8Q4oPFkLe0axfCgJTtiHSVlgTO5ElwEJgUbxGxIHNBPv_hsdwzDIcfy5W5ZT08Tke24c7Hj6sVqOHG1N-Ytvf2b3hQuxjTXQXg9Yxn8haXQoEZL-WFCAVuqTjrv8cmItjuq1PpMJ3HAZnlr93XoKtPyLK7yru0J-Y-KV18ntVWEQpGZQ9C10F0LgT7Wq8HAftFfDa9urenuSCfmuP1s2M2FJ-E1WE_c4-m90bm8mPCEc4DA2KCoLl-Bz09mi3Q1OJ7Bnbu5U7mlhMnd7owghB9TsEVjlekSeDYTvmxQprvgtBAUxOLwK1EW0KAT-LQHkPWN05o-d7rj05CE5Fl5WtA33908khpkMhhLZ4qLULz0Mn2M6vPmnbwT3xATEmJMtast-IuMbXccJiQ0tHS3DdN9zbrf0DOrYx-7JIRluyslpcNYe?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--
Source: global traffic	HTTP traffic detected: GET /zkiyhceffupPaELy7vuTxjjUK5D-3Vm82NhLoFfr9aBZ6AzHzDvlOZ3TkcROYdceMrY70kvobQZVToSVg-Zc-q4gFwRUvDD_W3ZP19-12wObTyKig6nxQQoYzMJi1b91HEoeg1LNT007wOsAp5iOMlzky-LForfZtgMmnGSdD7wqTdwLk_9oddFZeAr0cWzGwJ6YqLO0g88bd9Nc3AfuLm7Azox9_kbY3RrE-QzER53Cku1xJabTLEgAx2sU2Gv3RKeG02nSump5op38sNz3xSOsNGsL1k_OB4qDe_OXwiNqyUptQdYAQp3_BlvuqLMDxiNfMZHhMysyLU1YMf2Ts2WK0rNneDOh5iz4bLELFK8yBtbrZlPyEa1ZELopdHr4uvEW22fopaxlxRa0GR6o60em3lN12-MFCWK_0b-64NFXmdUePMQHzlDHu7yWMz9gS-zcK15B5Fr7AkC97B5ILr4-sB1xmcNf06_kiAcn4SzROWPy2BUOELWTLEZF39BzZsDkuPNKpt_hTnl7m48z87FqzWvXK7A1f7rcYveTaLGrkVqI-HNhTf5Kl9muzCJf-5677K1QPGWaPR8UBRJ1yzrTX1q_OqGRoWT2Lo9UGX9txQQ?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--
Source: global traffic	HTTP traffic detected: GET /zpOMkbVWlEztxvC2U3Zjlw3OEP2GMusDG3l3FR3NDx9-SaiuXqWpFp3JylZr0gQsrvKXH8wTL6JO5XM8DydzJp5q1dXQoLfmOuNFKST76VYC_71wyF_xWNPPoPCKxN3sD5KYfPShIQKgU9u6kMQbhWhJrohF34xiOTAWL_BC4DISxrw_XkENvyqooA1QuwOZ-h6y6WISSCKkDPx1bZ_iCjBQPshVXPQL-T4saaEu0UXHwLJvI56b9BA71PuXYnObuxtlebiWspsudXS3gAHftppFYVfK5n4Fr2c3ZpuylYDFiPLSRCEH0hpUDzBXdhBRmK8sJHHBC1VgRWUhJwlKA09cafkErg2qUttn-U3xX08j_kI1q_swg1Ofm13F7aADOq6wqa2KVh--kVQT2JYkGm98NQcCN5koqEuvukMTtJQdjbcT7FuMzEaKeIE6s717IpJ_X4hujW0iUR8SDld9hxVX0hsjdC4zf4foXH_3YeyNDui422vAF6uaIXF62KS8fAXki1M243lZIJ2tD8pXZNKjwasuq5Keptt11m3021nPNuTQRe98KNgKphtSFjexh_JZUBOxeFiMsvgcwxG0?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--
Source: global traffic	HTTP traffic detected: GET /zV9OgP77q4ZD6ZMt_HJeioJjiEJJ8wvzEJIZkoigiCy-IuWauXiQ9TfCE4pstfe4_A1MFOIbnByPMbbVbW4ZQfPerBNHfX6OhCxym9drutQcvxhcyjtPvCK4UWbWcA2RBAtn7p7fV8y8XlIrx1mSzyuQN3Xbqsac93p3bMSbWShWHU-fU-VzjjGNTdteNEFFtbfgbZdLaze6T5O2NBhq4CwnKZR2SKp89EDo1NSXXujI6f9HXAYaggSoPqBsSwpTbDkSHcKo2g2TgGeTxclsAXQfd5XZ104rNpR6FIQNUsG-eImDL36EO7aa-30QHYbskTvhW8l1dNCFsx4dBU4mraav3OF1U0ickTJVfjM0_OjfhLhZx-SGVRPNsk70s7UCC-oJuweDG7NMX2R7qdAkNuF3FtDpA_yDuacv3ik38zZuHs354ARJzxj4Jphvgg4eBQW5AcFeBhtQCy01TdhJVkLrdlFtfJFlk4LriZ3MEBnCBWgvaaLWRa33Lj43O9zHvVcRvFxIZgg7F7mOdPor7sPc_-qgjB9Mek9RzamKWQKsDSmtomrgh1P7Z07IqrwmsSDc73TShnpkeWXy3wug?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--
Source: global traffic	HTTP traffic detected: GET /zDkDOiLdxc6wdhMTbj4LGwW5_o8GFr5XrNVMcsBZOt0gsCAxJQK8ndqb_dcmicpQ4AHKle9E4wiD0fnoRlflcGDmejFhIrC976g8UaBui45Q2DpuRMqvUOOmNDxUZS24wgAJlAho2Eqfi-W7HejYvNzr0aisMTRXmWRjYuEFuVLFCuezeJourEVtrV6-nlR1FnJFTnCBBW8Hp4MnC2b54NBvU4xtj_wwcn4_VlX0pQo9LB8aru2cmoE3-urm-RwapIeMqk6DxZh_8qUcmdfc2j2u8X102qdbFnapJvR1BRShSC-z1_RyJXN2bRjWUJbWLd9J8M7PjmXGtfphsWo61xQ4K_-c7H-s_6pj4yZlZAFeI-n3KtzXNj8-GxSlA0LO1vx7sXwQWYrsCJse1VwcfFGu8o04WhCfrSRz4HsiWlCyjKywdWVRq-6B_oEClqvcBBpBENOoTHIa-p0qoNvbTE8UglZXVCaETjC3iQCjjBw2GXT-EGXc82ajty_wR9WEDs5VBgsx8EUJ0lr00qq35qAKBktGCRL8COi9ZbVXUpMD-LQ81EM6n7grng6VeYMVlTXCbNwWasO8SEUkTlX0?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--
Source: global traffic	HTTP traffic detected: GET /zsCDltgboJoNHF-_hj2PAUj5l1i2JRRFNqKU0AlUpmei4Cb2K6GHYnLPymvIiRG42qmzIrNiTAjP-lqnYv5RXqYkpWlezEP5xv03BnhcV3R6EDWFM5cA8kAsVQE7onyU4UDeK_cYZECZAyh3Ho7Q6MhU4fK0tsA5aXQrwlZplbb8r6DydleG20ndYPsx8Ele7-pS0j-OiYashZJUu917HiZp4sQXj8KPgnSRZIV73B_zyaYUXuY5TAWPY3lY9NUeS9eRS5AfhG9k6czd99cMHnqoILzzLZTDcugk7Jonnph9-WL1elbt2DXces-o0jNS4wSrvtbHnGI9L6tqjjISBT7lSYg4x3Mz9H13jK8RquPzDkcJcht0SJHZg6RpWhgEx2057x_C96YPdUMujEwQC4Ltx-rvUw_AFfEvb42GWkmo9NdtcoIIzXNkBqf8bFzGtHNJqRmimk0uhPA5960VbbZe1YQUrdsipctL1nKBoH0yp2sWHTUJ5Cl74bBCDq7ETzGqXUz6HR_ePhqPuKJ9NG_BLEKJE2I4jbXmvdH7lKhOfvLcQAdUGmycGNIKNAx_uOop0VCJEywcIwi2CCTy7HpcOh7XvYNttJxKpcUh6nQH4gJzLkw?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--
Source: global traffic	HTTP traffic detected: GET /img/DavRdcrIiq/182cf9429d0/Anime4upcom_OI_EP_08_HD HTTP/1.1Host: dc561.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /img/5VytGk0Qiq/18232567498/EP1026v01658632808720p HTTP/1.1Host: dc596.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /img/CvCGEvyziq/182b0790f20/Witanimecom_KNVGMWSNYTMSWT_EP_ HTTP/1.1Host: dc623.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /img/A11nEZ94iq/182f3dcc4a0/Anime4upcom_OI_EP_09_HD HTTP/1.1Host: dc341.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=dbaabe1a181e49fc9c45b74f887a1d0e&zoneId=3461303&checkDuplicate=true&ymid=&var= HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=dbaabe1a181e49fc9c45b74f887a1d0e
Source: global traffic	HTTP traffic detected: GET /img/XI91iox_ea/176bcd14118/Witanimecom_KNM_EP_02_BD-FHD HTTP/1.1Host: dc555.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /img/Gc1BkVWpea/176bcb9f440/Witanimecom_KNM_EP_01_BD-FHD HTTP/1.1Host: dc587.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /img/9Q6PP9NBiq/182e9ee8438/Anime4up_com_YJSSNKET2S_EP_09_ HTTP/1.1Host: dc623.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /img/KMDWxXfZea/176bcd70d78/Witanimecom_KNM_EP_03_BD-FHD HTTP/1.1Host: dc555.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D2&rand=0.9996845388297131 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/6620/e12a795e/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D2&rand=0.9871926399488515 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apu.php?zoneid=3423066 HTTP/1.1Host: cdn.itskiddoan.clubConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/QMddIO9jea/182ebcd2390/Anime4up_com_TKNILD2NSWESSNN_E HTTP/1.1Host: dc577.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /img/Yr4mPIcTea/18232534430/EP259v0720p HTTP/1.1Host: dc733.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /img/47BfiXgRiq/1783bd6cc20/Witanimecom_IMTSSNDM_EP_03_BD- HTTP/1.1Host: dc721.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /img/d0905-84iq/17e63529e90/SpacePowerFancom_Kurokos_Baske HTTP/1.1Host: dc721.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-9944716694200882&output=html&adk=1812271804&adf=2373185777&plat=9%3A32904%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2Fwww.4shared.com%2Fweb%2Fq%23category%3D2&ea=0&pra=5&wgl=1&easpf=1&easpi=0&asntp=0&asntpv=0&asntpl=0&asntpm=0&asntpc=0&asna=5&asnd=5&asnp=5&asns=5&asmat=1&asptt=-1&uach=WyJXaW5kb3dzIiwiNi4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjgxIixbXSxmYWxzZSxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjgxIl0sWyIgTm90IEE7QnJhbmQiLCI5OS4wLjAuMCJdLFsiR29vZ2xlIENocm9tZSIsIjEwNC4wLjUxMTIuODEiXV0sZmFsc2Vd&dt=1662679365452&bpp=8&bdt=1563&idt=1358&shv=r20220901&mjsv=m202209010201&ptt=9&saldr=aa&cookie=ID%3D990f90dea77d143e-222da4e617ce0001%3AT%3D1662646949%3ART%3D1662646949%3AS%3DALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA&nras=1&correlator=968745992875&frm=23&ife=5&pv=2&ga_vid=173122340.1662679325&ga_sid=1662679367&ga_hid=79735168&ga_fc=1&nhd=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&isw=728&ish=90&ifk=140639143&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C44760911%2C44770881%2C31062931&oid=2&pvsid=4395772002080968&tmod=504360310&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C728%2C90&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32772&bc=31&ifi=1&uci=1.cnasa4g1ddd5&fsb=1&dtd=1447 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm2pS76zpIkP7IojiF_PL7ET1cCtrZJBWRgHbJHr1BRX6epKmnV_oCgxp6aD68
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-9944716694200882&output=html&adk=1812271804&adf=3025194257&lmt=1662679366&plat=9%3A32904%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2Fwww.4shared.com%2Fweb%2Fq%23category%3D2&ea=0&pra=5&wgl=1&easpf=1&easpi=0&asntp=0&asntpv=0&asntpl=0&asntpm=0&asntpc=0&asna=5&asnd=5&asnp=5&asns=5&asmat=1&asptt=-1&uach=WyJXaW5kb3dzIiwiNi4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjgxIixbXSxmYWxzZSxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjgxIl0sWyIgTm90IEE7QnJhbmQiLCI5OS4wLjAuMCJdLFsiR29vZ2xlIENocm9tZSIsIjEwNC4wLjUxMTIuODEiXV0sZmFsc2Vd&dt=1662679366358&bpp=5&bdt=5067&idt=599&shv=r20220901&mjsv=m202209010201&ptt=9&saldr=aa&abxe=1&cookie=ID%3D990f90dea77d143e-222da4e617ce0001%3AT%3D1662646949%3ART%3D1662646949%3AS%3DALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA&nras=1&correlator=968745992875&frm=20&pv=1&ga_vid=173122340.1662679325&ga_sid=1662679367&ga_hid=1486649797&ga_fc=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069177%2C44770881%2C31062931&oid=2&pvsid=476436380370415&tmod=1631624708&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C913&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&ifi=1&uci=a!1&fsb=1&dtd=615 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm2pS76zpIkP7IojiF_PL7ET1cCtrZJBWRgHbJHr1BRX6epKmnV_oCgxp6aD68
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-9944716694200882&output=html&h=90&slotname=4918453445&adk=2106422360&adf=3279755397&pi=t.ma~as.4918453445&w=728&psa=0&format=728x90&url=https%3A%2F%2Fwww.4shared.com%2Fweb%2Fq%23category%3D2&ea=0&wgl=1&uach=WyJXaW5kb3dzIiwiNi4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjgxIixbXSxmYWxzZSxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjgxIl0sWyIgTm90IEE7QnJhbmQiLCI5OS4wLjAuMCJdLFsiR29vZ2xlIENocm9tZSIsIjEwNC4wLjUxMTIuODEiXV0sZmFsc2Vd&dt=1662679365460&bpp=2&bdt=1571&idt=1541&shv=r20220901&mjsv=m202209010201&ptt=9&saldr=aa&cookie=ID%3D990f90dea77d143e-222da4e617ce0001%3AT%3D1662646949%3ART%3D1662646949%3AS%3DALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA&prev_fmts=0x0&nras=1&correlator=968745992875&frm=23&ife=5&pv=1&ga_vid=173122340.1662679325&ga_sid=1662679367&ga_hid=79735168&ga_fc=1&nhd=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=268&ady=237&biw=1263&bih=913&isw=728&ish=90&ifk=140639143&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C44760911%2C44770881%2C31062931&oid=2&pvsid=4395772002080968&tmod=504360310&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C728%2C90&vis=1&rsz=%7C%7CE%7C&abl=CS&pfx=0&fu=4&bc=31&ifi=2&uci=2.5c1ukfxgb1ud&fsb=1&dtd=1556 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm2pS76zpIkP7IojiF_PL7ET1cCtrZJBWRgHbJHr1BRX6epKmnV_oCgxp6aD68
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D2&rand=0.49136712640214264 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: www.jscount.com
Source: global traffic	HTTP traffic detected: GET /a/6619/84dd3495/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D2&rand=0.4531644338631291 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: www.jscount.com
Source: global traffic	HTTP traffic detected: GET /img/5VytGk0Qiq/18232567498/EP1026v01658632808720p HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc596.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/CvCGEvyziq/182b0790f20/Witanimecom_KNVGMWSNYTMSWT_EP_ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc623.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/A11nEZ94iq/182f3dcc4a0/Anime4upcom_OI_EP_09_HD HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc341.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/Gc1BkVWpea/176bcb9f440/Witanimecom_KNM_EP_01_BD-FHD HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc587.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/9Q6PP9NBiq/182e9ee8438/Anime4up_com_YJSSNKET2S_EP_09_ HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc623.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/XI91iox_ea/176bcd14118/Witanimecom_KNM_EP_02_BD-FHD HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc555.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/KMDWxXfZea/176bcd70d78/Witanimecom_KNM_EP_03_BD-FHD HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc555.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/DavRdcrIiq/182cf9429d0/Anime4upcom_OI_EP_08_HD HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc561.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/d0905-84iq/17e63529e90/SpacePowerFancom_Kurokos_Baske HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc721.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/47BfiXgRiq/1783bd6cc20/Witanimecom_IMTSSNDM_EP_03_BD- HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc721.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/QMddIO9jea/182ebcd2390/Anime4up_com_TKNILD2NSWESSNN_E HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc577.4shared.com
Source: global traffic	HTTP traffic detected: GET /img/Yr4mPIcTea/18232534430/EP259v0720p HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc733.4shared.com
Source: global traffic	HTTP traffic detected: GET /web/q HTTP/1.1Host: www.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /pfe/current/tag.min.js?z=3461303 HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6315ec69-3a38"If-Modified-Since: Mon, 05 Sep 2022 12:32:41 GMT
Source: global traffic	HTTP traffic detected: GET /dc9e97fb.js HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--108261-CH-1662733364504-24--If-None-Match: "086fba488bb204138b0f7becc751bf094"
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /pfe/current/universal.min.js?v=3.1.392 HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6315ec69-20481"If-Modified-Since: Mon, 05 Sep 2022 12:32:41 GMT
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=3461303&is_mobile=false&domain=www.4shared.com&var=&ymid=&var_3= HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics.js HTTP/1.1Host: ssl.google-analytics.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Wed, 13 Apr 2022 21:02:38 GMT
Source: global traffic	HTTP traffic detected: GET /web/rest/v1_2/files?category=8&view=web&limit=12 HTTP/1.1Host: www.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"Accept: */*X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/web/qAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D8&rand=0.07828581737371998 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/6619/84dd3495/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D8&rand=0.7492429846730317 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apu.php?zoneid=3423066 HTTP/1.1Host: cdn.itskiddoan.clubConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/42x42/x1/icon_file_app_apk.png?8564315436 HTTP/1.1Host: static.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://static.4shared.com/css/themes/account/icons.css?ver=-1203004047Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=dbaabe1a181e49fc9c45b74f887a1d0e&zoneId=3461303&checkDuplicate=true&ymid=&var= HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=dbaabe1a181e49fc9c45b74f887a1d0e
Source: global traffic	HTTP traffic detected: GET /img/mJhEea2iiq/17fc6af3ad8/pgs1650_CanalNazaVictor_HelpUp HTTP/1.1Host: dc763.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; _gat=1; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D8&rand=0.9485210689518992 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zkogcHDATDDYxzfrgzqGBDSY23TEhMB0AgdWKzvmttSzipl0A_fI-HSHaacrghfwc3qIMKaS7J25r3RvhjMcF2rmNIBFJHKZozCpwCA6uPqd8XALGK3NDXqZ20yo69c1PZXv_6BS5MKFM9mFmyZ_LRYfIH7BtH7Bnniu5jy-6T7JNyzlH8mDoGP3cFDG9OTNl_BmPTy4HkW_67yk9-abC3DJExkeRHCVOAyMqph1Bu4m1XcOERoFOUv1tRXCGAj5G8YcCfN-G6_mlK8sMRrRmbvTrucqoWxf0nC1Y4CFHX5EHFnJZo0uHoaxzYvLSG__E0EfxknsmppejGn6MuTploPLhYWzFEuJyIzjy9eBVTvjVKYeCcpO6UggJCf7vzdMqd-P5r05mDkfRhP6F13T812Dge9QujaMIw8X66cQEgz3zkP3_ue0Fmdu9Ilz3JRdQzkZr9BrIWPaYGh680SuSaFxeuQ96DUWpDrafeJQMcZqjG4jeYvcPzeo2-AGK5JK6-2gxNJtaaDcA_RnYN5ovDdWcPk6uoFNJPJTGv6gpBZTBwZ_AWHMTUqoTTXCUkaDSrbL4WPNLTzSXRvwu2Rs?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--108261-CH-1662733364504-24--
Source: global traffic	HTTP traffic detected: GET /a/6620/e12a795e/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D8&rand=0.3441807231063223 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zJ8gKghHoZgzkq9_ha4Q5aY7GNq_3BIORalJjs0mKXg1B-m-3qwfqVGdPrNyj9K1rgGwpC6dnQlALDxbTajtJ5Vw3lQfBhwUosJUXm08TOFshhUlWhV_eXyHaPhKKAdBIU1Ie1O3dJPxbUg4CLZzB9mB5CuSeErqalw7BN7ve5NlLok4XJuZOb3Z9MaIyuYsVzZqrwNF7Thp5jBJHVuu0qOh57hVVtg0IKc9QnsLgdvEPLLh06nbdREYHA2ft3g4WVdH6vtDsFc3JSpdUMCorVNz6Op8UYNpGOzMyChOzuFauCuCndIN9013pRs51LdBGzr0-WYDXnMldaTB2vWZYz_tPRZ9Z0Acg9QtxEr4Yp5M56ADjDCpqHnVFXdbizN43BBLXto6it2Y1g2lwExiNJ2bjoBzF18yOYSRPUTACVziH0nUEh6H30N20M-hQPfj6kCNVAf0yR1Lepfla2FERZFM14-VykoGipKHk9YRaXRt0pIszWURlbCWygkxjgis1SkPzn9PLoTCLWPDIHXd21kqoeXSlk4tFT4GOmJjuke6YvSXhN1gf6_TZVhnE9bf7bprQm7HuSPYZwvApdKw?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--108261-CH-1662733364504-24--
Source: global traffic	HTTP traffic detected: GET /zTFO-Qd51L4NdFRQi45hRSTXgTiyTlY47Y8qdfaPGsbDuyK9mDz5DSfXhrWouhsG1PxofqzNlkoNh2MQY5JkSDE10Orp2fIELPRtI1A4SSyXR_CQ38wSKpBBmC18xRQnx4ICCIu4uOcpxtDhkHbn82mLJeof9Kh1m8yKPajJnbdohxBNxX4UgzreTByRkl8j5IcezmeSr0xNpiaYUDWhycpSUqXqyIT9ToHTVLQeShI89ReTVW9REYiYJ2XPvDAwIZvgNz6kR0qEb_KN7E7b_60f0TM3rgg6MxxA2agqSHQzcDF01FeEI729wT6mikiepNGL6Kov6ywaSHQLVyZG2zYpRRM-Fj3TiZf9WMvFsRe1TGUyo8gMrVDuIWKc9Pll4raUCbQOBJDyfMqsXnuRZLcnzafrazQqvQh4bGEFJ1rAHFMQ-XpYKYftrgM-czPcYqY2T_KFlkVJ8XaN_foB86vxs_ccWOV_uhXGDuT58suAn22ypKVwxvSKJvPdYF6hwT9mSUritDbBGnWdbOk5BdpuyL13KGTXfYyc4etouY_teMSWVNuUM6tCjA7uWUfJoZdIESw5Il_KbRDiSR6HqORaQrMcBOLv6cmOn7d5r2frr7w?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--108261-CH-1662733364504-24--
Source: global traffic	HTTP traffic detected: GET /z4pnbMoFDyWKWcF51wEK8X_9kfiHffLaHJ160_uKtuaSqpFbqUX0YCu4_8jCqXfCI4YP3PA-rKnsjA1dOaPCPVySHsFnw0XtRA4YO0Blb3dKOPVpntVr2QIHJP2lpzZs-mpfMTgY1sDMgKveU4edZjQjTki7qNsVPzheEC9NmA2oY7qfmfHOxxqLZKCBpv76JL9bsDTxjVmbbhYhsphmX2sq8DKfI5VLR2g1gu5r9be929pGmcnapXyo_C4ubRHGkcgwduHcCI7iGvwC--PYHqRw-PCf8OTT9sKTfmho-JtYSiKxxrYUuKjZVcTsQtM1CtOqTY-xKgbG-G4DR47CT_8RlddmjaJx1WeEPaiwIYYmyrCO9cK3vjsTKLpSMRrGCc6jB0gAI7V9k-TaGpabmKdBb3f60aaEaGPyZo3fdzU0CsXUld2zRCOmHcQQxy5mBYv5oxSdLQ_227d55fSpIBHrJ5kfI8x_hbwVpQ7So-iILKZYlFyYw_LFg-nQZLuhKGCfxHoGuYoNcWpLocMubvgk4dIQt75CPumHvYDWcb7xJV_kqwxN0pGNfnVTjiHZztWIlzBE9bFlqwq1CUEk?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--108261-CH-1662733364504-24--
Source: global traffic	HTTP traffic detected: GET /z06Sb0zpWoKe4rTCg1Wjsnpv6SVSLelRE7HV8YOfdnZRSC8bCWSNxr0b2PJQ2QtEsC9uH2UYdRYNnbzDL5k0dOQkIgS3gn6MP09mFkMr6NmewvR4UKUI7-Q6UEbZu2HVziin9B4u-BTOkImnUN95VhtXPvDEDM0lIy3NreAjhLJQg52WjXXxfLHezAhWoJ1icyAqj7IDoWSq1YU3X1T_eJGTuPMiZiT8iPWKGjqZs6fAL1FL3C0A8Jd4vLpyKtw6q5_G_hDVEgT6YK031Oj88qWhnzApgzqgqAvT5BcfW0lHFjF9R24LwGmGY-hKW1keuAVMti0hf4PoFob2lnJib3GhG_AtgtyaleXIaSKpfxYIQjn9wtDaGETyNX97y4luf0z34FoFg9IWY5MUE4mx5HnYDqcV2idWb9PdL8Z4Qrvno5Xu-YbdjAxRfJs9oDHaGMdj43p2RpTxkITUPOf73Be2pFWOC0bXaqCejSiWtm0K7tNSCdN6WDrADxgP1lTl029t9Pi-BbKP-eLrRpLBylUKtznwyS6YC25RxvHP3c01UxGNhDzsMR2bfdSLjhl1spjCTrVwAaTs-Ol-n?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--108261-CH-1662733364504-24--
Source: global traffic	HTTP traffic detected: GET /zircBSgevun-A6sYol-JXrLHAHCn37GrROYEHfos7Y7lAW_-gpkMam2QTatYaIvsFcgVFLHCuhTlWEp4CRv36U1oLtYZtUWBE1Nrr-rkFNl1uTjIwHCNWnMThC-fPyHYIc7UkcdFkunubzLyrqFooXgWemH8M-KX7h2Sj7sRDE3UKlfgV-bTvYI4DyDc5bR1yrefhvJiDdOK6v_3zqoCRPcNnDUL5U_4sHS-35Jr3lWhq206Jrknd8YlVCSKDasFDdqKA2eKvPtOH4fjq9z4P3kBsc8v4ycRFo9MggYm-lTNY3r1s6gIJdSmvrgxQaN11gzrnWUeCCcQ90GIa8mSaYCskTGVc0vlma_RIqbSokUs9FZP55T-hkbsYm7ZUHYbTSak9HPXJbTln22ERabqSDXGN0INGGkg8ypsVFJCt6MS9O0lvDOdosIn0qN9axHTAk8SyMfVwe1-dGx91KKHlLf3gdPsgfkhT25JWblp5G1MhnXuzG75tHWID6FTUFhVKmK2oaBGT6qSbIoeBnY59X_A-6zwC9h6RmEfM3LKUu282jsff1ds8VHEWTJIlBLkENcj1plvqtPpTfmVwOOzFUVhkDWfFPNuTARjpBes55S0ljKtjew?DC=DO HTTP/1.1Host: aj1090.onlineConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UUID=4d3bad16-ce58-5984-986b-15f13904fd1b; ucv=108262-CH-1662733346101-24--108261-CH-1662733364504-24--
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-9944716694200882&output=html&adk=1812271804&adf=2373185778&plat=9%3A32904%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2Fwww.4shared.com%2Fweb%2Fq%23category%3D8&ea=0&pra=5&wgl=1&easpf=1&easpi=0&asntp=0&asntpv=0&asntpl=0&asntpm=0&asntpc=0&asna=5&asnd=5&asnp=5&asns=5&asmat=1&asptt=-1&uach=WyJXaW5kb3dzIiwiNi4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjgxIixbXSxmYWxzZSxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjgxIl0sWyIgTm90IEE7QnJhbmQiLCI5OS4wLjAuMCJdLFsiR29vZ2xlIENocm9tZSIsIjEwNC4wLjUxMTIuODEiXV0sZmFsc2Vd&dt=1662679373976&bpp=53&bdt=1486&idt=2372&shv=r20220901&mjsv=m202209010201&ptt=9&saldr=aa&cookie=ID%3D990f90dea77d143e-222da4e617ce0001%3AT%3D1662646949%3ART%3D1662646949%3AS%3DALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA&nras=1&correlator=2954333348598&frm=23&ife=5&pv=2&ga_vid=173122340.1662679325&ga_sid=1662679376&ga_hid=1877669687&ga_fc=1&nhd=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&isw=728&ish=90&ifk=140639143&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069395%2C31062931&oid=2&pvsid=3586666878606368&tmod=1069046670&uas=3&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C728%2C90&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32772&bc=31&ifi=1&uci=1.glp9yd8q7cd1&fsb=1&dtd=2468 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm2pS76zpIkP7IojiF_PL7ET1cCtrZJBWRgHbJHr1BRX6epKmnV_oCgxp6aD68
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-9944716694200882&output=html&adk=1812271804&adf=3025194257&lmt=1662679376&plat=9%3A32904%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2Fwww.4shared.com%2Fweb%2Fq%23category%3D8&ea=0&pra=5&wgl=1&easpf=1&easpi=0&asntp=0&asntpv=0&asntpl=0&asntpm=0&asntpc=0&asna=5&asnd=5&asnp=5&asns=5&asmat=1&asptt=-1&uach=WyJXaW5kb3dzIiwiNi4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjgxIixbXSxmYWxzZSxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjgxIl0sWyIgTm90IEE7QnJhbmQiLCI5OS4wLjAuMCJdLFsiR29vZ2xlIENocm9tZSIsIjEwNC4wLjUxMTIuODEiXV0sZmFsc2Vd&dt=1662679376322&bpp=6&bdt=5398&idt=201&shv=r20220901&mjsv=m202209010201&ptt=9&saldr=aa&abxe=1&cookie=ID%3D990f90dea77d143e-222da4e617ce0001%3AT%3D1662646949%3ART%3D1662646949%3AS%3DALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA&nras=1&correlator=2954333348598&frm=20&pv=1&ga_vid=173122340.1662679325&ga_sid=1662679377&ga_hid=1570275767&ga_fc=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C31069395%2C44773261%2C31060566%2C31067825%2C31062931&oid=2&pvsid=1214989905088298&tmod=1554323040&uas=3&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C913&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&ifi=1&uci=a!1&fsb=1&dtd=373 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm2pS76zpIkP7IojiF_PL7ET1cCtrZJBWRgHbJHr1BRX6epKmnV_oCgxp6aD68
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-9944716694200882&output=html&h=90&slotname=4918453445&adk=2106422360&adf=3279755396&pi=t.ma~as.4918453445&w=728&psa=0&format=728x90&url=https%3A%2F%2Fwww.4shared.com%2Fweb%2Fq%23category%3D8&ea=0&wgl=1&uach=WyJXaW5kb3dzIiwiNi4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjgxIixbXSxmYWxzZSxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjgxIl0sWyIgTm90IEE7QnJhbmQiLCI5OS4wLjAuMCJdLFsiR29vZ2xlIENocm9tZSIsIjEwNC4wLjUxMTIuODEiXV0sZmFsc2Vd&dt=1662679374029&bpp=2&bdt=1538&idt=3104&shv=r20220901&mjsv=m202209010201&ptt=9&saldr=aa&cookie=ID%3D990f90dea77d143e-222da4e617ce0001%3AT%3D1662646949%3ART%3D1662646949%3AS%3DALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA&prev_fmts=0x0&nras=1&correlator=2954333348598&frm=23&ife=5&pv=1&ga_vid=173122340.1662679325&ga_sid=1662679376&ga_hid=1877669687&ga_fc=1&nhd=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=268&ady=237&biw=1263&bih=913&isw=728&ish=90&ifk=140639143&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C31069395%2C31062931&oid=2&pvsid=3586666878606368&tmod=1069046670&uas=3&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C728%2C90&vis=1&rsz=%7C%7CE%7C&abl=CS&pfx=0&fu=4&bc=31&ifi=2&uci=2.2ju9cfz9oyz3&fsb=1&dtd=3123 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm2pS76zpIkP7IojiF_PL7ET1cCtrZJBWRgHbJHr1BRX6epKmnV_oCgxp6aD68
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D8&rand=0.07828581737371998 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: www.jscount.com
Source: global traffic	HTTP traffic detected: GET /a/6619/84dd3495/z?ref=&url=https%3A//www.4shared.com/web/q%23category%3D8&rand=0.7492429846730317 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: www.jscount.com
Source: global traffic	HTTP traffic detected: GET /img/mJhEea2iiq/17fc6af3ad8/pgs1650_CanalNazaVictor_HelpUp HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: dc763.4shared.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /folder/ZfkVDMy4/Run_Windows_7_on_Android.html HTTP/1.1Host: www.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.4shared.com/web/qAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /web/rest/statistics/customTracker?e=siFolder.1&v=lg&p=searchPage HTTP/1.1Host: www.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/web/qAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA
Source: global traffic	HTTP traffic detected: GET /jsItemAction.jsp?ver=733496687&lang=zh HTTP/1.1Host: www.4shared.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/folder/ZfkVDMy4/Run_Windows_7_on_Android.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA; JSESSIONID=0AB9BE00C61A9550C84849B2F3538944.dc516
Source: global traffic	HTTP traffic detected: GET /pfe/current/tag.min.js?z=3461303 HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6315ec69-3a38"If-Modified-Since: Mon, 05 Sep 2022 12:32:41 GMT
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /zone?pub=0&zone_id=3461303&is_mobile=false&domain=www.4shared.com&var=&ymid=&var_3= HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pfe/current/universal.min.js?v=3.1.392 HTTP/1.1Host: seeptoag.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "6315ec69-20481"If-Modified-Since: Mon, 05 Sep 2022 12:32:41 GMT
Source: global traffic	HTTP traffic detected: GET /gid.js?pub=0&userId=dbaabe1a181e49fc9c45b74f887a1d0e&zoneId=3461303&checkDuplicate=true&ymid=&var= HTTP/1.1Host: my.rtmark.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ID=dbaabe1a181e49fc9c45b74f887a1d0e
Source: global traffic	HTTP traffic detected: GET /apu.php?zoneid=3423066 HTTP/1.1Host: cdn.itskiddoan.clubConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics.js HTTP/1.1Host: ssl.google-analytics.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Wed, 13 Apr 2022 21:02:38 GMT
Source: global traffic	HTTP traffic detected: GET /a/2102/99293bb/z?ref=https%3A//www.4shared.com/web/q&url=https%3A//www.4shared.com/folder/ZfkVDMy4/Run_Windows_7_on_Android.html&rand=0.6493090849399077 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=https%3A//www.4shared.com/web/q&url=https%3A//www.4shared.com/folder/ZfkVDMy4/Run_Windows_7_on_Android.html&rand=0.6360061835905093 HTTP/1.1Host: www.jscount.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-9944716694200882&output=html&adk=1812271804&adf=2373185788&plat=9%3A32904%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32&format=0x0&url=https%3A%2F%2Fwww.4shared.com%2Fweb%2Fq%23category%3D1&ea=0&pra=5&wgl=1&easpf=1&easpi=0&asntp=0&asntpv=0&asntpl=0&asntpm=0&asntpc=0&asna=5&asnd=5&asnp=5&asns=5&asmat=1&asptt=-1&uach=WyJXaW5kb3dzIiwiNi4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjgxIixbXSxmYWxzZSxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjgxIl0sWyIgTm90IEE7QnJhbmQiLCI5OS4wLjAuMCJdLFsiR29vZ2xlIENocm9tZSIsIjEwNC4wLjUxMTIuODEiXV0sZmFsc2Vd&dt=1662679405377&bpp=6&bdt=352&idt=652&shv=r20220901&mjsv=m202209010201&ptt=9&saldr=aa&cookie=ID%3D990f90dea77d143e-222da4e617ce0001%3AT%3D1662646949%3ART%3D1662646949%3AS%3DALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA&nras=1&correlator=3917330461660&frm=23&ife=5&pv=1&ga_vid=173122340.1662679325&ga_sid=1662679406&ga_hid=1280301384&ga_fc=1&nhd=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=913&isw=728&ish=90&ifk=140639143&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44771547%2C44772928%2C31062931&oid=2&pvsid=662964357708773&tmod=1100798861&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C728%2C90&vis=2&rsz=%7C%7Cs%7C&abl=NS&fu=32772&bc=31&ifi=1&uci=1.mxk7u9ygfs6r&fsb=1&dtd=736 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm2pS76zpIkP7IojiF_PL7ET1cCtrZJBWRgHbJHr1BRX6epKmnV_oCgxp6aD68
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-9944716694200882&output=html&h=90&slotname=4918453445&adk=2106422360&adf=3279755398&pi=t.ma~as.4918453445&w=728&psa=0&format=728x90&url=https%3A%2F%2Fwww.4shared.com%2Fweb%2Fq%23category%3D1&ea=0&wgl=1&uach=WyJXaW5kb3dzIiwiNi4wLjAiLCJ4ODYiLCIiLCIxMDQuMC41MTEyLjgxIixbXSxmYWxzZSxudWxsLCI2NCIsW1siQ2hyb21pdW0iLCIxMDQuMC41MTEyLjgxIl0sWyIgTm90IEE7QnJhbmQiLCI5OS4wLjAuMCJdLFsiR29vZ2xlIENocm9tZSIsIjEwNC4wLjUxMTIuODEiXV0sZmFsc2Vd&dt=1662679405383&bpp=2&bdt=357&idt=779&shv=r20220901&mjsv=m202209010201&ptt=9&saldr=aa&cookie=ID%3D990f90dea77d143e-222da4e617ce0001%3AT%3D1662646949%3ART%3D1662646949%3AS%3DALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA&prev_fmts=0x0&nras=1&correlator=3917330461660&frm=23&ife=5&pv=1&ga_vid=173122340.1662679325&ga_sid=1662679406&ga_hid=1280301384&ga_fc=1&nhd=1&u_tz=-420&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=268&ady=237&biw=1263&bih=913&isw=728&ish=90&ifk=140639143&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759842%2C44771547%2C44772928%2C31062931&oid=2&pvsid=662964357708773&tmod=1100798861&uas=0&nvt=1&eae=2&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C728%2C90&vis=2&rsz=%7C%7CEr%7C&abl=CS&pfx=0&fu=4&bc=31&ifi=2&uci=2.80j1wt9ylav7&fsb=1&dtd=842 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm2pS76zpIkP7IojiF_PL7ET1cCtrZJBWRgHbJHr1BRX6epKmnV_oCgxp6aD68
Source: global traffic	HTTP traffic detected: GET /folder/ZfkVDMy4/Run_Windows_7_on_Android.html HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: www.4shared.com
Source: global traffic	HTTP traffic detected: GET /a/2102/99293bb/z?ref=https%3A//www.4shared.com/web/q&url=https%3A//www.4shared.com/folder/ZfkVDMy4/Run_Windows_7_on_Android.html&rand=0.6493090849399077 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: www.jscount.com
Source: global traffic	HTTP traffic detected: GET /a/4/28b1a41b/z?ref=https%3A//www.4shared.com/web/q&url=https%3A//www.4shared.com/folder/ZfkVDMy4/Run_Windows_7_on_Android.html&rand=0.6360061835905093 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: www.jscount.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /sw_3461303.js?v=3.1.392&o=dbaabe1a181e49fc9c45b74f887a1d0e&pub=0&p=3461303 HTTP/1.1Host: www.4shared.comConnection: keep-aliveCache-Control: max-age=0Accept: */*Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.4shared.com/folder/ZfkVDMy4/Run_Windows_7_on_Android.htmlUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: day1host=h; _ga=GA1.2.173122340.1662679325; _gid=GA1.2.2007996180.1662679325; __gads=ID=990f90dea77d143e-222da4e617ce0001:T=1662646949:RT=1662646949:S=ALNI_Mb711eD8s7vbK0rhCJ9jQEc3wlyBA; JSESSIONID=0AB9BE00C61A9550C84849B2F3538944.dc516; _gat=1
Source: global traffic	HTTP traffic detected: GET /pfe/current/service-worker.min.js?r=sw&v=2 HTTP/1.1Host: seeptoag.netConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /key?pub=0&id=www.4shared.com HTTP/1.1Host: seeptoag.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: */*Origin: https://www.4shared.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CI22yQEIpbbJAQjBtskBCKmdygEIlKHLAQj8qswBCLy8zAEI3rzMAQiywcwBCMTBzAEI18HMAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.4shared.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 4shared.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CONSENT=PENDING+904; AEC=AakniGO7HqlHWlnoY-P22_SwwnNSfVGxlF1NgK5nuj5WLe313NyJi16g7z4; SOCS=CAISHAgCEhJnd3NfMjAyMjA4MDgtMF9SQzEaAmVuIAEaBgiAvOuXBg; NID=511=nUT82hOv6CVwMNqDg-sTtCMJJ6SQ1v_cCpfCpf5nt8EolEbal01GWFyjG01tqWQgh9ciRU880J6nLd2gdbhAJs44PsHAZaVQAFIbrqe2FmFgjrAAK7W9Z8u5LDvwsuZRng98jP6E23SJ4fsPIs326YmnuCwa92dRRCcB6MNeI_o

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 204.155.149.132:443 -> 192.168.2.3:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.148.11:443 -> 192.168.2.3:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.66:443 -> 192.168.2.3:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.53:443 -> 192.168.2.3:49906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.145.41:443 -> 192.168.2.3:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.76:443 -> 192.168.2.3:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.148.11:443 -> 192.168.2.3:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.147.29:443 -> 192.168.2.3:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.186:443 -> 192.168.2.3:49911 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.135.229:443 -> 192.168.2.3:49912 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.56:443 -> 192.168.2.3:49913 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.117.178.186:443 -> 192.168.2.3:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.94.233.169:443 -> 192.168.2.3:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.145.44:443 -> 192.168.2.3:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.176:443 -> 192.168.2.3:49918 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.139:443 -> 192.168.2.3:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.75:443 -> 192.168.2.3:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.88.227.143:443 -> 192.168.2.3:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.147.26:443 -> 192.168.2.3:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.80:443 -> 192.168.2.3:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.74:443 -> 192.168.2.3:49925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.88.227.173:443 -> 192.168.2.3:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.88.227.173:443 -> 192.168.2.3:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.81:443 -> 192.168.2.3:50065 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.184:443 -> 192.168.2.3:50064 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.38:443 -> 192.168.2.3:50066 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.135.232:443 -> 192.168.2.3:50067 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.183:443 -> 192.168.2.3:50070 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 208.88.227.179:443 -> 192.168.2.3:50072 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.72:443 -> 192.168.2.3:50075 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.84:443 -> 192.168.2.3:50076 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.99:443 -> 192.168.2.3:50085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.94:443 -> 192.168.2.3:50086 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.65:443 -> 192.168.2.3:50199 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.117.178.177:443 -> 192.168.2.3:50200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.19:443 -> 192.168.2.3:50201 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.117.178.177:443 -> 192.168.2.3:50203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.145:443 -> 192.168.2.3:50204 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.177:443 -> 192.168.2.3:50208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.177:443 -> 192.168.2.3:50207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.155.149.36:443 -> 192.168.2.3:50210 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.101.134.189:443 -> 192.168.2.3:50212 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.117.178.93:443 -> 192.168.2.3:50460 version: TLS 1.2

System Summary

Classification label

Source: classification engine

Classification label: mal56.phis.win@38/0@140/56

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction,OptimizationHints --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1944 --field-trial-handle=1792,i,18064797872785390001,1100947309921476284,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dolphin-app-gmqrc.ondigitalocean.app/c0678e7d922226400010b5657b4f5159/?client_id=0000007990-0000-0lty-ij00-000000000&y=6eamRuYXBpZXJAaGVuaWZmLmNvbQ%3D%3D&redirect_uri=https%3a%2f%2foutlook.office.com%2fowa%2f&resource=client_id&response_mode=form_post&response_type=code+id_token&scope=openid&msafed=0&client-request-id=45f4d5f9-4657-4816-9528-af3f59994174&protectedtoken=true
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1944 --field-trial-handle=1792,i,18064797872785390001,1100947309921476284,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Creates files inside the program directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\GoogleUpdater

Jump to behavior

Found GUI installer (many successful clicks)

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Creates a directory in C:\Program Files

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\GoogleUpdater

Jump to behavior