Edit tour

Windows Analysis Report
https://moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy

Overview

General Information

Sample URL:	https://moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy
Analysis ID:	1431378
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5636 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1992,i,15924905948728438455,12727776227608025473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5148 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3540 --field-trial-handle=1992,i,15924905948728438455,12727776227608025473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6180 --field-trial-handle=1992,i,15924905948728438455,12727776227608025473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5148 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2684 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://firebase.moboreader.com/?link=https%3A%2F%2Fenfirebase.cdreader.com%2F%3Fndactionstr%3Dndaction:readonline(bookid%253D48430322%2526chapterindex%253D0%2526utm_medium%253Dofficialsite%2526utm_campaign%253Dpcweb%2526website%253DENC1)&apn=com.changdu.ereader&isi=1291247971&ibi=com.changduhk.ereader&pt=118830109&ct=officialsite&mt=8&utm_source=officialsite&utm_medium=officialsite&utm_campaign=pcweb MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3948 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2004,i,8703026979774579190,17724210921793595651,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-FXR92K8Y0T&gtm=45je44m0h1v880590056z8860000276za200&_p=1713997155714&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=1389965382.1713997159&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1713997158&sct=1&seg=0&dl=https%3A%2F%2Fwww.moboreader.com%2FbookDetail%2F48430322%2FRomance%2FMy-Babys-Daddy&dt=My%20Baby%27s%20Daddy%20novel%20by%20Mr.Adeel%20PDF%20Read%20Online%20-%20MoboReader&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=6476 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.moboreader.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.moboreader.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Vary: CookieSet-Cookie: _ga_devsite=GA1.3.1603339555.1713997166; Expires=Fri, 24 Apr 2026 22:19:43 GMT; Max-Age=63072000; Path=/Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-bcnRXC2y3FZ4xS41+ryG+yTh7KEA2t' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2Strict-Transport-Security: max-age=63072000; includeSubdomains; preloadX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffCache-Control: no-cache, must-revalidateExpires: 0Pragma: no-cacheX-Cloud-Trace-Context: f9a751aa374fe3896adc532e501293ffDate: Wed, 24 Apr 2024 22:19:43 GMTServer: Google FrontendContent-Length: 60371Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Vary: CookieSet-Cookie: _ga_devsite=GA1.3.1603339555.1713997166; Expires=Fri, 24 Apr 2026 22:19:43 GMT; Max-Age=63072000; Path=/Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-KlI95LF6laFmzx1Ms9h8oGOzL+8S6c' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2Strict-Transport-Security: max-age=63072000; includeSubdomains; preloadX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffCache-Control: no-cache, must-revalidateExpires: 0Pragma: no-cacheX-Cloud-Trace-Context: 127ea6830dada51c62ffa0d1f5480d6cDate: Wed, 24 Apr 2024 22:19:43 GMTServer: Google FrontendContent-Length: 60375Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Vary: CookieSet-Cookie: _ga_devsite=GA1.3.1603339555.1713997166; Expires=Fri, 24 Apr 2026 22:19:50 GMT; Max-Age=63072000; Path=/Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-MTA+4fK+ZWWO5sgnpU3YrG/Djl7kzd' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2Strict-Transport-Security: max-age=63072000; includeSubdomains; preloadX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffCache-Control: no-cache, must-revalidateExpires: 0Pragma: no-cacheX-Cloud-Trace-Context: 1d676c9af8cfb8055b85b09ccf4750a6Date: Wed, 24 Apr 2024 22:19:50 GMTServer: Google FrontendContent-Length: 60371Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Vary: CookieSet-Cookie: _ga_devsite=GA1.3.1603339555.1713997166; Expires=Fri, 24 Apr 2026 22:20:02 GMT; Max-Age=63072000; Path=/Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-ZUdkbpt30k7C9xIeNX44mGhncJKeft' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2Strict-Transport-Security: max-age=63072000; includeSubdomains; preloadX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffCache-Control: no-cache, must-revalidateExpires: 0Pragma: no-cacheX-Cloud-Trace-Context: 18acd575aef774d9d4a98ffbe6d41b51Date: Wed, 24 Apr 2024 22:20:02 GMTServer: Google FrontendContent-Length: 60368Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_544.2.dr	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: http://developers.google.com/chrome/management/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: http://developers.google.com/chrome/policy/reference/rest/
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: http://i3.ytimg.com/vi/XHvWx1F3S4A/hqdefault.jpg
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: http://mths.be/fromcodepoint
Source: chromecache_357.2.dr, chromecache_537.2.dr	String found in binary or memory: http://ogp.me/ns#
Source: chromecache_537.2.dr	String found in binary or memory: http://ogp.me/ns#%20fb:%20http://ogp.me/ns/fb#%22%7D%7D
Source: chromecache_357.2.dr, chromecache_537.2.dr	String found in binary or memory: http://ogp.me/ns/fb#
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: http://schema.org/
Source: chromecache_487.2.dr, chromecache_624.2.dr, chromecache_496.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_346.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: http://www.d-project.com/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: http://www.denso-wave.com/qrcode/faqpatent-e.html
Source: chromecache_544.2.dr	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_624.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_624.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_624.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_624.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_624.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_624.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_478.2.dr	String found in binary or memory: https://ads.google.com/home/campaigns/app-ads/
Source: chromecache_367.2.dr, chromecache_384.2.dr, chromecache_541.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_367.2.dr, chromecache_384.2.dr, chromecache_541.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_612.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_329.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://api-explorer-staging.uc.r.appspot.com/apix-embedder.js
Source: chromecache_596.2.dr, chromecache_325.2.dr	String found in binary or memory: https://api.cdreader.com/api.aspx?actionid=101&formtype=44&rt=2&channel=0&tid=3&restype=5&focus=3)
Source: chromecache_596.2.dr, chromecache_325.2.dr	String found in binary or memory: https://api.cdreader.com/api.aspx?actionid=8001&id=40781322&restype=5&dstat=9999002.)
Source: chromecache_596.2.dr, chromecache_325.2.dr	String found in binary or memory: https://api.cdreader.com/api.aspx?actionid=8001&id=43797322&restype=5&dstat=9999000.)
Source: chromecache_596.2.dr, chromecache_325.2.dr	String found in binary or memory: https://api.cdreader.com/api.aspx?actionid=8001&id=46526322&restype=5&dstat=9999001.)
Source: chromecache_475.2.dr	String found in binary or memory: https://api.vore.top/api/IPdata
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_412.2.dr, chromecache_563.2.dr	String found in binary or memory: https://apps.apple.com/app/apple-store/id1291247971?pt=118830109&ct=officialsite&mt=8
Source: chromecache_412.2.dr, chromecache_563.2.dr	String found in binary or memory: https://author.moboreader.com/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://autopush-developerprofiles-pa.sandbox.googleapis.com
Source: chromecache_367.2.dr, chromecache_592.2.dr, chromecache_384.2.dr, chromecache_541.2.dr, chromecache_538.2.dr, chromecache_456.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/access-context-manager/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/advisory-notifications/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/ai-platform/notebooks/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/anthos/multicluster-management/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/api-gateway/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/api-keys/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/apigee/docs/reference/apis/apigee/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/apigee/docs/reference/apis/apigeeregistry/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/app-hub/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/appengine/docs/admin-api/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/artifacts/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/asset-inventory/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/assured-workloads/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/bare-metal/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/bigquery-transfer/docs/reference/datatransfer/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/column-data-masking/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/connections-api-intro/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/reference/analytics-hub/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/reference/bigqueryconnection/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/bigtable/docs/reference/admin/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/billing/docs/reference/budget/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/billing/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/binary-authorization/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/blockchain-node-engine/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/certificate-authority-service/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/certificate-manager/docs/reference/public-ca/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/channel/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/cloud-build/docs/api/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/compute/docs/osconfig/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/compute/docs/oslogin/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/compute/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/contact-center/insights/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/container-analysis/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/container-registry/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/data-catalog/docs/reference/data-lineage/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/data-catalog/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/data-fusion/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/data-labeling/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/database-migration/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/dataflow/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/dataplex/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/dataproc-metastore/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/dataproc/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/datastore/docs/reference/admin/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/deploy/docs/api/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/deployment-manager/docs/reference/latest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/deployment-manager/docs/reference/v2beta/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/deployment-manager/runtime-configurator/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/dialogflow-enterprise/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/discovery-engine/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/dns/api/v1/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/dns/docs/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/document-ai/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/document-warehouse/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/domains/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/error-reporting/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/eventarc/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/filestore/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/firestore/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/functions/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/healthcare/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/iam/credentials/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/iam/docs/reference/policyanalyzer/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/iam/docs/reference/policysimulator/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/iam/docs/reference/policytroubleshooter/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/iam/docs/reference/sts/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/identity-platform/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/identity/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/integration-connectors/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/kms/docs/reference/inventory/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/kms/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/kubernetes-engine/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/life-sciences/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/log?format=json&hasfast=true
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/managed-microsoft-ad/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/memorystore/docs/memcached/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/memorystore/docs/redis/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/migrate/compute-engine/docs/5.0/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/migration-center/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/migration-center/docs/rapidmigrationassessment/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/ml-engine/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/monitoring/api/ref_v3/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/natural-language/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/network-connectivity/docs/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/network-intelligence-center/docs/connectivity-tests/reference/networkmanage
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/pubsub/lite/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/recommendations-ai/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/recommender/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/resource-manager/docs/cloud-asset-inventory/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/resource-manager/docs/reference/resource-settings/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/resource-manager/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/scheduler/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/secret-manager/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/service-directory/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/service-infrastructure/docs/service-consumer-management/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/service-infrastructure/docs/service-control/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/service-infrastructure/docs/service-management/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/service-infrastructure/docs/service-networking/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/service-usage/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/shell/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/solutions/vmware-as-a-service/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/source-repositories/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/speech-to-text/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/sql/docs/mysql/admin-api/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/sql/docs/postgres/admin-api/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/storage-transfer/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/storage/docs/json_api/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/support/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/talent-solution/job-search/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/tasks/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/text-to-speech/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/tpu/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/trace/docs/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/trace/docs/reference/v1/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/traffic-director/docs/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/translate/docs/reference/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/vertex-ai/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/video-intelligence/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/vision/docs/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/vpc/docs/reference/vpcaccess/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/web-risk/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/workflows/docs/reference/executions/rest
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/workflows/docs/reference/executions/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/workflows/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://cloud.google.com/workload-manager/docs/reference/rest/
Source: chromecache_478.2.dr	String found in binary or memory: https://console.firebase.google.com/
Source: chromecache_478.2.dr	String found in binary or memory: https://console.firebase.google.com/?dlAction=PrepDemoProject
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://cos-enres.cdreader.com
Source: chromecache_596.2.dr, chromecache_325.2.dr	String found in binary or memory: https://cos-enres.cdreader.com/site-322(new)/0/40781/coverorgin.jpg?v=c2164aac07767e17c371a8bac71db1
Source: chromecache_596.2.dr, chromecache_325.2.dr	String found in binary or memory: https://cos-enres.cdreader.com/site-322(new)/0/43797/coverorgin.jpg?v=1e22b3963c4e81c8684ce6493e8823
Source: chromecache_596.2.dr, chromecache_325.2.dr	String found in binary or memory: https://cos-enres.cdreader.com/site-322(new)/0/46526/coverorgin.jpg?v=b9c6020c218485eb126d7e78259e01
Source: chromecache_537.2.dr	String found in binary or memory: https://cos-enres.cdreader.com/site-322(new)/0/48430/coverbig.jpg?v=9701bf4848415b3788ef2e7cf5ae3c30
Source: chromecache_537.2.dr	String found in binary or memory: https://cos-enres.cdreader.com/site-322(new)/0/48430/coverbigger.jpg?v=9701bf4848415b3788ef2e7cf5ae3
Source: chromecache_415.2.dr, chromecache_588.2.dr	String found in binary or memory: https://cos-enres.cdreader.com/site-322(new)/0/48430/covermiddle.jpg?v=9701bf4848415b3788ef2e7cf5ae3
Source: chromecache_537.2.dr	String found in binary or memory: https://cos-enres.cdreader.com/site-322(new)/0/48430/coverorgin.jpg?v=9701bf4848415b3788ef2e7cf5ae3c
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://cos-frres.cdreader.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://cos-ftres.cdreader.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://cos-idres.cdreader.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://cos-jares.cdreader.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://cos-ptres.cdreader.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://cos-rures.cdreader.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://cos-spres.cdreader.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://cos-thres.cdreader.com
Source: chromecache_588.2.dr	String found in binary or memory: https://cosusen.cdreader.com/reader_pro_en/resource/tx/106.jpg
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developer.android.com/google/play/integrity/
Source: chromecache_478.2.dr	String found in binary or memory: https://developer.android.com/studio/debug/app-quality-insights
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developer.chrome.com/docs/versionhistory/reference/
Source: chromecache_346.2.dr	String found in binary or memory: https://developerprofiles-pa.googleapis.com
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.devsite.corp.google.com
Source: chromecache_346.2.dr	String found in binary or memory: https://developers.google.com
Source: chromecache_393.2.dr, chromecache_413.2.dr, chromecache_442.2.dr, chromecache_346.2.dr, chromecache_548.2.dr, chromecache_478.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/abusive-experience-report/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/ad-experience-report/v1/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/admin-sdk/alertcenter/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/admin-sdk/data-transfer/v1/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/admin-sdk/directory/v1/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/admin-sdk/groups-migration/v1/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/admin-sdk/groups-settings/v1/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/admin-sdk/reports/v1/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/admob/api/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/admob/api/v1/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/adsense/host/v4.1/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/adsense/management/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/amp/cache/reference/acceleratedmobilepageurl/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/config/mgmt/v3/mgmtReference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/config/provisioning/v3/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/config/userdeletion/v3/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/core/v3/reference
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/core/v4/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/data/v1/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/mcf/v3/reference
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/metadata/v3/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/realtime/v3/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/android-publisher/api-ref/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/android/management/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/android/work/play/custom-app-api/v1/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/android/work/play/emm-api/v1/
Source: chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/apis-explorer
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/apps-script/api/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/assistant/smarthome/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/authorized-buyers/apis/marketplace/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/authorized-buyers/apis/realtimebidding/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/authorized-buyers/apis/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/bid-manager/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/blogger/docs/2.0/json/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/blogger/docs/3.0/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/books/docs/v1/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/calendar/v3/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/civic-information/docs/v2/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/classroom/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/cloud-search/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/custom-search/v1/introduction/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/data-portability/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/digital-asset-links/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/discovery/v1/reference/
Source: chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/display-video/api/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/docs/api/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/domains/acme-dns/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/domains/rdap/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/doubleclick-advertisers/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/drive/activity/v2/reference/rest/
Source: chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/drive/labels/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/drive/v2/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/drive/v3/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/fact-check/tools/api/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/fit/rest/v1/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/fonts/docs/developer_api/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/forms/api/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/games/services/management/api/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/games/services/publishing/api/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/games/services/web/api/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/gmail/api/v1/reference/
Source: chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/gmail/postmaster/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/google-apps/licensing/v1/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/google-apps/reseller/v1/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/hangouts/chat/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/identity/toolkit/web/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/keep/api/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/knowledge-graph/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/manufacturers/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/places/web-service/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/marketing-platform/devguides/api/admin/v1/rest/v1alpha/organizations.a
Source: chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/my-business/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/my-business/reference/businessinformation/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/my-business/reference/notifications/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/my-business/reference/performance/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/my-business/reference/qanda/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/my-business/reference/verifications/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/nest/device-access/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/pay/passes/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/photos/library/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/play/developer/reporting/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/profile/badges/profile/created-profile
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/profile/badges/recognitions/learnings
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/profile/content-policy
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/profile/help
Source: chromecache_372.2.dr	String found in binary or memory: https://developers.google.com/profile/help#what_is_a_release_note
Source: chromecache_393.2.dr, chromecache_372.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/profile/help/faq#why_am_i_unable_to_create_a_profile_with_my_google_wo
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/safe-browsing/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/safe-browsing/v4/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/search-ads/reporting/api/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/search-ads/v2/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/search/apis/indexing-api/v3/reference/indexing/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/sheets/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/shopping-content/v2/reference/v2.1/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/site-verification/v1/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/slides/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/speed/docs/insights/v5/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/streetview/publish/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/tag-manager/api/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/tag-manager/api/v1/reference/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/tasks/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/terms/site-terms
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/travel/impact-model/docs/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/vault/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/web/tools/chrome-user-experience-report/api/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/webmaster-tools/search-console-api/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/workspace/events/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/youtube/analytics/reference/
Source: chromecache_496.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/youtube/reporting/v1/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/youtube/v3/docs/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/youtube/v3/live/docs/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/zero-touch/reference/customer/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://developers.google.com/zero-touch/reference/reseller/rest/
Source: chromecache_413.2.dr, chromecache_442.2.dr, chromecache_548.2.dr, chromecache_478.2.dr	String found in binary or memory: https://developerscontentsearch-pa.clients6.google.com
Source: chromecache_493.2.dr, chromecache_570.2.dr	String found in binary or memory: https://developerscontentsearch-pa.googleapis.com
Source: chromecache_413.2.dr, chromecache_442.2.dr, chromecache_548.2.dr, chromecache_478.2.dr	String found in binary or memory: https://developerscontentserving-pa.clients6.google.com
Source: chromecache_493.2.dr, chromecache_570.2.dr	String found in binary or memory: https://developerscontentserving-pa.googleapis.com
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://discovery.googleapis.com/discovery/v1/apis?&preferred=true
Source: chromecache_624.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://explorer.apis.google.com/apix-embedder.js
Source: chromecache_478.2.dr	String found in binary or memory: https://extensions.dev/extensions
Source: chromecache_478.2.dr	String found in binary or memory: https://extensions.dev/extensions/algolia/firestore-algolia-search
Source: chromecache_478.2.dr	String found in binary or memory: https://extensions.dev/extensions/firebase/firestore-bigquery-export
Source: chromecache_478.2.dr	String found in binary or memory: https://extensions.dev/extensions/firebase/firestore-send-email
Source: chromecache_478.2.dr	String found in binary or memory: https://extensions.dev/extensions/stripe/firestore-stripe-payments
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase-dot-devsite-v2-prod.appspot.com
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://firebase.blog/
Source: chromecache_555.2.dr	String found in binary or memory: https://firebase.google.cn
Source: chromecache_555.2.dr	String found in binary or memory: https://firebase.google.com
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/?hl=es-419
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/?hl=id
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/?hl=ja
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/?hl=ko
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/?hl=pt-br
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/?hl=zh-cn
Source: chromecache_548.2.dr	String found in binary or memory: https://firebase.google.com/_d/dynamic_content
Source: chromecache_442.2.dr	String found in binary or memory: https://firebase.google.com/_d/profile/ogb
Source: chromecache_413.2.dr	String found in binary or memory: https://firebase.google.com/_d/profile/user
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/_static/firebase/images/icon.svg
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/community
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/community/events
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/community/learn
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/community/stories
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/demo-day/2023/?utm_source=firesite&utm_medium=referral&utm_campa
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/docs
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/docs/build
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/docs/dynamic-links/rest/
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/docs/engage
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/docs/guides
Source: chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/docs/hosting/reference/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/docs/projects/api/reference/rest/
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference/app-distribution/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference/appcheck/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference/fcm/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference/fcmdata/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference/rest/database/database-management/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference/rest/storage/rest/
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/docs/release
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/docs/samples
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/docs/storage/security/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/docs/test-lab/reference/testing/rest/
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/docs/test-lab/reference/toolresults/rest/
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/frame/root_7883290101c54355eaa4dd30195926f60ae1cd50580b56b5fb6fa174caca9
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/images/social.png
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/pricing
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/products-build
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/products-engage
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/products-release
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://firebase.google.com/products/app-distribution/
Source: chromecache_413.2.dr, chromecache_442.2.dr, chromecache_548.2.dr, chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/s/opensearch.xml
Source: chromecache_413.2.dr, chromecache_442.2.dr, chromecache_548.2.dr, chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/s/results
Source: chromecache_544.2.dr, chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/s/results?q=
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/solutions
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/static/images/homepage/home-icon-build.png
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/static/images/homepage/home-icon-build_2x.png
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/static/images/homepage/home-icon-engage.png
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/static/images/homepage/home-icon-engage_2x.png
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/static/images/homepage/home-icon-release.png
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/static/images/homepage/home-icon-release_2x.png
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/static/images/homepage/solutions-illo-dark_1x.png
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/static/images/homepage/solutions-illo-dark_2x.png
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/static/images/homepage/solutions-illo_1x.png
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/static/images/homepage/solutions-illo_2x.png
Source: chromecache_493.2.dr, chromecache_570.2.dr	String found in binary or memory: https://firebase.google.com/static/styles/code-picker.css
Source: chromecache_493.2.dr, chromecache_570.2.dr	String found in binary or memory: https://firebase.google.com/static/styles/main.css
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/support
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/support/
Source: chromecache_478.2.dr	String found in binary or memory: https://firebase.google.com/support/contact/bugs-features/
Source: chromecache_413.2.dr, chromecache_442.2.dr, chromecache_548.2.dr	String found in binary or memory: https://firebase.googleblog.com/
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_413.2.dr, chromecache_442.2.dr, chromecache_548.2.dr, chromecache_478.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_473.2.dr, chromecache_440.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_440.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialsymbolsoutlined/v175/kJEhBvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oFsI
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_622.2.dr, chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_339.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xTDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vrtSM1J-gEPT5Ese6hmH
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://github.com/dmoscrop/fold-case
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://github.com/firebase/
Source: chromecache_487.2.dr, chromecache_624.2.dr, chromecache_496.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_346.2.dr	String found in binary or memory: https://google.dev
Source: chromecache_624.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_478.2.dr	String found in binary or memory: https://io.google/2024/?utm_source=firebase&utm_medium=embedded_marketing&utm_campaign=&
Source: chromecache_624.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://jsfiddle.net/api/post/library/pure/
Source: chromecache_475.2.dr	String found in binary or memory: https://m.bakisah.com
Source: chromecache_475.2.dr	String found in binary or memory: https://m.kifflire.com
Source: chromecache_475.2.dr	String found in binary or memory: https://m.lera.mobi
Source: chromecache_475.2.dr	String found in binary or memory: https://m.litradnovie.com
Source: chromecache_475.2.dr	String found in binary or memory: https://m.manobook.com
Source: chromecache_475.2.dr	String found in binary or memory: https://m.meghabook.com
Source: chromecache_475.2.dr	String found in binary or memory: https://m.moboreader.com
Source: chromecache_537.2.dr	String found in binary or memory: https://m.moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy
Source: chromecache_475.2.dr	String found in binary or memory: https://m.soukainovel.com
Source: chromecache_346.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?v=quarterly&key=$
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://mathiasbynens.be/
Source: chromecache_475.2.dr	String found in binary or memory: https://mob.cdreader.com
Source: chromecache_541.2.dr, chromecache_538.2.dr, chromecache_456.2.dr, chromecache_462.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_367.2.dr, chromecache_592.2.dr, chromecache_384.2.dr, chromecache_541.2.dr, chromecache_538.2.dr, chromecache_456.2.dr, chromecache_462.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_346.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_563.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.changdu.ereader&referrer=utm_source%3Dofficialsite
Source: chromecache_346.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_346.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://policies.google.com/terms/generative-ai
Source: chromecache_624.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_624.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_624.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_624.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_537.2.dr	String found in binary or memory: https://s.go-mpulse.net/boomerang/
Source: chromecache_537.2.dr	String found in binary or memory: https://s2.go-mpulse.net/boomerang/
Source: chromecache_537.2.dr, chromecache_478.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://staging-developerprofiles-pa.sandbox.googleapis.com
Source: chromecache_367.2.dr, chromecache_384.2.dr, chromecache_541.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_367.2.dr, chromecache_384.2.dr, chromecache_541.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_612.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_540.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect?
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://storage.googleapis.com/apisnippets
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://support.google.com/$
Source: chromecache_478.2.dr	String found in binary or memory: https://support.google.com/datastudio/answer/7259176
Source: chromecache_478.2.dr	String found in binary or memory: https://support.google.com/firebase/answer/6318765
Source: chromecache_478.2.dr	String found in binary or memory: https://support.google.com/firebase/answer/6392038
Source: chromecache_478.2.dr	String found in binary or memory: https://support.google.com/firebase/answer/7392275
Source: chromecache_478.2.dr	String found in binary or memory: https://support.google.com/firebase/answer/9005934
Source: chromecache_478.2.dr	String found in binary or memory: https://support.google.com/firebase/answer/9118259
Source: chromecache_478.2.dr	String found in binary or memory: https://support.google.com/firebase/answer/9168499?ref_topic=6400762
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://support.google.com/legal/answer/13505487
Source: chromecache_624.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_624.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_624.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_624.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_612.2.dr, chromecache_540.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_367.2.dr, chromecache_592.2.dr, chromecache_384.2.dr, chromecache_541.2.dr, chromecache_538.2.dr, chromecache_456.2.dr, chromecache_462.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://twitter.com/Firebase
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=$
Source: chromecache_412.2.dr, chromecache_563.2.dr	String found in binary or memory: https://twitter.com/share
Source: chromecache_325.2.dr	String found in binary or memory: https://upimg.cdreader.com/resource/author_1.png?1
Source: chromecache_325.2.dr	String found in binary or memory: https://upimg.cdreader.com/resourceEn/hot24.png
Source: chromecache_624.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	String found in binary or memory: https://www.bakisah.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.bakisah.com/_cd/img/logo.8eced82.png
Source: chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	String found in binary or memory: https://www.cdreader.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.cdreader.com/_cd/img/logo.7fceeb6.png
Source: chromecache_538.2.dr, chromecache_456.2.dr, chromecache_462.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_612.2.dr, chromecache_540.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_612.2.dr, chromecache_540.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_612.2.dr, chromecache_540.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_541.2.dr, chromecache_538.2.dr, chromecache_456.2.dr, chromecache_462.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_612.2.dr, chromecache_540.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_367.2.dr, chromecache_592.2.dr, chromecache_384.2.dr, chromecache_541.2.dr, chromecache_538.2.dr, chromecache_456.2.dr, chromecache_462.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_413.2.dr, chromecache_442.2.dr, chromecache_548.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.googleapis.com/auth/developerprofiles
Source: chromecache_413.2.dr, chromecache_442.2.dr, chromecache_548.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.googleapis.com/auth/developerprofiles.award
Source: chromecache_624.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_367.2.dr, chromecache_592.2.dr, chromecache_384.2.dr, chromecache_541.2.dr, chromecache_538.2.dr, chromecache_456.2.dr, chromecache_462.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_612.2.dr, chromecache_540.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_555.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=$
Source: chromecache_537.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-KF7XJMF
Source: chromecache_443.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_559.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_594.2.dr, chromecache_593.2.dr	String found in binary or memory: https://www.gstatic.com/devrel-devsite
Source: chromecache_478.2.dr	String found in binary or memory: https://www.gstatic.com/devrel-devsite/prod/v2a398f8757b82183cb182aec0e7c4771ac1123a40d36fc97c8783f6
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.gstatic.com/devrel-devsite/prod/v530e2b4758c915c59675435df4424a8b4929cfd382db2f39325a640
Source: chromecache_478.2.dr	String found in binary or memory: https://www.gstatic.com/mobilesdk/200629_mobilesdk/stripe_subscriptions_120
Source: chromecache_478.2.dr	String found in binary or memory: https://www.gstatic.com/mobilesdk/200707_mobilesdk/export_bigquery_120
Source: chromecache_478.2.dr	String found in binary or memory: https://www.gstatic.com/mobilesdk/200707_mobilesdk/trigger_email_120
Source: chromecache_478.2.dr	String found in binary or memory: https://www.gstatic.com/mobilesdk/210414_mobilesdk/algolia_search_120
Source: chromecache_346.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/$
Source: chromecache_624.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	String found in binary or memory: https://www.kifflire.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.kifflire.com/_cd/img/logo.5984071.png
Source: chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	String found in binary or memory: https://www.lera.mobi
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.lera.mobi/_cd/img/logo.8961fb6.png
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: https://www.linkedin.com/shareArticle?mini=true&url=$
Source: chromecache_478.2.dr	String found in binary or memory: https://www.linkedin.com/showcase/firebase/
Source: chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	String found in binary or memory: https://www.litradnovie.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.litradnovie.com/_cd/img/logo.ffda5db.png
Source: chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	String found in binary or memory: https://www.manobook.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.manobook.com/_cd/img/logo.ee0cd91.png
Source: chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	String found in binary or memory: https://www.meghabook.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.meghabook.com/_cd/img/logo.a97a5cd.png
Source: chromecache_367.2.dr, chromecache_384.2.dr, chromecache_541.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_537.2.dr	String found in binary or memory: https://www.moboreader.com
Source: chromecache_537.2.dr	String found in binary or memory: https://www.moboreader.com/Books/Women/Romance
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.moboreader.com/_cd/img/logo.985523a.png
Source: chromecache_537.2.dr	String found in binary or memory: https://www.moboreader.com/author/Mr.Adeel-142498655
Source: chromecache_537.2.dr	String found in binary or memory: https://www.moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.moboreader.com/ko
Source: chromecache_537.2.dr	String found in binary or memory: https://www.moboreader.com/searchHistory?keyword=
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.moboreader.com/tl
Source: chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	String found in binary or memory: https://www.soukainovel.com
Source: chromecache_397.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.soukainovel.com/_cd/img/logo.22308a3.png
Source: chromecache_496.2.dr, chromecache_579.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_624.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.youtube.com/embed/XHvWx1F3S4A
Source: chromecache_624.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_538.2.dr, chromecache_456.2.dr, chromecache_462.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.youtube.com/user/Firebase
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=XHvWx1F3S4A
Source: chromecache_546.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=XHvWx1F3S4A=
Source: chromecache_624.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_624.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_624.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_624.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50171
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50172
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49723 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@30/586@86/27

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1992,i,15924905948728438455,12727776227608025473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://firebase.moboreader.com/?link=https%3A%2F%2Fenfirebase.cdreader.com%2F%3Fndactionstr%3Dndaction:readonline(bookid%253D48430322%2526chapterindex%253D0%2526utm_medium%253Dofficialsite%2526utm_campaign%253Dpcweb%2526website%253DENC1)&apn=com.changdu.ereader&isi=1291247971&ibi=com.changduhk.ereader&pt=118830109&ct=officialsite&mt=8&utm_source=officialsite&utm_medium=officialsite&utm_campaign=pcweb
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2004,i,8703026979774579190,17724210921793595651,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6180 --field-trial-handle=1992,i,15924905948728438455,12727776227608025473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1992,i,15924905948728438455,12727776227608025473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6180 --field-trial-handle=1992,i,15924905948728438455,12727776227608025473,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2004,i,8703026979774579190,17724210921793595651,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_346.2.dr	Binary or memory string: ["product-CloudRunForAnthosOnVmware","Cloud Run for Anthos on VMware"],["product-CloudRunForAnthos","Cloud Run for Anthos"],["product-CloudRun","Cloud Run"],["product-CloudScheduler","Cloud Scheduler"],["api-CloudSearchApi","Cloud Search API"],["product-CloudSearch","Cloud Search"],["product-CloudSecureWebGateway","Cloud Secure Web Gateway"],["product-CloudSecureWebProxy","Cloud Secure Web Proxy"],["category-CloudSecurity","Cloud Security"],["product-CloudServiceExtensions","Cloud Service Extensions"],
Source: chromecache_346.2.dr	Binary or memory string: referenceUrl:"https://developers.google.com/games/services/publishing/api/"},"gamesManagement:v1management":{methodPath:"{1x/}",referenceUrl:"https://developers.google.com/games/services/management/api/"},"gkebackup:v1":{methodPath:"{apiVersion}/{1x?T.1/}",referenceUrl:"https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke/reference/rest/"},"gkehub:v2alpha":{description:"Connect your Anthos clusters on VMware and other Kubernetes clusters to Google Cloud.",methodPath:"{apiVersion}/{1x?T*.1/}",
Source: chromecache_346.2.dr	Binary or memory string: "Angular CLI"],["product-AngularDevTools","Angular DevTools"],["product-AngularFramework","Angular framework"],["product-AngularMaterial","Angular Material"],["product-Angular","Angular"],["product-AnthosClustersOnAws","Anthos clusters on AWS"],["product-AnthosClustersOnAzure","Anthos clusters on Azure"],["product-AnthosClustersOnVmware","Anthos clusters on VMware"],["product-AnthosClusters","Anthos clusters"],["product-AnthosConfigManagement","Anthos Config Management"],["product-Anthos","Anthos"],
Source: chromecache_346.2.dr	Binary or memory string: ["category-GoogleCloudUseCases","Google Cloud use cases"],["product-GoogleCloudVmwareEngine","Google Cloud VMware Engine"],["api-ContactsCarddavApi","Google Contacts CardDAV API"],["programGroup-CommunityAccelerator","Google Developer Accelerator"],["product-GoogleDeveloperDocumentationStyleGuide","Google developer documentation style guide"],["programGroup-GDE","Google Developer Experts"],["programGroup-GDG","Google Developer Groups"],["programGroup-GDSC","Google Developer Student Clubs"],["product-GoogleDistributedCloudEdge",
Source: chromecache_346.2.dr	Binary or memory string: referenceUrl:"https://cloud.google.com/migrate/compute-engine/docs/5.0/reference/rest/"},"vmmigration:v1alpha1":{methodPath:"{apiVersion}/{1x?T.1/}",referenceUrl:"https://cloud.google.com/migrate/compute-engine/docs/5.0/reference/rest/"},"vmwareengine:v1":{methodPath:"",referenceUrl:"https://cloud.google.com/solutions/vmware-as-a-service/"},"vpcaccess:v1":{methodPath:"{apiVersion}/{1x.1/}",referenceUrl:"https://cloud.google.com/vpc/docs/reference/vpcaccess/rest/"},"vpcaccess:v1beta1":{methodPath:"{apiVersion}/{1x*.1/}",

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://s2.go-mpulse.net/boomerang/	0%	URL Reputation	safe
http://mths.be/fromcodepoint	0%	URL Reputation	safe
https://cos-rures.cdreader.com	0%	Avira URL Cloud	safe
https://www.manobook.com	0%	Avira URL Cloud	safe
https://io.google/2024/?utm_source=firebase&utm_medium=embedded_marketing&utm_campaign=&	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://cosusen.cdreader.com/reader_pro_en/resource/tx/106.jpg	0%	Avira URL Cloud	safe
https://www.bakisah.com	0%	Avira URL Cloud	safe
https://m.litradnovie.com	0%	Avira URL Cloud	safe
https://cos-ftres.cdreader.com	0%	Avira URL Cloud	safe
https://m.lera.mobi	0%	Avira URL Cloud	safe
https://google.dev	0%	Avira URL Cloud	safe
https://cos-ptres.cdreader.com	0%	Avira URL Cloud	safe
https://extensions.dev/extensions/firebase/firestore-send-email	0%	Avira URL Cloud	safe
https://www.lera.mobi	0%	Avira URL Cloud	safe
https://cos-enres.cdreader.com/site-322(new)/0/48430/coverbigger.jpg?v=9701bf4848415b3788ef2e7cf5ae3	0%	Avira URL Cloud	safe
https://www.cdreader.com	0%	Avira URL Cloud	safe
https://www.manobook.com/_cd/img/logo.ee0cd91.png	0%	Avira URL Cloud	safe
https://www.kifflire.com/_cd/img/logo.5984071.png	0%	Avira URL Cloud	safe
https://www.meghabook.com	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
plus.l.google.com	172.217.215.138	true	false	high
i.ytimg.com	173.194.219.119	true	false	high
overseas-r-en.cdreader.com	49.51.42.14	true	false	unknown
firebase.blog	199.36.158.100	true	false	unknown
k0dq2obj.ovslegodl.sched.ovscdns.com	43.152.2.243	true	false	unknown
static.doubleclick.net	74.125.138.148	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
stats.g.doubleclick.net	142.250.9.157	true	false	high
moboreader.com	119.28.35.75	true	false	unknown
enfirebase.cdreader.com	199.36.158.100	true	false	unknown
analytics-alv.google.com	216.239.38.181	true	false	high
youtube-ui.l.google.com	172.217.215.136	true	false	high
googleads.g.doubleclick.net	64.233.176.154	true	false	high
play.google.com	172.253.124.138	true	false	high
developers.google.com	142.250.105.139	true	false	high
www.google.com	172.217.215.103	true	false	high
firebase.google.com	172.217.215.139	true	false	high
analytics.google.com	173.194.219.101	true	false	high
firebase.moboreader.com	151.101.1.195	true	false	unknown
firebase-dot-devsite-v2-prod.appspot.com	142.250.9.153	true	false	unknown
173bf10e.akstat.io	unknown	unknown	false	unknown
s.go-mpulse.net	unknown	unknown	false	unknown
cosusen.cdreader.com	unknown	unknown	false	unknown
cos-enres.cdreader.com	unknown	unknown	false	unknown
cos-jares.cdreader.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	high
www.moboreader.com	unknown	unknown	false	unknown
xgmefzqxgj4iwzrjqvrq-f-627cb8c6c-clientnsv4-s.akamaihd.net	unknown	unknown	false	high
c.go-mpulse.net	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://firebase.google.com/static/images/homepage/cloud-plus-firebase-dark_1x.png	false		high
https://firebase.google.com/static/images/homepage/solutions-illo_1x.png	false		high
https://firebase.google.com/static/images/integrations/slack.png	false		high
https://www.youtube.com/generate_204?BZx1kg	false		high
about:blank	false	Avira URL Cloud: safe	low
https://www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/remote.js	false		high
https://firebase-dot-devsite-v2-prod.appspot.com/root_7883290101c54355eaa4dd30195926f60ae1cd50580b56b5fb6fa174caca9126.frame	false		unknown
https://cosusen.cdreader.com/reader_pro_en/resource/tx/106.jpg	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/static/images/integrations/pagerduty.png	false		high
https://firebase.google.com/static/images/appmakers/lyft_1x.png	false		high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-36037335-1&cid=151786364.1713997200&jid=946774959&gjid=1358733382&_gid=1872613629.1713997200&_u=aGBAgEABEAAAAGAAI~&z=805323953	false		high
https://analytics.google.com/g/collect?v=2&tid=G-CW55HF8NVT&_ng=1&gtm=45je44m0v9101113212z872040039za200&_p=1713997198972&_gaz=1&gcs=G111&gcd=13r3r3l3l5&npa=0&dma=0&cid=151786364.1713997200&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&dl=https%3A%2F%2Ffirebase.google-b197145817.com%2F&sid=1713997201&sct=1&seg=0&dt=Firebase%20%7C%20Google%E2%80%99s%20Mobile%20and%20Web%20App%20Development%20Platform&en=page_view&_fv=1&_ss=1&ep.page_locale=default&ep.is_eea=false&ep.percent_scrolled=0&ep.scroll_increment=0&ep.scroll_instance=1&tfd=36176	false		high
https://firebase.google.com/static/images/appmakers/duolingo-dark_1x.png	false		high
https://firebase.google.com/static/images/appmakers/trivago-dark_1x.png	false		high
https://stats.g.doubleclick.net/g/collect?v=2&_ng=1&tid=G-CW55HF8NVT&cid=151786364.1713997200&gtm=45je44m0v9101113212z872040039za200&aip=1&dma=0&gcs=G111&gcd=13r3r3l3l5&npa=0	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.bakisah.com	chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/zero-touch/reference/customer/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://s2.go-mpulse.net/boomerang/	chromecache_537.2.dr	false	URL Reputation: safe	unknown
https://firebase.google.com/docs/reference/rest/database/database-management/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://cloud.google.com/document-ai/docs/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://developers.google.com/analytics/devguides/reporting/metadata/v3/reference/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_612.2.dr	false		high
https://cloud.google.com/api-gateway/docs/reference/rest/	chromecache_346.2.dr	false		high
https://m.lera.mobi	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.android.com/google/play/integrity/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://cloud.google.com/pubsub/lite/docs/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://developers.google.com/admin-sdk/alertcenter/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://cloud.google.com/migration-center/docs/rapidmigrationassessment/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://cloud.google.com/workload-manager/docs/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://cloud.google.com/data-catalog/docs/reference/data-lineage/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://firebase.google.com/community/events	chromecache_478.2.dr	false		high
http://i3.ytimg.com/vi/XHvWx1F3S4A/hqdefault.jpg	chromecache_546.2.dr, chromecache_478.2.dr	false		high
https://support.google.com/firebase/answer/6392038	chromecache_478.2.dr	false		high
https://developers.google.com/search-ads/reporting/api/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://cloud.google.com/compute/docs/osconfig/rest/	chromecache_346.2.dr	false		high
https://firebase.google.com/static/images/homepage/home-icon-build_2x.png	chromecache_478.2.dr	false		high
https://cloud.google.com/talent-solution/job-search/docs/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://developers.google.com/adsense/host/v4.1/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://google.dev	chromecache_346.2.dr	false	Avira URL Cloud: safe	unknown
https://cos-ftres.cdreader.com	chromecache_397.2.dr, chromecache_519.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_624.2.dr	false		high
https://firebase.google.com/?hl=ko	chromecache_546.2.dr, chromecache_478.2.dr	false		high
https://firebase.google.com/support/contact/bugs-features/	chromecache_478.2.dr	false		high
https://io.google/2024/?utm_source=firebase&utm_medium=embedded_marketing&utm_campaign=&	chromecache_478.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://developers.google.com/manufacturers/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://cloud.google.com/firestore/docs/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://cloud.google.com/dataproc/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://www.manobook.com	chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://m.litradnovie.com	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://developerscontentserving-pa.clients6.google.com	chromecache_413.2.dr, chromecache_442.2.dr, chromecache_548.2.dr, chromecache_478.2.dr	false		high
http://mathiasbynens.be/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://firebase.google.com/docs/release	chromecache_478.2.dr	false		high
https://cloud.google.com/anthos/multicluster-management/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://cloud.google.com/datastore/docs/reference/admin/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://firebase.google.com/?hl=zh-cn	chromecache_546.2.dr, chromecache_478.2.dr	false		high
https://developers.google.com/tag-manager/api/v1/reference/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://stats.g.doubleclick.net/j/collect?	chromecache_540.2.dr	false		high
https://developers.google.com/analytics/devguides/reporting/realtime/v3/reference/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://developers.google.com/drive/v2/reference/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://cos-rures.cdreader.com	chromecache_397.2.dr, chromecache_519.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com	chromecache_346.2.dr	false		high
https://cloud.google.com/video-intelligence/docs/reference/rest/	chromecache_346.2.dr	false		high
https://cos-enres.cdreader.com/site-322(new)/0/48430/coverbigger.jpg?v=9701bf4848415b3788ef2e7cf5ae3	chromecache_537.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/docs/dynamic-links/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://extensions.dev/extensions/firebase/firestore-send-email	chromecache_478.2.dr	false	Avira URL Cloud: safe	unknown
https://cos-ptres.cdreader.com	chromecache_397.2.dr, chromecache_519.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/ai-platform/notebooks/docs/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://www.lera.mobi	chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/site-verification/v1/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://support.google.com/legal/answer/13505487	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://www.manobook.com/_cd/img/logo.ee0cd91.png	chromecache_397.2.dr, chromecache_519.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/android-publisher/api-ref/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://firebase.google.com/s/opensearch.xml	chromecache_413.2.dr, chromecache_442.2.dr, chromecache_548.2.dr, chromecache_478.2.dr	false		high
https://developers.google.com/pay/passes/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://www.meghabook.com	chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://www.kifflire.com/_cd/img/logo.5984071.png	chromecache_397.2.dr, chromecache_519.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_496.2.dr	false		high
https://developers.google.com/fact-check/tools/api/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://developers.google.com/vault/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://firebase.google.com/docs/reference/appcheck/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://youtu.be/	chromecache_624.2.dr	false		high
https://play.google.com/store/apps/details?id=com.changdu.ereader&referrer=utm_source%3Dofficialsite	chromecache_563.2.dr	false		high
http://mths.be/fromcodepoint	chromecache_393.2.dr, chromecache_346.2.dr	false	URL Reputation: safe	unknown
https://firebase.google.com/products-build	chromecache_478.2.dr	false		high
https://developers.google.com/zero-touch/reference/reseller/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://www.cdreader.com	chromecache_397.2.dr, chromecache_519.2.dr, chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/iam/docs/reference/policytroubleshooter/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://firebase.google.com/s/results	chromecache_413.2.dr, chromecache_442.2.dr, chromecache_548.2.dr, chromecache_478.2.dr	false		high
https://developers.google.com/maps/documentation/places/web-service/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://cloud.google.com/domains/docs/reference/rest/	chromecache_346.2.dr	false		high
https://developers.google.com/my-business/reference/performance/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://developers.google.com/search-ads/v2/reference/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://firebase.google.com/_static/firebase/images/icon.svg	chromecache_478.2.dr	false		high
https://cloud.google.com/migrate/compute-engine/docs/5.0/reference/rest/	chromecache_346.2.dr	false		high
https://firebase.google.com/s/results?q=	chromecache_544.2.dr, chromecache_546.2.dr, chromecache_478.2.dr	false		high
https://cloud.google.com/vision/docs/reference/rest/	chromecache_346.2.dr	false		high
https://cloud.google.com/life-sciences/docs/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high
https://firebase.google.com/docs/projects/api/reference/rest/	chromecache_393.2.dr, chromecache_346.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.215.103	www.google.com	United States	15169	GOOGLEUS	false
43.152.2.154	unknown	Japan	4249	LILLY-ASUS	false
74.125.138.148	static.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.215.136	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
173.194.219.101	analytics.google.com	United States	15169	GOOGLEUS	false
172.253.124.138	play.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
49.51.42.14	overseas-r-en.cdreader.com	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
74.125.136.113	unknown	United States	15169	GOOGLEUS	false
43.152.2.243	k0dq2obj.ovslegodl.sched.ovscdns.com	Japan	4249	LILLY-ASUS	false
142.250.105.156	unknown	United States	15169	GOOGLEUS	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
173.194.219.136	unknown	United States	15169	GOOGLEUS	false
151.101.1.195	firebase.moboreader.com	United States	54113	FASTLYUS	false
108.177.122.119	unknown	United States	15169	GOOGLEUS	false
64.233.176.154	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
64.233.177.155	unknown	United States	15169	GOOGLEUS	false
142.250.9.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
119.28.35.75	moboreader.com	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
142.250.9.153	firebase-dot-devsite-v2-prod.appspot.com	United States	15169	GOOGLEUS	false
172.253.124.156	unknown	United States	15169	GOOGLEUS	false
74.125.136.99	unknown	United States	15169	GOOGLEUS	false
172.217.215.119	unknown	United States	15169	GOOGLEUS	false
199.36.158.100	firebase.blog	United States	15169	GOOGLEUS	false
173.194.219.119	i.ytimg.com	United States	15169	GOOGLEUS	false
64.233.185.91	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431378
Start date and time:	2024-04-25 00:18:25 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@30/586@86/27
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://firebase.google.com/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.215.94, 142.250.9.100, 142.250.9.101, 142.250.9.102, 142.250.9.113, 142.250.9.138, 142.250.9.139, 74.125.138.84, 34.104.35.123, 23.50.120.139, 23.50.120.200, 74.125.138.97, 23.213.26.139, 23.213.26.146, 23.207.48.129, 23.213.26.151, 23.213.26.136, 23.34.82.88, 23.34.82.72, 23.46.200.36, 104.76.210.85, 104.76.210.75, 74.125.136.95, 64.233.177.94, 142.250.105.94, 172.217.215.101, 172.217.215.113, 172.217.215.139, 172.217.215.138, 172.217.215.102, 172.217.215.100, 23.223.44.236, 23.223.44.231, 13.85.23.86, 72.21.81.240, 192.229.211.108, 64.233.176.95, 64.233.185.94, 52.165.164.15, 74.125.138.94, 172.253.124.95, 142.250.9.95, 108.177.122.95, 172.217.215.95, 142.250.105.95, 74.125.138.95, 64.233.185.95, 64.233.177.95, 173.194.219.95, 142.251.15.95, 172.253.124.94, 20.166.126.56, 64.233.176.97, 142.250.105.113, 142.250.105.138, 142.250.105.100, 142.250.105.101, 142.250.105.139, 142.250.105.102, 142.250.9.94
Excluded domains from analysis (whitelisted): a308.dscv.akamai.net, cos-enres.cdreader.com.akamaized.net, slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, a248.b.akamai.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, e4518.dscx.akamaiedge.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, ip46.go-mpulse.net.edgekey.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, a137.b.akamai.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, a982.dscv.akamai.net, jnn-pa.googleapis.com, wu-bg-shim.trafficmanager.net, cos-jares.cdreader.com.akamaized.net, wildcard46.akstat.io.edgekey.net, fe3cr.delivery.mp.microsoft.com, e4518.dscapi7.akamaiedge.net, fe3.delivery.mp.micr
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy

Simulations

Behavior and APIs

⊘No simulations

QR Codes

Source	URL
Screenshot	https://firebase.moboreader.com/?link=https%3A%2F%2Fenfirebase.cdreader.com%2F%3Fndactionstr%3Dndaction:readonline(bookid%253D48430322%2526chapterindex%253D0%2526utm_medium%253Dofficialsite%2526utm_campaign%253Dpcweb%2526website%253DENC1)&apn=com.changdu.ereader&isi=1291247971&ibi=com.changduhk.ereader&pt=118830109&ct=officialsite&mt=8&utm_source=officialsite&utm_medium=officialsite&utm_campaign=pcweb

Source

URL

Screenshot

https://firebase.moboreader.com/?link=https%3A%2F%2Fenfirebase.cdreader.com%2F%3Fndactionstr%3Dndaction:readonline(bookid%253D48430322%2526chapterindex%253D0%2526utm_medium%253Dofficialsite%2526utm_campaign%253Dpcweb%2526website%253DENC1)&apn=com.changdu.ereader&isi=1291247971&ibi=com.changduhk.ereader&pt=118830109&ct=officialsite&mt=8&utm_source=officialsite&utm_medium=officialsite&utm_campaign=pcweb

Source: https://enfirebase.cdreader.com/?ndactionstr=ndaction:readonline(bookid%3D48430322%26chapterindex%3D0%26utm_medium%3Dofficialsite%26utm_campaign%3Dpcweb%26website%3DENC1)	HTTP Parser: No favicon
Source: https://firebase-dot-devsite-v2-prod.appspot.com/root_7883290101c54355eaa4dd30195926f60ae1cd50580b56b5fb6fa174caca9126.frame	HTTP Parser: No favicon
Source: https://firebase-dot-devsite-v2-prod.appspot.com/root_7883290101c54355eaa4dd30195926f60ae1cd50580b56b5fb6fa174caca9126.frame	HTTP Parser: No favicon
Source: https://firebase.google.com/_d/alternate-gtm?referrer=	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/XHvWx1F3S4A?origin=https%3A%2F%2Ffirebase.google.com&autoplay&controls&embed_domain&enablejsapi=1&end&hl&showinfo=0&start&video-id=XHvWx1F3S4A&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/XHvWx1F3S4A?origin=https%3A%2F%2Ffirebase.google.com&autoplay&controls&embed_domain&enablejsapi=1&end&hl&showinfo=0&start&video-id=XHvWx1F3S4A&widgetid=1	HTTP Parser: No favicon
Source: https://developers.google.com/_d/analytics-iframe	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: moboreader.com
Source: global traffic	DNS traffic detected: DNS query: www.moboreader.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cos-enres.cdreader.com
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: cos-jares.cdreader.com
Source: global traffic	DNS traffic detected: DNS query: overseas-r-en.cdreader.com
Source: global traffic	DNS traffic detected: DNS query: c.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: firebase.moboreader.com
Source: global traffic	DNS traffic detected: DNS query: enfirebase.cdreader.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cosusen.cdreader.com
Source: global traffic	DNS traffic detected: DNS query: firebase.google.com
Source: global traffic	DNS traffic detected: DNS query: 173bf10e.akstat.io
Source: global traffic	DNS traffic detected: DNS query: xgmefzqxgj4iwzrjqvrq-f-627cb8c6c-clientnsv4-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: firebase-dot-devsite-v2-prod.appspot.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: firebase.blog
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: developers.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 21:19:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.970350244511475
Encrypted:	false
SSDEEP:	48:8/EdCjTmGmfH9OidAKZdA19ehwiZUklqehay+3:8/Njrmy9y
MD5:	89DF4DC046C6194A4DCFD059F1226EDC
SHA1:	3A901FE5EBAEC55F743CCC556A6B78CD80878F9D
SHA-256:	D4438FCA1C7B3FFF5368A20FF45EFD93F6C0889961DC0F7A6E254F700054537D
SHA-512:	EC9F740872B1A89CE1DE329220E24262316EAAD6BE63057E550A1E995A3A0C7CB287F8EDBEFBB3021E16852E837E2FE2E3F8BA19CD2B0424F3A2534B4B2BFE28
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......o....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xe.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xe.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xe.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xe............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xg............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............b.1.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 00:19:13.453013897 CEST	192.168.2.5	1.1.1.1	0x3639	Standard query (0)	moboreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:13.453344107 CEST	192.168.2.5	1.1.1.1	0x1ac0	Standard query (0)	moboreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:15.108144045 CEST	192.168.2.5	1.1.1.1	0xe90d	Standard query (0)	www.moboreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:15.108422041 CEST	192.168.2.5	1.1.1.1	0x65b2	Standard query (0)	www.moboreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:15.686366081 CEST	192.168.2.5	1.1.1.1	0x9aef	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:15.686963081 CEST	192.168.2.5	1.1.1.1	0x5466	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:17.178148031 CEST	192.168.2.5	1.1.1.1	0xf671	Standard query (0)	cos-enres.cdreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:17.178999901 CEST	192.168.2.5	1.1.1.1	0x50db	Standard query (0)	cos-enres.cdreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:17.689702988 CEST	192.168.2.5	1.1.1.1	0x9cd7	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:17.690000057 CEST	192.168.2.5	1.1.1.1	0xfcca	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Apr 25, 2024 00:19:17.690335989 CEST	192.168.2.5	1.1.1.1	0x461	Standard query (0)	cos-jares.cdreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:17.690593958 CEST	192.168.2.5	1.1.1.1	0xacae	Standard query (0)	cos-jares.cdreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:18.190440893 CEST	192.168.2.5	1.1.1.1	0xcced	Standard query (0)	cos-enres.cdreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:18.191046000 CEST	192.168.2.5	1.1.1.1	0xaea3	Standard query (0)	cos-enres.cdreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:19.851567984 CEST	192.168.2.5	1.1.1.1	0x95b8	Standard query (0)	overseas-r-en.cdreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:19.851787090 CEST	192.168.2.5	1.1.1.1	0xd239	Standard query (0)	overseas-r-en.cdreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:19.999138117 CEST	192.168.2.5	1.1.1.1	0x564a	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:19.999269962 CEST	192.168.2.5	1.1.1.1	0xef50	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Apr 25, 2024 00:19:20.057171106 CEST	192.168.2.5	1.1.1.1	0xb80	Standard query (0)	www.moboreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:20.057316065 CEST	192.168.2.5	1.1.1.1	0xbfe5	Standard query (0)	www.moboreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:20.058931112 CEST	192.168.2.5	1.1.1.1	0x161a	Standard query (0)	cos-jares.cdreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:20.059288979 CEST	192.168.2.5	1.1.1.1	0x334	Standard query (0)	cos-jares.cdreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:20.609364033 CEST	192.168.2.5	1.1.1.1	0xbefe	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:20.609781027 CEST	192.168.2.5	1.1.1.1	0x257e	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Apr 25, 2024 00:19:20.927851915 CEST	192.168.2.5	1.1.1.1	0x5e6d	Standard query (0)	firebase.moboreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:20.927982092 CEST	192.168.2.5	1.1.1.1	0x1121	Standard query (0)	firebase.moboreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:21.666868925 CEST	192.168.2.5	1.1.1.1	0x32e	Standard query (0)	overseas-r-en.cdreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:21.667020082 CEST	192.168.2.5	1.1.1.1	0xfe2e	Standard query (0)	overseas-r-en.cdreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:21.706655979 CEST	192.168.2.5	1.1.1.1	0x9452	Standard query (0)	enfirebase.cdreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:21.706762075 CEST	192.168.2.5	1.1.1.1	0x15a7	Standard query (0)	enfirebase.cdreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:22.314961910 CEST	192.168.2.5	1.1.1.1	0xfa61	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:22.317596912 CEST	192.168.2.5	1.1.1.1	0xaa1	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:22.590539932 CEST	192.168.2.5	1.1.1.1	0x7ca	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:22.590675116 CEST	192.168.2.5	1.1.1.1	0x2dd6	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 00:19:25.894427061 CEST	192.168.2.5	1.1.1.1	0xc7d2	Standard query (0)	cosusen.cdreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:25.894797087 CEST	192.168.2.5	1.1.1.1	0xead	Standard query (0)	cosusen.cdreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:26.010231972 CEST	192.168.2.5	1.1.1.1	0x987c	Standard query (0)	firebase.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:26.010576010 CEST	192.168.2.5	1.1.1.1	0x3fe9	Standard query (0)	firebase.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:26.980748892 CEST	192.168.2.5	1.1.1.1	0x30d8	Standard query (0)	173bf10e.akstat.io	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:26.980910063 CEST	192.168.2.5	1.1.1.1	0x347b	Standard query (0)	173bf10e.akstat.io	65	IN (0x0001)	false
Apr 25, 2024 00:19:26.999264002 CEST	192.168.2.5	1.1.1.1	0x1037	Standard query (0)	cosusen.cdreader.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:26.999624968 CEST	192.168.2.5	1.1.1.1	0xe7f8	Standard query (0)	cosusen.cdreader.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:27.058728933 CEST	192.168.2.5	1.1.1.1	0x9a66	Standard query (0)	xgmefzqxgj4iwzrjqvrq-f-627cb8c6c-clientnsv4-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:27.059130907 CEST	192.168.2.5	1.1.1.1	0x92e8	Standard query (0)	xgmefzqxgj4iwzrjqvrq-f-627cb8c6c-clientnsv4-s.akamaihd.net	65	IN (0x0001)	false
Apr 25, 2024 00:19:27.062045097 CEST	192.168.2.5	1.1.1.1	0xb2e3	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:27.062463045 CEST	192.168.2.5	1.1.1.1	0xdf7a	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:28.240402937 CEST	192.168.2.5	1.1.1.1	0x71e6	Standard query (0)	firebase-dot-devsite-v2-prod.appspot.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:28.241060019 CEST	192.168.2.5	1.1.1.1	0x8404	Standard query (0)	firebase-dot-devsite-v2-prod.appspot.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:29.719763041 CEST	192.168.2.5	1.1.1.1	0xddbf	Standard query (0)	firebase.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:29.720200062 CEST	192.168.2.5	1.1.1.1	0xb046	Standard query (0)	firebase.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:30.509867907 CEST	192.168.2.5	1.1.1.1	0xda95	Standard query (0)	firebase.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:30.510262966 CEST	192.168.2.5	1.1.1.1	0xdba5	Standard query (0)	firebase.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:49.348000050 CEST	192.168.2.5	1.1.1.1	0x361d	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:49.348373890 CEST	192.168.2.5	1.1.1.1	0x7619	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:49.349041939 CEST	192.168.2.5	1.1.1.1	0xfe7f	Standard query (0)	firebase.blog	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:49.349292040 CEST	192.168.2.5	1.1.1.1	0x9da4	Standard query (0)	firebase.blog	65	IN (0x0001)	false
Apr 25, 2024 00:19:49.533071995 CEST	192.168.2.5	1.1.1.1	0x5576	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:49.533313990 CEST	192.168.2.5	1.1.1.1	0x7a8d	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:50.986164093 CEST	192.168.2.5	1.1.1.1	0x6703	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:50.986342907 CEST	192.168.2.5	1.1.1.1	0xd3eb	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:51.906389952 CEST	192.168.2.5	1.1.1.1	0xbc13	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:51.906641006 CEST	192.168.2.5	1.1.1.1	0x66bc	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:54.369453907 CEST	192.168.2.5	1.1.1.1	0xa2b7	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:54.369836092 CEST	192.168.2.5	1.1.1.1	0xb307	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 00:19:54.394762993 CEST	192.168.2.5	1.1.1.1	0x38ba	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:54.395216942 CEST	192.168.2.5	1.1.1.1	0x790e	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 00:19:54.966974974 CEST	192.168.2.5	1.1.1.1	0x74c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:54.967538118 CEST	192.168.2.5	1.1.1.1	0xf028	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:56.922920942 CEST	192.168.2.5	1.1.1.1	0x87cc	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:56.924240112 CEST	192.168.2.5	1.1.1.1	0x2b64	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 00:19:56.930191994 CEST	192.168.2.5	1.1.1.1	0x9f7c	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:56.930464983 CEST	192.168.2.5	1.1.1.1	0x7fb5	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 25, 2024 00:19:57.965513945 CEST	192.168.2.5	1.1.1.1	0x25bf	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:19:57.965683937 CEST	192.168.2.5	1.1.1.1	0x6cec	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 25, 2024 00:20:00.005690098 CEST	192.168.2.5	1.1.1.1	0x7f18	Standard query (0)	developers.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:20:00.005897999 CEST	192.168.2.5	1.1.1.1	0x411e	Standard query (0)	developers.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:20:01.062302113 CEST	192.168.2.5	1.1.1.1	0xd2bc	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 00:20:01.062303066 CEST	192.168.2.5	1.1.1.1	0xc0a5	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:20:01.656435966 CEST	192.168.2.5	1.1.1.1	0x58d9	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:20:01.656588078 CEST	192.168.2.5	1.1.1.1	0xf8f6	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 00:20:02.165201902 CEST	192.168.2.5	1.1.1.1	0x50f1	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:20:02.165321112 CEST	192.168.2.5	1.1.1.1	0xf639	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:20:24.971530914 CEST	192.168.2.5	1.1.1.1	0xc0b9	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:20:24.971740961 CEST	192.168.2.5	1.1.1.1	0x1a2f	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 25, 2024 00:20:26.005403042 CEST	192.168.2.5	1.1.1.1	0xc027	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 00:20:26.005712986 CEST	192.168.2.5	1.1.1.1	0xbaec	Standard query (0)	play.google.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:14 UTC	699	OUT	GET /bookDetail/48430322/Romance/My-Babys-Daddy HTTP/1.1 Host: moboreader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:15 UTC	236	IN	HTTP/1.1 301 Moved Permanently Server: openresty Date: Wed, 24 Apr 2024 22:19:14 GMT Content-Type: text/html Content-Length: 166 Connection: close Location: https://www.moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy
2024-04-24 22:19:15 UTC	166	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>openresty</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 22:19:17 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=204258 Date: Wed, 24 Apr 2024 22:19:17 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 22:19:17 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=204258 Date: Wed, 24 Apr 2024 22:19:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 22:19:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:20 UTC	554	OUT	OPTIONS /api/Home/GetMultiLangConfig?time=1713997158705 HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: lang Origin: https://www.moboreader.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:20 UTC	284	IN	HTTP/1.1 204 No Content Server: openresty Date: Wed, 24 Apr 2024 22:19:20 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: lang Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:20 UTC	548	OUT	OPTIONS /api/Book/CategoryList?time=1713997158706 HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: lang Origin: https://www.moboreader.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:20 UTC	284	IN	HTTP/1.1 204 No Content Server: openresty Date: Wed, 24 Apr 2024 22:19:20 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: lang Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin

Source: chromecache_413.2.dr, chromecache_442.2.dr, chromecache_548.2.dr, chromecache_478.2.dr	String found in binary or memory: <a href="//www.youtube.com/user/Firebase" equals www.youtube.com (Youtube)
Source: chromecache_478.2.dr	String found in binary or memory: "https://www.linkedin.com/showcase/firebase/" equals www.linkedin.com (Linkedin)
Source: chromecache_478.2.dr	String found in binary or memory: "https://www.youtube.com/user/Firebase", equals www.youtube.com (Youtube)
Source: chromecache_478.2.dr	String found in binary or memory: "target": "https://www.youtube.com/watch?v=XHvWx1F3S4A={seek_to_second_number}", equals www.youtube.com (Youtube)
Source: chromecache_478.2.dr	String found in binary or memory: "contentUrl": "https://www.youtube.com/watch?v=XHvWx1F3S4A", equals www.youtube.com (Youtube)
Source: chromecache_478.2.dr	String found in binary or memory: "embedUrl": "https://www.youtube.com/embed/XHvWx1F3S4A", equals www.youtube.com (Youtube)
Source: chromecache_546.2.dr	String found in binary or memory: https://firebase.google.com/\",\n \"thumbnailUrl\": \"http://i3.ytimg.com/vi/XHvWx1F3S4A/hqdefault.jpg\",\n \"uploadDate\": \"2022-04-21\",\n \"duration\": \"PT1M7S\",\n \"contentUrl\": \"https://www.youtube.com/watch?v=XHvWx1F3S4A\",\n \"embedUrl\": \"https://www.youtube.com/embed/XHvWx1F3S4A\",\n \"potentialAction\": {\n \"@type\": \"SeekToAction\",\n \"target\": \"https://www.youtube.com/watch?v=XHvWx1F3S4A={seek_to_second_number}\",\n \"startOffset-input\": \"required name=seek_to_second_number\"\n }\n}\n \u003c/script\u003e\n \n \u003cmeta content=\"no\" name=\"msapplication-tap-highlight\"/\u003e\n \n \n \n \n \n","firebase-page-home firesite__bg--blue firesite-lang--en firebase-page-home firesite__bg--blue","appearance=\"device\"",null,null,null,1,null,1,"ltr",17,"page"] equals www.youtube.com (Youtube)
Source: chromecache_563.2.dr	String found in binary or memory: ","data":{"UnLoginChapterCount":"15","FreeReadPercent":"30","AppDownUrl":"https://play.google.com/store/apps/details?id=com.changdu.ereader&referrer=utm_source%3Dofficialsite%26utm_medium%3Dofficialsite%26utm_term%3Dofficialsite%26utm_content%3Dofficialsite%26utm_campaign%3Dofficialsite","IOSDownUrl":"https://apps.apple.com/app/apple-store/id1291247971?pt=118830109&ct=officialsite&mt=8","AndDownUrl":"https://play.google.com/store/apps/details?id=com.changdu.ereader&referrer=utm_source%3Dofficialsite%26utm_medium%3Dofficialsite%26utm_term%3Dofficialsite%26utm_content%3Dofficialsite%26utm_campaign%3Dofficialsite","CreateUrl":"https://author.moboreader.com/","RechargeUrl":"../pay/index.html","TwShareUrl":"https://twitter.com/share","FbShareUrl":"https://www.facebook.com/sharer/sharer.php","youtubeUrl":"https://www.youtube.com/channel/UCRZmguXSufAtB6vbr1zhaSg","FBUrl":"https://www.facebook.com/Moboreader-111318811475286","amazonUrl":"https://www.amazon.com/Mobo-Reader/e/B07G59TGP7","moboUrl":"https://www.moboreader.net/app/","manoUrl":"https://www.manobook.net/","LeraUrl":"https://www.lera.mobi/","KiffireUrl":"https://www.kifflire.com/","termsUrl":"https://staticpage-en.cdreader.com/EN/termsofservice.html?client_proid=1000&mt=9","prvacyUrl":"https://staticpage-en.cdreader.com/EN/PrivacyPolicy.html?client_proid=1000&mt=9","contactUrl":"https://staticpage-en.cdreader.com/EN/contact.html?client_proid=1000&mt=9","copyRightUrl":"https://author.moboreader.com/pc/complaints.html","bookDetailUrl":"https://www.moboreader.com/bookDetail.html","readBookUrl":"https://www.moboreader.com/readBook.html","BestSellingBookId":"40781322"}} equals www.facebook.com (Facebook)
Source: chromecache_412.2.dr, chromecache_563.2.dr	String found in binary or memory: ","data":{"UnLoginChapterCount":"15","FreeReadPercent":"30","AppDownUrl":"https://play.google.com/store/apps/details?id=com.changdu.ereader&referrer=utm_source%3Dofficialsite%26utm_medium%3Dofficialsite%26utm_term%3Dofficialsite%26utm_content%3Dofficialsite%26utm_campaign%3Dofficialsite","IOSDownUrl":"https://apps.apple.com/app/apple-store/id1291247971?pt=118830109&ct=officialsite&mt=8","AndDownUrl":"https://play.google.com/store/apps/details?id=com.changdu.ereader&referrer=utm_source%3Dofficialsite%26utm_medium%3Dofficialsite%26utm_term%3Dofficialsite%26utm_content%3Dofficialsite%26utm_campaign%3Dofficialsite","CreateUrl":"https://author.moboreader.com/","RechargeUrl":"../pay/index.html","TwShareUrl":"https://twitter.com/share","FbShareUrl":"https://www.facebook.com/sharer/sharer.php","youtubeUrl":"https://www.youtube.com/channel/UCRZmguXSufAtB6vbr1zhaSg","FBUrl":"https://www.facebook.com/Moboreader-111318811475286","amazonUrl":"https://www.amazon.com/Mobo-Reader/e/B07G59TGP7","moboUrl":"https://www.moboreader.net/app/","manoUrl":"https://www.manobook.net/","LeraUrl":"https://www.lera.mobi/","KiffireUrl":"https://www.kifflire.com/","termsUrl":"https://staticpage-en.cdreader.com/EN/termsofservice.html?client_proid=1000&mt=9","prvacyUrl":"https://staticpage-en.cdreader.com/EN/PrivacyPolicy.html?client_proid=1000&mt=9","contactUrl":"https://staticpage-en.cdreader.com/EN/contact.html?client_proid=1000&mt=9","copyRightUrl":"https://author.moboreader.com/pc/complaints.html","bookDetailUrl":"https://www.moboreader.com/bookDetail.html","readBookUrl":"https://www.moboreader.com/readBook.html","BestSellingBookId":"40781322"}} equals www.twitter.com (Twitter)
Source: chromecache_412.2.dr, chromecache_563.2.dr	String found in binary or memory: ","data":{"UnLoginChapterCount":"15","FreeReadPercent":"30","AppDownUrl":"https://play.google.com/store/apps/details?id=com.changdu.ereader&referrer=utm_source%3Dofficialsite%26utm_medium%3Dofficialsite%26utm_term%3Dofficialsite%26utm_content%3Dofficialsite%26utm_campaign%3Dofficialsite","IOSDownUrl":"https://apps.apple.com/app/apple-store/id1291247971?pt=118830109&ct=officialsite&mt=8","AndDownUrl":"https://play.google.com/store/apps/details?id=com.changdu.ereader&referrer=utm_source%3Dofficialsite%26utm_medium%3Dofficialsite%26utm_term%3Dofficialsite%26utm_content%3Dofficialsite%26utm_campaign%3Dofficialsite","CreateUrl":"https://author.moboreader.com/","RechargeUrl":"../pay/index.html","TwShareUrl":"https://twitter.com/share","FbShareUrl":"https://www.facebook.com/sharer/sharer.php","youtubeUrl":"https://www.youtube.com/channel/UCRZmguXSufAtB6vbr1zhaSg","FBUrl":"https://www.facebook.com/Moboreader-111318811475286","amazonUrl":"https://www.amazon.com/Mobo-Reader/e/B07G59TGP7","moboUrl":"https://www.moboreader.net/app/","manoUrl":"https://www.manobook.net/","LeraUrl":"https://www.lera.mobi/","KiffireUrl":"https://www.kifflire.com/","termsUrl":"https://staticpage-en.cdreader.com/EN/termsofservice.html?client_proid=1000&mt=9","prvacyUrl":"https://staticpage-en.cdreader.com/EN/PrivacyPolicy.html?client_proid=1000&mt=9","contactUrl":"https://staticpage-en.cdreader.com/EN/contact.html?client_proid=1000&mt=9","copyRightUrl":"https://author.moboreader.com/pc/complaints.html","bookDetailUrl":"https://www.moboreader.com/bookDetail.html","readBookUrl":"https://www.moboreader.com/readBook.html","BestSellingBookId":"40781322"}} equals www.youtube.com (Youtube)
Source: chromecache_346.2.dr	String found in binary or memory: "youtube:v3":{methodPath:"{1x?T.1/}",overrides:{"youtube.(live\|sponsors\|superChatEvents).":{methodPath:"{1x/}",referenceUrl:"https://developers.google.com/youtube/v3/live/docs/",title:"YouTube Live API"}},referenceUrl:"https://developers.google.com/youtube/v3/docs/"},"youtubeAnalytics:v2":{methodPath:"{1x/}",referenceUrl:"https://developers.google.com/youtube/analytics/reference/"},"youtubereporting:v1":{methodPath:"{apiVersion}/{1x.1/}",referenceUrl:"https://developers.google.com/youtube/reporting/v1/reference/rest/"}};_ds.vR=a=>null!=a?a:_ds.WH;var xR,yR,AR,BR,CR,DR,ER,FR,GR,HR,IR,JR;_ds.wR=(0,_ds.Hs)`<svg width="22" height="22" viewBox="0 0 22 22" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M13 11L11 13L9 11L11 9L13 11ZM11 5L13.12 7.12L15.62 4.62L11 0L6.38 4.62L8.88 7.12L11 5ZM5 11L7.12 8.88L4.62 6.38L0 11L4.62 15.62L7.12 13.12L5 11ZM17 11L14.88 13.12L17.38 15.62L22 11L17.38 6.38L14.88 8.88L17 11ZM11 17L8.88 14.88L6.38 17.38L11 22L15.62 17.38L13.12 14.88L11 17Z"/></svg>`;xR=(0,_ds.Hs)`<svg width="133" height="79" viewBox="0 0 133 79" fill="none" xmlns="http://www.w3.org/2000/svg"> <g clip-path="url(#clip0_5279_27844)"> <path d="M95.9998 31.3V77H25.2998V31.3H95.9998Z" fill="white" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M95.9998 31.3V77H80.7998V31.3H95.9998Z" fill="#D2E3FC" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M25.2998 31.3001H95.9998V25.6001H25.2998V31.3001Z" fill="white" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M1.5 76.9C3.3 70.2 11.3 71.2 11.3 71.2C11.3 71.2 7.6 64.4 12.2 62.1C17.4 59.6 23.7 64.5 27.3 68.5C27.3 68.5 25.9 63.7 30 63.7C36.9 64.4 42.6 77 42.6 77L1.5 76.9Z" fill="#34A853" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M113.8 24.0001C105.5 9.00009 63.6002 -6.59991 48.4002 6.30009C40.0002 13.3001 38.4002 27.3001 54.1002 50.0001" stroke="black" stroke-width="2"/> <path d="M129.3 67.8002H106.4C105.3 67.8002 104.4 66.9002 104.4 65.8002V16.2002C104.4 15.1002 105.3 14.2002 106.4 14.2002H129.3C130.4 14.2002 131.3 15.1002 131.3 16.2002V65.8002C131.3 66.9002 130.4 67.8002 129.3 67.8002Z" fill="white" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M123.6 20.3003H112" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M117.8 33.6001V40.2001" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M117.8 48.7002V55.3002" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M125.4 39.9001H110.3V48.5001H125.4V39.9001Z" fill="white" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M123.2 53.9001H112.4C111.2 53.9001 110.3 54.9001 110.3 56.0001V60.3001C110.3 61.5001 111.3 62.4001 112.4 62.4001H123.2C124.4 62.4001 125.3 61.4001 125.3 60.3001V56.0001C125.4 54.9001 124.4 53.9001 123.2 53.9001Z" fill="#FBBC04" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M121.1 26.0002H114.6C112.2 26.0002 110.3 27.9002 110.3 30.3002C110.3 32.7002 112.2 34.600
Source: chromecache_624.2.dr	String found in binary or memory: (g.zp(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.zp(c,"www.youtube.com"),d=c.toString()):(c=xBa(d),zJ(c)&&(d=c));c=new g.zP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_456.2.dr, chromecache_462.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Pj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_538.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Qj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_624.2.dr	String found in binary or memory: YQa=function(a,b){if(!a.j["0"]){var c=new CK("0","fakesb",{video:new yK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new CQ(new g.zP("http://www.youtube.com/videoplayback"),c,"fake"):new NQ(new g.zP("http://www.youtube.com/videoplayback"),c,new mQ(0,0),new mQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: _ds.Jr=function(a,b,c){"/"!==a.slice(-1)&&(a=`${a}/`);c=encodeURIComponent(c);a=encodeURIComponent(a);b=encodeURIComponent(b);Hr(`https://www.linkedin.com/shareArticle?mini=true&url=${a}&title=${b}&summary=${c}`)};_ds.Kr=function(a){a=encodeURIComponent(a);Hr(`https://www.facebook.com/sharer/sharer.php?u=${a}`,555)}; equals www.facebook.com (Facebook)
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: _ds.Jr=function(a,b,c){"/"!==a.slice(-1)&&(a=`${a}/`);c=encodeURIComponent(c);a=encodeURIComponent(a);b=encodeURIComponent(b);Hr(`https://www.linkedin.com/shareArticle?mini=true&url=${a}&title=${b}&summary=${c}`)};_ds.Kr=function(a){a=encodeURIComponent(a);Hr(`https://www.facebook.com/sharer/sharer.php?u=${a}`,555)}; equals www.linkedin.com (Linkedin)
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: _ds.Y(a)+'.vtt" default/></video>')};var QS,RS,SS,US,TS,VS,WS;_ds.PS=[(0,_ds.t)`autoplay`,(0,_ds.t)`controls`,(0,_ds.t)`embed_domain`,(0,_ds.t)`enablejsapi`,(0,_ds.t)`end`,(0,_ds.t)`hl`,(0,_ds.t)`showinfo`,(0,_ds.t)`start`,(0,_ds.t)`video-id`];QS=["rel"];RS=["listType","list"];SS=null;US=async function(){SS\|\|(SS=new _ds.jf);if("YT"in window&&void 0!==window.YT)return SS.promise;_ds.Hf("onYouTubeIframeAPIReady",TS);try{await _ds.ql("//www.youtube.com/iframe_api")}catch(a){SS.h()}return SS.promise}; equals www.youtube.com (Youtube)
Source: chromecache_393.2.dr, chromecache_346.2.dr	String found in binary or memory: _ds.x([_ds.R(),_ds.y(Object)],_ds.MS.prototype,"Yk",void 0);_ds.x([_ds.R(),_ds.y(Object)],_ds.MS.prototype,"jb",void 0);_ds.x([_ds.R(),_ds.y(Object)],_ds.MS.prototype,"profile",void 0);var NS=function(a){a='<a href="//www.youtube.com/watch?v='+_ds.rD(a.videoId)+'" class="devsite-video-placeholder"><img src="/_static/images/video-placeholder.svg" alt=""><span>';return(0,_ds.V)(a+"This resource may not be available in your region.</span></a>")},OS=function(a){a=a.videoId;return(0,_ds.V)('<video class="devsite-basic-video-player" controls crossorigin="anonymous"><source src="//googledownloads.cn/cn-devsite/'+_ds.Y(a)+'.mp4" type="video/mp4"/><track label="Chinese" kind="captions" srclang="zh" src="//googledownloads.cn/cn-devsite/captions/'+ equals www.youtube.com (Youtube)
Source: chromecache_624.2.dr	String found in binary or memory: a))):this.Ld(g.NV(a.errorMessage)):this.Ld(PV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Mn(c,{hl:a})),this.Ld(PV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.pc&&!d.D&&QYa(this,function(e){if(g.tU(e,b.api,!WR(b.api.U()))){e={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var f=b.api;f.wc("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_624.2.dr	String found in binary or memory: a.BASE_YT_URL)\|\|"")\|\|oBa(this.Bf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.N?d=XB(d,h,ZRa):h&&(d="embedded");this.La=d;Xta();h=null;d=b?b.playerStyle:a.ps;f=g.Fb($Ra,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.qa=(this.K=g.Fb($Ra,this.playerStyle))&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.To=!this.qa;this.Ra=WB(!1,a.disableplaybackui);this.disablePaidContentOverlay=WB(!1, equals www.youtube.com (Youtube)
Source: chromecache_624.2.dr	String found in binary or memory: a.severity,e,nK(a.details),f)}else this.oa.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.ue(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.$C)(),FX(a,"manifest",function(h){b.G=!0;b.ma("pathprobe",h)},function(h){b.ue(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_462.2.dr	String found in binary or memory: c(S[ea],E.ye)){qI("https://www.youtube.com/iframe_api");t=!0;break}})}}else I(u.vtp_gtmOnSuccess)}var p=["www.youtube.com","www.youtube-nocookie.com"],q={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},r,t=!1;(function(u){Z.__ytl=u;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1;Z.__ytl.runInSiloedMode=!1})(function(u){u.vtp_triggerStartOption?n(u):dw(function(){n(u)})})}(); equals www.youtube.com (Youtube)
Source: chromecache_496.2.dr	String found in binary or memory: function Hr(a,b,c){this.o=this.g=this.h=null;this.i=0;this.G=!1;this.u=[];this.l=null;this.O={};if(!a)throw Error("YouTube player element ID required.");this.id=Ra(this);this.K=c;c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"===a.tagName.toLowerCase(),b.host\|\|(b.host=c?ec(a.src):"https://www.youtube.com"),this.h=new Br(b),c\|\|(b=Ir(this,a),this.o=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.g=a,this.g.id\|\|(this.g.id="widget"+Ra(this.g)),vr[this.g.id]=this,window.postMessage){this.l= equals www.youtube.com (Youtube)
Source: chromecache_624.2.dr	String found in binary or memory: g.UR=function(a){a=SR(a.Ga);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_624.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",wjb);var gBa=pa(["//tpc.googlesyndication.com/sodar/",""]);var cNa={F5a:0,C5a:1,z5a:2,A5a:3,B5a:4,E5a:5,D5a:6};var npa=(new Date).getTime();var Pka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Qka=/\bocr\b/;var Ska=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;g.y(Yu,g.Dd);Yu.prototype.dispose=function(){window.removeEventListener("offline",this.C);window.removeEventListener("online",this.C);this.Qn.Mj(this.G);delete Yu.instance}; equals www.youtube.com (Youtube)
Source: chromecache_624.2.dr	String found in binary or memory: g.fS=function(a){var b=g.UR(a);oSa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_624.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.UR(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.OR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),pD&&(a=cpa())&&(b.ebc=a));return g.Mn(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_624.2.dr	String found in binary or memory: r;this.jj=b?b.hl\|\|"en_US":ZB("en_US",a.hl);this.region=b?b.contentRegion\|\|"US":ZB("US",a.cr);this.hostLanguage=b?b.hostLanguage\|\|"en":ZB("en",a.host_language);this.No=!this.Dc&&Math.random()<g.YI(this.experiments,"web_player_api_logging_fraction");this.bb=!this.Dc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.Jd=YB(this.Jd,a.ismb);this.To?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=SR(this.Ga)\|\|"www.youtube.com")):r="video.google.com";this.Wm= equals www.youtube.com (Youtube)
Source: chromecache_367.2.dr, chromecache_592.2.dr, chromecache_384.2.dr, chromecache_541.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_546.2.dr	String found in binary or memory: s mobile and web app development platform that helps developers build apps and games that users will love.\" property=\"og:description\"/\u003e\n \n \n \n \n \n \n \n \n \u003cscript type=\"application/ld+json\"\u003e\n {\n \"@context\": \"https://schema.org\",\n \"@type\": \"Organization\",\n \"name\": \"Firebase\",\n \"url\": \"https://firebase.google.com/\",\n \"logo\": \"https://www.gstatic.com/devrel-devsite/prod/v530e2b4758c915c59675435df4424a8b4929cfd382db2f39325a64003950cf58/firebase/images/lockup.svg\",\n \"sameAs\": [\n \"https://twitter.com/Firebase\",\n \"https://www.youtube.com/user/Firebase\",\n \"https://github.com/firebase/\",\n \"https://firebase.blog/\",\n \"https://en.wikipedia.org/wiki/Firebase\",\n \"https://www.linkedin.com/showcase/firebase/\"\n ]\n}\n \u003c/script\u003e\n \u003cscript type=\"application/ld+json\"\u003e\n {\n \"@context\": \"http://schema.org\",\n \"@type\": \"WebPage\",\n \"name\": \"Firebase\",\n \"description\": \"Firebase is an app development platform that helps you build and grow apps and games users love. Backed by Google and trusted by millions of businesses around the world.\",\n \"publisher\": {\n \"@type\": \"WebPageElement\",\n \"name\": \"Firebase\"\n }\n}\n \u003c/script\u003e\n \u003cscript type=\"application/ld+json\"\u003e\n {\n \"@context\": \"https://schema.org\",\n \"@type\": \"VideoObject\",\n \"name\": \"Make your app the best it can be with Firebase\",\n \"description\": \"Firebase helps you build and grow apps and games users love with a platform designed to help throughout your app and business equals www.linkedin.com (Linkedin)
Source: chromecache_546.2.dr	String found in binary or memory: s mobile and web app development platform that helps developers build apps and games that users will love.\" property=\"og:description\"/\u003e\n \n \n \n \n \n \n \n \n \u003cscript type=\"application/ld+json\"\u003e\n {\n \"@context\": \"https://schema.org\",\n \"@type\": \"Organization\",\n \"name\": \"Firebase\",\n \"url\": \"https://firebase.google.com/\",\n \"logo\": \"https://www.gstatic.com/devrel-devsite/prod/v530e2b4758c915c59675435df4424a8b4929cfd382db2f39325a64003950cf58/firebase/images/lockup.svg\",\n \"sameAs\": [\n \"https://twitter.com/Firebase\",\n \"https://www.youtube.com/user/Firebase\",\n \"https://github.com/firebase/\",\n \"https://firebase.blog/\",\n \"https://en.wikipedia.org/wiki/Firebase\",\n \"https://www.linkedin.com/showcase/firebase/\"\n ]\n}\n \u003c/script\u003e\n \u003cscript type=\"application/ld+json\"\u003e\n {\n \"@context\": \"http://schema.org\",\n \"@type\": \"WebPage\",\n \"name\": \"Firebase\",\n \"description\": \"Firebase is an app development platform that helps you build and grow apps and games users love. Backed by Google and trusted by millions of businesses around the world.\",\n \"publisher\": {\n \"@type\": \"WebPageElement\",\n \"name\": \"Firebase\"\n }\n}\n \u003c/script\u003e\n \u003cscript type=\"application/ld+json\"\u003e\n {\n \"@context\": \"https://schema.org\",\n \"@type\": \"VideoObject\",\n \"name\": \"Make your app the best it can be with Firebase\",\n \"description\": \"Firebase helps you build and grow apps and games users love with a platform designed to help throughout your app and business equals www.twitter.com (Twitter)
Source: chromecache_546.2.dr	String found in binary or memory: s mobile and web app development platform that helps developers build apps and games that users will love.\" property=\"og:description\"/\u003e\n \n \n \n \n \n \n \n \n \u003cscript type=\"application/ld+json\"\u003e\n {\n \"@context\": \"https://schema.org\",\n \"@type\": \"Organization\",\n \"name\": \"Firebase\",\n \"url\": \"https://firebase.google.com/\",\n \"logo\": \"https://www.gstatic.com/devrel-devsite/prod/v530e2b4758c915c59675435df4424a8b4929cfd382db2f39325a64003950cf58/firebase/images/lockup.svg\",\n \"sameAs\": [\n \"https://twitter.com/Firebase\",\n \"https://www.youtube.com/user/Firebase\",\n \"https://github.com/firebase/\",\n \"https://firebase.blog/\",\n \"https://en.wikipedia.org/wiki/Firebase\",\n \"https://www.linkedin.com/showcase/firebase/\"\n ]\n}\n \u003c/script\u003e\n \u003cscript type=\"application/ld+json\"\u003e\n {\n \"@context\": \"http://schema.org\",\n \"@type\": \"WebPage\",\n \"name\": \"Firebase\",\n \"description\": \"Firebase is an app development platform that helps you build and grow apps and games users love. Backed by Google and trusted by millions of businesses around the world.\",\n \"publisher\": {\n \"@type\": \"WebPageElement\",\n \"name\": \"Firebase\"\n }\n}\n \u003c/script\u003e\n \u003cscript type=\"application/ld+json\"\u003e\n {\n \"@context\": \"https://schema.org\",\n \"@type\": \"VideoObject\",\n \"name\": \"Make your app the best it can be with Firebase\",\n \"description\": \"Firebase helps you build and grow apps and games users love with a platform designed to help throughout your app and business equals www.youtube.com (Youtube)
Source: chromecache_624.2.dr	String found in binary or memory: this.W.Ba&&(a.authuser=this.W.Ba);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.pc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.qa=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(pR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.qa=!1);b="";g.iR(this.B)?hR(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_624.2.dr	String found in binary or memory: var G3={};var Cfb=/[&\?]action_proxy=1/,Bfb=/[&\?]token=([\w-])/,Dfb=/[&\?]video_id=([\w-])/,Efb=/[&\?]index=([\d-])/,Ffb=/[&\?]m_pos_ms=([\d-])/,Hfb=/[&\?]vvt=([\w-]*)/,tfb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Gfb="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),wfb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_579.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/652ba3a2\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:20 UTC	564	OUT	OPTIONS /api/Home/GetCommonConfig?time=1713997158706&key=blogroll HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: lang Origin: https://www.moboreader.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:20 UTC	284	IN	HTTP/1.1 204 No Content Server: openresty Date: Wed, 24 Apr 2024 22:19:20 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: lang Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:20 UTC	545	OUT	OPTIONS /api/Home/GetConfig?time=1713997158706 HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: lang Origin: https://www.moboreader.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:20 UTC	284	IN	HTTP/1.1 204 No Content Server: openresty Date: Wed, 24 Apr 2024 22:19:20 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: lang Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:20 UTC	609	OUT	OPTIONS /api/BookV2/02ee90e71a144bb3cceb6f4738bfa5b1?time=1713997158706&bookId=48430322&pageIndex=1&pageSize=1 HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: lang Origin: https://www.moboreader.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:20 UTC	284	IN	HTTP/1.1 204 No Content Server: openresty Date: Wed, 24 Apr 2024 22:19:20 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: lang Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:21 UTC	563	OUT	OPTIONS /api/Book/BookComment?time=1713997158706&bookId=48430322 HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: lang Origin: https://www.moboreader.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:21 UTC	284	IN	HTTP/1.1 204 No Content Server: openresty Date: Wed, 24 Apr 2024 22:19:21 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: lang Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:21 UTC	646	OUT	GET /api/Home/GetMultiLangConfig?time=1713997158705 HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / lang: en sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.moboreader.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:21 UTC	303	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 24 Apr 2024 22:19:21 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin
2024-04-24 22:19:21 UTC	202	IN	Data Raw: 62 66 0d 0a 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 31 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 e8 8e b7 e5 8f 96 e6 88 90 e5 8a 9f 22 2c 22 64 61 74 61 22 3a 5b 7b 22 6b 65 79 22 3a 22 65 6e 22 2c 22 76 61 6c 75 65 22 3a 22 45 6e 67 6c 69 73 68 22 7d 2c 7b 22 6b 65 79 22 3a 22 73 70 22 2c 22 76 61 6c 75 65 22 3a 22 45 73 70 61 c3 b1 6f 6c 22 7d 2c 7b 22 6b 65 79 22 3a 22 74 6c 22 2c 22 76 61 6c 75 65 22 3a 22 50 68 69 6c 69 70 70 69 6e 65 73 22 7d 2c 7b 22 6b 65 79 22 3a 22 6b 6f 22 2c 22 76 61 6c 75 65 22 3a 22 ed 95 9c ea b5 ad ec 96 b4 22 7d 5d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: bf{"status":true,"code":"1","message":"","data":[{"key":"en","value":"English"},{"key":"sp","value":"Espaol"},{"key":"tl","value":"Philippines"},{"key":"ko","value":""}]}0

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:21 UTC	701	OUT	GET /api/BookV2/02ee90e71a144bb3cceb6f4738bfa5b1?time=1713997158706&bookId=48430322&pageIndex=1&pageSize=1 HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / lang: en sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.moboreader.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:21 UTC	303	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 24 Apr 2024 22:19:21 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin
2024-04-24 22:19:21 UTC	1309	IN	Data Raw: 35 31 31 0d 0a 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 31 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 63 68 61 70 74 65 72 4c 69 73 74 22 3a 5b 7b 22 63 68 61 70 74 65 72 49 64 22 3a 31 36 30 33 34 35 31 2c 22 73 65 72 69 61 6c 4e 75 6d 62 65 72 22 3a 31 2c 22 6e 65 78 74 43 68 61 70 74 65 72 49 64 22 3a 30 2c 22 6e 65 78 74 43 68 61 70 74 65 72 4e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 6e 65 78 74 49 73 56 69 70 22 3a 66 61 6c 73 65 2c 22 70 72 65 76 43 68 61 70 74 65 72 49 64 22 3a 30 2c 22 70 72 65 76 43 68 61 70 74 65 72 4e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 70 72 65 76 49 73 56 69 70 22 3a 66 61 6c 73 65 2c 22 68 61 73 42 75 79 22 3a 66 61 6c 73 65 2c 22 6e 65 78 74 48 61 73 42 75 Data Ascii: 511{"status":true,"code":"1","message":"Success","data":{"chapterList":[{"chapterId":1603451,"serialNumber":1,"nextChapterId":0,"nextChapterName":null,"nextIsVip":false,"prevChapterId":0,"prevChapterName":null,"prevIsVip":false,"hasBuy":false,"nextHasBu

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:21 UTC	658	OUT	GET /api/Home/GetConfig?time=1713997158706&name=&key=LanConfigs HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / lang: en sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.moboreader.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:21 UTC	303	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 24 Apr 2024 22:19:21 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin
2024-04-24 22:19:21 UTC	805	IN	Data Raw: 33 31 39 0d 0a 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 31 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 e8 8e b7 e5 8f 96 e6 88 90 e5 8a 9f 22 2c 22 64 61 74 61 22 3a 7b 22 55 6e 52 65 67 22 3a 22 54 68 65 72 65 27 73 20 6e 6f 20 61 63 63 6f 75 6e 74 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 69 73 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 22 2c 22 48 61 73 52 65 67 41 63 74 69 76 65 22 3a 22 54 68 69 73 20 61 63 63 6f 75 6e 74 27 73 20 62 65 65 6e 20 72 65 67 69 73 74 65 72 65 64 20 62 75 74 20 6e 6f 74 20 76 65 72 69 66 69 65 64 20 79 65 74 2e 20 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 65 6d 61 69 6c 20 74 6f 20 63 6f 6d 70 6c 65 74 65 20 74 68 65 20 70 72 6f 63 65 73 73 2e 22 2c 22 48 61 73 52 65 67 Data Ascii: 319{"status":true,"code":"1","message":"","data":{"UnReg":"There's no account associated with this email address.","HasRegActive":"This account's been registered but not verified yet. Please enter your email to complete the process.","HasReg

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:21 UTC	1134	OUT	GET /?link=https%3A%2F%2Fenfirebase.cdreader.com%2F%3Fndactionstr%3Dndaction:readonline(bookid%253D48430322%2526chapterindex%253D0%2526utm_medium%253Dofficialsite%2526utm_campaign%253Dpcweb%2526website%253DENC1)&apn=com.changdu.ereader&isi=1291247971&ibi=com.changduhk.ereader&pt=118830109&ct=officialsite&mt=8&utm_source=officialsite&utm_medium=officialsite&utm_campaign=pcweb HTTP/1.1 Host: firebase.moboreader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.1389965382.1713997159; _ga_FXR92K8Y0T=GS1.1.1713997158.1.0.1713997158.60.0.0
2024-04-24 22:19:21 UTC	1237	IN	HTTP/1.1 302 Found Connection: close Content-Length: 0 Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cache-Control: no-cache, no-store, max-age=0, must-revalidate Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport,script-src 'report-sample' 'nonce-OUjKIVR7KFIQKEa5gdwbSg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self',script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist Content-Type: application/binary Cross-Origin-Opener-Policy: unsafe-none Cross-Origin-Resource-Policy: same-site Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://enfirebase.cdreader.com/?ndactionstr=ndaction:readonline(bookid%3D48430322%26chapterindex%3D0%26utm_medium%3Dofficialsite%26utm_campaign%3Dpcweb%26website%3DENC1)
2024-04-24 22:19:21 UTC	550	IN	Data Raw: 50 65 72 6d 69 73 73 69 6f 6e 73 2d 50 6f 6c 69 63 79 3a 20 63 68 2d 75 61 2d 61 72 63 68 3d 2a 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 2a 2c 20 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 72 73 69 6f 6e 3d 2a 2c 20 63 68 2d 75 61 2d 66 75 6c 6c 2d 76 65 72 73 69 6f 6e 2d 6c 69 73 74 3d 2a 2c 20 63 68 2d 75 61 2d 6d 6f 64 65 6c 3d 2a 2c 20 63 68 2d 75 61 2d 77 6f 77 36 34 3d 2a 2c 20 63 68 2d 75 61 2d 66 6f 72 6d 2d 66 61 63 74 6f 72 3d 2a 2c 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 3d 2a 2c 20 63 68 2d 75 61 2d 70 6c 61 74 66 6f 72 6d 2d 76 65 72 73 69 6f 6e 3d 2a 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 34 20 41 70 72 20 32 30 Data Ascii: Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=*Pragma: no-cacheAccept-Ranges: bytesDate: Wed, 24 Apr 20

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:21 UTC	640	OUT	GET /api/Book/CategoryList?time=1713997158706 HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / lang: en sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.moboreader.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:22 UTC	303	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 24 Apr 2024 22:19:22 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin
2024-04-24 22:19:22 UTC	2036	IN	Data Raw: 37 65 38 0d 0a 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 31 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 5b 7b 22 63 69 64 22 3a 32 30 30 30 37 2c 22 63 4e 61 6d 65 22 3a 22 52 6f 6d 61 6e 63 65 22 2c 22 73 65 78 22 3a 32 2c 22 69 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 64 65 73 63 22 3a 6e 75 6c 6c 2c 22 76 69 72 74 75 61 6c 42 6f 6f 6b 4e 75 6d 22 3a 32 33 33 35 34 7d 2c 7b 22 63 69 64 22 3a 32 30 30 31 30 2c 22 63 4e 61 6d 65 22 3a 22 57 65 72 65 77 6f 6c 66 22 2c 22 73 65 78 22 3a 32 2c 22 69 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 64 65 73 63 22 3a 6e 75 6c 6c 2c 22 76 69 72 74 75 61 6c 42 6f 6f 6b 4e 75 6d 22 3a 37 36 32 33 7d 2c 7b 22 63 69 64 22 3a 32 30 30 30 38 2c 22 63 4e 61 6d 65 22 3a 22 Data Ascii: 7e8{"status":true,"code":"1","message":"Success","data":[{"cid":20007,"cName":"Romance","sex":2,"icon":null,"desc":null,"virtualBookNum":23354},{"cid":20010,"cName":"Werewolf","sex":2,"icon":null,"desc":null,"virtualBookNum":7623},{"cid":20008,"cName":"

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:21 UTC	656	OUT	GET /api/Home/GetCommonConfig?time=1713997158706&key=blogroll HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / lang: en sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.moboreader.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:22 UTC	297	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 24 Apr 2024 22:19:22 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin
2024-04-24 22:19:22 UTC	2059	IN	Data Raw: 37 66 66 0d 0a 7b 0a 09 22 65 6e 22 3a 20 7b 0a 09 09 22 6e 61 6d 65 22 3a 20 22 4d 6f 62 6f 52 65 61 64 65 72 22 2c 0a 09 09 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 62 6f 72 65 61 64 65 72 2e 63 6f 6d 22 2c 0a 09 09 22 72 65 73 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 63 6f 73 2d 65 6e 72 65 73 2e 63 64 72 65 61 64 65 72 2e 63 6f 6d 22 2c 0a 09 09 22 6c 6f 67 6f 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 62 6f 72 65 61 64 65 72 2e 63 6f 6d 2f 5f 63 64 2f 69 6d 67 2f 6c 6f 67 6f 2e 39 38 35 35 32 33 61 2e 70 6e 67 22 0a 09 7d 2c 0a 09 22 6b 6f 22 3a 20 7b 0a 09 09 22 6e 61 6d 65 22 3a 20 22 4d 6f 62 6f 52 65 61 64 65 72 22 2c 0a 09 09 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 6f 62 6f Data Ascii: 7ff{"en": {"name": "MoboReader","url": "https://www.moboreader.com","resurl": "https://cos-enres.cdreader.com","logourl": "https://www.moboreader.com/_cd/img/logo.985523a.png"},"ko": {"name": "MoboReader","url": "https://www.mobo

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 325

Chrome Cache Entry: 326

Chrome Cache Entry: 327

Chrome Cache Entry: 328

Chrome Cache Entry: 329

Chrome Cache Entry: 330

Chrome Cache Entry: 331

Chrome Cache Entry: 332

Chrome Cache Entry: 333

Chrome Cache Entry: 334

Chrome Cache Entry: 335

Chrome Cache Entry: 336

Chrome Cache Entry: 337

Chrome Cache Entry: 338

Chrome Cache Entry: 339

Chrome Cache Entry: 340

Chrome Cache Entry: 341

Chrome Cache Entry: 342

Chrome Cache Entry: 343

Chrome Cache Entry: 344

Windows Analysis Report
https://moboreader.com/bookDetail/48430322/Romance/My-Babys-Daddy

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:22 UTC	655	OUT	GET /api/Book/BookComment?time=1713997158706&bookId=48430322 HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / lang: en sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.moboreader.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:22 UTC	303	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 24 Apr 2024 22:19:22 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin
2024-04-24 22:19:22 UTC	5000	IN	Data Raw: 31 33 37 62 0d 0a 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 31 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 62 6f 6f 6b 22 3a 7b 22 62 6f 6f 6b 49 64 22 3a 34 38 34 33 30 33 32 32 2c 22 63 6f 76 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 73 2d 65 6e 72 65 73 2e 63 64 72 65 61 64 65 72 2e 63 6f 6d 2f 73 69 74 65 2d 33 32 32 28 6e 65 77 29 2f 30 2f 34 38 34 33 30 2f 63 6f 76 65 72 6d 69 64 64 6c 65 2e 6a 70 67 3f 76 3d 39 37 30 31 62 66 34 38 34 38 34 31 35 62 33 37 38 38 65 66 32 65 37 63 66 35 61 65 33 63 33 30 22 2c 22 6e 61 6d 65 22 3a 22 4d 79 20 42 61 62 79 27 73 20 44 61 64 64 79 22 2c 22 73 74 61 72 22 3a 22 39 37 2e 35 30 20 25 22 2c 22 73 63 6f 72 65 22 3a 22 34 2e 39 22 Data Ascii: 137b{"status":true,"code":"1","message":"Success","data":{"book":{"bookId":48430322,"cover":"https://cos-enres.cdreader.com/site-322(new)/0/48430/covermiddle.jpg?v=9701bf4848415b3788ef2e7cf5ae3c30","name":"My Baby's Daddy","star":"97.50 %","score":"4.9"

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:22 UTC	804	OUT	GET /?ndactionstr=ndaction:readonline(bookid%3D48430322%26chapterindex%3D0%26utm_medium%3Dofficialsite%26utm_campaign%3Dpcweb%26website%3DENC1) HTTP/1.1 Host: enfirebase.cdreader.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:22 UTC	1351	IN	HTTP/1.1 400 Bad Request Connection: close Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cache-Control: no-cache, no-store, max-age=0, must-revalidate Content-Security-Policy: script-src 'report-sample' 'nonce-yJWl6u2Rx9L3Gwda17TVRw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self',script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist,require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport Content-Type: text/html; charset=utf-8 Cross-Origin-Opener-Policy: unsafe-none Expires: Mon, 01 Jan 1990 00:00:00 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Pragma: no-cache Accept-Ranges: bytes Date: Wed, 24 Apr 2024 22:19:22 GMT X-Served-By: cache-pdk-kfty2130068-PDK X-Cache: MISS X-Cache-Hits: 0
2024-04-24 22:19:22 UTC	233	IN	Data Raw: 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 33 39 39 37 31 36 32 2e 34 34 31 38 38 31 2c 56 53 30 2c 56 45 39 37 0d 0a 56 61 72 79 3a 20 53 65 63 2d 46 65 74 63 68 2d 44 65 73 74 2c 20 53 65 63 2d 46 65 74 63 68 2d 4d 6f 64 65 2c 20 53 65 63 2d 46 65 74 63 68 2d 53 69 74 65 2c 20 78 2d 66 68 2d 72 65 71 75 65 73 74 65 64 2d 68 6f 73 74 2c 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 2c 68 33 2d 32 37 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 0d 0a Data Ascii: X-Timer: S1713997162.441881,VS0,VE97Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, x-fh-requested-host, accept-encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400transfer-encoding: chunked
2024-04-24 22:19:22 UTC	6	IN	Data Raw: 32 34 31 31 0d 0a Data Ascii: 2411
2024-04-24 22:19:22 UTC	1378	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 49 6e 76 61 6c 69 64 20 44 79 6e 61 6d 69 63 20 4c 69 6e 6b 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 37 29 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 52 6f 62 6f 74 6f 44 72 61 66 74 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 Data Ascii: <!doctype html><head><title>Invalid Dynamic Link</title><meta name="viewport" content="width=device-width, initial-scale=1"></head><body style="color: rgba(0,0,0,0.87); font-family: Roboto,RobotoDraft,Helvetica,Arial,sans-serif; font-size: 16px; line-heig
2024-04-24 22:19:22 UTC	1378	IN	Data Raw: 59 72 66 44 30 42 4c 6c 73 69 5a 34 54 50 55 2f 4f 59 2f 38 38 77 7a 49 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 4d 69 59 Data Ascii: YrfD0BLlsiZ4TPU/OY/88wzIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMiY
2024-04-24 22:19:22 UTC	1378	IN	Data Raw: 63 33 47 7a 34 38 4e 6d 69 62 4b 78 30 45 57 36 32 32 4a 59 68 70 75 70 54 30 71 69 4c 73 53 6c 69 6a 75 55 6b 4e 79 4c 75 77 7a 59 73 48 58 49 42 30 36 70 2b 58 62 4c 66 6d 79 73 5a 66 37 46 30 4b 31 57 34 65 5a 70 72 5a 77 2b 34 4b 56 57 34 76 64 7a 48 2b 58 32 2f 49 31 78 66 37 67 68 59 46 58 54 7a 7a 75 4d 4e 35 31 45 65 6b 6f 2f 7a 72 48 37 50 6e 52 62 31 41 7a 68 36 39 51 6c 4e 45 4b 6f 6f 7a 61 31 55 34 61 61 2b 62 31 56 76 7a 6e 63 62 74 76 76 63 58 4d 50 35 57 6d 38 64 67 64 78 33 6d 48 4c 66 74 43 52 30 58 4d 76 59 34 65 62 2b 79 42 7a 6d 51 35 51 58 41 36 70 48 4c 2f 6a 79 66 4d 77 42 41 6d 34 59 61 37 69 5a 77 50 43 49 45 57 35 75 39 58 5a 2f 37 33 4e 48 74 69 30 78 6e 55 6d 61 7a 64 62 76 33 56 2f 35 68 5a 73 33 76 5a 70 62 78 56 31 4b 48 32 Data Ascii: c3Gz48NmibKx0EW622JYhpupT0qiLsSlijuUkNyLuwzYsHXIB06p+XbLfmysZf7F0K1W4eZprZw+4KVW4vdzH+X2/I1xf7ghYFXTzzuMN51Eeko/zrH7PnRb1Azh69QlNEKooza1U4aa+b1VvzncbtvvcXMP5Wm8dgdx3mHLftCR0XMvY4eb+yBzmQ5QXA6pHL/jyfMwBAm4Ya7iZwPCIEW5u9XZ/73NHti0xnUmazdbv3V/5hZs3vZpbxV1KH2
2024-04-24 22:19:22 UTC	1378	IN	Data Raw: 2b 5a 4a 43 62 36 31 7a 45 72 62 68 76 68 79 6a 42 41 59 44 5a 6a 48 68 48 35 39 30 76 76 6b 65 52 74 67 74 58 77 33 5a 65 2f 31 66 64 32 61 31 73 73 55 39 77 34 4c 65 62 31 52 6e 74 55 42 73 39 68 46 79 4b 68 32 66 46 48 43 52 35 30 4a 65 74 32 38 44 6b 56 76 47 64 4b 45 61 70 78 31 36 52 65 49 73 2f 70 7a 39 4f 4f 55 49 5a 2b 30 7a 54 76 62 66 56 56 2f 44 68 69 57 7a 67 66 6e 34 50 77 30 4e 73 37 47 44 54 65 33 39 2b 4d 39 65 78 44 43 7a 66 6c 78 58 66 57 6b 35 44 78 63 39 39 53 47 35 65 57 59 47 38 52 6c 6e 34 32 2b 32 68 68 66 6c 65 35 75 41 71 76 6d 2f 5a 4c 65 4f 47 62 68 73 70 35 65 32 74 73 48 64 66 4f 65 4a 76 52 72 4a 37 74 59 2f 72 77 4f 75 71 73 4a 67 2b 71 46 42 4f 73 79 79 4b 53 65 37 32 7a 43 35 65 32 32 7a 64 50 4f 6d 34 41 62 61 6d 61 31 Data Ascii: +ZJCb61zErbhvhyjBAYDZjHhH590vvkeRtgtXw3Ze/1fd2a1ssU9w4Leb1RntUBs9hFyKh2fFHCR50Jet28DkVvGdKEapx16ReIs/pz9OOUIZ+0zTvbfVV/DhiWzgfn4Pw0Ns7GDTe39+M9exDCzflxXfWk5Dxc99SG5eWYG8Rln42+2hhfle5uAqvm/ZLeOGbhsp5e2tsHdfOeJvRrJ7tY/rwOuqsJg+qFBOsyyKSe72zC5e22zdPOm4Abama1
2024-04-24 22:19:22 UTC	1378	IN	Data Raw: 6b 30 70 6c 4e 38 5a 36 36 37 5a 51 51 46 72 69 7a 4d 64 2f 50 54 55 6c 2f 2f 72 41 53 55 73 57 4e 2b 34 52 71 6d 6a 41 4f 71 36 61 69 71 76 69 4a 6b 4a 32 44 62 6a 2b 50 6c 51 78 33 64 41 69 34 49 38 32 71 46 33 33 44 54 51 65 58 75 54 36 67 6c 64 75 65 45 48 39 41 54 38 72 30 6c 68 49 38 64 30 4b 43 44 30 73 74 5a 62 41 73 79 79 48 7a 54 56 71 42 64 53 73 73 59 4e 4a 65 77 4f 31 64 77 6a 44 66 38 5a 67 54 2f 7a 45 79 79 7a 48 62 49 79 7a 4d 73 37 34 2b 4c 53 78 6f 71 70 4c 4e 65 62 4c 6c 6b 50 59 62 61 6e 51 79 61 59 2b 49 39 35 2f 32 47 57 54 5a 43 79 35 44 6d 6c 76 4f 74 7a 56 37 73 4d 50 4e 44 66 46 44 64 58 66 76 78 51 48 36 69 46 51 54 56 6a 6f 54 45 52 75 39 62 76 65 77 38 78 48 68 45 4b 66 53 7a 48 4c 41 34 74 73 42 37 32 6c 43 4c 32 73 31 78 76 Data Ascii: k0plN8Z667ZQQFrizMd/PTUl//rASUsWN+4RqmjAOq6aiqviJkJ2Dbj+PlQx3dAi4I82qF33DTQeXuT6gldueEH9AT8r0lhI8d0KCD0stZbAsyyHzTVqBdSssYNJewO1dwjDf8ZgT/zEyyzHbIyzMs74+LSxoqpLNebLlkPYbanQyaY+I95/2GWTZCy5DmlvOtzV7sMPNDfFDdXfvxQH6iFQTVjoTERu9bvew8xHhEKfSzHLA4tsB72lCL2s1xv
2024-04-24 22:19:22 UTC	1378	IN	Data Raw: 35 43 6c 47 64 76 51 75 30 74 31 32 73 34 6d 55 54 64 30 58 66 59 4a 68 6f 6d 41 77 45 35 6a 49 6b 46 49 65 35 58 65 66 4d 66 38 56 46 75 2b 6c 58 49 6e 4a 73 35 7a 67 74 37 7a 6e 47 36 66 63 68 64 74 50 39 2f 32 56 61 31 2f 4f 71 39 51 77 58 56 6f 62 68 5a 32 62 6d 5a 36 33 2b 31 4a 63 72 54 44 72 56 57 31 58 6d 44 46 39 79 58 67 77 67 49 71 37 55 58 4f 73 37 4c 33 4d 4e 69 6b 44 70 6b 66 53 4c 70 44 64 64 32 4d 4a 6e 49 78 4a 4a 79 57 66 55 4b 67 46 76 44 63 4e 49 66 73 76 48 44 4e 4a 31 68 57 76 36 72 58 32 31 46 49 55 30 58 48 73 5a 54 52 38 76 75 39 6e 33 7a 48 35 30 4a 64 58 33 69 56 69 6f 36 41 61 32 33 6e 33 35 73 72 75 59 4e 4e 71 6c 78 72 74 4b 71 33 49 78 39 75 37 6e 38 50 31 61 44 4c 52 35 58 61 75 49 64 64 45 70 42 6d 39 50 72 5a 6b 49 6f 70 Data Ascii: 5ClGdvQu0t12s4mUTd0XfYJhomAwE5jIkFIe5XefMf8VFu+lXInJs5zgt7znG6fchdtP9/2Va1/Oq9QwXVobhZ2bmZ63+1JcrTDrVW1XmDF9yXgwgIq7UXOs7L3MNikDpkfSLpDdd2MJnIxJJyWfUKgFvDcNIfsvHDNJ1hWv6rX21FIU0XHsZTR8vu9n3zH50JdX3iVio6Aa23n35sruYNNqlxrtKq3Ix9u7n8P1aDLR5XauIddEpBm9PrZkIop
2024-04-24 22:19:22 UTC	965	IN	Data Raw: 63 55 62 4c 32 39 75 50 71 74 6a 46 58 52 30 34 59 56 30 36 64 4d 51 72 48 52 6f 30 6a 48 57 36 74 59 44 4e 2f 5a 56 76 79 67 30 64 65 2f 50 78 48 66 41 49 41 45 48 42 48 50 75 69 6d 69 38 36 58 61 30 37 41 4c 54 7a 30 37 52 48 4a 48 54 74 61 34 56 62 66 73 6d 58 72 72 72 6c 75 4e 65 31 2f 64 6f 4c 74 46 64 59 34 41 41 4a 75 2b 49 4a 4f 33 54 72 6e 2b 73 6c 76 47 61 56 38 49 53 64 47 62 72 44 44 72 56 6d 7a 6e 59 72 4e 6b 6b 62 4e 66 74 31 35 6a 61 72 61 4f 43 51 4a 67 49 41 62 5a 6e 66 2f 37 62 46 4c 54 72 68 64 48 7a 32 64 4b 36 71 67 47 37 52 77 55 37 66 39 55 63 47 32 2f 63 42 36 78 2f 6e 76 50 7a 7a 79 34 6d 65 2f 59 71 30 43 49 4f 44 51 48 6e 52 58 63 38 66 6b 6d 68 4e 79 68 5a 4e 6a 78 71 45 50 4e 33 55 6e 68 4e 5a 35 4e 75 75 57 38 31 2b 6e 59 76 Data Ascii: cUbL29uPqtjFXR04YV06dMQrHRo0jHW6tYDN/ZVvyg0de/PxHfAIAEHBHPuimi86Xa07ALTz07RHJHTta4VbfsmXrrrluNe1/doLtFdY4AAJu+IJO3Trn+slvGaV8ISdGbrDDrVmznYrNkkbNft15jaraOCQJgIAbZnf/7bFLTrhdHz2dK6qgG7RwU7f9UcG2/cB6x/nvPzzy4me/Yq0CIODQHnRXc8fkmhNyhZNjxqEPN3UnhNZ5NuuW81+nYv
2024-04-24 22:19:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:22 UTC	584	OUT	OPTIONS /api/Home/RankList?time=1713997161300&RankType=2&tid=3&pageIndex=1&pageSize=3 HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: lang Origin: https://www.moboreader.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:23 UTC	284	IN	HTTP/1.1 204 No Content Server: openresty Date: Wed, 24 Apr 2024 22:19:22 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: lang Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:22 UTC	1274	OUT	POST /g/collect?v=2&tid=G-FXR92K8Y0T&gtm=45je44m0h1v880590056z8860000276za200&_p=1713997155714&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&cid=1389965382.1713997159&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1713997158&sct=1&seg=0&dl=https%3A%2F%2Fwww.moboreader.com%2FbookDetail%2F48430322%2FRomance%2FMy-Babys-Daddy&dt=My%20Baby%27s%20Daddy%20novel%20by%20Mr.Adeel%20PDF%20Read%20Online%20-%20MoboReader&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=6476 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moboreader.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:22 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moboreader.com Date: Wed, 24 Apr 2024 22:19:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:23 UTC	807	OUT	POST /g/collect?v=2&tid=G-FXR92K8Y0T&cid=1389965382.1713997159&gtm=45je44m0h1v880590056z8860000276za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moboreader.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:23 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moboreader.com Date: Wed, 24 Apr 2024 22:19:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:23 UTC	1033	OUT	GET /favicon.ico HTTP/1.1 Host: enfirebase.cdreader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://enfirebase.cdreader.com/?ndactionstr=ndaction:readonline(bookid%3D48430322%26chapterindex%3D0%26utm_medium%3Dofficialsite%26utm_campaign%3Dpcweb%26website%3DENC1) Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:24 UTC	1351	IN	HTTP/1.1 400 Bad Request Connection: close Accept-Ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cache-Control: no-cache, no-store, max-age=0, must-revalidate Content-Security-Policy: script-src 'report-sample' 'nonce-nSSNA6Q_N7kw-F6AO32jnw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self',script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist,require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport Content-Type: text/html; charset=utf-8 Cross-Origin-Opener-Policy: unsafe-none Expires: Mon, 01 Jan 1990 00:00:00 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Pragma: no-cache Accept-Ranges: bytes Date: Wed, 24 Apr 2024 22:19:24 GMT X-Served-By: cache-pdk-kfty2130043-PDK X-Cache: MISS X-Cache-Hits: 0
2024-04-24 22:19:24 UTC	233	IN	Data Raw: 58 2d 54 69 6d 65 72 3a 20 53 31 37 31 33 39 39 37 31 36 34 2e 30 34 31 37 34 30 2c 56 53 30 2c 56 45 38 35 0d 0a 56 61 72 79 3a 20 53 65 63 2d 46 65 74 63 68 2d 44 65 73 74 2c 20 53 65 63 2d 46 65 74 63 68 2d 4d 6f 64 65 2c 20 53 65 63 2d 46 65 74 63 68 2d 53 69 74 65 2c 20 78 2d 66 68 2d 72 65 71 75 65 73 74 65 64 2d 68 6f 73 74 2c 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 2c 68 33 2d 32 37 3d 22 3a 34 34 33 22 3b 6d 61 3d 38 36 34 30 30 0d 0a 74 72 61 6e 73 66 65 72 2d 65 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 0d 0a Data Ascii: X-Timer: S1713997164.041740,VS0,VE85Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site, x-fh-requested-host, accept-encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400transfer-encoding: chunked
2024-04-24 22:19:24 UTC	6	IN	Data Raw: 32 34 32 61 0d 0a Data Ascii: 242a
2024-04-24 22:19:24 UTC	1378	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 49 6e 76 61 6c 69 64 20 44 79 6e 61 6d 69 63 20 4c 69 6e 6b 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 37 29 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 52 6f 62 6f 74 6f 44 72 61 66 74 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 Data Ascii: <!doctype html><head><title>Invalid Dynamic Link</title><meta name="viewport" content="width=device-width, initial-scale=1"></head><body style="color: rgba(0,0,0,0.87); font-family: Roboto,RobotoDraft,Helvetica,Arial,sans-serif; font-size: 16px; line-heig
2024-04-24 22:19:24 UTC	1378	IN	Data Raw: 78 57 74 52 74 69 79 52 49 6a 6b 7a 6e 57 66 34 6a 45 52 52 38 38 34 68 4a 59 72 66 44 30 42 4c 6c 73 69 5a 34 54 50 55 2f 4f 59 2f 38 38 77 7a 49 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: xWtRtiyRIjkznWf4jERR884hJYrfD0BLlsiZ4TPU/OY/88wzIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2024-04-24 22:19:24 UTC	1378	IN	Data Raw: 6e 7a 57 48 59 65 6c 53 48 36 4a 49 2f 72 39 39 35 70 62 63 6a 61 41 51 51 63 33 47 7a 34 38 4e 6d 69 62 4b 78 30 45 57 36 32 32 4a 59 68 70 75 70 54 30 71 69 4c 73 53 6c 69 6a 75 55 6b 4e 79 4c 75 77 7a 59 73 48 58 49 42 30 36 70 2b 58 62 4c 66 6d 79 73 5a 66 37 46 30 4b 31 57 34 65 5a 70 72 5a 77 2b 34 4b 56 57 34 76 64 7a 48 2b 58 32 2f 49 31 78 66 37 67 68 59 46 58 54 7a 7a 75 4d 4e 35 31 45 65 6b 6f 2f 7a 72 48 37 50 6e 52 62 31 41 7a 68 36 39 51 6c 4e 45 4b 6f 6f 7a 61 31 55 34 61 61 2b 62 31 56 76 7a 6e 63 62 74 76 76 63 58 4d 50 35 57 6d 38 64 67 64 78 33 6d 48 4c 66 74 43 52 30 58 4d 76 59 34 65 62 2b 79 42 7a 6d 51 35 51 58 41 36 70 48 4c 2f 6a 79 66 4d 77 42 41 6d 34 59 61 37 69 5a 77 50 43 49 45 57 35 75 39 58 5a 2f 37 33 4e 48 74 69 30 78 6e Data Ascii: nzWHYelSH6JI/r995pbcjaAQQc3Gz48NmibKx0EW622JYhpupT0qiLsSlijuUkNyLuwzYsHXIB06p+XbLfmysZf7F0K1W4eZprZw+4KVW4vdzH+X2/I1xf7ghYFXTzzuMN51Eeko/zrH7PnRb1Azh69QlNEKooza1U4aa+b1VvzncbtvvcXMP5Wm8dgdx3mHLftCR0XMvY4eb+yBzmQ5QXA6pHL/jyfMwBAm4Ya7iZwPCIEW5u9XZ/73NHti0xn
2024-04-24 22:19:24 UTC	1378	IN	Data Raw: 62 65 7a 5a 63 32 4c 59 50 51 36 33 6c 6d 45 39 52 42 6b 55 63 4b 73 42 47 2b 5a 4a 43 62 36 31 7a 45 72 62 68 76 68 79 6a 42 41 59 44 5a 6a 48 68 48 35 39 30 76 76 6b 65 52 74 67 74 58 77 33 5a 65 2f 31 66 64 32 61 31 73 73 55 39 77 34 4c 65 62 31 52 6e 74 55 42 73 39 68 46 79 4b 68 32 66 46 48 43 52 35 30 4a 65 74 32 38 44 6b 56 76 47 64 4b 45 61 70 78 31 36 52 65 49 73 2f 70 7a 39 4f 4f 55 49 5a 2b 30 7a 54 76 62 66 56 56 2f 44 68 69 57 7a 67 66 6e 34 50 77 30 4e 73 37 47 44 54 65 33 39 2b 4d 39 65 78 44 43 7a 66 6c 78 58 66 57 6b 35 44 78 63 39 39 53 47 35 65 57 59 47 38 52 6c 6e 34 32 2b 32 68 68 66 6c 65 35 75 41 71 76 6d 2f 5a 4c 65 4f 47 62 68 73 70 35 65 32 74 73 48 64 66 4f 65 4a 76 52 72 4a 37 74 59 2f 72 77 4f 75 71 73 4a 67 2b 71 46 42 4f 73 Data Ascii: bezZc2LYPQ63lmE9RBkUcKsBG+ZJCb61zErbhvhyjBAYDZjHhH590vvkeRtgtXw3Ze/1fd2a1ssU9w4Leb1RntUBs9hFyKh2fFHCR50Jet28DkVvGdKEapx16ReIs/pz9OOUIZ+0zTvbfVV/DhiWzgfn4Pw0Ns7GDTe39+M9exDCzflxXfWk5Dxc99SG5eWYG8Rln42+2hhfle5uAqvm/ZLeOGbhsp5e2tsHdfOeJvRrJ7tY/rwOuqsJg+qFBOs
2024-04-24 22:19:24 UTC	1378	IN	Data Raw: 69 75 45 69 75 36 71 77 31 61 6b 6e 4e 39 30 79 48 54 36 61 59 6a 51 43 57 6b 30 70 6c 4e 38 5a 36 36 37 5a 51 51 46 72 69 7a 4d 64 2f 50 54 55 6c 2f 2f 72 41 53 55 73 57 4e 2b 34 52 71 6d 6a 41 4f 71 36 61 69 71 76 69 4a 6b 4a 32 44 62 6a 2b 50 6c 51 78 33 64 41 69 34 49 38 32 71 46 33 33 44 54 51 65 58 75 54 36 67 6c 64 75 65 45 48 39 41 54 38 72 30 6c 68 49 38 64 30 4b 43 44 30 73 74 5a 62 41 73 79 79 48 7a 54 56 71 42 64 53 73 73 59 4e 4a 65 77 4f 31 64 77 6a 44 66 38 5a 67 54 2f 7a 45 79 79 7a 48 62 49 79 7a 4d 73 37 34 2b 4c 53 78 6f 71 70 4c 4e 65 62 4c 6c 6b 50 59 62 61 6e 51 79 61 59 2b 49 39 35 2f 32 47 57 54 5a 43 79 35 44 6d 6c 76 4f 74 7a 56 37 73 4d 50 4e 44 66 46 44 64 58 66 76 78 51 48 36 69 46 51 54 56 6a 6f 54 45 52 75 39 62 76 65 77 38 Data Ascii: iuEiu6qw1aknN90yHT6aYjQCWk0plN8Z667ZQQFrizMd/PTUl//rASUsWN+4RqmjAOq6aiqviJkJ2Dbj+PlQx3dAi4I82qF33DTQeXuT6gldueEH9AT8r0lhI8d0KCD0stZbAsyyHzTVqBdSssYNJewO1dwjDf8ZgT/zEyyzHbIyzMs74+LSxoqpLNebLlkPYbanQyaY+I95/2GWTZCy5DmlvOtzV7sMPNDfFDdXfvxQH6iFQTVjoTERu9bvew8
2024-04-24 22:19:24 UTC	1378	IN	Data Raw: 39 64 37 74 67 41 43 5a 31 42 75 6d 62 72 71 6e 76 79 43 37 76 66 36 38 2b 35 43 6c 47 64 76 51 75 30 74 31 32 73 34 6d 55 54 64 30 58 66 59 4a 68 6f 6d 41 77 45 35 6a 49 6b 46 49 65 35 58 65 66 4d 66 38 56 46 75 2b 6c 58 49 6e 4a 73 35 7a 67 74 37 7a 6e 47 36 66 63 68 64 74 50 39 2f 32 56 61 31 2f 4f 71 39 51 77 58 56 6f 62 68 5a 32 62 6d 5a 36 33 2b 31 4a 63 72 54 44 72 56 57 31 58 6d 44 46 39 79 58 67 77 67 49 71 37 55 58 4f 73 37 4c 33 4d 4e 69 6b 44 70 6b 66 53 4c 70 44 64 64 32 4d 4a 6e 49 78 4a 4a 79 57 66 55 4b 67 46 76 44 63 4e 49 66 73 76 48 44 4e 4a 31 68 57 76 36 72 58 32 31 46 49 55 30 58 48 73 5a 54 52 38 76 75 39 6e 33 7a 48 35 30 4a 64 58 33 69 56 69 6f 36 41 61 32 33 6e 33 35 73 72 75 59 4e 4e 71 6c 78 72 74 4b 71 33 49 78 39 75 37 6e 38 Data Ascii: 9d7tgACZ1BumbrqnvyC7vf68+5ClGdvQu0t12s4mUTd0XfYJhomAwE5jIkFIe5XefMf8VFu+lXInJs5zgt7znG6fchdtP9/2Va1/Oq9QwXVobhZ2bmZ63+1JcrTDrVW1XmDF9yXgwgIq7UXOs7L3MNikDpkfSLpDdd2MJnIxJJyWfUKgFvDcNIfsvHDNJ1hWv6rX21FIU0XHsZTR8vu9n3zH50JdX3iVio6Aa23n35sruYNNqlxrtKq3Ix9u7n8
2024-04-24 22:19:24 UTC	990	IN	Data Raw: 33 4a 56 39 66 35 55 7a 67 30 79 69 7a 50 6f 57 6d 48 6c 53 47 64 4e 78 58 63 55 62 4c 32 39 75 50 71 74 6a 46 58 52 30 34 59 56 30 36 64 4d 51 72 48 52 6f 30 6a 48 57 36 74 59 44 4e 2f 5a 56 76 79 67 30 64 65 2f 50 78 48 66 41 49 41 45 48 42 48 50 75 69 6d 69 38 36 58 61 30 37 41 4c 54 7a 30 37 52 48 4a 48 54 74 61 34 56 62 66 73 6d 58 72 72 72 6c 75 4e 65 31 2f 64 6f 4c 74 46 64 59 34 41 41 4a 75 2b 49 4a 4f 33 54 72 6e 2b 73 6c 76 47 61 56 38 49 53 64 47 62 72 44 44 72 56 6d 7a 6e 59 72 4e 6b 6b 62 4e 66 74 31 35 6a 61 72 61 4f 43 51 4a 67 49 41 62 5a 6e 66 2f 37 62 46 4c 54 72 68 64 48 7a 32 64 4b 36 71 67 47 37 52 77 55 37 66 39 55 63 47 32 2f 63 42 36 78 2f 6e 76 50 7a 7a 79 34 6d 65 2f 59 71 30 43 49 4f 44 51 48 6e 52 58 63 38 66 6b 6d 68 4e 79 68 Data Ascii: 3JV9f5Uzg0yizPoWmHlSGdNxXcUbL29uPqtjFXR04YV06dMQrHRo0jHW6tYDN/ZVvyg0de/PxHfAIAEHBHPuimi86Xa07ALTz07RHJHTta4VbfsmXrrrluNe1/doLtFdY4AAJu+IJO3Trn+slvGaV8ISdGbrDDrVmznYrNkkbNft15jaraOCQJgIAbZnf/7bFLTrhdHz2dK6qgG7RwU7f9UcG2/cB6x/nvPzzy4me/Yq0CIODQHnRXc8fkmhNyh
2024-04-24 22:19:24 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:24 UTC	676	OUT	GET /api/Home/RankList?time=1713997161300&RankType=2&tid=3&pageIndex=1&pageSize=3 HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / lang: en sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.moboreader.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:24 UTC	303	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 24 Apr 2024 22:19:24 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.moboreader.com Vary: Origin
2024-04-24 22:19:24 UTC	4534	IN	Data Raw: 31 31 61 39 0d 0a 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 31 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 6e 65 78 74 55 70 64 61 74 65 54 69 6d 65 53 70 61 6e 22 3a 31 30 2c 22 74 69 74 6c 65 22 3a 22 20 52 65 61 64 73 22 2c 22 66 6f 63 75 73 54 61 62 49 44 22 3a 22 32 33 22 2c 22 66 72 61 6d 65 4e 61 6d 65 22 3a 22 50 61 6e 64 61 43 6c 69 65 6e 74 46 72 61 6d 65 22 2c 22 66 6f 72 6d 4c 69 73 74 22 3a 5b 7b 22 73 74 79 6c 65 22 3a 34 2c 22 63 61 70 74 69 6f 6e 22 3a 22 4d 6f 6e 74 68 6c 79 22 2c 22 67 72 6f 75 70 49 6e 64 65 78 22 3a 31 2c 22 6c 69 73 74 42 75 74 74 6f 6e 41 63 74 69 6f 6e 22 3a 22 6e 64 61 63 74 69 6f 6e 3a 72 65 61 64 62 79 74 65 28 68 74 74 70 73 3a 2f 2f 61 Data Ascii: 11a9{"status":true,"code":"1","message":"Success","data":{"nextUpdateTimeSpan":10,"title":" Reads","focusTabID":"23","frameName":"PandaClientFrame","formList":[{"style":4,"caption":"Monthly","groupIndex":1,"listButtonAction":"ndaction:readbyte(https://a

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:24 UTC	405	OUT	GET /api/Book/BookComment?time=1713997158706&bookId=48430322 HTTP/1.1 Host: overseas-r-en.cdreader.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:25 UTC	192	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 24 Apr 2024 22:19:25 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-04-24 22:19:25 UTC	5000	IN	Data Raw: 31 33 37 62 0d 0a 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 63 6f 64 65 22 3a 22 31 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 75 63 63 65 73 73 22 2c 22 64 61 74 61 22 3a 7b 22 62 6f 6f 6b 22 3a 7b 22 62 6f 6f 6b 49 64 22 3a 34 38 34 33 30 33 32 32 2c 22 63 6f 76 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 73 2d 65 6e 72 65 73 2e 63 64 72 65 61 64 65 72 2e 63 6f 6d 2f 73 69 74 65 2d 33 32 32 28 6e 65 77 29 2f 30 2f 34 38 34 33 30 2f 63 6f 76 65 72 6d 69 64 64 6c 65 2e 6a 70 67 3f 76 3d 39 37 30 31 62 66 34 38 34 38 34 31 35 62 33 37 38 38 65 66 32 65 37 63 66 35 61 65 33 63 33 30 22 2c 22 6e 61 6d 65 22 3a 22 4d 79 20 42 61 62 79 27 73 20 44 61 64 64 79 22 2c 22 73 74 61 72 22 3a 22 39 37 2e 35 30 20 25 22 2c 22 73 63 6f 72 65 22 3a 22 34 2e 39 22 Data Ascii: 137b{"status":true,"code":"1","message":"Success","data":{"book":{"bookId":48430322,"cover":"https://cos-enres.cdreader.com/site-322(new)/0/48430/covermiddle.jpg?v=9701bf4848415b3788ef2e7cf5ae3c30","name":"My Baby's Daddy","star":"97.50 %","score":"4.9"

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:26 UTC	1256	OUT	POST /g/collect?v=2&tid=G-FXR92K8Y0T&gtm=45je44m0h1v880590056z8860000276za200&_p=1713997155714&gcd=13l3l3l3l1&npa=0&dma=0&cid=1389965382.1713997159&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=2&sid=1713997158&sct=1&seg=0&dl=https%3A%2F%2Fwww.moboreader.com%2FbookDetail%2F48430322%2FRomance%2FMy-Babys-Daddy&dt=My%20Baby%27s%20Daddy%20novel%20by%20Mr.Adeel%20PDF%20Read%20Online%20-%20MoboReader&en=BookDetail&_et=4&tfd=12100 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.moboreader.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:26 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.moboreader.com Date: Wed, 24 Apr 2024 22:19:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-04-24 22:19:26 UTC	615	OUT	GET /reader_pro_en/resource/tx/106.jpg HTTP/1.1 Host: cosusen.cdreader.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.moboreader.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 22:19:26 UTC	455	IN	HTTP/1.1 200 OK Last-Modified: Thu, 23 Dec 2021 10:31:42 GMT Etag: "46acc0cdc775b7f696c2a372f0a370f4" Content-Type: image/jpeg Date: Wed, 24 Apr 2024 20:07:21 GMT Server: tencent-cos x-cos-hash-crc64ecma: 3751048438855985967 x-cos-request-id: NjYyOTY2NzlfZjA3N2U2MDlfMmM3Zl9mNDUyMTA5 Content-Length: 20648 Accept-Ranges: bytes X-NWS-LOG-UUID: 14160851281254455591 Connection: close X-Cache-Lookup: Cache Hit Access-Control-Allow-Origin: *
2024-04-24 22:19:26 UTC	16384	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 2a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifIIDuckydhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xm
2024-04-24 22:19:26 UTC	4264	IN	Data Raw: 72 fc e6 24 cb d6 3d e9 87 ae 8b 41 fa 6e 9f e3 3c 80 d9 42 4a 59 8a bd dc 99 a5 2c a9 e4 95 72 c6 ec c6 b7 3b 30 de d5 cb 47 0e 5a 09 92 22 c8 2e ad 0e 05 8e be d2 e3 fd 24 ed 48 c8 fa 7e 39 d4 cd 97 90 4c d1 73 64 ff 00 00 39 72 fa 7f 5d 10 19 39 f2 cc b2 44 6d dd 04 d0 ef a0 4b 26 77 b7 1b 66 49 95 f2 66 8e b8 e3 53 24 a1 56 6c 88 98 eb b3 07 c2 75 47 a6 1d 54 ce 20 70 2d 06 ba e1 b4 30 b1 93 30 e4 09 03 b8 1c 3b d2 9d f7 ff 00 f3 5f 27 7e cf e4 b5 35 8e 69 9f 72 f6 51 ab db 26 2f 83 cf 3d c2 34 b3 ad 18 c9 53 da 76 7c bb 6c 85 7e 48 bc 3b 72 c3 83 d4 57 45 b4 54 69 d1 2b 34 e4 24 57 76 fd 0d c4 17 67 01 22 6d 86 84 1a 88 e9 06 f7 77 15 8d 80 bd 94 68 b8 73 34 46 33 c1 71 fa 97 1a 91 74 96 db 71 bc ef 83 6d 84 eb b2 89 82 79 d0 22 b8 94 69 c3 92 80 83 Data Ascii: r$=An<BJY,r;0GZ".$H~9Lsd9r]9DmK&wfIfS$VluGT p-00;_'~5irQ&/=4Sv\|l~H;rWETi+4$Wvg"mwhs4F3qtqmy"i