Edit tour

Windows Analysis Report
http://1movieshd.cc

Overview

General Information

Sample URL:	http://1movieshd.cc
Analysis ID:	1432305
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Executes massive DNS lookups (> 100)

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2840 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2216,i,6705838790087099450,35814465125719137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6424 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://1movieshd.cc" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /6/map HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveContent-Length: 439sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://1movieshd.ccSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://1movieshd.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 26 Apr 2024 18:33:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Fri, 26 Apr 2024 18:33:19 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 87a8a8bd8ac0d9fd-MIA
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: CloudFrontContent-Type: text/htmlContent-Length: 0Connection: closeDate: Fri, 26 Apr 2024 18:00:56 GMTx-amz-replication-status: COMPLETEDLast-Modified: Thu, 02 Nov 2023 02:17:11 GMTETag: "d41d8cd98f00b204e9800998ecf8427e"x-amz-version-id: x8CUW72Cdy4wRBv1lXTNc2XlWFvGGyiMAccept-Ranges: bytesX-Cache: Error from cloudfrontVia: 1.1 15167ef85a9fc2764e4d5ca36adfffde.cloudfront.net (CloudFront)X-Amz-Cf-Pop: MIA3-P8X-Amz-Cf-Id: UiyRvMVYdGoxo73sYA7gO9uCXsY-BpbeFIIt4zhYaWvxGA5wTplrQg==Age: 1932Strict-Transport-Security: max-age=31536000
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenx-amz-request-id: B6176DWX1X3H2F5Zx-amz-id-2: EWe73UGgZyBYY1QGR8PZiCBONZuSWzg70iHUcSm3vglx8PutMxwc4lEPmabk8c+XMSE1/EK2cRI=Content-Type: application/xmlTransfer-Encoding: chunkedDate: Fri, 26 Apr 2024 18:33:17 GMTServer: AmazonS3Connection: close

Source: chromecache_717.2.dr	String found in binary or memory: http://ajaxian.com/archives/creating-a-queryselector-for-ie-that-runs-at-native-speed
Source: chromecache_548.2.dr	String found in binary or memory: http://caniuse.com/#search=dataset
Source: chromecache_717.2.dr	String found in binary or memory: http://compose.mail.yahoo.com/?
Source: chromecache_719.2.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_607.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT)
Source: chromecache_278.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_717.2.dr	String found in binary or memory: http://service.weibo.com/share/share.php?
Source: chromecache_717.2.dr	String found in binary or memory: http://share.naver.com/web/shareView.nhn?
Source: chromecache_717.2.dr	String found in binary or memory: http://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?
Source: chromecache_717.2.dr	String found in binary or memory: http://surfingbird.ru/share?
Source: chromecache_292.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_717.2.dr	String found in binary or memory: http://widget.renren.com/dialog/share?
Source: chromecache_717.2.dr	String found in binary or memory: http://wordpress.com/wp-admin/press-this.php?
Source: chromecache_717.2.dr	String found in binary or memory: http://www.douban.com/recommend/?
Source: chromecache_717.2.dr	String found in binary or memory: http://www.evernote.com/clip.action?
Source: chromecache_717.2.dr	String found in binary or memory: http://www.instapaper.com/edit?
Source: chromecache_717.2.dr	String found in binary or memory: http://www.plurk.com/?
Source: chromecache_548.2.dr	String found in binary or memory: http://www.wtfpl.net/txt/copying)
Source: chromecache_809.2.dr	String found in binary or memory: https://1movieshd.cc/
Source: chromecache_432.2.dr	String found in binary or memory: https://1movieshd.cc/home
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr, chromecache_809.2.dr	String found in binary or memory: https://1movieshd.cc/images/group_11/theme_3/capture.jpg?v=0.3
Source: chromecache_435.2.dr	String found in binary or memory: https://1movieshd.cc/movie
Source: chromecache_585.2.dr	String found in binary or memory: https://1movieshd.cc/tv-show
Source: chromecache_288.2.dr	String found in binary or memory: https://7lr8.adj.st/web.bitpanda.com/user/register/:ref?tag=:tag&irclickid=:irclickid&adj_t=
Source: chromecache_809.2.dr	String found in binary or memory: https://9animetv.to/
Source: chromecache_288.2.dr	String found in binary or memory: https://account.bitpanda.com/de/login
Source: chromecache_288.2.dr	String found in binary or memory: https://account.bitpanda.com/de/register
Source: chromecache_288.2.dr	String found in binary or memory: https://account.bitpanda.com/de/register?origin=web
Source: chromecache_500.2.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_500.2.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_500.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_500.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_500.2.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_500.2.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_500.2.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_500.2.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_500.2.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_500.2.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_500.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_500.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_599.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_599.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_599.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_599.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_809.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
Source: chromecache_288.2.dr	String found in binary or memory: https://api.bitpanda.com/v1/
Source: chromecache_288.2.dr	String found in binary or memory: https://api.bitpanda.com/v2/
Source: chromecache_288.2.dr	String found in binary or memory: https://api.bitpanda.com/v3/
Source: chromecache_717.2.dr	String found in binary or memory: https://api.qrserver.com/v1/create-qr-code/?
Source: chromecache_287.2.dr	String found in binary or memory: https://app.plus500.com
Source: chromecache_741.2.dr	String found in binary or memory: https://app.plus500.com/
Source: chromecache_287.2.dr	String found in binary or memory: https://app.plus500.com/manifest.json
Source: chromecache_581.2.dr	String found in binary or memory: https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/acknowledgements.txt
Source: chromecache_288.2.dr	String found in binary or memory: https://apps.apple.com/at/app/bitpanda/id1449018960
Source: chromecache_288.2.dr	String found in binary or memory: https://apps.apple.com/at/app/bitpanda/id1449018960?ifl=https://apps.apple.com/at/app/bitpanda/id144
Source: chromecache_717.2.dr	String found in binary or memory: https://bitbucket.org/
Source: chromecache_288.2.dr	String found in binary or memory: https://bitcoin.org/Bitcoin.pdf
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/bnb.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/btc.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/eth.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/mbl.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/sc.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/troy.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/usdc.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/usdt.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/vtho.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/xdb.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/xrp.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda.matomo.cloud/
Source: chromecache_288.2.dr	String found in binary or memory: https://bitpanda.page.link/?link=https://www.bitpanda.com/user/register/
Source: chromecache_288.2.dr	String found in binary or memory: https://blockpit.io/
Source: chromecache_288.2.dr	String found in binary or memory: https://blog.bitpanda.com/de
Source: chromecache_288.2.dr	String found in binary or memory: https://blog.bitpanda.com/de/6-fragen-zu-bitcoin-die-du-dich-vielleicht-nicht-zu-fragen-traust/
Source: chromecache_288.2.dr	String found in binary or memory: https://blog.bitpanda.com/de/deine-investments-deine-assets-warum-dein-geld-bei-bitpanda-sicher-ist
Source: chromecache_288.2.dr	String found in binary or memory: https://blog.bitpanda.com/de/warum-nfts-derzeit-in-aller-munde-sind/
Source: chromecache_288.2.dr	String found in binary or memory: https://blog.bitpanda.com/de/warum-uns-datenschutz-am-herzen-liegt
Source: chromecache_288.2.dr	String found in binary or memory: https://blog.bitpanda.com/de/was-sollte-ich-beim-investieren-berucksichtigen
Source: chromecache_288.2.dr	String found in binary or memory: https://blog.bitpanda.com/de?utm_referrer=https://www.bitpanda.com
Source: chromecache_717.2.dr	String found in binary or memory: https://buffer.com/add?
Source: chromecache_717.2.dr	String found in binary or memory: https://buttons-config.sharethis.com/js/
Source: chromecache_505.2.dr	String found in binary or memory: https://caniuse.com/mdn-html_elements_ol_reversed
Source: chromecache_745.2.dr, chromecache_599.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/app/v2/css/all.min.css?id=0a6b6e34d2ce5388c046c8290ba08dfd
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/app/v2/js/all.min.js?id=9ac3fa897412c0e399a87da045d24cab
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/app/v2/js/append-asset-page-schema-offers.min.js?id=71732fec015742c40848be1
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/app/v2/js/assetDetailBigChart.min.js?id=2961972a8645e5f62560c78ac7873322
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/app/v2/js/cta-button.min.js?id=d34a8a89944479eef669417eb9f8e3c5
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/app/v2/js/dotcom-components/dotcom-components.esm.js?id=418046627d829dcf760
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/app/v2/js/dotcom-components/dotcom-components.js?id=0b52396aaf0e4308e3af795
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/app/v2/js/head.min.js?id=c9d8a7523921951f3dc02c71193d6fe4
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/app/v2/js/stock.min.js?id=09db388523f29a4e6879d1cd9650b068
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/BTC-halving/bitpanda-academy-intermediate-22-bitcoin-halving-header-N
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/BTC-halving/bitpanda-bitcoin-halving-countdown.jpg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/BTC-halving/spotlight_icon_menu.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/BCI.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/BitpandaClub_36x36.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Bitpanda_EN_trimmed.png
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Blog-nav-thumb3-280x200.jpg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Cryptos.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201306.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201307.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201308.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201310.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201311.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201312.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%20302%20new.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%2043-2.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Screenshot%202022-11-17%20at%2011.14.4
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Screenshot%202022-11-17%20at%2011.15.0
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Stocks.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/bpc%20b%20logo%20rounded%20square.png
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/corn%402x.png
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/etf-1.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/leverage/leveraged_token-menu.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/metals-1.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/spotlight_icon_menu.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/asset-icons/asset-best.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/asset-icons/asset-btc.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/asset-icons/asset-eth.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/asset-icons/asset-shiba-inu.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/asset-icons/asset-xrp.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/fonts/EuclidSquare/EuclidSquare-Medium.woff
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/fonts/EuclidSquare/EuclidSquare-Medium.woff2
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/fonts/EuclidSquare/EuclidSquare-Regular.woff
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/fonts/EuclidSquare/EuclidSquare-Regular.woff2
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/fonts/EuclidSquare/EuclidSquare-Semibold.woff
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/fonts/EuclidSquare/EuclidSquare-Semibold.woff2
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/fonts/bp-assets/bp-assets.woff2
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/og-images-open-graph/bitpanda-cryptocurrencies-crypto-og.jpg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/redesign/favicon/dark/android-chrome-384x384.png
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/redesign/favicon/favicon-16x16.png
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/redesign/favicon/favicon-32x32.png
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/sponsorships/FCB/bp-fcb-partner-logo3.gif
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/wealth/Artboard%201%20copy%204-modified-modified.png
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/white-label/menu/230120_bts_ShortLogo_black_V1.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.bitpanda.com/media/your-investment-your-assets-why-your-money-is-safe-with-bitpanda-bitp
Source: chromecache_457.2.dr	String found in binary or memory: https://cdn.heapanalytics.com/js/heap-
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/js-cookie
Source: chromecache_288.2.dr	String found in binary or memory: https://cdn.segment.com
Source: chromecache_599.2.dr	String found in binary or memory: https://cdn.taboola.com/libtrc/unip/
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/css/all.css
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/lazysizes/5.1.1/lazysizes.min.js
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.15.0/umd/popper.min.js
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.min.js
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr, chromecache_809.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js
Source: chromecache_746.2.dr, chromecache_418.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_746.2.dr, chromecache_418.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_288.2.dr	String found in binary or memory: https://code.highcharts.com
Source: chromecache_288.2.dr	String found in binary or memory: https://code.highcharts.com/modules/annotations.js
Source: chromecache_288.2.dr	String found in binary or memory: https://code.highcharts.com/stock/highstock.js
Source: chromecache_717.2.dr	String found in binary or memory: https://connect.mail.ru/share?
Source: chromecache_717.2.dr	String found in binary or memory: https://connect.ok.ru/dk?
Source: chromecache_717.2.dr	String found in binary or memory: https://count-server.sharethis.com/v2.0/get_counts?
Source: chromecache_288.2.dr	String found in binary or memory: https://custody.bitpanda.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://data.stbuttons.click/data
Source: chromecache_717.2.dr	String found in binary or memory: https://datasphere-sbsvc.sharethis.com?n=
Source: chromecache_717.2.dr	String found in binary or memory: https://del.icio.us/save?
Source: chromecache_548.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/HTMLElement/dataset
Source: chromecache_717.2.dr	String found in binary or memory: https://developers.gfycat.com/iframe/#gfycat-iframe
Source: chromecache_500.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_500.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_500.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout
Source: chromecache_500.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_746.2.dr, chromecache_418.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_746.2.dr, chromecache_418.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_746.2.dr, chromecache_418.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_741.2.dr	String found in binary or memory: https://developers.google.com/web/fundamentals/push-notifications/display-a-notification
Source: chromecache_717.2.dr	String found in binary or memory: https://digg.com/submit?
Source: chromecache_717.2.dr	String found in binary or memory: https://discord.gg/
Source: chromecache_717.2.dr	String found in binary or memory: https://dribbble.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://electricbikereview.com/gocycle/gs/
Source: chromecache_717.2.dr	String found in binary or memory: https://embed.ly/code?url=http%3A%2F%2Fgoogle.com
Source: chromecache_717.2.dr	String found in binary or memory: https://en.support.wordpress.com/soundcloud-audio-player/
Source: chromecache_717.2.dr	String found in binary or memory: https://flipboard.com/
Source: chromecache_272.2.dr, chromecache_304.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_272.2.dr, chromecache_304.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_701.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Montserrat:wght
Source: chromecache_666.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_666.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_666.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_666.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_666.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_717.2.dr	String found in binary or memory: https://foursquare.com/intent/venue/
Source: chromecache_717.2.dr	String found in binary or memory: https://foursquare.com/v/
Source: chromecache_717.2.dr	String found in binary or memory: https://gab.com/compose?url=
Source: chromecache_717.2.dr	String found in binary or memory: https://gdpr-api.sharethis.com/cmp-v2.js
Source: chromecache_717.2.dr	String found in binary or memory: https://gdpr-api.sharethis.com/cmp.js
Source: chromecache_717.2.dr	String found in binary or memory: https://gdpr-api.sharethis.com/is_eu
Source: chromecache_762.2.dr, chromecache_619.2.dr, chromecache_523.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_717.2.dr	String found in binary or memory: https://getpocket.com/edit?
Source: chromecache_717.2.dr	String found in binary or memory: https://giphy.com/posts/how-to-embed-giphy-gifs-on-your-website
Source: chromecache_741.2.dr	String found in binary or memory: https://github.com/GoogleChrome/samples/tree/gh-pages/service-worker/fallback-response
Source: chromecache_596.2.dr, chromecache_548.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_762.2.dr, chromecache_619.2.dr, chromecache_523.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_619.2.dr, chromecache_523.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_717.2.dr	String found in binary or memory: https://gitlab.com/
Source: chromecache_599.2.dr	String found in binary or memory: https://google.com
Source: chromecache_599.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_717.2.dr	String found in binary or memory: https://goop.com/wellness/
Source: chromecache_717.2.dr	String found in binary or memory: https://help.imgur.com/hc/en-us/articles/211273743-Embed-Unit
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/1200x600/793/40/31/4031ee4fad85314df43b8f30d191dad9/4031ee4fad85314df4
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/1200x600/793/55/5b/555b64c17d8909e2376acd8438a583e5/555b64c17d8909e237
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/1200x600/793/82/56/8256aff80a99d898f6a5cab994ba5e0b/8256aff80a99d898f6
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/1200x600/793/86/11/86112a473c75bb3e179e7892bdda6b84/86112a473c75bb3e17
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/1200x600/793/8b/69/8b69d6e6025464cd449ad0097791c41b/8b69d6e6025464cd44
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/1200x600/793/8c/c0/8cc04d9bb6609db3bf10b294153239fa/8cc04d9bb6609db3bf
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/1200x600/793/ab/ad/abadcdcda3c7e85b004fac4398019af1/abadcdcda3c7e85b00
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/1200x600/793/b5/57/b557aee04772d0a3a66a29064bf8dd3e/b557aee04772d0a3a6
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/1200x600/793/d4/a5/d4a5ca2896ffd5bf878a6c93110fb09f/d4a5ca2896ffd5bf87
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/01/93/0193930ece2f77df5b7fce5b4b6eea6a/0193930ece2f77df5b7
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/05/d2/05d2af3ecc1a6d545c293968589b68fe/05d2af3ecc1a6d545c2
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/07/1a/071a8da7867976dfc55e780d277f0eb3/071a8da7867976dfc55
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/09/7a/097a18831045b64ca0dfe2ff1bd15dce/097a18831045b64ca0d
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/0a/a9/0aa95e98d17d7e708b1d9ab1086189f5/0aa95e98d17d7e708b1
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/0a/d0/0ad0f66216e079931d172870692005c1/0ad0f66216e079931d1
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/0b/8c/0b8c097a412960670694249a6bd690de/0b8c097a41296067069
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/0e/a0/0ea0444cda16f91255c4f28666fcdd7d/0ea0444cda16f91255c
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/0f/d8/0fd896384421a0238181d000ddf2a1b9/0fd896384421a023818
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/13/1a/131a68a0ff4602af36b69afdbd00b343/131a68a0ff4602af36b
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/13/d4/13d48efacd612fd1d0b7957e72885d66/13d48efacd612fd1d0b
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/17/3a/173a3c449ea1eb9f3bbf08646c4859a3/173a3c449ea1eb9f3bb
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/19/72/19725398234ac3201ca5f2d5323faab6/19725398234ac3201ca
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/1b/2e/1b2e7f907e0eabd02ddca00c9a3ca2a4/1b2e7f907e0eabd02dd
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/20/79/20793c6b20858e6a950ff2b9a67bcffc/20793c6b20858e6a950
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/23/b8/23b8ccf4218d9745a440dfab109099fa/23b8ccf4218d9745a44
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/25/36/25369637a43bd670ec087ed2046e8737/25369637a43bd670ec0
Source: chromecache_432.2.dr, chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/25/7d/257d0a66d1d7e9c53531a6faa02f36ee/257d0a66d1d7e9c5353
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/25/c0/25c067899dcfb20d6af8a1866c46210b/25c067899dcfb20d6af
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/25/c6/25c630a3c0925e7103a801bbba6edb0c/25c630a3c0925e7103a
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/25/db/25db3b6e3d98ed5c09090a3ff67a8f50/25db3b6e3d98ed5c090
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/28/ec/28ec70b4206234908fbc3e572160150e/28ec70b4206234908fb
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/2b/22/2b2267fe4731539be517d3e67daf45cf/2b2267fe4731539be51
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/2e/02/2e02667d46326f8d0173e7360010f394/2e02667d46326f8d017
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/36/81/368175f08c3494fbab5bca96d16a83c5/368175f08c3494fbab5
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/38/96/38965a95f26c271035913b2916859da0/38965a95f26c2710359
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/38/d2/38d25e76d79f7d7ea22d5851a944cafa/38d25e76d79f7d7ea22
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/3e/34/3e34a78cd7ece10d0cc0a028b8702dfb/3e34a78cd7ece10d0cc
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/3e/db/3edb97e60d9d7d5a63efc6b02be95a6b/3edb97e60d9d7d5a63e
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/3f/8d/3f8d2fdd0e286e4878823759cbe5bbaf/3f8d2fdd0e286e48788
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/40/89/408947ae02aca7a1527615dfd3b37360/408947ae02aca7a1527
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/44/f5/44f5a38a729bea60f9aa57e1f1d30ee3/44f5a38a729bea60f9a
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/4a/6a/4a6a22f7a0595822396fb0b553e99be9/4a6a22f7a0595822396
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/4a/da/4ada5892be3a24521abd543edea19c0e/4ada5892be3a24521ab
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/4c/da/4cdad402503a9f291521cdf4de162cf0/4cdad402503a9f29152
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/4e/83/4e83cbfdc6263b8fdd928b5e14aaaac1/4e83cbfdc6263b8fdd9
Source: chromecache_432.2.dr, chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/4f/3c/4f3c9aad757c2739ab58ce4608002157/4f3c9aad757c2739ab5
Source: chromecache_432.2.dr, chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/50/a6/50a6852ccb871449a7b740b9fb3f4ca0/50a6852ccb871449a7b
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/52/7b/527bdc2908423dffab686f4838487577/527bdc2908423dffab6
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/52/99/5299dcaeb71225b45ac215eb6bdcdf7c/5299dcaeb71225b45ac
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/53/ed/53ed7f931a1de828639ca70abd342097/53ed7f931a1de828639
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/56/2a/562a533d60fbba125e27ca5b0645023d/562a533d60fbba125e2
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/57/68/576899c7db56f47fa48dbdab100d9edb/576899c7db56f47fa48
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/5b/2e/5b2e29e646212b63555576cc5a122117/5b2e29e646212b63555
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/5b/67/5b6704279f850f85833ae7296e068564/5b6704279f850f85833
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/5e/87/5e870a75dad1edbca0a3c113ea470ad3/5e870a75dad1edbca0a
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/5f/cb/5fcbae8c362ae4cd1a2a5a181e084314/5fcbae8c362ae4cd1a2
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/60/38/6038541d6bdc8473ff27026ea47017f2/6038541d6bdc8473ff2
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/60/f8/60f86e3cde437250c3cc15d1b6da4b14/60f86e3cde437250c3c
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/62/4d/624da3679000613c554103de16f6296e/624da3679000613c554
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/62/a2/62a289076dfa29b2b9ce4335a1788c25/62a289076dfa29b2b9c
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/64/1c/641c3b2bf96415e12ed920a0952d3528/641c3b2bf96415e12ed
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/67/97/6797578119ccd52fd46944e659a194b7/6797578119ccd52fd46
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/68/22/68223cf08a407a8c5107c603202618c9/68223cf08a407a8c510
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/6a/e3/6ae390dc2e135c79c6ea8efabe9abbf4/6ae390dc2e135c79c6e
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/6b/06/6b068075511bbba8b237a844e8989e56/6b068075511bbba8b23
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/6c/f6/6cf634239aa04e254cc4f6e675b4ad8a/6cf634239aa04e254cc
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/6d/3e/6d3e66ebe4dc4233c6a8fe8d27712bfe/6d3e66ebe4dc4233c6a
Source: chromecache_432.2.dr, chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/6f/8a/6f8a0ea042721d3749c9d6e82665eb75/6f8a0ea042721d3749c
Source: chromecache_432.2.dr, chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/70/c3/70c31e2b9f0136a10872f07d9c635df6/70c31e2b9f0136a1087
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/71/92/7192237c81db41a3d14b7020d0c3cada/7192237c81db41a3d14
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/72/85/728546047dee0a65073b6b951714a375/728546047dee0a65073
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/72/a2/72a241dad98940029994fbe42b5a85ae/72a241dad9894002999
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/72/ce/72ceab2bf8d5566ce69835063572b76b/72ceab2bf8d5566ce69
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/73/e5/73e591c00ee5f6cfa061e6e4f5d56a92/73e591c00ee5f6cfa06
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/74/e1/74e18e1bdb4e703021495dced7bd93c3/74e18e1bdb4e7030214
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/75/e0/75e0bfae315594720f884d77f482e63f/75e0bfae315594720f8
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/7c/9d/7c9d5e973725cb9081b3c93e8f9e9d60/7c9d5e973725cb9081b
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/7c/b5/7cb5d526f8a37250fe77bd728099ad10/7cb5d526f8a37250fe7
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/7e/df/7edf45ceb2b813cca0d864fa32d24b77/7edf45ceb2b813cca0d
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/80/e0/80e03926b55e1eff5f3b765e03202fa4/80e03926b55e1eff5f3
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/81/37/81372ed9dcce1a4c6528e51235ff77f4/81372ed9dcce1a4c652
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/81/a6/81a6f809123d73982bcf71dae330052f/81a6f809123d73982bc
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/88/22/8822b3a4f732a28db1d10002e6cecd23/8822b3a4f732a28db1d
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/88/4a/884a49f9f49a5f6a6eb4fe7485db01ac/884a49f9f49a5f6a6eb
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/88/ee/88ee30650ec6986c5951ee92db54a668/88ee30650ec6986c595
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/8a/ff/8aff47d095c2dd23cbaf7f8d8b015ecf/8aff47d095c2dd23cba
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/8e/78/8e78abf410fd6904eb4244437afb0eb0/8e78abf410fd6904eb4
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/8f/e2/8fe2f0964efca735e1fa1b6cf074a17d/8fe2f0964efca735e1f
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/90/60/9060d154c29d3211dea6ce4552db8a46/9060d154c29d3211dea
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/90/b0/90b051bb3db7aefe1c46a855e18305a6/90b051bb3db7aefe1c4
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/91/96/91962fb77e6b63eb10147601f5ca118d/91962fb77e6b63eb101
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/96/c8/96c8fc9b3ebbc4bc43400a233c4a6c21/96c8fc9b3ebbc4bc434
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/97/42/97421f03b004e2d182001d0e18ceab45/97421f03b004e2d1820
Source: chromecache_432.2.dr, chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/97/53/975337a7c0992d113d956c6a15682043/975337a7c0992d113d9
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/99/7f/997fdcdc8228bddd182c663a7e16f590/997fdcdc8228bddd182
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/9a/86/9a86e309737bd83f66eca03a06f84fe5/9a86e309737bd83f66e
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/9a/9a/9a9aa68a8cace8da93a92410cd2f4d7b/9a9aa68a8cace8da93a
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/9c/e1/9ce1a7d8b5e8d47c82cd6a8fca225bdf/9ce1a7d8b5e8d47c82c
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/9f/a7/9fa7d3e63e81306ccfb4c3290c8537c1/9fa7d3e63e81306ccfb
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/a0/b2/a0b28fff7e63424fb0895960587992e1/a0b28fff7e63424fb08
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/a3/6b/a36b0afe5302a53132f7f522d9a94553/a36b0afe5302a53132f
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/a5/52/a5526fdc5dd244b0cd1da1289374a6a1/a5526fdc5dd244b0cd1
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/a6/a5/a6a514fac80fcaf22c0a2ed180e86c82/a6a514fac80fcaf22c0
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/a6/c2/a6c24f1207182f36619a68bc73916c03/a6c24f1207182f36619
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/a7/fc/a7fca6a36c98856de5e71d120a16e521/a7fca6a36c98856de5e
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/a8/5f/a85fba62d5199840ef9e53374ea2e77d/a85fba62d5199840ef9
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/a8/f7/a8f75d02726e9fe1b44cf185a201160d/a8f75d02726e9fe1b44
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/a9/53/a95309594451a32178a80f60496a886f/a95309594451a32178a
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/ad/bf/adbfa1b6d35934408e86806c521bf235/adbfa1b6d35934408e8
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/af/9c/af9cacb11608a5f6653a235b49001d71/af9cacb11608a5f6653
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/b1/f7/b1f749f252c09787cf674cc6a0cecff0/b1f749f252c09787cf6
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/b2/c8/b2c878a192fa04e55548940be45960ff/b2c878a192fa04e5554
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/b3/ce/b3ce4036ef4a95e53b8c0defc623cc5c/b3ce4036ef4a95e53b8
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/b4/c6/b4c6078f1da394fd9a4e7abf6c1e621f/b4c6078f1da394fd9a4
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/b4/ed/b4ed2bf6911aacc0dc0604cc1828af1f/b4ed2bf6911aacc0dc0
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/b5/a0/b5a0284264c055c7d4fbf5122f47df0d/b5a0284264c055c7d4f
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/b8/b9/b8b9b67aad5b4627db15b960e8b956fa/b8b9b67aad5b4627db1
Source: chromecache_432.2.dr, chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/bb/8c/bb8c585b8fd73c084a0b62e574bcc956/bb8c585b8fd73c084a0
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/bd/bf/bdbf363a7bb3f28fe27102a859799eff/bdbf363a7bb3f28fe27
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/c0/02/c002638e7a7ce3a662c49124f3481004/c002638e7a7ce3a662c
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/c0/82/c082c3f3a6f1ca4252c6a30db3b88a63/c082c3f3a6f1ca4252c
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/c2/d2/c2d2cac1a4658fb0aef6cf7707373791/c2d2cac1a4658fb0aef
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/c3/2a/c32af268ee822f9a3de41a8c45773083/c32af268ee822f9a3de
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/c3/69/c3697f53f903ddeb948f34cd439edbc9/c3697f53f903ddeb948
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/c7/12/c7128ee5618f48614ad625c9ef9b6d55/c7128ee5618f48614ad
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/c7/c5/c7c51d1c7941c0a0d34767de85d20993/c7c51d1c7941c0a0d34
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/c8/d6/c8d6c2c484c27d452667319847c50c2d/c8d6c2c484c27d45266
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/ca/62/ca623f8bf40981ceb18ea0465854895b/ca623f8bf40981ceb18
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/cd/d8/cdd815db155974b18f2567c83ff141b6/cdd815db155974b18f2
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/d6/81/d681cfe26179a078b0cdf65d4b576983/d681cfe26179a078b0c
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/d9/b0/d9b0e911dc55cec58128036d4a5c5414/d9b0e911dc55cec5812
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/db/d8/dbd8f434c73b5a633daed2ced58f05e4/dbd8f434c73b5a633da
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/db/db/dbdb2c6df3ba44117dc6789f28df3837/dbdb2c6df3ba44117dc
Source: chromecache_432.2.dr, chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/dc/29/dc29772a996038cfc64a97e80aa0e4a8/dc29772a996038cfc64
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/df/9b/df9bf37ae9724608afe14ded56fb6423/df9bf37ae9724608afe
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/e1/cc/e1ccaf6e2bfddbff94ac9dc33a1dfc30/e1ccaf6e2bfddbff94a
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/e4/84/e4845f1df946f2192799931461d12dda/e4845f1df946f219279
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/e6/cd/e6cdf8661e30e293418d5feb7b848b8a/e6cdf8661e30e293418
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/e8/ad/e8ad60dd67c5bc3f2f133058d0b16dc9/e8ad60dd67c5bc3f2f1
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/e9/f4/e9f46d1e5f4d41a4342f121fbcf10647/e9f46d1e5f4d41a4342
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/eb/2c/eb2c785e3cb3e18d38d6226432238d70/eb2c785e3cb3e18d38d
Source: chromecache_432.2.dr, chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/ec/b7/ecb756911e100cdf36643a0ef07f74a7/ecb756911e100cdf366
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/f0/0a/f00a5135e76348df78f89978c48dd7fa/f00a5135e76348df78f
Source: chromecache_432.2.dr, chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/f0/6b/f06bf9152cca69ecc543586569563320/f06bf9152cca69ecc54
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/f1/ee/f1eea88ae29890d1883a58fe688fcbc3/f1eea88ae29890d1883
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/f4/3d/f43def853a3bfc2377db0a51c75bc364/f43def853a3bfc2377d
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/f4/3f/f43fe143bb66878a7be75d0fd23e06c1/f43fe143bb66878a7be
Source: chromecache_435.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/f5/70/f5706571721222f8411fe7ab58e9b5e9/f5706571721222f8411
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/f6/ad/f6adf78a92375b0da4f6ac42c9c25975/f6adf78a92375b0da4f
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/f7/24/f72443bece828885e832c187027312e5/f72443bece828885e83
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/f7/75/f775a2d51e2651984951962f42c5dbe2/f775a2d51e265198495
Source: chromecache_432.2.dr, chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/f7/a2/f7a29a78a44a887ce683d98430bfb2fb/f7a29a78a44a887ce68
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/f8/a1/f8a16dbbb585ff763b323c908ceccf38/f8a16dbbb585ff763b3
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/fa/03/fa03e78c21018de5d0e0e40fa7e28de3/fa03e78c21018de5d0e
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/fb/30/fb301c231e11a8f2d4b527b7f395d648/fb301c231e11a8f2d4b
Source: chromecache_432.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/fb/4c/fb4caf00e873b0d3641a85fa267ea34c/fb4caf00e873b0d3641
Source: chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/fb/4e/fb4ef169253f0670d1f7b3130b7da296/fb4ef169253f0670d1f
Source: chromecache_432.2.dr, chromecache_585.2.dr	String found in binary or memory: https://img.1movieshd.cc/xxrz/250x400/793/ff/7a/ff7a6b879952c69e1114457a4e47d156/ff7a6b879952c69e111
Source: chromecache_717.2.dr	String found in binary or memory: https://iorbix.com/m-share?
Source: chromecache_747.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/messenger/id454638411
Source: chromecache_717.2.dr	String found in binary or memory: https://jezebel.com/15-tiktoks-that-deserve-academy-awards-1838371668
Source: chromecache_283.2.dr	String found in binary or memory: https://krux.github.io/postscribe
Source: chromecache_717.2.dr	String found in binary or memory: https://l.sharethis.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://l.sharethis.com/log
Source: chromecache_717.2.dr	String found in binary or memory: https://lineit.line.me/share/ui?
Source: chromecache_292.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_292.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_717.2.dr	String found in binary or memory: https://mail.google.com/mail/?view=cm&
Source: chromecache_809.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Source: chromecache_717.2.dr	String found in binary or memory: https://meneame.net/submit.php?
Source: chromecache_717.2.dr	String found in binary or memory: https://mix.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://news.ycombinator.com/submitlink?
Source: chromecache_717.2.dr	String found in binary or memory: https://nextdoor.com/sharekit/?
Source: chromecache_500.2.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_717.2.dr	String found in binary or memory: https://ok.ru/
Source: chromecache_717.2.dr	String found in binary or memory: https://open.spotify.com/
Source: chromecache_292.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_717.2.dr	String found in binary or memory: https://outlook.live.com/mail/deeplink/compose?
Source: chromecache_599.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_745.2.dr, chromecache_599.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_288.2.dr	String found in binary or memory: https://pantos.io/
Source: chromecache_717.2.dr	String found in binary or memory: https://pinboard.in/add?
Source: chromecache_717.2.dr	String found in binary or memory: https://pinterest.com/pin/create/button/?
Source: chromecache_596.2.dr	String found in binary or memory: https://pinterest.com/pin/create/button/?url=
Source: chromecache_717.2.dr	String found in binary or memory: https://platform-api.sharethis.com
Source: chromecache_717.2.dr	String found in binary or memory: https://platform-api.sharethis.com/atlas-exp.js
Source: chromecache_717.2.dr	String found in binary or memory: https://platform-api.sharethis.com/dmd.js
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr, chromecache_809.2.dr	String found in binary or memory: https://platform-api.sharethis.com/js/sharethis.js#property=6433be364f61b7001240a339&product=inline-
Source: chromecache_717.2.dr	String found in binary or memory: https://platform-api.sharethis.com/navistone.js
Source: chromecache_717.2.dr	String found in binary or memory: https://platform-api.sharethis.com/panorama.js
Source: chromecache_717.2.dr	String found in binary or memory: https://platform-api.sharethis.com/powr.js?platform=sharethis
Source: chromecache_717.2.dr	String found in binary or memory: https://platform-api.sharethis.com/ppg.js
Source: chromecache_717.2.dr	String found in binary or memory: https://platform-api.sharethis.com/rhombus.js
Source: chromecache_717.2.dr	String found in binary or memory: https://platform-cdn.sharethis.com
Source: chromecache_717.2.dr	String found in binary or memory: https://platform-cdn.sharethis.com/img/
Source: chromecache_717.2.dr	String found in binary or memory: https://platform-cdn.sharethis.com/img/share-this-logo%402x.png
Source: chromecache_717.2.dr	String found in binary or memory: https://platform-metrics-api.sharethis.com
Source: chromecache_418.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_288.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.bitpanda.bitpanda&hl=de&gl=US
Source: chromecache_288.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.bitpanda.bitpanda&ifl=https://apps.apple.com/at/ap
Source: chromecache_747.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.facebook.orca
Source: chromecache_717.2.dr	String found in binary or memory: https://pushtokindle.fivefilters.org/send.php?
Source: chromecache_607.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_418.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_717.2.dr	String found in binary or memory: https://reddit.com/submit?
Source: chromecache_717.2.dr	String found in binary or memory: https://redditblog.com/2017/06/14/why-publishers-should-use-reddit-embeds/
Source: chromecache_717.2.dr	String found in binary or memory: https://refind.com?
Source: chromecache_288.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_717.2.dr	String found in binary or memory: https://secure.actblue.com/donate/ms_blm_homepage_2019
Source: chromecache_717.2.dr	String found in binary or memory: https://shar.es/
Source: chromecache_717.2.dr	String found in binary or memory: https://share.diasporafoundation.org/?
Source: chromecache_717.2.dr	String found in binary or memory: https://share.flipboard.com/bookmarklet/popout?
Source: chromecache_717.2.dr	String found in binary or memory: https://sharethis.com/platform/share-buttons?
Source: chromecache_717.2.dr	String found in binary or memory: https://snapchat.com/scan?
Source: chromecache_717.2.dr	String found in binary or memory: https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?
Source: chromecache_717.2.dr	String found in binary or memory: https://soundcloud.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://stackoverflow.com/a/9493060/2688027
Source: chromecache_717.2.dr	String found in binary or memory: https://stackoverflow.com/users/
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr, chromecache_809.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css
Source: chromecache_599.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_717.2.dr	String found in binary or memory: https://story.kakao.com/share?
Source: chromecache_288.2.dr	String found in binary or memory: https://support.bitpanda.com/hc/de
Source: chromecache_288.2.dr	String found in binary or memory: https://support.bitpanda.com/hc/de/articles/360000129300-Wie-kann-ich-Geld-auf-meine-Fiat-Wallet-ein
Source: chromecache_288.2.dr	String found in binary or memory: https://support.bitpanda.com/hc/de/articles/360000920649
Source: chromecache_288.2.dr	String found in binary or memory: https://support.bitpanda.com/hc/de/articles/360001705580-Ich-bin-neu-auf-Bitpanda-Wo-soll-ich-anfang
Source: chromecache_288.2.dr	String found in binary or memory: https://support.bitpanda.com/hc/de/articles/360019578140-Wer-kann-Bitpanda-nutzen-
Source: chromecache_418.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_746.2.dr, chromecache_418.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_746.2.dr, chromecache_418.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_746.2.dr, chromecache_418.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_596.2.dr	String found in binary or memory: https://swx.cdn.skype.com/shared/v/latest/skypewebsdk.js
Source: chromecache_717.2.dr	String found in binary or memory: https://sync.sharethis.com/panorama
Source: chromecache_717.2.dr	String found in binary or memory: https://sync.sharethis.com/powr/hem?
Source: chromecache_717.2.dr	String found in binary or memory: https://t.me/
Source: chromecache_717.2.dr	String found in binary or memory: https://t.me/share/url?
Source: chromecache_717.2.dr	String found in binary or memory: https://t.sharethis.com/1/k/t.dhj?
Source: chromecache_639.2.dr	String found in binary or memory: https://tags.bkrtx.com/js/bk-coretag.js
Source: chromecache_745.2.dr, chromecache_599.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_596.2.dr	String found in binary or memory: https://telegram.me/share/msg?url=
Source: chromecache_717.2.dr	String found in binary or memory: https://time.com/4128887/kobe-bryant-retirement-celebrities-reaction/
Source: chromecache_717.2.dr	String found in binary or memory: https://trello.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://trello.com/add-card?
Source: chromecache_717.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?
Source: chromecache_596.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: chromecache_809.2.dr	String found in binary or memory: https://use.fontawesome.com/releases/v5.3.1/css/all.css
Source: chromecache_432.2.dr	String found in binary or memory: https://valueclick.cc/embed/news?theme=dark&source=1movieshd.cc
Source: chromecache_717.2.dr	String found in binary or memory: https://vimeo.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://vimeo.zendesk.com/hc/en-us/articles/224969968-Embedding-videos-overview
Source: chromecache_717.2.dr	String found in binary or memory: https://vk.com/share.php?
Source: chromecache_717.2.dr	String found in binary or memory: https://wa.me/
Source: chromecache_717.2.dr	String found in binary or memory: https://web.skype.com/share?
Source: chromecache_717.2.dr	String found in binary or memory: https://web.wechat.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://web.whatsapp.com/send?
Source: chromecache_717.2.dr	String found in binary or memory: https://www.airbnb.com/rooms/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.amazon.com/gp/profile/
Source: chromecache_746.2.dr, chromecache_418.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.bbc.com/news/uk-wales-51311320
Source: chromecache_717.2.dr	String found in binary or memory: https://www.behance.net/
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/academy/de
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/academy/de/
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/academy/de/lektionen/kann-eine-kryptowahrung-wie-bitcoin-gehackt-oder-still
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/academy/de/lektionen/was-ist-bitcoin-halving-und-was-geschieht-dabei-im-net
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/academy/de/lektionen/was-ist-bitcoin-mining-und-wie-funktioniert-es/
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/academy/de/lektionen/was-sind-maker-gebuhren-und-taker-gebuhren-beim-traden
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/academy/de/lektionen/wie-funktioniert-eine-blockchain
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/academy/de/lektionen/wie-kann-ich-kryptowahrungen-sicher-verwahren
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/affiliate-programm
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/app-ios-android
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/bci-bitpanda-crypto-index
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/best
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/bitcoin-halving-countdown
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/bitpanda-cash-plus
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/bitpanda-club
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/bitpanda-ecosystem-token
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/bitpanda-spotlight
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/business
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/card
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/features
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/invest/bitpanda-stocks
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/investieren/bitpanda-commodities
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/investieren/bitpanda-stocks
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/investieren/kryptowaehrungen
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/investieren/leverage
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/legal
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/legal/bitpanda-cookie-policy
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/limits
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/metals
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/partnerschaft/fc-bayern-muenchen
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/payments
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/preise/aktien
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/preise/bci-bitpanda-crypto-index
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/preise/bitcoin-btc
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/preise/bitpanda-ecosystem-token-best
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/preise/crypto-index
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/preise/edelmetalle
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/preise/etfs
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/preise/ethereum-eth
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/preise/kryptowaehrungen
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/preise/ripple-xrp
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/preise/rohstoffe
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/preise/shiba-inu-shib
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/presse-downloads
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/rechtliches/bug-bounty
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/saving-sparplan
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/sicherheit
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/staking
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/swap
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/tech
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/tech/einblicke
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/tech/kunden
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/tech/partner
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/tech/plattform
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/tell-a-friend
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/ueber-uns
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/de/wealth
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/en/career
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bitpanda.com/en/complaints
Source: chromecache_288.2.dr	String found in binary or memory: https://www.bkms-system.com/bitpanda
Source: chromecache_717.2.dr	String found in binary or memory: https://www.blogger.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.blogger.com/blog-this.g?
Source: chromecache_727.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_717.2.dr	String found in binary or memory: https://www.dexerto.com/entertainment/top-10-most-viewed-twitch-clips-of-all-time-2-310900
Source: chromecache_717.2.dr	String found in binary or memory: https://www.digg.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.diigo.com/post?
Source: chromecache_717.2.dr	String found in binary or memory: https://www.etsy.com/shop/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.fark.com/submit?
Source: chromecache_717.2.dr	String found in binary or memory: https://www.flickr.com/people/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.github.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.goodreads.com/quotes?
Source: chromecache_599.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_599.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_717.2.dr	String found in binary or memory: https://www.google.com/bookmarks/mark?
Source: chromecache_578.2.dr, chromecache_601.2.dr, chromecache_466.2.dr	String found in binary or memory: https://www.google.com/intl/en/policies/privacy/
Source: chromecache_578.2.dr, chromecache_601.2.dr, chromecache_466.2.dr	String found in binary or memory: https://www.google.com/intl/en/policies/terms/
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3
Source: chromecache_746.2.dr, chromecache_608.2.dr, chromecache_649.2.dr, chromecache_418.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_599.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_288.2.dr	String found in binary or memory: https://www.googleoptimize.com/optimize.js?id=OPT-N3D6ZNP
Source: chromecache_745.2.dr, chromecache_599.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_599.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_432.2.dr, chromecache_435.2.dr, chromecache_585.2.dr, chromecache_809.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-3R5CCCZJ35
Source: chromecache_746.2.dr, chromecache_418.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_608.2.dr, chromecache_578.2.dr, chromecache_649.2.dr, chromecache_601.2.dr, chromecache_466.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_578.2.dr, chromecache_601.2.dr, chromecache_466.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Source: chromecache_717.2.dr	String found in binary or memory: https://www.houzz.com/imageClipperUpload?
Source: chromecache_717.2.dr	String found in binary or memory: https://www.houzz.com/user/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.instagram.com/
Source: chromecache_747.2.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.kooapp.com/create?
Source: chromecache_717.2.dr	String found in binary or memory: https://www.linkedin.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.linkedin.com/shareArticle?
Source: chromecache_596.2.dr	String found in binary or memory: https://www.linkedin.com/shareArticle?mini=true&url=
Source: chromecache_717.2.dr	String found in binary or memory: https://www.livejournal.com/update.bml?
Source: chromecache_717.2.dr	String found in binary or memory: https://www.medium.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.meetup.com/members/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.messenger.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.patreon.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.pinterest.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.podcastinsights.com/podcast-embed-players/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.quora.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.reddit.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.sharethis.com
Source: chromecache_717.2.dr	String found in binary or memory: https://www.slideshare.net/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.snapchat.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.threads.net/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.tiktok.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.tripadvisor.com/Profile/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.tumblr.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.tumblr.com/share?
Source: chromecache_717.2.dr	String found in binary or memory: https://www.twitch.tv/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.twitter.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.usmagazine.com/entertainment/news/kim-kardashian-north-asks-if-she-can-visit-prisons-wit
Source: chromecache_717.2.dr	String found in binary or memory: https://www.vk.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.weibo.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.xing.com/app/user?
Source: chromecache_717.2.dr	String found in binary or memory: https://www.xing.com/profile/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.yelp.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.youtube.com/
Source: chromecache_717.2.dr	String found in binary or memory: https://www.yummly.com/urb/verify?
Source: chromecache_717.2.dr	String found in binary or memory: https://www.zillow.com/profile/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50404
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50407
Source: unknown	Network traffic detected: HTTP traffic on port 50555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50408
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50401
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50400
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 50497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 50381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 50633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50458
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50457

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49756 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@31/837@332/98

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2216,i,6705838790087099450,35814465125719137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://1movieshd.cc"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2216,i,6705838790087099450,35814465125719137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_471.2.dr

Binary or memory string: uvMcI

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://1movieshd.cc	0%	Avira URL Cloud	safe
http://1movieshd.cc	3%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://openjsf.org/	0%	URL Reputation	safe
https://img.1movieshd.cc/xxrz/250x400/793/81/a6/81a6f809123d73982bcf71dae330052f/81a6f809123d73982bc	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/8a/ff/8aff47d095c2dd23cbaf7f8d8b015ecf/8aff47d095c2dd23cba	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/a7/fc/a7fca6a36c98856de5e71d120a16e521/a7fca6a36c98856de5e	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/38/96/38965a95f26c271035913b2916859da0/38965a95f26c2710359	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/13/d4/13d48efacd612fd1d0b7957e72885d66/13d48efacd612fd1d0b	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/25/c6/25c630a3c0925e7103a801bbba6edb0c/25c630a3c0925e7103a	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/4a/6a/4a6a22f7a0595822396fb0b553e99be9/4a6a22f7a0595822396	0%	Avira URL Cloud	safe
https://eephaush.com/5/4724866/?oo=1&aab=1	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/1200x600/793/8b/69/8b69d6e6025464cd449ad0097791c41b/8b69d6e6025464cd44	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/f7/75/f775a2d51e2651984951962f42c5dbe2/f775a2d51e265198495	0%	Avira URL Cloud	safe
https://1movieshd.cc/ajax/login-state	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/70/c3/70c31e2b9f0136a10872f07d9c635df6/70c31e2b9f0136a10872f07d9c635df6.jpg	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/6b/06/6b068075511bbba8b237a844e8989e56/6b068075511bbba8b23	0%	Avira URL Cloud	safe
https://eephaush.com/4/6118780/?var=4724866&btz=Europe/Zurich&bto=-120&bar=x	0%	Avira URL Cloud	safe
https://eephaush.com/5/4724866/?oo=1&aab=1	2%	Virustotal		Browse
https://img.1movieshd.cc/xxrz/1200x600/793/55/5b/555b64c17d8909e2376acd8438a583e5/555b64c17d8909e2376acd8438a583e5.jpg	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/1200x600/793/55/5b/555b64c17d8909e2376acd8438a583e5/555b64c17d8909e237	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/56/2a/562a533d60fbba125e27ca5b0645023d/562a533d60fbba125e2	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/13/1a/131a68a0ff4602af36b69afdbd00b343/131a68a0ff4602af36b	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/1200x600/793/82/56/8256aff80a99d898f6a5cab994ba5e0b/8256aff80a99d898f6	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/4a/da/4ada5892be3a24521abd543edea19c0e/4ada5892be3a24521ab	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/fa/03/fa03e78c21018de5d0e0e40fa7e28de3/fa03e78c21018de5d0e	0%	Avira URL Cloud	safe
https://visitor.fiftyt.com/st2.gif?gdpr=0&gdpr_consent=&gdpr_pd=0	0%	Avira URL Cloud	safe
https://map.go.affec.tv/map/an/6576787287013452325?ch=662bf363bc6e410001f8e0c2&chc=st%7Cim&redirect_url=&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/90/b0/90b051bb3db7aefe1c46a855e18305a6/90b051bb3db7aefe1c4	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/8e/78/8e78abf410fd6904eb4244437afb0eb0/8e78abf410fd6904eb4	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/f5/70/f5706571721222f8411fe7ab58e9b5e9/f5706571721222f8411	0%	Avira URL Cloud	safe
https://rndhaunteran.com/500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=2&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/f0/6b/f06bf9152cca69ecc543586569563320/f06bf9152cca69ecc54	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/05/d2/05d2af3ecc1a6d545c293968589b68fe/05d2af3ecc1a6d545c2	0%	Avira URL Cloud	safe
https://img.1movieshd.cc/xxrz/250x400/793/9a/9a/9a9aa68a8cace8da93a92410cd2f4d7b/9a9aa68a8cace8da93a92410cd2f4d7b.jpg	0%	Avira URL Cloud	safe
https://rndhaunteran.com/500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0	0%	Avira URL Cloud	safe
https://eephaush.com/tag.min.js	0%	Avira URL Cloud	safe
https://visitor.fiftyt.com/st2.gif?gdpr=0&gdpr_consent=&gdpr_pd=0	0%	Virustotal		Browse
https://img.1movieshd.cc/xxrz/250x400/793/2b/22/2b2267fe4731539be517d3e67daf45cf/2b2267fe4731539be51	0%	Avira URL Cloud	safe
https://1movieshd.cc/images/group_11/theme_3/favicon.png	0%	Avira URL Cloud	safe
https://eephaush.com/tag.min.js	4%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	unknown
id5-sync.com	141.95.33.120	true	false	unknown
cs488.wpc.psicdn.net	192.229.210.58	true	false	unknown
img.1movieshd.cc	172.67.203.85	true	false	unknown
ws.rqtrk.eu	51.222.241.100	true	false	unknown
spl.zeotap.com	172.67.40.173	true	false	high
vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com	3.225.96.121	true	false	high
d20qwf0wrdtevy.cloudfront.net	18.239.225.41	true	false	high
stats.g.doubleclick.net	74.125.134.157	true	false	high
static.zdassets.com	104.18.72.113	true	false	high
d10jk3zb4x05up.cloudfront.net	18.239.225.4	true	false	high
httplogserver-lb.global.unified-prod.sharethis.net	3.16.63.45	true	false	unknown
mwzeom.zeotap.com	104.22.51.98	true	false	high
cdn.matomo.cloud	18.239.225.79	true	false	unknown
na-ice.360yield.com	18.211.29.223	true	false	high
sync.crwdcntrl.net	34.196.226.77	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
platform-api.sharethis.com	18.64.174.59	true	false	high
cm.g.doubleclick.net	142.250.189.130	true	false	high
idaas-ext.cph.liveintent.com	3.89.179.162	true	false	high
www.google.com	142.250.64.196	true	false	high
idaas6.cph.liveintent.com	44.215.14.95	true	false	high
id.rlcdn.com	35.244.154.8	true	false	high
bcp.crwdcntrl.net	52.20.151.97	true	false	high
match.adsrvr.org	15.197.193.217	true	false	high
www.ojrq.net	34.95.127.121	true	false	high
d2znr2yi078d75.cloudfront.net	13.226.52.128	true	false	high
match.prod.bidr.io	54.146.132.60	true	false	unknown
us-u.openx.net	34.98.64.218	true	false	high
pugm-vac.pubmnet.com	8.28.7.81	true	false	unknown
load-usw2.exelator.com	44.235.243.161	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
pixel.onaudience.com	141.94.171.214	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	high
www.googleoptimize.com	142.250.189.142	true	false	unknown
flerap.com	139.45.195.254	true	false	unknown
valueclick.cc	172.67.195.52	true	false	unknown
tzegilo.com	104.21.11.245	true	false	unknown
www.fndsda.net	87.230.104.210	true	false	unknown
cs662.adn.psicdn.net	152.195.55.165	true	false	unknown
googleads.g.doubleclick.net	142.250.217.226	true	false	high
code.highcharts.com	104.18.8.9	true	false	high
ext-lb-aws-prod.ccgateway.net	18.212.140.196	true	false	unknown
ml314.com	34.117.77.79	true	false	unknown
sr7pv7n5x.com	172.240.83.21	true	false	unknown
www.bitpanda.com	104.18.33.70	true	false	high
pixel-origin.mathtag.com	216.200.232.249	true	false	high
yonmewon.com	139.45.197.236	true	false	unknown
1movieshd.cc	104.21.22.71	true	false	unknown
api.bitpanda.com	104.18.33.70	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
bitpanda.pxf.io	35.201.76.231	true	false	unknown
starpassing.com	104.21.6.192	true	false	unknown
ps.eyeota.net	3.232.64.79	true	false	high
idsync.rlcdn.com	35.244.154.8	true	false	high
scontent.xx.fbcdn.net	157.240.14.19	true	false	high
d296je7bbdd650.cloudfront.net	18.64.168.178	true	false	high
presentation-iad1.turn.com	69.194.242.12	true	false	high
m.ib-ibi.com	69.169.85.7	true	false	unknown
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
rndhaunteran.com	139.45.197.236	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	high
star.c10r.facebook.com	157.240.14.15	true	false	high
pippio.com	107.178.254.65	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
eephaush.com	139.45.197.236	true	false	unknown
s.amazon-adsystem.com	52.46.143.56	true	false	high
www.plus500.com	172.64.154.69	true	false	high
dcs-public-edge-sae-1366952363.sa-east-1.elb.amazonaws.com	18.230.167.103	true	false	high
raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com	107.20.88.0	true	false	high
cdn.bitpanda.com	104.18.33.70	true	false	high
datatechonert.com	37.48.68.71	true	false	unknown
my.rtmark.net	139.45.195.8	true	false	high
map.go.affec.tv	35.169.4.189	true	false	unknown
s3-r-w.eu-west-1.amazonaws.com	52.218.29.128	true	false	high
fleraprt.com	139.45.195.254	true	false	unknown
play.google.com	142.250.64.206	true	false	high
d3oiwf0xhhk8m1.cloudfront.net	108.156.83.74	true	false	high
thirdparty-logserver-lb.global.unified-prod.sharethis.net	18.216.131.70	true	false	unknown
onlinetopchoice.com	104.21.56.65	true	false	unknown
count-server.sharethis.com	13.226.52.40	true	false	high
geoip-js.com	104.18.33.110	true	false	unknown
analytics.google.com	192.178.50.46	true	false	high
visitor.fiftyt.com	35.201.96.126	true	false	unknown
rc-ext-geo.rlcdn.com	35.244.154.8	true	false	high
ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	3.225.218.10	true	false	unknown
ib.anycast.adnxs.com	68.67.160.75	true	false	high
ib.mookie1.com	unknown	unknown	false	high
tags.bkrtx.com	unknown	unknown	false	unknown
use.fontawesome.com	unknown	unknown	false	high
ice.360yield.com	unknown	unknown	false	high
i6.liadm.com	unknown	unknown	false	high
ce.lijit.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
d.turn.com	unknown	unknown	false	high
usermatch.krxd.net	unknown	unknown	false	high
cms.analytics.yahoo.com	unknown	unknown	false	high
pixel.mathtag.com	unknown	unknown	false	high
rc.rlcdn.com	unknown	unknown	false	high
sync.sharethis.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://platform-cdn.sharethis.com/img/telegram.svg	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3&co=aHR0cHM6Ly8xbW92aWVzaGQuY2M6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=7fmypvln0sab	false		high
https://ps.eyeota.net/pixel?pid=m4omg6v&t=gif&call=2&gdpr=0&gdpr_consent=	false		high
https://cdn-app.plus500.com/117405/Resources/dist/Resources/pages/login/loginLayout.css	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcmJpEUAAAAAIOXEGazFShMYgSr7POv6bAFn8bZ&co=aHR0cHM6Ly9hcHAucGx1czUwMC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=wz1050m7xdsf	false		high
https://cdn.bitpanda.com/media/wealth/Artboard%201%20copy%204-modified-modified.png	false		high
about:blank	false	Avira URL Cloud: safe	low
https://dpm.demdex.net/ibs:dpid=600901&dpuuid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.sharethis.com%2Fadobe%3Fuid%3D%24%7BDD_UUID%7D%26_rand%3D1714156371359	false		high
https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/mbl.svg	false		high
https://eephaush.com/5/4724866/?oo=1&aab=1	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://1movieshd.cc/ajax/login-state	false	Avira URL Cloud: safe	unknown
https://code.highcharts.com/stock/highstock.js	false		high
https://img.1movieshd.cc/xxrz/250x400/793/70/c3/70c31e2b9f0136a10872f07d9c635df6/70c31e2b9f0136a10872f07d9c635df6.jpg	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3&co=aHR0cHM6Ly8xbW92aWVzaGQuY2M6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yt1utwy5xg8e	false		high
https://eephaush.com/4/6118780/?var=4724866&btz=Europe/Zurich&bto=-120&bar=x	false	Avira URL Cloud: safe	unknown
https://img.1movieshd.cc/xxrz/1200x600/793/55/5b/555b64c17d8909e2376acd8438a583e5/555b64c17d8909e2376acd8438a583e5.jpg	false	Avira URL Cloud: safe	unknown
https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=6f67744e-1091-4048-adba-e024cc18f2d2	false		high
https://cdn.bitpanda.com/app/v2/js/head.min.js?id=c9d8a7523921951f3dc02c71193d6fe4	false		high
https://visitor.fiftyt.com/st2.gif?gdpr=0&gdpr_consent=&gdpr_pd=0	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm	false		high
https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/soybean%402x.png	false		high
https://map.go.affec.tv/map/an/6576787287013452325?ch=662bf363bc6e410001f8e0c2&chc=st%7Cim&redirect_url=&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://idsync.rlcdn.com/362588.gif?partner_uid=6f67744e-1091-4048-adba-e024cc18f2d2	false		high
https://1movieshd.cc/movie	false		unknown
https://rndhaunteran.com/500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=2&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0	false	Avira URL Cloud: safe	unknown
https://app.plus500.com/Resources/dist/Resources/pages/offline/offline.css	false		high
https://img.1movieshd.cc/xxrz/250x400/793/9a/9a/9a9aa68a8cace8da93a92410cd2f4d7b/9a9aa68a8cace8da93a92410cd2f4d7b.jpg	false	Avira URL Cloud: safe	unknown
https://cdn-app.plus500.com/117405/Resources/dist/Resources/Components/Plus500Library/Common/switchLanguage/switchLanguage.html	false		high
https://pippio.com/api/sync?pid=5324&it=1&iv=424ffe81dd3b616cea4f8459dfd9f3cdce85a74cb67447af25be8697f4d69094791426b5417dce21&_=2	false		high
https://l.sharethis.com/pview?event=pview&hostname=1movieshd.cc&location=%2Fhome&product=inline-share-buttons&url=https%3A%2F%2F1movieshd.cc%2Fhome&source=platform&fcmp=false&fcmpv2=false&has_segmentio=false&title=%231Movies%20%7C%20Watch%20Free%20Streaming%20Movies%20and%20TV%20Series%20Online&cms=unknown&publisher=6433be364f61b7001240a339&sop=true&version=st_sop.js&lang=en&fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA&description=1Movies%20Watch%20Movies%20online%20for%20free%2C%20Streaming%20movies%20on%201Movies.to.%201Movies%20is%20the%20biggest%20website%20for%20free%20movies.&ua=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&ua_mobile=false&ua_platform=Windows&ua_full_version_list=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&ua_platform_version=10.0.0&uuid=8ece4e5a-532b-417d-9652-9a207998f147	false		high
https://rndhaunteran.com/500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0	false	Avira URL Cloud: safe	unknown
https://eephaush.com/tag.min.js	false	4%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201306.svg	false		high
https://i6.liadm.com/s/35759?bidder_id=44489&bidder_uuid=6f67744e-1091-4048-adba-e024cc18f2d2	false		high
https://cdn-app.plus500.com/117405/Resources/dist/Resources/js/WebCommon/Components/jqueryG18n/globInfo/jquery.glob.de.min.js	false		high
https://match.360yield.com/match?dsp_callback=1&publisher_dsp_id=440&external_user_id=662bf34d3757330001701a4b&r=https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fim%2F%7BPUB_USER_ID%7D%3Fch%3D662bf34d3757330001701a4c%26chc%3Dst%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false		high
https://1movieshd.cc/images/group_11/theme_3/favicon.png	false	Avira URL Cloud: safe	unknown
https://www.fndsda.net/beige.php?id=OyCkAkzwJOc8Gw2AUwuC&url=https%3A%2F%2Fwww.bitpanda.com%2Fde%2Fpreise%2Fbitcoin-btc%3Firclickid%3D1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0%26utm_source%3DImpact%26utm_medium%3DAffiliates%26utm_campaign%3D4484296%26utm_content%3DCopy%2520of%2520Bitcoin%2520Price%2520Page_CH_2%26utm_term%3De2%26ref%3D615250356669422741%26tag%3Daffiliates%26subid1%3D%26irgwc%3D1	false		unknown
https://ib.adnxs.com/getuid?https%3A%2F%2Fsync.sharethis.com%2Fadnxs%3Fuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://img.1movieshd.cc/xxrz/250x400/793/8a/ff/8aff47d095c2dd23cbaf7f8d8b015ecf/8aff47d095c2dd23cba	chromecache_585.2.dr	false	Avira URL Cloud: safe	unknown
https://support.bitpanda.com/hc/de	chromecache_288.2.dr	false		high
https://img.1movieshd.cc/xxrz/250x400/793/38/96/38965a95f26c271035913b2916859da0/38965a95f26c2710359	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://platform-api.sharethis.com/navistone.js	chromecache_717.2.dr	false		high
https://www.bitpanda.com/academy/de/lektionen/kann-eine-kryptowahrung-wie-bitcoin-gehackt-oder-still	chromecache_288.2.dr	false		high
https://use.fontawesome.com/releases/v5.3.1/css/all.css	chromecache_809.2.dr	false		high
https://www.bitpanda.com/en/career	chromecache_288.2.dr	false		high
https://img.1movieshd.cc/xxrz/250x400/793/81/a6/81a6f809123d73982bcf71dae330052f/81a6f809123d73982bc	chromecache_435.2.dr	false	Avira URL Cloud: safe	unknown
https://img.1movieshd.cc/xxrz/250x400/793/a7/fc/a7fca6a36c98856de5e71d120a16e521/a7fca6a36c98856de5e	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://img.1movieshd.cc/xxrz/250x400/793/13/d4/13d48efacd612fd1d0b7957e72885d66/13d48efacd612fd1d0b	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/store/apps/details?id=com.facebook.orca	chromecache_747.2.dr	false		high
https://cdn.heapanalytics.com/js/heap-	chromecache_457.2.dr	false		high
https://img.1movieshd.cc/xxrz/250x400/793/25/c6/25c630a3c0925e7103a801bbba6edb0c/25c630a3c0925e7103a	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/store/apps/details?id=com.bitpanda.bitpanda&hl=de&gl=US	chromecache_288.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_746.2.dr, chromecache_418.2.dr	false		high
https://img.1movieshd.cc/xxrz/250x400/793/4a/6a/4a6a22f7a0595822396fb0b553e99be9/4a6a22f7a0595822396	chromecache_432.2.dr, chromecache_435.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bitpanda.com/de/tell-a-friend	chromecache_288.2.dr	false		high
https://trello.com/add-card?	chromecache_717.2.dr	false		high
http://wordpress.com/wp-admin/press-this.php?	chromecache_717.2.dr	false		high
https://img.1movieshd.cc/xxrz/1200x600/793/8b/69/8b69d6e6025464cd449ad0097791c41b/8b69d6e6025464cd44	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://img.1movieshd.cc/xxrz/250x400/793/f7/75/f775a2d51e2651984951962f42c5dbe2/f775a2d51e265198495	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_292.2.dr	false	URL Reputation: safe	unknown
https://img.1movieshd.cc/xxrz/250x400/793/6b/06/6b068075511bbba8b237a844e8989e56/6b068075511bbba8b23	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.bitpanda.com/app/v2/js/append-asset-page-schema-offers.min.js?id=71732fec015742c40848be1	chromecache_288.2.dr	false		high
https://img.1movieshd.cc/xxrz/1200x600/793/55/5b/555b64c17d8909e2376acd8438a583e5/555b64c17d8909e237	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://img.1movieshd.cc/xxrz/250x400/793/56/2a/562a533d60fbba125e27ca5b0645023d/562a533d60fbba125e2	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://ok.ru/	chromecache_717.2.dr	false		high
https://img.1movieshd.cc/xxrz/250x400/793/13/1a/131a68a0ff4602af36b69afdbd00b343/131a68a0ff4602af36b	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://platform-api.sharethis.com	chromecache_717.2.dr	false		high
https://img.1movieshd.cc/xxrz/1200x600/793/82/56/8256aff80a99d898f6a5cab994ba5e0b/8256aff80a99d898f6	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://img.1movieshd.cc/xxrz/250x400/793/4a/da/4ada5892be3a24521abd543edea19c0e/4ada5892be3a24521ab	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
https://t.me/share/url?	chromecache_717.2.dr	false		high
https://www.cloudflare.com/5xx-error-landing	chromecache_727.2.dr	false		high
http://www.plurk.com/?	chromecache_717.2.dr	false		high
https://img.1movieshd.cc/xxrz/250x400/793/fa/03/fa03e78c21018de5d0e0e40fa7e28de3/fa03e78c21018de5d0e	chromecache_585.2.dr	false	Avira URL Cloud: safe	unknown
https://img.1movieshd.cc/xxrz/250x400/793/90/b0/90b051bb3db7aefe1c46a855e18305a6/90b051bb3db7aefe1c4	chromecache_432.2.dr, chromecache_435.2.dr	false	Avira URL Cloud: safe	unknown
https://img.1movieshd.cc/xxrz/250x400/793/8e/78/8e78abf410fd6904eb4244437afb0eb0/8e78abf410fd6904eb4	chromecache_432.2.dr	false	Avira URL Cloud: safe	unknown
http://service.weibo.com/share/share.php?	chromecache_717.2.dr	false		high
https://blog.bitpanda.com/de/deine-investments-deine-assets-warum-dein-geld-bei-bitpanda-sicher-ist	chromecache_288.2.dr	false		high
https://img.1movieshd.cc/xxrz/250x400/793/f5/70/f5706571721222f8411fe7ab58e9b5e9/f5706571721222f8411	chromecache_435.2.dr	false	Avira URL Cloud: safe	unknown
https://img.1movieshd.cc/xxrz/250x400/793/f0/6b/f06bf9152cca69ecc543586569563320/f06bf9152cca69ecc54	chromecache_432.2.dr, chromecache_435.2.dr	false	Avira URL Cloud: safe	unknown
https://img.1movieshd.cc/xxrz/250x400/793/05/d2/05d2af3ecc1a6d545c293968589b68fe/05d2af3ecc1a6d545c2	chromecache_435.2.dr	false	Avira URL Cloud: safe	unknown
https://mail.google.com/mail/?view=cm&	chromecache_717.2.dr	false		high
https://web.whatsapp.com/send?	chromecache_717.2.dr	false		high
https://secure.actblue.com/donate/ms_blm_homepage_2019	chromecache_717.2.dr	false		high
https://embed.ly/code?url=http%3A%2F%2Fgoogle.com	chromecache_717.2.dr	false		high
https://www.xing.com/profile/	chromecache_717.2.dr	false		high
https://img.1movieshd.cc/xxrz/250x400/793/2b/22/2b2267fe4731539be517d3e67daf45cf/2b2267fe4731539be51	chromecache_585.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_746.2.dr, chromecache_418.2.dr	false		high
https://fontawesome.com/license/free	chromecache_272.2.dr, chromecache_304.2.dr	false		high
https://www.bitpanda.com/de/tech/plattform	chromecache_288.2.dr	false		high
https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Screenshot%202022-11-17%20at%2011.14.4	chromecache_288.2.dr	false		high
https://app.plus500.com	chromecache_287.2.dr	false		high
https://reddit.com/submit?	chromecache_717.2.dr	false		high
https://www.bitpanda.com/de/affiliate-programm	chromecache_288.2.dr	false		high
https://www.bitpanda.com/de/app-ios-android	chromecache_288.2.dr	false		high
https://www.linkedin.com/shareArticle?mini=true&url=	chromecache_596.2.dr	false		high
https://getbootstrap.com/)	chromecache_762.2.dr, chromecache_619.2.dr, chromecache_523.2.dr	false		high
https://gitlab.com/	chromecache_717.2.dr	false		high
https://blog.bitpanda.com/de?utm_referrer=https://www.bitpanda.com	chromecache_288.2.dr	false		high
https://www.patreon.com/	chromecache_717.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
54.146.132.60	match.prod.bidr.io	United States	14618	AMAZON-AESUS	false
35.244.154.8	id.rlcdn.com	United States	15169	GOOGLEUS	false
44.210.231.214	unknown	United States	14618	AMAZON-AESUS	false
104.21.6.192	starpassing.com	United States	13335	CLOUDFLARENETUS	false
108.156.83.74	d3oiwf0xhhk8m1.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.8.9	code.highcharts.com	United States	13335	CLOUDFLARENETUS	false
3.225.96.121	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.239.225.4	d10jk3zb4x05up.cloudfront.net	United States	16509	AMAZON-02US	false
87.230.104.210	www.fndsda.net	Germany	35329	GD-EMEA-DC-CGN3DE	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.189.130	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
13.226.52.77	unknown	United States	16509	AMAZON-02US	false
192.178.50.68	unknown	United States	15169	GOOGLEUS	false
142.250.189.132	unknown	United States	15169	GOOGLEUS	false
172.64.154.69	www.plus500.com	United States	13335	CLOUDFLARENETUS	false
142.250.217.228	unknown	United States	15169	GOOGLEUS	false
142.250.217.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.216.131.70	thirdparty-logserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
68.67.160.75	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
52.218.29.128	s3-r-w.eu-west-1.amazonaws.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
64.58.232.180	unknown	United States	13649	ASN-VINSUS	false
69.194.242.12	presentation-iad1.turn.com	United States	6336	TURN-US-ASNUS	false
44.235.243.161	load-usw2.exelator.com	United States	16509	AMAZON-02US	false
104.21.56.65	onlinetopchoice.com	United States	13335	CLOUDFLARENETUS	false
69.169.85.7	m.ib-ibi.com	United States	29838	AMCUS	false
142.250.189.142	www.googleoptimize.com	United States	15169	GOOGLEUS	false
192.178.50.36	unknown	United States	15169	GOOGLEUS	false
52.46.143.56	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
107.20.88.0	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.225.218.10	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
18.239.225.54	unknown	United States	16509	AMAZON-02US	false
172.67.40.173	spl.zeotap.com	United States	13335	CLOUDFLARENETUS	false
139.45.195.8	my.rtmark.net	Netherlands	9002	RETN-ASEU	false
18.64.168.178	d296je7bbdd650.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
141.94.171.214	pixel.onaudience.com	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
74.125.134.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.67.203.85	img.1movieshd.cc	United States	13335	CLOUDFLARENETUS	false
51.222.241.100	ws.rqtrk.eu	France	16276	OVHFR	false
18.230.167.103	dcs-public-edge-sae-1366952363.sa-east-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.239.225.41	d20qwf0wrdtevy.cloudfront.net	United States	16509	AMAZON-02US	false
192.178.50.46	analytics.google.com	United States	15169	GOOGLEUS	false
192.229.210.58	cs488.wpc.psicdn.net	United States	15133	EDGECASTUS	false
34.36.216.150	pixel-sync.sitescout.com	United States	2686	ATGS-MMD-ASUS	false
216.200.232.249	pixel-origin.mathtag.com	United States	30419	MEDIAMATH-INCUS	false
172.67.195.52	valueclick.cc	United States	13335	CLOUDFLARENETUS	false
18.64.174.59	platform-api.sharethis.com	United States	3	MIT-GATEWAYSUS	false
139.45.195.254	flerap.com	Netherlands	9002	RETN-ASEU	false
139.45.197.236	yonmewon.com	Netherlands	9002	RETN-ASEU	false
142.250.64.196	www.google.com	United States	15169	GOOGLEUS	false
141.95.33.120	id5-sync.com	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
141.94.171.215	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
3.232.64.79	ps.eyeota.net	United States	14618	AMAZON-AESUS	false
35.201.96.126	visitor.fiftyt.com	United States	15169	GOOGLEUS	false
104.21.11.245	tzegilo.com	United States	13335	CLOUDFLARENETUS	false
52.92.0.210	unknown	United States	16509	AMAZON-02US	false
3.16.63.45	httplogserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
13.226.52.40	count-server.sharethis.com	United States	16509	AMAZON-02US	false
52.20.151.97	bcp.crwdcntrl.net	United States	14618	AMAZON-AESUS	false
18.239.225.79	cdn.matomo.cloud	United States	16509	AMAZON-02US	false
52.46.128.147	unknown	United States	16509	AMAZON-02US	false
104.18.33.70	www.bitpanda.com	United States	13335	CLOUDFLARENETUS	false
34.95.127.121	www.ojrq.net	United States	15169	GOOGLEUS	false
142.250.217.164	unknown	United States	15169	GOOGLEUS	false
8.28.7.81	pugm-vac.pubmnet.com	United States	62713	AS-PUBMATICUS	false
52.200.221.249	unknown	United States	14618	AMAZON-AESUS	false
34.117.77.79	ml314.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
3.89.179.162	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
37.48.68.71	datatechonert.com	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
35.201.76.231	bitpanda.pxf.io	United States	15169	GOOGLEUS	false
18.212.140.196	ext-lb-aws-prod.ccgateway.net	United States	14618	AMAZON-AESUS	false
172.240.83.22	unknown	United States	7979	SERVERS-COMUS	false
172.240.83.21	sr7pv7n5x.com	United States	7979	SERVERS-COMUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.226.52.128	d2znr2yi078d75.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
157.240.14.19	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
104.21.22.71	1movieshd.cc	United States	13335	CLOUDFLARENETUS	false
35.169.4.189	map.go.affec.tv	United States	14618	AMAZON-AESUS	false
15.197.193.217	match.adsrvr.org	United States	7430	TANDEMUS	false
104.22.51.98	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
54.159.210.141	unknown	United States	14618	AMAZON-AESUS	false
52.55.144.0	unknown	United States	14618	AMAZON-AESUS	false
152.195.55.165	cs662.adn.psicdn.net	United States	15133	EDGECASTUS	false
104.18.33.110	geoip-js.com	United States	13335	CLOUDFLARENETUS	false
68.67.181.211	unknown	United States	29990	ASN-APPNEXUS	false
44.215.14.95	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
3.19.205.32	unknown	United States	16509	AMAZON-02US	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
18.211.29.223	na-ice.360yield.com	United States	14618	AMAZON-AESUS	false
18.225.2.1	unknown	United States	16509	AMAZON-02US	false
34.98.64.218	us-u.openx.net	United States	15169	GOOGLEUS	false
34.196.226.77	sync.crwdcntrl.net	United States	14618	AMAZON-AESUS	false
108.156.83.9	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432305
Start date and time:	2024-04-26 20:31:13 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://1movieshd.cc
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@31/837@332/98
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://1movieshd.cc/home Browse: https://1movieshd.cc/movie Browse: https://1movieshd.cc/tv-show

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.64.195, 172.217.2.206, 173.194.211.84, 34.104.35.123, 172.67.142.245, 104.21.27.152, 142.250.217.234, 142.250.217.202, 192.178.50.67, 172.217.3.74, 142.250.217.170, 142.250.64.138, 142.250.64.170, 172.217.165.202, 142.250.189.138, 192.178.50.42, 192.178.50.74, 142.250.64.234, 40.68.123.157, 23.43.173.41, 23.43.173.5, 23.45.182.93, 23.45.182.86, 23.45.182.83, 23.45.182.106, 23.45.182.95, 23.45.182.107, 23.45.182.96, 23.45.182.97, 23.45.182.85, 23.39.223.136, 23.39.223.138, 192.229.211.108, 20.3.187.198, 13.107.42.14, 23.61.61.12, 23.34.194.26, 23.193.120.230, 192.178.50.78, 172.217.3.67, 20.242.39.171, 142.250.64.202, 142.251.35.234, 172.217.15.202, 142.250.217.163, 142.250.189.131, 52.165.165.26, 142.250.64.136, 192.178.50.35, 184.28.118.128, 184.28.118.129, 173.194.215.84, 23.202.41.129, 216.239.34.178, 216.239.36.178, 216.239.38.178, 216.239.32.178, 172.217.15.206, 142.251.107.84, 142.250.217.200, 142.250.217.195, 172.217.2.202
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, e11294.g.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, use.fontawesome.com.cdn.cloudflare.net, a767.dspw65.akamai.net, l-0005.l-msedge.net, e9126.x.akamaiedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, e5529.g.akamaiedge.net, cert1.a1.atm.aqfer.net.edgekey.net, e167121.b.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, e2885.e9.akamaiedge.net, www.gstatic.com, appleid.cdn-apple.com.edgekey.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fonts.googleapis.com, wildcard.bkrtx.com.edgekey.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, www-alv.google-analytics.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edges
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48464)
Category:	downloaded
Size (bytes):	48649
Entropy (8bit):	4.721666015390999
Encrypted:	false
SSDEEP:	768:bTa31Ezd2Q6tXU2Wf9kHt/CMzj3RCgwSxS8/h:bTrzdb6tXQl2sgQZSzZ
MD5:	10519CFD3206802F58315B877A9BEAB5
SHA1:	03232D7095B4A14B88810A0FFE76AE50726C23C6
SHA-256:	604DCF1F11698655F75046BB92F98AAA9477E1C16B01C5FC415E78794393FFB9
SHA-512:	2AE948D29B2E2502BC50CA4E7A230B0D726D18E644066F1164D4F20411C85AAA17A0F305730F8BE40128D18329B16F017E2B96ADD0F5AC7E86586810045E7D2E
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.3.1/css/all.css
Preview:	/!. Font Awesome Free 5.3.1 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.fa-lg{font-size:1.33333em;line-height:.75em;vertical-align:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-fw{text-align:center;width:1.25em}.fa-ul{list-style-type:none;margin-left:2.5em;padding-left:0}.fa-ul>li{position:relative}.fa-li{left:-2em;position:absolute;text-align:center;width:2em;line-height:inherit}.fa-border{border:.08em solid #eee;border-radius:.1em;padding:.2em .25em .15em}.fa-pull-lef

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	dropped
Size (bytes):	591922
Entropy (8bit):	7.987796822480042
Encrypted:	false
SSDEEP:	12288:5z8RyZfeGxDMix/lEd6lkscrEnHmuEUqtA/CkebLPJ5v+1x1yYog8O:CuBxDMC6dpImu+tAY/PP01yYogP
MD5:	B2104644EF488222056F55B5E1F89AFD
SHA1:	9182D4313A481424EB12BDD412610ADFB81EA136
SHA-256:	880C53D65552AF12616F74F65DF5C0732C0FBAB49298BD94906FE7A56A8B6798
SHA-512:	849E5B258FF529505094DB65F02FEA0BB99D3DFD27F89389C7E6632BC188A7E38A807BA6E6663DFAD350E555C34D65A27AA72D11695082167071324FC0E33A69
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X...".......................................................................................G.."...]..J[..2.$q.U.....I.v....<G....D..L...h\OI>d.{.....\|7x`O&....h...r..o$?......'...3..L..6....X.1.q.....j.....<..#...8...t..,.Z"B,...Z.c....\.'.5R..G..E.-.f;p.....(..v.....%.C...9........w...,.9...,..K....J..O..j`nba....Ey.A....>T./.p%...;.)f3... )...F.....8.h..E....8\,.Km...2A..O.......=Q.o..!j.Si.Y.,y..0.j".).o.R7........H[...\|......0.}/@B.VjL....x6R.9:....b.d...'..d...X..[.d).\|( .`..v$.$..'&J?d.7$*R...[S.66.E7q..?:i...c..Z.T.}.....L.%.1..,..]...8.sk.....r.....u2.6.......^~,.O..z.@.......x.;. ...@......Z..Z.m.....4P...h_b.8....q.....1...t=.....h.0....L..P....o....B..(..:k.mSz/..,.. ...iKTE'%\|.Wh.`...P'..U1.x.:...#.......WIH..u"..]a..r.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 75440, version 329.-1049
Category:	downloaded
Size (bytes):	75440
Entropy (8bit):	7.996880938976995
Encrypted:	true
SSDEEP:	1536:1Zq/f5ldhNurIqp+jqNT5Fm653lqWppat1Wa4W8TeodjxNrqM:1kvdS7ppFm6JhpgkrW6bGM
MD5:	B5CF8AE26748570D8FB95A47F46B69E1
SHA1:	07BED153D47F9129A944EE54DD72952DEED074C8
SHA-256:	CD398BE1A91817126CEF10224738E624358EDF6F08043ABAD7E60C1AAECCC8D0
SHA-512:	F08B9289695CF530094F076B2DF4D2B0E1A1DAEDD00190D123B4179B2C1A1B5E8B2BB988D86FC6DC9EEE117D88A58DD5B6DFE7689586C17068F5D2DA01904D76
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/webfonts/fa-solid-900.woff2
Preview:	wOF2......&........T..&U.I......................?FFTM....`..r........c.6.$..\|..... ..%..4[ER.B....an.CP.Q..;..n..m.C.R...%x.1.....=......k.........5....M.($$!.IHB.R.I..#d.R.!........RJ.!.N.sT.P.P.P.P..`f. ...xR>T...E\|.+..I5./CKmi2.w5...n.KN..x.....Oz.;x..x8...._.^b... v>.....H.!m.iS7E.....DD!...[.0ok.&=.=&.t...rV.C....[."O.?.j.<....f...'.....t.;..{.~......q.....G.x"...ts....Z..!]{OK.h9<?..........F.6h.gA.6`..Q."J....0........H.@.N<9.1....0.....w.\|#...`T..}D....b....sX.ll..@.....~T.A...r.K...L..f...).Ld..*v.).....n:..0....8.4......c.4.......R....,..6......o.M4Q0'.t.....O..}CC.v..d.....>s....Y.=...p.....B...........A....c{....R.`iI..F!.R6..........Vi....s.M..u\`A....z2....H..G.?.....i.B..Kf...............c@.5.g.~.......C.Z.Xs.q.....I..).o..FI....O.N.(...J..........yn....P.....Ro...=3...C......l.v.+...^._j .\.9H.F...o3.<..v...~X...ByT4V+..K.8.p?...[..(0$l..<.$. ....B..r....U}.WO.6..B.....`....T....vU3.V..m..!.d.....b..........b.l....`.%..

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1187265
Entropy (8bit):	4.816460872744716
Encrypted:	false
SSDEEP:	12288:MfEyUMoYzwAI/SsfgGzwbQvn6HuvJr2aGAXP5sh:M5
MD5:	42444D8657250D8EC7FC4EAB95E6CDFF
SHA1:	E714E2BC394100A22786E26B7FBE222DB04722E3
SHA-256:	9C0F344FEFA19E01B15C2AF2238EF135CF70D753BF8BF491DA5DAF6CB6771AFC
SHA-512:	F9567D4EB27353F242FD8F0FE35DD81618E3BA277895A04E1A0DC871314891E6475329E72C9481B08244A417AAE9D52147D6FF26AC16348A423D046311AFD91C
Malicious:	false
Reputation:	low
Preview:	{"data":[{"type":"asset_price","attributes":{"pid":"b86c034b-efe3-11eb-b56f-0691764446a7","price":"59785.85","price_amount_changes":{"day":"-544.7810868278924640","week":"-583.0727286438395642","month":"-3468.5428969205668699","year":"33062.5831990840735992"},"price_percentage_changes":{"day":"-0.90","week":"-0.97","month":"-5.48","year":"123.72"},"circulating_supply":"19690253.00000000","market_cap":"1177198514781.33162500"},"id":"1"},{"type":"asset_price","attributes":{"pid":"b86c0bbf-efe3-11eb-b56f-0691764446a7","price":"82.17","price_amount_changes":{"day":"3.3104823009206035","week":"5.7272924568432244","month":"-4.4723472518850794","year":"0.5558734367906700"},"price_percentage_changes":{"day":"4.20","week":"7.49","month":"-5.16","year":"0.68"},"circulating_supply":"74462681.10750500","market_cap":"6118316000.77626506"},"id":"3"},{"type":"asset_price","attributes":{"pid":"b86c113a-efe3-11eb-b56f-0691764446a7","price":"2949.23","price_amount_changes":{"day":"-2.2477024844294720","

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1369
Entropy (8bit):	5.170463538246163
Encrypted:	false
SSDEEP:	24:2d64lwSf6yxVF0uZs4ZRZOFOjs20RjsAJjso1dNjsmJMrIEjs2:c3w+0OhX+PuL
MD5:	AB90EB82C6F6C36057B3C382987CF5F4
SHA1:	FA45C1A54AE3C8734F8FD0A5ACF4E99E942888C6
SHA-256:	00ECBEA106C8A75BB5C3482EBABBE2B26DD6D7F4F313EFCEEDA6CC01DB666D4C
SHA-512:	137532C3186DBBEFD1851877212FAAF99986ED8FD8AE4798406AD49D891AAFB4AEFC0B70210FC78AD9D41FD277813B533C42E2F6AAB9F60A5CD9809BFFDFCEA5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_302" data-name="Group 302" transform="translate(-612 -167.5)">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(612 167.5)" fill="#f2faf6"/>. <g id="Group_1095" data-name="Group 1095" transform="translate(615.268 171.157)">. <path id="Path_858" data-name="Path 858" d="M14.5,21.8H9.846A2.159,2.159,0,0,1,7.687,19.64V8.415A2.159,2.159,0,0,1,9.846,6.256h8.2a2.159,2.159,0,0,1,2.159,2.159h0" transform="translate(0 0)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_260" data-name="Line 260" x2="6.071" transform="translate(10.899 9.926)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_261" data-name="Line 261" x2="6.071" transform="translate(10.899 12.516)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_262" data-name="Line 262" x2="3.886" transform="translat

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	84375
Entropy (8bit):	7.9844803428638835
Encrypted:	false
SSDEEP:	1536:pgFODe9VpSsZBNEVrM7O3YAXYJJhkOHuAsBiNU50IyiaoqHbN6nCpWXCW:pu0XsiVf3YGYJfBHuAsBGU6iaoqHRuGE
MD5:	3063C862558EA8B41A78CE203EDA38E5
SHA1:	ED80DBC70DE876708C5F710A095F55EF3137D501
SHA-256:	37CC75FA95F7AFBEE56F7210F81E8F2A19AF3729FB457D52611F29F4B524CDFB
SHA-512:	7266E725FC0FBF752798C60541EF3D2EBCFC4F0540289E4E75AEEDFAC0D730E691D54F8778C5F7ABB7110EA8276E5E2F2B6AFA8FE4C2600556FDAF4DD4DCCE97
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/c0/02/c002638e7a7ce3a662c49124f3481004/c002638e7a7ce3a662c49124f3481004.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................mT.j-/1F........g.........g..f{.fg...N.Hfx......y.gO9....S..e...YdQ&n.....z.i}G..........v..l.3....L...m+..GO\|..;m......a/.Y.....e...D....E-99.P$....DJ...x8Q=..%q.<S..C3...=w.u.f.......5...hE)..V.._-..N....IJ...,...+.b.&M..z.U....1..f.n..'.q......I..k..B?7s.....@.H3..DX...X..k...t..N.c.....d.-..G9 &Ld......e.'...B....;......d.*.3!N.l.\......>...f0........N..F.&...a3...1..!g.w.-:A.G...s..C=...?. ....O......XU.2R. .J7..r..e.OE..}UK..Q;.-.E.Y.(....p....x.EH..sj.Q.y..uAc...(..IKy).....~\|..q.4Z..Xl(.p.4...........VB...f..`0.m......\.r....$L..es.r8........m........`m.(....).'.......).7?5O.+....-\.....i.a....&63>@I.Z....B...{.....;h...

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20989)
Category:	downloaded
Size (bytes):	21162
Entropy (8bit):	5.219703272963418
Encrypted:	false
SSDEEP:	384:kmQkLrwVOyzirV9nNbRGlB9D45HjiWZ8xpOxvRVgD75zBY5vImg3+zopL9TidOg4:vLsgyziJ/0D45sxpOxvYD73Y5v9zwL9F
MD5:	E21A6649041EF6F5F1BF43F11946621F
SHA1:	01BCAEF811210DE0EA58E55E47FBEFD77BE5C442
SHA-256:	7D3B9482D4FB3B6AEAA089B08EB84381B5D3294C32C71BA320C4482BB4DBB8D5
SHA-512:	10D373506802082BB1121092294E2AC7CF5695024A2AC9CE3E5D0A83F71B8FE906C3D9B736C667ECBBA5A340D73E284F1CF710F393A1614D051BF4EE21AC8D87
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.15.0/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2019. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function r(e){return 11===e?pe:10===e?se:pe\|\|se}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:null,n=e.offsetParent\|\|null;n===o&&e.nextElementSibling;)n

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	598
Entropy (8bit):	5.12069581024496
Encrypted:	false
SSDEEP:	12:TMHdN8jhMVBA1Bp8JKAAi2Cj2/YH3bLRSKJWp/YHrLM7YFIv/YHfW2KwriLUQLgv:2dijhMVBMMJKFCj2/qLkBqfM7Dqu2Kwl
MD5:	A207797BE5F060E5F2F560C88D345309
SHA1:	CDC3386B639E1732D31E69709131FE5A9FE351E8
SHA-256:	BC0327990436B914896FAB3E79DC20C30CFF6F48B22C7D77710CAFB58C97EDA7
SHA-512:	C2818007AB3F118C9D9DD8A40FA9563191386D63915643826745B291E0A6E2E87CEDF33741172477BAE7B62EAD9E93AC4B1FE19052BB1ED99988DDCBFBB3C186
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="a" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="501" height="500" viewBox="0 0 501 500">. <defs>. <style>. .b {. fill: #66b9e8;. }. </style>. </defs>. <circle cx="250.5" cy="250" r="250"/>. <g>. <path class="b" d="m74.98,269.48v-36.68l95.44-59.19v38.45l-63.21,38.96,63.21,38.96v38.7l-95.44-59.19Z"/>. <path class="b" d="m281.98,146.29h34.25l-97.2,207.43h-34.25l97.2-207.43Z"/>. <path class="b" d="m330.58,289.97l63.21-38.96-63.21-38.96v-38.45l95.44,59.19v36.68l-95.44,59.19v-38.7Z"/>. </g>.</svg>

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	dropped
Size (bytes):	68779
Entropy (8bit):	7.986202455986305
Encrypted:	false
SSDEEP:	1536:dgkatfQnDOqe2V14x9TsqIFie9jrnoY1ZVmw4achDXd7xo9:dgk9DA9x9TsqujroWLv4acla
MD5:	47D9FD4E004C37E011FE88CE26405864
SHA1:	EAEB07668AAB912E014D7127ACC021CA422CBA89
SHA-256:	AD85312670A41AEBD0DE4052D702103C56F2F9DF27B88FD9D61C440092E4955C
SHA-512:	76D395D0DD85AA1F2F098F2D562BC5E4AEA8DD36D5B6B19D7548049F197D02D6B496B669C4971420019EA5CE1FFA51979441228C676D9FCA011B8CAE11DDDA5F
Malicious:	false
Reputation:	low
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......4........pixi............av1C........colrnclx...........ipma...................mdat........u.@CA.2........1@.X/].Q....3..........?.>4.............2.....mFE.V..>gI3....n....$Z..a\|...]...}..\.Jn.t.;.........B.q..!PE.Q...a..u.Hs.. g.V..<e.....i5.#.J.....Cj..^..s."]...."...9.L..j.....)%.&$...=.....A_..y./+}.W....+).N4.V.....VT....f..4..jRiA....uq'.($.b...lq.....\1{+.Z..~F...nIV9...k.g@.7I.1...H......e..iS.;.R.....u;P...0..!....;#......J...l~S.D).....}7.........../._..J..HP.C.........>..c.....G.*...2.g...Z>.1.m...J..7l......T.O.%D..a.tx...W.6.......q..?...3<..l...2.t.m..i..$5W.8....R.f^g.3qb../..8..I.o# ..&;k9.i..t.....2._... ov..K..Vf.......`..Y+.#....:1\..usK.\.(..YWA.w.@...R3.Z.....C;..I.e..P......... .....t.F....<...).s..i]....4.....WD)..(..R..Q.~..i.k....

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.8566072359389585
Encrypted:	false
SSDEEP:	3:YCMxvUESu8RfwdHeVmpUxXMcYU:YCM5dSzod+IKcXU
MD5:	B10AFD5BAFF1A33EC17215A1014494C4
SHA1:	F89A94367C1529C62EB99939066F47885FECC957
SHA-256:	58695F7894DCA0BB6503918A6A93AA7200939A73CE3FC5B166D1B7CE1F70C8A8
SHA-512:	01F6144F5799C5E200D7FE01043F38389BC20E00D1F116DFFEBBA21B980BCD00A17113E3018C8ECA26C8CA9F21F7CA0476F2D7640CB4A2EC0914271C1D2F786B
Malicious:	false
Reputation:	low
Preview:	{"gid":"k3oa752910bk686846683x2y8sbun072","skipSubscribe":false}.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17660)
Category:	downloaded
Size (bytes):	17908
Entropy (8bit):	5.245107502162551
Encrypted:	false
SSDEEP:	192:l3GySZoj5oOg8pu564aEzn5nVMnyk3sBakk3cx7x0IlQV0Hf1b5SwU+ahpfex/W9:lWytjU64auV0ISjyW5RAe
MD5:	12DD498BF90C536803C2AAD708B66C2B
SHA1:	5F9363D39A405D1C94328CF2303FF4A05C0AD163
SHA-256:	C4E20F53F5EF0ED44B783437AA3F4638A9A56CC4AA29AE83ED9212EB2807052A
SHA-512:	EC593A501EBF74C092E564A1AAF0B477D3DA6813C9A88F29D0D2A0DB8143BDF19718BA4E6B13F64295B077CA5CB9C13460C30F9F2F35982A82597B22F79FFDD1
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/postscribe/2.0.8/postscribe.min.js
Preview:	/*. @file postscribe. * @description Asynchronously write javascript, even with document.write.. * @version v2.0.8. * @see {@link https://krux.github.io/postscribe}. * @license MIT. * @author Derek Brans. * @copyright 2016 Krux Digital, Inc. */.!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports["postscribe"]=e():t["postscribe"]=e()}(this,function(){return function(t){function e(n){if(r[n])return r[n].exports;var o=r[n]={"exports":{},"id":n,"loaded":!1};return t[n].call(o.exports,o,o.exports,e),o.loaded=!0,o.exports}var r={};return e.m=t,e.c=r,e.p="",e(0)}([function(t,e,r){"use strict";function n(t){return t&&t.__esModule?t:{"default":t}}var o=r(1),i=n(o);t.exports=i["default"]},function(t,e,r){"use strict";function n(t){if(t&&t.__esModule)return t;var e={};if(null!=t)for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e["default"]=t,e}function

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1364
Entropy (8bit):	7.856540005424561
Encrypted:	false
SSDEEP:	24:XDvvqJMOD+ef+CVN54onvfaN57tSSPq9wY7TG8zVOVKPlSLJFwiMM7aDn+klZM:XDv4vDdme7vETq9wYzpO09XM7MM
MD5:	656227EDD497826260D9BEF5832F0AB5
SHA1:	7505464C0131EC0DACEA0EEA6E7C805D35828812
SHA-256:	A138291CE2DEAFD3017AAD7859C9F86760FE10EF899B19FEEA3699CA4A2A4CC8
SHA-512:	A068397F2D58DB3A444F753599A5A2D4258133B7368FD0C2E5D6A92AC7E18A187A7A1BE57F4A13B361854EAEAC976312714E87E892FBEA50CF92ACB53E0414FC
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=B&dmn=1movieshd.cc&rnd=1714156339691
Preview:	...........Vms.8..+d/e.Z...3m.....d.6y...e.,...-.(..o%..t.....Z...#..4.:J.".H%...:....V..f9......b.(... .H...'.M.@]..p].......H.......4.. .T.vFQ..IW.T..U..i.&...X.P...=..2....~Kn.4S..........B@..Q.L._( WY.H\...J....T....Y.....i..A.(<.....s6..d.i...F....:...s...p'\|......;?e%.;HsbR../T.......$.3..9e3..J.......#.......'.8.H.+....._O..\..QZh.1...]........l...\|..P2./4]...{..x....=ny..v....hy]...{HN...N...v.e.{.c.5...-..,......z..(.;i.Z..K........7Z...........F.y....x8._. .z.`..5...&..,...M4....?.2....~.BH#........6.Mh......../\|.......Z.g..^...l./b..F..R..T..[1.N}#...H.c%5..(n1..B..]_............H...m..N.4..A.=.;....p..0<..`.. xQ.\|vgB(.y....;.V.....f.`K...6..A.....j5pv.l.c&E.1n...T..k......9`+..J.)R.&.2.&:...(L....g..:._.S\|.7....=......S.>6..e.cq.i..E...u..1.E.Z...{...Y}..'...4.o>.kPDR...5.7&.-[.[..6...I.IE..E.>....>2......?.....9.M...y...D...'..ic.:....1.S_..v..k....A/J..9o..Axg...N.....V..........g...Sl..f.$+!=..kRv....P!...a... .%.........D.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	96881
Entropy (8bit):	7.988491530590886
Encrypted:	false
SSDEEP:	1536:q3GyegPX/b2QLq22BMfhgNu/YO53yb5stL+n9wui1KnXl6hOd2A+hMIVYqAwtdhD:qWyee2QLq1qfKL5sGyQnXl6I2rsw
MD5:	2468D8BB93A58EF56317B2015B976CCA
SHA1:	62A980348AA1B593B665FB4E002D9C10D0FED6DE
SHA-256:	E4A85582EB02CEA1C78800C1DE9C067985F9167FDBD1A56CA27290F1D2A7F12E
SHA-512:	F3AEC11FF0247DF515554CA9F7E54E7BE2ECB2FD570D0D9BD387FC6C8848C09518C1D4E0A2FC535DD9BBDA95DEFEA9B39AB99E31A453D6809BEA9A38BD620694
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/b4/c6/b4c6078f1da394fd9a4e7abf6c1e621f/b4c6078f1da394fd9a4e7abf6c1e621f.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................m..d)...\|.t{o.............7.a.O6l.d........a..jI[\|...5........5....yY;.x_....z....6..OG>..g..s>...g.{.u............=Zy..-...2..Tu.a..ps..Gt..e..m...B.....I.N.~..Nz'j....4H.y.....G.x...4.L..j.%....~..-..Z.X...+....^>..t.F...5...>}...S.F...9...4Y.9....g...x.3....c...YwEHX....K...5.V.k..{y>.n.lb66..i.Z7nN?uW.M..:.:..E..=..n ....`....H.\|.B....E.r.....x..jc....?`.......;.....V\...F@.... k\|....e.y.}..&".e..4....+....>..*6.q....-E...Y$@~J...R.....].f'..........g.Z...........s.y..Bl@/...A..GF.."..F..}.)n...B.}qu&...R......._..?O..C.iOk'.5.~w...v^..u3..J...;.....(gL.3.L..j.LL..'...x9T......F....}m..Q...... .G@.Vp.... ..O......tMa..u...GVH./[.P..Q%OG. .k

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1946
Entropy (8bit):	5.02670640512096
Encrypted:	false
SSDEEP:	48:fnXblwOF+zjFDF3FI5FGXlwK2lNHl9HIu0gHB:fr/iNRxuXPdB
MD5:	83F22772449308C046D9B6048460D630
SHA1:	C17BC5E3C9BA5A98823FC07A9CA4378F45853AE3
SHA-256:	01905B3D3150102366BFCAD7A7593C77DFE4E0CA13E782EDB5652B619635BC8F
SHA-512:	75903A64912B7D94A24C32E686CFE076A4F0F553DDE9A6EBA2134EC89ECE6B0AD1A78B3FAFE8B226BF36880A2B0C8AACCFE386E84432754808074D3FA0DDC81E
Malicious:	false
Reputation:	low
URL:	https://app.plus500.com/manifest.json
Preview:	{..."short_name": "Plus500",..."name": "Plus500",..."start_url": "/",..."background_color": "#0c3776",..."theme_color": "#0c2780",..."display": "standalone",..."iarc_rating_id": "c4c3751a-8969-47f1-8bcf-5083a320c555",..."orientation": "any",..."description": "Plus500 trading platform",..."icons": [....{....."src": "/Resources/images/app-icon/Plus500AppIcon-48.png",....."type": "image/png",....."sizes": "48x48",....."purpose": "any"....},....{....."src": "/Resources/images/app-icon/Plus500AppIcon-96.png",....."type": "image/png",....."sizes": "96x96",....."purpose": "any"....},....{....."src": "/Resources/images/app-icon/Plus500AppIcon-192.png",....."type": "image/png",....."sizes": "192x192",....."purpose": "any"....},....{....."src": "/Resources/images/app-icon/Plus500AppIcon-512.png",....."type": "image/png",....."sizes": "512x512",....."purpose": "any"....},....{....."src": "/Resources/images/app-icon/Plus500AppIcon-48_maskable.png",....."type": "image/png",....."sizes": "48x48",...

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (29268), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	118841
Entropy (8bit):	5.1960538172222215
Encrypted:	false
SSDEEP:	1536:Hwgn4GlZ4diVg7PxlIRv9CUUUuU3UcUq1oIUBUQUeU9Q6HsUcUkUQUPaSoUgUeU2:HwWljJRLMJJMFbRoTI0gk5Z8XO4s
MD5:	AD1C6186EF267A6CD2A513A3E7C97D42
SHA1:	FE40E99FCBEF4527F4C5B4E84B25132437D63E3D
SHA-256:	4AB3B5AC34FEDABD6525506CC99F997EE6EE029A520CFDBCFA1D13115F8789F8
SHA-512:	A3CF3EB6ECA5CCEAD3A77E8718C55B3B073DDCDD50847127A641740F7BCC573DB17A91DF7EB6B444845F29C4D873A22C7B2BC469C4C2EAE5276FFE625BEE1697
Malicious:	false
Reputation:	low
URL:	https://www.bitpanda.com/de/preise/bitcoin-btc?irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0&utm_source=Impact&utm_medium=Affiliates&utm_campaign=4484296&utm_content=Copy%20of%20Bitcoin%20Price%20Page_CH_2&utm_term=e2&ref=615250356669422741&tag=affiliates&subid1=&irgwc=1
Preview:	<!DOCTYPE html><html class=light lang=de><head><script src="https://www.googleoptimize.com/optimize.js?id=OPT-N3D6ZNP"></script><script>if(document.cookie.match("uc_performance_v1_0=accepted")?.length){. window.dataLayer.push({'event': 'optimize.activate'});. }</script><meta charset=utf-8><title>Bitcoin kaufen & live BTC Kurs in Euro . Bitpanda</title><meta content=Bitpanda name=author><meta content="width=device-width, initial-scale=1.0" name=viewport><meta content=https://www.bitpanda.com/de/preise/bitcoin-btc property=og:url><meta content=origin name=referrer><link href=https://cdn.bitpanda.com/media/redesign/favicon/favicon-32x32.png rel=icon sizes=32x32 type=image/png><link href=https://cdn.bitpanda.com/media/redesign/favicon/favicon-16x16.png rel=icon sizes=16x16 type=image/png><meta content="IE=EmulateIE11" http-equiv=X-UA-Compatible><link href=https://cdn.bitpanda.com rel=preconnect><link href=https://code.highcharts.com rel=preconnect><link href=https://

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	567
Entropy (8bit):	4.810088541637124
Encrypted:	false
SSDEEP:	12:TMHdVz1jjMdhFUYLTcMPJO4oDCSb4sOZZ0XQduWhZFtX1+XbmqJyWUUtETC:2d51j/YLo4O1yT0gdbvtlfqJ3OTC
MD5:	36D4CC2B83B63AC0E2D16EE4DFAB5BE4
SHA1:	F7C5C6366FA3C85914456E6D44504A22773B10AE
SHA-256:	2B2DAF515DC4418C9467F4302DB9774F10FEF19CB5300368EFB35138A378AE7E
SHA-512:	55E9B215F6DDFEA3639EEDC47A9F8DC54C16B515763DD69D38535FEEA0A36733D1AB2C9E1AB65DE468AAA8175A52BABEEAB4C4F3ED01A775C7D1761767D04EBE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z" fill="#F2F4F7"/><path d="M19.643 7.042v9.387h9.387v1.633c0 6.085-4.934 11.019-11.02 11.019-6.085 0-11.019-4.934-11.019-11.02 0-6.085 4.934-11.019 11.02-11.019h1.632zm1.887 7.5V5.155l.421.016.354.02.152.012.255.025a9.391 9.391 0 0 1 8.136 8.169l.024.246.021.311.017.376.007.212H21.53z" fill="#5BA9D9"/></g></svg>

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1529
Entropy (8bit):	5.126754316123062
Encrypted:	false
SSDEEP:	24:2d64lYmuOfYyMJLR8EXmGIyjsJPVwjsz72wjs5q6wjsMtKx3jsR7+jsWqq6js2:c3YvfxRt0h2y6WtZSm
MD5:	870F0382DEA95C8DC1965CD5B89F6583
SHA1:	9CCB8FBE06BFCF4DDAD5FB58696D172AFFC6E93D
SHA-256:	4E8AD5F694764FFA5E74B3A00D043846ACEE45A42BB8A3A3E94F20405C467674
SHA-512:	FD63815F35A3DEDBE6F70D6F24389127203B3052B896EDE5835C1855625849C6B3E813C9B4AA6979A76AA373B1F8B7D003DF7E199FABC9B25FC08CD2851C4A87
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201306.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_1306" data-name="Group 1306" transform="translate(-203 -199)">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(203 199)" fill="#f2faf6"/>. <g id="Group_1089" data-name="Group 1089" transform="translate(208.463 202.732)">. <path id="Path_848" data-name="Path 848" d="M4.537,13.845v5.577a.986.986,0,0,0,.986.986H19.551a.986.986,0,0,0,.986-.986V9.254a.986.986,0,0,0-.986-.986H5.523a.986.986,0,0,0-.986.986v2.074h16" transform="translate(0)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_213" data-name="Line 213" x2="1.96" transform="translate(7.344 14.337)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_214" data-name="Line 214" x2="1.96" transform="translate(11.557 14.337)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_215" data-name="Line 215" x2="1.96"

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	82156
Entropy (8bit):	7.988544253002294
Encrypted:	false
SSDEEP:	1536:NYJXg/3aeiN0FmBBI7id/ZO1g9C30ZGnVKAzXws8h0vLhFGnl+:NaAg0laZGaYV8h0vLhYnl+
MD5:	F032D25D851FB4468ECA6069CAFBAB18
SHA1:	9A7A988847871CA0C0F1B3FD4F558387D67971D4
SHA-256:	7BCF25BB5A46F5256426019BE3CFF0AA9E3BC3B70A9FAC1630064C6F3F194B98
SHA-512:	069486A0E5F7D960588B3CF9EBF01368BFAD15BCE8EBDAB5417FA5941665CA1A0576AB6AADF9D39B6A5BF9451DFCD49F5A009E145A3F02F13A3D31F24B854A3A
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/6c/f6/6cf634239aa04e254cc4f6e675b4ad8a/6cf634239aa04e254cc4f6e675b4ad8a.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................\|wc..Y,.,.T.;...=J..R..J./.+\|Lr:.{]<w..t.^\....U^z.URXj..[8n.su.z..N.1.Zl.h..BOSn+...~yZW.Hvx..e<...am..E<...M.%ee.2Z.Gj'6Z.4.g.;;..[.....[......t.)...S.....<....P..c..% x..z...8.E=l...........y.......w..:.>.....9.TA.q_.!...#.[...F(..mb...:..?s.u............~;dA....s@.........}.....2..\|...&......s..\|....X..C.P.G...y.[....<.}w..y.ns..n..0....V....W+K.jHa...q..Z.....$........W.s6..R4.~~.C......\|..l.5.y.L.._.F..+(&r......,YE].@..U .$.G.k..z...!......-...;......yD0 ...Y.A@.j5a.4..5....D.." !....$q......;..ZU......22.M.......ght.k'......P..w.x..._ ./..).-...#....O{.j...t..G...L...~.-l.Tfh.`......G..Q.(............p../..:.....=.p..3o.}..kHr

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38201)
Category:	downloaded
Size (bytes):	144360
Entropy (8bit):	5.35429836114594
Encrypted:	false
SSDEEP:	3072:OKKNKruFFUZ/+AMKV4s13Fx8AcR7olGwilGAygdC9fS0gJc:c/+5M7vC9+Jc
MD5:	5052DEFFF4A59FBED0A447DF1B3933CE
SHA1:	0C993CB03544D168128164E9C4B2CA1BC18E8C22
SHA-256:	E18B436A5400A7F1FB757B4237F18B2803BC2B35AF14EF4CDC0EEB1B5D5F16D4
SHA-512:	8D4A973A8ADC265EC0B58A9D138386415069A8E8C59EBB0478D7C2F7443E84331AEC3C6CAD1F5ACA10A2B1D1B976F7ADB82A921875DDE01F19457AF57C8ACA3E
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/vendor.bundle.js
Preview:	(()=>{var Zl={96486:function(on,An,Sn){on=Sn.nmd(on);var Re;/*. @license.* Lodash <https://lodash.com/>.* Copyright OpenJS Foundation and other contributors <https://openjsf.org/>.* Released under MIT license <https://lodash.com/license>.* Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>.* Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors.*/(function(){var d,Ui="4.17.21",Di=200,da="Unsupported core-js use. Try https://npms.io/search?q=ponyfill.",Qn="Expected a function",pa="Invalid `variable` option passed into `_.template`",qr="__lodash_hash_undefined__",Gr=500,Oe="__lodash_placeholder__",qt=1,Rn=2,nn=4,Ce=1,Hr=2,Y=1,Mn=2,Bi=4,vt=8,oe=16,dt=32,fe=64,At=128,ir=256,Ni=512,ga=30,$="...",Gt=800,ur=16,ot=1,Cn=2,qi=3,St=1/0,pt=9007199254740991,Et=17976931348623157e292,Ht=0/0,kn=4294967295,gn=kn-1,co=kn>>>1,so=[["ary",At],["bind",Y],["bindKey",Mn],["curry",vt],["curryRight",oe],["flip",Ni],["partial",dt],["partialRight",fe],["rearg",ir]],ae="[obje

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=6f67744e-1091-4048-adba-e024cc18f2d2&ttd_puid=c9519294-632a-4d82-bad6-7d3fcc8fdd1e%2C%2C
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	49750
Entropy (8bit):	3.811656854940455
Encrypted:	false
SSDEEP:	1536:4p/QcnSmLrO0znMmB6qM3WsNfkUii3dXLRspa:CzzC
MD5:	CAD941AF7A899A4B48019EAB7EC22124
SHA1:	35E634F3F0F7779568608D69AD57FBCAD5E95D28
SHA-256:	404E5CB06876817B327828E8E85675C1D35975C59BF8AA62BEDABD83F703BF20
SHA-512:	01E91D86314B41ADA36D77490FEFD973DFDD10FAD3DFDDEDAD4AFF02DBDA66B0FE7F1C428E2DFD0D9EB2B4323652F5BDD6B321843EA3B5B130731CBC22ABEDB6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="56" height="56" viewBox="0 0 56 56" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="56" height="56" rx="28" fill="#F2FAF6"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M43.0313 19.4584C42.8434 16.3451 37.3196 14 30.1834 14C23.0472 14 17.5439 16.3451 17.339 19.4325C17.3358 19.4977 17.3358 19.563 17.339 19.6282V25.7846C14.6232 26.8039 13.0825 28.2442 12.9698 29.8469C12.9663 29.9183 12.9663 29.9898 12.9698 30.0611V36.3763C12.9664 36.4402 12.9664 36.5044 12.9698 36.5683C13.0928 38.2745 14.7598 39.7628 17.6703 40.7636H17.7011C20.3321 41.6166 23.0677 42.0325 25.8143 41.9971C32.9266 41.9971 38.4538 39.6594 38.6587 36.5572V36.5092V36.3763V30.2162C41.3779 29.1933 42.9186 27.753 43.0313 26.1539V26.1243C43.0329 26.1071 43.0329 26.0898 43.0313 26.0726V19.6245V19.5064V19.4584ZM18.3705 19.5242C18.5003 17.3933 23.2794 15.0925 30.1833 15.0925C37.0872 15.0925 41.8663 17.3749 41.9995 19.5242C42.0012 19.5451 42.0012 19.5661 41.9995 19.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	99494
Entropy (8bit):	7.9903467958837195
Encrypted:	true
SSDEEP:	1536:yL4J+oAu3iq8STitam+9J/9Ua3uFsPRl/3f4v3KJPCP9m/eFZ2BhbczqH7YT:1ArHtam+9JF/uFsP703KQm/y2nyT
MD5:	FA3593318A845194AE08808524CF171A
SHA1:	2D76D205479C16383ECCBD308AFED98C2C7A57C6
SHA-256:	427A99DBA59CCF730BBFBB1494A93F45CCE04DF76FE4FA36315A058B979D6146
SHA-512:	D0CE19D290E370CA0A48B102342FE415777BD058C10F501B31636D7022D621C457B81EAB1916CE719BD1062ADB874BA844A103E3B443BF35812ABCB9E807BF74
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................9.R........4.rac.....{.....`&...7...!a.4.].R...W..u).......0z...EnG..f....%..OC..Z...%V..V...E'(.....2n[`gex.\|..,..Q..r.z...a[.#.GAy..S.'..h.H...Zm......#....$.?9......_r...\|.mED..Y...\|N.%;.p...))]....R..$.:..(..ha."..}...a.H..5\..<.S[.....S./.F..-......U..E..k..{..p..;:\|@..b..1.G..T..FnW.n#.OC.5{F@m.S7r.D^..^J..:.I2)..u.U.+.<.4..3....7.....L.}.3...$.MZ.k.#.'..2.*.t.m..D...,.Z.tg.T.....r...T-.W\.<$.2..6...;.vTr....[...i.&.o...5o.F......%..B:.z.2z. ........V.g.y1.{b.{.O.2wA........9%.C...94:]J.KZs..LW0{C...m.-M..p......o6rK_....I...X .?(T..rq...F..\|..k...u.......A}".p..f,..v+.........."a.g.E.;......l.....9....7+.!...Z.`.=.[.....V....}x.....

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/fifty?uid=56a94716-d471-4e73-7b87-13df68a214a1&gdpr=0&gdpr_pd=0
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1242
Entropy (8bit):	4.2746523978834485
Encrypted:	false
SSDEEP:	24:t/4u75UmPeTgapjY6u6RzwW8UaIbn+WTvPJ41hhVv1e:UWRMSMc7WyrhVvg
MD5:	8655B256A90DCE02C744782B37C5BF98
SHA1:	53834DF51ABBD74BE1E94CA6536837332541D1F9
SHA-256:	DB2BBEF9A1D068F0370701166DEA46DDCD909554F8038F7E2D979AEA242509BB
SHA-512:	29B9A79CAB9DD2ED86D1B09FC9F259971D8C6E46455246F7F58A077A2C0EB2BA417032336D683AC12886FF9B45F99C8262C4307377D1F43120BC62EBBB1DE78D
Malicious:	false
Reputation:	low
Preview:	<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#5B449B"/><path d="M29 10.858v14.94c-.453-.051-.895-.11-1.342-.192l-.192-.034-.621-.114-.218-.04c-1.094-.2-2.186-.409-3.278-.624a198.705 198.705 0 0 0-3.176-.595c-1.14-.205-2.28-.421-3.416-.647-.898-.175-1.796-.343-2.696-.505v-9.439c2.115-.41 4.233-.809 6.353-1.194.832-.153 1.663-.313 2.492-.478 1.354-.267 2.712-.514 4.07-.758.296-.052.591-.107.886-.163l.605-.117c.236-.04.236-.04.533-.04Z" fill="#fff"/><path d="M7 9c1.363.17 1.363.17 1.857.272l.173.035.364.073a146.136 146.136 0 0 0 3.478.66c1.15.208 2.298.425 3.444.652 1.004.198 2.01.38 3.022.538-.2.2-.353.198-.632.245l-.64.108c-.231.038-.461.079-.691.118l-.178.03c-.405.07-.808.144-1.21.222l-.164.031-1.293.252c-.545.075-1.03.015-1.565-.085-.068-.013-.136-.026-.207-.038l-.433-.08a161.992 161.992 0 0 0-1.262-.233c-.689-.129-1.371-.277-2.056-.422v13.899l2.155-.446c.426-.085.851-.17 1.278-.251l.147-.03.436-.083.25-.048c.597-.076

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	48307
Entropy (8bit):	7.981705570713477
Encrypted:	false
SSDEEP:	768:5H6KBZZtQTMpteJqP8+5W+AdwdZg1iYuCP4zFFn4/HUjSUIAtI73Bus3SRBEX/R8:5HlZZt1feJj+5W+YwHg1iYvPCFFniDfG
MD5:	093536C5D70ADE648E6654AD5613D509
SHA1:	707899F208B4148B5F311BFC0B903E3CB6043A61
SHA-256:	6053FA298C095CF8AC43D30D53ADE10D99BF856E072FE20D45E7C28AA3830184
SHA-512:	F76F7C2A10EA01B3E737974F893B4F4172D61600E569716085C42362DEC2C9DF5B5DCCD7392D0D5B8CAB4D53D4D04BAB09493C5CAD0ECCC32C40C463EE1EF1CE
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/df/9b/df9bf37ae9724608afe14ded56fb6423/df9bf37ae9724608afe14ded56fb6423.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................o..(.......!..1.6.G........)..r...`..a.+a.".c..F.FC..1..AXy.x.p.G..pt.0...DA...(0.s..p...............K.p....x...b.R....F.J.0f+.C:....&....G.BM.. .0Dx..L..1 ..~.bM..J.....s.m..8...<.$.&..pM.}....+c.....Q....o.@G...`.sMR.P.ez...........,.+..0.w .0..<....}.]G..Axy.W.MY.T.5.Q.,\|#.....8Rp......0.,&}h.._]T.G.O...fE..h....P....NPj1.\4.....F.q..B.>+.].T%.XQ%Y`..0..B.f....X................5.uP..'.... ..37..Z;N,=..>.....N.(o.~_.....*...........P...@#....PO....j.TJV.....#~.i.y.z.....y....I.n..i....F.w..t./..u....c....a...,......BY.-...$X..F-..Z.D[s5..Oah.s.q.W.~....s...79k...U.S.....\}...?[..p)...)...%)Yp%.tl$... T...R.1.....A.?../ ...c!.>..

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x333, components 3
Category:	dropped
Size (bytes):	55724
Entropy (8bit):	7.980712288141641
Encrypted:	false
SSDEEP:	768:+fZisqviFnIP3yIE2yrUnHdMo0n5tsx273Irfj2dg0My5AYWa/ktuYXc5cM:+fZifU6iICrCdMffs47Y72dg0dktC5x
MD5:	4E72443BE3110A7E258D8DF91D40CE1D
SHA1:	09CEDCBB0A52758AF60CEDD423E55330A9721F8D
SHA-256:	D12CC644FF055869615B97C66D7913C794166ABEDF3C78DB57F93C3F486CAE5B
SHA-512:	EBF61B8776C4CDF8FB33295B292C623036F9F9BD03DB6B5FC4900B84D2D8C8BAA9CF05B2BC15FBE824E39564B0DB39C99922E8D4CD91AFD93B97F348ED8D8166
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................M...."...................................................................................aw..W...M.l%.Z.w.......,....M.A.>.>.L..TzO.....E..qp......>r.~(\zS.&..pK..3.\|..^.... i..kC^....^-...VG.!N.......Z.q3.n.{E..B.>.kg...{MiS..+...e.........\|...p.:...s;k.H....6gR.I]....y.S..Q$u%.."[X.......N..t...._<t.&...F..o...&..,.,....{.r.86B..E+.\|...K..Z?9.....k.!...Nn(x.B#np......n..S>u..g...6^*...b^5....Odl.=~u.K.l...7.\l"So8ai...1ICd. ...]....HT.\I79....<;a.(P....\V..3.OR.e~....E..........c..7E#...l....K.yn....~..~.U.M...Q......R..=.;.....IG.......AB.J.Jj.&".DA...i.....<oM.Dt..4...G+.;YL....;....x.S.;}..o.J.RD.\.-..wzQ..`n...@....@F.........'t..)o6.2..h..7}7.0d]..z.Z..F-vdx~.l.3.I_?.n...d......}.5.p....`.........PQ.+.+1.r...16..0J..wB].z.e

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	567
Entropy (8bit):	4.794546756400398
Encrypted:	false
SSDEEP:	12:TMHdVz1jjMdhFUYLTcMPJO4oDCSb4sOZZ0XQduWhZFtX1+XbmqJyWUUtETu:2d51j/YLo4O1yT0gdbvtlfqJ3OTu
MD5:	BBD13C60676E3E326A2C079B57C3E761
SHA1:	BF615374B5547F6BC5D8B26628E393BD211915CF
SHA-256:	EF09E97F490E1C6F33AE5680B2618FE797F261CC43F777B61E604F65461135B7
SHA-512:	58C4EE893E7CB17148EC1C6DA92727F0A4DC39FDFE065986BA1903B17F0812E785F289171F05B9DF16961E42B9083DF4D0AEDB925AE5A92001047A573A5EB2E3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z" fill="#F2F4F7"/><path d="M19.643 7.042v9.387h9.387v1.633c0 6.085-4.934 11.019-11.02 11.019-6.085 0-11.019-4.934-11.019-11.02 0-6.085 4.934-11.019 11.02-11.019h1.632zm1.887 7.5V5.155l.421.016.354.02.152.012.255.025a9.391 9.391 0 0 1 8.136 8.169l.024.246.021.311.017.376.007.212H21.53z" fill="#9A5C93"/></g></svg>

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	70060
Entropy (8bit):	4.7651625630437735
Encrypted:	false
SSDEEP:	768:soUii2ukQHIsKQCsBum6tsTO3DNnYiRh6040borc8+wHY:sdii2+IOCsYmUsa3DNnYibe0cZV4
MD5:	1EEE8EE89DD11681EBE77DB29E2634BF
SHA1:	3B3B8A6B682CF7EB51CE10E9CB69A36DA7D374EE
SHA-256:	3C5E8C6AD66D889F3F73D3BD1D0F2E4945EBFBE47D28162EE206CD1B9E75D561
SHA-512:	BD9593DBB68699D7BDDE1B8DC8857F2BB62CC9DC5A69F1CBCA79496BFE1A3F2DBCFD1D5AFC8C5EC141F8316A3B02CE48DF786943B252DB8930AB2FDC888160BE
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/css/all.css
Preview:	/!. Font Awesome Free 5.9.0 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License). */..fa,..fas,..far,..fal,..fab {. -moz-osx-font-smoothing: grayscale;. -webkit-font-smoothing: antialiased;. display: inline-block;. font-style: normal;. font-variant: normal;. text-rendering: auto;. line-height: 1; }...fa-lg {. font-size: 1.33333em;. line-height: 0.75em;. vertical-align: -.0667em; }...fa-xs {. font-size: .75em; }...fa-sm {. font-size: .875em; }...fa-1x {. font-size: 1em; }...fa-2x {. font-size: 2em; }...fa-3x {. font-size: 3em; }...fa-4x {. font-size: 4em; }...fa-5x {. font-size: 5em; }...fa-6x {. font-size: 6em; }...fa-7x {. font-size: 7em; }...fa-8x {. font-size: 8em; }...fa-9x {. font-size: 9em; }...fa-10x {. font-size: 10em; }...fa-fw {. text-align: center;. width: 1.25em; }...fa-ul {. list-style-type: none;. margin-left: 2.5em;. padding-left: 0; }. .fa-ul >

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	386
Entropy (8bit):	4.834976892106139
Encrypted:	false
SSDEEP:	12:Yg+SsG5aqH/dnQwYMrJoltYy/tYy5vWoFp0Y:Yg+Le7FQsdEiY
MD5:	179893FD5B53F411C3861527FEA0291F
SHA1:	FA51EA61EC9A82BE55F6A3607355AA1F52CE1C4D
SHA-256:	B1410C548C3C3B1FB3D0207D8905741C7D30DCB0A4B8674B2CCB8294A8FEF14D
SHA-512:	DA49D1D803454784AF9F705276CD56A9F587030A6E822109547F8FF1A15B456186F5A0A39E3BF823F293CA0F2F1D8530358B632D87917FCC49007CD02BDDD528
Malicious:	false
Reputation:	low
URL:	https://api.bitpanda.com/v2/assets/1/details
Preview:	{"data":{"type":"cryptocoin_details","attributes":{"asset_name":"Bitcoin","daily_high":"60834.80000000","daily_low":"59290.10000000","high_52_w":"67417.50000000","low_52_w":"22788.10000000","monthly_volatility":"0.13923867","market_cap":"1176790965924.73762500","market_cap_eur":"1176790965924.73762500","last_updated":{"date_iso8601":"2024-04-26T20:16:59+02:00","unix":"1714155419"}}}}

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	616848
Entropy (8bit):	7.997798493527489
Encrypted:	true
SSDEEP:	12288:gt+1ekwBxhKyxKVBe52kSdbrrgpNYGj4UhGKamTvqc2TrwHWVFHkXF4R:BskoHVxus5OaMahVacycwrxVZkXm
MD5:	8C9F73D22711B92603826F6975F2CAF4
SHA1:	9DD719A3680B9869ABEBF77CB6AB86D3C93130EC
SHA-256:	5E699F5B049595013849DF4C90514F7DF7BC70DE4025BF08CC79CEEE4B7B4928
SHA-512:	69FC979ED0E342289FA50EAC961B85BD949421A6B2E7997FEBAED70B2F076011ABA7D65728211399CA7DADA292BEC7B8A17A28AC8EAC30269D4FF1D6A9F42946
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+...iWIDATx....E.E...l....p.B ....C....F...;.\|-yg...ud9x7...U]U......\q...o............x.<Q.@....._.H....@n..m\... #V.fS9..bQ.2+.x.&.A....`..)..j..Q !.lr.{.....3.'.6..6..@@I@.=.....l<Bp..........X@.#.M.....(..\|(..$NiL a.@....r.....w...f.%...m....D..c...b.=p./.=!.f...M.}x!.Me"+../..<-....~.{8.:.}...G..;...7.f.jH.Y..U..u.....}.A\...+..........F....!..1..?.@.....q...........uT......H....v..<<C........B.P\|..y...-O.e....a..h...>.z.H.[.s.../.:m\....'..]..:.x:...C..N...zK.)]G...........x...^.@..E.(........."..H../../.....\q.g.w..3........ _O.U.@.l.....R..)?....'..w...+.d0x/=../.p...N(....yF6..A.x+...S.~U.FZI.(...`~...C9..=...n(...!.O...c...{...k.g.Gb..M......B..E.w7T..]..].T.{..+(..]T.`..{.K. ..cA..C._.3.q.y=.&&....x.}.W.c...c~7..2s.....#.~.,`pI...R.....s...."...A~n.R9...T.%..U....4.}qP......n...s${6!..5..C.../g.y.4v./..~...y...6.?i.XVh..H+.C.......l..Izn..8.\<g.J..fX.'Y4..BNZg..!-...v..k...N.......v.&..

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	762
Entropy (8bit):	4.750453831572798
Encrypted:	false
SSDEEP:	12:TMHd64lWNxMiLjIlrTwUDgXf+fr9838DgXf+/hIDgXf+fr9ZQr:2d64lSxMijIldDgv+fhHDgv+/hIDgv+w
MD5:	58F10EF614A7C4C47A130B68568E17CC
SHA1:	FD1ED9DCA69533789BED068711DB8BF955EC4C64
SHA-256:	9F233D9765A4E5A6C7FEF78BA06725D29777F8E891A6CF8FC486A1D10FB8F409
SHA-512:	524111DFAA7AEBF0D3A116023D3E6D25E0F43DC757CE6F4F7CA9924D435901F329160D84758EAAB70A2328B8F29AE4CF85BEC3EA27648D33D29A88D38D2AD5DB
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/xpd.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#B5ABA0" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zM8.437 18c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73H8.436h.001zm6.75-9c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5A1.125 1.125 0 0 0 20.813 9h-5.626zm6.75 9c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73h-5.626z"/></g></svg>

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	762
Entropy (8bit):	4.74279305027894
Encrypted:	false
SSDEEP:	12:TMHd64lWNxMiLjIoIDwUDgXf+fr9838DgXf+/hIDgXf+fr9ZQr:2d64lSxMijI55Dgv+fhHDgv+/hIDgv+w
MD5:	681A635E9E3CFEA14B58C3267FF59D89
SHA1:	8F866188062A65FAEFEE26E120075C53E3663EF5
SHA-256:	529A028192E3DE84BC47EB367CCB64C592B94468010D491F045EB771B24A9D04
SHA-512:	AF8B4CA5C27B337142040DC7E51099C0868E195DE263902B445938CEDD69618EBBACDAFEB5FA050208A056EC03C47463F7103AFD0E0E980EA5257505C386BD30
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#AB9883" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zM8.437 18c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73H8.436h.001zm6.75-9c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5A1.125 1.125 0 0 0 20.813 9h-5.626zm6.75 9c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73h-5.626z"/></g></svg>

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1231)
Category:	downloaded
Size (bytes):	1232
Entropy (8bit):	5.168362577580185
Encrypted:	false
SSDEEP:	24:9M2Gd2LrOAcXjp0fJKOIkF6zMwTXJKOIkG/JWMQIkj7UQm1XdYs:62Gd2hspCcE6zZXclrL5XdZ
MD5:	C4016F55C515DE57E70301378AEBA462
SHA1:	5DF284CD6BAC382D7D775876ADF725624EC841C3
SHA-256:	DB5DD1BAFDF836925AEA010CF882B774DA68CBB9377403BB1012AA01124D9DD2
SHA-512:	E649B5411B69960E13EE2977FC8C4207BBBA8F63416E7A491D891FF78FDD044A726223C34DF325FE5BBD701D8E0C33F5806085F38D75ADDF6BFD645D4FC69372
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/js/WebCommon/Common/ExperimentsManager.js
Preview:	(()=>{"use strict";var i={};i.d=(t,r)=>{for(var e in r)i.o(r,e)&&!i.o(t,e)&&Object.defineProperty(t,e,{enumerable:!0,get:r[e]})},i.o=(t,r)=>Object.prototype.hasOwnProperty.call(t,r);var s={},l=function(){"use strict";var t={CurrentlyExcluded:1,FormerParticipant:2,CurrentParticipant:3,DidNotParticipateYet:4},r=["no_experiment"],e=null,a=null;function o(){a=!1}function u(n){var d=Math.floor(Math.random()*n.length);return n[d]}function c(){var n=t.DidNotParticipateYet;return a===null&&o(),e=typeof KeyValueStore!="undefined"?KeyValueStore.get(KeyValueStore.keys.ExpAccSelRedes):window.localStorage.ExpAccSelRedes,e?n=r.indexOf(e)>=0?t.CurrentParticipant:t.FormerParticipant:a&&(n=t.CurrentlyExcluded),n}function p(){return a===null&&o(),!a&&!r.includes(e)&&(e=typeof KeyValueStore!="undefined"?KeyValueStore.get(KeyValueStore.keys.ExpAccSelRedes):window.localStorage.ExpAccSelRedes,(!e\|\|e.length===0\|\|e==="undefined"\|\|!r.includes(e))&&(e=u(r),typeof KeyValueStore!="undefined"?KeyValueStore.set(Key

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	33337
Entropy (8bit):	7.960121985593582
Encrypted:	false
SSDEEP:	768:GqE7bPWwFRarBdILpFQUop4+mTD0pIeyM/NJrIft:Gq2Ww6BdyFQFpH6oIeyM/N2l
MD5:	924315727002B4A3DB3F284987F49CFB
SHA1:	19C1F4ECA8AF1227AFAE2A1947079052A931A526
SHA-256:	25FB7726D5C154F2269C0E01F0AAF0BC915DC8B627C521FD6A605F2A414DDDBE
SHA-512:	F4E916DA285D2C284F52735AD1A31222416D599003A72B12212D6A1137EFD4F26FE26BF3816141969209B15D058687D1C96198FAB0749F68FA1EA7496291FA75
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/e8/ad/e8ad60dd67c5bc3f2f133058d0b16dc9/e8ad60dd67c5bc3f2f133058d0b16dc9.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".......................................................................................v......6.{...K.~....h........p....FY.\|..'.......9..Da.kjP.. ...N...g.V<3F.q..NT.e....7...o....,...8.....`...R......#I....-.&.i..k9..U.w..yo......%C...x...@........%.#9:.....<3,4....v[s..d....K9s....%)...8........a.H../...I4..@1.....B.G...r...+.i3.%.P..Be....,>.............)RF..}$..I....#.[~..\|...d..w.....\|/v....K.Ae\...8.8.JB.............#...rLg#R.^..W....m.g<Z<....Y,.U...b._z......6...6.......@....I..%.#I.....\|..t:i.......d.li......4J.Q.F..J.ap8.n..8.........e...........n.].O5.7..9i;..j..........R.....}...(.........JT...\..5.*O..5(..CE..:..!r.G...-....i...^..a3.+.m..8.........j.5.+m.o..U_.}..C.r.k4...).-.i'..}.).s]..v.]...^\|.Z&\|.8.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1363
Entropy (8bit):	5.302341025231235
Encrypted:	false
SSDEEP:	24:2dGATLf3KO9tsEsQJa0kqwUthidGqMW6dj9cxVa6N1C3iXcl:cGAvf3KO9uE6Zqwkh6X6nqVzNSacl
MD5:	876891301CDE864081E9E069564258ED
SHA1:	A8E9CBABA791DBA4A238CC9CC5C432AD1EF84FE5
SHA-256:	0A50ECD4E7358C8DB37B88CF4C200EBB6C65D953B780C96C81A68CFC5EC8CD80
SHA-512:	F079FF97312D8873713DF015CA2F93EA03A79B0E794AE82A5D5D0BE5B3F3724D9FC321B39442883CBBB1A8A9D02FA5FA13B7AF14C8E91319DB328BD939955C01
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/BitpandaClub_36x36.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#F2FAF6;}...st1{fill:none;stroke:#27D17F;stroke-linecap:round;stroke-linejoin:round;}.</style>.<g id="Group_1310" transform="translate(-611 -200)">..<g id="Group_1082" transform="translate(406 -97)">...<path id="Rectangle" class="st0" d="M223,297L223,297c9.9,0,18,8.1,18,18l0,0c0,9.9-8.1,18-18,18l0,0c-9.9,0-18-8.1-18-18l0,0....C205,305.1,213.1,297,223,297z"/>..</g>.</g>.<g id="Group_2344" transform="translate(1.243 1)">..<path id="Path_29" class="st1" d="M14.1,9.9c0.4,0,0.8-0.2,1.1-0.4l0.5-0.5c0.6-0.6,1.6-0.6,2.2,0l0.5,0.5c0.3,0.3,0.7,0.4,1.1,0.4...h0.7c0.8,0,1.5,0.7,1.5,1.5v0.7c0,0.4,0.2,0.8,0.4,1.1l0.5,0.5c0.6,0

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	55818
Entropy (8bit):	7.975134248590787
Encrypted:	false
SSDEEP:	1536:M3MPdwPjoon/qXCesjSAKsrGfrA5Vq7D4:7wU2nesjSAKhy84
MD5:	140BC4285B4926CFE500933821A296E5
SHA1:	FDFAC188B843B53AC77DEE4379E1004D5F1ED906
SHA-256:	80CF41B1B1FC0E57C22678E6B5AFD156D5235FD803CF9763B33B39DF5BBD249F
SHA-512:	6121694337F62BA6E458B35E3FB693F44547B96AD3A1B578F9E307D0D9F292D45CA1425903DC6FC1E46383EC0ABFD383F55BB008B85FB88641E5E66F6A2A8762
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/6a/e3/6ae390dc2e135c79c6ea8efabe9abbf4/6ae390dc2e135c79c6ea8efabe9abbf4.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................{...z...j7]..>.h.(.d3.[.?~.<.-.Vy..;...............R.&..[......!O......r...^\....H.N.....b...">^.Y...z/.o..x.o...4~...~.s..}J........>.U.s_.].L.a.7.`.>&.xos..//...d).....-Q.^...l..C..Q.O.%.}Z.Mo..n..zk..~..^?....[..g.9.+..T`.\.A...mZZXk./]..OQ^{......).d.H.@u8..{r...w<l.XZ}Z.Ij..w...Wr....~~..g........-_R.VS...5:}..-2..}.((EX...T.\...m.k_=.?`.[J..........'.X.....3.......gNP&....3............B.-h..kI...~..w+.dn3.V.k...F.......m=.;m..J..k....G.....N......`...#?.9f2..weU....=..m....r..E..p....I._......(Y_u..S...eC.....F).w....m/..).eq~{.i.ea.x...\XwFI6.7\.U8L....W.$,..`..+.CA....."E.I...uW..+,.vS5......T..W.K.R.2.\OF....=Z.}..-.m..*

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	70571
Entropy (8bit):	7.982319117433967
Encrypted:	false
SSDEEP:	1536:/wy5+HQZt5i61tjJPCodpc8i/akRlwRdj7qwAbSSVBEsI:Yy5+m66wo3cqkRyRd3qwAbSKI
MD5:	545544DEB628511A2E062F3FDE33F9E9
SHA1:	32C1FE7968477BCBB78EC5EC42BCFC51B43DAB94
SHA-256:	1C8A518CCC127B1DE4F9FEB82F8FFF77751413C920C4677E9EC3C4484C13EB5D
SHA-512:	E4957BA0D6C0E43232FB96BE0B4F49CE796F5226A858418DC6D8A008CA9331EF8BEF45E596B0F43104AFD675561BFFAFF091C575F3822158ABA1FC106D24524F
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/05/d2/05d2af3ecc1a6d545c293968589b68fe/05d2af3ecc1a6d545c293968589b68fe.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................../...L....cUb.W..S..F._..L.@c.'k.M...je..8.. ....}:...05.m.^h-Z...`..9...4.".D.............i......s!.Zk.Z.{.>..C2a..0.-......._V."v.VkIC..o.'...t.....J....S.M..[F. ..3.....\..X.4..12........CmGb.......t....{Y...!.b.b0~?...A...`._..p..VD.f..m.x.r..Z...w.....q.\|.\;)2og.vA..?.C....KG...Q.f.. m,0..r.l.[......MH.J<..G.Qr.mX0..ZO.Y.S.t.....!.g.\N..XE..c..<............D....F.(.v#d..a.TWo...b..>~..7..\|[.....]..S.e.......~v....<(....C.I..&=...X&...a...#..B$g............bW.e../..Gl0.+^....9....q8..w......?K..w..e./.8.. ......D7.8..\|M.P.x.8..$..u7.<..e1..C...*...x.y..........7.k..0.S...Hc...H.bp1."..)..U...rUg.o.....d<uE.[..L.R..'..dy....ad..F "n

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	1157
Entropy (8bit):	7.754335270048311
Encrypted:	false
SSDEEP:	24:hsMvxoQTA+IrcasgT1eWjUQ9CSUYTmGU7vNSgZNQbhfBfPqF:G+TTAzrcYToWjUSUB7lSgZNQbhfJPqF
MD5:	E4DEB81E09A48FA74323FC5F6BC3E617
SHA1:	4A22B5F5F3B274FE8E9D51F9A2073BB0AED15CE1
SHA-256:	BC8F64C8A5DF3A65304E7BF3FEE60BFD78858D072D1232A42B4AF6836ABE1F32
SHA-512:	8BF8C9239659A99B7E4781B6088C1D7DD21C5583F040BDB0226C9C77E2D07062C30D5BA87370F90ABC7B710E62ED2945CB27E91AB282EF55716BBF3CD2CFE089
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............7.....iCCPicc..x.c``......$..PPTR.........~..............\|@...T.T.......... ..H...@.... 6JI-N.._.8....(...d.$e... vvH.3......S.Z....._PY...Q.`hii........\Y\..[....._T._.X...T....x].K...3....T...@......!...Ee`.D........C.C"C=.....o...].K.W0.c.c.b..t.Y.9.y!...K...[.z.....,..}c.g......3....#..nM..<R<Sy.x'...M.._,.#.C.U..P....^......_.&..._.....<&./--}B.LV]..\.........JzJo.......T;.......A..$.T]+=A.W.G.........2..4.`..b....:.\.8.@;W{k.cG.'5g%..Wy7.we.uO]/.o..w.`........AK.w.\.}...!.i...].33vO...D...5.7.92,23..f_.e..(.T..X.$.tU.....]5..^uS..6.5.4.m.k+l?.).U.}.W.....D.I.'...?.........I.{z.....D.....,s...!.N.qY.o..m.L6o.j.m.....w..9./l...9.~.i?&~\|.I.S..$..u~.E.KG.$^.w}.M.[w...S...a.c.'..e..yy.u.[.w.>4}2......?.~............4.......\IDAT(.U.jTQ...g.s.8!..D..........B.ID..D..D.+-.....^...0.,...A.BD.."&Qqf.-...j_xY+M...n>....N....e...w.H.e..dC.e.E:H!..c...).8_.6....N.`.)..U$.:.aKj.7u..TD...QM..v.2...!..!$[.>.{.m.Fw.U ..=....B

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65449)
Category:	downloaded
Size (bytes):	93675
Entropy (8bit):	5.24620324970517
Encrypted:	false
SSDEEP:	1536:1UXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:MYeJpN2yefjMBlPV00/g
MD5:	17E942EA0854BD9DCE2070BAE6826937
SHA1:	434CDEC1669F2C6C7406297A72120936BC56ED52
SHA-256:	72194D152571DD375C4365E5C3B4AF9DB2C06AF0102CED18FCB062597D38BE26
SHA-512:	3F0439FA3817C71A6B34673CD32707137B29823E93B8389E1DEFF24E46C427E5396A897B753BA98BFE156F01C7CE54155BBED56F418B388B22622807802E6F72
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/vue/2.6.10/vue.min.js
Preview:	/!. Vue.js v2.6.10. * (c) 2014-2019 Evan You. * Released under the MIT License.. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self).Vue=t()}(this,function(){"use strict";var e=Object.freeze({});function t(e){return null==e}function n(e){return null!=e}function r(e){return!0===e}function i(e){return"string"==typeof e\|\|"number"==typeof e\|\|"symbol"==typeof e\|\|"boolean"==typeof e}function o(e){return null!==e&&"object"==typeof e}var a=Object.prototype.toString;function s(e){return"[object Object]"===a.call(e)}function c(e){var t=parseFloat(String(e));return t>=0&&Math.floor(t)===t&&isFinite(e)}function u(e){return n(e)&&"function"==typeof e.then&&"function"==typeof e.catch}function l(e){return null==e?"":Array.isArray(e)\|\|s(e)&&e.toString===a?JSON.stringify(e,null,2):String(e)}function f(e){var t=parseFloat(e);return isNaN(t)?e:t}function p(e,t){for(var n=Object.create(null),r=e.split(",")

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1204
Entropy (8bit):	5.145377075855716
Encrypted:	false
SSDEEP:	24:2d64lk3NLdlg+fMyN4Hj8HE4jscjsll9kjslle:c3MNLjiEEW
MD5:	CBD65EB6C7F2E56BE4230DD47E55F6AF
SHA1:	31FFE6C3A0662476816DF666B45B90B438E8D04A
SHA-256:	610D42C4FC43A393F0E72C39B8FB3255957C5347D2650828D79C4316EFF65DD2
SHA-512:	B5BAF508F8F706C72FC2E69C1044EED539A997925B20141ADC4A019B764576DF8996B506ED71A7E6A7E79E0B4A2BA7479FE91E71C88DA29A513BFF061CC84B70
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201312.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_1312" data-name="Group 1312" transform="translate(-611 -341)">. <g id="Group_1271" data-name="Group 1271" transform="translate(-1 188)">. <g id="Group_1080" data-name="Group 1080">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(612 153)" fill="#f2faf6"/>. <g id="Group_1075" data-name="Group 1075" transform="translate(617.767 156.732)">. <path id="Path_816" data-name="Path 816" d="M16.309,8.994a11.386,11.386,0,0,0-4.076-.726c-4.418,0-8,2.331-8,5.207a4.515,4.515,0,0,0,2.308,3.656L5.23,20.173l3.6-1.992a11.625,11.625,0,0,0,3.4.5c4.418,0,8-2.331,8-5.207a3.8,3.8,0,0,0-.852-2.341" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_210" data-name="Line 210" x2="5" transform="translate(9.733 11.768)" fill="none" stroke="#27d17f" stroke-linejoin="round" stroke-width="1"/>.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	74920
Entropy (8bit):	7.987588967147993
Encrypted:	false
SSDEEP:	1536:BpS2gTc+RJyoOKx2reHJa7f7drf6kLbyC+/0u/XEhYyMLuVTo+w5N/IA:BpTwcUyBeWd6ObbC/aRYCTA5n
MD5:	2911569FE9936EC0B0AF14768FCEC2FA
SHA1:	120E0D63623B49A2D4D539A9CE2C5D188716DE40
SHA-256:	C541C8DDC119691CFDB1DC2C0D4368867EE47E1E897CE70E569B7904EECCFB73
SHA-512:	F25A3DC69A02CF4CD0D9AF8EB03D1C0D3CD7DD9D599100EDFF244360DB4EF440BEF69B2D86560E2938BE81B194A5BAE9AB37C461208B549B53DD0AF1578F3383
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/1b/2e/1b2e7f907e0eabd02ddca00c9a3ca2a4/1b2e7f907e0eabd02ddca00c9a3ca2a4.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................G.4.sF.]..1%\|.%..M(g....+..^......v.;.w./.$..e..u'P.FI....BU.v..v..e..Q].Vx.......).[....BG1.dJ^....d.8k...t.]..k..Yc.R....N.....?.c0nto.=3s..aQ.R.....mZ.t.q6..`..-..2..J....&.S..J.;..~.$..YH^v.:......v...*.@...;.._`b..."...o.+.Zw..z.3.Eb[u:i.(.,....T..{I.s..%!<....#i..f..:.i...BI!....7...$(u....;....p\|U...n.s....'._.zh<dX..G...W+-..]c.I...ZF...$.f).j.........z@2V...v.......G..b.V.X.3Y!WI-_);.W.....-:x.!..]Nb....mV@...q..%#......\.x... ......(.[.x1.upSp-......o..kw.$i.[\...R...#.?G........a....K1.&.GJ.c..'s..\.....\|j..8...y;.5.{.....c..q8}`>.@..6.E.#2...E.2../....1D.=<l..=...]..P..r......I.pvv:~..@.d....zU.)]..q.e.%.W........O.Z36

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/mediamath?uid=6e3f662b-f35d-4100-8a7a-d4dc11b8af80&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	71138
Entropy (8bit):	7.985489554280049
Encrypted:	false
SSDEEP:	1536:LjHV6o8+//LH9JNWOUOeiQQOGajDWybOtjRebrC5yN+:f16oP35JN17dOZjbaDGrQyg
MD5:	86558220890D320F5717916627CA4B82
SHA1:	D98877374F7133155F84A9F868071F4328D27038
SHA-256:	64ECBBEF607C23AB5D60CA9FE1E61F1E1AC6FA293CD9B32469C13CE3B1C89635
SHA-512:	D5CE15D6E69FF8A40DCA95FBC3AD6FBAB5BBB9E60F2C9C2EBA7DAE0298F56D985E0DF67BB7DF257EDBFE03ACDD4EBF4C33F4D47F7C031D2E3A090375BD586689
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................z..7Ts.u...rb.R... ...[...a.,&RG.N.+..~.t......x.9.(H...M..J@.\.;.,...\...a...n.....N..2...w..D...GX.c.x....~.-}..P..w......eo..2.83G..?6.Q....<tH..44..f.M...,\|...C^.uX..8;.2.fs.....x.s.Z.x...........^.&..IG..!..TRD.E...+..Yl+.\.....h.N.&R6\|.S.'Ka.G..:..N....4.w.U....d5.....X,.^.o.'=I..K....LU..Z..!V&.m.W..Wy.(.w.B6.......7.<.L..o.&.6.Cs.9........../..t(Uo..S....F...U....v'.A=..^p.......kECl.....d...'..I.+...%t...R<4..%5h......O.o....+....&BNx.<zt.+.U..).~..\:.1t0Z..D..@..>.I..x..u..Zq....{WI.2=J.G.OY...s..u...4;V..X.v'F.~.}....L~....0.....Es.....i..u....s+.F..-R3....3.....\z.K...].Uo.H..'W.....N .`..@.8....H..5.k...-.L?\>L:#2a.R

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	567
Entropy (8bit):	4.807794987902646
Encrypted:	false
SSDEEP:	12:TMHdVz1jjMdhFUYLTcMPJO4oDCSb4sOZZ0XQduWhZFtX1+XbmqJyWUUtETY:2d51j/YLo4O1yT0gdbvtlfqJ3OTY
MD5:	A35C32EC06F2A3DD54B0F95C86C6C02F
SHA1:	1A31E46578ACA638FD7968D344ED0682850D3D38
SHA-256:	E4A39820D688FD21F3235947E31DEB3F520DBB38C3BD96AC5BB423D368AE659F
SHA-512:	D6B74B662A7E97E4A940DB27D32536E6921A7F043B4C07674604C741D08507AEB608005FE32FC6B4C6FF12DD92B16AE0A94B497349A4FD902670D61B127760F1
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/ftse100.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z" fill="#F2F4F7"/><path d="M19.643 7.042v9.387h9.387v1.633c0 6.085-4.934 11.019-11.02 11.019-6.085 0-11.019-4.934-11.019-11.02 0-6.085 4.934-11.019 11.02-11.019h1.632zm1.887 7.5V5.155l.421.016.354.02.152.012.255.025a9.391 9.391 0 0 1 8.136 8.169l.024.246.021.311.017.376.007.212H21.53z" fill="#DD4D4D"/></g></svg>

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1438
Entropy (8bit):	4.3733873195212105
Encrypted:	false
SSDEEP:	24:t44lSxMijIb0q2k665Pe60WjzQiwbKf/cfBnqBsxphmXxd8Wp0an:3MAf6EzAQf/QBnqB+uXzp0Q
MD5:	7254FA7385A48A72BE30661BFB3A9615
SHA1:	2B450535A015D5246C80100483B79F6A25D738FA
SHA-256:	5861263BDD759DC9BA0C47F2A4760B555F7BE3D52ED803B6107832853030DD5C
SHA-512:	7425DD3162480CD08F7CD453F2DB0D963E4311767D0D265C34BD73698D1E26B70741819ADBB8B643280C09EAA4F6EAA88049231EB08CEE90C78119F8A4EB8D37
Malicious:	false
Reputation:	low
URL:	https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/usdc.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#2775CA" fill-rule="nonzero" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zm-3.375 5.85c0-.422-.323-.66-.731-.534C8.437 7.059 4.5 12.164 4.5 18.183c0 6.033 3.938 11.123 9.394 12.867.393.127.731-.113.731-.534v-1.07c0-.28-.21-.604-.478-.702-4.317-1.575-7.397-5.71-7.397-10.561 0-4.838 3.08-8.986 7.397-10.575.267-.099.478-.422.478-.703zm7.481-.506c-.394-.127-.731.112-.731.534v1.055c0 .281.21.604.478.703 4.317 1.575 7.397 5.71 7.397 10.56 0 4.838-3.094 8.987-7.397 10.562-.295.098-.478.394-.478.703v1.055c0 .422.323.66.731.534 5.456-1.744 9.394-6.834 9.394-12.867a13.449 13.449 0 0 0-9.394-12.84zm-3.544 3.839h-1.125a.564.564 0 0 0-.562.562v1.744c-2.222.31-3.67 1.8-3.67 3.698 0 2.461 1.49 3.418 4.64 3.84 2.138.351 2.742.815 2.742 2.025 0 1.209-1.04 2.025-2.489 2.025-1.968 0-2.615-.858-2.854-1.97

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	4.947593417315491
Encrypted:	false
SSDEEP:	6:2LGXV0Dy0H2lTeufaqW4UWGafcJHfdJlsW6RGgG+KqIKfHNGSfJGUWNeif7fH7qN:2Qq32lTFJ0lfdJll6GgGXqNtfJGPAKbu
MD5:	E49974753A246E01B98F5510661C3633
SHA1:	7D8BD768F39DDDD3DC8F551E055287ECD31B3F38
SHA-256:	C8D93A7B5E9CE5F2B1591F5D15F4BAE1A3933232D7A14CBF6FD87F969BCB24B0
SHA-512:	58DA04F286829B7BE2CE34B19FA0141AC45D0A4617DD680E40E95D8EA2B7F923B0B329432C737C9F64DAB2E0EA370F1D44ABF1AB5C3973444787700D802F65F6
Malicious:	false
Reputation:	low
URL:	https://count-server.sharethis.com/v2.0/get_counts?cb=window.__sharethis__.cb&url=https%3A%2F%2F1movieshd.cc%2F
Preview:	(function(){window.__sharethis__.cb({"clicks":{"all":3700,"amazon_wishlist":1,"email":10,"facebook":964,"instagram":221,"messenger":5,"quora":9,"reddit":2192,"snapchat":92,"twitter":202,"youtube":4},"total":8526,"shares":{"all":4826,"facebook":512,"messenger":1305,"reddit":228,"twitter":1304,"whatsapp":1477},"ourl":"https://1movieshd.cc/"})})()

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1080
Entropy (8bit):	7.609663187136788
Encrypted:	false
SSDEEP:	24:sRpKL51ZRUA54kSqvwt7iYTulbB5A8+bAzzI+aD01:so7wkZrB5A8nI7I1
MD5:	1225723EF98D1A35160861FC1DDF1322
SHA1:	A23900770579FC926E5296EB6191B0B3F3007238
SHA-256:	11046B58A6884E47D0A5F6719B25C1D1E5482D68A91028899A903D0308A91FBA
SHA-512:	0C132631653A7CB5E5838AF0CF0E277C33FDCAA50D513BCFF0E8213E2303F2FB18FDC9063B7736C1C13BC3112A8545560FEA4403A0A67506859E56A649B0968C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE....@P.@@.@P.@P.@J.:P.:P.@L.@L.<L.<L.@M.=M.=M.=M.=M.>L.=K.;M.;K.>L.>L.>L.>L.<L.<L.>M.>M.>L.<L.=L.=M.=K.=L.>L.>L.>K.=K.=L.=L...........................................................z..z..ny.bn.an.Vb.Ub.IW.IW.=L..D....)tRNS.... 000@@@@PPP``oppp.....................T......IDATx..mw.@......J5Zj..f.-E+..@.....?H.eO63...78'....R...1.`>.Qx@..J.'.....pxZ.dZ..L+.".KQ1..%0.Ev.$..H!0(...X..I./P..X...^.!..'.....IHUzJ.A"..r..?..3..)DL...>....Jg.9.!2.k&(wL."}.Y...Cde...y]f.R.e...^.!..s..d si..(...2......!3..M..o..e....s...pe..!OH....=Q.9.k.1$.).6.../D.."H......y3E.Y.l.%0....:...f....1..=...se3...`l7\|.....W,M.Sg..`...QJ...2.9{...)6.UW.W-ca..j.....K...u..2fG.!..M.!E..N=C.)..}.<.\|.;.`..z..}..'.._......rJ....-..&tDDu....@......v^......w.p.C6.1u..7.noC[N....YRi..!b,.>N._o=....l.._..d..n.e.y....z..!G.]H...-<.D..<..u...<:...]._AR6XMz.qJ~.F.N..G.9%.....X....x...M.n./3..".6\|..G.A.'......

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	24856
Entropy (8bit):	4.654243973152658
Encrypted:	false
SSDEEP:	192:Y8FeB/wVIznk1vn00CndpkD2iPlMdtqImkT3OIB1UKDQ:/eB/wQnk1vlApkD2iPCLBeKDQ
MD5:	49218205A7FBE4B6B87FDE607B0C12D0
SHA1:	B467F049B207560EBA60CBC3B7FECBDC7D471711
SHA-256:	40E031494D2927E4CBA7CAC7D7D1426E0DB48C5A3E4FE7C51F7ADC31BFFEE5E2
SHA-512:	ECCE20D26AAD0EF7B1C9047C2F4198A662CEDB39C54D3D9DD26A64FC1EF003447C2842006AE859DA151AC2329C10C7D6412BC2C36319DDFF79E27AB2F22BF57A
Malicious:	false
Reputation:	low
Preview:	{"data":{"B86C034B-EFE3-11EB-B56F-0691764446A7":[{"type":"candle","attributes":{"low":"60114","high":"60194.8","open":"60161.9","close":"60172","time":{"date_iso8601":"2024-04-25T20:40:00+02:00","unix":"1714070400"}}},{"type":"candle","attributes":{"low":"60171.9","high":"60304.5","open":"60172","close":"60304.5","time":{"date_iso8601":"2024-04-25T20:50:00+02:00","unix":"1714071000"}}},{"type":"candle","attributes":{"low":"60208.1","high":"60355","open":"60304.5","close":"60232.2","time":{"date_iso8601":"2024-04-25T21:00:00+02:00","unix":"1714071600"}}},{"type":"candle","attributes":{"low":"60200.8","high":"60255.6","open":"60232.2","close":"60247.8","time":{"date_iso8601":"2024-04-25T21:10:00+02:00","unix":"1714072200"}}},{"type":"candle","attributes":{"low":"60247.8","high":"60312.4","open":"60247.8","close":"60303.2","time":{"date_iso8601":"2024-04-25T21:20:00+02:00","unix":"1714072800"}}},{"type":"candle","attributes":{"low":"60166.7","high":"60323.7","open":"60303.2","close":"6019

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1182
Entropy (8bit):	7.599328535837399
Encrypted:	false
SSDEEP:	24:vnwdggO/iUWoPyoKaKBf+c+ub4tjLmoaMCKodoLnQSsNj6v:/6UWobuH+ub4tXmoxtLQKv
MD5:	930472995DD544191165591E392F6224
SHA1:	F295AC491EEB0A4D461F5E365244945144BEDDB5
SHA-256:	19239CEF09D24E9312BC336CE7B2DB3A570FCE0311C09FF1A861BAE3BDCA117D
SHA-512:	2622D50895FA9002D6440B3B26C7F3D44CD454F01D498AF302BFA2882CF3C6617F2F4B3FA996466E115533D85F2DD8E0F0EDC31A147F9BF8542B8B63AE9DE30A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE...............................................................................................................................................................................&]X....tRNS.... 00@@PP```opppp......................%.......IDATx...Z.@...C........b.G3.`h%...A......2...e2K..a.:.Y............}..wZ.......z{..Q....f.G........Z....-.#t.......H.P...\h.{....R...}{>......y...q..u...?.s...\Cj.....(.w3+5.......m..6....dq..4...B..C..K....ea.E..,'..b.%..;4R.)O....9....u..9..]....V..}?..j.aMVf3.K.F.6ke."..r...Aim...,...<.lnM4.....K.s.RT.B.Mx...Io...4..8C...k.U...@T............C.o.d...Ss....4."..L....eM..5.[..5..B.G.-.2..a....!V..DU....s..x.@..;..ILW..u4..*..1ete .Nm4.............4...g.B......<.&..+...Q.%Oh...P..........Rw..-G..M.X[.v\|].)...<1I.V....c[...I..b6..q......jqY..\|......V\|d._}.f.2.U...G4@...2(..b.L..,......G.]....C.MJ.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	78049
Entropy (8bit):	7.988161194056327
Encrypted:	false
SSDEEP:	1536:VqQHavFFFZ/mQL0z8rcuGzxKsA+nLmbe0dAhcDyG7xg0nA19ok:VcFFX0zru18n6m9G7K0nAN
MD5:	ADA14FC5E8E90B57C012F94275F1CC00
SHA1:	59152E6AD5EB37C6030DC933724741D3C209CEDC
SHA-256:	94AD25B684BDB82A8653881C707DA0F22F6F37AFD40BA6ABF0B2A62BD649091B
SHA-512:	1BE94A0D45CD8F27BE1A6F8A0A85E559C8CFC44A9D2AC5B9FB4598ABA7A34CB50665908C0D744E01D5F1464C9BA91F5D153E22FF132D3D33177DBD4282E07C4E
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/25/c0/25c067899dcfb20d6af8a1866c46210b/25c067899dcfb20d6af8a1866c46210b.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................^..O.~[..L.!.f......E.:....P.Q.F.h....'\....KBE.B.......z.H.Or.y...(.E4....I......{u.W......=o..!.....E......._h..C_[......[.s......^.J.......Z6.....d.... ....V.%My....S-....E/..4B.7......G....HJ..).-....A.!wn"..{.....}......X.Fp.4....hFO\k{fA.i.._4.L....\:%..D.{7.Q..w.".~.T{.8l..>....B.E.a.&.....$M........z-8.....O.rwA..[.f....lj;......F.n.....e%X...G.O..=..vL.#...G6$...aVV.H...E_..O..]6i....4.X+m-.....2..O.ye..?.......#.KN..\.0.VL....V..l..bb....N5.)c.}.Z...d..h.....p..Q4.%..a..n9..E.....)..q.../......bcjD".yL...Y\...#..D.....QpK....v.]s.x...A6....!..B.I8.A...,#.P.q..VwH.vo...i.u.Y......#.....a.P.WLh..1bU..Z....!~.i4V....R.._.WV.D.Y..K._.\|.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	7.616694052365146
Encrypted:	false
SSDEEP:	24:5P3L9GYOdYTem6v1XfVMtUdwbf0SGSQjfOE7:5PRGYVTefvZfVMt/bSj2E7
MD5:	EAB34847BF1EEDFCCFD33CA59B12CC75
SHA1:	EED6193C1FA746AE80FE069B16AE4C79695FD4C0
SHA-256:	77F43F8D9A23F73693B19C09B2BCDBDE175421466E19047CB7005B81F071F821
SHA-512:	866FEDA291255D97F975C1302B36E4E1F68B6D6922C1D1B39B4322E9C3B2EDA40A617D0A29922CC8DCF46AB8FEB76BC84D7438A728E5035249EF2233AB407C0C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE.......................................................................................................................................................................&.....tRNS... 00@PP``opp.................[....IDATx..ms.@......V .-m...m."...X.....NJ.......{.....4...l8.LS.'.....t....6M/..)(h.Z.2.HFa....nQ.....r....X..zKBK[..p...W....F...]O....ID.+C..zK&.."H.......u.<..[..6d3..hW2..mcr5V...'Ks#W9..hs....3g...... .3...7..5..%..U.Y.7.Q\..S.^..E..F....j.Nx..~`C..... !.W..wgkyR...jzC.."h.T4Czn..}.Ay-.P.Ig0@..Q..xq...ib.g'..9_....6M..9D......}F"...83.D...&.T.B.p..........9...>.....5j.i}$..R^i@jh..."A..h.......[.2....(e}.Ts.<1UQ...9.M47myli.>.O......^....P.~..\.<.A/.vV.<....\.j.\|.o...h.5.!..,.L.+4.....r...;.q4.A..~r...}..5.;.......)..4.m..B.m!O.".!F...."..3...rF....&VN..w.^B._..I@.P.O......}.......c5.A6Gp^.S....N..."......ck1h.:.C.3l!......7AO....

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	86927
Entropy (8bit):	5.289226719276158
Encrypted:	false
SSDEEP:	1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
MD5:	A09E13EE94D51C524B7E2A728C7D4039
SHA1:	0DC32DB4AA9C5F03F3B38C47D883DBD4FED13AAE
SHA-256:	160A426FF2894252CD7CEBBDD6D6B7DA8FCD319C65B70468F10B6690C45D02EF
SHA-512:	F8DA8F95B6ED33542A88AF19028E18AE3D9CE25350A06BFC3FBF433ED2B38FEFA5E639CDDFDAC703FC6CAA7F3313D974B92A3168276B3A016CEB28F27DB0714A
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)},

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (325), with CRLF line terminators
Category:	dropped
Size (bytes):	3049
Entropy (8bit):	4.92804102330845
Encrypted:	false
SSDEEP:	48:t6FpCtaDh6I0w1N0KvkWihHvzvSvmsSZUxUlU0U4U60UgQUitU0Uz0xWxXLqOzek:EFc+h6VMN0KvGbvSvwqSOt4U6tgBimtR
MD5:	10FA75B2017BE57A28D5FB01179CBCA8
SHA1:	303EC367965E9F9D4F9D2909AEBAD079D58A0EA0
SHA-256:	D86A881DF6FC60C5ADAF89AC0C881A9F9F551584DA49EDC281A3C795671B8541
SHA-512:	5697ABA1DF1CD79188B9E1C004CACB3FD77507B15213B69F097D35E0610FF83E6D007B759117615B54BEF96EFD2EF2BF63A41A4E44925F9ED86873E3D282950B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>..<html>..<head>.. <meta charset="utf-8" />.. <title>loginHeader</title>.. <script src="loginHeader.js" type="module" crossorigin="anonymous"></script>..</head>..<body>.. <div id="loginHeader" class="header-login">.. <div class="header-login-wrapper" :data-lang-select="languagesEnabled \| toBooleanString">.. <div class="login-logo">.. <a id="logo">.. <svg id="Plus500LogoSVG" viewBox="0 0 120 30" height="60" width="240" preserveAspectRatio="xMinYMid meet">.. <polygon points="63.16 4.08 59.68 4.08 59.68 1 54.48 1 54.48 4.08 51 4.08 51 9.22 54.48 9.22 54.48 12.3 59.68 12.3 59.68 9.22 63.16 9.22 63.16 4.08" fill="#0C2780" />.. <g class="logo-svg-main">.. <path d="M19.7,22.92c0,2.35,1.32,4.95,2.7,5h3.1V10.82H19.6S19.7,20.13,19.7,22.92Z" fill="#0C2780" />.. <path d="M37.35,24.82a.78.78,0,0,1-.8.7H34a.9.9,0,0,1-.9-.8v

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30007)
Category:	downloaded
Size (bytes):	30008
Entropy (8bit):	5.346125389886836
Encrypted:	false
SSDEEP:	768:OSvGk5DgJlQI+j0zAxNgQU+3qLqsqBe+pLRXHZ0Sx30osHtbE:d+AsJgxGQ/3qLqsIpNXHZ30o8tbE
MD5:	77F020BD5325E586EB45F33967C58305
SHA1:	AB83B39ECE07896784DA0C6921413861A2BA3E6C
SHA-256:	FE4F5215C75DB6C8300E7DCC5BB86A9B64EC2CAEBD1D15CFADA4172FD73797EE
SHA-512:	11A5FDAD08838D8C16592A346BDD15198EE914A7D5BAA33DF3258BA77FB3A9FF8AEC78BDF4DD69802DBDFF2916E515B063A269C132F271A4A521323AE9D59384
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/strings/de/resources.l.js
Preview:	(()=>{"use strict";var s={};(function(n){function i(t){if(n.strings)for(var r=Object.keys(t),e=0;e<r.length;e++)n.strings[r[e]]=t[r[e]];else n.strings=t}i({LangCode:"DE",strADVANCED_TOOLS:"Fortschrittliche technische Werkzeuge",strAFFILIATE_TEXT_FINANZENNET:"Vertraut und empfohlen von",strAGREE_AND_REGISTER:"Zustimmen und registrieren",strALREADY_HAVE_AN_ACCOUNT:"Besitzen Sie bereits ein Konto?",strANDROID_APP:"Android App",strApple:"Apple",strBACK_TO_LOGIN:"Zur\xFCck zur Anmeldung",strBUY:"Kaufen",strCALL_MY_PHONE:"Per Telefon",strCANCEL:"Abbrechen",strCAPTCHA_MISSING:"Bitte f\xFCllen Sie die Verifizierung \u201EIch bin kein Roboter\u201C aus und versuchen Sie es erneut.",strCHANGE_PASSWORD:"Kennwort \xC4ndern",strCLOSE:"Schlie\xDFen",strCONFIRM_PASSWORD:"Neues Kennwort best\xE4tigen",strCONFIRMATION:"Best\xE4tigung",strCONGRATULATIONS:"Herzlichen Gl\xFCckw\xFCnsch!",strCONNECTION_ERROR_NETWORK_FAILURE:"Anscheinend gibt es ein Problem mit Ihrer Internetverbindung. Bitte \xFCberpr\xFCf

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	875
Entropy (8bit):	4.961773334929131
Encrypted:	false
SSDEEP:	24:2de4lLNH1uaSfb9JfxhJeKBISChJEmBHxhpJnSgyRMG:cb/PahJ5hvBIhhimBHxhjSgy
MD5:	8E997B7E5B9CD25F29F1A81EE8FD285C
SHA1:	9CE531A0BE26209196F1E0F65B0AAA378B8E3220
SHA-256:	0D466683B926965C039AB4C039CF91C934D91C85B5C22CBE4E7366439C58B650
SHA-512:	F888A256AD2B1CF27C85797C2893A819830384744B4B3B5FDA016F21EDEFD0944C1E03C43741F59E5E7644A39703C7407B2D0EC244ED38567918B9A92701BB13
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="v2" xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Bitpanda-Design-System-" transform="translate(-139 -7906)">. <g id="Shape-gold" transform="translate(139 7906)">. <path id="Path_35" data-name="Path 35" d="M18,0A18,18,0,1,1,0,18,18,18,0,0,1,18,0ZM14.063,18H8.438a1.125,1.125,0,0,0-1.053.73h0L5.7,23.23A1.125,1.125,0,0,0,6.75,24.75h9A1.125,1.125,0,0,0,16.8,23.23h0l-1.687-4.5A1.125,1.125,0,0,0,14.063,18Zm13.5,0H21.938a1.125,1.125,0,0,0-1.053.73h0L19.2,23.23a1.125,1.125,0,0,0,1.053,1.52h9A1.125,1.125,0,0,0,30.3,23.23h0l-1.687-4.5A1.125,1.125,0,0,0,27.563,18Zm-6.75-9H15.188a1.125,1.125,0,0,0-1.053.73h0l-1.687,4.5A1.125,1.125,0,0,0,13.5,15.75h9a1.125,1.125,0,0,0,1.053-1.52h0l-1.687-4.5A1.125,1.125,0,0,0,20.813,9Z" fill="#b68e46" fill-rule="evenodd"/>. </g>. </g>.</svg>.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1007
Entropy (8bit):	5.030639796015418
Encrypted:	false
SSDEEP:	24:2d593RL55yeaxM2VNH1ctLICAkzbD/jk1XGet:cLp2YJzs
MD5:	2DE2B6150938E51E42AE5B3D7AA395DB
SHA1:	16316F2EEE75F719B189A0910ADE97E9340CF701
SHA-256:	89A6684E4F9E31C9B4E5A6531BC1EC4B97C10E427C6C311C82D24DB155416ED2
SHA-512:	1A6329E45B55B34462FA79477A1879619017C6AC0D64FEACBD1CEEB06F58281A8459256DD1B1E789371496B6F3ECE994600E384F1A53F24BA76876B502CB4F2A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36px" height="36px" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>IconsAssetClass/Stocks</title>. <g id="v2" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Bitpanda-Design-System-" transform="translate(-139.000000, -7793.000000)">. <g id="Group-22" transform="translate(139.000000, 7793.000000)">. <circle id="Oval-Copy-3" fill="#31708F" cx="18" cy="18" r="18"></circle>. <rect id="Rectangle-Copy-8" fill="#FFFFFF" x="9.38333333" y="16" width="3.91666667" height="11.75" rx="1"></rect>. <rect id="Rectangle-Copy-7" fill="#FFFFFF" x="16.0416667" y="12.125" width="3.91666667" height="13.4723062" rx="1"></rect>. <rect id="Rectangle-Copy-10" fill="#FFFFFF" x="22.7" y="8.25" width="3.91666667" height="14.3426768" rx="1"></rect>. </g>. </g>. </g>

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1364
Entropy (8bit):	7.856540005424561
Encrypted:	false
SSDEEP:	24:XDvvqJMOD+ef+CVN54onvfaN57tSSPq9wY7TG8zVOVKPlSLJFwiMM7aDn+klZM:XDv4vDdme7vETq9wYzpO09XM7MM
MD5:	656227EDD497826260D9BEF5832F0AB5
SHA1:	7505464C0131EC0DACEA0EEA6E7C805D35828812
SHA-256:	A138291CE2DEAFD3017AAD7859C9F86760FE10EF899B19FEEA3699CA4A2A4CC8
SHA-512:	A068397F2D58DB3A444F753599A5A2D4258133B7368FD0C2E5D6A92AC7E18A187A7A1BE57F4A13B361854EAEAC976312714E87E892FBEA50CF92ACB53E0414FC
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=B&dmn=1movieshd.cc&rnd=1714156362491
Preview:	...........Vms.8..+d/e.Z...3m.....d.6y...e.,...-.(..o%..t.....Z...#..4.:J.".H%...:....V..f9......b.(... .H...'.M.@]..p].......H.......4.. .T.vFQ..IW.T..U..i.&...X.P...=..2....~Kn.4S..........B@..Q.L._( WY.H\...J....T....Y.....i..A.(<.....s6..d.i...F....:...s...p'\|......;?e%.;HsbR../T.......$.3..9e3..J.......#.......'.8.H.+....._O..\..QZh.1...]........l...\|..P2./4]...{..x....=ny..v....hy]...{HN...N...v.e.{.c.5...-..,......z..(.;i.Z..K........7Z...........F.y....x8._. .z.`..5...&..,...M4....?.2....~.BH#........6.Mh......../\|.......Z.g..^...l./b..F..R..T..[1.N}#...H.c%5..(n1..B..]_............H...m..N.4..A.=.;....p..0<..`.. xQ.\|vgB(.y....;.V.....f.`K...6..A.....j5pv.l.c&E.1n...T..k......9`+..J.)R.&.2.&:...(L....g..:._.S\|.7....=......S.>6..e.cq.i..E...u..1.E.Z...{...Y}..'...4.o>.kPDR...5.7&.-[.[..6...I.IE..E.>....>2......?.....9.M...y...D...'..ic.:....1.S_..v..k....A/J..9o..Axg...N.....V..........g...Sl..f.$+!=..kRv....P!...a... .%.........D.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	78049
Entropy (8bit):	7.988161194056327
Encrypted:	false
SSDEEP:	1536:VqQHavFFFZ/mQL0z8rcuGzxKsA+nLmbe0dAhcDyG7xg0nA19ok:VcFFX0zru18n6m9G7K0nAN
MD5:	ADA14FC5E8E90B57C012F94275F1CC00
SHA1:	59152E6AD5EB37C6030DC933724741D3C209CEDC
SHA-256:	94AD25B684BDB82A8653881C707DA0F22F6F37AFD40BA6ABF0B2A62BD649091B
SHA-512:	1BE94A0D45CD8F27BE1A6F8A0A85E559C8CFC44A9D2AC5B9FB4598ABA7A34CB50665908C0D744E01D5F1464C9BA91F5D153E22FF132D3D33177DBD4282E07C4E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................^..O.~[..L.!.f......E.:....P.Q.F.h....'\....KBE.B.......z.H.Or.y...(.E4....I......{u.W......=o..!.....E......._h..C_[......[.s......^.J.......Z6.....d.... ....V.%My....S-....E/..4B.7......G....HJ..).-....A.!wn"..{.....}......X.Fp.4....hFO\k{fA.i.._4.L....\:%..D.{7.Q..w.".~.T{.8l..>....B.E.a.&.....$M........z-8.....O.rwA..[.f....lj;......F.n.....e%X...G.O..=..vL.#...G6$...aVV.H...E_..O..]6i....4.X+m-.....2..O.ye..?.......#.KN..\.0.VL....V..l..bb....N5.)c.}.Z...d..h.....p..Q4.%..a..n9..E.....)..q.../......bcjD".yL...Y\...#..D.....QpK....v.]s.x...A6....!..B.I8.A...,#.P.q..VwH.vo...i.u.Y......#.....a.P.WLh..1bU..Z....!~.i4V....R.._.WV.D.Y..K._.\|.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	56220
Entropy (8bit):	7.983773441926508
Encrypted:	false
SSDEEP:	1536:64+rn4JcvJI6YkapH7rqggU9YfEZ3H4mS:0rn46vO6cpH4iTZ3HjS
MD5:	1B91344731CFB07696318C663EA08B67
SHA1:	680683A13898042D84EFA76BE712CF0C43130B92
SHA-256:	5EE2BC54655BFBCFB8C1857EE70C65A3A8B98BFFFB621ED342D51942CDA44E4A
SHA-512:	166C9795AE26C95D07115001DDA572EAD4FF48D3AE3FBDF1C114603364A9706B1BC685E910D2DB0603FD014C7F39CBFC0853054DBEBEEE93EA85047DDA1D678E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."..................................................................................,d.....uMW.).l%...jS.`.T.>......)................tF..A...m...[q}.&.<<.M.B.m.\|2..mK.6.0.cC..B.BN.Y...I.=Ee./U.t.m......C.F6A>t..=}d.s...st.........L.g.7t.@....F.G] e."<V".2Ch..z........Y..CJ).pb...!..F.~j6...Q@`.q@..'-...9.....u...K..MOL.L.Wk...(.. @.?.G..j.\G[{...i....kW...>.@HY.&{.....h...^N..Y.=y..T..+..H9...Y..B2..G....xo.gD4g...x..A..f..W.T...)k>_c8E....n.Ppp...1.<.&T....X.R...iB..R.1....,.....'d.<u2...-.l..&.{$.j..!...P....eD;R......_....9(.Dj.q....ivX....D...&..Dd..<E~X....;..p7Vp...=[.g..n....}.:.sEl.D.i....9kW.}[..af..IZ....$v.}...D=.1y^..K.3%j3qL.r.I.-..0`....ZUb.x. !.."HM.-jTS......../..gJ}9.j.$;.....MeI..aG...E..Ql?T.vJ".f..!.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	dropped
Size (bytes):	503754
Entropy (8bit):	7.9913602970117505
Encrypted:	true
SSDEEP:	12288:DWjYAlo8EX//8Gr3caQyP/f408wawCCJ4grtC:6no8EX38NaQyPH4rwaHCCgRC
MD5:	64653F7C8919DADE4AA8EB6DBA182A51
SHA1:	8A5A71C24937FE87A15393BF1905F9601C769762
SHA-256:	0784700F2DB993ED5C72488B777CF75A96882E9E58B07739F838A3C769D75416
SHA-512:	25E0732C15DCBA8B9ED4F202647BD07E762C7AED2A887628AB5F3DF437AB363E38C344B92E35EBCC656F2A520D67FBB61C57EF71EED902F00072EA310393F72C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X...".....................................................................................s.......,.....$.#H5.<3...S..#...5....k.og.......o..ol...l=....e...Yq=..B..=D..V..^..`.n.(W+Y.....Li...).PjF...m.e.6...S_..}.,.Cg...&........z.....Kf.Y.sLV.o...{>..XH.$=%;........R...s..GB...O.&..}.9.=...d.(..&.........1.g:..y..u....".CY.]...y.{....1..re..PY.u....`...<Y.\a(...F...6....L'........+.:....M.@...>.. 2.E..0...q..0mt....9..-.x...4..+.....+........V...8...#..Q..pk.n5.w.\|G0O..0.c..K0..BgyQ.VkO.@........af.xdmt.4w....50l9!.p..GS....b:...T......s...Muq.^C.k8E..eaxA.e..u..."."=ljX...w.:.m4g.-.&....Z.a(..YA.v..$...Lf.g.......K{Yj0..4..l..0u!...;A."..6.9..!.=..y..;.{;k...s ?.I`OjB..o.#..s...2...WO.e..d...iB0.J.A\|...2:....8..Tm..Qo...

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	49750
Entropy (8bit):	3.811656854940455
Encrypted:	false
SSDEEP:	1536:4p/QcnSmLrO0znMmB6qM3WsNfkUii3dXLRspa:CzzC
MD5:	CAD941AF7A899A4B48019EAB7EC22124
SHA1:	35E634F3F0F7779568608D69AD57FBCAD5E95D28
SHA-256:	404E5CB06876817B327828E8E85675C1D35975C59BF8AA62BEDABD83F703BF20
SHA-512:	01E91D86314B41ADA36D77490FEFD973DFDD10FAD3DFDDEDAD4AFF02DBDA66B0FE7F1C428E2DFD0D9EB2B4323652F5BDD6B321843EA3B5B130731CBC22ABEDB6
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/spotlight_icon_menu.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="56" height="56" viewBox="0 0 56 56" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="56" height="56" rx="28" fill="#F2FAF6"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M43.0313 19.4584C42.8434 16.3451 37.3196 14 30.1834 14C23.0472 14 17.5439 16.3451 17.339 19.4325C17.3358 19.4977 17.3358 19.563 17.339 19.6282V25.7846C14.6232 26.8039 13.0825 28.2442 12.9698 29.8469C12.9663 29.9183 12.9663 29.9898 12.9698 30.0611V36.3763C12.9664 36.4402 12.9664 36.5044 12.9698 36.5683C13.0928 38.2745 14.7598 39.7628 17.6703 40.7636H17.7011C20.3321 41.6166 23.0677 42.0325 25.8143 41.9971C32.9266 41.9971 38.4538 39.6594 38.6587 36.5572V36.5092V36.3763V30.2162C41.3779 29.1933 42.9186 27.753 43.0313 26.1539V26.1243C43.0329 26.1071 43.0329 26.0898 43.0313 26.0726V19.6245V19.5064V19.4584ZM18.3705 19.5242C18.5003 17.3933 23.2794 15.0925 30.1833 15.0925C37.0872 15.0925 41.8663 17.3749 41.9995 19.5242C42.0012 19.5451 42.0012 19.5661 41.9995 19.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	49750
Entropy (8bit):	3.811656854940455
Encrypted:	false
SSDEEP:	1536:4p/QcnSmLrO0znMmB6qM3WsNfkUii3dXLRspa:CzzC
MD5:	CAD941AF7A899A4B48019EAB7EC22124
SHA1:	35E634F3F0F7779568608D69AD57FBCAD5E95D28
SHA-256:	404E5CB06876817B327828E8E85675C1D35975C59BF8AA62BEDABD83F703BF20
SHA-512:	01E91D86314B41ADA36D77490FEFD973DFDD10FAD3DFDDEDAD4AFF02DBDA66B0FE7F1C428E2DFD0D9EB2B4323652F5BDD6B321843EA3B5B130731CBC22ABEDB6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="56" height="56" viewBox="0 0 56 56" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="56" height="56" rx="28" fill="#F2FAF6"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M43.0313 19.4584C42.8434 16.3451 37.3196 14 30.1834 14C23.0472 14 17.5439 16.3451 17.339 19.4325C17.3358 19.4977 17.3358 19.563 17.339 19.6282V25.7846C14.6232 26.8039 13.0825 28.2442 12.9698 29.8469C12.9663 29.9183 12.9663 29.9898 12.9698 30.0611V36.3763C12.9664 36.4402 12.9664 36.5044 12.9698 36.5683C13.0928 38.2745 14.7598 39.7628 17.6703 40.7636H17.7011C20.3321 41.6166 23.0677 42.0325 25.8143 41.9971C32.9266 41.9971 38.4538 39.6594 38.6587 36.5572V36.5092V36.3763V30.2162C41.3779 29.1933 42.9186 27.753 43.0313 26.1539V26.1243C43.0329 26.1071 43.0329 26.0898 43.0313 26.0726V19.6245V19.5064V19.4584ZM18.3705 19.5242C18.5003 17.3933 23.2794 15.0925 30.1833 15.0925C37.0872 15.0925 41.8663 17.3749 41.9995 19.5242C42.0012 19.5451 42.0012 19.5661 41.9995 19.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-EXC.qSRE2pVFjithS3QYY.qSoH4wk.0nJAA-~A&gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.6234651896016468
Encrypted:	false
SSDEEP:	3:YWR4brk7VBn:YWybrm
MD5:	D3D22A2C483EA5BF5E1B887D19B710E9
SHA1:	31E5F0A94EAC2CCFF4801AA97255701460C3C078
SHA-256:	4C7BF259CF71E49AA671EA413172DA39DCD72C8B7E34948C01E21F5585370602
SHA-512:	85EF64BF19C397B0F34DDF055AA27F732078C8DACE8DAAA3AE3BC9D50B81453C3621EA936FAC49BF9F194CA9905717DD8BDEF9FCBDDE972FD099FB3C022714BE
Malicious:	false
Reputation:	low
Preview:	{"status":0,"error":1001}

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	50603
Entropy (8bit):	7.968940721041269
Encrypted:	false
SSDEEP:	768:LqKA2rvuCJM8kAQXIv0OsjFd9dnXUewuAXGtS2qdFltox/LVQeUcIL5IuYw:Lq32zfM8jQksx6ewstSzdpox/LsFItw
MD5:	8AF35E938F5EB81DFB5B9068AD8E0C64
SHA1:	7E64651924FE8AC1371F54392D2F052816E45BEC
SHA-256:	CA507914C791D4B194F4862A702368D42109D7559136772082D816616EBC209B
SHA-512:	310A61CDFF25DC18CCC1BEFBF277C13E8DD6432E70C509CE96A69CB6D3F48EDA46F4079DF60BFDFA6367CE99AE7365DAC741B5278535AE0F3305EB051182B9F5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\r.f....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:76C997D6233011EBA847DFD56B4DBFD8" xmpMM:DocumentID="xmp.did:76C997D7233011EBA847DFD56B4DBFD8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:76C997D4233011EBA847DFD56B4DBFD8" stRef:documentID="xmp.did:76C997D5233011EBA847DFD56B4DBFD8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.6......IDATx....%Iu&z"3.+o..i3.c.a...`.o4 ..E..`A.....{.Xa..].d?....@ha..}...$..4#.B....3...W]...N.......z.z.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/pubmatic?uid=6031F3D2-0171-4C2F-9EE4-A5251D011B1F&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	547
Entropy (8bit):	4.904348109834102
Encrypted:	false
SSDEEP:	12:t44lWNxMiLjIf0WwtJbqdPcGgEIOwOiMEHy76SVQF+R0Lm:t44lSxMijIf0tqNcb0irjSVQu0Lm
MD5:	61A7C4963A9D50BECBE6039A24FBA386
SHA1:	52886A1D0CAE5EE35BF26309EDAEF6194DB4D210
SHA-256:	3727186328473B2426E6E46AB1BC4DDB150ED8FF7637A5D3767B1A06F0A4D53C
SHA-512:	964166296B2CD1A0D87F06C925BDE712FE76AF1BB37C7A4B91E2A379BDAE2D2E874E2F99B7671106D46C8C53C03410BE0B537DED7361308EB3A2B8908DE7CC73
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#272D33" fill-rule="nonzero" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zm7.878 8.571l-5.095 5.039a3.968 3.968 0 0 1-5.567 0L10.12 8.57H6.898l6.706 6.633c2.428 2.4 6.363 2.4 8.791 0l6.706-6.633h-3.223zM10.08 27.015l5.136-5.08a3.968 3.968 0 0 1 5.568 0l5.136 5.08h3.223l-6.748-6.674c-2.427-2.4-6.363-2.4-8.79 0l-6.748 6.674h3.223z"/></g></svg>

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	547
Entropy (8bit):	4.904348109834102
Encrypted:	false
SSDEEP:	12:t44lWNxMiLjIf0WwtJbqdPcGgEIOwOiMEHy76SVQF+R0Lm:t44lSxMijIf0tqNcb0irjSVQu0Lm
MD5:	61A7C4963A9D50BECBE6039A24FBA386
SHA1:	52886A1D0CAE5EE35BF26309EDAEF6194DB4D210
SHA-256:	3727186328473B2426E6E46AB1BC4DDB150ED8FF7637A5D3767B1A06F0A4D53C
SHA-512:	964166296B2CD1A0D87F06C925BDE712FE76AF1BB37C7A4B91E2A379BDAE2D2E874E2F99B7671106D46C8C53C03410BE0B537DED7361308EB3A2B8908DE7CC73
Malicious:	false
Reputation:	low
URL:	https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/xrp.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#272D33" fill-rule="nonzero" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zm7.878 8.571l-5.095 5.039a3.968 3.968 0 0 1-5.567 0L10.12 8.57H6.898l6.706 6.633c2.428 2.4 6.363 2.4 8.791 0l6.706-6.633h-3.223zM10.08 27.015l5.136-5.08a3.968 3.968 0 0 1 5.568 0l5.136 5.08h3.223l-6.748-6.674c-2.427-2.4-6.363-2.4-8.79 0l-6.748 6.674h3.223z"/></g></svg>

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10401
Entropy (8bit):	4.112127941943231
Encrypted:	false
SSDEEP:	192:SNGdXjASnSvj0RaX9GMfpOF8jTm6emwuRcTVDqMLcjiNeIrUAJA:S+fsbf2d6fvFjiEZ
MD5:	164F494B4F642EEFECB7BC6967DD3DD8
SHA1:	C1774B30509F650A4D7A8DB3FD69AE0C075443DA
SHA-256:	B91361AF0119540547FA55A46D9D7B3C731F34625263250CAB6E6484B329BC20
SHA-512:	6D599E19ADBA543F690285E6332F8796FEE655BC9E62A21B00605331AA09CC139ACD54CE21FA05E2F6D8CB627403D153322D2E805F9D10C9D818685FEAC481A0
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Cryptos.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36px" height="38px" viewBox="0 0 36 38" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>IconAssetClass/Cryptos</title>. <g id="v2" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Bitpanda-Design-System-" transform="translate(-139.000000, -7849.000000)">. <g id="Group" transform="translate(139.000000, 7849.000000)">. <g id="Group-5" transform="translate(0.000000, 0.513889)">. <ellipse id="Oval-Copy-2" fill="#F7931A" cx="18" cy="18.5" rx="18" ry="18.5"></ellipse>. <path d="M28.5604987,12.7951383 L28.5604987,12.7951383 C28.4284987,10.7157383 24.5476987,9.14940496 19.5340987,9.14940496 C14.5204987,9.14940496 10.6540987,10.7157383 10.5100987,12.7778716 C10.5078499,12.8214188 10.5078499,12.8650578 10.5100987,12.908605 L10.5100987,17.0205383 C8.60209871,17.7013383 7.51969871,18.6633383 7.440

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	57351
Entropy (8bit):	7.968757759966139
Encrypted:	false
SSDEEP:	1536:7vBZm2SXsh0kQ1yv7NBBJzfBAdz1mfREVFK:bBZ8kQM7fBgN4/
MD5:	34ADABACC9F304AA1E7C3F8D8C9E96B4
SHA1:	2FCDD584D40E345D6776912E15B1F86BFAA7BEB3
SHA-256:	DFF2F0EAA1E34A041971D0681CD78A1B71B10B673732DE8344F30C6520F27449
SHA-512:	86C12535583656581FC0AD2AA037A2208C430A4B9E5270A34FB331B14C99DE10D32FE42D6782C9F7F792B829F2CC876AAA8FB9EF94F438F9DC53AE37EDC3BAAE
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/2b/22/2b2267fe4731539be517d3e67daf45cf/2b2267fe4731539be517d3e67daf45cf.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."..................................................................................Q.....2.i...i.`S.)..@.,..l...5Ik.C...zC.0.l.....k^..MU.L.}.U..>...n......U.`t6..l>.w.OnU.X..=....,....T.....XO.M.....VU.W.F..*....a.u..]...........J..:."..4.....V.{p0......m..-v.u..t..LE)\.d...R.m..u..s...............a.i..(.o.......u.X6.l>:D...4.........E...F.o......X..F.......B.o..WBbQ-.0...i....eC..CH....Z.:..U.g.;\|../.~S..a...N.<A.<.J$.}.w.T!.8.5h./....F..;LWm.....?./!.\|....\w.`.E...w...m..yA..Bk\)..{.St.M..YYQ..N...v......+\ugs.d.S.it{.mh.f.G@..Xzz."d>fO..#...F..GD....U..e..s\|......O.......+.m..qY.q<.c..3....eo5'rM.;....J...&...}..TM.....c....q.A6)....L}g...w..'mn..l..........I....>........>>..jJ..UN.GLIT.d.T..5.fY=.V...Y;.....i...._

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?uid=6f67744e-1091-4048-adba-e024cc18f2d2&bid=1e2n4ou
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1015
Entropy (8bit):	5.198068861609223
Encrypted:	false
SSDEEP:	24:2dWVgy4lCfGMsPKqjs0gKqjsWDjsVDOU/GfjsBI:cWVgf2CWoOU/GT
MD5:	DD691BA6977370E6D0CDBD36D889FE83
SHA1:	6B975419FB34078BA2126323422154027AEF8F0B
SHA-256:	B9C7F5B45FBECDACFE9B7480DA241FD5907E7AB61EFF2079BFBB7127B304CC4A
SHA-512:	C9D4F9B3622B3619E396EEC893FA29DCCBB4FFDF76E65234580CAE8493F5B9C13ED7095523B480165948FEAAC76AE0CF7EB84ED026C188D58636F1EA0761027C
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Crypto%20Index%20new.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Crypto_Index" data-name="Crypto Index" xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <rect id="Rectangle" width="36" height="36" rx="18" fill="#f2faf6"/>. <g id="Group_138" data-name="Group 138" transform="translate(-210.76 725.61)">. <path id="Path_295" data-name="Path 295" d="M234.654-710.521" transform="translate(-6.806 -2.897)" fill="none" stroke="#27d17f" stroke-width="1"/>. <path id="Path_296" data-name="Path 296" d="M234.654-710.521" transform="translate(-6.806 -2.897)" fill="none" stroke="#27d17f" stroke-width="1"/>. <path id="Path_297" data-name="Path 297" d="M234.831-705.39a7.1,7.1,0,0,1-7.1,7.1,7.1,7.1,0,0,1-7.1-7.1,7.1,7.1,0,0,1,7.1-7.1" transform="translate(0 -1.941)" fill="none" stroke="#27d17f" stroke-width="1"/>. <path id="Path_298" data-name="Path 298" d="M245.527-709.39a7.1,7.1,0,0,0-7.1-7.1v7.1Z" transform="translate(-8.637)" fill="none" stroke="#27d17f" stroke-width="1"/>

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.6234651896016468
Encrypted:	false
SSDEEP:	3:YWR4brk7VBn:YWybrm
MD5:	D3D22A2C483EA5BF5E1B887D19B710E9
SHA1:	31E5F0A94EAC2CCFF4801AA97255701460C3C078
SHA-256:	4C7BF259CF71E49AA671EA413172DA39DCD72C8B7E34948C01E21F5585370602
SHA-512:	85EF64BF19C397B0F34DDF055AA27F732078C8DACE8DAAA3AE3BC9D50B81453C3621EA936FAC49BF9F194CA9905717DD8BDEF9FCBDDE972FD099FB3C022714BE
Malicious:	false
Reputation:	low
Preview:	{"status":0,"error":1001}

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	757
Entropy (8bit):	4.7441985550689
Encrypted:	false
SSDEEP:	12:TMHd64lWNxMiLjI/wseuXf+fr9JdDgXf+fr9jdDgXf+/hrE:2d64lSxMijIVv+fhJdDgv+fhjdDgv+/O
MD5:	E250D8589DCA206BBE024E3CBFB5EC77
SHA1:	1B09FFBDB0FAAE26286B090101AC5F51822C349B
SHA-256:	E3D1AB7B0C403D2109EA132B8441EF4352CAB798EC85244BE4FD1C72C28E59B8
SHA-512:	C33D520DE61E7D6F7BCB077C6F16A35173847F9E724425F7AFD4DF898BF2104E439FA6372FBF71A554FE25A18978E42719EFBB15A2F138D31B1CE5DB0C5E9A3F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#B68E46" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zm-3.938 18H8.439c-.47 0-.89.29-1.054.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73zm13.5 0h-5.625c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73zm-6.75-9h-5.625c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5A1.125 1.125 0 0 0 20.813 9z"/></g></svg>

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	92164
Entropy (8bit):	7.983012950343332
Encrypted:	false
SSDEEP:	1536:K/b++qZJzV1p52EhRRmkM6PEpx/NBgAZ8mEjta1fiRCxLgkOh4X5:2Sd5hhR1CNBgAZK50hpbQ4X5
MD5:	24CF9CB6B547B83FE67BD85B0CEF30F7
SHA1:	5453A664C9B2DFCDB24ED846B2B41883B7CAA249
SHA-256:	5C43903737337B7734E9E2CE72A182439CF40F746D955D15D8239351E466B218
SHA-512:	5CFF806F12E5C955603B55A56D8BDF741C07C7330F5E78BB9934B5EE0005E54E68A0F87886D112220C838F2C804B034D3E7D855D919C229A2756EBC0B8D9D56B
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/88/4a/884a49f9f49a5f6a6eb4fe7485db01ac/884a49f9f49a5f6a6eb4fe7485db01ac.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................\|X.Y..=ew[S=.=Lr.....$...gmllt..z5>V....m.....$L..v7+w.k.K...v.;...x.&.'}.=-Vd..$MD.c-.S....#0.e....O....}...eI....@.f..S9..YJ..m.8..Z....D..,zxr..]...v...9.......N..C ..74..i...u9..0....H0E.ki..K6'...C,..Lpz.*..7......u.m.D..T0o.^Yq.d..0..=....`....Qc..zY.......U.....#.1.[.j$..<.1..7QN..B>.Z6J..-...1..M.3...RD....&Wu..5.A.t#."..;...X....>}....fcg...>.#.#.E}..p.-..+\n..f$.3I..&....JME....5...'R...V%..............J..b.BH.s...`.j....AS4.].A......B4.....Z......nX....z..%P..RQ.o...f.:.r..{...T...+........&`.M.-.Y... .t\|.zv.:.&.'])..E$.b.....X./...u5g.....H.W....#............6.vI.....t...d.q./)UI..mH....du.........Pn.D{...U.c...F:-U.-...$m4.\.c....

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	88636
Entropy (8bit):	7.98364786431909
Encrypted:	false
SSDEEP:	1536:VAY8CyPZkV7+Y7U8LwQAhB8uUuKZIS8kczQTtQaEBTb5C42+aOUJO:VApPZkV7+38YBIZrCzetQaE5V92R4
MD5:	D0B336B19C64A9F90884D892AE1EAB59
SHA1:	BF441BFFFE951BD582D014E081C89ABB36FFE2E3
SHA-256:	3A2CC334F468F7C51829C984695736346F28699D6BD9F3C03413C764603B9E6D
SHA-512:	610CB024992A2E129B471B582F874EAB8DD86775EF21D9355FB046A9CAE1022CD74C646445382048804253EB1612FBF69E8F88E235A7DB017902FF5BBB74330B
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/90/b0/90b051bb3db7aefe1c46a855e18305a6/90b051bb3db7aefe1c46a855e18305a6.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................\.6.../.:...~.4lA.JIx.N..e_.O.[.S.W.O-.6....u.U.I..:.=...;k..q.mW!..9.....`Q......N.NM?....r.;.fn<.+...E...."k.87.(........hz..\|^..:.^....jG..hm.}k.h....q.6..j..n.s...u.kbr...U.S.....g9g...............o...Z....y..h..v..../VG.......V[5.^.}...v ...TdL.......$HL.7...x.....g64~.+..\|e.....vs...-.C........Nrt.....7..j.A....@....g..U.......p.8g..].....].}.../.G....Y/......].!..^.A{.'.RZ9.I.=&=......).".'I...K...]g.6..P....M.$.s'.8AE{.uof..L..L...?.{...T..m.}Z.?}...v.d0=...Y......._...o.?~...#..6.S..4....G.jh.......;....~J.U...x......TD_......%..Iu.......Z..QBm.d..@..f..^.{.9.Y.J....S.Q.U.c.......K..s]\.#......n.D...K.V?IC..x.........q..J...6.q..

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	downloaded
Size (bytes):	369313
Entropy (8bit):	7.987891426482751
Encrypted:	false
SSDEEP:	6144:i1+Zvwf2B8Co1Wu/f44zUanT3ZTNGEpLQAYF9uyLnwjXJvxpNngW5:i1yv5BaWuf44IS1TNGEpLQfFoysTHb5
MD5:	BCAF9A9D473C83419518C5EF3BAC0E5A
SHA1:	0DD3839709B5965A485E13CF85857EAA18A2ED52
SHA-256:	81B9B7D536FAB4AE524808D775E57F2004C3D504823D7460C5CB366034C48019
SHA-512:	607744EB9118D6BFD466B0947625FD8694A4DC815887D71D004645172399264AA6E969B06244C98DC2F14E6DF0642C7E1D490D628F1DCFB9952603D7BC3BDC3B
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/1200x600/793/ab/ad/abadcdcda3c7e85b004fac4398019af1/abadcdcda3c7e85b004fac4398019af1.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X..."....................................................................................2.'}W...U.)....[9.s..1yB.=.c3..Q......V@k%......C...}..y)Z..')R....c....e..8.......6.#.x5...Fr......&.KKN..E.,Tt..H!.V\|...d...s.W..iDl:m...8g.>].mC/..u..6..,..V\......J..C..>L..C.../..=....7<...}&..i(.tc.a)>~pt."%9..5C.9d..P87.. ..]..(5....r..Z\\|2..P.e..D....n8R.J.e(s0^!....`.E.l.....=.x..Nds.a>..<..s.....IC(fA....aE+J..m..39R.=.z.....e..3.. ....e.)...2.[y..U.....4%K[k...z......H.d.\......V.....>.aj..%..l....h...:..ve7.r....x-....i....d.V.S6E.6..M.tv..t...~...........S...x............K....rk{....ar..+....>{....C.%O9x....AI...0....mC..B.i..A$e..YR....^...W..}a.{.l.6{F..'..{..N\.A.....8.....).eD1.'9....'.,...o,%..!...o....u..c.....!H...9..:....<=.P\|.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	988
Entropy (8bit):	4.5231199374522975
Encrypted:	false
SSDEEP:	24:t44lSxMijIlwwvVRQoAjrMys4ovSni+uJ0GjiGE7:3MQjQJXk4oveuNiGg
MD5:	F3865339D1DCF0B0F5B6D136798B2D8C
SHA1:	09AD3E5A02494C2DAD9E7CEDF9BA37AEA9AC9F60
SHA-256:	43ABF957638B3F9922D58130CCABD53DB4A705EAE4E77D38C87B46CE4854D0C1
SHA-512:	6F9BFA44AEC33E3B178522D9229E09415DAC33E1FFE64DE76DFF359F505C4082CFA7DF0E15D1AEC4858B48395B66AB2026BC9352D6470A785F82431BCDF4822C
Malicious:	false
Reputation:	low
URL:	https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/usdt.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#00A479" d="M18 36C8.059 36 0 27.941 0 18S8.059 0 18 0s18 8.059 18 18-8.059 18-18 18zm-2.245-19.49v2.362a54.853 54.853 0 0 0 4.49 0V16.51c4.134.17 7.203.798 7.203 1.547 0 .865-4.095 1.57-9.196 1.592a57.657 57.657 0 0 1-.504 0c-5.101-.023-9.196-.727-9.196-1.592 0-.749 3.07-1.377 7.203-1.547zm0-.732c-1.717.07-3.29.218-4.557.432-.908.153-1.643.336-2.174.548a2.786 2.786 0 0 0-.744.413c-.281.231-.459.526-.459.885 0 .36.178.654.459.885.191.158.439.292.744.414.53.211 1.266.395 2.174.548 1.268.213 2.84.362 4.557.431V28h4.49v-7.666c1.717-.069 3.29-.218 4.557-.431.908-.153 1.643-.337 2.174-.548.305-.122.553-.256.744-.414.281-.23.459-.525.459-.885 0-.359-.178-.654-.459-.885a2.786 2.786 0 0 0-.744-.413c-.53-.212-1.266-.395-2.174-.548-1.268-.214-2.84-.362-4.557-.432v-2.55h5.846V9H9.909v4.228h5.846v2.55z"/></g></svg>

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1725
Entropy (8bit):	4.930104875678227
Encrypted:	false
SSDEEP:	24:2d64lASoQfhyzvaZataZyBaZTejsFonUpX8+FgLvDEUvC12FSi+ftD:c3jotMataoaN8M8rsGCFi+f1
MD5:	C0ADFA4F733B54E128D62F32C4DDBB48
SHA1:	9AD483FD6D29B30463F1A096AB51982080883CCD
SHA-256:	06AB078FCE7801DACF2F6689C5B6F81D908FFAB80464F12BF5F6566D823558BE
SHA-512:	8CD7E6BAC7E08288CDA7B694305B005F840425020705A8CF1986BF84AA9892A3801003517BD66FDD078FC9D004562465D97B110ABA94400658F2D7D04563212D
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201310.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_1310" data-name="Group 1310" transform="translate(-611 -200)">. <g id="Group_1082" data-name="Group 1082" transform="translate(406 -97)">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(205 297)" fill="#f2faf6"/>. <g id="Group_1087" data-name="Group 1087" transform="translate(374.595 25.304)">. <path id="Path_844" data-name="Path 844" d="M-152.3,282.973a7.659,7.659,0,0,1,7.528,2.035,7.659,7.659,0,0,1-.136,10.83,7.659,7.659,0,0,1-10.83-.136,7.661,7.661,0,0,1-1.083-9.293l-2.775.966" fill="none" stroke="#27d17f" stroke-width="1"/>. <g id="Group_1088" data-name="Group 1088" transform="translate(-166.889 269.61)">. <path id="Path_847" data-name="Path 847" d="M13.327,20.27l.179-.487H14.1a2.967,2.967,0,0,1,.414-.932,3.218,3.218,0,0,1,.683-.739,3.129,3.129,0,0,1,.889-.486,3.068,3.068,0,0,1,1.038-.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1800
Entropy (8bit):	4.396943011607703
Encrypted:	false
SSDEEP:	48:cjYu0OFjnullZOEI9HuoaWA1Xcek88M/WqMZ5UKl:7uHdn0I9nAhceT8M/WhF
MD5:	9DDEC95C944D67575408645EB7254ED0
SHA1:	89041DF143BFD3A99B1FF852BC8743DB672BE970
SHA-256:	63BA4ADD86212DBDA02B68252C7F3BB421E5EA028A078C3ACBBC6CF983ADCF87
SHA-512:	03ECD7B313D20A336F72C65FC86F1453F0B8CB1686E434379F721027C06BADDF7BDA66CE6A0E75328FBD2531515B321B748F128BA1ADDB3C29850232C59DCD26
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/pypl.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="nonzero"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z" fill="#F2F4F7"/><path d="m14.094 30.452.439-2.786-.977-.023H8.89l3.242-20.56a.265.265 0 0 1 .264-.224h7.867c2.611 0 4.414.543 5.355 1.616.441.503.722 1.03.858 1.608.142.607.145 1.333.006 2.217l-.01.065v.567l.44.25c.338.17.64.401.894.68.377.431.622.978.725 1.626.106.667.071 1.46-.103 2.359-.202 1.033-.527 1.933-.967 2.67a5.491 5.491 0 0 1-1.53 1.677 6.21 6.21 0 0 1-2.062.93c-.76.198-1.626.298-2.576.298h-.613c-.437 0-.863.157-1.196.44-.334.286-.555.68-.624 1.114l-.047.25-.775 4.911-.035.18c-.009.058-.025.086-.048.105a.13.13 0 0 1-.08.03h-3.781z" fill="#253B80"/><path d="M27.33 12.43c-.023.15-.05.304-.08.462-1.037 5.326-4.587 7.166-9.12 7.166h-2.308a1.12 1.12 0 0 0-1.108.95l-1.182 7.495-.335 2.124a.59.59 0 0 0 .583.68

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4072
Entropy (8bit):	4.12708297314211
Encrypted:	false
SSDEEP:	96:NCTBUAa3f6o5XTITZPAtQuBxysMXigS4e:wTNZPAdxdMSgSd
MD5:	1FF45187322FE8A144D1CAB5F34602CC
SHA1:	99C0067F81645DC1076CF344499021508170AEE7
SHA-256:	505E0EB966A2F079A100CE20F115B140E1FC5CCB95F1020D39B5485099933F81
SHA-512:	45E60BE0DD871F34445A7C6728F4FC8101B549ED7820959917F9BA4AC11A0C541371B409EEC5AFF497B1A2DA3AE79429F79F03C8FB7E1923CC88385F85A425CE
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/leverage/leveraged_token-menu.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg">.<ellipse cx="18" cy="17.9998" rx="18" ry="17.5135" fill="#7921EA"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M10.8509 17.6926C10.9566 17.9477 10.8355 18.2402 10.5803 18.3458C10.2677 18.4754 9.97944 18.6141 9.71776 18.7602C8.5324 19.4223 8 20.1674 8 20.8421C8 21.237 8.17669 21.65 8.57072 22.0671C8.96725 22.4869 9.56443 22.8875 10.3404 23.2349C11.891 23.9292 14.0684 24.3715 16.5 24.3715C18.9316 24.3715 21.109 23.9292 22.6596 23.2349C23.4356 22.8875 24.0328 22.4869 24.4293 22.0671C24.8233 21.65 25 21.237 25 20.8421C25 20.5659 25.2239 20.3421 25.5 20.3421C25.7761 20.3421 26 20.5659 26 20.8421C26 20.9465 25.9931 21.0495 25.9796 21.1508C25.9929 21.1958 26 21.2433 26 21.2925V25.2925C26 25.988 25.6631 26.6066 25.1455 27.1219C24.6298 27.6353 23.9088 28.0746 23.058 28.4329C21.3543 29.1502 19.0354 29.582 16.5 29.582C13.9646 29.582 11.6457 29.1502 9.94201 2

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4191
Entropy (8bit):	6.099426333820608
Encrypted:	false
SSDEEP:	96:otxkvSy2KRa4rkNiTCZT7QB812y4YdnFRKJPyqa:Lv3x9kiTCVkBE7RKJaqa
MD5:	C8F537075552778951FF474D65FABC15
SHA1:	33C51FAF0E7D2F9C79B9929BC22F121FA831CE68
SHA-256:	97AD277F55C3633E9B668278EFF8466DD293AF9CA1DF3A6D5FEA534A5D46E4C6
SHA-512:	A5D7AE85E16916B7D98A849B6DD58557758AB5CB7AF2DB7798F990E1D8838BE29EF2E7949E9A4F00B97A3B2795FB6B6B610DF8FB9D4C0E46A54A73C176F2590B
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/asset-icons/asset-shiba-inu.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="32" height="32" viewBox="0 0 51 61" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.<rect x="0.799988" y="0.812012" width="50" height="60" fill="url(#pattern0)"/>.<defs>.<pattern id="pattern0" patternContentUnits="objectBoundingBox" width="1" height="1">.<use xlink:href="#image0_1023_259" transform="scale(0.02 0.0166667)"/>.</pattern>.<image id="image0_1023_259" width="50" height="60" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADIAAAA8CAYAAAAkNenBAAAACXBIWXMAAAsTAAALEwEAmpwYAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAApJSURBVHgB7VprbBTXFT53ZtfrtcHshkdIeG2kJFBBwRW1JadFGCERolQKpFLoUzgoSX+kLabJj4a0glRRS1LUmKJEEUKFpGpTaIJNfqTQNDwUBVIQxUlAUCkqawxJGoh3bWN7X3Nvzrnz2JmdmfXs2pA/fPL1zNy5j/Pdc869595ZgJu4iesCVppx7bXpbcDELgDRrTKlI7rms1fgK4bYFYuN1EfWcg6r8CmWH8ktiz+cTtvLuInsufU0CGi0FUgqgi2Lfv+zJARAKgYxGIIEcL0NhcEcbCSNQvTjNUn38Tx0Q0Bc+9ut7VhnE8oUM/MUgPa67/1/m71cyCFEZyIG2ZFGe54ASGjATw/8ddrDDT/4vMur

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x354, components 3
Category:	downloaded
Size (bytes):	58912
Entropy (8bit):	7.9801344169186015
Encrypted:	false
SSDEEP:	1536:qJ3g4P7Mq146yG3kvpL3W4krHsIn6uJJhXg:f4Pv46yQOhErrTJJg
MD5:	FEAD19061D8E56F00EFDB593A7AC17A2
SHA1:	99A962E36D14CE26697BE754E93941F903E46E57
SHA-256:	604ED2696B319A4EAA3F38096F4DEA748B799B4A216A29DB204A80A7565DBB04
SHA-512:	EC0338F53F8E82E6CCC40800E90FAFCE9D0A1D54C6508CFD6D45E334D1405FC16DE87034A1894FAD2A8635DFA690053EC4848500290CAFF3E903DA7B9C54AB13
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/0a/d0/0ad0f66216e079931d172870692005c1/0ad0f66216e079931d172870692005c1.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................b...."...................................................................................!..@..(K....o@.'5..S.&..!<...[....h..K...u...-..<J...(.{..Nd...` .....P.u.u.....}B......,n&C..T:..d.T]K).o..Io../H.~...#CQO....7.aM=.p<..M...!...cP.Z.zG\.Z....2".x...4..3.1r.R.'MP.).....l..". ..............s..>NL\|..6...(.UM.....4..B....k>....q%..#+.Y.........x..@..p..h.Xl?..Y_...."2."..T.[...U......BU.n...[x.(..S..)qC..7..+.3. H.1...C...n..VHo...\|...ss...2"#\Hq#.}.=.T.Af+>ng...!0].t.".<..[...A JbMI.C..w[.dN.....S".t.Xgf...}..'!..>.!!... .tg:.^.0....V.....U.....Z....a.UM!.z..])k._...M{^.#B&.n..r.s.......oc..n.sK..t..[.;4....Z.T....Z_e....nQ=.8.u..[....GANA.!`...I...C.=57.z..fo.WIt#....d........(..<..yn..?.X:. ...2...km..o}F.;AB%.N..B....

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 135 x 135, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4443
Entropy (8bit):	7.943060441686189
Encrypted:	false
SSDEEP:	96:VM+LZYAIeeruDLlSlNb5O2nzI4azu6OCP7F4m8ITyEw6:VMotgiSlNMeI4a65CP7FVTyEd
MD5:	26829DDFC69DDC48AD6C7EA608D1106D
SHA1:	D95C7EF9CA04C00A1DDF2C7C613B8D638BE2260A
SHA-256:	D4F1052B9BA6B8453A676C3B9320E3D38854E36D88CCD9DD73553B2B8208A971
SHA-512:	A8373DE15E4EBBDE35A42920D2F50F62AD357C85846B8FA94B92C041A998150E2BD6E1ABC541BDC6E84D7F52EA1CA336296A7F96BB91492CFC4699BCA3049372
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/development/GOOGL.png
Preview:	.PNG........IHDR.............<.J.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....IDATx...kTA...UQ.!F......D...""...0El.....T!D.....E...E4.b...D..T.CT..{.sf.D.~.....F...\|.k..V.......Xk7..]d..a=G..Y....C..$>......~..q.{O.k......;DdC..z....N. .]$.<(..;>a.>b=O.1...B..@.....]&....D..I.E#~...y..Ffw..&Q.P.2..A..h...Q2k[...DM...Rc....-..Y..e$....H..........g.\|.M$z&..P..H.\|.M....3..?A._....;..!N...d..D...c.A;.%qB.t....D..\.d...5I.f..M..q .h.X{.E...S...Ht<..?.3.....E).>#%..].;....I.C,....f.7..`..d.c..B......3>Ff]......Z.c......;F...^..cV.k.,p.X}.$h...7..cq.iFDk.H.......{.Y_.w.8..n.C..JJ......E1...F...i.Sd.. ....M...L]{.......eT-......9.W.O3....H.t.x.8.m....:3..P8.....Rgyx...r..(.../.._!....P.jm...6..R.Xl.BEz.V.U..j.Q.)..<..4x0.....xm...&ow..Kv.i.9x..4..B.s..2.73.\|..v1QdS....9.......[.:.1.^....~g.x.#XVA.6w..q{.8.....}...a....V1.....p......`>.....;0@......}.,a.eR..B,.)........g1...;..czJ&H,!..%+@eOW....P+:.R.]..9;+.g....,......h.z.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1369
Entropy (8bit):	5.170463538246163
Encrypted:	false
SSDEEP:	24:2d64lwSf6yxVF0uZs4ZRZOFOjs20RjsAJjso1dNjsmJMrIEjs2:c3w+0OhX+PuL
MD5:	AB90EB82C6F6C36057B3C382987CF5F4
SHA1:	FA45C1A54AE3C8734F8FD0A5ACF4E99E942888C6
SHA-256:	00ECBEA106C8A75BB5C3482EBABBE2B26DD6D7F4F313EFCEEDA6CC01DB666D4C
SHA-512:	137532C3186DBBEFD1851877212FAAF99986ED8FD8AE4798406AD49D891AAFB4AEFC0B70210FC78AD9D41FD277813B533C42E2F6AAB9F60A5CD9809BFFDFCEA5
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%20302%20new.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_302" data-name="Group 302" transform="translate(-612 -167.5)">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(612 167.5)" fill="#f2faf6"/>. <g id="Group_1095" data-name="Group 1095" transform="translate(615.268 171.157)">. <path id="Path_858" data-name="Path 858" d="M14.5,21.8H9.846A2.159,2.159,0,0,1,7.687,19.64V8.415A2.159,2.159,0,0,1,9.846,6.256h8.2a2.159,2.159,0,0,1,2.159,2.159h0" transform="translate(0 0)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_260" data-name="Line 260" x2="6.071" transform="translate(10.899 9.926)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_261" data-name="Line 261" x2="6.071" transform="translate(10.899 12.516)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_262" data-name="Line 262" x2="3.886" transform="translat

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3842)
Category:	downloaded
Size (bytes):	3922
Entropy (8bit):	5.177515138644797
Encrypted:	false
SSDEEP:	96:9L0l/mj08Dq6VxmNdd90bP/aR+ndmICXV1c1Edf1mr4bSK/:WQj04q6VxmNdd90bM+ndmICXLTdM4ec
MD5:	92A512E500D35302E31F3992E49C3358
SHA1:	DA8C57B1F0C85EC2BBB28FB732E2706D3CCB55E4
SHA-256:	89276A4F781DFBF1F62FB81DF8F359CE316D7E0542A958BA1E820C15A5964D3F
SHA-512:	62807AF1755196371EC8BADFD13CBA0FC86BF10323CD307EF82ECB9E31BC30A7F686922028143EC805C042E3897DF214717A53708C22E0BD58A45480DAEF7A65
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/js/WebCommon/Vue/vue-class-component.min.js
Preview:	/*. vue-class-component v7.2.6. * (c) 2015-present Evan You. * @license MIT. */(function(p,c){typeof exports=="object"&&typeof module!="undefined"?c(exports,require("vue")):typeof define=="function"&&define.amd?define(["exports","vue"],c):c((p=p\|\|self).VueClassComponent={},p.Vue)})(this,function(p,c){"use strict";function _(t){return(_=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(e){return typeof e}:function(e){return e&&typeof Symbol=="function"&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(t)}function x(t){return function(e){if(Array.isArray(e)){for(var n=0,a=new Array(e.length);n<e.length;n++)a[n]=e[n];return a}}(t)\|\|function(e){if(Symbol.iterator in Object(e)\|\|Object.prototype.toString.call(e)==="[object Arguments]")return Array.from(e)}(t)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance")}()}function v(t,e,n){(n?Reflect.getOwnMetadataKeys(e,n):Reflect.getOwnMetadataKeys(e)).forEach(function(a){var f=n?

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1024)
Category:	downloaded
Size (bytes):	1025
Entropy (8bit):	4.888772825020465
Encrypted:	false
SSDEEP:	24:2+7GXZnKDnGqjQhLhYOz3FJLuqZhJ0LuYGI6f6n7v:n7GXhqG2odZzVlsLuYjnr
MD5:	F803835E5F7F9612EA5C09A8C18E44D8
SHA1:	7E83D5DA23E5F1901FEF3ABE3C2D85BCB0A787C7
SHA-256:	398ACABA0625EB53A547BE2C15618876DCD3FC5A70BC5862A4194931FDB484CD
SHA-512:	65FD09D04721D30907E355E3151B02EE141D6BBF38F49A0E8F42DA069A9FF75C6CA20DD9AD55792D20D28F902C307DCC24309AC35A1AA6BA728A8E04FFBCACEB
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/js/WebCommon/Components/jqueryG18n/globInfo/jquery.glob.de.min.js
Preview:	(function(e){var a=e.cultures,n=a.en,d=n.calendars.standard,r=a.de=e.extend(!0,{},n,{name:"de",englishName:"German",nativeName:"Deutsch",language:"de",numberFormat:{",":".",".":",",percent:{pattern:["-n%","n%"],",":".",".":","},currency:{pattern:["-n $","n $"],",":".",".":",",symbol:"\u20AC"}},calendars:{standard:e.extend(!0,{},d,{"/":".",firstDay:1,days:{names:["Sonntag","Montag","Dienstag","Mittwoch","Donnerstag","Freitag","Samstag"],namesAbbr:["So","Mo","Di","Mi","Do","Fr","Sa"],namesShort:["So","Mo","Di","Mi","Do","Fr","Sa"]},months:{names:["Januar","Februar","M\xE4rz","April","Mai","Juni","Juli","August","September","Oktober","November","Dezember",""],namesAbbr:["Jan","Feb","Mrz","Apr","Mai","Jun","Jul","Aug","Sep","Okt","Nov","Dez",""]},AM:null,PM:null,eras:[{name:"n. Chr.",start:null,offset:0}],patterns:{d:"dd.MM.yyyy",D:"dddd, d. MMMM yyyy",t:"HH:mm",T:"HH:mm:ss",f:"dddd, d. MMMM yyyy HH:mm",F:"dddd, d. MMMM yyyy HH:mm:ss",M:"dd MMMM",Y:"MMMM yyyy"}})}},a.de);r.calendar=r.calen

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 280x200, components 3
Category:	dropped
Size (bytes):	26786
Entropy (8bit):	7.962415697440149
Encrypted:	false
SSDEEP:	768:90XzvnTxc0cJsrf7Ov3O8tkTjLWJLdgq6aKLO/:C7nTxcDJsrfkkTjLWJJD6FLO/
MD5:	9BC988339A105A5514EC011FAEB50C9A
SHA1:	51C5A3FF061455B50B07DDD0238640513C52847C
SHA-256:	8E6CD89675D6F69ABCFB197B9230BDC69C6D8AFCF663960473B72AA9707B4A44
SHA-512:	426B11FE5C117D1717DFD27591751287056F99C8FDCD1A0F330B8E250F5F89CF5F0B8B56B9874FDBA9C2334744AE50AD64025D8FABDB6C47EC8B294199B63946
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................................................................................................................................:..............................................................................................7^..q................2L~....89.....m..mp...."............=..~......Eo..;.[.g.oL...'...........w..mm..Y...B?.....9k....7..t..,.+.6....7#..[<..e.........L. z.Hp...]#..:.S.g=z..g.C..M....>....I.$.....GI..............<.../<.:oV.m.W./<..;.\|C..\|\|.....VWj.e?..........zM............',..I...2.S...&.~...Nu...-..6.....zm.s.wh...........At...T..W.I.....v..........pL.L.W:_...\|..l.o.}zY.vuq.........n..].....r..I..@....].V..v3...g.6.=P....{.).......%m.....hY..l..d....j.....)..P.VG.J.<-..l...;..;v.........E......G.m..N..........fe..P.R....(..c.Z[.^.......E.\|.`..=.S......JO.........=#.._U9..q'i.X...N......t...l.!.L..8.y:.adU..e..1W..x.{;...0.}.{......%?.[..k..(...(...\#.tV..[Sy....a..q.,..

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x370, components 3
Category:	downloaded
Size (bytes):	52963
Entropy (8bit):	7.979863120366721
Encrypted:	false
SSDEEP:	1536:hTwSeRld0CwmIUvGXpYhZ+nQ5DCY4Ivw5QhWNLL:+SMfKQAY4IvwWQNLL
MD5:	904D53CC2CBD927FA0730112AF375566
SHA1:	A170BA9E6554E5A3F230861F7F7B244517115F85
SHA-256:	D74E34211AD23A4EAF47F3D53FC16515278B91A170AF58A2FE50C96E486DFD83
SHA-512:	7E343F408BBF4515156B81B7A41782DCD1FDF16D8EDDBB24835A0E45C5E374423DE6207D03FE648E4BC5D02D2C51DDF18A90FBB202AAF5DFE729DC5AA97C7CBF
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/5e/87/5e870a75dad1edbca0a3c113ea470ad3/5e870a75dad1edbca0a3c113ea470ad3.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................r....".....................................................................................dk7.k7.k7.k7.k7.k7.k7..7......o"...3~.'..}f.-9n.&...3s.S..Z\|....Hq..j..9..p..f.......z..w..1f.^..Y......v3...N..3.x......^z.........i.H..U..H.8..z..yY........7Y....p.#...^.V..`.%...........M]I.( ]...y.M#pRa.:R]...so~.#,.v..d.......`%5L.J...t.GD...YS..H{i..$.X..R..0])..c....S.r[A:.^[_..n.........XCF...G....&..,..9(.......~...O:#r.a(...6.....VzE`tZ.o....F...Iv...H$..}..U....$...$7-8.F(...QJ..j..g".....1.%\;.^.. u...............v../)..<.g1..\|.<....F3+....2..6.._...n.B.q.'...v.W..G.z.....1.x.\|d7?.A..N:j.mf..;d...U....A....+d..!..qB.\.0.dA..Ds...@.......t.\.Xp.j.vdq.e.)y.{T.......5u&t..."X. .T.~.....)...\....sQ.V(?.Jw]AG7...y)uJ\|^/..S.T..r

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7973), with no line terminators
Category:	downloaded
Size (bytes):	7973
Entropy (8bit):	5.285095307940294
Encrypted:	false
SSDEEP:	192:+Q7G5UIIQP9CuU8yH/iR5XQ0A3veTb642/Gduf4CkICvVIw4A:B7qUItPZyHqfXo+64vduAt/vVIDA
MD5:	28BE48EE20DEFA8159B4C733D34DC91F
SHA1:	C9E0879AA6C48F3FF4BE11385E20E64FEC69624E
SHA-256:	CF3D192302B3B66F4429BF97376C3A1003A03050D652B951F98E779C1FBF1A01
SHA-512:	4D1164EBE9B9F9F99B28FC2107CD9BF7D5FB6EC348313596CCC8C5A244B939134E056EE99EDE87B941335A854ED92AE666CAC6E58F17582A53F079CD5698184C
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/app/v2/js/dotcom-components/p-06f88acc.js
Preview:	let e=0,t=!1;const n="undefined"!=typeof window?window:{},o=n.CSS,l=n.document\|\|{head:{}},s={t:0,o:"",jmp:e=>e(),raf:e=>requestAnimationFrame(e),ael:(e,t,n,o)=>e.addEventListener(t,n,o),rel:(e,t,n,o)=>e.removeEventListener(t,n,o)},c=e=>Promise.resolve(e),r={},i=e=>"object"==(e=typeof e)\|\|"function"===e,a=(e,t,...n)=>{let o=null,l=null,s=!1,c=!1,r=[];const a=t=>{for(let n=0;n<t.length;n++)o=t[n],Array.isArray(o)?a(o):null!=o&&"boolean"!=typeof o&&((s="function"!=typeof e&&!i(o))&&(o+=""),s&&c?r[r.length-1].l+=o:r.push(s?u(null,o):o),c=s)};if(a(n),t){t.key&&(l=t.key);{const e=t.className\|\|t.class;e&&(t.class="object"!=typeof e?e:Object.keys(e).filter(t=>e[t]).join(" "))}}const f=u(e,null);return f.s=t,r.length>0&&(f.u=r),f.p=l,f},u=(e,t)=>({t:0,$:e,l:t,h:null,u:null,s:null,p:null}),f={},m=(e,t,n,o,l,s)=>{if(n!==o){let r=T(e,t);if(t.toLowerCase(),"class"===t){const t=e.classList,l=d(n),s=d(o);t.remove(...l.filter(e=>e&&!s.includes(e))),t.add(...s.filter(e=>e&&!l.includes(e)))}else if("key

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x333, components 3
Category:	dropped
Size (bytes):	60595
Entropy (8bit):	7.987327704729651
Encrypted:	false
SSDEEP:	1536:ccYi072mLKCyHAFRjMQhp/UXZ2j9OpDfLnwMhU:z2LKtALbh6XZRDTnwMS
MD5:	813452725DFA685C51A78A17681B23F2
SHA1:	87477D28FC5803D326D9B001177F213472CDE75C
SHA-256:	2966BB994F830D79C03EBE420ACAE6C6AEB630B5FDE872F1386B176D21ED0860
SHA-512:	1365B4A58D19DF5F2934EDFA5A2ACC7FC0893217A3631A8487755B86813D0703B7E298753377B86F482A134C298F6D691BB5C4F734C2027540094EFED532B26B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................M...."....................................................................................&...Q........Y:.'..h>i._.b..../Z.4.z......._.g....tK..[...5.Z.1..I.5.F-.qA.......'Y.x.ZQ.4..$9..}.,>...W.X=4....\Q1.2F..$.n...7osv8...uo.Wb.....e..........2...0...S..tk.#...d.\|.T6H......x..u.....Q..lz.X..wn8.9.jp..'...Re.'C"\O.5`..L!..E.....H.v9.F..c9......R......>\|]ktU.9...........J...q.S....\.4.5,..b.{-.W.OB.R.\bL.....h.D.s1f;] ..../J.^.v: '...!.UV..v...Im...L.....v.(A..R:z..h.F.W`.6...`S.Q..\..........B....$...J.Jir.._..]]..7..].....j..8....p..t.E;t....w.'..l....&.._...\|...#.(g.....c1..D.HB:........tz...y.9...n..~....F_:.Z....~}.U..c}8..L......f...+.V...t..K>..........,.k<....7FOoC.AE\|Vw...B..i....[...b.....wm.3..8.......0../....

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1949)
Category:	downloaded
Size (bytes):	1950
Entropy (8bit):	5.18187871113032
Encrypted:	false
SSDEEP:	48:qaCqdXzxxCIN6f+QeIvOrMwo6+N8Vso+NoEguNiwZn206XXdA:hCqxz7v2woLuVsV6E17n20m+
MD5:	0C42037D8EA290835887C9AB05D98E6C
SHA1:	89D6BE1265A0FF8079B1498A4EAC2724AAE9F1C7
SHA-256:	794777A010B825F8FE523AABA082DD9A6BE49CF55A1376A5B69D2A51CBBAC772
SHA-512:	819244B9EF9E0A93C802AA64AB748E27D3711BF2C7081111B7A0C601AA3A5936AB46E75FFD7F12586801ACFC564F67B0C63F67F21BE84C50BB6033C03A7C103E
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/pages/login/loginLayoutBase.js
Preview:	(()=>{"use strict";var i={};i.d=(o,e)=>{for(var t in e)i.o(e,t)&&!i.o(o,t)&&Object.defineProperty(o,t,{enumerable:!0,get:e[t]})},i.o=(o,e)=>Object.prototype.hasOwnProperty.call(o,e);var l={};ClientUnique.isPreloadCssSupported()&&preloadCss(window),typeof window.switchSkeletonLoaderToContainer=="undefined"&&(window.switchSkeletonLoaderToContainer=function(){}),function(o){o.Namespace.define("Converters",{tradeMode:o.Binding.converter(function(e){return e?getResStringNoBr("strINVEST_REAL_MONEY"):getResStringNoBr("strDEMO_MODE")}),icon:o.Binding.converter(function(e){return e?"icon-dollar2":"icon-bars2"}),switchTo:o.Binding.converter(function(e){return e?getResStringNoBr("strSWITCH_TO_DEMO"):getResStringNoBr("strSWITCH_TO_REAL")})})}(WinJS);var r=function(){"use strict";function o(){var n=!!navigator.cookieEnabled;typeof navigator.cookieEnabled=="undefined"&&!n&&(document.cookie="testcookie",n=document.cookie.indexOf("testcookie")!==-1),KeyValueStore.setBool(KeyValueStore.keys.IsCookiesSu

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	downloaded
Size (bytes):	303058
Entropy (8bit):	7.982787786372559
Encrypted:	false
SSDEEP:	6144:FgGtMXryfNFXIAtvL7hMfwOw3HaoCjl/qGHxOCdvDH1/n:uemyVFXIAtvL7a66oqCfCdtn
MD5:	7172B33C60D6897DC71E5C890C2C303B
SHA1:	FCD900950D1C040684E402DC3141391360148DE0
SHA-256:	E4A29BB3527EB33EED7190AB3FEB65E31734A90AAB44EC9CD9BA3B422E3044A3
SHA-512:	327AB5CF7FCDC1955F123EBCC33700C53CF16451C2223162B275E1F00F184E23158BC078F4C8C2F318DE2F9E538F588612EBDA3CC44F0CFED6573FEC187D1AFD
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/1200x600/793/b5/57/b557aee04772d0a3a66a29064bf8dd3e/b557aee04772d0a3a66a29064bf8dd3e.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X..."....................................................................................i'..}..qf..35..0..R...JV.....,.?.......Id...Y%f.)..eL..^....t.....t....a.....g.s....Kf/^....&.j...K\Q.6J."\|.....q..r..rm$.u&.(kP....kw.......B..M........s."k...>....d!k..6R&....F.....d.m.s.~.IHKF......!Ct.;N..Yk..l.,3:.i.n...Lq...;N;.Dv[.....w..@.!B......[6.J...;.(&.%~.......J.\......4.A.L..J~0....w.$..7.,q.H...`2.L...t...!.].:.\....#..zJLZKg....`).I.F.`...N\|..g...8...i3&.p.M..@.:@).E...Y&...a.L1W...B]..H.l...x.&~>.2l.m4{.1.Q..e .a0.B.a..1.J..@.V..Z6....j..T+....-.,VHe..(.Z..M#&.G...3f.a....;Xm#g.9..Ga.~..2p.z.!.d.......d....5.n.;.......o.\.-.s.c...2.L.(.!Q.I.g.q..H........[$,:B.fK%$,..Z.q..'....OJ....V....U.c..:....`_c..... ...QG."j...D...\

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1147
Entropy (8bit):	7.573539176343964
Encrypted:	false
SSDEEP:	24:vfCXMCGviSQLVaQEGQrYzAtTdJ2D/bQc32EW0fGUA2STN:vKcC+iSSaRGQre2Tb0/b337W0fPA2SR
MD5:	2C576BA5CA8B16BC230324F549CEC315
SHA1:	AD50CC72A5CA890CC768871368FD7BC9B2DD209D
SHA-256:	18BCD8F6B9758628F94E5EDABA6170480192BED185F12E23F329711AAC72A2D6
SHA-512:	898C952D5152F875C8C5A23E23EAE2DA03AD518781781323CAFCA380B14D95D659BDC5770A2CD8807F3BFB34635E52CFB0262D235231B42EB1D83AB9B869562B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE......................................................................................................................................................................................................tztszusztdledkeT]VT]UU\VENGENF6?85?7&0(.".."..!.....k0....,tRNS... 000@@PPP````opppp.......................vI.y....IDATx..z.@.....R.^Zj..PE.R..iiD#.E#.l...H...n...p......w\...3.Z:.,..j......)XR.R..!N.1j....$ ...y...-.....f.:R.P..H.H.^!...<.g .}..:2....Rz.;.D..M..J..`v..@..9.L...v..40/.. .+=.....W..9K.H.....$..V.2....1/9#$pH.....%....PuyS.\|.V.f...n`...j.^q<i......e..Zw..-......7'..{TDli.E...7..He .....7qx.MTT.. }.]......{.:-..=]".p.>)......\SB%H@.e.C..f.^.3........}...Y.....s.Jd....?<..2..~qoq..)H@.....f.i..u9.3w\|..A......i.a...*...w$.n.JT..\|tm...v...D>.G..}f......FP.S.aj..#..h...bj........QQ...X$x..."...,..w. ...]3..2......iw[...;...........}./S.....-...\..;.}9...o<..)...E...=.M.#

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	90397
Entropy (8bit):	7.983841972768483
Encrypted:	false
SSDEEP:	1536:UB+LeOHqLMcPH/wJ2/I2gh9fO/tzzxOW/yLwWx2zWyUUxyscVk+Ex6v4CL:+0aM2mEI2gv+BYhGxEqG
MD5:	2D4457EDCA2F72D9B40A827234C44EB8
SHA1:	F02D1056069328D3A5224C3C7D8130994A3A3592
SHA-256:	DAD99CCAB16B7E67E118FF6DC10849F93FF9E7FCC5D160C1B4C72B14228914B8
SHA-512:	2C1DF64E15749EDA00C83A7B7C1EA0C9E10195F6CD6CDCD7839A60E1F841D76A07D2F479BC36EE89B9EE7651DDC18569B65B1FAB08AA83D3E1F7EEA54047E7D2
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/36/81/368175f08c3494fbab5bca96d16a83c5/368175f08c3494fbab5bca96d16a83c5.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................l...N.=l..^<..w/f~ur.....S!nn.s(.,.5...V..6..v.f.......H.\.d.>e.....k..77..W..<...g.r....._?wf.i..].5..PT..?s.......r...f...z..............k..M.NW.#k:\|....lq.+.....?..w-H.....g..zH.......u..Qb...\.....u.,c..b.~.X.Q...rx.....\...w.z...#\.Rc7L......>..itH...r...{4...9.q..W].P.e..#=....~e{..AM.YtCbC.e....Yw.P.l..R.5J..A~...G.Yy..E....98'..-..X.i.g..Gy.,....%G2....xn.....4..\|..}&!5.T..kT.X....D......%P....S.K..W..#l.W]....0.n.j...h.00....vI).`......xz..5..+...r%..7.U.W...,......z..TW..q..b.yW..oa;%,l...2r..:.Y.~%.va.jR.....^n.C.Lh.>..X\y\|.....6.a..baZa......!z..I]..Z(7j........L.l.K.K'G.. ....1NC.L....N......E-....(=qm...-../.K..

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	416
Entropy (8bit):	5.001246064344082
Encrypted:	false
SSDEEP:	6:tI9mc4slz2lWNsKMiLjtCG2DAVI0BU7kq8kdpUVY4dhER7KiFAbHQumG0R2fgE:t44lWNxMiLjI30WwI6JdiuMu7L/
MD5:	7B72368062DF486EED49627BF11AF312
SHA1:	1D1B1F6C27D196377CA1B3808C2D1456ABEAE849
SHA-256:	13FBECFEDBCFF5C25ED9844DEDB87EC1427E5DA2CDAC170C40EE9EEAB0661657
SHA-512:	9054671E3698C126E3A70FFD9871FE95F3E21FA6EABD6B8AD1FC2EF5B0D6097B8899F5F1347C30043A49BDA91D8D45D7284D90C4A2F79844A6957DC6C3F3BCE0
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#494949" fill-rule="nonzero" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zm-.014 5.143L10.4 17.733l7.587 4.484 7.588-4.485-7.588-12.59zm-.113 18.51l-7.587-4.482 7.587 10.692 7.592-10.692-7.592 4.483z"/></g></svg>

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1236
Entropy (8bit):	5.080553397600594
Encrypted:	false
SSDEEP:	24:2d64lj5p1adqifH8vHQNLOimCT27CsDd39eMdeTFIDnIusVdZ5rELqLz:c3jtdH4LL0xZtF2FIDnIbvAk
MD5:	12FDFC21AE7E8110D9DA60325A48662D
SHA1:	E7F1A8BB970270B48CBFDBD0D5F6EF66ADF73E31
SHA-256:	14EEED7E2AC591319E7479FB388528411BF6C552D96BE65A6F191D2A8EEF11FB
SHA-512:	B62013A644940F48F017CA801A58ABB7672269FC22BE808A7BA152DACD96A04F8FF7460B5124D676DE8A005C2B7526F8BA3C74A18A296BB94A11FF6D8DD9598E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_1308" data-name="Group 1308" transform="translate(-203 -343)">. <g id="Group_1079" data-name="Group 1079" transform="translate(-409 141)">. <g id="Group_38" data-name="Group 38" transform="translate(0 35)">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(612 167)" fill="#f2faf6"/>. </g>. <path id="Path_849" data-name="Path 849" d="M42.63,118.19l.955-5.332H40.1l.176-.967h3.488l.429-2.43H40.709l.176-.967h3.488l.955-5.344H49.8c3.18,0,5.316,1.878,5.316,4.672a4.007,4.007,0,0,1-.729,2.368l-.408.5.233.268a3.913,3.913,0,0,1,.891,2.583c.012,2.708-1.947,4.534-4.991,4.652l-.316.007Zm10.636-6.108c-.905.544-2.308.746-5.36.771l-3.3.005-.79,4.348,5.981.014c2.619,0,4.31-1.448,4.31-3.691a3.242,3.242,0,0,0-.233-1.249l-.191-.45Zm-8.5-.205h2.671l1.165-.013c2.721-.054,3.852-.278,4.485-.889l.391-.378-.641-.4c-.82-.478-1.8

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	40537
Entropy (8bit):	7.972530927638517
Encrypted:	false
SSDEEP:	768:nAJ5HW4qCBMGhhGKaT4zVcomz5iIjg9FMmi0TzBYBvPDYQZWUwJ6R/wwd616IBqF:AzJqCB3aTAKz5iggU0PgvbPWUwJHwd6s
MD5:	AF7C32121E2BCED58D822AA81FE57176
SHA1:	2B6DC189B9EB22A61E31B661A4836EBC2C561653
SHA-256:	8E3981E213798193E56769CF8EDEE74E1EB0B578169A276254893C55E5BBB56A
SHA-512:	915FB65E885EDA4B6AA024DB1BCA6083FBB62F80A2FB7850A9122EEE37A9C007426A653827482C440958EEF2201C81DD4D2386D459AAACE2F6633BE0B3C47A61
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................m`.>.....M..d...pJ...z...J.....H#...E.......A..~.E...j.aW..3.}.[.>..k.V...I%@...0..0.q......$e..hD.....cV .Z....E`.Xc...i].bF....s.K?.Eb.F.%..\|65$.....`A..@.er........6.....o....7.....u=.D..E...W]M....'[.=....2..T...>:..,m....RX.1...1..gQ...f.d.Y$..G;.}>...Jn.....)Mu..Od..T.....CX..g..-.z....... W.I......~..i.-$.[.n%.5S(3mR2 R.@..._.qz=........G..uY{.N.]...4..\|.....=.K.].,.4m..H.LS.......%...u..Z.acqh.....}..A......R@.$>.\|....o.}~...._C..b.:..}h.3..g/j....o.m...g_GV.eUz.*...<......\k.......&g....F._.V..+.. .....p9........-....x..[..RW.-{...>......z. 5.......c;......id.v..u$...E.E.1F..Z.....k@(..?.g.....oM...:...i...^.BI......(..]+3...b.v..

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1007
Entropy (8bit):	7.53719654370637
Encrypted:	false
SSDEEP:	24:MMqZZOXv/HOWOcZ9Z3QgBdXpU/qgu9qP9or1QuUV4QlQRaBCwEiaKs:MjOXv/uWjZv5IkqPIQu0BIaBC7iat
MD5:	3DA2FC2219B428684B3D9ED7888724CA
SHA1:	52BF064C3FDF683215D9BA4A82F418BAA4F114E9
SHA-256:	43099480E0B1B1C8C66F798A542F2D1AE0CA2E0975119FBC6A94ED2D127F8FCA
SHA-512:	20316B2B6AFCFD1524F3295B57BBF8E88F57DD8FC747D8DFDB0B06B257595E3B8DB2867AEC203BECB3D751B192B22CFCF796EE6A5FCB1AF0F18A89754C32F8BE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE.....0.p0.p@.p0.p8.p0.p5.p5.p0.t4.t0.p0.s3.s3.p0.r2.s3.t4.r2.r2.t2.r2.t4.t2.r4.r2.t4.r2.s3.s2.q2.s3.r3.r3.t3.s3.t4.t3.s4.s3.s3.s2.r3.s3.....................................................s.s.f.Y..M..L.\|@.{@.s3.d.....-tRNS..... 000@@@PPP`oppp........................k......sIDATx....R.@.....F.R.) B...I.[..U..D[... ;d.....&./....{..!d........F...w@M.yC......&.F..Ap.m........:.t.".n.kA.0.@..G%^...i.....>.;....%.Pv..@.6.Y".Y...-.;....d...H...R...Q.Kp.\|4...lm>...Bj....]I..,...m...,E.h..J#i0-...s...R.&.W.7.n..4...............,.....P$-....$....&h@.A../m.;..)....A..6.&-5........n....Ev.`...?.....S.}..PL....CvEp'-$`W.b}%...e{........b)+..{j...E..S.Au[..>...Z].3..P9.f..'c.Y........y!e. ..+rJ...K.q..C.R.\|pU...V....e...e.b..{...Z.O.....k..(..&%...y>et..?L.B.F.P..G /.L...t>..F.pH..1.4.4NP.)i......j...rBX..2h...w..0...R...(q.!...b1...(1.:T....,...._.....{fJ.....Ny.......I

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 88240, version 1.0
Category:	downloaded
Size (bytes):	88240
Entropy (8bit):	7.997334581614651
Encrypted:	true
SSDEEP:	1536:FocYpqCPGhd6WweHSCBqh25DMvMvE/q/+F8UCIGq2U6YJJMlQXdeFBi24Xch64R:FgoQ2wWpBqh25DMEveqeN0q2U3JoadsB
MD5:	BF1AE519A8647715FF7333B46ECE67F1
SHA1:	7C8C4E3B5CBE7A11466A3491429BC1F154BB76E0
SHA-256:	ECCFEB64C6C1A964AC381914233E53A340C8F2C5804A59AB996A97CA5D302834
SHA-512:	0F28FEC07BA3B764083A8636E6CD0F667B15709AD2D4D75E57988ECC15D27ED6F2070F135FB96A73F6758F81DE27ADBB1DBAAA8ABE9CA0389962E65511A47CC2
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/fonts/robotoflex/roboto-flex-v9_latin.woff2
Preview:	wOF2......X.......m...XA..........................9...R..\|?HVAR.~.`?STAT.N':..H/......\|.b....0....6.$.... .... [.\rB8a'T.N...g=`@g.F..+F=.tq.[.>.;..........?.X..fr.[%...{....Q.".+.H.Ro\...Q.2V3.4.B....b..H..7.5..D.C..L.....,K.\|...)...c7.cv...S\T....e.POE..p..v.4..w6..}....M<k>......e..(..Z.....\|...Y.h...V.`.t....n..A....S.....v.......>w.6~..BR..~X.=.n..../(dPp..Q.d.g..#.F.}...[&.7.=:....;.Z.Zh.o.M_.l.y^.yZb.............b ....Y.We.r.s.F...!.......57`.Fl.H....QS'.N.5BxQ..(.xE_....hn....bbE....W..u..".&......R...6-..?.}...B[.D...\i.C........d.S..UU(2...x........c..?K.B..KY.2.Q(.)T..ae..j..e)..VK.........../a\-.*.%2!.%.......c..O@.uT..d.0..%KC.k<Y`..w...YM6.Q.....x..u..U.B{w.K..+f...:. !..lv....:#.Q.8qb@...>.M7..$..2$h..!Y.g.....'+>..#ZjU5....J+....Id;......d.!.C..I.,Z....i...$qH.I....@[..3...L....B....w;..S.v.u.uU..T."....A.^..8.....J.......9.:. A..$@.D.....Qn..3.1C......io.v5.....vav...'.8......$D........W.4.{o.t.>..;..y..\.j.-7.$...

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	downloaded
Size (bytes):	492546
Entropy (8bit):	7.98830149900321
Encrypted:	false
SSDEEP:	12288:7JMZxmSY/3JYXKNOyXDsXF644rkJB4n1bbdR1:7ZSY/3JKKN1sI44kJ09Z
MD5:	82F48EACAFFDC58BC3521E7D6022A89C
SHA1:	612B5E64CF5B5996A73C22B2A9CD6368E7E49EDC
SHA-256:	D6C1C086B139EC0063E70D9EFF8DC034070DD83DA15927407C75926CAD6BFF59
SHA-512:	49BB48F7DA32FA5BA5BD180B6ED4A60B0489F0E2134C79FB82C7985EE1D4A43CB75631A291B889D409C5F053722397F4FFC285B44EC4A01EF5541B8199B1B215
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/1200x600/793/d4/a5/d4a5ca2896ffd5bf878a6c93110fb09f/d4a5ca2896ffd5bf878a6c93110fb09f.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X...".....................................................................................%I].....X.i..o..0`..b....cO..z2.h.C..z..........k.t8%_m=J0.....Erf.8..Q4...6.S...l..\|.a...l.}.....!...W..D.#K../,....C+.7d6.._:a.!.:...6 r...CG.].T~.jUO.n.=...hLw.O..K...KUb...$..i.........XH!....$wcL\..Yl..Ob>.....R.;!.M/..w/M5.1.U..Z..Rxg..3B.\|m..0..b.&8p.....F.?.oGu..B...U.U.^C..4.n...NKEA..u.....h..>....cw..w.. ....0....."G..p.N.S..g..........'.O.:.CJ..........~.m....u.,...%...cp.}...z..9g.........5.s\...Z...]L..!.V..Y..o9%..^\.4.r.f.;2.D.[...{.W.G.F.wo...&....gg\.V...$7..uB..v...Vl....u.....RW.X^.t.J<.e...5.5.>...6..f@r...>..-..S..a..xZ.w...........8...{.]$...,...L....Z..^6....M.E^....z.&.6...b....j.,3.r.e....!...R\.<..2D5.PX~Ic....>

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	3.7712411708182247
Encrypted:	false
SSDEEP:	3:YWR4b5LkLLyAUKtfJacpn:YWyb5L1Dof9p
MD5:	864E7D68C370E4A879D3EB16E3E13287
SHA1:	0C5CFBDCA1D75586473370DC5514B1907F8E4EA8
SHA-256:	90099DEDF118253BFF1798E5F8C3BAB386D90C673FB759AEB4D9E383044F3904
SHA-512:	7979A66B33395EA6BBD5CF815031A67A01CB736A53375A8B2D51BADAF742A4A64136A60EFE4CB4BA06EE938337B83E8749418075C65249DFF9ABFDE6069FFE16
Malicious:	false
Reputation:	low
URL:	https://1movieshd.cc/ajax/banners?page=home_search
Preview:	{"status":true,"banners":{"top":"","middle":"","bottom":""}}

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/adobe?uid=06291327801249806183443003251739176557&_rand=1714156371359
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39424, version 1.0
Category:	downloaded
Size (bytes):	39424
Entropy (8bit):	7.994717739101665
Encrypted:	true
SSDEEP:	768:xmBKmWxAVQ9y1A8u5gcrVO1yuik8t4zM4AHSKFMzRzJ:xh5YQ9y1AL5rVOESzMJyRRzJ
MD5:	56FCEDC954B09CE8F55C6780D55F1016
SHA1:	FBE370796A3A6DEFA74511418AD8C10B68D01395
SHA-256:	401A4757BB3FC5C7F5E7D32691FD143C2CCDD2EC527843A7C7C6D3540A163826
SHA-512:	79F98DA6A71F91F36CDDC9E3AD8F422F1ABE4120CBD57FCA05179CF555223D88CF54A0B9267D9312328870194E81DB3A2EE7571B4F8B171D6CCB007460B49130
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/fonts/EuclidSquare/EuclidSquare-Regular.woff2
Preview:	wOF2..............2................................?FFTM..6........`..v...s.....\........6.$.... ..u..,..I[......S^x...f.__`.?..<.x..sk..Z.]..G..U.x........$Y......o.C..M....$!....(.a:....4 T1....Me..r...sVH.N$.mK^...LRQ...<..l.....y.<..].a.l8..G..w........D.8c...F.......l....e..\|.2.7;!..Fr.fa.vV.~.Yj.....p...L.K...F.(&0....,.9........3LDA\|.kE.F].b.'..wg...~......Tk......>..j.......$.......[0$..?P.....+....nJ..I.E.....tx...C#....A..$...u(M.P..6A.....i...K.%......2-.#W...<........mb,......gF....u...dCB.HHB.!`.0...a..dI1...]...../.r._.8~K...Z..V..Z..8.....'...l.x.vfv..,.....%u.2i.K.....M...[.G.G.}....O<..T?..T.&..k........L.`...KR@..V..V!.O..W1... .......i.!)..wy;...x"..]d.a63..4M.=.....4:..g....&...5$..8.....}..(.@.Tu.......t......~.E!q...H..>..a...j.{. ......C6.\|....R...J..".T..4H..@....5.U......\|...LH..0b..y.6).b.x.J.NMsZ..87jX.r.=..3L...g.....;of....$.PCP....3aWF. .@...[..L...9K.ey.[......g6G.,...b.. S.C$.....-F.t....7Z...@.q..xC.D..3.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	49540
Entropy (8bit):	7.974849306828911
Encrypted:	false
SSDEEP:	1536:NioVtjdOT8+1a1BX+rFaYeF/xTSb+kGsRa5p:NnVq8Ga/nrmb+kG3p
MD5:	50589C40430A93EBBAF87E7E7BA99303
SHA1:	F46C71A738DC27FB2916AD546D8C545BA6D01C2F
SHA-256:	07D9A1EE9B4D17590A73F8D028375FCE6CEEAFEC4A5422FA51C0C155F1769BC4
SHA-512:	FC65C58B808EEF0A8A36E3DAFBA35A26763A1EC3D5022A2CBE425C41785C5AB6179A1A57A687E0892E187656F5A1A5D1E4AECFCC5349D8AEE273E89A8D713282
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/60/f8/60f86e3cde437250c3cc15d1b6da4b14/60f86e3cde437250c3cc15d1b6da4b14.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................GVx.',.bo......9.4....R3....,......+.#.O.Rz.rV....}Q.t..k.'s..bpL.-.K.L..t+..:..w5N.)..<m.0....Z\.;..#.R."ql....a...:......,..r[;._..\..B...pfd...Cv.D.V.<Z.Q.S.=...3.n..E..F....L.G-..4\|..E.$g.#.t...s/.}.[...\...F.<..=a..l{....2.k.n./n_1=..=...U....%-.V.LU.l/(,s..q.I{j.sv..'v].../.....W.2'.lv..26.%]x.....H....WU..>r.,.."......0.Ap.s.'.].U.....[..fow.2fX.QeyV.0-}V.3\T..#...EK.%.V.fc....VY...y;......T..#.......a.;).)..(..7.X.e.......^..vRF...=.......e....Da......tu.j6......+.7...\|..p....$L...$ .p...,...8.....a&?.zp...<.,t...(...O.8q.nT3..V.y.....rz9h:B.n.F.b.........3..^..N.Q.&.J..c..<.*w..eC.....%)7..dB..Lf....''Rl.V...&.L...q\.n.8f.

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	54407
Entropy (8bit):	7.980776765736911
Encrypted:	false
SSDEEP:	1536:erW3iCLr/WT90cX7uswqE629fqtYqECu6HtzM:n3sLnF2FqtYqECrHRM
MD5:	4B5683EE152ECFC3706DBB9C1E7DCF7B
SHA1:	53FAACEE3E18596A8399BAE56DC86A8A1B839E3E
SHA-256:	42CB033A542749775BC4E1CECE9BB7E79683C65FE94A787EED80FE20D9B2C3F6
SHA-512:	AA32B0C40F9BC0799D2174B8346A46E968A43B91C7FF7751F74087AF5F3A4A3363E211103F74BE3C1AC30E301D506C577537BA647BA61697C4AD8D252E7E6C7C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."................................................................................................................................................a3a....... bp..4............cT.l._.S..U.^M....ED..R..1.4..........v2..EFJ.p........I.:Sw$..r..k.:....+.QTjlk.O.x~....M_M.....dx.../FTjY..O...:........IK,.^.ZZODIu.........t....L+'..{'=.]..-. .Z....a#^..QIf.~.7..J?m6...`........v...mm.u..e.{.:;mY.7..r7..2..,...x"x.<.....U.WQ.p......j...........oh.$Y........i...j?f.y...]-x..z...y.H..+>.........Y.n.2...Ja...?..2d.......n.Hn-T...^nO..yb...B._...f..5vcj..SisG>.......k.\~-y.2.j(.!.}.V.......CA^\|.....Y.....4.$w&.%q....e..D~....b.J...n+"......Z..-..K.}...F$.d...X..k.LY.......4.......S.}^G...k8}Y...ju..K.}..ZB..0....Z.........`

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	72591
Entropy (8bit):	7.986293945729795
Encrypted:	false
SSDEEP:	1536:lYEsmTC+TL7s4tnOfVj6UOxzE64EmI2+LGvqsuRG5gX8fw+F2taUQCn8IS6:lsmHLo4tneobfYvqsktWCn8f6
MD5:	135913FCA05453631815BF5F4B565D19
SHA1:	5685B1B3A0A7F76AF5E0CADBA531A6C5420D0943
SHA-256:	29AA155F463F22748BCC16249C5E661039B79DDCCB70C09A9485150925B329A9
SHA-512:	6CD668E876EA49E48A350ABAF191691CCABCE45667971746A9F681F3CD4420D5445DF579999BBC1798DD055EEA08183D05B339782897B041BDD27471406017A7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................A.+U..psD.1..........;....K../.)...).6+.......M.Z^.V57..T...aW...:......%.M.=..&.Z/..:].Y.(..$%....K..k..x,.x.@GR.$.u1.X.Q..W.MXb....7k.u.3a0..iiY.e.SD..X...\|#c....WH4/...[.q.2.....[Ikf9.oyh..rX79.P0.g...`.....-..tf}]... .....fd\|....V.6?.....-.2I...[r.b.. .Q...Wp.......\.....k......k.qGk...`eF:....vO.c8...w&...v;.-C&..~..................1}.w$j/e.......-.U..z...k5C...p&...E.l.}.;..>.L.vj.?q......"..1E..<P.d..\|.....!......d..p....f$^P..R/e\......V...CT]....I[..H:....'M..j.5.=o...)l2...$........9.].Q.mx.v'..l4......TLQ..S"d..e....b..Y.....\i...Mm.!bt.cc.sK.....5..(D...>y....%.....y!^u...V.~.....g.w...(.n3.\.j/.<*-.7.....KV?r.....t.....Y....2.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	40537
Entropy (8bit):	7.972530927638517
Encrypted:	false
SSDEEP:	768:nAJ5HW4qCBMGhhGKaT4zVcomz5iIjg9FMmi0TzBYBvPDYQZWUwJ6R/wwd616IBqF:AzJqCB3aTAKz5iggU0PgvbPWUwJHwd6s
MD5:	AF7C32121E2BCED58D822AA81FE57176
SHA1:	2B6DC189B9EB22A61E31B661A4836EBC2C561653
SHA-256:	8E3981E213798193E56769CF8EDEE74E1EB0B578169A276254893C55E5BBB56A
SHA-512:	915FB65E885EDA4B6AA024DB1BCA6083FBB62F80A2FB7850A9122EEE37A9C007426A653827482C440958EEF2201C81DD4D2386D459AAACE2F6633BE0B3C47A61
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/3e/db/3edb97e60d9d7d5a63efc6b02be95a6b/3edb97e60d9d7d5a63efc6b02be95a6b.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................m`.>.....M..d...pJ...z...J.....H#...E.......A..~.E...j.aW..3.}.[.>..k.V...I%@...0..0.q......$e..hD.....cV .Z....E`.Xc...i].bF....s.K?.Eb.F.%..\|65$.....`A..@.er........6.....o....7.....u=.D..E...W]M....'[.=....2..T...>:..,m....RX.1...1..gQ...f.d.Y$..G;.}>...Jn.....)Mu..Od..T.....CX..g..-.z....... W.I......~..i.-$.[.n%.5S(3mR2 R.@..._.qz=........G..uY{.N.]...4..\|.....=.K.].,.4m..H.LS.......%...u..Z.acqh.....}..A......R@.$>.\|....o.}~...._C..b.:..}h.3..g/j....o.m...g_GV.eUz.*...<......\k.......&g....F._.V..+.. .....p9........-....x..[..RW.-{...>......z. 5.......c;......id.v..u$...E.E.1F..Z.....k@(..?.g.....oM...:...i...^.BI......(..]+3...b.v..

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	762
Entropy (8bit):	4.750453831572798
Encrypted:	false
SSDEEP:	12:TMHd64lWNxMiLjIlrTwUDgXf+fr9838DgXf+/hIDgXf+fr9ZQr:2d64lSxMijIldDgv+fhHDgv+/hIDgv+w
MD5:	58F10EF614A7C4C47A130B68568E17CC
SHA1:	FD1ED9DCA69533789BED068711DB8BF955EC4C64
SHA-256:	9F233D9765A4E5A6C7FEF78BA06725D29777F8E891A6CF8FC486A1D10FB8F409
SHA-512:	524111DFAA7AEBF0D3A116023D3E6D25E0F43DC757CE6F4F7CA9924D435901F329160D84758EAAB70A2328B8F29AE4CF85BEC3EA27648D33D29A88D38D2AD5DB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#B5ABA0" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zM8.437 18c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73H8.436h.001zm6.75-9c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5A1.125 1.125 0 0 0 20.813 9h-5.626zm6.75 9c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73h-5.626z"/></g></svg>

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1242
Entropy (8bit):	4.2746523978834485
Encrypted:	false
SSDEEP:	24:t/4u75UmPeTgapjY6u6RzwW8UaIbn+WTvPJ41hhVv1e:UWRMSMc7WyrhVvg
MD5:	8655B256A90DCE02C744782B37C5BF98
SHA1:	53834DF51ABBD74BE1E94CA6536837332541D1F9
SHA-256:	DB2BBEF9A1D068F0370701166DEA46DDCD909554F8038F7E2D979AEA242509BB
SHA-512:	29B9A79CAB9DD2ED86D1B09FC9F259971D8C6E46455246F7F58A077A2C0EB2BA417032336D683AC12886FF9B45F99C8262C4307377D1F43120BC62EBBB1DE78D
Malicious:	false
Reputation:	low
URL:	https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/mbl.svg
Preview:	<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#5B449B"/><path d="M29 10.858v14.94c-.453-.051-.895-.11-1.342-.192l-.192-.034-.621-.114-.218-.04c-1.094-.2-2.186-.409-3.278-.624a198.705 198.705 0 0 0-3.176-.595c-1.14-.205-2.28-.421-3.416-.647-.898-.175-1.796-.343-2.696-.505v-9.439c2.115-.41 4.233-.809 6.353-1.194.832-.153 1.663-.313 2.492-.478 1.354-.267 2.712-.514 4.07-.758.296-.052.591-.107.886-.163l.605-.117c.236-.04.236-.04.533-.04Z" fill="#fff"/><path d="M7 9c1.363.17 1.363.17 1.857.272l.173.035.364.073a146.136 146.136 0 0 0 3.478.66c1.15.208 2.298.425 3.444.652 1.004.198 2.01.38 3.022.538-.2.2-.353.198-.632.245l-.64.108c-.231.038-.461.079-.691.118l-.178.03c-.405.07-.808.144-1.21.222l-.164.031-1.293.252c-.545.075-1.03.015-1.565-.085-.068-.013-.136-.026-.207-.038l-.433-.08a161.992 161.992 0 0 0-1.262-.233c-.689-.129-1.371-.277-2.056-.422v13.899l2.155-.446c.426-.085.851-.17 1.278-.251l.147-.03.436-.083.25-.048c.597-.076

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.327819531114783
Encrypted:	false
SSDEEP:	3:YWR4brEJ4:YWybrZ
MD5:	1F57CBD1F1A1CED8F62D34242408414C
SHA1:	52279C54B16F0A88D43D57B4CBB9813EA3CC39AB
SHA-256:	C462D460EAB61DE19F36CC384C99666E5BF65EAEBA0C12B8F594C5410C01F220
SHA-512:	74A8B00878ACBFF90771AB31062D088CCEE50794F975DB0B2B0C26EE37EEB7792B99F456B1105D07C94DEAB79F376CEC630E4761111CD6BDA4120EB226D666D5
Malicious:	false
Reputation:	low
Preview:	{"status":false}

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	dropped
Size (bytes):	405569
Entropy (8bit):	7.977253307541965
Encrypted:	false
SSDEEP:	12288:i78RMhHQqQUQk1RSxaohIkG1e2JnyH6U4:+IMyGxvdfkb2Jnk4
MD5:	A7D01634052599EC3560C59F42671F92
SHA1:	06F570D6224F3F96A4E18D80EA38D08D51E737AC
SHA-256:	109352361AAE3A0A2A2F499DFCA80D1E54FEA88D9A7ABD5C1CC9E7B2209251E3
SHA-512:	6AD99B244F545D5C267D9D6545A16A9B1726F896F5E60FB366001636F17BBF5DE2B41AB6A31700D4B0847D62B68BD0B8A7A2F8BC0BDAF391B0DA4C9D0B233F78
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X...".....................................................................................M.......,....Ll..~e'H..wB.....l."...c?...+V%.-9....v..5.G......=..!s. ..tC.r.\Y...$}..P._M7.....n.#<.X.O...%.86..?.my9f<na..0.$."....>..TE..(c).....U.5..E.k[....g..:].[.{.M._A..(~..c[.....c...T..[%V!u.6...l$^.S5^0....C..1.a8.`l.....H.S.5....<.....p...GE.5./V...X/I\s.Js!.z..7......A.......R..YX...m....h.....2../K.....}..62..#.zC..{.&s..(.`b.c.ba+1P-.e.#.r.`..<M.V.0.A/.........g .p.L_pL..x.....!4^7...........[.e.e......#......x1../(.p.8.......E...eX........tY......%W.i.:..7...>.VW."~..h....j&..~....D.j.N.=......Q}....g.....3..6...$..s.....>0&......v1..-5H.W....}...*bmXGBu......U.<.e..2..i;.A.. =..!...`..z...}....O..2$.Z.b...r....g.\C.D@5.p".D.#Na.>.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ml314.com/csync.ashx?fp=16e155cde49574b3bd549a6c3880d29893d4e97dd7bcf0095bce42054e66b03ef4cb09cee1a4f8eb&person_id=3643740180748173373&eid=50082
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1363
Entropy (8bit):	5.302341025231235
Encrypted:	false
SSDEEP:	24:2dGATLf3KO9tsEsQJa0kqwUthidGqMW6dj9cxVa6N1C3iXcl:cGAvf3KO9uE6Zqwkh6X6nqVzNSacl
MD5:	876891301CDE864081E9E069564258ED
SHA1:	A8E9CBABA791DBA4A238CC9CC5C432AD1EF84FE5
SHA-256:	0A50ECD4E7358C8DB37B88CF4C200EBB6C65D953B780C96C81A68CFC5EC8CD80
SHA-512:	F079FF97312D8873713DF015CA2F93EA03A79B0E794AE82A5D5D0BE5B3F3724D9FC321B39442883CBBB1A8A9D02FA5FA13B7AF14C8E91319DB328BD939955C01
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#F2FAF6;}...st1{fill:none;stroke:#27D17F;stroke-linecap:round;stroke-linejoin:round;}.</style>.<g id="Group_1310" transform="translate(-611 -200)">..<g id="Group_1082" transform="translate(406 -97)">...<path id="Rectangle" class="st0" d="M223,297L223,297c9.9,0,18,8.1,18,18l0,0c0,9.9-8.1,18-18,18l0,0c-9.9,0-18-8.1-18-18l0,0....C205,305.1,213.1,297,223,297z"/>..</g>.</g>.<g id="Group_2344" transform="translate(1.243 1)">..<path id="Path_29" class="st1" d="M14.1,9.9c0.4,0,0.8-0.2,1.1-0.4l0.5-0.5c0.6-0.6,1.6-0.6,2.2,0l0.5,0.5c0.3,0.3,0.7,0.4,1.1,0.4...h0.7c0.8,0,1.5,0.7,1.5,1.5v0.7c0,0.4,0.2,0.8,0.4,1.1l0.5,0.5c0.6,0

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1731
Entropy (8bit):	4.851350142084748
Encrypted:	false
SSDEEP:	24:2de4lNFNH1wwzOyNylq3awaq2OTaRIWnjxOn3w3wtNglmJcSsHBn7C+47vgkv3mF:crNp89hw0O3gFlmcBn+v7MV2CV+TV+
MD5:	AF2BDC3D5D19D82D96339842B52193C5
SHA1:	E083A3E22FC479CD5D668C80B180452C243FEF33
SHA-256:	4051FC45D079522D912ABD695E326798042D39A7AC74AB9C6A5115ACA7BB8BF7
SHA-512:	B8F22F6DB01157886A35F2005B505DF1257D0A6DE1B3033AA572CD2EAE9195685123D70C72198808A410C3A28951CD331E6093C7F92FE958FA142A5C9BB8CD27
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/BCI.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="v2" xmlns="http://www.w3.org/2000/svg" width="35.795" height="35.795" viewBox="0 0 35.795 35.795">. <g id="Bitpanda-Design-System-" transform="translate(-139 -7962)">. <g id="Group-33" transform="translate(139 7962)">. <path id="Fill-1" d="M35.8,17.9A17.9,17.9,0,1,1,17.9,0,17.9,17.9,0,0,1,35.8,17.9" fill="#24458a"/>. <path id="Fill-4" d="M5.053,19.74a12.849,12.849,0,0,1-.131-1.532" fill="#fff"/>. <path id="Fill-6" d="M6.435,17.869A11.481,11.481,0,0,1,15.427,6.705l.006,9.147ZM16.95,6.481V4.957A12.918,12.918,0,0,0,4.908,17.942c0,.09.012.177.015.266a12.849,12.849,0,0,0,.131,1.532l1.487-.334,10.417-2.335Z" fill="#fff"/>. <path id="Fill-8" d="M5.752,22.465A13.016,13.016,0,0,1,5.3,21.006" fill="#fff"/>. <path id="Fill-10" d="M9.817,26.033a11.418,11.418,0,0,1-2.58-3.919l8.245-1.944.024,8.932a11.4,11.4,0,0,1-5.688-3.069Zm7.212,3.286L17,18.247,6.777,20.657,5.3,21.006a12.742,12.742,0,0,0,.454,1.458,12.877,12.877,0,0,0,1

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	82156
Entropy (8bit):	7.988544253002294
Encrypted:	false
SSDEEP:	1536:NYJXg/3aeiN0FmBBI7id/ZO1g9C30ZGnVKAzXws8h0vLhFGnl+:NaAg0laZGaYV8h0vLhYnl+
MD5:	F032D25D851FB4468ECA6069CAFBAB18
SHA1:	9A7A988847871CA0C0F1B3FD4F558387D67971D4
SHA-256:	7BCF25BB5A46F5256426019BE3CFF0AA9E3BC3B70A9FAC1630064C6F3F194B98
SHA-512:	069486A0E5F7D960588B3CF9EBF01368BFAD15BCE8EBDAB5417FA5941665CA1A0576AB6AADF9D39B6A5BF9451DFCD49F5A009E145A3F02F13A3D31F24B854A3A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................\|wc..Y,.,.T.;...=J..R..J./.+\|Lr:.{]<w..t.^\....U^z.URXj..[8n.su.z..N.1.Zl.h..BOSn+...~yZW.Hvx..e<...am..E<...M.%ee.2Z.Gj'6Z.4.g.;;..[.....[......t.)...S.....<....P..c..% x..z...8.E=l...........y.......w..:.>.....9.TA.q_.!...#.[...F(..mb...:..?s.u............~;dA....s@.........}.....2..\|...&......s..\|....X..C.P.G...y.[....<.}w..y.ns..n..0....V....W+K.jHa...q..Z.....$........W.s6..R4.~~.C......\|..l.5.y.L.._.F..+(&r......,YE].@..U .$.G.k..z...!......-...;......yD0 ...Y.A@.j5a.4..5....D.." !....$q......;..ZU......22.M.......ght.k'......P..w.x..._ ./..).-...#....O{.j...t..G...L...~.-l.Tfh.`......G..Q.(............p../..:.....=.p..3o.}..kHr

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 992 x 400
Category:	downloaded
Size (bytes):	119792
Entropy (8bit):	7.943024273119429
Encrypted:	false
SSDEEP:	3072:BLYAwOYDn3PzCGOGq8UWNyYhFrEM6MA5cw/Ja5RU:9YATY7fOjGXUCyYhZ6MA5cQY5RU
MD5:	22007A462C703267DBD98CE750BA3F40
SHA1:	3256B632E29BB2D07B60541D06A6F914EA8E9F1D
SHA-256:	D0AF8A2505BC16B6E4FD484DCAEDFF90EDE2B943AACC538F8E83CF39D64F9C63
SHA-512:	AA2F76A4124481BB6599EFFDCADB5FD0C559451C6296E0A7604B5A88ADF5894B6ACB545F11BC404F222C89BB7479E90C7EA8A271F820910D80F4D891B421A283
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/sponsorships/FCB/bp-fcb-partner-logo3.gif
Preview:	GIF89a..... ...................10/QOM...@><.......................ligzwt.........}ztqoda_#""\ZY............./....f.sJ)..Q4.<'.)....2...........W.....q......................S..IdVR.l......{.....}.4...y........1R.-P....,O...{...z..^n....Lc&......Wi.7U...4..n.........D].......\....N.........ix.......=Y......>.....+M.<]>Yl...._....3.'F.)J.#>.;I..........Yi.DM..Mt.%..<...Yn.......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:4935C5FDA70511EEBEACD463A8F0AF50" xmpMM:DocumentID="xmp.did:4935C5FEA70511EEBEACD

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1007
Entropy (8bit):	5.030639796015418
Encrypted:	false
SSDEEP:	24:2d593RL55yeaxM2VNH1ctLICAkzbD/jk1XGet:cLp2YJzs
MD5:	2DE2B6150938E51E42AE5B3D7AA395DB
SHA1:	16316F2EEE75F719B189A0910ADE97E9340CF701
SHA-256:	89A6684E4F9E31C9B4E5A6531BC1EC4B97C10E427C6C311C82D24DB155416ED2
SHA-512:	1A6329E45B55B34462FA79477A1879619017C6AC0D64FEACBD1CEEB06F58281A8459256DD1B1E789371496B6F3ECE994600E384F1A53F24BA76876B502CB4F2A
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Stocks.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36px" height="36px" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>IconsAssetClass/Stocks</title>. <g id="v2" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Bitpanda-Design-System-" transform="translate(-139.000000, -7793.000000)">. <g id="Group-22" transform="translate(139.000000, 7793.000000)">. <circle id="Oval-Copy-3" fill="#31708F" cx="18" cy="18" r="18"></circle>. <rect id="Rectangle-Copy-8" fill="#FFFFFF" x="9.38333333" y="16" width="3.91666667" height="11.75" rx="1"></rect>. <rect id="Rectangle-Copy-7" fill="#FFFFFF" x="16.0416667" y="12.125" width="3.91666667" height="13.4723062" rx="1"></rect>. <rect id="Rectangle-Copy-10" fill="#FFFFFF" x="22.7" y="8.25" width="3.91666667" height="14.3426768" rx="1"></rect>. </g>. </g>. </g>

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1800
Entropy (8bit):	4.396943011607703
Encrypted:	false
SSDEEP:	48:cjYu0OFjnullZOEI9HuoaWA1Xcek88M/WqMZ5UKl:7uHdn0I9nAhceT8M/WhF
MD5:	9DDEC95C944D67575408645EB7254ED0
SHA1:	89041DF143BFD3A99B1FF852BC8743DB672BE970
SHA-256:	63BA4ADD86212DBDA02B68252C7F3BB421E5EA028A078C3ACBBC6CF983ADCF87
SHA-512:	03ECD7B313D20A336F72C65FC86F1453F0B8CB1686E434379F721027C06BADDF7BDA66CE6A0E75328FBD2531515B321B748F128BA1ADDB3C29850232C59DCD26
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="nonzero"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z" fill="#F2F4F7"/><path d="m14.094 30.452.439-2.786-.977-.023H8.89l3.242-20.56a.265.265 0 0 1 .264-.224h7.867c2.611 0 4.414.543 5.355 1.616.441.503.722 1.03.858 1.608.142.607.145 1.333.006 2.217l-.01.065v.567l.44.25c.338.17.64.401.894.68.377.431.622.978.725 1.626.106.667.071 1.46-.103 2.359-.202 1.033-.527 1.933-.967 2.67a5.491 5.491 0 0 1-1.53 1.677 6.21 6.21 0 0 1-2.062.93c-.76.198-1.626.298-2.576.298h-.613c-.437 0-.863.157-1.196.44-.334.286-.555.68-.624 1.114l-.047.25-.775 4.911-.035.18c-.009.058-.025.086-.048.105a.13.13 0 0 1-.08.03h-3.781z" fill="#253B80"/><path d="M27.33 12.43c-.023.15-.05.304-.08.462-1.037 5.326-4.587 7.166-9.12 7.166h-2.308a1.12 1.12 0 0 0-1.108.95l-1.182 7.495-.335 2.124a.59.59 0 0 0 .583.68

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	757
Entropy (8bit):	4.751083344870147
Encrypted:	false
SSDEEP:	12:TMHd64lWNxMiLjI+xwseuXf+fr9JdDgXf+fr9jdDgXf+/hrE:2d64lSxMijI+rv+fhJdDgv+fhjdDgv+G
MD5:	8A358FC27F7B244C296100EF34819EB2
SHA1:	7C0155DD0D58AEB9FF170650943D02154010BF9C
SHA-256:	BD36472406B7BD0011DA1A8769919FDE06B051BE12C71E1F82CE3A04DFAD45E9
SHA-512:	E683C1D0EB003609B669D2B72F205D4290CE10EBF712D3CAA8628368FD81C0E411BA10ACA25B335E289A8287B81ACC998370E8E477D98459D4CE193851CD6E77
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/xag.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#BFBFBF" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zm-3.938 18H8.439c-.47 0-.89.29-1.054.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73zm13.5 0h-5.625c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73zm-6.75-9h-5.625c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5A1.125 1.125 0 0 0 20.813 9z"/></g></svg>

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	82625
Entropy (8bit):	7.986954708227412
Encrypted:	false
SSDEEP:	1536:+HKtx/MN4kkvobz177WTrZJ97r/GBPkgYAbwKShk231HA5kk+pNBVP05jEUR8Tc:FrMNCM577WPZJ97r/GCgVbtShk231HAn
MD5:	7E8B032108935D356F51B3865B43EF9C
SHA1:	F50C89DCE5363AAE0B7FA823DDA31D86399E1BF2
SHA-256:	346A5958C84D540DA181444E915E3A8CF727D3EC8D956A29812A993E432532CF
SHA-512:	B1EF0998817C026A01F55407FD76DDCEC4F88307555A022831D9A50BF647AFB736E566DCA6BC0DDD6E591E4F2FF07FA520590BF37385BFAF3E1890047135EEC5
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/71/92/7192237c81db41a3d14b7020d0c3cada/7192237c81db41a3d14b7020d0c3cada.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................K.O...<.&.....C..t.m...0;5.?Z..&...r?....y.P......h.J.g......`."...S..9}...I...o.$.v[@..=...\..t..)...P..7.d.....QKt.C:...;>..3.&.8..rtr../...o.u.UUmeU.....h..Mk.^..$.T.T.v......~..R~@Xt.?..._..w-..%.....pl......D. S.\i.o...L.?........m4..j..:E(.>....=....{..Y..q.(.i.=..W.r..R.[....#4..W3).."..1x...,_._nEg..O.M.2D....L.v\b..R.l.. .J@......G.+.....G..y....Z..-'.I...t...O.b..'..\.....a....#......8x...6....4.{?.W.y/f.VZ.7.u..]B.."-.v..>.......ES..]P..1.+.I.....?..'...[..r...3k. )..1..cG..a..T{.>.......(\ZH...b...U..2j".9C......[S$...)...fm.....J..i%.......r...C.\|...d..m..N..P-..E.4........z.X.f.,">`f..+K67............v..;.=V...r.K.x~.o..1O.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	757
Entropy (8bit):	4.7441985550689
Encrypted:	false
SSDEEP:	12:TMHd64lWNxMiLjI/wseuXf+fr9JdDgXf+fr9jdDgXf+/hrE:2d64lSxMijIVv+fhJdDgv+fhjdDgv+/O
MD5:	E250D8589DCA206BBE024E3CBFB5EC77
SHA1:	1B09FFBDB0FAAE26286B090101AC5F51822C349B
SHA-256:	E3D1AB7B0C403D2109EA132B8441EF4352CAB798EC85244BE4FD1C72C28E59B8
SHA-512:	C33D520DE61E7D6F7BCB077C6F16A35173847F9E724425F7AFD4DF898BF2104E439FA6372FBF71A554FE25A18978E42719EFBB15A2F138D31B1CE5DB0C5E9A3F
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/xau.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#B68E46" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zm-3.938 18H8.439c-.47 0-.89.29-1.054.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73zm13.5 0h-5.625c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73zm-6.75-9h-5.625c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5A1.125 1.125 0 0 0 20.813 9z"/></g></svg>

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	66436
Entropy (8bit):	7.986312336477505
Encrypted:	false
SSDEEP:	1536:k27nBx42J7L2QHmGqwgQzxdb5D1RXQGzjeES1OMDdjtSR:k2rBm2J7VmGqWzNBzj1SL7S
MD5:	FE31BF9CB5AA94E3B3EA1199DD620D12
SHA1:	CC3E0866EF5EA718FE0C78653F7D2954342670DC
SHA-256:	92F0F56AA52106420139CF0E1AC053B0BAD225B69F81B34CC963A42798A0D108
SHA-512:	C06C2FB13F983AF4B98EFCDCE634DCE6D0C3747CCC2EC707F2C1F91A1FE3448BC2861410FCCCFA3BAAD957054AE2C030B35A50F83F6CFBED9C7B0102144CACDE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................A;....RLN......qM...dHe......%..I...R4%.D.>...gm..oQ.!.%...&..1.1.].x..%...%.8pq.)4`.C........J...V..R5:.,F.,...j\|&fG..5..0I....W\|b.Y-..vtH.....'@]........3.c.-.`.iZ..`..<....".cl.l2....A..CR9.B.....D.D,q.c..K:e....r'....g.....0,+.Rp.]...............Nj}.x...>...)C..........4q....4..1....4..;4...4[.KZV.PeK.T.)...4..R.7. ,{.ku.h...m.-.y3..J.g....W..R.I*r...F..A.....#.7..D..aX..V G..Q.7..T.l..&.$.^.u....Lv....:.\...#.[.(.C......M3.o.....\.5.uJVT.L.(\|..x...<.r.,:^eR...].Y_S..M.k@&.B.6'.5...u..v..P.Q.(=..f.&.oo...y...3..K....W<Y8.[6.......W.#.!u.p......$....b.d.-...q.<.0&D..........H.m3.......W8wnr.}..8.......\|..j.......Nl....C8V.#...

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (396)
Category:	dropped
Size (bytes):	560
Entropy (8bit):	4.855010958840611
Encrypted:	false
SSDEEP:	12:XHZ4MBWKILxSvFguF9OKCsawzN7sRVW3J3gaULAOhXao7:XHmMBHILEBaU0I3J3gfLAOhXao7
MD5:	9615C833564A3C0AC121899045B74BAA
SHA1:	3D6D14BC29E1B09C25650FF954B94C9081BF30B7
SHA-256:	9DEB1A7DA12E56B1DE9D32034DFCC593A2BAEF75C1CED68BA3C6263598A597F9
SHA-512:	5EC53E045FD486FC65A206C48BC10B445505BE4FF5DBAB634C8588DB07B2054D818C50CFAC9DC81E723EB258E2822AE019BA621E1CF404D46BA9A5C1DCD53133
Malicious:	false
Reputation:	low
Preview:	Generated by IcoMoon.io -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">.<title>asset-xrp</title>.<path fill="#222" d="M16 0c8.837 0 16 7.163 16 16s-7.163 16-16 16c-8.836 0-16-7.163-16-16s7.163-16 16-16zM23.003 7.619l-4.529 4.479c-1.366 1.352-3.582 1.352-4.949 0l-4.528-4.479h-2.865l5.96 5.896c2.158 2.134 5.656 2.134 7.814 0l5.961-5.895h-2.865zM8.96 24.013l4.565-4.515c1.367-1.352 3.582-1.352 4.949 0l4.565 4.515h2.865l-5.997-5.932c-2.158-2.134-5.656-2.134-7.814 0l-5.998 5.932h2.865z"></path>.</svg>.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1015
Entropy (8bit):	5.198068861609223
Encrypted:	false
SSDEEP:	24:2dWVgy4lCfGMsPKqjs0gKqjsWDjsVDOU/GfjsBI:cWVgf2CWoOU/GT
MD5:	DD691BA6977370E6D0CDBD36D889FE83
SHA1:	6B975419FB34078BA2126323422154027AEF8F0B
SHA-256:	B9C7F5B45FBECDACFE9B7480DA241FD5907E7AB61EFF2079BFBB7127B304CC4A
SHA-512:	C9D4F9B3622B3619E396EEC893FA29DCCBB4FFDF76E65234580CAE8493F5B9C13ED7095523B480165948FEAAC76AE0CF7EB84ED026C188D58636F1EA0761027C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Crypto_Index" data-name="Crypto Index" xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <rect id="Rectangle" width="36" height="36" rx="18" fill="#f2faf6"/>. <g id="Group_138" data-name="Group 138" transform="translate(-210.76 725.61)">. <path id="Path_295" data-name="Path 295" d="M234.654-710.521" transform="translate(-6.806 -2.897)" fill="none" stroke="#27d17f" stroke-width="1"/>. <path id="Path_296" data-name="Path 296" d="M234.654-710.521" transform="translate(-6.806 -2.897)" fill="none" stroke="#27d17f" stroke-width="1"/>. <path id="Path_297" data-name="Path 297" d="M234.831-705.39a7.1,7.1,0,0,1-7.1,7.1,7.1,7.1,0,0,1-7.1-7.1,7.1,7.1,0,0,1,7.1-7.1" transform="translate(0 -1.941)" fill="none" stroke="#27d17f" stroke-width="1"/>. <path id="Path_298" data-name="Path 298" d="M245.527-709.39a7.1,7.1,0,0,0-7.1-7.1v7.1Z" transform="translate(-8.637)" fill="none" stroke="#27d17f" stroke-width="1"/>

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65443)
Category:	downloaded
Size (bytes):	414735
Entropy (8bit):	5.245689648889861
Encrypted:	false
SSDEEP:	6144:dxP6aMlomWacVFOS6IMboeAbnXydqw8NvZgfGuvrbaTVrYWna:dxSaMlA1T6nMZnXyghgfGkwg
MD5:	2961972A8645E5F62560C78AC7873322
SHA1:	00C1C84FF0FF1762392E5B2346B8B6ECCFE1D1D3
SHA-256:	028C786F5D3637B2ED35CB00B83122FCD291BB65C054DA49EA9A8874F5A3D27D
SHA-512:	DCCD73A8225D995109B98C6EEC50D4CB7A876A191BD360532BFF783A11D445E4D74C9EA15AB99EA4483867E1EAEC1A723825EE7735E8DB13B22EFA6EB2685382
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/app/v2/js/assetDetailBigChart.min.js?id=2961972a8645e5f62560c78ac7873322
Preview:	/! For license information please see assetDetailBigChart.min.js.LICENSE.txt /.(()=>{"use strict";var t={384:function(t,e,i){var o,r,s;r="undefined"!=typeof window?window:this,s=function(t){function e(t,e,i,o){t.hasOwnProperty(e)\|\|(t[e]=o.apply(null,i))}var i={};return e(i,"Core/Globals.js",[],(function(){var e,i,o=void 0!==t?t:"undefined"!=typeof window?window:{};return(i=e\|\|(e={})).SVG_NS="http://www.w3.org/2000/svg",i.product="Highcharts",i.version="9.3.3",i.win=o,i.doc=i.win.document,i.svg=i.doc&&i.doc.createElementNS&&!!i.doc.createElementNS(i.SVG_NS,"svg").createSVGRect,i.userAgent=i.win.navigator&&i.win.navigator.userAgent\|\|"",i.isChrome=-1!==i.userAgent.indexOf("Chrome"),i.isFirefox=-1!==i.userAgent.indexOf("Firefox"),i.isMS=/(edge\|msie\|trident)/i.test(i.userAgent)&&!i.win.opera,i.isSafari=!i.isChrome&&-1!==i.userAgent.indexOf("Safari"),i.isTouchDevice=/(Mobile\|Android\|Windows Phone)/.test(i.userAgent),i.isWebKit=-1!==i.userAgent.indexOf("AppleWebKit"),i.deg2rad=2*Math.PI/360

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	99494
Entropy (8bit):	7.9903467958837195
Encrypted:	true
SSDEEP:	1536:yL4J+oAu3iq8STitam+9J/9Ua3uFsPRl/3f4v3KJPCP9m/eFZ2BhbczqH7YT:1ArHtam+9JF/uFsP703KQm/y2nyT
MD5:	FA3593318A845194AE08808524CF171A
SHA1:	2D76D205479C16383ECCBD308AFED98C2C7A57C6
SHA-256:	427A99DBA59CCF730BBFBB1494A93F45CCE04DF76FE4FA36315A058B979D6146
SHA-512:	D0CE19D290E370CA0A48B102342FE415777BD058C10F501B31636D7022D621C457B81EAB1916CE719BD1062ADB874BA844A103E3B443BF35812ABCB9E807BF74
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/62/4d/624da3679000613c554103de16f6296e/624da3679000613c554103de16f6296e.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................9.R........4.rac.....{.....`&...7...!a.4.].R...W..u).......0z...EnG..f....%..OC..Z...%V..V...E'(.....2n[`gex.\|..,..Q..r.z...a[.#.GAy..S.'..h.H...Zm......#....$.?9......_r...\|.mED..Y...\|N.%;.p...))]....R..$.:..(..ha."..}...a.H..5\..<.S[.....S./.F..-......U..E..k..{..p..;:\|@..b..1.G..T..FnW.n#.OC.5{F@m.S7r.D^..^J..:.I2)..u.U.+.<.4..3....7.....L.}.3...$.MZ.k.#.'..2.*.t.m..D...,.Z.tg.T.....r...T-.W\.<$.2..6...;.vTr....[...i.&.o...5o.F......%..B:.z.2z. ........V.g.y1.{b.{.O.2wA........9%.C...94:]J.KZs..LW0{C...m.-M..p......o6rK_....I...X .?(T..rq...F..\|..k...u.......A}".p..f,..v+.........."a.g.E.;......l.....9....7+.!...Z.`.=.[.....V....}x.....

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	35741
Entropy (8bit):	7.953001167123851
Encrypted:	false
SSDEEP:	768:epn/7FTJStUaMiXNXzFHvK7NiRrke4RcMuMItktCl+xA:epn1JStUaM8NXzFCNCA1CAxA
MD5:	792CF90256E0658E45847461CBEA9385
SHA1:	D7A3B77F6D289F12C00C2A842F6C84B5A4D00A87
SHA-256:	E1FB92278B8925B26C65188DCDA7D1D3AE25E8793035D5A161FD8339AACA05EA
SHA-512:	EC5DC935EEF7AFC95E28E179BF759CE8705BD00732DA039F0EF05A4AEEBEEC918A1715228753C1C1252006F6ECF1C6714812490F93A7C41BC2BA5A816BC5D6E1
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/bb/8c/bb8c585b8fd73c084a0b62e574bcc956/bb8c585b8fd73c084a0b62e574bcc956.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................x.`.....@..T..`... ..A .... .I..f.A..D`.J@.$...:i.....\g..z...%.......[.x.{.Ny.^.r.'.'.pK.#...:.X.y$.Z..$...L.....5.$..\..x3.,w.h.s.Z..8.....hk...tp.sw....qbCQ.I8.5.&Q.Q..../...g.22(PI.Lf@dd...Q.....s.H.r..Cq4Y.?.}."\|.P_..C.....O._$=q'.6w,uA]5Mz....(..4g../.8&^p.bJ.K..0...2..0.7..r....,m....~qZ..Xy..W..(Y.((.n.a.q..0Gf....n.........D.....D.H...w\|#.^;...c.uh..k..D..,.`.iP.h.%.R..P.i3....X....m..<I.w...j.#.^.x.ju.Hz..._..].?....O..8wsRF]\.(.E...@.(..P.H.F....(.}@....c.u.......jR.2.@60}E./-..dT.0.) j .J0H2.iP.)A............E.y......\|...j?..9.m...s.cYvhH..E.2....[.r.SN.P.:..@jA..............bN.N.r...ns7H..k......._.v..+.......e...hG..[..^\.'b...

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10343)
Category:	downloaded
Size (bytes):	10436
Entropy (8bit):	5.088662264045506
Encrypted:	false
SSDEEP:	192:GwH1b2JlOhnp99VWhQW4eqyjqRPtCLj2sqqqjr4biF2ACplvP5l7cZzkLf:GTJWp99hWvGFtCB48bgCfykLf
MD5:	71732FEC015742C40848BE16858BE73B
SHA1:	3B53FAC976BD8638858D77332A6756C48F8AC4E2
SHA-256:	11D3B2AECB7697F01924FC8B436C87A96BD76EA984F4669A03CFEB304A5622A0
SHA-512:	E06FFBC52C284EA9082853315579B0EA1482ED5A63C311BD8243C16EDA4EAC8B78CC78C0BF78502D7693C3011DF1C920B62ADCF4120BE5F5A4DC239F1D501E01
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/app/v2/js/append-asset-page-schema-offers.min.js?id=71732fec015742c40848be16858be73b
Preview:	/! For license information please see append-asset-page-schema-offers.min.js.LICENSE.txt /.(()=>{function t(r){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(r)}function r(){"use strict";r=function(){return n};var e,n={},o=Object.prototype,i=o.hasOwnProperty,a=Object.defineProperty\|\|function(t,r,e){t[r]=e.value},c="function"==typeof Symbol?Symbol:{},u=c.iterator\|\|"@@iterator",f=c.asyncIterator\|\|"@@asyncIterator",l=c.toStringTag\|\|"@@toStringTag";function s(t,r,e){return Object.defineProperty(t,r,{value:e,enumerable:!0,configurable:!0,writable:!0}),t[r]}try{s({},"")}catch(e){s=function(t,r,e){return t[r]=e}}function h(t,r,e,n){var o=r&&r.prototype instanceof b?r:b,i=Object.create(o.prototype),c=new A(n\|\|[]);return a(i,"_invoke",{value:_(t,e,c)}),i}function p(t,r,e){try{return{type:"normal",arg:t.call(r,e)}}catch(t){return{

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	71138
Entropy (8bit):	7.985489554280049
Encrypted:	false
SSDEEP:	1536:LjHV6o8+//LH9JNWOUOeiQQOGajDWybOtjRebrC5yN+:f16oP35JN17dOZjbaDGrQyg
MD5:	86558220890D320F5717916627CA4B82
SHA1:	D98877374F7133155F84A9F868071F4328D27038
SHA-256:	64ECBBEF607C23AB5D60CA9FE1E61F1E1AC6FA293CD9B32469C13CE3B1C89635
SHA-512:	D5CE15D6E69FF8A40DCA95FBC3AD6FBAB5BBB9E60F2C9C2EBA7DAE0298F56D985E0DF67BB7DF257EDBFE03ACDD4EBF4C33F4D47F7C031D2E3A090375BD586689
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/6f/8a/6f8a0ea042721d3749c9d6e82665eb75/6f8a0ea042721d3749c9d6e82665eb75.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................z..7Ts.u...rb.R... ...[...a.,&RG.N.+..~.t......x.9.(H...M..J@.\.;.,...\...a...n.....N..2...w..D...GX.c.x....~.-}..P..w......eo..2.83G..?6.Q....<tH..44..f.M...,\|...C^.uX..8;.2.fs.....x.s.Z.x...........^.&..IG..!..TRD.E...+..Yl+.\.....h.N.&R6\|.S.'Ka.G..:..N....4.w.U....d5.....X,.^.o.'=I..K....LU..Z..!V&.m.W..Wy.(.w.B6.......7.<.L..o.&.6.Cs.9........../..t(Uo..S....F...U....v'.A=..^p.......kECl.....d...'..I.+...%t...R<4..%5h......O.o....+....&BNx.<zt.+.U..).~..\:.1t0Z..D..@..>.I..x..u..Zq....{WI.2=J.G.OY...s..u...4;V..X.v'F.~.}....L~....0.....Es.....i..u....s+.F..-R3....3.....\z.K...].Uo.H..'W.....N .`..@.8....H..5.k...-.L?\>L:#2a.R

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	49067
Entropy (8bit):	7.980624928300864
Encrypted:	false
SSDEEP:	768:sSjMvBjjITl2YEle1d9mwBGp05XqRgZHmTlHsjoCb4mpzecptIt95COO1efy:XMVD2d9GuXwgZHmTlMWmpzzpCJCO0
MD5:	2B232F2B56CC15AA880F8B7B39C3B09E
SHA1:	3DAFDB96477718CFD18B79CF6DA8CE5DC9CFF2FF
SHA-256:	50DEEDBF178E65F23AE3D724F7AB0EB783C0328AAEDD9E9893EE6A6D7F2F9333
SHA-512:	756D7DCA2A5D44CF99001D8515CB579452639C78FA1F53CE6A4C7905987DD586E381EA584F1B68D4F3472AC9841E6F4AE60DD4F87794E3B9F1FDD72C1253B364
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/9a/9a/9a9aa68a8cace8da93a92410cd2f4d7b/9a9aa68a8cace8da93a92410cd2f4d7b.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".................................................................................... ...){D..d ..f]..=.....#...oS..w_....;..j`.B.G9.[4..D.v7.-....Y..t..V.I0+$..V......{..$...WD.Q.4.hQ.....r}r.8.P.T..b2Mt.Q.T,.PF.0..q...}z....S...0{.NJ..Ua.K/3...p.H(..`...^i).....n....3;......56%=W...`z4.+me..E.E...2....N.2.(.....@.t.h.Y...R.l.'..i....:..,.T....Ha..bV'.A.....^.(4....LR..n.]4~......~T.T.b'T.rP..>,[.%...wFl.....0....P.P.5..a.@.U..Qe_7..V:o..p.Nl...C....C.z.L...8,..yU..z.4O@..r..tV\|4.j@..k^..H.bV1DO.... 45..~(..@"e[6V...G.puB>...4..:..B.$...)li.-.ZU5.]>}!_..6.....k...B(."Qx.oaC).. T[.j.H.W2.)b..q....MC.mz..-kW#h...X..uF.+.......4.....B.K.r.hX..+..$...N.!..Y.M..4..Q.E)J..$..a\..X.h..eNU......X..a.....32....x.h......16.6S...s

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	49750
Entropy (8bit):	3.811656854940455
Encrypted:	false
SSDEEP:	1536:4p/QcnSmLrO0znMmB6qM3WsNfkUii3dXLRspa:CzzC
MD5:	CAD941AF7A899A4B48019EAB7EC22124
SHA1:	35E634F3F0F7779568608D69AD57FBCAD5E95D28
SHA-256:	404E5CB06876817B327828E8E85675C1D35975C59BF8AA62BEDABD83F703BF20
SHA-512:	01E91D86314B41ADA36D77490FEFD973DFDD10FAD3DFDDEDAD4AFF02DBDA66B0FE7F1C428E2DFD0D9EB2B4323652F5BDD6B321843EA3B5B130731CBC22ABEDB6
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/BTC-halving/spotlight_icon_menu.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="56" height="56" viewBox="0 0 56 56" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="56" height="56" rx="28" fill="#F2FAF6"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M43.0313 19.4584C42.8434 16.3451 37.3196 14 30.1834 14C23.0472 14 17.5439 16.3451 17.339 19.4325C17.3358 19.4977 17.3358 19.563 17.339 19.6282V25.7846C14.6232 26.8039 13.0825 28.2442 12.9698 29.8469C12.9663 29.9183 12.9663 29.9898 12.9698 30.0611V36.3763C12.9664 36.4402 12.9664 36.5044 12.9698 36.5683C13.0928 38.2745 14.7598 39.7628 17.6703 40.7636H17.7011C20.3321 41.6166 23.0677 42.0325 25.8143 41.9971C32.9266 41.9971 38.4538 39.6594 38.6587 36.5572V36.5092V36.3763V30.2162C41.3779 29.1933 42.9186 27.753 43.0313 26.1539V26.1243C43.0329 26.1071 43.0329 26.0898 43.0313 26.0726V19.6245V19.5064V19.4584ZM18.3705 19.5242C18.5003 17.3933 23.2794 15.0925 30.1833 15.0925C37.0872 15.0925 41.8663 17.3749 41.9995 19.5242C42.0012 19.5451 42.0012 19.5661 41.9995 19.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://stags.bluekai.com/site/59574?ret=html&phint=id%3DZGkACWYr8zMAAAAIA98YAw%3D%3D&phint=__bk_k%3D&phint=__bk_pr%3Dhttps%3A%2F%2Ft.sharethis.com%2Fa%2Ft_.htm%3Fver%3D1.1325.23384%26cid%3Dc010%26cls%3DB&phint=__bk_l%3Dhttps%3A%2F%2Ft.sharethis.com%2Fa%2Ft_.htm%3Fver%3D1.1325.23384%26cid%3Dc010%26cls%3DB&phint=__bk_v%3D3.1.10&limit=5&r=76591364
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1961
Entropy (8bit):	4.840978733418114
Encrypted:	false
SSDEEP:	24:hPwJQ6hveupPoILRCYyRLuuI6MiQx/IcbrBI3BT8MP1Mf:tw0upgYbyAz6Ux/frBmYrf
MD5:	9485CCD9ABAF1F3257286A43B620A09D
SHA1:	473BC0172438BC49C364614B8C89514C8355ADF6
SHA-256:	B8196746315D0593DC9C53AAC005163A8745A606E78F232D9666B6913AE0DB9B
SHA-512:	14789E55C22429509C11FCF113325951291C7F797EA83F8A413DF85D87ED7A84FCFF98796FCB340312DAF7E60DF9722C652B1CD53F083F3272E0CB1AF31F3EA8
Malicious:	false
Reputation:	low
URL:	https://app.plus500.com/Resources/dist/Resources/pages/offline/offline.html
Preview:	<!DOCTYPE html>..<html>..<head>...<meta charset="utf-8">...<title>Plus500 WebTrader</title>...<meta name="msapplication-tap-highlight" content="no">...<meta name="viewport" content="initial-scale=1.0, maximum-scale=1.0, user-scalable=no, width=device-width">...<meta name="mobile-web-app-capable" content="yes">...<meta name="apple-mobile-web-app-capable" content="yes">...<link rel="manifest" href="/manifest.json">... Chrome, Firefox OS and Opera -->...<meta name="theme-color" content="#222222">... Windows Phone -->...<meta name="msapplication-navbutton-color" content="#000000">... iOS Safari -->...<meta name="apple-mobile-web-app-status-bar-style" content="black">...<meta name="msApplication-ID" content="Plus500.Plus500">...<meta name="msApplication-PackageFamilyName" content="Plus500.Plus500_pssm8hpqmkeyc">...<link rel="stylesheet" href="/Resources/dist/Resources/pages/offline/offline.css">..</head>..<body>...<div id="offlineWrapper" class="offline" :class = "isRtl ? 'rtl':

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1120)
Category:	downloaded
Size (bytes):	1302
Entropy (8bit):	5.3458971540736435
Encrypted:	false
SSDEEP:	24:bkMxxGzXOGBmuDAJSa7egRWgzQunfvJVu3iPCMgsygDKGRWKMSoI9We1F/b:7xxG5zqS/gwyPX7VqrsyEKGwKKI9WYT
MD5:	4D25E876AA91DAE34BFF999501EEA070
SHA1:	824681BDCF9775A9A4C5C18BE49EA52C881056BD
SHA-256:	C6DAE29905FF46E9DF27CC0B18DFE597D5D402DB99204BB982E6B7FCA036FB92
SHA-512:	7D82252827CBF970D90347CF0B4E1EC789F05A519FCAED6CB93469AC4999CAC582A61D43BABD83C01ACF040239FA53D7435AA2995EF093A4E1DBFA8B297ECBDD
Malicious:	false
Reputation:	low
URL:	https://onlinetopchoice.com/go/jump.php?id=mtd0013&pre=1&tags=lp0ai49b7tf5&pl=2
Preview:	<meta content="origin" id="mref" name="referrer">.<meta http-equiv="refresh" content="0;URL=jump.php?id=mtd0013&MTDRef=&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=lp0ai49b7tf5&pl=2."><script>(function(){if (!document.body) return;var js = "window['__CF$cv$params']={r:'87a8a8771f8fa4d6',t:'MTcxNDE1NjM3My43MzQwMDA='};_cpo=document.createElement('script');_cpo.nonce='',_cpo.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js',document.getElementsByTagName('head')[0].appendChild(_cpo);";var _0xh = document.createElement('iframe');_0xh.height = 1;_0xh.width = 1;_0xh.style.position = 'absolute';_0xh.style.top = 0;_0xh.style.left = 0;_0xh.style.border = 'none';_0xh.style.visibility = 'hidden';document.body.appendChild(_0xh);function handler() {var _0xi = _0xh.contentDocument \|\| _0xh.contentWindow.document;if (_0xi) {var _0xj = _0xi.createElement('script');_0xj.innerHTML = js;_0xi.getElementsByTagName('head')[0].appendChild(_0xj);}}if (document.readyState !== 'loading') {handler();} else if

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	83089
Entropy (8bit):	7.987160176504003
Encrypted:	false
SSDEEP:	1536:qoL1DM5LS0MZxvy6j3JxhIiOW+8mfo0O1jaD8pNrNlENi7AJlizlC+nKoPiSyK+f:qoLpMNTG59xCWn0Ow8PrNlENi7AXizl8
MD5:	224BBE4D0F32851E9D2370421A6D5A9B
SHA1:	4BD878C24880381336347DF1562CDA9FFD570234
SHA-256:	69CC3CB0F68C07496DFBF7683F4B2A8990B1D463FCCA9E1A9ECBD6EF5689B48C
SHA-512:	33BDC1949D264F5A0EE4AE7D8CFFCD5105E1FB23557B22179534B6A729EF6C2AE3D23710B71B7A044466DFDDBEA705E466F0A28CB17DD1B79B5CF6E7381C961B
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/f4/3f/f43fe143bb66878a7be75d0fd23e06c1/f43fe143bb66878a7be75d0fd23e06c1.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................<.f.W............/....[..CN..O...w1...w.).l..,..../K..9<...-......-...F..\..n..6.}...?......WR..9.=y..ff}....<..5.m...ag.Q... H.A.t..=...Z`..M...........Q.z........s33........m.(.!...-....>..33...\t...f....N.@........_.I..B...KK.&.."...J.N.aC.'n.W....h..fc...\|........!r..-MF..>6.....E.V.7........6m.CK".p..........n.k...?2..o.L.......}dT..k-.f.fU.V.-_~......m..q.k..ky....u%.q.x.gE._S^.y...(r+.....+...SbI7=......./e..)~..D..uL.Td.[..:.-...c..%.....2`........9.Vj.7.ou.o.......ln/.J.>.G2P....c.(m[!......Ci....I..w.d......c%V2E.xT...zMK." )....3D.B..n^WSW.M...6r.....0..U.o.Wuo..oyV1...ynl0.....D...Nd\.=.Z.n.Uoz.....YK..F...E...w`..j.[

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	downloaded
Size (bytes):	423976
Entropy (8bit):	7.9890280631283215
Encrypted:	false
SSDEEP:	12288:Y4P2h63mUJb6S/R6REsWnIuXrP/8zKcmuBJBtFg:Yoh6S/Rup++HmuBly
MD5:	22583A1CE2F912E11F93AC685D76DEDE
SHA1:	B78CB230BEF0D466B482F5711342D10BAD19CC90
SHA-256:	56113AD94BD53B3C125DE70E3AC3F31A986894DA1B2FBE32213C8317E8F16EB3
SHA-512:	74F0FAE64E7281B86845111E19AF099D6E87F0FE9E108FA070C7AC8BD7AA5008D760C4B178B3E4913C52FE96AC0D3B30D4D2F42A3A7289E3A310D6843D6B9EFC
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/1200x600/793/55/5b/555b64c17d8909e2376acd8438a583e5/555b64c17d8909e2376acd8438a583e5.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X...".......................................................................................Y.].6y....~.s4.5..u..rT%.MI..Y{t.qM .k..:..N....Ff.Y.c....1Fj9.G.}...B.m.,..hA.....x.a3W.F....8.Q)h..>.\|..qe..g.)....P.........%O..Bv.T._.X4...._.^.:....!x.o...%D.S...[..w...xv.N....$j..X..d.........u.n..H:\|.....V.....{.g..m@...lh$.B=/..eT.r.<j...".!.!.m..:.Bl2..,..h.+6.:.o........._..nX.c..6 ...yQJ..h.{.&.k.+..#.q.C?..{.1m,.c..).EZ..Y.w.;..}..G.o...D....}..JM.V(.v!+N.0.'.....K...D.](H.)?gi.x...8.....N...K.o_.D...J.7I..hw7-.-..QV ..a...l...5:.}...O.?5h=...l...:1.....0.[.....\....u...Vd.vo.X.y....[.v..v.9.x[.57..i=.@.6c.........\...........F.[.6.-.0.A.\|......@.m...4rdv..S.n.'....,..A..^W....TB..}b...0n.DO..-i.....v.....#...nz-.m..)7L.

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/sovrn?uid=Ijp4ARZHzrcLtCmtRkicHZbu
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.6234651896016468
Encrypted:	false
SSDEEP:	3:YWR4brk7VBn:YWybrm
MD5:	D3D22A2C483EA5BF5E1B887D19B710E9
SHA1:	31E5F0A94EAC2CCFF4801AA97255701460C3C078
SHA-256:	4C7BF259CF71E49AA671EA413172DA39DCD72C8B7E34948C01E21F5585370602
SHA-512:	85EF64BF19C397B0F34DDF055AA27F732078C8DACE8DAAA3AE3BC9D50B81453C3621EA936FAC49BF9F194CA9905717DD8BDEF9FCBDDE972FD099FB3C022714BE
Malicious:	false
Reputation:	low
Preview:	{"status":0,"error":1001}

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	downloaded
Size (bytes):	591922
Entropy (8bit):	7.987796822480042
Encrypted:	false
SSDEEP:	12288:5z8RyZfeGxDMix/lEd6lkscrEnHmuEUqtA/CkebLPJ5v+1x1yYog8O:CuBxDMC6dpImu+tAY/PP01yYogP
MD5:	B2104644EF488222056F55B5E1F89AFD
SHA1:	9182D4313A481424EB12BDD412610ADFB81EA136
SHA-256:	880C53D65552AF12616F74F65DF5C0732C0FBAB49298BD94906FE7A56A8B6798
SHA-512:	849E5B258FF529505094DB65F02FEA0BB99D3DFD27F89389C7E6632BC188A7E38A807BA6E6663DFAD350E555C34D65A27AA72D11695082167071324FC0E33A69
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/1200x600/793/86/11/86112a473c75bb3e179e7892bdda6b84/86112a473c75bb3e179e7892bdda6b84.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X...".......................................................................................G.."...]..J[..2.$q.U.....I.v....<G....D..L...h\OI>d.{.....\|7x`O&....h...r..o$?......'...3..L..6....X.1.q.....j.....<..#...8...t..,.Z"B,...Z.c....\.'.5R..G..E.-.f;p.....(..v.....%.C...9........w...,.9...,..K....J..O..j`nba....Ey.A....>T./.p%...;.)f3... )...F.....8.h..E....8\,.Km...2A..O.......=Q.o..!j.Si.Y.,y..0.j".).o.R7........H[...\|......0.}/@B.VjL....x6R.9:....b.d...'..d...X..[.d).\|( .`..v$.$..'&J?d.7$*R...[S.66.E7q..?:i...c..Z.T.}.....L.%.1..,..]...8.sk.....r.....u2.6.......^~,.O..z.@.......x.;. ...@......Z..Z.m.....4P...h_b.8....q.....1...t=.....h.0....L..P....o....B..(..:k.mSz/..,.. ...iKTE'%\|.Wh.`...P'..U1.x.:...#.......WIH..u"..]a..r.

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1236
Entropy (8bit):	5.080553397600594
Encrypted:	false
SSDEEP:	24:2d64lj5p1adqifH8vHQNLOimCT27CsDd39eMdeTFIDnIusVdZ5rELqLz:c3jtdH4LL0xZtF2FIDnIbvAk
MD5:	12FDFC21AE7E8110D9DA60325A48662D
SHA1:	E7F1A8BB970270B48CBFDBD0D5F6EF66ADF73E31
SHA-256:	14EEED7E2AC591319E7479FB388528411BF6C552D96BE65A6F191D2A8EEF11FB
SHA-512:	B62013A644940F48F017CA801A58ABB7672269FC22BE808A7BA152DACD96A04F8FF7460B5124D676DE8A005C2B7526F8BA3C74A18A296BB94A11FF6D8DD9598E
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201308.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_1308" data-name="Group 1308" transform="translate(-203 -343)">. <g id="Group_1079" data-name="Group 1079" transform="translate(-409 141)">. <g id="Group_38" data-name="Group 38" transform="translate(0 35)">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(612 167)" fill="#f2faf6"/>. </g>. <path id="Path_849" data-name="Path 849" d="M42.63,118.19l.955-5.332H40.1l.176-.967h3.488l.429-2.43H40.709l.176-.967h3.488l.955-5.344H49.8c3.18,0,5.316,1.878,5.316,4.672a4.007,4.007,0,0,1-.729,2.368l-.408.5.233.268a3.913,3.913,0,0,1,.891,2.583c.012,2.708-1.947,4.534-4.991,4.652l-.316.007Zm10.636-6.108c-.905.544-2.308.746-5.36.771l-3.3.005-.79,4.348,5.981.014c2.619,0,4.31-1.448,4.31-3.691a3.242,3.242,0,0,0-.233-1.249l-.191-.45Zm-8.5-.205h2.671l1.165-.013c2.721-.054,3.852-.278,4.485-.889l.391-.378-.641-.4c-.82-.478-1.8

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	71614
Entropy (8bit):	7.978406244855643
Encrypted:	false
SSDEEP:	1536:daH5Vik3oPa6m+HZkCeFdE7MIDX/W+QW+QCMnvdgZo+4Il2P:daroPaOi5H+MSoZQCoFko+4Ils
MD5:	077AA23A69488743688C8D88E2B4AA71
SHA1:	F0D6DA2FCEA8EA06983B265B3CBB6BD5A07045E5
SHA-256:	DD087502849E8EA25E810CE2BFEACD3233C62CF0ECE8DFA657C60482BD31C0A1
SHA-512:	D582BC6548821B44291FDB951D4DF26094AFB1472DBA50062E094EFB837742730E9377270441ACFBFA06C35AB59C1EECC9FCE77FCB0A123E54DBEBEA930419C6
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/f0/0a/f00a5135e76348df78f89978c48dd7fa/f00a5135e76348df78f89978c48dd7fa.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................R&..E...<..sb..u\....z.O8@...y.....B.z+c..,rP.F..[............R...%..E..WG..a./8uS.....Y....H...$r.#...>.(.t.d.g......K...~Yb.....zi..M..Ta.F..!u.Y.r.8..'......8Z..H..o@..2=.%.9........NL...6..:Ms..hn..............<8<"n....).:.k5>I...&..x..^H.?.....A.... 0.4........`.Vz...8.{.'.~.=.M.f.fM...{.N._....g...0.ZV..O.m.di.Dt"3.F..)\.....`...$J....@..k....[......9....9.uEq.......v...`....Hz....O#...........tF..I...eHA!OE$\|c.&..T...V.."..<..i..6...[!.l.G...0.q.:H..Z..O....2.P.R7...J.c[.....I..(H....!.d....Xz)LZ.oQ. ...0.<..\.".. aF..^.p...o.g... .....k"..cw...soX..S'..+..).../<....:.....R".X...1R..?....oW....wV)m{z..S.]..6..7B.4..U.@>.`..8;5...Y.9

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 74508, version 329.-1049
Category:	downloaded
Size (bytes):	74508
Entropy (8bit):	7.997006536362192
Encrypted:	true
SSDEEP:	1536:Uwog3I75UkTarcn78BMUmS1wtvvYEPeS4r7G7+HfEyk/ZOMqAFjSg:mRFb7JUm6IeVm7+HfRk/ZSAcg
MD5:	7559B3774A0625E8CA6C0160F8F6CFD8
SHA1:	A403AF3337E6207D144B998B9C3BED439AF562A9
SHA-256:	1F49B8706547682E2C5ED6642A2F2DCBD287DA458314B967C60D774AA7EDB473
SHA-512:	392CA665EC105F4E3B6AE13AB58DF7C74A06B9B9B4490DB01D0C4711D21FC9158B3CA61DE9A50A897A6F6F8F3C7C9FCD5A10DCDC62949428E464F20E570E9467
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/webfonts/fa-brands-400.woff2
Preview:	wOF2......#..........."..I......................?FFTM....`........t..U.6.$..6..^.. ......[.....1....p..[..........(..1Zp\w;@R(.s.......!..d[..v.l.(.>..EL.Dq...Y.......[....~..}oG.Wa.0Y.,..v...m..".2..g..FI......,..n....L(.n]..\|.S.C~Y\|....8."..TJ}.X.+.cs...b#...E..U.....Q-.2DP..g...w....V6.d.S.lJs.r..\|".ac..(.f...-..&....6k......(N.e..../R..9...r.:`..}9]..v.cJ..M..m..k.^..o..P._.o.5.-..8.....Dk.7.{._....xSk.C.Db.RhP.... kRj.....}.....F.i(...I..CA8-.9...S........e.=.f.K;@w..m.....Hxu..I..G;..)L...O.}3.V....L..Xq.L.4...$..\|.E#......0.......O......K...BI..........x_.}f.u.\7..c{...M?j..I2$l.....n..........m&.$.....\.w..H-!.u_..D..H.9P...s._....E,.Qc..."z.J..T.l..L.8.3.3.O...N..........f.. Ipm3....a. ..{./v.R............hVlcI.6..In.F.D...JY...z..!b.YuwF.^..<C..q.I9O_........7O...T.gfw.$K{ ..$.vX....J2....h..(};........~..(..I...^..i...y.....L,Q...}.......".%....B.............vUoy..$;.c..n..V...'$....K......`........H...-u..H.lY.....!pT.......6

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	80528
Entropy (8bit):	7.987708484827293
Encrypted:	false
SSDEEP:	1536:yVyvOZFnqO9NtstUunSK+zbiBQE3Pw9Ujh5Z5/qu5agLrQ7lAcCiWvamu4:7Obnv9vstFSKKE3Pw9azrTlQBAcdWvaM
MD5:	23389B80FCEF8D25466B7FAFC0C73E82
SHA1:	59333D396863E2BFB9B4BEB1771A7EBAD7F9742A
SHA-256:	B3A209612C22C32FAB101A43AF136EFCE3F0FC3973059400C460425C0D75B6C1
SHA-512:	EB541C3F1BA5247D3F3F0B6F93A147E11F6CC1001A15B598955AFBE9B1DC1FAFDD3B6A77E08FB802AE1D6BB7A412ED9B4E91B0C1437CDBE54203775B3E375BC7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".......................................................................................tnt.'..87..v.h.I..b...&p)".\|....3I.A.F.TH....Z...S.......A.....f.g....o..9Z)5..X`. .%.F.+.K....P..o..H!...Q...+V..x1.6.t].uT.s....E..7(.d.S..g....c...QH..\].c.o.f.v....-.,...^...ll.b.1Y0.....'-x....G5Q..,e[b.M~"(......e.F..$u......f.)..pr8.K>X..2eM.H.c..s0.......C...qk/..4....~...zg....`._ 1....x..z[.....e6.....a.g8..N........r.C..2..."F..=o...a.).w\uV.n.$.D.>.w~.:Ej.^.['.`..S.u..R.0..;.c.9,a.i..nB..b..{.Rz}7.a.........F.gJ.1=...^..b..e......._s..?(.c.vyi....!.Y..A.pA.Y ..a.....6w...NBf....TR...yp.L....U.G...>....Vj.P.=..uU....N...3..$"j..........e.y...P.....9G.IYA.f......?.......-....0,........-.R......'.ls3...z.N...x.R5.\.qq....dH....

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	88588
Entropy (8bit):	7.986002446443902
Encrypted:	false
SSDEEP:	1536:J6KoI9mPta+0oxudZuhldQRU5iKo0r1ulj01TC5x4hNZNal1pQ8lHl8U6h9b1:J6NOmPf0oAdohlR5ToSglj01LZNaljQl
MD5:	C1DA20EAE266204D51877EA62E1AEBB9
SHA1:	849E58183F301AC30E5E3AF6077846CA26F44B43
SHA-256:	F06C760C3370CAED0602DDF176F2EF740AFBD95CE2804042453207974A47E85B
SHA-512:	F8B9FB830082D8449B7AC935EFEDAB04B7F0E69F771783196367874A815054A6044367B5344079C31DC58D2BB2DBE28DE092CE29DCF1FF9B73D7207674D743B7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".......................................................................................?]O.. N..b.G....]...7u0....H....h../..h.E ...2..R8.(F.....F..5.Zd.6+...w.Y.......!FH>..`..9........X.S....O...j.R.2..]..IS.j+.9e.......0..C8Q......b...R.p_...Lu..[......s....-$.D.....Fh,Y...._gd0.....C...n.}.su.......k...'..F%.`..I.....v1.....}E. ..e.0....uj.K..&;r.&l../,y\.5..]..9n..]....2..U.IC4.$....v.....r....]~.j.c.....M..+..Rxj5..t........._\|)6..$...^-.I..r..ZS.B.@.q.......J.....&.....Jn...y,=..[tm..3..ahh}...p....h.....V..\....H...DB.=I\.6(xYi.......c.}.~.V.E3..w...B.s.D..............'.....G.Y.Q.`m..Z..lp,..(...2...2M<..e0f.......5.\|...^.(...5...S\|..,.I..$yt['..K..B..H_e!0(wc...3h...l...c.4..Q.~..O...+......f!..R{?..\..E..

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59348), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	370810
Entropy (8bit):	4.963892105177916
Encrypted:	false
SSDEEP:	3072:pxQtdFNOUN3cxLs3OYYGfi0YW9gBLCd2KNJgGlGmcccGmJs:pxQBNbNuLs3OYzi0YvGlpcGmJs
MD5:	6C96EF94649100E1B6842357A9839816
SHA1:	30AB473252CA9C826400D48E4BF0E3C3A43F36C6
SHA-256:	8EEBA18A84C07FC9286A3ACE31C85826B153D9703975043EDAD8B1457CC07B6B
SHA-512:	E2C4F5EC8B17D23A5D382E8765A0BB5A6CAE568FF685FFA580BC0D952C7E0A770981A5797E3EDEF106DA7F487AD8C568D2F3631E1CC6B72A58BD6CD8B09A9C33
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">.<head>. <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>.. <meta name="robots" content="index, follow">. <meta name="revisit-after" content="1 days">..<meta http-equiv="content-language" content="en"/>.<link rel="dns-prefetch" href="//www.google-analytics.com">.<link rel="dns-prefetch" href="//www.gstatic.com">.<link rel="dns-prefetch" href="//fonts.gstatic.com">.<link rel="dns-prefetch" href="//cdnjs.cloudflare.com">.<link rel="dns-prefetch" href="//static.zdassets.com">..<link rel="dns-prefetch" href="//connect.facebook.net">.<link rel="dns-prefetch" href="//graph.facebook.com">.<meta name="description" content="1Movies Watch Movies online for free, Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/>.<meta name="keywords" content="1movies website, 1movies is, 1movies s

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x354, components 3
Category:	dropped
Size (bytes):	58912
Entropy (8bit):	7.9801344169186015
Encrypted:	false
SSDEEP:	1536:qJ3g4P7Mq146yG3kvpL3W4krHsIn6uJJhXg:f4Pv46yQOhErrTJJg
MD5:	FEAD19061D8E56F00EFDB593A7AC17A2
SHA1:	99A962E36D14CE26697BE754E93941F903E46E57
SHA-256:	604ED2696B319A4EAA3F38096F4DEA748B799B4A216A29DB204A80A7565DBB04
SHA-512:	EC0338F53F8E82E6CCC40800E90FAFCE9D0A1D54C6508CFD6D45E334D1405FC16DE87034A1894FAD2A8635DFA690053EC4848500290CAFF3E903DA7B9C54AB13
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................b...."...................................................................................!..@..(K....o@.'5..S.&..!<...[....h..K...u...-..<J...(.{..Nd...` .....P.u.u.....}B......,n&C..T:..d.T]K).o..Io../H.~...#CQO....7.aM=.p<..M...!...cP.Z.zG\.Z....2".x...4..3.1r.R.'MP.).....l..". ..............s..>NL\|..6...(.UM.....4..B....k>....q%..#+.Y.........x..@..p..h.Xl?..Y_...."2."..T.[...U......BU.n...[x.(..S..)qC..7..+.3. H.1...C...n..VHo...\|...ss...2"#\Hq#.}.=.T.Af+>ng...!0].t.".<..[...A JbMI.C..w[.dN.....S".t.Xgf...}..'!..>.!!... .tg:.^.0....V.....U.....Z....a.UM!.z..])k._...M{^.#B&.n..r.s.......oc..n.sK..t..[.;4....Z.T....Z_e....nQ=.8.u..[....GANA.!`...I...C.=57.z..fo.WIt#....d........(..<..yn..?.X:. ...2...km..o}F.;AB%.N..B....

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2126564
Entropy (8bit):	5.065768470241349
Encrypted:	false
SSDEEP:	12288:i5/SbqGPE5G0GO8E03w1un1xp6hvYviS1EjiwKZyKHjA1eQ8goRwTPE:i5Z5ooE
MD5:	77BDAE2D3390A0F78A23DAE8A27AB69D
SHA1:	4A29B37C24E502801424EAD78FAA9FB9A668F9AC
SHA-256:	550CDC4F5B484E348BC1D62FDDDBFF6343B28298478164CC9AB07B15B916DAB3
SHA-512:	6EAF9150DB1FCB047B5C26EF65D3B34D1BBE657F8C3205E69E48E8156BC28F25C464619CC536BF015DAC3354A28A4A939CDB8B6BCCCB9C146C307860829FF57D
Malicious:	false
Reputation:	low
URL:	https://api.bitpanda.com/v3/currencies
Preview:	{"data":{"type":"collection","attributes":{"commodities":[{"type":"commodity","attributes":{"name":"Gold","symbol":"XAU","logo":"https:\/\/bitpanda-broker-production-assets.s3.eu-west-1.amazonaws.com\/static\/cryptocoin\/b86c88d4-efe3-11eb-b56f-0691764446a7.svg","logo_dark":"https:\/\/bitpanda-broker-production-assets.s3.eu-west-1.amazonaws.com\/static\/cryptocoin\/b86c88d4-efe3-11eb-b56f-0691764446a7_dark.svg","color":"#B68E46","asset_type_name":"commodity","asset_group_name":"metal","precision_for_fiat_price":2,"precision_for_coins":4,"precision_for_internal":8,"precision_for_tx":8,"ios_supported_version":"0.0.1","android_supported_version":"0.0.1","measurement_unit":"g","is_token":false,"pid":"b86c88d4-efe3-11eb-b56f-0691764446a7"},"id":"28"},{"type":"commodity","attributes":{"name":"Silver","symbol":"XAG","logo":"https:\/\/bitpanda-broker-production-assets.s3.eu-west-1.amazonaws.com\/static\/cryptocoin\/b86c8c67-efe3-11eb-b56f-0691764446a7.svg","logo_dark":"https:\/\/bitpanda-broke

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59348), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	264211
Entropy (8bit):	4.967571043157281
Encrypted:	false
SSDEEP:	3072:uxQtdFNOUN3cxLs3ShgOYW9gBLC42KNJgGlGmcccGmJs:uxQBNbNuLs3ShgOYAGlpcGmJs
MD5:	6F5C9E7521B79D329548E7506BB121C1
SHA1:	69497FF8592599372C68CADC6D2392C34E0BE9ED
SHA-256:	6F1FB625855EE08E61071D0E3025EC521BE578DCBA36007E6D97A97F64E444D5
SHA-512:	7DAB9D8F6F8B43C7FE466225D4B24D4D5FDFCD49AA8C70D8DFD51643FB9BEA51F3A2E12705F2AD1B896E60FB29967859D6D0391E00B91F44357511C59B4A6396
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">.<head>. <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>.. <meta name="robots" content="index, follow">. <meta name="revisit-after" content="1 days">..<meta http-equiv="content-language" content="en"/>.<link rel="dns-prefetch" href="//www.google-analytics.com">.<link rel="dns-prefetch" href="//www.gstatic.com">.<link rel="dns-prefetch" href="//fonts.gstatic.com">.<link rel="dns-prefetch" href="//cdnjs.cloudflare.com">.<link rel="dns-prefetch" href="//static.zdassets.com">..<link rel="dns-prefetch" href="//connect.facebook.net">.<link rel="dns-prefetch" href="//graph.facebook.com">.<meta name="description" content="1Movies Watch Movies online for free, Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/>.<meta name="keywords" content="1movies website, 1movies is, 1movies s

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	dropped
Size (bytes):	332406
Entropy (8bit):	7.986118589999881
Encrypted:	false
SSDEEP:	6144:9qhLePpalpvHZBQlA2RN1nvJLrsW5yAeSx2nfJYgTkFgLGn:9ieol5HZURN1nv1rsW5y9S4fLGn
MD5:	7438E6F05F39A1E62106F72BB1D95F86
SHA1:	3430F5B32A9A3EF3FC43E503988D7DB1DC65787D
SHA-256:	307331B3DD72DC3D23F0FE66315014BBAE1ABC4287ACF3ABB1CED895443E045F
SHA-512:	FF4F547FBAD0839A687D72AB4A477B35DBCE7053B3CEFD3D1BB2B5F7E526D3A46EB4B9830523D95AF249922B3A4BF5DD57B91997343176AC5E73E6A14FFAD33F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X...".....................................................................................7...`...t..M...Q0`.B.X.xP..M.....9.. ..........a......n.....r\O..:..9..429o.w..x.FQ%\....g.Z.(.r.\|..."....W...')...)r.~\.cVY...U.&c..Rqg.^pkYWp...>M..Y.fE..GHWXI.V...]...v.0()`...F[....24...@...$..... .vM......4p...CYn.5.D....!......c.?\2v.4T.7:....C.\|.......PJ^.O...4..5........)..0..8L...#..4.QH......R...aB. ......#.f......+`.*...<.6/.UL."2y........{[...1..^....tl..L.....6...0..V.....QY.p...'......I....s...U](dp.....c(..m.....;..<.<...3......H..\..(.j...I...z.o3{.#..F.j..M.fjr.D.....I&...%tj..m3..k.kZ+,....Y....&~.Z..X..5^..1....'!;..>lab.F ..D)s.D>L..+.e..er......cu....N.N......3A.r..H.#..:.P..0.h.>..c.W....).^.d(LY;..1.t\....h&>r{D.\.5.;

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8065)
Category:	downloaded
Size (bytes):	8066
Entropy (8bit):	5.280370066056912
Encrypted:	false
SSDEEP:	192:Ccd4sHW/d7Vmhjt0Br6yqRTBZFaTYAr3FaT3oEDKIXnsiCcnHcHQeYJ8PS:CcqsHS7Vmhjt0Br6yqRgPr3FQ3uI7jnJ
MD5:	91B8AC7A1FA7E7D33B3E79DAEF1A1C71
SHA1:	522488DD8EA649641917B5F7CD52D25417020DB0
SHA-256:	A0A7B0A597A76C6CB8FD1A8E1934CC1CB76D7B11250BF1F80411E28B3FA8620D
SHA-512:	08FB4A445AA634C5180A701BF9081E9DFC194CAEB7A0D20F5693D53ED59641153D500342FE47462B74CA279041A0B924266146EA6CFA862676474539867BA3B1
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/pages/login/loginLayout.js
Preview:	(()=>{"use strict";var c={};c.d=(a,t)=>{for(var r in t)c.o(t,r)&&!c.o(a,r)&&Object.defineProperty(a,r,{enumerable:!0,get:t[r]})},c.o=(a,t)=>Object.prototype.hasOwnProperty.call(a,t);var D={},U=function(a){"use strict";var t=null,r=!1,l="",d=!0,v={};IVS.WinJS.Pages.define(ClientUnique.getPageUrl(EPagesUrls.loginLayout),{onReady:function(e,o){V(),$(".wrap").addClass("wrap-login"),v=new Vue({el:"#cookiesPolicyDisclaimer",data:{ButtonText:getResString("strOK"),Message:"",IsShowBanner:!1},methods:{OnClickedOk:function(){ClientUnique.setCookiePolicy(!0,!0,!0),this.IsShowBanner=!1},addActionToMessage:function(){Vue.nextTick(function(){var i=this.$refs.policyMessage.getElementsByTagName("a");i.length>0&&i[0].addEventListener("click",this.openPopUp.bind(this))}.bind(this))},openPopUp:function(i){i.preventDefault(),i.stopPropagation(),LoadPageToLayout(ClientUnique.getPageUrl(EPagesUrls.cookiePolicy),document.querySelector("#cookiesPolicyContainer"),getResString("strPRIVACY_COOKIE_POLICY"),null,{

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1147
Entropy (8bit):	7.573539176343964
Encrypted:	false
SSDEEP:	24:vfCXMCGviSQLVaQEGQrYzAtTdJ2D/bQc32EW0fGUA2STN:vKcC+iSSaRGQre2Tb0/b337W0fPA2SR
MD5:	2C576BA5CA8B16BC230324F549CEC315
SHA1:	AD50CC72A5CA890CC768871368FD7BC9B2DD209D
SHA-256:	18BCD8F6B9758628F94E5EDABA6170480192BED185F12E23F329711AAC72A2D6
SHA-512:	898C952D5152F875C8C5A23E23EAE2DA03AD518781781323CAFCA380B14D95D659BDC5770A2CD8807F3BFB34635E52CFB0262D235231B42EB1D83AB9B869562B
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/brent%402x.png
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE......................................................................................................................................................................................................tztszusztdledkeT]VT]UU\VENGENF6?85?7&0(.".."..!.....k0....,tRNS... 000@@PPP````opppp.......................vI.y....IDATx..z.@.....R.^Zj..PE.R..iiD#.E#.l...H...n...p......w\...3.Z:.,..j......)XR.R..!N.1j....$ ...y...-.....f.:R.P..H.H.^!...<.g .}..:2....Rz.;.D..M..J..`v..@..9.L...v..40/.. .+=.....W..9K.H.....$..V.2....1/9#$pH.....%....PuyS.\|.V.f...n`...j.^q<i......e..Zw..-......7'..{TDli.E...7..He .....7qx.MTT.. }.]......{.:-..=]".p.>)......\SB%H@.e.C..f.^.3........}...Y.....s.Jd....?<..2..~qoq..)H@.....f.i..u9.3w\|..A......i.a...*...w$.n.JT..\|tm...v...D>.G..}f......FP.S.aj..#..h...bj........QQ...X$x..."...,..w. ...]3..2......iw[...;...........}./S.....-...\..;.}9...o<..)...E...=.M.#

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 33870
Category:	downloaded
Size (bytes):	10509
Entropy (8bit):	7.978591377540101
Encrypted:	false
SSDEEP:	192:kucjAbK/UfhzWlN615fzQUZuV4pHzG7mpw2utnO2dl+eD8UPlncspsZOu7APX:kFfUpYI1NG+zG7EEOyOUPlnGr7Af
MD5:	47DFB4B0244A002036A4409532E37D1B
SHA1:	CC7DEF508A913C93119C3A47E63EBCAEB144A113
SHA-256:	750B503AF0C80199A57AEEEF0A9F4BF6DF772CADCD63AC4FBABA0F09010780A5
SHA-512:	2BBC81F00F6794AE7708DD5A393351BC97847F74A8A5F1122153B4345D18878C0252E505182AC57344D8E1FF9C9893F2FB985B68B495AA067007EE32247A9740
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1.1325.23384/a/US/t_.js?cid=c010&cls=B
Preview:	...........=.C.H......&e...J.....U..;...hZL.&...o.g6...{.......aw.kvvfvfv.7.Y.y4h.n[].V}-g..x1.....vFX..(3.&.......Pb..6K.'P....M.cf9.qf_..b....$....x1.2.5^.c.E}......I...&..d#..5.T.FI....cf?......8..O".......&..a...n..k...\k$0.\_CMm2fP..../.=...{....".....p=,\.zS.Z...Q.i..h....Y..H?..El.a...[...G........~:...f`b..h.C.....F"&..r7@v......13;j.i........G.......\]@n .Sa.T..B......8I(...J..a..[..U.\x8T.8.CB..&...R..........%...%...y..bb.`W'0~8..r.%....83......-......'.....:9i.....k.....Z,9Y.k,An..VK..h....4.\kiz.ON....e..M.......OA..rT....$^.....)c&.j%.pOmTK........>...\|.,...L....9.WN.?....Q...`.`(...t8..;..{b..S.....\|...=.&&.p.z...P....q.p82/..b..f..kq.:Z.'.z......e..Jb.r.K.[.....i.b...P../_......5...6A...$..$S.......J.\.\|...v.I-......*.._}..3..W.^........7>...t......lS...TQ..$0+.....[.+....Tj^...l.S..nM...%..M..YS.;.....;...D...#....u-1>.W..?^b......5.u...T....%z.....#L......>/...._f.IP..5.\|-..A.\|m.&...P..)..\|..v.U...~..9'..e...H....?.l[..=

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	410
Entropy (8bit):	4.903617436798018
Encrypted:	false
SSDEEP:	12:hPgMEEVWpgjXIAsQ1MNgjXIsQ1MCLf3Ln2naH2YUBRPGu:hP9VWpW2Q1MNWnQ1MCPnAh5
MD5:	01C314BAD285480DB632CD2BF33E32E7
SHA1:	397134903B38984F84E713FA538A743D14048611
SHA-256:	95B5AFE5834E7BFBDE66CD781F3466C6E3CB30CA46F91A8D2559EFF44C2EA23E
SHA-512:	216201D43A6F47F6A9467D1F3481A987DF56134145C2B67A6DF72B304CF17CE8237C5C2648C1F502566583B5A793E937924951184A5D2CCCC20B76390F4CE396
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>..<html>..<head>...<meta charset="utf-8" />...<title>loginLayout</title>...<script src="loginLayoutBase.js" type="module" crossorigin="anonymous"></script>...<script src="loginLayout.js" type="module" crossorigin="anonymous"></script>..</head>..<body>.. <div id="loginWrap" class="login login-wrap">.. <div id="loginContent" class="login-content"></div>.. </div>..</body>..</html>..

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	216
Entropy (8bit):	4.37150130014053
Encrypted:	false
SSDEEP:	6:YMrY8i/ZXrBJNRhi6ZJJ6W3P6m57yH5WsDAXgaFp2FmHL30n:YpXzDkiJ6NjZ3cXU4rEn
MD5:	67FF2B59E1125F8D43D37A736D829938
SHA1:	47A2454D80B3CFD24BC18538548A953065324B26
SHA-256:	DF14AC431BA862D0233F87C6EB95F1F5378F7BAE4CEE225B4A57328F5D936004
SHA-512:	01243FDC5C51BA1145038933C363E06D9B344884B2E8853F8D4B9EDB5560F2E88D84CBA35834DF6ED4EE9E466C7D7EACC0C24D974C2BD2305E20EE1B382FD6DB
Malicious:	false
Reputation:	low
Preview:	{"is_login":false,"html":"\n <button data-toggle=\"modal\" data-target=\"#modallogin\"\n class=\"btn header-btn btn-login\"><i\n class=\"far fa-user mr-2\"></i> Login\n </button>\n\n"}

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1065
Entropy (8bit):	7.616694052365146
Encrypted:	false
SSDEEP:	24:5P3L9GYOdYTem6v1XfVMtUdwbf0SGSQjfOE7:5PRGYVTefvZfVMt/bSj2E7
MD5:	EAB34847BF1EEDFCCFD33CA59B12CC75
SHA1:	EED6193C1FA746AE80FE069B16AE4C79695FD4C0
SHA-256:	77F43F8D9A23F73693B19C09B2BCDBDE175421466E19047CB7005B81F071F821
SHA-512:	866FEDA291255D97F975C1302B36E4E1F68B6D6922C1D1B39B4322E9C3B2EDA40A617D0A29922CC8DCF46AB8FEB76BC84D7438A728E5035249EF2233AB407C0C
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/soybean%402x.png
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE.......................................................................................................................................................................&.....tRNS... 00@PP``opp.................[....IDATx..ms.@......V .-m...m."...X.....NJ.......{.....4...l8.LS.'.....t....6M/..)(h.Z.2.HFa....nQ.....r....X..zKBK[..p...W....F...]O....ID.+C..zK&.."H.......u.<..[..6d3..hW2..mcr5V...'Ks#W9..hs....3g...... .3...7..5..%..U.Y.7.Q\..S.^..E..F....j.Nx..~`C..... !.W..wgkyR...jzC.."h.T4Czn..}.Ay-.P.Ig0@..Q..xq...ib.g'..9_....6M..9D......}F"...83.D...&.T.B.p..........9...>.....5j.i}$..R^i@jh..."A..h.......[.2....(e}.Ts.<1UQ...9.M47myli.>.O......^....P.~..\.<.A/.vV.<....\.j.\|.o...h.5.!..,.L.+4.....r...;.q4.A..~r...}..5.;.......)..4.m..B.m!O.".!F...."..3...rF....&VN..w.^B._..I@.P.O......}.......c5.A6Gp^.S....N..."......ck1h.:.C.3l!......7AO....

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	598
Entropy (8bit):	5.12069581024496
Encrypted:	false
SSDEEP:	12:TMHdN8jhMVBA1Bp8JKAAi2Cj2/YH3bLRSKJWp/YHrLM7YFIv/YHfW2KwriLUQLgv:2dijhMVBMMJKFCj2/qLkBqfM7Dqu2Kwl
MD5:	A207797BE5F060E5F2F560C88D345309
SHA1:	CDC3386B639E1732D31E69709131FE5A9FE351E8
SHA-256:	BC0327990436B914896FAB3E79DC20C30CFF6F48B22C7D77710CAFB58C97EDA7
SHA-512:	C2818007AB3F118C9D9DD8A40FA9563191386D63915643826745B291E0A6E2E87CEDF33741172477BAE7B62EAD9E93AC4B1FE19052BB1ED99988DDCBFBB3C186
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/white-label/menu/230120_bts_ShortLogo_black_V1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="a" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="501" height="500" viewBox="0 0 501 500">. <defs>. <style>. .b {. fill: #66b9e8;. }. </style>. </defs>. <circle cx="250.5" cy="250" r="250"/>. <g>. <path class="b" d="m74.98,269.48v-36.68l95.44-59.19v38.45l-63.21,38.96,63.21,38.96v38.7l-95.44-59.19Z"/>. <path class="b" d="m281.98,146.29h34.25l-97.2,207.43h-34.25l97.2-207.43Z"/>. <path class="b" d="m330.58,289.97l63.21-38.96-63.21-38.96v-38.45l95.44,59.19v36.68l-95.44,59.19v-38.7Z"/>. </g>.</svg>

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	78624
Entropy (8bit):	7.987943657319972
Encrypted:	false
SSDEEP:	1536:8/j/ISeqyKXYM9lrwqlUdqa+8wPzrm6Fvbgi5lk9ZMnDMml:K/ISeqys1lrwqlUdqa+8wPzrPzlkdml
MD5:	F94E6CA3C2ABE918AC39F5AEC94FA6EB
SHA1:	BCA6F0D7AE09F6DD63056EC10EDC95912C6928FB
SHA-256:	567024978F30AADC59179087B584E0F939692F625B8F87FDC02D361237D61A26
SHA-512:	E4695539B65D0C7C20E9F8B7308B9AAD194D93C063ACEBD99E2BF154CDB2407739E2C028AC98924A0E3579469B16911497A662145AA548601849F105C7EC291E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................$..f"/..7...qwtdF.w2..ks'..9.l...x...y..\..Ln.k.`..F....._d$.......Cj...f...d.g".3G...)x....s3.....t.nE.p..S...G........%m+.{:.n{I....m......=I..N7.a.IC..z..'5.f^.-..2.s......6md..D.r..k.n(.9.."....x...{.(W..KB..?j..k.I.F...\US.S..I...J.....;g"....k)......I9...3h.>o..".z.TW..#.EBP.[e...V...).._k........Vi....bf(.Ae@.v.m=....K.3.CC".Zc...I..aar......X.5...h...ky...[km{\.C.HJQ\|m4...J.o......]....v..}..Yi.>d..7n..\M.)w..k\|...].@.?9.+..A..SZ.A.?...Skmj...:.....uy...j...........Q.\[uM..'.YY.f...2...M5...}..H.FFV..;B..Y.1.d....... .D.......[.5i.*...,...o.!...M.....Q.cd.K.o...wv.[.j.!a,..-.....bi6636..iy.n.Z.e&...e...@..X..B..S....r

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x369, components 3
Category:	dropped
Size (bytes):	57064
Entropy (8bit):	7.979976326499632
Encrypted:	false
SSDEEP:	1536:FwIK3PWio3dlakG8hZC1zevaONe8GSyiR6g3MWPx:+PW5dV9hUzev6Sysh3dPx
MD5:	1CA4880D772391531577D7403FDAA703
SHA1:	105970217F43E949C34E9F3E76B91F851BDBF3B2
SHA-256:	39E41C8D7C2EF8880BAC183484DD9128F30AF192C54ECB5A34B8A359926B0892
SHA-512:	024A6ACBEA62E4BD0E2E90A253161AFD71AAD3CA6CF83B7A209E336438E0F53FB36F19DD7735C68950931946B21274519D9B43100BD2294872A1FF0FED270A15
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................q...."....................................................................................`.r....I.;...<......{._g.z.sGWa.1.Fl....^....8..7o...\..k..;.7k...[.5.>....>wi..y..f.#.J..HL.....{...y....u.}..Zi......b..].....O..xw%N.T...r...[...YJ.YHd>..i.#...$u^f..W......../...g......]....[M#..t].g...`..)....{`.:X.....Q..l..j-..F.I......-..W`.1....?.}A...7.X.C.C.....+.>.C..S....#.-X..SFa'.E{...z...../..OAtH.<..BE..(/U)..y.[kTi.$.f.L.V...N.].!?pv...y....w..Sz.p...8`.E..`...n8{@.#.:'.f.d...'.^ns.,.p1...dr.a.Z.n..w.?.r........Z..[..O...v..^1v..U.5]......66.........1..I5......YV....sV..x-....Ps.8C..Au.$nDfI+6..?..#Qe......=..x.3.5...N.Xf.J...7Qz.6..\..4...g.{...C&...s..#1...$.z..H.$..$.K.5.<X.fp.g.Ug./".....Lg...~.."..Zu..s...i......r

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	3.5939459514962726
Encrypted:	false
SSDEEP:	192:Z5Gb4or/fYaLU7PaXdOB55j5+9QwwDDQle:nSZrfr2PaN85t+9Q/Q
MD5:	DBD80DC62F783283F2B42C82900362D7
SHA1:	5AAF71A0D5ACB06D409FD4B3543F9836EDFDCCD2
SHA-256:	B6778BA8327B9A26DA77B4D547E0EA220385834A9187FC92D0982C48DEE87A14
SHA-512:	7092D0CAFDAF737B16E418861C2969AFE3319F20D76D3C295A861C52CD99787D7AC7E173191424F20050A2A2665AE3FC3FF0CB8F21739CC5C416BD8876BE4DBB
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ....................................................................................................................................O...c...U...h...J..............................................r..........."...............................ff...............................*...$....................@@..cc.Mgg......c................................................ff..gg........-.......................................R...b...K...Fll........;...............................!......c...........F.............................&..............................rr..........E..............................P............@@..hh............G...N...T...u...p.......+............cc.;UU..@@..hh.......^^..hh.6...........................6....dd.zee.Nbb.'kk.....}}.1ff.vdd.J..........................j....bb.9cc.Cll.B......gg.>ff.Kdd.!.......................!......(...........Z.............................................

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3095
Entropy (8bit):	4.779040348966046
Encrypted:	false
SSDEEP:	48:cQAvf3KwQN2NHUzy/bTXzOMw/D/i2VnckGXK8W8hEPMuSpKcmB0B8eDqxQ0bLIZJ:KvfawLbbzFw/D/ita8ZRKJ0BFlUQqu
MD5:	7AB3B4BC1D71846008B13761BE884585
SHA1:	25C05B4A4FFA2E6FC92F8679F82158E3393AEE85
SHA-256:	AAE3E5ABD9A787878D9FBA199FD9A546BC7E81E56897BD4B3BB98526A908CB33
SHA-512:	2C8888EF3A931505FE930926C39FD7171787E93691E062D2BBB906FD5C4542B9E86EC53FA4B8DE982E722191747C8645FED873613B19F7167B8857F00C683AC3
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%20Infra_36x36.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#FCA17E;}...st1{fill:#2A6EDB;}...st2{fill:#23582A;}...st3{fill:#3FEA73;}...st4{fill:#53D7E3;}...st5{fill:#2B2B2B;}.</style>.<g>..<path class="st0" d="M1.365,14.49c0.114-0.54,0.645-0.886,1.185-0.772c0.54,0.114,0.886,0.645,0.772,1.185...c-1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364...C3.132,29.043-0.151,21.687,1.365,14.49z"/>..<path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66...c6.916,2.135,14.445-1.007,17.768-7.53c0.251-0.492,0.853-0.688,1.346-0.437s0.688,0.853,0.437,1.346...C29.378,33.109,20.845,36.67,13.004,

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	62417
Entropy (8bit):	7.98556215621469
Encrypted:	false
SSDEEP:	1536:jo41fSCS+jY5gsv/WYEkpfraULC1Dne2ia:k416CSr/9EkpGUI
MD5:	521EF81FD345FD84D09545CA19D86ECB
SHA1:	5D3E967BA233FEDBDED493A8C6EA6B58F78E5D77
SHA-256:	2DEC7A205632C03F20BE84D8262C6A994EECA0751EF0DA5ADE2DF61A83F8DD79
SHA-512:	CAECEA50D9400E92FA98FB7CE6862D78CB1FA3F348DC6479EABF1C9600EB15470773817185348BBFD0D2969C7A4068658BB6DBCF3DB85FD384A3C065229526C5
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/8f/e2/8fe2f0964efca735e1fa1b6cf074a17d/8fe2f0964efca735e1fa1b6cf074a17d.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................~....P%..7.lwa..T\|...P..?S..&....CE.M....?..z.a..#....:...'..:..s.:...G......v7.,;..CQ.;..-y.HJ.s#t.vb.._..5M...F...\|a&.&..X#.7U..I<3.t&.....(....+.jw.d.=...{..J..e...C..X?+..:p.....W.oT/.j4...\u.I..t.\|.Sn.I.d..$....I.O./.-M....@H....J....R~...[.3m.,.m.f.:.x.......K......IQ\...XV....-,u:....D..\|0L.SS...\|...ae.x>u0u.S....."..=R.3.....f.....<...U..._f..v4.....U"....1R.%.O.fq..O.....'h..~.5.Jjw..Xcy..............,..^..EZ.iA0...z..!.P.>.:=Rc.d&C...a.!.p....M....... .....7...1.2.".....G]6.'.g.s.6i.p.o..Zc."...-c.q.4.......f.h......+}fm}..\......F..\|..R.?.....w.#....<........-..NT..@..d.....P.3.!H1*.C....V.@yT..~.Z.$\..AD.f]'..3.F.ff..`....i$

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3253
Entropy (8bit):	4.735669505673854
Encrypted:	false
SSDEEP:	96:Kvfa3NabbzFw/D/ita8ZNI0Ximd/UA6uM:CadiSwjXiaU/uM
MD5:	F80071B260FE4D3032349D75F41379EB
SHA1:	199183BB7A2292FC34F44DFF59D80390F22DA54B
SHA-256:	F50BAEFF0E7833F13601A8BC8298FB7BA9DB418B5DD75FAE8751FF184091DFDD
SHA-512:	38DB91E752E7A5D2F5C95BE162B825357EE5F84D811F9E6415AFF2F9A31B040F5A573B255790FC06F13EEB19509345838F5CDE19723BB45376FD86664C6EE0B8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#F1A208;}...st1{fill:#0D67AA;}...st2{fill:#24448B;}...st3{fill:#3FEA73;}...st4{fill:#D5C67A;}...st5{fill:#2B2B2B;}.</style>.<g>..<path class="st0" d="M1.365,14.49c0.114-0.54,0.645-0.886,1.185-0.772c0.54,0.114,0.886,0.645,0.772,1.185...c-1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364...C3.132,29.043-0.151,21.687,1.365,14.49z"/>..<path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66...c6.916,2.135,14.445-1.007,17.768-7.53c0.251-0.492,0.853-0.688,1.346-0.437s0.688,0.853,0.437,1.346...C29.378,33.109,20.845,36.67,13.004,

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44
Entropy (8bit):	4.481714572986071
Encrypted:	false
SSDEEP:	3:Y3zQl4XXMgElhY:YslaXMgwhY
MD5:	C6CD1978998B7B330B443C6254F66954
SHA1:	DC3FDD0307C655803AEF3E67BE81820769D4D465
SHA-256:	084C1C38C6688583E26BDCFD319A9654679903B6E0B232BFB2B2D9C43DCEBFB9
SHA-512:	823B81614C95B5067E0394DD4E1FE320D9476F891C96E0BE69E8842120B0F300C3C2A3288271932AD80476B134FCD30B574940B0B040573839883F78D3B0AD25
Malicious:	false
Reputation:	low
Preview:	{"ResultCode":25,"ErrorDesc":"InvalidInput"}

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	372
Entropy (8bit):	5.085833487113797
Encrypted:	false
SSDEEP:	6:tI9mc4sliuImRzAyAYXVQQcZqRILY/ZZTJv9qRTzOHUtLNu7aaTcJQStrV2Ws:t4IRMXVj8DL4FFqpO08QQSi
MD5:	A5AA43FA302867D3E888AC2F69B7B288
SHA1:	952B104251965AC706BACA3A022C103104E8FABE
SHA-256:	2986551FD9E82929EABB8CBA7C44F74A28D8496C744893432F067B320DFF55DA
SHA-512:	C32AF9ECF054F30FE9EBF1362385BA8E11106169251D433BEACEC02F3E0D7C078E35C109167B1360707BC5F1B0718B00E9044E2C75633F6D263F2C8B87274E2B
Malicious:	false
Reputation:	low
URL:	https://platform-cdn.sharethis.com/img/messenger.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 50 50">. <g>. <path d="M25,2C12.3,2,2,11.6,2,23.5c0,6.3,2.9,12.2,8,16.3v8.8l8.6-4.5c2.1,0.6,4.2,0.8,6.4,0.8c12.7,0,23-9.6,23-21.5 C48,11.6,37.7,2,25,2z M27.3,30.6l-5.8-6.2l-10.8,6.1l12-12.7l5.9,5.9l10.5-5.9L27.3,30.6z"></path>. </g>.</svg>..

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x333, components 3
Category:	downloaded
Size (bytes):	60595
Entropy (8bit):	7.987327704729651
Encrypted:	false
SSDEEP:	1536:ccYi072mLKCyHAFRjMQhp/UXZ2j9OpDfLnwMhU:z2LKtALbh6XZRDTnwMS
MD5:	813452725DFA685C51A78A17681B23F2
SHA1:	87477D28FC5803D326D9B001177F213472CDE75C
SHA-256:	2966BB994F830D79C03EBE420ACAE6C6AEB630B5FDE872F1386B176D21ED0860
SHA-512:	1365B4A58D19DF5F2934EDFA5A2ACC7FC0893217A3631A8487755B86813D0703B7E298753377B86F482A134C298F6D691BB5C4F734C2027540094EFED532B26B
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/b2/c8/b2c878a192fa04e55548940be45960ff/b2c878a192fa04e55548940be45960ff.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................M...."....................................................................................&...Q........Y:.'..h>i._.b..../Z.4.z......._.g....tK..[...5.Z.1..I.5.F-.qA.......'Y.x.ZQ.4..$9..}.,>...W.X=4....\Q1.2F..$.n...7osv8...uo.Wb.....e..........2...0...S..tk.#...d.\|.T6H......x..u.....Q..lz.X..wn8.9.jp..'...Re.'C"\O.5`..L!..E.....H.v9.F..c9......R......>\|]ktU.9...........J...q.S....\.4.5,..b.{-.W.OB.R.\bL.....h.D.s1f;] ..../J.^.v: '...!.UV..v...Im...L.....v.(A..R:z..h.F.W`.6...`S.Q..\..........B....$...J.Jir.._..]]..7..].....j..8....p..t.E;t....w.'..l....&.._...\|...#.(g.....c1..D.HB:........tz...y.9...n..~....F_:.Z....~}.U..c}8..L......f...+.V...t..K>..........,.k<....7FOoC.AE\|Vw...B..i....[...b.....wm.3..8.......0../....

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4191
Entropy (8bit):	6.099426333820608
Encrypted:	false
SSDEEP:	96:otxkvSy2KRa4rkNiTCZT7QB812y4YdnFRKJPyqa:Lv3x9kiTCVkBE7RKJaqa
MD5:	C8F537075552778951FF474D65FABC15
SHA1:	33C51FAF0E7D2F9C79B9929BC22F121FA831CE68
SHA-256:	97AD277F55C3633E9B668278EFF8466DD293AF9CA1DF3A6D5FEA534A5D46E4C6
SHA-512:	A5D7AE85E16916B7D98A849B6DD58557758AB5CB7AF2DB7798F990E1D8838BE29EF2E7949E9A4F00B97A3B2795FB6B6B610DF8FB9D4C0E46A54A73C176F2590B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="32" height="32" viewBox="0 0 51 61" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.<rect x="0.799988" y="0.812012" width="50" height="60" fill="url(#pattern0)"/>.<defs>.<pattern id="pattern0" patternContentUnits="objectBoundingBox" width="1" height="1">.<use xlink:href="#image0_1023_259" transform="scale(0.02 0.0166667)"/>.</pattern>.<image id="image0_1023_259" width="50" height="60" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADIAAAA8CAYAAAAkNenBAAAACXBIWXMAAAsTAAALEwEAmpwYAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAApJSURBVHgB7VprbBTXFT53ZtfrtcHshkdIeG2kJFBBwRW1JadFGCERolQKpFLoUzgoSX+kLabJj4a0glRRS1LUmKJEEUKFpGpTaIJNfqTQNDwUBVIQxUlAUCkqawxJGoh3bWN7X3Nvzrnz2JmdmfXs2pA/fPL1zNy5j/Pdc869595ZgJu4iesCVppx7bXpbcDELgDRrTKlI7rms1fgK4bYFYuN1EfWcg6r8CmWH8ktiz+cTtvLuInsufU0CGi0FUgqgi2Lfv+zJARAKgYxGIIEcL0NhcEcbCSNQvTjNUn38Tx0Q0Bc+9ut7VhnE8oUM/MUgPa67/1/m71cyCFEZyIG2ZFGe54ASGjATw/8ddrDDT/4vMur

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1465
Entropy (8bit):	4.5023529319478515
Encrypted:	false
SSDEEP:	24:2d54uk77MMpf1ymbsBKpSIbzTEGW+c3EZcl3Ma2h1EtU1b5SGwxq1FJmFJDbfste:cC1QmYLI3TEGW+EWmMpLeU1btwUAD7p
MD5:	FBCE27C7963B12186E1ADEF88DB8DAAB
SHA1:	5856AD879F967859ABCAFB07F836A9FBE48006FB
SHA-256:	158F37D287A28B352A06D27DB911F3104029C501F29BE7CFB9693D2600DA3C6D
SHA-512:	1EB443C2AD5E2C0564041C67B1BFF4D345194585BD96CDBD8FE1E07B74F7573106A05120BE76F8BF43B0412BFE3C9E524D107A55F075DD9412714D0134B7B655
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/leverage/Bitcoin_1x_Short.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M18 0C8.06 0 0 8.059 0 18s8.059 18 18 18 18-8.059 18-18S27.941 0 18 0Z" fill="#F7931A"/><path fill-rule="evenodd" clip-rule="evenodd" d="M23.115 25.005c-1.295.47-2.5.308-3.068.232l-.042-.005c-.27-.036-.727-.12-1.215-.22l-.808 3.015-1.856-.497.795-2.966-1.413-.38-.795 2.967-1.856-.497.794-2.967L10 22.71l.979-2.127 1.11.297c.373.1.538.107.734.002.195-.106.29-.322.34-.504l2.057-7.68c.13-.481.125-.622-.03-.929-.155-.306-.666-.478-.96-.557l-1.072-.287.516-1.927 3.652.978L18.123 7l1.856.497-.798 2.975 1.414.379.797-2.975 1.856.497-.806 3.011c1.36.457 2.32.996 3.041 1.902.932 1.17.472 2.645.35 2.994-.12.348-.46.992-.891 1.35-.43.36-1.313.597-1.313.597s.851.432 1.357 1.08c.505.646.748 1.613.391 2.837-.355 1.225-.934 2.38-2.262 2.861Zm-1.939-5.427c-.3-.267-1.01-.708-1.912-1.015-.904-.307-2.1-.562-2.1-.562l-1.066 3.98s1.225.357 2.065.517c.84.16 1.746.18 2.234.06.487-.121 1.0

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30744)
Category:	downloaded
Size (bytes):	30801
Entropy (8bit):	5.217728732238376
Encrypted:	false
SSDEEP:	768:WCRJRCxboIySNiV/S+/1CF9ozf//PESTwsQBQ/J5ufq/5Xx:3nS8P1H1TIOOiL
MD5:	27FF98F734806A5D2F56242713AABAB8
SHA1:	AD192B58028CBFDCE9AA4014AD8A50E17B2973A6
SHA-256:	9999C729DE7FC828829DB733C46CCDA12F34DF886DC3E5C94C4DD46FCBF61907
SHA-512:	569A43A445C8504364A9011E510028FA6AC5316F5B3C6CA98342EE3D726C811BF783B5E785902FD17971C25CFF8544516B16660297290A63E06AD5C0E93CE307
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/firebasejs/10.0.0/firebase-performance-compat.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(require("@firebase/app-compat"),require("@firebase/app")):"function"==typeof define&&define.amd?define(["@firebase/app-compat","@firebase/app"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).firebase,e.firebase.INTERNAL.modularAPIs)}(this,function(yt,Et){"use strict";try{!(function(){function e(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var t,r,n=e(yt);class o extends Error{constructor(e,t,n){super(t),this.code=e,this.customData=n,this.name="FirebaseError",Object.setPrototypeOf(this,o.prototype),Error.captureStackTrace&&Error.captureStackTrace(this,a.prototype.create)}}class a{constructor(e,t,n){this.service=e,this.serviceName=t,this.errors=n}create(e,...t){var r,n=t[0]\|\|{},a=`${this.service}/${e}`,i=this.errors[e],i=i?(r=n,i.replace(s,(e,t)=>{var n=r[t];return null!=n?String(n):`<${t}?>`})):"Error",i=`${this.serviceName}: ${i} (${a}).`;return new o(a,i,n)}}const s=/\{\$([^}]+)}/g;class

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (636)
Category:	downloaded
Size (bytes):	637
Entropy (8bit):	4.975229937676227
Encrypted:	false
SSDEEP:	12:2QyNw3q6GCuHnomhglNSRMYyzDRWZU/jg5M362jbe0oQbFLU:2QyVquHozNSqYqRWZqjg5My04
MD5:	5C598B120EBA919B7F3C456C66467725
SHA1:	88DBCABB57A36182071E6E7B7572D5972C58371E
SHA-256:	A79972DFFBA7EEAF7F63969BB4BFABE470375AA1118D24839B83EB67FD309846
SHA-512:	519F55F0C18F670ABDED14EFCA61A51B6854BB1BF6AC013E2F30D32F7F326CBC3D4736F053308F822AFC31E1BF534F603CBFF89C4D216082322C28A225259D12
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/js/components/heap-init.js
Preview:	(function(){window.heap=window.heap\|\|[],heap.load=function(n,a){window.heap.appid=n,window.heap.config=a=a\|\|{};var e=document.createElement("script");e.type="text/javascript",e.async=!0,e.src="https://cdn.heapanalytics.com/js/heap-"+n+".js";var p=document.getElementsByTagName("script")[0];p.parentNode.insertBefore(e,p);for(var i=function(o){return function(){heap.push([o].concat(Array.prototype.slice.call(arguments,0)))}},r=["addEventProperties","addUserProperties","clearEventProperties","identify","resetIdentity","removeEventProperty","setEventProperties","track","unsetEventProperty"],t=0;t<r.length;t++)heap[r[t]]=i(r[t])}})();.

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/eyeota?uid=2HixY-PPDeSNqqRlGesWrlhSOuUI2lETdqA-Oof-BqgA&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8754
Entropy (8bit):	7.939820160824363
Encrypted:	false
SSDEEP:	192:/e4n2Ox2yjb42Qa2w4C4T+04r4p0oy0W2fjDx:24n2Ox2wbkzw4Fj4r4pa0Bx
MD5:	7AB7A55370DA608D2BF85E1DD6691ACF
SHA1:	3221437F06D4F0563DC8ED3373C6038E8241C060
SHA-256:	3EF66A1721243E6411727960EF0C67DA8654E1974A016B5F9FB4A4ADD744EB37
SHA-512:	3AAF7A8310E00815CBC662C80DF18AAAAAA0A1475723EB52052F1F9527563529F3E30C1A3DC5DB8E39C7B67F6D7F260F94B04A00934FB95B2B3F8AC34DF7B877
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:7EF2E079233011EB9F5DEBCDE5465CAA" xmpMM:DocumentID="xmp.did:7EF2E07A233011EB9F5DEBCDE5465CAA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7EF2E077233011EB9F5DEBCDE5465CAA" stRef:documentID="xmp.did:7EF2E078233011EB9F5DEBCDE5465CAA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>hL.P....IDATx..{y.].y....m.wu.v..D$K."0...=v.gp0&.3.......CU......?..r%...<$..lWBR.......`..Y......%..[..~....}...

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	74920
Entropy (8bit):	7.987588967147993
Encrypted:	false
SSDEEP:	1536:BpS2gTc+RJyoOKx2reHJa7f7drf6kLbyC+/0u/XEhYyMLuVTo+w5N/IA:BpTwcUyBeWd6ObbC/aRYCTA5n
MD5:	2911569FE9936EC0B0AF14768FCEC2FA
SHA1:	120E0D63623B49A2D4D539A9CE2C5D188716DE40
SHA-256:	C541C8DDC119691CFDB1DC2C0D4368867EE47E1E897CE70E569B7904EECCFB73
SHA-512:	F25A3DC69A02CF4CD0D9AF8EB03D1C0D3CD7DD9D599100EDFF244360DB4EF440BEF69B2D86560E2938BE81B194A5BAE9AB37C461208B549B53DD0AF1578F3383
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................G.4.sF.]..1%\|.%..M(g....+..^......v.;.w./.$..e..u'P.FI....BU.v..v..e..Q].Vx.......).[....BG1.dJ^....d.8k...t.]..k..Yc.R....N.....?.c0nto.=3s..aQ.R.....mZ.t.q6..`..-..2..J....&.S..J.;..~.$..YH^v.:......v...*.@...;.._`b..."...o.+.Zw..z.3.Eb[u:i.(.,....T..{I.s..%!<....#i..f..:.i...BI!....7...$(u....;....p\|U...n.s....'._.zh<dX..G...W+-..]c.I...ZF...$.f).j.........z@2V...v.......G..b.V.X.3Y!WI-_);.W.....-:x.!..]Nb....mV@...q..%#......\.x... ......(.[.x1.upSp-......o..kw.$i.[\...R...#.?G........a....K1.&.GJ.c..'s..\.....\|j..8...y;.5.{.....c..q8}`>.@..6.E.#2...E.2../....1D.=<l..=...]..P..r......I.pvv:~..@.d....zU.)]..q.e.%.W........O.Z36

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	640
Entropy (8bit):	5.030565511324362
Encrypted:	false
SSDEEP:	12:TMHdVz4uC3LjIM650wo6JdiB4RoLyWvnLW5RsqHllI8jFCw3h0xq2J8SbfsQKe:2d54uQjIMMooZpWv8H1FJmFJDbfste
MD5:	2F598D9E8034D366CAF7664286890A6D
SHA1:	CD1E0AEC69BCF48C4607E39D20CF185BCF47544D
SHA-256:	0256EB6B02A1D70F93FB0D4A569615BFC3A0435448894C1DE8B3980A623A952B
SHA-512:	058AA74BA22F3E2BF3A146754DB1F17818115C2447B5297AD26A55928A84632C655064CF9BBD5A161A3A3EE6A247ACAE04E7F9A7C52E5555501C4175FA78E002
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/leverage/Ethereum_1x_Short.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="17" fill="#fff"/><path fill-rule="evenodd" clip-rule="evenodd" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0Zm-.014 5.143L10.4 17.733l7.587 4.484 7.588-4.485-7.588-12.59Zm-7.7 14.028 7.587 4.483 7.592-4.483-7.592 10.692-7.587-10.692Z" fill="#494949"/><circle cx="27" cy="27" r="9" fill="#7921EA"/><path d="M23.384 30h1.052v-6.79h-2.104v1.043h1.052V30Zm5.221.115 2.926-2.926-.612-.593-1.893 1.893v-5.278h-.851v5.278l-1.894-1.893-.602.593 2.926 2.926Z" fill="#fff"/></svg>

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3531
Entropy (8bit):	4.675579707609708
Encrypted:	false
SSDEEP:	48:cQAvf3K6DSPNHUzy/bTXzOMw/D/i2VnckGXK8W8hEPZY/uZB+xYNblAjdPCMKsIt:KvfafbbzFw/D/ita8Zm/1tl2dqMIF5M0
MD5:	D805465C3E3A81327E19E15A83B2632F
SHA1:	5E2DB0BFC6B9D643F21BE28D0CAB591FF6570BE7
SHA-256:	31FF7AD6D5303E4CCC42080BE57394050193EFFDC031F9914577B0F3A73292CA
SHA-512:	BF86F128101097B0173D2F4680BFC4F442E14E9BA4EEBD6742D10C629B0CBB5BF10AD5B7B596C85A66810223D7787838A1112EDC72076F858E6B291DABB37F5F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#5D5D81;}...st1{fill:#3B3355;}...st2{fill:#0D67AA;}...st3{fill:#3FEA73;}...st4{fill:#06A77D;}...st5{fill:#2B2B2B;}.</style>.<g>..<path class="st0" d="M1.365,14.49c0.114-0.54,0.645-0.886,1.185-0.772c0.54,0.114,0.886,0.645,0.772,1.185...c-1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364...C3.132,29.043-0.151,21.687,1.365,14.49z"/>..<path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66...c6.916,2.135,14.445-1.007,17.768-7.53c0.251-0.492,0.853-0.688,1.346-0.437s0.688,0.853,0.437,1.346...C29.378,33.109,20.845,36.67,13.004,

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	301
Entropy (8bit):	5.031371107984661
Encrypted:	false
SSDEEP:	6:tI9mc4sliuImRzAyAYXV6ZqRITSFUeHN2cINgrYepshWLKoEV2Ws:t4IRMXV+Ds0cIN3Y3LKoF
MD5:	C6E9BE45643E197CE1DB1D7E24A99ADC
SHA1:	D7338E398BB0F7A9082D24F121140D2CF9E88859
SHA-256:	768D97EC0916217AE82C70AEDA3A61B9B0DAB344EDC4A3240A4F7CD94AF00307
SHA-512:	8033A55B544066ACEB01404F0102D7651E9D731EBC04A164A831FC32006F826F4169929DA42363D818B93CFA3A04B3568E26621B26B73D1CDF00FAAE23887345
Malicious:	false
Reputation:	low
URL:	https://platform-cdn.sharethis.com/img/facebook.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 40 40">. <g>. <path d="m21.7 16.7h5v5h-5v11.6h-5v-11.6h-5v-5h5v-2.1c0-2 0.6-4.5 1.8-5.9 1.3-1.3 2.8-2 4.7-2h3.5v5h-3.5c-0.9 0-1.5 0.6-1.5 1.5v3.5z"></path>. </g>.</svg>..

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/adnxs?uid=6576787287013452325&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1464)
Category:	downloaded
Size (bytes):	1502
Entropy (8bit):	5.128604435779854
Encrypted:	false
SSDEEP:	24:/ZcKBbSuBt1z7r7/YDEHEWcF4mBbFH6Vy/2pqx6+HViR7UbXxvE47YoUk97:/ZlhSuhWQ0hJF9/2E9o7EBvE47YoUk97
MD5:	24787C49593F435A98D922FDB13FCA13
SHA1:	BA6C588991DED5A0D9F89FC0569F9C312A6C2316
SHA-256:	96F171604E284998042D56431B61046BF7FDC32FD29C5FA399702D03299A7966
SHA-512:	DA4FA6FB24CA16A58E0953FFCD85077DD4FD1585B3B01C8477E154ECEC8572A420EB8434402B289E50907DFE976CD0F0D4D67742466E65137A1899328184B97D
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/js-cookie@beta/dist/js.cookie.min.js
Preview:	/! js-cookie v3.0.0-beta.4 \| MIT /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self,function(){var r=e.Cookies,n=e.Cookies=t();n.noConflict=function(){return e.Cookies=r,n}}())}(this,function(){"use strict";function e(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)e[n]=r[n]}return e}var t={read:function(e){return e.replace(/%3B/g,";")},write:function(e){return e.replace(/;/g,"%3B")}};return function r(n,i){function o(r,o,u){if("undefined"!=typeof document){"number"==typeof(u=e({},i,u)).expires&&(u.expires=new Date(Date.now()+864e5*u.expires)),u.expires&&(u.expires=u.expires.toUTCString()),r=t.write(r).replace(/=/g,"%3D"),o=n.write(String(o),r);var c="";for(var f in u)u[f]&&(c+="; "+f,!0!==u[f]&&(c+="="+u[f].split(";")[0]));return document.cookie=r+"="+o+c}}return Object.create({set:o,get:function(e){if("undefined"!=typeof document&&(!arguments.length\|\|e)){for(var

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	7277
Entropy (8bit):	5.51339196338576
Encrypted:	false
SSDEEP:	192:rjKfQK9KyK03XK/KsqKIrKW7KSKBKC3sKUKMNKfK3nKrKEKT3AKrKjpKf3H:CftI/y6ySXW+f8QZRRS3KuBjduofX
MD5:	AFF4F0B94CDAAD368B3F319ECA378A8B
SHA1:	592A40DCC21ED1744C521BB1FFD28775EFEDE342
SHA-256:	AE637B66D3B54B7253043BE4BFB335D956D18E7F8C4D34811061FF92896CD854
SHA-512:	2FF515396281AE8942AB76A737789D1D182DD03E8FD5DD5612E03E605DDA8E7916D794A172C2EB1223D3106C5230B684789B715A4EC8C5B382B63551CB1AE3D6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3&co=aHR0cHM6Ly8xbW92aWVzaGQuY2M6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=dp7hb5zdowth
Preview:	<!DOCTYPE HTML><html dir="ltr"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<style type="text/css">./* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. f

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1383
Entropy (8bit):	5.012631578697225
Encrypted:	false
SSDEEP:	24:2d593RL10eaxMiI0NKgctISFJIWwJV56yABGnkuye:cLpcUmSFaWw/wI
MD5:	22ABCBD4023D3936F8BF954CA64C0645
SHA1:	AC5B57FCDAA3DF350EC845CF9354FE4B0AA20310
SHA-256:	CE76538DA29E7B6AB446E180F6EC4AEABF0E31F2F1EF43720B16D9808DFFDBF2
SHA-512:	7E94ABF6CADCB174A450F367E885EB40008608AE62F780C7408BCB11A75FF4A1507CE5001A2C537D5F78FC5809E0CB25F29B19CB620AA316640D6243CF6821DA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36px" height="36px" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>assets/etfs/global</title>. <g id="assets/etfs/global" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <circle id="Oval" fill="#24458A" cx="18" cy="18" r="18"></circle>. <path d="M21.375,5.625 C21.8827493,5.64100047 22.2602852,5.66452794 22.5076077,5.69558243 C26.5841228,6.20744067 29.8123644,9.44583895 30.3087143,13.527159 C30.3378878,13.7670426 30.359983,14.1329896 30.375,14.625 C29.8595276,14.625 29.4729233,14.625 29.2151871,14.625 C27.4729233,14.625 24.8595276,14.625 21.375,14.625 C21.375,11.1229248 21.375,8.49636841 21.375,6.74533081 C21.375,6.49636841 21.375,6.1229248 21.375,5.625 Z" id="Path" fill="#FFFFFF" fill-rule="nonzero"></path>. <path d="M19.5652174,16.4347826 L28.5652174,16.4347826 L28.5652174,18 C28.5652174,23.8350084 23.8350084,28.565217

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2885
Entropy (8bit):	4.810768565552771
Encrypted:	false
SSDEEP:	48:cQAvf3Kk6pkeXNHUzy/bTXzOMw/D/i2VnckGXK8W8hEPveDk7E/sh8MhbJx2:KvfakKbbzFw/D/ita8ZIuk7E0Jg
MD5:	8811878EE283D7A3BEADC5B9AF9EB36E
SHA1:	286A0B06E15CCA108BD1E138BEDC4E5498E96160
SHA-256:	698F9D1F9FC32B0F1359983AA06C70BB3AD22B04DE0AF4540765330669D4A631
SHA-512:	1DD19658345C865272F805E70C079DACDA89D37FA5280E32C450E238435C8E5E79ECB3A4E2524AA0F37C4B967D780540416C0FC4F031D2A480AD89ACE7F167B3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#C3EB77;}...st1{fill:#5287DF;}...st2{fill:#2F6B34;}...st3{fill:#3FEA73;}...st4{fill:#9A1F8A;}...st5{fill:#2B2B2B;}.</style>.<g>..<path class="st0" d="M1.365,14.49c0.114-0.54,0.645-0.886,1.185-0.772c0.54,0.114,0.886,0.645,0.772,1.185...c-1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364...C3.132,29.043-0.151,21.687,1.365,14.49z"/>..<path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66...c6.916,2.135,14.445-1.007,17.768-7.53c0.251-0.492,0.853-0.688,1.346-0.437s0.688,0.853,0.437,1.346...C29.378,33.109,20.845,36.67,13.004,

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	64837
Entropy (8bit):	7.986979437877228
Encrypted:	false
SSDEEP:	1536:I6E/gShZt3L4fKspBEzpwqtkS5muXBv2XshNYUJRY+f:I6aptb7spkIC9vcsoUJ3f
MD5:	E8EB1D9EF0B99BF6FB4EF6575EC5DAF2
SHA1:	51213455970F239A31072F1C643061B6174EC69F
SHA-256:	7E4F94842DBC458F968724EFD9F9AB6930BC96C467798E9328A0F490F82F5FFD
SHA-512:	CDDA49F8BFC7FBEF9377035E75393419FD448A87CF8EDB1518CBC984FD1E62472700AA204D5142BFB760A902991675BBA51FF9F3FA7A058ACD182C67747A303D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................l.... .x/q]}....!....3=...{33..}9...&../.../TW..YP.!h..p..b.....E..7.U..^}...M8.e=.>x_p.4.2."q..&1<\|....fg..:t.,uoT...2.w...&...A.jP.TGc..F.rc..Ps..<...+..owD...rPe...wlvq5...65...BF.".m.l..g#d....h.F......FQN.>f..I.....y.p..+.l^..BU;~xA..H......N.a..f..4.8.7O.^.75@..jO.....4../m.Q=..q...P......{- w..X......Y........{.......6$./.L.;.+.5..^.YZxd.....9>.../.D....+...l.........1XK,.v7....i..../V.....q.U9...^..$.W2..3~..!..V.......Xd..</o.Y.k..R..+...+r').....=..}j..S-......I.`.....<.. 1.$....3...+x...R&K...#.%}.......z..8.>..dYq....a..._;..N...j5...n..,a....V.i.$...+y...[....X.%.......yT.....u. .HC4H...S......w.L.... .%.oI...Oz..7.g.+....&.

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/nlsn?uid=a19a850734a267b9c36559160770466b
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	dropped
Size (bytes):	418738
Entropy (8bit):	7.9768465670875965
Encrypted:	false
SSDEEP:	12288:MjbzuT5mHyV2y0D6XB64kRTH8GwLrlLxeWwGq:MnzuVmH3yM4kJHTwLrzeV3
MD5:	8534EC9967B4B3B10E50CE81DAC03565
SHA1:	29C4F92B0126CACE231E74762F57F03FE6F69617
SHA-256:	510621B55091F3C561693A34961DD492A877E5BB4E40FA108ECCD7AC4085BAE9
SHA-512:	6246B9EB6A96D30AC79E1292DD9C42C2279BC99CCDBED1F353D4168D7F0B139635ADC50DCC189F5EC9A94B2EF0CFDCC2E3A5931BDD0FC88C9699BC21DADA8035
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X..."........................................................................................... .uvMcI..qE/f..t....;]..#T.e0\|.,k].....2...(._p..M..z....Kk.M.....6.e-.I.w.k.........{$..c...........J.GI"..l.E......lw.u.8....s.e.].l$.Xs`".z..n..._.y..:.].............9.k..qQ........).....t.3..&[.K.....^..I2...o.^...#..v.$5^U..&...)..#..t.h..!.....wF...d.st.<MG.@.)?..R8u.U!7.C..eS].....1.$r..uV.....w......L..8b....)).)......5r...'..1.:...i.L.......&.Y?..1....U..c...j..-...M.%A.X.x..d..$...j..)).Z...Ocpy".[z....UckT.R....Yo._^`......z...aUQGX;YT.D......'...-..o.....]$]...G...i...].~F...l.X..]...VH.N.6.5..G.>Da..QR^a.$.Hs...$fs.v%.S .S.VV.........D.....K\.m.....e.q....WO....v...A4.......N.Cy..B..o.x.f.....kAGru.1.V1.

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	80663
Entropy (8bit):	7.984511781546446
Encrypted:	false
SSDEEP:	1536:wh78Ho8b+l7sKXzIScTIYSGwAQsnSlUMRW52ypp4q7S+Wd6V0nZ/lOx2gZ64Cmmr:PLbkXMSYBDnSxW5xp4q7Soqn6T64VL9E
MD5:	2066A997E83B315CE93FBA282AB53593
SHA1:	9A083A650660084DC11A03E7F0592F2DC0E31377
SHA-256:	5B26C4FEA4FCB2025526517DC3053F7A3B7B1A1A6E18F00474DFA7D03945FD6A
SHA-512:	2BDB67C7C0C6FF5762FC43CCBF04CAA2A86302A5792F54495514A1A418DE2DCE05B2C36D4CBBDE9D14F037502FBCD6C880FDEE3CD6DC80CE26AA20A5A7AECC98
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................W_=..\|p.....9$.p....uz...Y.1.l...4K.K...^w7.t.K.&.U\.t.....R..WG....$.5P....g.4Y..}..s.c....\|9.q....;..[.~D..gd..R.n^.@..P.._]Q.+^..U....$...gs^..~C.rm,..@.:.BD.$`.......{........m.=....RM...:13.D.!TvC.l}...:..}.@....z7..V$.e.....>B.}..G..j#i.:OF.fcy..E...T....5vm%...+...I.t~m.pU...Qu.Z.nj9..2....~....8Gtg\|.&.4.GK.{./..y[?G...w...z....'Pkx...u.Y....Wi.h1kL...M9,./....yA.>....u.B.............,o.c..v:.[V.2..Q....v.U...k...YeK..X....V.S.k.%.-..Z..j.)[.+E._.(j..9/.b.E-1.C.U..[.....2.../....1..NGz{8j.}..&a-..y%E.6.....u..7..$).G..$...Xy..-....'.....Z.66v8..9..M..K5..].FK...\|......w*...#.D.V.'.Y.&...c.g....#l.qny.c`...Z../..\...Q.,.k...K0ZppD0b0

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65453)
Category:	downloaded
Size (bytes):	107184
Entropy (8bit):	5.283349235453674
Encrypted:	false
SSDEEP:	768:NMo7UCD0hgwUB1UB5ixWJgnHXu8R4E+SHg4i1UGBosjHMTh1pHPepvUSvcHpKuM9:NHUA0cBuQWJrQxaBR7Av3guMFmAoPMr
MD5:	ABF515E86D5878EDC0D1A979079983DD
SHA1:	A9A703833D9125DA5BBC2B091C9FC963D61E5989
SHA-256:	D4FD0C9532A9995E68DD10B9149D62D014120F35EE417434EF9A8C74D68092F4
SHA-512:	F4D98EFB2E0173492458F9B3044E36DC5B672AC6F9A7FAEFBC46D5DF21C92BCED97A5164F2F1BC05295777BE3C7E5FCDE410ED4316D81A65B39EFD0616FBEFFB
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/js/WebCommon/Vue/vue.min.js
Preview:	/!. Vue.js v2.7.14. * (c) 2014-2022 Evan You. * Released under the MIT License.. */(function(J,k){typeof exports=="object"&&typeof module!="undefined"?module.exports=k():typeof define=="function"&&define.amd?define(k):(J=typeof globalThis!="undefined"?globalThis:J\|\|self).Vue=k()})(this,function(){"use strict";var J=Object.freeze({}),k=Array.isArray;function S(e){return e==null}function g(e){return e!=null}function z(e){return e===!0}function dn(e){return typeof e=="string"\|\|typeof e=="number"\|\|typeof e=="symbol"\|\|typeof e=="boolean"}function I(e){return typeof e=="function"}function Q(e){return e!==null&&typeof e=="object"}var ut=Object.prototype.toString;function re(e){return ut.call(e)==="[object Object]"}function Dr(e){var n=parseFloat(String(e));return n>=0&&Math.floor(n)===n&&isFinite(e)}function lt(e){return g(e)&&typeof e.then=="function"&&typeof e.catch=="function"}function Aa(e){return e==null?"":Array.isArray(e)\|\|re(e)&&e.toString===ut?JSON.stringify(e,null,2):String(e)}fu

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 135 x 135, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4443
Entropy (8bit):	7.943060441686189
Encrypted:	false
SSDEEP:	96:VM+LZYAIeeruDLlSlNb5O2nzI4azu6OCP7F4m8ITyEw6:VMotgiSlNMeI4a65CP7FVTyEd
MD5:	26829DDFC69DDC48AD6C7EA608D1106D
SHA1:	D95C7EF9CA04C00A1DDF2C7C613B8D638BE2260A
SHA-256:	D4F1052B9BA6B8453A676C3B9320E3D38854E36D88CCD9DD73553B2B8208A971
SHA-512:	A8373DE15E4EBBDE35A42920D2F50F62AD357C85846B8FA94B92C041A998150E2BD6E1ABC541BDC6E84D7F52EA1CA336296A7F96BB91492CFC4699BCA3049372
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.J.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....IDATx...kTA...UQ.!F......D...""...0El.....T!D.....E...E4.b...D..T.CT..{.sf.D.~.....F...\|.k..V.......Xk7..]d..a=G..Y....C..$>......~..q.{O.k......;DdC..z....N. .]$.<(..;>a.>b=O.1...B..@.....]&....D..I.E#~...y..Ffw..&Q.P.2..A..h...Q2k[...DM...Rc....-..Y..e$....H..........g.\|.M$z&..P..H.\|.M....3..?A._....;..!N...d..D...c.A;.%qB.t....D..\.d...5I.f..M..q .h.X{.E...S...Ht<..?.3.....E).>#%..].;....I.C,....f.7..`..d.c..B......3>Ff]......Z.c......;F...^..cV.k.,p.X}.$h...7..cq.iFDk.H.......{.Y_.w.8..n.C..JJ......E1...F...i.Sd.. ....M...L]{.......eT-......9.W.O3....H.t.x.8.m....:3..P8.....Rgyx...r..(.../.._!....P.jm...6..R.Xl.BEz.V.U..j.Q.)..<..4x0.....xm...&ow..Kv.i.9x..4..B.s..2.73.\|..v1QdS....9.......[.:.1.^....~g.x.#XVA.6w..q{.8.....}...a....V1.....p......`>.....;0@......}.,a.eR..B,.)........g1...;..czJ&H,!..%+@eOW....P+:.R.]..9;+.g....,......h.z.

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2028)
Category:	downloaded
Size (bytes):	2029
Entropy (8bit):	5.202455515097713
Encrypted:	false
SSDEEP:	48:k19GxzRvnkHi5lElqrrlwKJA0zSFRsXd5V:y9SHLLmRRsvV
MD5:	67FBB0C08F32D6607D9C70B7223F89BD
SHA1:	470FFAD9DEA44D714FC881FF788C3A00DE44A09C
SHA-256:	DD6358B5FB4D5639474D87E3DF8F1B9980F94DDB9E4BE26D0B14427B9C7D11FA
SHA-512:	2C7C10856AA31A263324FC20DFD272C2203C7AFA8B50752D86A51EDEF44CDFB5367FB15583C922A97C5A9712469291AB48C2FEC5B25FFFF56AEAD26D4F8B624D
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/pages/login/loginHeader/loginHeader.js
Preview:	(()=>{"use strict";var t={};t.d=(e,i)=>{for(var n in i)t.o(i,n)&&!t.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:i[n]})},t.o=(e,i)=>Object.prototype.hasOwnProperty.call(e,i);var s={};let o={};(function(){"use strict";IVS.WinJS.Pages.define(ClientUnique.getPageUrl(EPagesUrls.loginHeader),{onReady:function(e,i){window.LoginHeader=o=new Vue({el:"#loginHeader",data:{strings:{startTradingText:getResString("strSTART_TRADING")},productName:ProductManager.product.productText,showProductText:!FrontEndsLinksManager.shouldHideProductTypeFromLogo(),languagesEnabled:!ClientUnique.isWebLogin()&&!ClientUnique.isWidget()&&!FrontEndsLinksManager.shouldHideLanguageSelector()&&ClientUnique.localization.getSupportedLanguages().length>1,RiskWarning:null,showOverrideFes:ClientUnique.isWebAppBased()},methods:{init:function(){this.addRiskWarningIfNeeded(),this.addCountryCodeToBody()},addRiskWarningIfNeeded:function(){!isNullOrUndefined(FrontEndsLinksManager)&&FrontEndsLinksManager.IsRiskWarningStickyT

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x372, components 3
Category:	dropped
Size (bytes):	64208
Entropy (8bit):	7.982391064220711
Encrypted:	false
SSDEEP:	1536:EOjg65LtHpfDVxd89WXqQ6IsqO38GCwUUboA1eBiNuuRN+HqZ:tFJpfDVv89W6jqY/P1eBmuumH0
MD5:	82FD8E436D49570088BCDB98A6EA99FF
SHA1:	9A0B46FE2F6A761C7B1D3362E5A12E0FD03E9AF3
SHA-256:	10ECDFAF9AE7FBB8CFCDFB288C444F7C89F325F4633A730A800D1A0B503B5820
SHA-512:	606A8FF00BEAC4811A7D900C16B566D0556FB8A9A85F3A0F3C67849630C85963155403F5760A7D56432CF8F46038211CF16A04D88168F3328360036F03E89202
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................t...."......................................................................................w........x'.L.> T....=..&y....}....k..w.f...g...fwq..%.OcQw.c._...\|..O.s...'...p.M.:........":..1;,......{..3R~...{..7.%..s.ffwr-.g..v.N...$."...Hv....}...`1{.B.a..%....w..Ky..A.E.....!=...2U..(....T.~{..s......X}z=NPnY.....Q.v....d..\|1...X..x...oM.>.,.).B...,.3.<...E.j.e..z(.<.t..yo..8.....\|..^..z..g........i.a4..,..3h.. fi.._Y)..i.ZI.....m..=..y...=..cs.`Za.....v.u...f-..fw{.wPED.m;9.6.T%..,.< ...+.).....~\|..a.b...lO......Z.O.zc.3.;.<g...$h..&.....(.d....JP......{.u:S}.....X.Y&.D...pn.@...u_v........r..g.q.. X........E....%#...O...$...W$.#...&...N..7.yNC.~>.\|......q..[..@.!._Z....y.{..W u$.. U^.-s....j..g.\|......m..X.K...i..T.=%.P..T.;.d.2..9.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	62417
Entropy (8bit):	7.98556215621469
Encrypted:	false
SSDEEP:	1536:jo41fSCS+jY5gsv/WYEkpfraULC1Dne2ia:k416CSr/9EkpGUI
MD5:	521EF81FD345FD84D09545CA19D86ECB
SHA1:	5D3E967BA233FEDBDED493A8C6EA6B58F78E5D77
SHA-256:	2DEC7A205632C03F20BE84D8262C6A994EECA0751EF0DA5ADE2DF61A83F8DD79
SHA-512:	CAECEA50D9400E92FA98FB7CE6862D78CB1FA3F348DC6479EABF1C9600EB15470773817185348BBFD0D2969C7A4068658BB6DBCF3DB85FD384A3C065229526C5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................~....P%..7.lwa..T\|...P..?S..&....CE.M....?..z.a..#....:...'..:..s.:...G......v7.,;..CQ.;..-y.HJ.s#t.vb.._..5M...F...\|a&.&..X#.7U..I<3.t&.....(....+.jw.d.=...{..J..e...C..X?+..:p.....W.oT/.j4...\u.I..t.\|.Sn.I.d..$....I.O./.-M....@H....J....R~...[.3m.,.m.f.:.x.......K......IQ\...XV....-,u:....D..\|0L.SS...\|...ae.x>u0u.S....."..=R.3.....f.....<...U..._f..v4.....U"....1R.%.O.fq..O.....'h..~.5.Jjw..Xcy..............,..^..EZ.iA0...z..!.P.>.:=Rc.d&C...a.!.p....M....... .....7...1.2.".....G]6.'.g.s.6i.p.o..Zc."...-c.q.4.......f.h......+}fm}..\......F..\|..R.?.....w.#....<........-..NT..@..d.....P.3.!H1*.C....V.@yT..~.Z.$\..AD.f]'..3.F.ff..`....i$

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	74261
Entropy (8bit):	7.987607355211446
Encrypted:	false
SSDEEP:	1536:TNfc6AEFVNj2H0EhxifM5zTaUsfnZSeCOZxC5jBBkW8WNj2cC:T66AEhj2vTifMl+BfIe3rC5Lj8W92b
MD5:	70DCCCA93C4463487EA616D2282D402D
SHA1:	079305878E60C628F62349C4307C61F5261DB662
SHA-256:	B32191B73B9B3A88DAEC3183168B05A97DBCC50AE428546A7577252956BC5A13
SHA-512:	D8F0518BE510CB202A96DFA6DC33E527FDE12A2562D5465207DDCDE4AD412462711EB5CE9590B7BE324AA9638CB9C59EA088676DBA7F3B8022C3129221443D2F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................i.Z1+.M.....6.)..c..*kc.a.......[G.B........!..\6gH........V{.ud....#..y....:.1..F..T.,S.k.F..!.Z..#.} ....8...$....x..dM...M..".M..) gYz..-.._..Dsv.....~w.5...~~...]ou~7.<g-..,..me....g..BV.{.K...4....<n.\|`.[.94u..=5.;....\....U."<V....>yHu..:...O...S.b2.Z.E.....rFj!d.V.Q.VA..N...b...#...C..ovN....O:.....:.Y.f.Q.]st_Uch...~#..p....p...iw...7...t.......m.1.c.X.\|e..>.3..(.0)...(t...L...r.\|`L..GdFj.')'.fz.3A....?._..Rd..-.K.4...6..O..9...A..VU...]C....Z...O6..Z.^{..r...N:....:E...E.(-.-...Qc....._f..>..=....h.S.L.s.IL.,.4...\o&....=......=.....JL.k.CF...m..H.....f\....C\|.A.=.s{b.{m.ZJ..".e....D=. ...R]....d......q....#.L..y...a.......x!.0E+.Z

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	66611
Entropy (8bit):	7.985731795274259
Encrypted:	false
SSDEEP:	1536:DSGmeXX1Q+LiDuHDtPJ7d+Qb6Wh/pKL28IWtNC+6aXXJvDww65rjSu:DSGmCXSuqsBPX+U66/pKL27Wts+jFDm7
MD5:	7D644724020BB8B7E9C8A5D42BE433F7
SHA1:	C254FAE40D996717809DBED2994CB7A274400817
SHA-256:	D21D34C2DB8F64A285CE80DE294EBC9724252A1DF5C3DAB3A09A904A0399A360
SHA-512:	D700F67764A20785D2E5CB8AC521A914CDAE51B38AC2DF08AF62E8122EC70560E40FCCDB628D07D2D8581B8D971EE08634355DF7CF32A0D43CF0131357172EF5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................9}.O.....\|...yw.3.. ..g{.....n....R.D1.c5B<.Ob...J.A..]o.2V.3........@.q.[Ap...>y\|Kg.......K.{...uI..QJ.;.N.<e...>8A.<....3 .T.W.=M.D....X\..mtJ..C.;....g.l.uc.ZJ6b.H.&....4...Z.2..M...$4Y..$.Pt....\lU...@8k..}..D:`I.u......DmK...Z-.r3r&m.....\......&vR.7....+.@fi...d..]..V.Sw..=-OH\C5.u;....y.#.dp.c..nL.9....."....wY.e.S..-..~A.=....v...m/.h..5&.. .1.O..ob....}..mAh.B..z...7.6....Z..d...<.c...B.......;.$.I.W.l..c......b.6.k./..5$.#.\|Ns.G.S.k^........u..\D 5.8QYlC.GB"..98..FMi.&..l.:.}..W...r..G(....p[hu....l....-qI+...=../.1.Q..q.......\|1.W)RN...`.&.7<^..!.F4...j../D.G..ay.4bmWp.qe.....!.C........*..l.k.rV.)f.m.)..&...q....ZI:

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	757
Entropy (8bit):	4.751083344870147
Encrypted:	false
SSDEEP:	12:TMHd64lWNxMiLjI+xwseuXf+fr9JdDgXf+fr9jdDgXf+/hrE:2d64lSxMijI+rv+fhJdDgv+fhjdDgv+G
MD5:	8A358FC27F7B244C296100EF34819EB2
SHA1:	7C0155DD0D58AEB9FF170650943D02154010BF9C
SHA-256:	BD36472406B7BD0011DA1A8769919FDE06B051BE12C71E1F82CE3A04DFAD45E9
SHA-512:	E683C1D0EB003609B669D2B72F205D4290CE10EBF712D3CAA8628368FD81C0E411BA10ACA25B335E289A8287B81ACC998370E8E477D98459D4CE193851CD6E77
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#BFBFBF" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zm-3.938 18H8.439c-.47 0-.89.29-1.054.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73zm13.5 0h-5.625c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73zm-6.75-9h-5.625c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5A1.125 1.125 0 0 0 20.813 9z"/></g></svg>

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x369, components 3
Category:	downloaded
Size (bytes):	57064
Entropy (8bit):	7.979976326499632
Encrypted:	false
SSDEEP:	1536:FwIK3PWio3dlakG8hZC1zevaONe8GSyiR6g3MWPx:+PW5dV9hUzev6Sysh3dPx
MD5:	1CA4880D772391531577D7403FDAA703
SHA1:	105970217F43E949C34E9F3E76B91F851BDBF3B2
SHA-256:	39E41C8D7C2EF8880BAC183484DD9128F30AF192C54ECB5A34B8A359926B0892
SHA-512:	024A6ACBEA62E4BD0E2E90A253161AFD71AAD3CA6CF83B7A209E336438E0F53FB36F19DD7735C68950931946B21274519D9B43100BD2294872A1FF0FED270A15
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/4c/da/4cdad402503a9f291521cdf4de162cf0/4cdad402503a9f291521cdf4de162cf0.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................q...."....................................................................................`.r....I.;...<......{._g.z.sGWa.1.Fl....^....8..7o...\..k..;.7k...[.5.>....>wi..y..f.#.J..HL.....{...y....u.}..Zi......b..].....O..xw%N.T...r...[...YJ.YHd>..i.#...$u^f..W......../...g......]....[M#..t].g...`..)....{`.:X.....Q..l..j-..F.I......-..W`.1....?.}A...7.X.C.C.....+.>.C..S....#.-X..SFa'.E{...z...../..OAtH.<..BE..(/U)..y.[kTi.$.f.L.V...N.].!?pv...y....w..Sz.p...8`.E..`...n8{@.#.:'.f.d...'.^ns.,.p1...dr.a.Z.n..w.?.r........Z..[..O...v..^1v..U.5]......66.........1..I5......YV....sV..x-....Ps.8C..Au.$nDfI+6..?..#Qe......=..x.3.5...N.Xf.J...7Qz.6..\..4...g.{...C&...s..#1...$.z..H.$..$.K.5.<X.fp.g.Ug./".....Lg...~.."..Zu..s...i......r

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533), with no line terminators
Category:	downloaded
Size (bytes):	533
Entropy (8bit):	4.933115570682282
Encrypted:	false
SSDEEP:	12:X5eNcBWFXMOYEBAP5egtIzVWRwHjXJqIK+qIKzg0fUsq5eK:pemBkXWegazdDZq3+q3c08sceK
MD5:	FEB698008C36A09DFE88AB06A1C3E3B9
SHA1:	A871FBCBBE298AE7078D06627708B2C106A0FAF3
SHA-256:	1C4E7E389D73C6ACF7F19CC812514E71230740791FDE8A018C1D7EDCCF1590AE
SHA-512:	F8E3CA3E49B1C027232D1B3AAB82B5430F4A69334A5E18BEB4469C39D6A24D3F4D3FA4C473F360B619CE734977F0D7EFD03BE6ACB5EB7B9F69295FB2CBF94D9B
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/style
Preview:	#credential_picker_container{border:none;height:330px;position:fixed;right:20px;top:20px;width:391px;z-index:9999}#credential_picker_container iframe{border:none;width:391px;height:330px}#g_a11y_announcement{height:1px;left:-10000px;overflow:hidden;position:absolute;top:auto;width:1px}.L5Fo6c-sM5MNb{border:0;display:block;left:0;position:relative;top:0}.L5Fo6c-bF1uUb{-webkit-border-radius:4px;border-radius:4px;bottom:0;cursor:pointer;left:0;position:absolute;right:0;top:0}.L5Fo6c-bF1uUb:focus{border:none;outline:none}sentinel{}

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.6234651896016468
Encrypted:	false
SSDEEP:	3:YWR4brk7VBn:YWybrm
MD5:	D3D22A2C483EA5BF5E1B887D19B710E9
SHA1:	31E5F0A94EAC2CCFF4801AA97255701460C3C078
SHA-256:	4C7BF259CF71E49AA671EA413172DA39DCD72C8B7E34948C01E21F5585370602
SHA-512:	85EF64BF19C397B0F34DDF055AA27F732078C8DACE8DAAA3AE3BC9D50B81453C3621EA936FAC49BF9F194CA9905717DD8BDEF9FCBDDE972FD099FB3C022714BE
Malicious:	false
Reputation:	low
Preview:	{"status":0,"error":1001}

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	33337
Entropy (8bit):	7.960121985593582
Encrypted:	false
SSDEEP:	768:GqE7bPWwFRarBdILpFQUop4+mTD0pIeyM/NJrIft:Gq2Ww6BdyFQFpH6oIeyM/N2l
MD5:	924315727002B4A3DB3F284987F49CFB
SHA1:	19C1F4ECA8AF1227AFAE2A1947079052A931A526
SHA-256:	25FB7726D5C154F2269C0E01F0AAF0BC915DC8B627C521FD6A605F2A414DDDBE
SHA-512:	F4E916DA285D2C284F52735AD1A31222416D599003A72B12212D6A1137EFD4F26FE26BF3816141969209B15D058687D1C96198FAB0749F68FA1EA7496291FA75
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".......................................................................................v......6.{...K.~....h........p....FY.\|..'.......9..Da.kjP.. ...N...g.V<3F.q..NT.e....7...o....,...8.....`...R......#I....-.&.i..k9..U.w..yo......%C...x...@........%.#9:.....<3,4....v[s..d....K9s....%)...8........a.H../...I4..@1.....B.G...r...+.i3.%.P..Be....,>.............)RF..}$..I....#.[~..\|...d..w.....\|/v....K.Ae\...8.8.JB.............#...rLg#R.^..W....m.g<Z<....Y,.U...b._z......6...6.......@....I..%.#I.....\|..t:i.......d.li......4J.Q.F..J.ap8.n..8.........e...........n.].O5.7..9i;..j..........R.....}...(.........JT...\..5.*O..5(..CE..:..!r.G...-....i...^..a3.+.m..8.........j.5.+m.o..U_.}..C.r.k4...).-.i'..}.).s]..v.]...^\|.Z&\|.8.

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	71614
Entropy (8bit):	7.978406244855643
Encrypted:	false
SSDEEP:	1536:daH5Vik3oPa6m+HZkCeFdE7MIDX/W+QW+QCMnvdgZo+4Il2P:daroPaOi5H+MSoZQCoFko+4Ils
MD5:	077AA23A69488743688C8D88E2B4AA71
SHA1:	F0D6DA2FCEA8EA06983B265B3CBB6BD5A07045E5
SHA-256:	DD087502849E8EA25E810CE2BFEACD3233C62CF0ECE8DFA657C60482BD31C0A1
SHA-512:	D582BC6548821B44291FDB951D4DF26094AFB1472DBA50062E094EFB837742730E9377270441ACFBFA06C35AB59C1EECC9FCE77FCB0A123E54DBEBEA930419C6
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................R&..E...<..sb..u\....z.O8@...y.....B.z+c..,rP.F..[............R...%..E..WG..a./8uS.....Y....H...$r.#...>.(.t.d.g......K...~Yb.....zi..M..Ta.F..!u.Y.r.8..'......8Z..H..o@..2=.%.9........NL...6..:Ms..hn..............<8<"n....).:.k5>I...&..x..^H.?.....A.... 0.4........`.Vz...8.{.'.~.=.M.f.fM...{.N._....g...0.ZV..O.m.di.Dt"3.F..)\.....`...$J....@..k....[......9....9.uEq.......v...`....Hz....O#...........tF..I...eHA!OE$\|c.&..T...V.."..<..i..6...[!.l.G...0.q.:H..Z..O....2.P.R7...J.c[.....I..(H....!.d....Xz)LZ.oQ. ...0.<..\.".. aF..^.p...o.g... .....k"..cw...soX..S'..+..).../<....:.....R".X...1R..?....oW....wV)m{z..S.]..6..7B.4..U.@>.`..8;5...Y.9

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1648
Entropy (8bit):	4.435453015549135
Encrypted:	false
SSDEEP:	48:cC1QmYLI3TEGW+EWmMpLeU1btwLhtlBBluW4JAsXm:40TEBN+LeU1E
MD5:	414B60894723FDF8853654BD54518B58
SHA1:	2F0DA719FFD815A8F7BCF4CEB423A6CD019B92A7
SHA-256:	D3C88EFC65CD24B79E1DF3E312C54706D8CB975D3AAF7E80CC3F2B110E751A4F
SHA-512:	EAA31D1E64DCAA2D0B808EDBFC7C2CE7CF96E83AA033E6BD6A50735C22BDB03E757DF73DA3188724EE1C0EFE7C577A07FE3B8CB7B1FA8711E0B532C06EFD9386
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/leverage/Bitcoin_2x_Long.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M18 0C8.06 0 0 8.059 0 18s8.059 18 18 18 18-8.059 18-18S27.941 0 18 0Z" fill="#F7931A"/><path fill-rule="evenodd" clip-rule="evenodd" d="M23.115 25.005c-1.295.47-2.5.308-3.068.232l-.042-.005c-.27-.036-.727-.12-1.215-.22l-.808 3.015-1.856-.497.795-2.966-1.413-.38-.795 2.967-1.856-.497.794-2.967L10 22.71l.979-2.127 1.11.297c.373.1.538.107.734.002.195-.106.29-.322.34-.504l2.057-7.68c.13-.481.125-.622-.03-.929-.155-.306-.666-.478-.96-.557l-1.072-.287.516-1.927 3.652.978L18.123 7l1.856.497-.798 2.975 1.414.379.797-2.975 1.856.497-.806 3.011c1.36.457 2.32.996 3.041 1.902.932 1.17.472 2.645.35 2.994-.12.348-.46.992-.891 1.35-.43.36-1.313.597-1.313.597s.851.432 1.357 1.08c.505.646.748 1.613.391 2.837-.355 1.225-.934 2.38-2.262 2.861Zm-1.939-5.427c-.3-.267-1.01-.708-1.912-1.015-.904-.307-2.1-.562-2.1-.562l-1.066 3.98s1.225.357 2.065.517c.84.16 1.746.18 2.234.06.487-.121 1.0

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 384 x 384, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	20357
Entropy (8bit):	7.977085137365684
Encrypted:	false
SSDEEP:	384:mPx/ZiuCTjL8/7Ag8amvnuzLMN5pPVlWsHJe2fR4eS:m21TI8gjmvnuzLk5pno2fOeS
MD5:	F9F777C9EB58FA518181474A9558FD61
SHA1:	23AD85010FA73B5A15D17360A9629340CF7F8479
SHA-256:	D3D5297835C11FC2E88E89A190D4298718A2519A7E6E7C2341A60A6C45CBB542
SHA-512:	603ACE5BDECDAF0DBE1E81164DF0BB8F034BFEF66FAA83E8BD08EFA1DC287790D384F85A4BBD09ED99EC729B4DCA14C0598C7F0AEE99F44A4760DF6B07B2B505
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............}4....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<..O.IDATx...K#A....FQ..4.... ...3.y+,l..{Mu..).;......Ic.M@..FH.hZ1./..B$$.Ht.5..9<.:.Cq.....~......Y.A..V:.nz......0..."b.d.{H .S.3.k.".......Z(..fJ.P..'..,oy.4.q.$..c.."&V..(#bT..>z..N:D.n.5h...hd.;.A/...'...vx..f..3.BE.V.KE...J.....+U.TXUE..g........9)F8.^z..@..z-..vz.. ..-.........y........q..O/...w_._.........+.%]B.=.q.],s.a....E.<...E?#\..2........W.._..z.......b..<CA.%Q>B.g...b.p.6...6..,.3.K.EP>...71K#..Sz...$LI....D.k...z.=."..z.+..B.qF..r..y&.U.].?..e....bz7.x....UjE......i..v`.'..t.J......a.......q.9....2r...[ .M ...:..Wy...>a.d.6.S..R..R.Q..b..n...l.Q.).............R.Q.'{...j..q...\b..7D..B$X...S.A....`2 !!....bhb.M,.N.e..F&...!.!nn+w..~.m.........sr<.=.&{....X.&.......u...Qg#.vt.(.m#.....L..CU......m.%=sta.Z..R.E.]_.k..:.(TMn5....\|!...4..P.. ....<Y.<....!.....#..>.?9&.}.(...C.:E...a...<...?9.=.tY'....aYlY..&..)n.r\.).M..k.$..R..h.k..

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	70331
Entropy (8bit):	7.98535868319163
Encrypted:	false
SSDEEP:	768:Q3cOGQcYmngv/Sva25U9VJ1OjO9jfT7GIdbo/8Udk4iHNEnjP0TJpf677BzTVApU:yGQcYD3j9GkQ8UdsAtGAMI30+X
MD5:	CA000388979B0232900D1E2D7D356393
SHA1:	FFCDCDBC0B138CF8FAD2775AD7A795D7C397066D
SHA-256:	684E8D9D05D24F048D03200E09974C93F86896F3D8DE702E101EA857E8B06820
SHA-512:	E566858A467C5B1393252675CC1FBB82B76BC43211E8B3F44319C37420CD79F764F18847F2573FCD9A84C70AE74EDDF492946FD6D05480486BCFED4664D02A0E
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/25/7d/257d0a66d1d7e9c53531a6faa02f36ee/257d0a66d1d7e9c53531a6faa02f36ee.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................v...1..B.jw!...?>..N.$.N....O../.M......[..=C......<y.c.....=..._..>v......i.'O..8k.....B'.<..\|.-.Z.3.....y.7Fp[......0.."L.(>....0y........sW.}....c.........6...[.)s..q.\|......\...tZWmi.Xp..T.WkqX..^MQQ..~.Q;P.Zu7B.......v.[.>..m?]}...o...x.cW.?...u.`i.7..>.!A!u.m...I.e......#..t.]w/.e#....N....T.U.ui(s=.8.l...j....<..r....Y.SA....O....<e..k.@~K....C.h..Q.....D.\.b..D...D.M..*.X.r.k./.&..C.v ..b4R..B.d..lU....8Rr...t....K5k.+\.sV...o.M#..~.v.F.$.....9....B.f;J.o#.z..:..gj$4..4..U..Gx..P..(...X%..6)b.......W.z...N_t_..e..w\_..y....sQ.NDU..{....-O.-i.j.\..3...i..b.LI\|........s.w.f..r.WWw... ..U..[...8........../v...\|>P..^.....C"N.....y....v.z

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (325), with CRLF line terminators
Category:	downloaded
Size (bytes):	3049
Entropy (8bit):	4.92804102330845
Encrypted:	false
SSDEEP:	48:t6FpCtaDh6I0w1N0KvkWihHvzvSvmsSZUxUlU0U4U60UgQUitU0Uz0xWxXLqOzek:EFc+h6VMN0KvGbvSvwqSOt4U6tgBimtR
MD5:	10FA75B2017BE57A28D5FB01179CBCA8
SHA1:	303EC367965E9F9D4F9D2909AEBAD079D58A0EA0
SHA-256:	D86A881DF6FC60C5ADAF89AC0C881A9F9F551584DA49EDC281A3C795671B8541
SHA-512:	5697ABA1DF1CD79188B9E1C004CACB3FD77507B15213B69F097D35E0610FF83E6D007B759117615B54BEF96EFD2EF2BF63A41A4E44925F9ED86873E3D282950B
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/pages/login/loginHeader/loginHeader.html
Preview:	<!DOCTYPE html>..<html>..<head>.. <meta charset="utf-8" />.. <title>loginHeader</title>.. <script src="loginHeader.js" type="module" crossorigin="anonymous"></script>..</head>..<body>.. <div id="loginHeader" class="header-login">.. <div class="header-login-wrapper" :data-lang-select="languagesEnabled \| toBooleanString">.. <div class="login-logo">.. <a id="logo">.. <svg id="Plus500LogoSVG" viewBox="0 0 120 30" height="60" width="240" preserveAspectRatio="xMinYMid meet">.. <polygon points="63.16 4.08 59.68 4.08 59.68 1 54.48 1 54.48 4.08 51 4.08 51 9.22 54.48 9.22 54.48 12.3 59.68 12.3 59.68 9.22 63.16 9.22 63.16 4.08" fill="#0C2780" />.. <g class="logo-svg-main">.. <path d="M19.7,22.92c0,2.35,1.32,4.95,2.7,5h3.1V10.82H19.6S19.7,20.13,19.7,22.92Z" fill="#0C2780" />.. <path d="M37.35,24.82a.78.78,0,0,1-.8.7H34a.9.9,0,0,1-.9-.8v

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28368)
Category:	downloaded
Size (bytes):	28949
Entropy (8bit):	5.285329411098089
Encrypted:	false
SSDEEP:	768:dASlCDOW3GZSQaujrg/AfjpNBLJ6EElOZbwrQmJHNS555:VW3tujrfEykNu5
MD5:	04AECFE7D18030FAA5DC580F941027C8
SHA1:	E7DCA7BE38B03D9098E894040C3648179CFBF1F3
SHA-256:	D31E1F226B4D3AB07B6F01BC6A6F5E33D52EBB5B2D017DC0D1F4D41B3BEB6EA9
SHA-512:	63B0BAF36809FEBB30307697B8C3D4D6D12A6A41DCF1F046DECC84078031B7958C8D5DC49AB9352F398AF21D87F828BD4D5CE21DD81F1371FC08F5AD627FDA7A
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/firebasejs/10.0.0/firebase-app-compat.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).firebase=t()}(this,function(){"use strict";const r=function(t){const r=[];let n=0;for(let a=0;a<t.length;a++){let e=t.charCodeAt(a);e<128?r[n++]=e:(e<2048?r[n++]=e>>6\|192:(55296==(64512&e)&&a+1<t.length&&56320==(64512&t.charCodeAt(a+1))?(e=65536+((1023&e)<<10)+(1023&t.charCodeAt(++a)),r[n++]=e>>18\|240,r[n++]=e>>12&63\|128):r[n++]=e>>12\|224,r[n++]=e>>6&63\|128),r[n++]=63&e\|128)}return r},n={byteToCharMap_:null,charToByteMap_:null,byteToCharMapWebSafe_:null,charToByteMapWebSafe_:null,ENCODED_VALS_BASE:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",get ENCODED_VALS(){return this.ENCODED_VALS_BASE+"+/="},get ENCODED_VALS_WEBSAFE(){return this.ENCODED_VALS_BASE+"-_."},HAS_NATIVE_SUPPORT:"function"==typeof atob,encodeByteArray(r,e){if(!Array.isArray(r))throw Error("encodeByteArray takes an

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3253
Entropy (8bit):	4.735669505673854
Encrypted:	false
SSDEEP:	96:Kvfa3NabbzFw/D/ita8ZNI0Ximd/UA6uM:CadiSwjXiaU/uM
MD5:	F80071B260FE4D3032349D75F41379EB
SHA1:	199183BB7A2292FC34F44DFF59D80390F22DA54B
SHA-256:	F50BAEFF0E7833F13601A8BC8298FB7BA9DB418B5DD75FAE8751FF184091DFDD
SHA-512:	38DB91E752E7A5D2F5C95BE162B825357EE5F84D811F9E6415AFF2F9A31B040F5A573B255790FC06F13EEB19509345838F5CDE19723BB45376FD86664C6EE0B8
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%2010_36x36.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#F1A208;}...st1{fill:#0D67AA;}...st2{fill:#24448B;}...st3{fill:#3FEA73;}...st4{fill:#D5C67A;}...st5{fill:#2B2B2B;}.</style>.<g>..<path class="st0" d="M1.365,14.49c0.114-0.54,0.645-0.886,1.185-0.772c0.54,0.114,0.886,0.645,0.772,1.185...c-1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364...C3.132,29.043-0.151,21.687,1.365,14.49z"/>..<path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66...c6.916,2.135,14.445-1.007,17.768-7.53c0.251-0.492,0.853-0.688,1.346-0.437s0.688,0.853,0.437,1.346...C29.378,33.109,20.845,36.67,13.004,

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 362 x 361, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	42970
Entropy (8bit):	7.92395563176268
Encrypted:	false
SSDEEP:	768:IdPD9llD9bEURVQNMoK9VqO0uHtVMndmo2TbVA3Sj2Zv7qnZmvMGLW:IlJ1bjVgfY/ydmZXVAW257qnkkGLW
MD5:	CED44FBE038B9CFFC00272A6EA8B9E95
SHA1:	F68B5796B6129DFCCA2F45F5614B880E8ED7F50E
SHA-256:	BE600483660E3DEEF8DBB01AD71F503F94DF774C627E2DE84179D77F2EBA6647
SHA-512:	01D16A676DFC0B12DE25060F4F6141F0D6DE61973226709095925913300F2908E1E061D664B8C6C58C02F736BA867801CB7369685D563E306F2032DA0DBE5299
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/wealth/Artboard%201%20copy%204-modified-modified.png
Preview:	.PNG........IHDR...j...i......LbM....sRGB.........IDATx..kr. .F..=.K...,.T..~.<..f.da;.0rN{.".8G...yx......a.?.b2.F&....+.3........!.m....r...p.s......u'".5....T5E.I5......G....F..{.....u:....2..0....ji?..F<r+.\3Po. .;......7.<....r.>].W-.._..$`.e....o_.\.....vl..........!f.Q..jKh..O...Q.y.....i'..[.bnA..f.&.1.o...........@E..;U}....q......~.q.......,.]...)j..5}......v..g.#..Dl..........*j.B.1..w>....}...8....a.(.?.BD~+....6 .r.YJ...\|#......;z...:.....K9G.?/.w."+)...sG......(.k..&g..z\|..1^-..p%....{..y...IQ.J.F.`r.@.S..k.....9Qzm....M..0$.fE...........M.S.nd.U\$..'j.C..K........[...~.. ..;..-....z....^q..1../..`.5..^.L3..Z..RC..V..j...t....^t..nUkD.jQ..\|\|...r>G.W...5..5....S.O.A.......Q................"Od.z.....C)j....._..1^)h.{.\....w..m.:.>.oL...t....:....#.\|...v.."M...8.`....]@.E!..t...5..N........5..:J....e..+8.:...j....=@.EE..u..mA>.=,.+..?..4i.0.rWPC..dM..~x........\PC.PC4s}Xw.u_..k=3YP+KY.},hc.g^3.P...a...!.K$.V.....-..

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	44392
Entropy (8bit):	7.97676572186442
Encrypted:	false
SSDEEP:	768:o0NX4VgQIEPzHp6mS4k9bVxvgOmxVROPIkAQMDBixN+AaTGcQkNOyqN3:pQgQDJc4WPoOmAPItQSy+hTvbgyqV
MD5:	69E7C1CA94FB231833EBAFCB26186EB8
SHA1:	3836C3F7C4B8279DED2010E6FB743CFD41F3B8E8
SHA-256:	3A6846998F736F5B05472FE569B0525B2D9FF662B2A0F78009FBCDF2FA255D10
SHA-512:	9C6B04BA0D2B7364252A8024F1B88DE40BF8D260DDDD387BDFF7FCB34A24FA447B0243E254E0887DFF2CC323F84566527036CDB103DD7A90BEFF37454E2B04C6
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/4f/3c/4f3c9aad757c2739ab58ce4608002157/4f3c9aad757c2739ab58ce4608002157.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".................................................................................L.+....J,8...>`#I..+.=.h.T....J;.....`...Q...............x...Wf.CX..[T..-.V.Kp..l.Jy.Mz%.V.w5..=^..^....f..Q.. .@i.4..........X...BCzT..Ep.7e.......Y..eD.`...V..W......7c.oH.t...`a`..X.P.......]...t%.^b.....z.$.."\\|..Y4e..y.-.ib...%TV;.1iK.W.d...IRQb@.Q........\..X:.>.yu.]..@.A.Bi.r\.\|...N'..F&0}X.R.....&.....:..................@`......uo4^.r............k..r..j..$....g.};..j..6s.5rE!.(.e......'...... ........Kz#.dh{m...d......e.+.r.b..U.v.^.]...\|.}r{s....F<.<.KW($..W......(.+.S.aQ.j`..}a~.....{3..r-.].<.;G...b..W[o>YT..]...7..i.g.G]..mU..ajP.......}..sz^..=0..%.L.^.H]..f.....t....C.s....v..nR...V..QtG...KFt.KU..jV6[.a....$..k..g

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/oracle?uid=9%2Bou199999e0s0%2BZ&BK_SWAP_DEST=5957
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://static.agkn.com/spacer.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	995
Entropy (8bit):	5.206333961533778
Encrypted:	false
SSDEEP:	12:TMHd64lWq/hFQF/hW5qH/4XQv/h+9JvRdTRrnv2csLO/D9bQaj43d79Bcj43hld8:2d64lGF1fcyk3TRrv2lVajsd9Bcjshl+
MD5:	5D6E0EAB88B3DEF1A2615330A1B41A9D
SHA1:	0E9F2620FBCC3C5FB3B2AF559C3E492101C751C0
SHA-256:	2C93E45441D68372E6A76C9CDD54F9D26C3E1CABB2817D9B82F7DF7C4E8982C0
SHA-512:	D8816BE8CD32B528FE29AD88A58CBED63E55CA341C74B9D83EF04B433E7AD06F7712D6AC7E6CA1B38D12750BFE7274A06D24BE222E3956C40164075E179B1C3A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_1307" data-name="Group 1307" transform="translate(-203 -290)">. <g id="Group_1270" data-name="Group 1270" transform="translate(-2 137)">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(205 153)" fill="#f2faf6"/>. <g id="Group_1065" data-name="Group 1065" transform="translate(-178.879 72.838) rotate(-20)">. <path id="Path_807" data-name="Path 807" d="M20.737,18.309H6.617v1.637A1.793,1.793,0,0,0,8.41,21.739H20.824a1.793,1.793,0,0,0,1.793-1.793V12.9A1.793,1.793,0,0,0,20.824,11.1H8.41A1.793,1.793,0,0,0,6.617,12.9v2.05" transform="translate(329.86 213.135)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_209" data-name="Line 209" x1="1.215" transform="translate(348.737 227.102)" fill="none" stroke="#27d17f" stroke-linecap="round" stroke-width="1"/>. </g>. </g>. </g>.</svg>.

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (396)
Category:	downloaded
Size (bytes):	560
Entropy (8bit):	4.855010958840611
Encrypted:	false
SSDEEP:	12:XHZ4MBWKILxSvFguF9OKCsawzN7sRVW3J3gaULAOhXao7:XHmMBHILEBaU0I3J3gfLAOhXao7
MD5:	9615C833564A3C0AC121899045B74BAA
SHA1:	3D6D14BC29E1B09C25650FF954B94C9081BF30B7
SHA-256:	9DEB1A7DA12E56B1DE9D32034DFCC593A2BAEF75C1CED68BA3C6263598A597F9
SHA-512:	5EC53E045FD486FC65A206C48BC10B445505BE4FF5DBAB634C8588DB07B2054D818C50CFAC9DC81E723EB258E2822AE019BA621E1CF404D46BA9A5C1DCD53133
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/asset-icons/asset-xrp.svg
Preview:	Generated by IcoMoon.io -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">.<title>asset-xrp</title>.<path fill="#222" d="M16 0c8.837 0 16 7.163 16 16s-7.163 16-16 16c-8.836 0-16-7.163-16-16s7.163-16 16-16zM23.003 7.619l-4.529 4.479c-1.366 1.352-3.582 1.352-4.949 0l-4.528-4.479h-2.865l5.96 5.896c2.158 2.134 5.656 2.134 7.814 0l5.961-5.895h-2.865zM8.96 24.013l4.565-4.515c1.367-1.352 3.582-1.352 4.949 0l4.565 4.515h2.865l-5.997-5.932c-2.158-2.134-5.656-2.134-7.814 0l-5.998 5.932h2.865z"></path>.</svg>.

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	70331
Entropy (8bit):	7.98535868319163
Encrypted:	false
SSDEEP:	768:Q3cOGQcYmngv/Sva25U9VJ1OjO9jfT7GIdbo/8Udk4iHNEnjP0TJpf677BzTVApU:yGQcYD3j9GkQ8UdsAtGAMI30+X
MD5:	CA000388979B0232900D1E2D7D356393
SHA1:	FFCDCDBC0B138CF8FAD2775AD7A795D7C397066D
SHA-256:	684E8D9D05D24F048D03200E09974C93F86896F3D8DE702E101EA857E8B06820
SHA-512:	E566858A467C5B1393252675CC1FBB82B76BC43211E8B3F44319C37420CD79F764F18847F2573FCD9A84C70AE74EDDF492946FD6D05480486BCFED4664D02A0E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................v...1..B.jw!...?>..N.$.N....O../.M......[..=C......<y.c.....=..._..>v......i.'O..8k.....B'.<..\|.-.Z.3.....y.7Fp[......0.."L.(>....0y........sW.}....c.........6...[.)s..q.\|......\...tZWmi.Xp..T.WkqX..^MQQ..~.Q;P.Zu7B.......v.[.>..m?]}...o...x.cW.?...u.`i.7..>.!A!u.m...I.e......#..t.]w/.e#....N....T.U.ui(s=.8.l...j....<..r....Y.SA....O....<e..k.@~K....C.h..Q.....D.\.b..D...D.M..*.X.r.k./.&..C.v ..b4R..B.d..lU....8Rr...t....K5k.+\.sV...o.M#..~.v.F.$.....9....B.f;J.o#.z..:..gj$4..4..U..Gx..P..(...X%..6)b.......W.z...N_t_..e..w\_..y....sQ.NDU..{....-O.-i.j.\..3...i..b.LI\|........s.w.f..r.WWw... ..U..[...8........../v...\|>P..^.....C"N.....y....v.z

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1617
Entropy (8bit):	4.031327390782257
Encrypted:	false
SSDEEP:	48:TkNDi7BFteACCxLpxj0rTZc5LTYU8KNU4SncpjR:gyPQ1wj0hcVTV8KykR
MD5:	73B34DC61E24D681D8B8D3B83C2E9CA4
SHA1:	9ACA26A50EB4A84E065FEACEC67F5D40EB134CF0
SHA-256:	89CADC46509AF141EA9E83E6837EAE1FAE609E8D4628B1FDB9B6214B94FC9D06
SHA-512:	D120DD915ED23A54F807C687681876CABE3BE7AF35039C2B859E1C8B347FCA190C62E4F256F27BCFC375BC170CA645E5FDD2E90642253881D26201339633CC99
Malicious:	false
Reputation:	low
Preview:	<svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M20.3338 18.6776C21.4078 18.798 22.4317 19.0992 24.138 20.0728L29.1569 22.9335C29.6788 23.2246 29.99 23.7767 29.99 24.3689C29.99 25.6738 28.5546 26.4668 27.4504 25.7742L23.0138 22.9938L25.744 27.3702C26.4567 28.5245 25.6337 30.0101 24.2785 30.0101C23.6562 30.0101 23.0841 29.6788 22.7729 29.1268L19.9624 24.1481C19.0389 22.5119 18.8783 21.4479 18.8181 20.3539L18.0652 19.8821L17.3325 20.3338C17.2121 21.4078 16.9109 22.4317 15.9373 24.1381L13.0765 29.1569C12.7854 29.6788 12.2334 29.99 11.6411 29.99C10.3363 29.99 9.54325 28.5546 10.2358 27.4505L13.0163 23.0139L8.63991 25.7441C7.48555 26.4567 6 25.6337 6 24.2786C6 23.6562 6.33125 23.0841 6.88332 22.773L11.862 19.9624C13.4981 19.0389 14.5621 18.8683 15.6562 18.8181L16.128 18.0653L15.6663 17.3325C14.5922 17.212 13.5684 16.9109 11.862 15.9373L6.84316 13.0766C6.32121 12.7855 6.01004 12.2335 6.01004 11.6412C6.01004 10.3363 7.44539 9.5433 8.549

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2899)
Category:	downloaded
Size (bytes):	220362
Entropy (8bit):	5.530859943835806
Encrypted:	false
SSDEEP:	6144:dQJzxw5hwTpwyKfrb5Hcimaaz2mICFsg6FKx:twTSyKfBHpHaCmICFssx
MD5:	70D6BA0CBB625D7C7FEE24D1CCC7E766
SHA1:	D6B37B5319C2BE6EE767E76273A527B61CEF630C
SHA-256:	172C35E58BB109A7836DA8BE45363CE04D132B11EE0FE1FC85F1445CEB8EBC8F
SHA-512:	583F3FB5E682737423388CAB5C0BA2CC1ABC3B61B37AC8F716884B92CC40E16B062BC3DCEC42A09684526F2336590D9D77DE37BD33DDC579F63656248DABB68B
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/client
Preview:	"use strict";this.default_gsi=this.default_gsi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x6012400, 0x0, ]);.var aa,ba,ca,da,t,ea,fa,ha,ja;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};da=ca(this);t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x372, components 3
Category:	downloaded
Size (bytes):	64208
Entropy (8bit):	7.982391064220711
Encrypted:	false
SSDEEP:	1536:EOjg65LtHpfDVxd89WXqQ6IsqO38GCwUUboA1eBiNuuRN+HqZ:tFJpfDVv89W6jqY/P1eBmuumH0
MD5:	82FD8E436D49570088BCDB98A6EA99FF
SHA1:	9A0B46FE2F6A761C7B1D3362E5A12E0FD03E9AF3
SHA-256:	10ECDFAF9AE7FBB8CFCDFB288C444F7C89F325F4633A730A800D1A0B503B5820
SHA-512:	606A8FF00BEAC4811A7D900C16B566D0556FB8A9A85F3A0F3C67849630C85963155403F5760A7D56432CF8F46038211CF16A04D88168F3328360036F03E89202
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/f0/6b/f06bf9152cca69ecc543586569563320/f06bf9152cca69ecc543586569563320.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................t...."......................................................................................w........x'.L.> T....=..&y....}....k..w.f...g...fwq..%.OcQw.c._...\|..O.s...'...p.M.:........":..1;,......{..3R~...{..7.%..s.ffwr-.g..v.N...$."...Hv....}...`1{.B.a..%....w..Ky..A.E.....!=...2U..(....T.~{..s......X}z=NPnY.....Q.v....d..\|1...X..x...oM.>.,.).B...,.3.<...E.j.e..z(.<.t..yo..8.....\|..^..z..g........i.a4..,..3h.. fi.._Y)..i.ZI.....m..=..y...=..cs.`Za.....v.u...f-..fw{.wPED.m;9.6.T%..,.< ...+.).....~\|..a.b...lO......Z.O.zc.3.;.<g...$h..&.....(.d....JP......{.u:S}.....X.Y&.D...pn.@...u_v........r..g.q.. X........E....%#...O...$...W$.#...&...N..7.yNC.~>.\|......q..[..@.!._Z....y.{..W u$.. U^.-s....j..g.\|......m..X.K...i..T.=%.P..T.;.d.2..9.

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	60451
Entropy (8bit):	7.9874354327495105
Encrypted:	false
SSDEEP:	1536:/zy6U7RkUNoY7vYQkAzQuDyHeK/vg6cI+GQN:rAWUSYbYQVzzy+Eg6GvN
MD5:	2BD4E3B9AF9DB046B014ACC59BAE26A3
SHA1:	ED5A731F766D5F6F274330578B8E3ADD28E30A41
SHA-256:	64EBB564D61364617657D3B040AC0D5F99FC5D7BA0E33DE461CB6C3BA156F4FE
SHA-512:	3182052992EE53BD51FF2AB40BDCC4247B57EC50CC69B805CABF3FA019F8DEB65C177B72DABBF97EC3187638D29B52333A3354A313C9A4CFFFA4AC2AA53990C8
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/96/c8/96c8fc9b3ebbc4bc43400a233c4a6c21/96c8fc9b3ebbc4bc43400a233c4a6c21.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".............................................................................................g.....&Yq.S..S`.."....9;..co$..Y..h.;......l.\Mh..7.p...D.....d.'..S.s.>...d.4.V+.K)..r..b.]...:....;.0...,&S.5!:..H%.h......{....e.F.3\.[}.BT0.Uv.....'.#,..K....NA9\g.\|...............I..l."+Q..D...R_'.......sF...R}.vOYG.4-....4aOlIx.&..[....W..K...:..............4....$..Cy$..B_BF.#U....3...,5.........O..o..../.x.......;zQ..0~....Sa=0.H......[...^.....F...5!um.=....P/........h.-..:8.L...t........Q......{.q.a.I.r....&...'I..v\...l...9G...}.8v.,m....JA...tj..\Y2."...oT.!.f\tbyT..x.(..r.G3<.I.RG..RC.....G]...-E..`.gf&.d.`...%.].lx.6.x+I.:0......z.&...k.D....D.H%.q....-.m&!.......jK..wf~l.]C.s..$wA.ie..p..b...G.~y.Jq.NJ5}%..t1..

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/ttd?uid=6f67744e-1091-4048-adba-e024cc18f2d2&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1836
Entropy (8bit):	4.5585875640899784
Encrypted:	false
SSDEEP:	24:cAN8sCabd7KRMWPbVTumvRWpyanIv+4fa/qlyk+YRs1rBln92udFzAx:cjsCIKpBNRgnfarZRGrL928Fsx
MD5:	AADBD25A6A49BAF813C7BEF6077428F1
SHA1:	7E004E2DAF970918A467980F12944B36AFE5201B
SHA-256:	B2E8086353106DC8C37EAE2320137D757821C9537FCFD5C5ED7C14A9812257BA
SHA-512:	B7CC21ADAAA45A59856B822D8F9DA94F37CF5F0286995CB92B21028337985D1AF994898C1194D57B8849C6BF3608220B91FFA9287D62D13F29232BA66582F7C7
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/js/WebCommon/Common/BrowserFeatureDetection.js
Preview:	.(function () {.. "use strict";.... function isES6Supported() {.. if (typeof Symbol == "undefined"){.. return false;.. }.. //check ES 6.. eval("class Foo {}");.. eval("var bar = (x) => x+1");.. return true;.. }.. .. function isNoModuleSupported(){.. return ('noModule' in HTMLScriptElement.prototype);.. }.. .. function isAsyncAwaitSupported(){.. eval("async () => {}");.. return true;.. }.. .. function isNotEdgeHtml() { // https://caniuse.com/mdn-html_elements_ol_reversed.. return navigator.appVersion.indexOf('Edg') > -1 ? ('reversed' in document.createElement('ol')) : true;.. }.. .. function isSpreadInObjectLiteralsSupported() {.. eval('({...{}})');.. return true;.. }.... function isDynamicImportSupported() {.. try {.. new Function('import("")');.. return true;.... } catch (error) {.. return false

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (595), with no line terminators
Category:	downloaded
Size (bytes):	595
Entropy (8bit):	4.841446306150553
Encrypted:	false
SSDEEP:	12:qcLFbbtvZemf3SWvjd5WMtiVOVQwBsZkOvPWu+KSDCUYh73jGbfn:qcBbtvVf35vsO+08uKLh73cn
MD5:	AA9A89C515666311FB7E3FF5378EA759
SHA1:	CAC246C154FFAD81743439D6D27341D9D2067578
SHA-256:	EE08C012FB5F8DE8293CD6FE2B407ED26699FA985A169622CB7E93D2F89F7605
SHA-512:	A94519379C4D1775D1EB3B6AC3B141A784B47A6EE558EFB69031F3A62DE3720D3031A367E68E3532D61DFEE1591A0F942B1E51697BDA9C5A7A6C3CBD8C8F2340
Malicious:	false
Reputation:	low
URL:	https://buttons-config.sharethis.com/js/6433be364f61b7001240a339.js
Preview:	window.__sharethis__.init({"ts":1681140672304,"analytics":{"enabled":true,"ts":1681140672154,"updated_at":"2023-04-10T15:31:12.154Z"},"inline-share-buttons":{"alignment":"center","color":"social","enabled":true,"font_size":11,"has_spacing":true,"is_ssb":false,"labels":"counts","language":"en","min_count":10,"networks":["facebook","twitter","whatsapp","messenger","reddit","telegram"],"num_networks":6,"num_ssb_networks":6,"padding":8,"radius":0,"show_total":true,"size":32,"size_label":"small","spacing":8,"use_native_counts":true,"ts":1681113112238,"updated_at":"2023-04-10T07:51:52.238Z"}});

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (766)
Category:	dropped
Size (bytes):	931
Entropy (8bit):	4.551546673397864
Encrypted:	false
SSDEEP:	24:XHmMBsNWlj/ecMPDQBjkKkbrTyXZU5Tg7nE:T1/FM0hkuXOsnE
MD5:	5D3AED92FAA60B62D172B36205EE2958
SHA1:	2BB56C200032C588FE1E05D5D9861AD91A400E20
SHA-256:	0E32DFF06BCF175A178664BDC8F8B73B040F6AF0028CA2E00D0EB80076F8E3D0
SHA-512:	4B52E95F406A164A52F16FF4A22084B66EA4356B5C3AFE0363283C94153D7430738D41EC7C31572A80A9CACD2368C2D34891C80AB6928DDAD7151689587DF6EE
Malicious:	false
Reputation:	low
Preview:	Generated by IcoMoon.io -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">.<title>asset-best</title>.<path fill="#e83355" d="M16 32c-8.837 0-16-7.163-16-16s7.163-16 16-16 16 7.163 16 16-7.163 16-16 16zM17.879 24.168c3.587 0 5.996-2.188 5.983-5.42 0-1.184-0.374-2.271-1.039-3.051l0.014-0.014c0.665-0.78 1.038-1.867 1.038-3.037 0-3.246-2.409-5.434-5.996-5.434h-5.041l-0.997 5.699h-3.642l-0.346 1.937h3.642l-0.291 1.686h-3.642l-0.346 1.937h3.642l-0.998 5.685 8.019 0.014zM12.16 22.203l0.665-3.734h2.16c3.684 0 5.539-0.153 6.744-0.892 0.139 0.334 0.208 0.738 0.208 1.156 0 2.146-1.551 3.483-4.057 3.483l-5.72-0.014zM13.157 16.518l0.305-1.672h1.523c4.085 0 5.165 0.251 6.024 0.836-0.651 0.641-2.063 0.836-6.024 0.836h-1.828zM13.794 12.895l0.665-3.762h3.421c2.534 0 4.057 1.296 4.057 3.483 0 0.446-0.069 0.864-0.221 1.212-1.288-0.725-2.908-0.933-6.73-0.933h-1.191z"></path>.</svg>.

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	370
Entropy (8bit):	4.982761669887939
Encrypted:	false
SSDEEP:	6:tnrz4umc4sldMX3oBoEEqqdXU3eNKScQ9tu5ItqqILSMVzUTbL/lKScQ9te:trz4uC3oBoEBRONKSHbYhXLSy4vLNKSq
MD5:	B2DAC216F60DC75B697E87483829E1B2
SHA1:	FEB4CA66C8187C2AC560B60A25AC5E90F41CA06D
SHA-256:	D90CB7D32EE76A92649CA33D07922515D390F37513C128E75AA55AA1E8FAA79E
SHA-512:	FFD15C8A540EF2975513CB55A0514189CED9FAE644A024D7E0C001FC5F7F28BEA158FD713961D3C8EB32F1487C943E41A0A4F1F871FE05DA4D8DC31C6BF7F1C5
Malicious:	false
Reputation:	low
URL:	https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/vtho.svg
Preview:	<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#2A5284"/><path d="M22.806 5.69h3.4l-6.391 8.532h5.736L11.849 30.31l4.432-11.367h-5.006L16.323 5.69h6.483Z" fill="#fff" fill-opacity=".704"/><path d="M22.806 5.69h.205l-5.746 9.802h5.254L11.85 30.31l4.432-11.366h-5.006L16.323 5.69h6.483Z" fill="#fff"/></svg>

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	3.7712411708182247
Encrypted:	false
SSDEEP:	3:YWR4b5LkLLyAUKtfJacpn:YWyb5L1Dof9p
MD5:	864E7D68C370E4A879D3EB16E3E13287
SHA1:	0C5CFBDCA1D75586473370DC5514B1907F8E4EA8
SHA-256:	90099DEDF118253BFF1798E5F8C3BAB386D90C673FB759AEB4D9E383044F3904
SHA-512:	7979A66B33395EA6BBD5CF815031A67A01CB736A53375A8B2D51BADAF742A4A64136A60EFE4CB4BA06EE938337B83E8749418075C65249DFF9ABFDE6069FFE16
Malicious:	false
Reputation:	low
Preview:	{"status":true,"banners":{"top":"","middle":"","bottom":""}}

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	368
Entropy (8bit):	4.88314603220138
Encrypted:	false
SSDEEP:	6:tnrLnl/GKumc4sl7anZnGXIvXUuULhpL/AFVWtykBE9jLoOYuULcQwKHHULVcQwK:trLnl/GKucZnG4vywVWtykBs7zQw002G
MD5:	2DEB3D5121D475D195577A70B0A91A0C
SHA1:	A9464C6B41F55697D7AAD35C2555A95C476D5FD2
SHA-256:	76FFDC5337CD5A509F15D70767B85A793AEAD82975D0D86912E1607E963C9AED
SHA-512:	38671A7F4465B093D5E98675671B132B41F623B552EDEC29477A69F2B552CE6DC6DCA81C85FAEA57E0657657E2C0D67E46FCE6F158A57E8B320E806C78CED448
Malicious:	false
Reputation:	low
URL:	https://platform-cdn.sharethis.com/img/twitter.svg
Preview:	<svg width="25" height="25" viewBox="0 0 25 25" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="25" height="25" />.<path d="M14.4821 11.6218L21.0389 4H19.4852L13.7919 10.6179L9.24467 4H4L10.8763 14.0074L4 22H5.55385L11.5661 15.0113L16.3683 22H21.613L14.4821 11.6218ZM6.11371 5.16972H8.50031L19.4859 20.8835H17.0993L6.11371 5.16972Z" fill="white"/>.</svg>.

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.8566072359389585
Encrypted:	false
SSDEEP:	3:YCMxvUESu8RfwdHeVmpUxXMcYU:YCM5dSzod+IKcXU
MD5:	B10AFD5BAFF1A33EC17215A1014494C4
SHA1:	F89A94367C1529C62EB99939066F47885FECC957
SHA-256:	58695F7894DCA0BB6503918A6A93AA7200939A73CE3FC5B166D1B7CE1F70C8A8
SHA-512:	01F6144F5799C5E200D7FE01043F38389BC20E00D1F116DFFEBBA21B980BCD00A17113E3018C8ECA26C8CA9F21F7CA0476F2D7640CB4A2EC0914271C1D2F786B
Malicious:	false
Reputation:	low
URL:	https://my.rtmark.net/gid.js?userId=k3oa752910bk686846683x2y8sbun072
Preview:	{"gid":"k3oa752910bk686846683x2y8sbun072","skipSubscribe":false}.

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x376, components 3
Category:	dropped
Size (bytes):	61147
Entropy (8bit):	7.980943767880461
Encrypted:	false
SSDEEP:	1536:YkiC39Dddj1nqIZhtMe06rlwxF60tecxJR++3yVNgXyTNu3rq:YW39Jdj1t66ZwxF9ecnqNgXyTNKrq
MD5:	10B47404C9CF907863CD621013EAFED6
SHA1:	2E89906B08A881E1DD2AB0A3AF1C9347B3362115
SHA-256:	EECC0A0C84704D454DC285BCCB997A9F7692DC9FACE4725F44545073B0A27200
SHA-512:	B7A35B1CAF930307557931A60D6174898A03F0E9D7F854D8D5F09CD8A4F81A8207D489F92C9FBF6BB5AA84EE10D80F45F7425E4ED53CE9D2E9E387FACB2898B5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................x...."..................................................................................y.Q..N.lP.p....Hx.vlp..fq.Mk..#T.......z..........ARad.I@.jK...D`..].."q...:.+....!0.....A.(&.M..m..d..4..Aup..Y.5{..+........u/...-..W....H....]S....{.9.8...(oV.......g%.....\..h..?.h.4.By....~d.~...2..;.-.3..g.&..wK.&Vw...>.=..y...G:....Ol..%+....$\.0.R..B&u......J.&.,Fm>...t.?1;..C\|..y.`...g...p..g..0y...y..'........G...E+.-.m.......bq)*.8.....D.h..9..f..6....j...?[.4.f...8........z.?M'.;..^.........4A.......a..j,.+.q.....GX9C.......s......s.'......r.d...?.?....?.^...w...]NGz\|.q...3R.\"..".DH...A........._L.F..\|D....L.b."...R..k....G...f.2.....?"..y...P%-.....(..\...H......RP........l.dch.R.~ew.4....#PA.L-P....H.f..".x...=r$.18...$....R.G!..r~

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	88588
Entropy (8bit):	7.986002446443902
Encrypted:	false
SSDEEP:	1536:J6KoI9mPta+0oxudZuhldQRU5iKo0r1ulj01TC5x4hNZNal1pQ8lHl8U6h9b1:J6NOmPf0oAdohlR5ToSglj01LZNaljQl
MD5:	C1DA20EAE266204D51877EA62E1AEBB9
SHA1:	849E58183F301AC30E5E3AF6077846CA26F44B43
SHA-256:	F06C760C3370CAED0602DDF176F2EF740AFBD95CE2804042453207974A47E85B
SHA-512:	F8B9FB830082D8449B7AC935EFEDAB04B7F0E69F771783196367874A815054A6044367B5344079C31DC58D2BB2DBE28DE092CE29DCF1FF9B73D7207674D743B7
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/52/7b/527bdc2908423dffab686f4838487577/527bdc2908423dffab686f4838487577.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".......................................................................................?]O.. N..b.G....]...7u0....H....h../..h.E ...2..R8.(F.....F..5.Zd.6+...w.Y.......!FH>..`..9........X.S....O...j.R.2..]..IS.j+.9e.......0..C8Q......b...R.p_...Lu..[......s....-$.D.....Fh,Y...._gd0.....C...n.}.su.......k...'..F%.`..I.....v1.....}E. ..e.0....uj.K..&;r.&l../,y\.5..]..9n..]....2..U.IC4.$....v.....r....]~.j.c.....M..+..Rxj5..t........._\|)6..$...^-.I..r..ZS.B.@.q.......J.....&.....Jn...y,=..[tm..3..ahh}...p....h.....V..\....H...DB.=I\.6(xYi.......c.}.~.V.E3..w...B.s.D..............'.....G.Y.Q.`m..Z..lp,..(...2...2M<..e0f.......5.\|...^.(...5...S\|..,.I..$yt['..K..B..H_e!0(wc...3h...l...c.4..Q.~..O...+......f!..R{?..\..E..

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1204
Entropy (8bit):	5.145377075855716
Encrypted:	false
SSDEEP:	24:2d64lk3NLdlg+fMyN4Hj8HE4jscjsll9kjslle:c3MNLjiEEW
MD5:	CBD65EB6C7F2E56BE4230DD47E55F6AF
SHA1:	31FFE6C3A0662476816DF666B45B90B438E8D04A
SHA-256:	610D42C4FC43A393F0E72C39B8FB3255957C5347D2650828D79C4316EFF65DD2
SHA-512:	B5BAF508F8F706C72FC2E69C1044EED539A997925B20141ADC4A019B764576DF8996B506ED71A7E6A7E79E0B4A2BA7479FE91E71C88DA29A513BFF061CC84B70
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_1312" data-name="Group 1312" transform="translate(-611 -341)">. <g id="Group_1271" data-name="Group 1271" transform="translate(-1 188)">. <g id="Group_1080" data-name="Group 1080">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(612 153)" fill="#f2faf6"/>. <g id="Group_1075" data-name="Group 1075" transform="translate(617.767 156.732)">. <path id="Path_816" data-name="Path 816" d="M16.309,8.994a11.386,11.386,0,0,0-4.076-.726c-4.418,0-8,2.331-8,5.207a4.515,4.515,0,0,0,2.308,3.656L5.23,20.173l3.6-1.992a11.625,11.625,0,0,0,3.4.5c4.418,0,8-2.331,8-5.207a3.8,3.8,0,0,0-.852-2.341" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_210" data-name="Line 210" x2="5" transform="translate(9.733 11.768)" fill="none" stroke="#27d17f" stroke-linejoin="round" stroke-width="1"/>.

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x376, components 3
Category:	downloaded
Size (bytes):	61147
Entropy (8bit):	7.980943767880461
Encrypted:	false
SSDEEP:	1536:YkiC39Dddj1nqIZhtMe06rlwxF60tecxJR++3yVNgXyTNu3rq:YW39Jdj1t66ZwxF9ecnqNgXyTNKrq
MD5:	10B47404C9CF907863CD621013EAFED6
SHA1:	2E89906B08A881E1DD2AB0A3AF1C9347B3362115
SHA-256:	EECC0A0C84704D454DC285BCCB997A9F7692DC9FACE4725F44545073B0A27200
SHA-512:	B7A35B1CAF930307557931A60D6174898A03F0E9D7F854D8D5F09CD8A4F81A8207D489F92C9FBF6BB5AA84EE10D80F45F7425E4ED53CE9D2E9E387FACB2898B5
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/4a/6a/4a6a22f7a0595822396fb0b553e99be9/4a6a22f7a0595822396fb0b553e99be9.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................x...."..................................................................................y.Q..N.lP.p....Hx.vlp..fq.Mk..#T.......z..........ARad.I@.jK...D`..].."q...:.+....!0.....A.(&.M..m..d..4..Aup..Y.5{..+........u/...-..W....H....]S....{.9.8...(oV.......g%.....\..h..?.h.4.By....~d.~...2..;.-.3..g.&..wK.&Vw...>.=..y...G:....Ol..%+....$\.0.R..B&u......J.&.,Fm>...t.?1;..C\|..y.`...g...p..g..0y...y..'........G...E+.-.m.......bq)*.8.....D.h..9..f..6....j...?[.4.f...8........z.?M'.;..^.........4A.......a..j,.+.q.....GX9C.......s......s.'......r.d...?.?....?.^...w...]NGz\|.q...3R.\"..".DH...A........._L.F..\|D....L.b."...R..k....G...f.2.....?"..y...P%-.....(..\...H......RP........l.dch.R.~ew.4....#PA.L-P....H.f..".x...=r$.18...$....R.G!..r~

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	858
Entropy (8bit):	5.160514036190716
Encrypted:	false
SSDEEP:	12:TMHdR9NCGi/nzVlT/KYf3n3ABPHQboGPQWFrYmePT/js91JAocNmnH1b/pCuopaM:2dReGAbTLf36wbDQsYLT/gDjnH1O
MD5:	E3F5E90FA57764CD951DB1B1BC688EDD
SHA1:	B620A8A9CBBDF976AE6A605EBAC91107E7ADC178
SHA-256:	03E42B95E9049816D901EABBE2A2247DEDA61A85972E3A50E3C8274E6C5FE39B
SHA-512:	394A233B18E93D298807E54B137355F9C6F68A89287AD75CB0D331592DBC9B8C529FA0ECD370FF6F30C2EFA34AF77EEEE88B62A2A7005EBF8FA9BF12F703A30F
Malicious:	false
Reputation:	low
URL:	https://platform-cdn.sharethis.com/img/telegram.svg
Preview:	<?xml version="1.0" encoding="utf-8" ?>. Generator: Adobe Illustrator 24.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Warstwa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 47 47" style="enable-background:new 0 0 47 47;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<path class="st0" d="M23.5,0.6C10.8,0.6,0.6,10.8,0.6,23.5s10.3,22.9,22.9,22.9s22.9-10.3,22.9-22.9S36.2,0.6,23.5,0.6z M34.9,13.2..l-4.3,21.9c0,0-0.2,1-1.4,1c-0.7,0-1-0.3-1-0.3L22.4,31l-3.9,3.9c0,0-0.2,0.1-0.4,0.1c-0.1,0-0.2,0-0.3,0l1.1-6.8l0,0l11.3-10.4..c0.3-0.2,0.3-0.5,0.1-0.8h0c-0.2-0.3-0.6-0.3-0.8-0.1l-15.1,9l0,0l-5.8-1.6c0,0-1-0.3-1-1.2c0-0.7,1.1-1.1,1.1-1.1L33,12.3..c0,0,0.7-0.3,1.3-0.3c0.3,0,0.7,0.1,0.7,0.6C35,12.9,34.9,13.2,34.9,13.2z"/>.</svg>.

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7031)
Category:	downloaded
Size (bytes):	7057
Entropy (8bit):	5.4352073190088666
Encrypted:	false
SSDEEP:	192:7OK502wDW7y72uB2SgyGErfR3FVK8oKM3HZrlzqAZ67XO:7OK50Uy72uwErJ3FVK8oK4HZrlGAI7XO
MD5:	B5292DF3431CED16B033D8B198079F06
SHA1:	3018DC53E0DCD6F26CEB866732FD76AF7E091025
SHA-256:	EB32A635955E226734775639E6F9B84A8FF45B999BC1688F4B8CC9B77178B760
SHA-512:	FF4698D1847D4B9E676CD804F8BED206C39D19D062A03F0A0B5920033B308619C105F234CD27ABE3CEEBE60353B75AA9539F29028BAA77B13FBB3EAEE9699057
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/lazysizes/5.1.1/lazysizes.min.js
Preview:	/! lazysizes - v5.1.1 /.!function(a,b){var c=b(a,a.document);a.lazySizes=c,"object"==typeof module&&module.exports&&(module.exports=c)}("undefined"!=typeof window?window:{},function(a,b){"use strict";var c,d;if(function(){var b,c={lazyClass:"lazyload",loadedClass:"lazyloaded",loadingClass:"lazyloading",preloadClass:"lazypreload",errorClass:"lazyerror",autosizesClass:"lazyautosizes",srcAttr:"data-src",srcsetAttr:"data-srcset",sizesAttr:"data-sizes",minSize:40,customMedia:{},init:!0,expFactor:1.5,hFac:.8,loadMode:2,loadHidden:!0,ricTimeout:0,throttleDelay:125};d=a.lazySizesConfig\|\|a.lazysizesConfig\|\|{};for(b in c)b in d\|\|(d[b]=c[b])}(),!b\|\|!b.getElementsByClassName)return{init:function(){},cfg:d,noSupport:!0};var e=b.documentElement,f=a.Date,g=a.HTMLPictureElement,h="addEventListener",i="getAttribute",j=a[h],k=a.setTimeout,l=a.requestAnimationFrame\|\|k,m=a.requestIdleCallback,n=/^picture$/i,o=["load","error","lazyincluded","_lazyloaded"],p={},q=Array.prototype.forEach,r=function(a,b){re

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	71668
Entropy (8bit):	7.986822860967624
Encrypted:	false
SSDEEP:	1536:Q/0Sr9odVwL9Prq72fPFGZqh+L13mtikhDt0LaofCK:YBWdWLtjzhS13st0LgK
MD5:	7F91D88DFBDFF9DC2A4EF0DB2E2E1A4C
SHA1:	6296E65989A340E355009A216A04CF4D171A64DA
SHA-256:	FA03789E9C6BC7B96DD03F2B2FBE45258938F7ED6C72228F9621807DFF6D8DAE
SHA-512:	DB0D31B6988692D0B13167C8F2E69287D5746404B9A9BB3478CACE32E897A79B802896C813FB9F12181A2FC7AD2DC655D5F4969D966D340CBC2B65268AFE5393
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/fa/03/fa03e78c21018de5d0e0e40fa7e28de3/fa03e78c21018de5d0e0e40fa7e28de3.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................w_[.#..w.l.....f...."%...3..N...F....w.u[...6Kk..6?d.m...;..U;..<.Y..%.FK...#be..9...BC.nWvt.4..J..n."..^_L^..+...U...G.....L.I.y...(.\|B..k....%c...4.`.....n.\.`.....=.......$sR.n..$.....&..@.N* ..,%..eaQY..b.;=.v.3E0..jCG.K)u..u2.Q..-..=...$vd.1.Q1..W<..k.K.......>-.ZryV-.K.h&.....?ay..D."6Xe.....^.....E.<..%.V.Oz.~.. .L"......(2wH.r.......\|..#.....z.8.{.....#\QZ.e.D.[X....jt.....t..7F\.m.2a.{i..k.'..R...%/...kp...[\|...:)i....5........_.t].......k.^v.L..0.7........w$.L..,jto...t.POb.~y....a..{M_2.>kI.......(W}.Wodo'.wr}.......B.:..w\..^.{U.*..zU.tk.w....Z.\..DI..E3.....H\|{.....u.%..K..Zn<..U....'...M.s$...R.h..G.z._P...c..`+.p.5W...

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	85057
Entropy (8bit):	5.107523092834237
Encrypted:	false
SSDEEP:	1536:/hPq56WJHtVtwXJckTD5tVpEPgKk7gIzSdxaJAs4o:lu6WBQE4Z7gnxrJo
MD5:	B707E7EED1733B3C4DA479B8B8874120
SHA1:	3C6A64A914DF39545F64DF14DECE492CA4B27655
SHA-256:	0A010304888CCDEB4D7AEE848A63900C10FBABE1175CC9ADB9FA095C05FF0E16
SHA-512:	2563ECD3C9E86882D5654B22FFB36CCFBBDDF196E1CD3A7ED6C1F1C56D2B8E4B2A995021BAA973D1506D20ABD53C819802E17AF84DE3C2C9A47A0132466EDB3F
Malicious:	false
Reputation:	low
URL:	https://1movieshd.cc/css/group_11/theme_3/style.min.css?v=0.1
Preview:	@charset "utf-8";@import url(https://fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700&display=swap);html{position:relative}body{background:#fff;font-family:Montserrat,Arial;font-size:14px;line-height:1.2em;font-weight:400;padding:0;margin:0;-webkit-text-size-adjust:none}a{text-decoration:none!important;outline:0;-moz-outline:none;color:#fff}a:hover{color:#f5c518}.btn-sm{font-size:12px}.btn-radius{border-radius:30px}.btn-radius-more{border-radius:10px}.btn-circle{width:40px;height:40px;padding:0;line-height:40px;border-radius:50%;border:none!important}.dot{width:4px;height:4px;border-radius:50%;display:inline-block;margin:3px 10px}.h2-heading{font-size:2em!important;margin-bottom:0}.iframe16x9{width:100%;position:relative;padding-bottom:56.25%}.iframe16x9 iframe{position:absolute;top:0;left:0;right:0;bottom:0;width:100%!important;height:100%!important}#search,#sidebar_menu,.film-poster-ahref i,.film-poster-ahref:after,.film-poster-ahref:before,.film-poster-img,.searc

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1725
Entropy (8bit):	4.930104875678227
Encrypted:	false
SSDEEP:	24:2d64lASoQfhyzvaZataZyBaZTejsFonUpX8+FgLvDEUvC12FSi+ftD:c3jotMataoaN8M8rsGCFi+f1
MD5:	C0ADFA4F733B54E128D62F32C4DDBB48
SHA1:	9AD483FD6D29B30463F1A096AB51982080883CCD
SHA-256:	06AB078FCE7801DACF2F6689C5B6F81D908FFAB80464F12BF5F6566D823558BE
SHA-512:	8CD7E6BAC7E08288CDA7B694305B005F840425020705A8CF1986BF84AA9892A3801003517BD66FDD078FC9D004562465D97B110ABA94400658F2D7D04563212D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_1310" data-name="Group 1310" transform="translate(-611 -200)">. <g id="Group_1082" data-name="Group 1082" transform="translate(406 -97)">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(205 297)" fill="#f2faf6"/>. <g id="Group_1087" data-name="Group 1087" transform="translate(374.595 25.304)">. <path id="Path_844" data-name="Path 844" d="M-152.3,282.973a7.659,7.659,0,0,1,7.528,2.035,7.659,7.659,0,0,1-.136,10.83,7.659,7.659,0,0,1-10.83-.136,7.661,7.661,0,0,1-1.083-9.293l-2.775.966" fill="none" stroke="#27d17f" stroke-width="1"/>. <g id="Group_1088" data-name="Group 1088" transform="translate(-166.889 269.61)">. <path id="Path_847" data-name="Path 847" d="M13.327,20.27l.179-.487H14.1a2.967,2.967,0,0,1,.414-.932,3.218,3.218,0,0,1,.683-.739,3.129,3.129,0,0,1,.889-.486,3.068,3.068,0,0,1,1.038-.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57791)
Category:	downloaded
Size (bytes):	58072
Entropy (8bit):	5.247960089226309
Encrypted:	false
SSDEEP:	768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk
MD5:	E1D98D47689E00F8ECBC5D9F61BDB42E
SHA1:	6778FED3CF095A318141A31F455C8F4663885BDE
SHA-256:	0A34A87842C539C1F4FEEC56BBA982FD596B73500046A6E6FE38A22260C6577B
SHA-512:	021E615983F30EC5477FD8B611E8C5045AC6D9900F9A9BB8649B56E0C7D282965A727F8CF501C3B7E1DDFF02F5B44924D5481BCEA7A926BE8A9E166314A07ED0
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	86173
Entropy (8bit):	7.984626469631935
Encrypted:	false
SSDEEP:	1536:SVTn5POSLG7Js88LffsojaHDUg/hyiWLKcPQLKpm0kYb2ToslxNe8r:MT5P87OfDaHDbhyiWLW+00CTo0xr
MD5:	B28F309DB35D8608031C48E7E2C27B45
SHA1:	0A81EDB908E35B5EF4A11EE80D7D9D93B06F203C
SHA-256:	3187E00EEBB7F9EBAFA7ACDEFE3F269F0A7A0FB4B9DE55754D676B78778836B1
SHA-512:	6739162EAC199C66599505CB4CAFC5B7143D8FB3E0D794D51F224A1B5AE5C531C75F2D6890944C3B41EFB22C62C23FC92364A88EF0DA505446F7E62588FD213F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................1U.b.OE...s.4..?<..I....Zb...v.r_..?.).zG...82..r.W.f.{...B.bFM..}}\|.@..^.\X.4..2Dj.$\7y..#.a~@.JpVD...Ec..!......'r..~'N......H..n...l_N..o...20.p@.wo.X.R.T>.A.GY.00..c....y.LL...3...Rs..n.>...x.......S.&\.vl.9+.#.G..)2........A...+1...`...... 0.F.;52...$J6W..j&/.\|_)..7'.....&'.\|..)..F...Q.R..x...P.%.....u).m>J.....g...5..p.7i3ecI.:...\|.p...S)C...z.=.C.).d....../....i....z..@.V .....1......#...\| ..K...o.0.l...2...Dm.e..d..p:.MH.....lT.Z.m....\......=..r...)Lx.F.\....4.g.uH.{..+...k(.p......l...++...Q....KM.?.qJ..&.m......e..I.E+6.6\....E...\/.-.....;S.`:}T.X.._...R...K-.^0c.....V.I....6..d...W..\.!n..r.6`\.t.....X.mg95..K.k.\....LWl^V...W.....]

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/roqad?uid=8b2f262a-441f-4f69-9075-2d2b920e1fd5&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	965
Entropy (8bit):	7.529922193965334
Encrypted:	false
SSDEEP:	24:tXYhw4CmP0fPHYHkO4mWdbBl5kPsMzWEth3vuU:tXk/4fl5biz9v9
MD5:	94AAF332709F03B5DC05CB3E26DA7211
SHA1:	29553F7022DC86860A7E7DA6071C50B34EBE9579
SHA-256:	77FABF222EEA2EAAB37F3DD2305A6EDB49D4D4687AB1B96F008BDCDDC71B8A80
SHA-512:	534A31E76C5BAA2A4C6F2F159690CA02DB7CA7DEDAFAEDFBB9DA852555AD9507546A7BEB71A0C42A39ED5251D36037DCD0C4BED9A56F8BCCDA25F977FEC7B7B3
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/nickel%402x.png
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE...p.ppppppppupppptttptpsvsssspsprrrprpsssrtrrrrprprtrrtrrtrqsqrurqtqqrqstsqtqsusstsqtqrurrsrqsqrtr.............................................................................................{}{{\|{z\|zrtr.{)....!tRNS... 00@@PPP``oppp................RT(....jIDATx....v.@...).b[-....P6...M..F[Kc...'s...f.e.....\.gf....w...i...]..G.....\r..N.....3.a..\|...E....c2.4< .?...7.....%.x...Hk.......t.'G..9..lv^....-j..{HY.y.Bz\...jg.....RkHC...H.c.......L....Z...@.+.r....v.c.Z.....Z.z.(.....#..K:..J.N...%%......-....3..fae#{C..$..<K..)\|..3..A.V.mPL#m...V.7.^...Z-.A..nk$......A....0b.Wv._wN......Kz.f.,.`....(..01.`.c..'..8...wD^..Nu...>j....p....>.....y........QB.z.&;#>........9.#.F.t.,\|i..(.6WO>.h.0QO.h.Z..U..A..M.Vh/..m..#.lUm...m+....-..+;@.xs..)*0U!.....lv..B..}...&..c.B.......B.z..~.......a.^.K.Gf'.U9.u.:...#.~.9.H.#.H.=...d.,.Zp...S..E\|~hJ....._..j....IEND.B`.

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	301
Entropy (8bit):	5.031371107984661
Encrypted:	false
SSDEEP:	6:tI9mc4sliuImRzAyAYXV6ZqRITSFUeHN2cINgrYepshWLKoEV2Ws:t4IRMXV+Ds0cIN3Y3LKoF
MD5:	C6E9BE45643E197CE1DB1D7E24A99ADC
SHA1:	D7338E398BB0F7A9082D24F121140D2CF9E88859
SHA-256:	768D97EC0916217AE82C70AEDA3A61B9B0DAB344EDC4A3240A4F7CD94AF00307
SHA-512:	8033A55B544066ACEB01404F0102D7651E9D731EBC04A164A831FC32006F826F4169929DA42363D818B93CFA3A04B3568E26621B26B73D1CDF00FAAE23887345
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 40 40">. <g>. <path d="m21.7 16.7h5v5h-5v11.6h-5v-11.6h-5v-5h5v-2.1c0-2 0.6-4.5 1.8-5.9 1.3-1.3 2.8-2 4.7-2h3.5v5h-3.5c-0.9 0-1.5 0.6-1.5 1.5v3.5z"></path>. </g>.</svg>..

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	85422
Entropy (8bit):	7.984774989533944
Encrypted:	false
SSDEEP:	1536:0LG7l3mFbSVS1SsLUAgqle7XBFEqbirlDjhCdIGnTvpebSByBOtEqM9:3c+4BUA7I7xFElpDsdxT6pQE3
MD5:	E0C04111944FFD080476727318E540F0
SHA1:	F0D8E1D1F13C32CCA05C3BF6213EEB8391A861C2
SHA-256:	2D359BEC4BB94C0AC427D16BCAF45E2F12B16F2020E07019A68EB8D6537B791A
SHA-512:	97A68FE4D862BBB87C3FE56E626D47BB497DF8601DFF98FD0BE8AF4332614DAD67DB414A425DC632AB75A3D1DFD64C251AB2E9DEDE2CF8649BE1A1A051354F65
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................v%.\..pY....4.s......f...S...A{.E...(o.....D...P.r...d...2.+)...~..@.ip.)......~.NE.N..>MCwud.3...]*.Y..{.r....3.1..v.>s.^>..2......7..Z...iN...}:\|+.......\!+0O.53.....r...^...6..y.r..2.,a.....zE.C8.&...&...KIt..=.9n.$".......?..:...g.z...6....G..!+.G0Tff....[.l...u3.`.de....J..r.]{....'..9.my5I....U.S....d.........^:....F.8.-;;E .FP.}!....x-.qf...4!...wt%..~..,.p..:R...^..........@..F.:.}.S..v...I.....L...+)".....^.......K....h.O..%....e.0....w....e...B....r.I....\|.g..w.^.s......n.rg9.3z.G.'.i:V....4........EW!.iJ....s.....8...-...CKH.?,..../.g...p.h.P.3&....U..J.b....bnj.v.n.r.z....r#......<m.95.d.8.D..h=%.}.t}"y.ueK?2.6...%..{\e..

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	1157
Entropy (8bit):	7.754335270048311
Encrypted:	false
SSDEEP:	24:hsMvxoQTA+IrcasgT1eWjUQ9CSUYTmGU7vNSgZNQbhfBfPqF:G+TTAzrcYToWjUSUB7lSgZNQbhfJPqF
MD5:	E4DEB81E09A48FA74323FC5F6BC3E617
SHA1:	4A22B5F5F3B274FE8E9D51F9A2073BB0AED15CE1
SHA-256:	BC8F64C8A5DF3A65304E7BF3FEE60BFD78858D072D1232A42B4AF6836ABE1F32
SHA-512:	8BF8C9239659A99B7E4781B6088C1D7DD21C5583F040BDB0226C9C77E2D07062C30D5BA87370F90ABC7B710E62ED2945CB27E91AB282EF55716BBF3CD2CFE089
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/redesign/favicon/favicon-16x16.png
Preview:	.PNG........IHDR...............7.....iCCPicc..x.c``......$..PPTR.........~..............\|@...T.T.......... ..H...@.... 6JI-N.._.8....(...d.$e... vvH.3......S.Z....._PY...Q.`hii........\Y\..[....._T._.X...T....x].K...3....T...@......!...Ee`.D........C.C"C=.....o...].K.W0.c.c.b..t.Y.9.y!...K...[.z.....,..}c.g......3....#..nM..<R<Sy.x'...M.._,.#.C.U..P....^......_.&..._.....<&./--}B.LV]..\.........JzJo.......T;.......A..$.T]+=A.W.G.........2..4.`..b....:.\.8.@;W{k.cG.'5g%..Wy7.we.uO]/.o..w.`........AK.w.\.}...!.i...].33vO...D...5.7.92,23..f_.e..(.T..X.$.tU.....]5..^uS..6.5.4.m.k+l?.).U.}.W.....D.I.'...?.........I.{z.....D.....,s...!.N.qY.o..m.L6o.j.m.....w..9./l...9.~.i?&~\|.I.S..$..u~.E.KG.$^.w}.M.[w...S...a.c.'..e..yy.u.[.w.>4}2......?.~............4.......\IDAT(.U.jTQ...g.s.8!..D..........B.ID..D..D.+-.....^...0.,...A.BD.."&Qqf.-...j_xY+M...n>....N....e...w.H.e..dC.e.E:H!..c...).8_.6....N.`.)..U$.:.aKj.7u..TD...QM..v.2...!..!$[.>.{.m.Fw.U ..=....B

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 384 x 384, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	20357
Entropy (8bit):	7.977085137365684
Encrypted:	false
SSDEEP:	384:mPx/ZiuCTjL8/7Ag8amvnuzLMN5pPVlWsHJe2fR4eS:m21TI8gjmvnuzLk5pno2fOeS
MD5:	F9F777C9EB58FA518181474A9558FD61
SHA1:	23AD85010FA73B5A15D17360A9629340CF7F8479
SHA-256:	D3D5297835C11FC2E88E89A190D4298718A2519A7E6E7C2341A60A6C45CBB542
SHA-512:	603ACE5BDECDAF0DBE1E81164DF0BB8F034BFEF66FAA83E8BD08EFA1DC287790D384F85A4BBD09ED99EC729B4DCA14C0598C7F0AEE99F44A4760DF6B07B2B505
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/redesign/favicon/dark/android-chrome-384x384.png
Preview:	.PNG........IHDR...............}4....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<..O.IDATx...K#A....FQ..4.... ...3.y+,l..{Mu..).;......Ic.M@..FH.hZ1./..B$$.Ht.5..9<.:.Cq.....~......Y.A..V:.nz......0..."b.d.{H .S.3.k.".......Z(..fJ.P..'..,oy.4.q.$..c.."&V..(#bT..>z..N:D.n.5h...hd.;.A/...'...vx..f..3.BE.V.KE...J.....+U.TXUE..g........9)F8.^z..@..z-..vz.. ..-.........y........q..O/...w_._.........+.%]B.=.q.],s.a....E.<...E?#\..2........W.._..z.......b..<CA.%Q>B.g...b.p.6...6..,.3.K.EP>...71K#..Sz...$LI....D.k...z.=."..z.+..B.qF..r..y&.U.].?..e....bz7.x....UjE......i..v`.'..t.J......a.......q.9....2r...[ .M ...:..Wy...>a.d.6.S..R..R.Q..b..n...l.Q.).............R.Q.'{...j..q...\b..7D..B$X...S.A....`2 !!....bhb.M,.N.e..F&...!.!nn+w..~.m.........sr<.=.&{....X.&.......u...Qg#.vt.(.m#.....L..CU......m.%=sta.Z..R.E.]_.k..:.(TMn5....\|!...4..P.. ....<Y.<....!.....#..>.?9&.}.(...C.:E...a...<...?9.=.tY'....aYlY..&..)n.r\.).M..k.$..R..h.k..

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	50603
Entropy (8bit):	7.968940721041269
Encrypted:	false
SSDEEP:	768:LqKA2rvuCJM8kAQXIv0OsjFd9dnXUewuAXGtS2qdFltox/LVQeUcIL5IuYw:Lq32zfM8jQksx6ewstSzdpox/LsFItw
MD5:	8AF35E938F5EB81DFB5B9068AD8E0C64
SHA1:	7E64651924FE8AC1371F54392D2F052816E45BEC
SHA-256:	CA507914C791D4B194F4862A702368D42109D7559136772082D816616EBC209B
SHA-512:	310A61CDFF25DC18CCC1BEFBF277C13E8DD6432E70C509CE96A69CB6D3F48EDA46F4079DF60BFDFA6367CE99AE7365DAC741B5278535AE0F3305EB051182B9F5
Malicious:	false
Reputation:	low
URL:	https://1movieshd.cc/images/group_11/theme_3/logo.png?v=0.1
Preview:	.PNG........IHDR.............\r.f....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:76C997D6233011EBA847DFD56B4DBFD8" xmpMM:DocumentID="xmp.did:76C997D7233011EBA847DFD56B4DBFD8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:76C997D4233011EBA847DFD56B4DBFD8" stRef:documentID="xmp.did:76C997D5233011EBA847DFD56B4DBFD8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.6......IDATx....%Iu&z"3.+o..i3.c.a...`.o4 ..E..`A.....{.Xa..].d?....@ha..}...$..4#.B....3...W]...N.......z.z.

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	84375
Entropy (8bit):	7.9844803428638835
Encrypted:	false
SSDEEP:	1536:pgFODe9VpSsZBNEVrM7O3YAXYJJhkOHuAsBiNU50IyiaoqHbN6nCpWXCW:pu0XsiVf3YGYJfBHuAsBGU6iaoqHRuGE
MD5:	3063C862558EA8B41A78CE203EDA38E5
SHA1:	ED80DBC70DE876708C5F710A095F55EF3137D501
SHA-256:	37CC75FA95F7AFBEE56F7210F81E8F2A19AF3729FB457D52611F29F4B524CDFB
SHA-512:	7266E725FC0FBF752798C60541EF3D2EBCFC4F0540289E4E75AEEDFAC0D730E691D54F8778C5F7ABB7110EA8276E5E2F2B6AFA8FE4C2600556FDAF4DD4DCCE97
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................mT.j-/1F........g.........g..f{.fg...N.Hfx......y.gO9....S..e...YdQ&n.....z.i}G..........v..l.3....L...m+..GO\|..;m......a/.Y.....e...D....E-99.P$....DJ...x8Q=..%q.<S..C3...=w.u.f.......5...hE)..V.._-..N....IJ...,...+.b.&M..z.U....1..f.n..'.q......I..k..B?7s.....@.H3..DX...X..k...t..N.c.....d.-..G9 &Ld......e.'...B....;......d.*.3!N.l.\......>...f0........N..F.&...a3...1..!g.w.-:A.G...s..C=...?. ....O......XU.2R. .J7..r..e.OE..}UK..Q;.-.E.Y.(....p....x.EH..sj.Q.y..uAc...(..IKy).....~\|..q.4Z..Xl(.p.4...........VB...f..`0.m......\.r....$L..es.r8........m........`m.(....).'.......).7?5O.+....-\.....i.a....&63>@I.Z....B...{.....;h...

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (9435), with CRLF line terminators
Category:	downloaded
Size (bytes):	9440
Entropy (8bit):	4.829051817796089
Encrypted:	false
SSDEEP:	96:Nqqa3nIgrYI2fY6+xwjFXEVb9kZXGxxaMrCxVjIX8BkTPHiz/TaJxljGXokVrK9u:16nILIgCrmd
MD5:	CD8378E6E2CD3BAB8AC3320FA2659C35
SHA1:	0AB4979162B4E2DC8AF484E042776D16A4EFEBD0
SHA-256:	BF25A2D70754318C2B40832CB8285398F87CCF493411E9D8A9D8EA36AA39F590
SHA-512:	7DDDE1EF85EC22C1DD8CD1BFB4A52B48BFD8EEB895BE280E44E434ED2629FCDAB6826DA9BBADC4DED063AEF1B1D5FBC0C0EF51F59182B80CE3E5A976C0E9A6D6
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/css/lang/lang-de.css
Preview:	.@media only screen and (max-height:38em),only screen and (max-width:56em){.lang_de div.wire{flex-basis:10.75em}}@media only screen and (min-width:56.063em)and (min-height:38.063em){.lang_de a.wire{width:10.25em}}@media only screen and (min-width:73.063em){.lang_de .tabs nav a.wire{max-width:none}.lang_de .tabs nav a.wire span{max-width:9.25em}}.lang_de .welcome-bottom-section button{min-width:13rem}.lang_de .mobile-store-welcome .content{--vertical-rhythm:1.75rem;max-width:24rem}@media only screen and (orientation:landscape)and (max-width:56em)and (max-height:38em){.lang_de .mobile-store-welcome .content{--vertical-rhythm:1.125rem}}@font-face{font-display:swap;font-family:Roboto;font-stretch:normal;font-style:normal;font-weight:100 1000;src:url(../../fonts/robotoflex/roboto-flex-v9_latin.woff2) format("woff2")}body,button,input,select,textarea{font-family:Roboto,Segoe UI,Helvetica Neue,Helvetica,Arial,sans-serif-light,sans-serif;font-style:normal;font-weight:400}.lang_de .nav-main l

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	180
Entropy (8bit):	5.0782859598868875
Encrypted:	false
SSDEEP:	3:HOkgVEnkePltTbbNPSOiCYOVu0AunGkPW8hwXbKKYz+clyvhCkY:d5XbbNP/iWxVW8hwOz+KyvUkY
MD5:	1F4665682FFAB5529557983DFD2B143E
SHA1:	09A3CB4506C7D91B8903416DCF1BFF3EF1787DDC
SHA-256:	038A7A59B521F6331CA0FAC372885C946827616783269711D560A7A83491BDF6
SHA-512:	A16AC52E5FB1D3795B328DFE34BD070F70EE58ACE425AE66E30BFE06AA573F558EE317CA0DB7263955A7583F90A2E9E6FA11029C33D1062A9E2137567FA0E549
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmgksH6Q_yw0xIFDQKP-2gSFwnh8ITPHAhVYxIFDYOoWz0SBQ3OQUx6EhAJqlpJtRrfL5oSBQ2g_vU9EiUJmWfBRTVOq7wSBQ3QelK6EgUNfo857RIFDYHUMeUSBQ0srVgeEhAJMots93qh8LoSBQ1TWkfF?alt=proto
Preview:	CgkKBw0Cj/toGgAKIAoRDYOoWz0aBAgJGAEaBAhWGAIKCw3OQUx6GgQISxgCCgkKBw2g/vU9GgAKQQoHDdB6UroaAAoLDX6POe0aBAhWGAIKHA2B1DHlGgQITBgCKg8IClILCgFAEAEY/////w8KCw0srVgeGgQIXxgCCgkKBw1TWkfFGgA=

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10401
Entropy (8bit):	4.112127941943231
Encrypted:	false
SSDEEP:	192:SNGdXjASnSvj0RaX9GMfpOF8jTm6emwuRcTVDqMLcjiNeIrUAJA:S+fsbf2d6fvFjiEZ
MD5:	164F494B4F642EEFECB7BC6967DD3DD8
SHA1:	C1774B30509F650A4D7A8DB3FD69AE0C075443DA
SHA-256:	B91361AF0119540547FA55A46D9D7B3C731F34625263250CAB6E6484B329BC20
SHA-512:	6D599E19ADBA543F690285E6332F8796FEE655BC9E62A21B00605331AA09CC139ACD54CE21FA05E2F6D8CB627403D153322D2E805F9D10C9D818685FEAC481A0
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36px" height="38px" viewBox="0 0 36 38" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>IconAssetClass/Cryptos</title>. <g id="v2" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Bitpanda-Design-System-" transform="translate(-139.000000, -7849.000000)">. <g id="Group" transform="translate(139.000000, 7849.000000)">. <g id="Group-5" transform="translate(0.000000, 0.513889)">. <ellipse id="Oval-Copy-2" fill="#F7931A" cx="18" cy="18.5" rx="18" ry="18.5"></ellipse>. <path d="M28.5604987,12.7951383 L28.5604987,12.7951383 C28.4284987,10.7157383 24.5476987,9.14940496 19.5340987,9.14940496 C14.5204987,9.14940496 10.6540987,10.7157383 10.5100987,12.7778716 C10.5078499,12.8214188 10.5078499,12.8650578 10.5100987,12.908605 L10.5100987,17.0205383 C8.60209871,17.7013383 7.51969871,18.6633383 7.440

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	84444
Entropy (8bit):	7.985780509115842
Encrypted:	false
SSDEEP:	1536:EQJqvijd2P1L1rh4/O7qufBlm3fUo4PJU23Wi04vFPBGmG6s5f0dq:XJqqjd2Pd4/K/fBkaJ/3tvDGmHssq
MD5:	2AAFB5A7D09B51C1E1C2DD65F911C155
SHA1:	CF0A4B639469FD7E63657954C71E1D2491615824
SHA-256:	D7A5E3AB92EEB248A78CF320928F18904AFEBF7A9381AC321A7EFA610BB74329
SHA-512:	AB0928E2F1DC4C2316C8A2BB8B1FE4D21C5AB1910E1BAB7792A715ED653F6D92FE06927D67E5350BBA10AADC5D26B4F101EA1663355A2E900CC7AD3F83B7EBEB
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/b4/ed/b4ed2bf6911aacc0dc0604cc1828af1f/b4ed2bf6911aacc0dc0604cc1828af1f.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................#,......J..7ek->.m\..>.H.........~...3......W...W.}.K....;Z~....k...b\|.^PM..]r..B=,7....$...z...z._.lE.{,.Xr...sG./2.V...v/..B...}.....^#......[.X..^...........-{...$gD..6..my.O.\`.`......g`~.....~..8.6.G..7....b.................=y....6e....S.mn....c.U"...9.....:.$Dt.Pj.._...e.j...&...3}...C..e...X.iAE..`.....=.5Y+.Z..CW-.#.g..5...z..".)...ok!..^'./...<.K..F\............[.D.gW..tx..1Y.Qf..1. ..........HjQ......Y.^"pto.....[Q:..].v../...xWW.....\|5...@}"Z..z....a..A...8.s.._5k.\|t...V.E.;t._..'....^..l..>.'.G..A..,.d..f..\..t2..*2[x.......\Up..Vty+..D,.q....U.....).w.j.=. ...W..#4>.l....+....z.J.?]...s...9..Z.@P.#...s.....T.

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	92501
Entropy (8bit):	7.9883872541296155
Encrypted:	false
SSDEEP:	1536:KyS+UUJn7kxC2RqfcqeRZ6f7ZOL1I0FfqSeTsyi5HJns4SW4lK:OcJ7pLfFCiIMTVuHJnyW4lK
MD5:	121866A6E18D44520216200F2DDF9195
SHA1:	BDEA3BA263FA84370F9E2526C77D069E4DA73915
SHA-256:	B07B2D7894939AA5776EC40B7B88E82435819FCA23184B85F1A402F4A68CD68A
SHA-512:	70CAFE689A8D2DD22A95D54D84D0DD304E108EB8FEE82715438F43838D0931A6ED9A14A6B3933A29DD96C284BBF1DD79B61FEFFE405E6688C4C618C2401B0B66
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/a3/6b/a36b0afe5302a53132f7f522d9a94553/a36b0afe5302a53132f7f522d9a94553.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................t{8e/.....Ich.B+:.n.DSp_Y..B...\v).'.....:y>.{O....K>..(........9.\..K_%.........u..Y$......x...c..W~k.S.-......UW[6......{.bW.........B..w.<.Y.... e.E........iY}..Vy.4.....}cw..q...t>.O.:=.......y..s.Q...YPv".q..b...2..N...x....lR.X..w...%.'...7.t....S......e.r..t..X.....m.z.;5....U....X3......g.G.5v.]..]zeQ`..O)......Y........jI...`.A ....=....V.yZ..MiU..`>..\|.~.7..Z..OA.8. .6V...'..#.7gk....CQyhU.W..C......u...E........[..s......7..E...?...&.G..a..zL../...J..[...Z._.....Kf...hM.Sb..N...\|.J9..i^.5.'...O~t....V*......F..\.n{.8Q.........a.0}.....S.R....U.I...:.@.&v...........[.t..,Z.w.k..o....78S\Z.J.].........dl+}Jo.&.M........b..USm

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	203577
Entropy (8bit):	5.512200780765553
Encrypted:	false
SSDEEP:	6144:yqNS+rlfdDDRaUQ8cFfaFOrXxvlc1Z3ZcNWg:yajVDDRaG3WNv
MD5:	BE134E330DAF8A94C17240CBB74AFE4D
SHA1:	2B026DE859524497C710514137EE1A0E69C77C17
SHA-256:	1829879D40C719F4C296200349B145C4DF3DD5A6C98A7BC8ED84110BDE7267D9
SHA-512:	DD3825287B951BEBA89D0E8266612C5CE3BE72784A122A1B3F41BE8B6EDA05C6291B1F692AEB4409E0FCD18757A51E935BC27AC9DDCC046617B43D0A8A209D50
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/loginNonModuled.bundle.js
Preview:	/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /(function(v,M){"use strict";typeof module=="object"&&typeof module.exports=="object"?module.exports=v.document?M(v,!0):function(N){if(!N.document)throw new Error("jQuery requires a window with a document");return M(N)}:M(v)})(typeof window!="undefined"?window:this,function(v,M){"use strict";var N=[],A=Object.getPrototypeOf,b=N.slice,x=N.flat?function(e){return N.flat.call(e)}:function(e){return N.concat.apply([],e)},z=N.push,p=N.indexOf,f={},_=f.toString,C=f.hasOwnProperty,B=C.toString,T=B.call(Object),l={},d=function(e){return typeof e=="function"&&typeof e.nodeType!="number"&&typeof e.item!="function"},w=function(e){return e!=null&&e===e.window},m=v.document,O={type:!0,src:!0,nonce:!0,noModule:!0};function U(e,t,r){var o,a,u=(r=r\|\|m).createElement("script");if(u.text=e,t)for(o in O)(a=t[o]\|\|t.getAttribute&&t.getAttribute(o))&&u.setAttribute(o,a);r.head.appendChild(u).parentNode.removeChild(u)}func

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2539
Entropy (8bit):	7.690284005220472
Encrypted:	false
SSDEEP:	48:w/6R/nEhnJjdyZLsCzYHoiylW+68FJCzdQF0OWAq0yxK+Wx8WWWWWWWWSlmcLx:wSR/yQaCz3hW38ud80fAF5t2WWWWWWWN
MD5:	22619505C763871C4108B6FBB28F22C1
SHA1:	D723B2FFA0E7BA2031A6242F4ECD2A959BDDBDEB
SHA-256:	A7A700FB559271FFB9920D033346D21E4957518AC02B69CD82A0CC7907E6757B
SHA-512:	C5BD64C93272E98D2B18434FBDB0BC353DAC0D43A5688E70AC168094C51D7C9222D9F1AE6D04E86C90692C86D95F72A1B8EA2E3D262C59B2BB770EA8CFC0C416
Malicious:	false
Reputation:	low
URL:	https://app.plus500.com/Resources/dist/Resources/images/app-icon/Plus500AppIcon-192.png
Preview:	.PNG........IHDR.............R.l.....pHYs.................sRGB.........gAMA......a.....IDATx...Ol.....gv.qU.\.4H....G...$9..H....)E.X=.%H.=.......jQ....Fm..S.....&..=...b..5U".i.Ie...<..n..3;.gf..~$c....7......4@o..{.[..e...l.D...i...../S9.L.dE.=.....f....../m.c.o......j.d=q......PP._...H....)..5.5....=I.G.y.~.Ow4....=..u.........eG..9...m.....O.P.....z...M..p.m.^.......n..K....m\|`Hn....Q.....]...KY).%...:.9/@'.C..=.;.f..}.H...:?==.,.%G.Q.0............=.E.P.Zm.Vm9.m..~{......?.j.../.:[.kQ....>X...W...z+.k..3.G...~....i..-.g. ......G...Q..U~5.+).?.....N9.wy.&..hP.....(%})O.O.....+.....3.T...t0.....L#.0...4.....L#.0...4.....L#.0...4.....L#.0...4.....L#.0...4.....L#.0.K.t;....G..Z]....:.y.@..xz..8:$.:5.!.MF......F.`...i.....T.m..V.wS.D......]...qzv.. .[3'%NZ..... ..@0...4.....L#.0...4.....L#.0...4.....L#.0.....D.m.=.....Z.:....+n3.sA......sU.y......\|.....4.....L#.0...4z.Z..s.<.Q..bV..F......F.`...i......F.`...i.]........h..7.o..........;..l.g.v}.J.

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	82625
Entropy (8bit):	7.986954708227412
Encrypted:	false
SSDEEP:	1536:+HKtx/MN4kkvobz177WTrZJ97r/GBPkgYAbwKShk231HA5kk+pNBVP05jEUR8Tc:FrMNCM577WPZJ97r/GCgVbtShk231HAn
MD5:	7E8B032108935D356F51B3865B43EF9C
SHA1:	F50C89DCE5363AAE0B7FA823DDA31D86399E1BF2
SHA-256:	346A5958C84D540DA181444E915E3A8CF727D3EC8D956A29812A993E432532CF
SHA-512:	B1EF0998817C026A01F55407FD76DDCEC4F88307555A022831D9A50BF647AFB736E566DCA6BC0DDD6E591E4F2FF07FA520590BF37385BFAF3E1890047135EEC5
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................K.O...<.&.....C..t.m...0;5.?Z..&...r?....y.P......h.J.g......`."...S..9}...I...o.$.v[@..=...\..t..)...P..7.d.....QKt.C:...;>..3.&.8..rtr../...o.u.UUmeU.....h..Mk.^..$.T.T.v......~..R~@Xt.?..._..w-..%.....pl......D. S.\i.o...L.?........m4..j..:E(.>....=....{..Y..q.(.i.=..W.r..R.[....#4..W3).."..1x...,_._nEg..O.M.2D....L.v\b..R.l.. .J@......G.+.....G..y....Z..-'.I...t...O.b..'..\.....a....#......8x...6....4.{?.W.y/f.VZ.7.u..]B.."-.v..>.......ES..]P..1.+.I.....?..'...[..r...3k. )..1..cG..a..T{.>.......(\ZH...b...U..2j".9C......[S$...)...fm.....J..i%.......r...C.\|...d..m..N..P-..E.4........z.X.f.,">`f..+K67............v..;.=V...r.K.x~.o..1O.

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 67400, version 1.0
Category:	downloaded
Size (bytes):	67400
Entropy (8bit):	7.996893438570997
Encrypted:	true
SSDEEP:	1536:2O/rKdbROVPcdQuj+SO+T9/FTlyIdXuSQLbNDD4KKr9:B/rkRwD6+SpR/VcWXu/V8r9
MD5:	14A08198EC7D1EB96D515362293FED36
SHA1:	965D78C34637D1BDAB6277805FAECB6CAA959669
SHA-256:	CA3EA16761B7D443C64CFD99DD1CF8AA84790A25BB4709582935956FE71D014D
SHA-512:	34ACAB25B3B994D3BDCDCD0FD64D0DABAB4FAD67CBF8367BF1DAC0463014C2ED539249131CB180A2FB889697C210513747592A7BD76B56D2F75AD208FFC4A5A5
Malicious:	false
Reputation:	low
URL:	https://use.fontawesome.com/releases/v5.3.1/webfonts/fa-solid-900.woff2
Preview:	wOF2.......H.....................................T.V..~......+.6.$..(..,.. ..z..[[I>r.k.].W....k...R.t...-.G....x..V..`..I....._.4bl..;.....T...b^y.+.@m..i..m.....w.8Ls..hNg..Qd.. &..b.0.cnL.t).5n.6.i.mb...\BMR...P........&h....D%.....U.[W.....2!.z.?.2.;.?..i?e..........:...q{.s....N......K<..n.V.LL<...o.....V\....hX..._7.......z3...0K...&_../..b.Cg.%y..\..I.I...s..G>...$oK..5..b...SE'{g... .....p..d....k.......s.......+.F.m......6B.....Hs.a..X....F..q..g%.w.yg....y'P..Tw....=0h...'@... .L].<..q.:.}).0....f..(...V.......AP...S.;.$.r;_.@...._.\J.kt\..]@]h]..1..V$...e.7.I..r.^. ?I.......[.....Z..&........l............f.a`..r>Sy1..6q...D........#...Q..E...Jk.<.y.A..ZmGh.R.P.I.A..O.......w.....i...]...j<..;!_.....c.......!""j....v...s..N.3.'<.....'H..Cj..i....4.t..@.....c.x.3._..z........K\..hu......t...K.)E......4.....Ov.f....Y..D....4....Y. .e....[...t.4.%O.....*0.eK..&qrZ.....<.T{.O?...."a...r..^-\|..i.08......BHP....+.......C...i.Mz......S.M#.

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487), with CRLF line terminators
Category:	downloaded
Size (bytes):	4866
Entropy (8bit):	4.95523898168429
Encrypted:	false
SSDEEP:	48:iS/f5CPB7doiBKOOBIbR4Tf2HChvLHCYAgYMHCYqDD2iDDdL4TEVJ8O2D9NBwil8:78YHBG4TQN5V3yEr/t42+4bf9uk
MD5:	8395AA8366266E4D17C598D59A88B0CD
SHA1:	2D9F99F27517B8DE52823F6D4B24546926779DA3
SHA-256:	719D0DA0102AD8D8E041DB58510F5F321C7E473FBDFA59C24E29BED7765FE46F
SHA-512:	0424CDBB2B9FEFA4C9DD9556E2160437C9BD94D8AE115AF38607755513C5EEA492F61E46912C7375BEAAC5C06851179C1064B1CFA48DBE1820B5098D7722A0DD
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/css/WinJS_4.4.4/ui-light-small.css
Preview:	html, body {width:100%; height:100%; margin:0; cursor:default; -webkit-touch-callout:none; -ms-scroll-translation:vertical-to-horizontal; -webkit-tap-highlight-color:rgba(0, 0, 0, 0);}..html {overflow:hidden; direction:ltr;}..html:lang(ar), html:lang(dv), html:lang(fa), html:lang(he), html:lang(ku-Arab), html:lang(pa-Arab), html:lang(prs), html:lang(ps), html:lang(sd-Arab), html:lang(syr), html:lang(ug), html:lang(ur), html:lang(qps-plocm) {direction:rtl;}..body {-ms-content-zooming:none;}..iframe {border:0;}..button:lang(ar), button:lang(dv), button:lang(fa), button:lang(he), button:lang(ku-Arab), button:lang(pa-Arab), button:lang(prs), button:lang(ps), button:lang(sd-Arab), button:lang(syr), button:lang(ug), button:lang(ur), button:lang(qps-plocm) {writing-mode:rl-tb;}...win-button { font-family: "Segoe UI", sans-serif, "Segoe MDL2 Assets", "Symbols", "Segoe UI Emoji"; }...win-button { border-style: solid; margin: 0px; min-height: 32px; min-width: 120px; padding: 4px 8px; border-widt

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/adobe?uid=06291327801249806183443003251739176557&_rand=1714156386906
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (766)
Category:	downloaded
Size (bytes):	931
Entropy (8bit):	4.551546673397864
Encrypted:	false
SSDEEP:	24:XHmMBsNWlj/ecMPDQBjkKkbrTyXZU5Tg7nE:T1/FM0hkuXOsnE
MD5:	5D3AED92FAA60B62D172B36205EE2958
SHA1:	2BB56C200032C588FE1E05D5D9861AD91A400E20
SHA-256:	0E32DFF06BCF175A178664BDC8F8B73B040F6AF0028CA2E00D0EB80076F8E3D0
SHA-512:	4B52E95F406A164A52F16FF4A22084B66EA4356B5C3AFE0363283C94153D7430738D41EC7C31572A80A9CACD2368C2D34891C80AB6928DDAD7151689587DF6EE
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/asset-icons/asset-best.svg
Preview:	Generated by IcoMoon.io -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">.<title>asset-best</title>.<path fill="#e83355" d="M16 32c-8.837 0-16-7.163-16-16s7.163-16 16-16 16 7.163 16 16-7.163 16-16 16zM17.879 24.168c3.587 0 5.996-2.188 5.983-5.42 0-1.184-0.374-2.271-1.039-3.051l0.014-0.014c0.665-0.78 1.038-1.867 1.038-3.037 0-3.246-2.409-5.434-5.996-5.434h-5.041l-0.997 5.699h-3.642l-0.346 1.937h3.642l-0.291 1.686h-3.642l-0.346 1.937h3.642l-0.998 5.685 8.019 0.014zM12.16 22.203l0.665-3.734h2.16c3.684 0 5.539-0.153 6.744-0.892 0.139 0.334 0.208 0.738 0.208 1.156 0 2.146-1.551 3.483-4.057 3.483l-5.72-0.014zM13.157 16.518l0.305-1.672h1.523c4.085 0 5.165 0.251 6.024 0.836-0.651 0.641-2.063 0.836-6.024 0.836h-1.828zM13.794 12.895l0.665-3.762h3.421c2.534 0 4.057 1.296 4.057 3.483 0 0.446-0.069 0.864-0.221 1.212-1.288-0.725-2.908-0.933-6.73-0.933h-1.191z"></path>.</svg>.

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	800
Entropy (8bit):	4.7189725430513105
Encrypted:	false
SSDEEP:	12:TMHdVz1jxJMdhFUYLTcMPJO4oDHt5yFMGCNTpxB0xBu0+BPmKY414ZaUcnS4+Ko3:2d51jxhYLo4OHtQFMGCBplOKIair3
MD5:	18CB43D2469C45AE6BCEC43993F35CBB
SHA1:	987176F2AEE63490FF7CF67DCFD7AAA23B8AA175
SHA-256:	F9EE26D1B9FBDEDA19DC44D53D682727BB91C609B0B14FF03739207AE593EBBD
SHA-512:	BA72C1EB448FD9320E29B57997FE80D59990FCE4D2129917058A4E3D69D3540C623B439404163A0E8DA2436F00E3B8A1E0AD889BC04232BCC70E4ADE26DC331B
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/tsla.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="nonzero"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z" fill="#F2F4F7"/><g fill="#E82127"><path d="m18.029 30.953 3.365-18.927c3.208 0 4.22.352 4.366 1.788 0 0 2.152-.803 3.237-2.432-4.235-1.963-8.49-2.051-8.49-2.051l-2.484 3.024h.006L15.546 9.33s-4.256.089-8.49 2.051c1.084 1.63 3.237 2.432 3.237 2.432.147-1.436 1.157-1.787 4.344-1.79l3.392 18.93z"/><path d="M18.028 8.457c3.423-.026 7.342.53 11.353 2.278.537-.965.674-1.391.674-1.391C25.67 7.609 21.564 7.014 18.027 7c-3.536.015-7.642.609-12.027 2.344 0 0 .196.525.674 1.391 4.01-1.748 7.93-2.304 11.353-2.278z"/></g></g></svg>

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	2126564
Entropy (8bit):	5.065768470241349
Encrypted:	false
SSDEEP:	12288:i5/SbqGPE5G0GO8E03w1un1xp6hvYviS1EjiwKZyKHjA1eQ8goRwTPE:i5Z5ooE
MD5:	77BDAE2D3390A0F78A23DAE8A27AB69D
SHA1:	4A29B37C24E502801424EAD78FAA9FB9A668F9AC
SHA-256:	550CDC4F5B484E348BC1D62FDDDBFF6343B28298478164CC9AB07B15B916DAB3
SHA-512:	6EAF9150DB1FCB047B5C26EF65D3B34D1BBE657F8C3205E69E48E8156BC28F25C464619CC536BF015DAC3354A28A4A939CDB8B6BCCCB9C146C307860829FF57D
Malicious:	false
Reputation:	low
Preview:	{"data":{"type":"collection","attributes":{"commodities":[{"type":"commodity","attributes":{"name":"Gold","symbol":"XAU","logo":"https:\/\/bitpanda-broker-production-assets.s3.eu-west-1.amazonaws.com\/static\/cryptocoin\/b86c88d4-efe3-11eb-b56f-0691764446a7.svg","logo_dark":"https:\/\/bitpanda-broker-production-assets.s3.eu-west-1.amazonaws.com\/static\/cryptocoin\/b86c88d4-efe3-11eb-b56f-0691764446a7_dark.svg","color":"#B68E46","asset_type_name":"commodity","asset_group_name":"metal","precision_for_fiat_price":2,"precision_for_coins":4,"precision_for_internal":8,"precision_for_tx":8,"ios_supported_version":"0.0.1","android_supported_version":"0.0.1","measurement_unit":"g","is_token":false,"pid":"b86c88d4-efe3-11eb-b56f-0691764446a7"},"id":"28"},{"type":"commodity","attributes":{"name":"Silver","symbol":"XAG","logo":"https:\/\/bitpanda-broker-production-assets.s3.eu-west-1.amazonaws.com\/static\/cryptocoin\/b86c8c67-efe3-11eb-b56f-0691764446a7.svg","logo_dark":"https:\/\/bitpanda-broke

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 1200, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	137477
Entropy (8bit):	7.908832080441922
Encrypted:	false
SSDEEP:	3072:zA2NQ21pjspS/d3Rl9BmmGwjvOGzaoylGyM81HWA7lY:82NQYpxFjv2o2G+m
MD5:	3935EDD1FBB95151D1A25F94A0638033
SHA1:	87C02AE3D86905914AA14F03DE9A0C8D79523FBF
SHA-256:	EDAE2F4A8C7F968C3B758CDD6EB39C7F9C2BF18209CDA944227D3CDF65C57845
SHA-512:	7DFBEB7D3A83DFB205D32FFA68BB7CE44612099685CB6F86CAD222EE148E6593D10AE0E17E4F36F51052AF6601CC860AA61BE5EA35399358890CA6CBE171CA75
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............,FF.....sRGB.........IDATx...1.. ..@...."...KN@........\Zof......_.w.....0.......p...............w.....0...... .p..............w......0.......p.............2.w.....0.......p...............w.....0...... .p..............w......0.......p.............2.w.....0.......p...............w.....0...... .p..............w......0.......p.............2.w.....0.......p...............w.....0...... .p..............w......0.......p.............2.{...e..q....2.R.....FQCh........K.?..in"..(.".n.M*x.".......r....]....!y\|}}x...............@p..............!...............;......Cp..............w...............;......................w............ ..;............ ......@0.w............@p......`....... ......................@p..............!...............;......Cp..............w...............;......................w............ ..;............ ......@0.w.......Ig..7G.\2..x.............%.L...F.....Z^^^[[.....................X[Lv........-.H.s7....+.............r.\.V+.J.T

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	90397
Entropy (8bit):	7.983841972768483
Encrypted:	false
SSDEEP:	1536:UB+LeOHqLMcPH/wJ2/I2gh9fO/tzzxOW/yLwWx2zWyUUxyscVk+Ex6v4CL:+0aM2mEI2gv+BYhGxEqG
MD5:	2D4457EDCA2F72D9B40A827234C44EB8
SHA1:	F02D1056069328D3A5224C3C7D8130994A3A3592
SHA-256:	DAD99CCAB16B7E67E118FF6DC10849F93FF9E7FCC5D160C1B4C72B14228914B8
SHA-512:	2C1DF64E15749EDA00C83A7B7C1EA0C9E10195F6CD6CDCD7839A60E1F841D76A07D2F479BC36EE89B9EE7651DDC18569B65B1FAB08AA83D3E1F7EEA54047E7D2
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................l...N.=l..^<..w/f~ur.....S!nn.s(.,.5...V..6..v.f.......H.\.d.>e.....k..77..W..<...g.r....._?wf.i..].5..PT..?s.......r...f...z..............k..M.NW.#k:\|....lq.+.....?..w-H.....g..zH.......u..Qb...\.....u.,c..b.~.X.Q...rx.....\...w.z...#\.Rc7L......>..itH...r...{4...9.q..W].P.e..#=....~e{..AM.YtCbC.e....Yw.P.l..R.5J..A~...G.Yy..E....98'..-..X.i.g..Gy.,....%G2....xn.....4..\|..}&!5.T..kT.X....D......%P....S.K..W..#l.W]....0.n.j...h.00....vI).`......xz..5..+...r%..7.U.W...,......z..TW..q..b.yW..oa;%,l...2r..:.Y.~%.va.jR.....^n.C.Lh.>..X\y\|.....6.a..baZa......!z..I]..Z(7j........L.l.K.K'G.. ....1NC.L....N......E-....(=qm...-../.K..

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1438
Entropy (8bit):	4.3733873195212105
Encrypted:	false
SSDEEP:	24:t44lSxMijIb0q2k665Pe60WjzQiwbKf/cfBnqBsxphmXxd8Wp0an:3MAf6EzAQf/QBnqB+uXzp0Q
MD5:	7254FA7385A48A72BE30661BFB3A9615
SHA1:	2B450535A015D5246C80100483B79F6A25D738FA
SHA-256:	5861263BDD759DC9BA0C47F2A4760B555F7BE3D52ED803B6107832853030DD5C
SHA-512:	7425DD3162480CD08F7CD453F2DB0D963E4311767D0D265C34BD73698D1E26B70741819ADBB8B643280C09EAA4F6EAA88049231EB08CEE90C78119F8A4EB8D37
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#2775CA" fill-rule="nonzero" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zm-3.375 5.85c0-.422-.323-.66-.731-.534C8.437 7.059 4.5 12.164 4.5 18.183c0 6.033 3.938 11.123 9.394 12.867.393.127.731-.113.731-.534v-1.07c0-.28-.21-.604-.478-.702-4.317-1.575-7.397-5.71-7.397-10.561 0-4.838 3.08-8.986 7.397-10.575.267-.099.478-.422.478-.703zm7.481-.506c-.394-.127-.731.112-.731.534v1.055c0 .281.21.604.478.703 4.317 1.575 7.397 5.71 7.397 10.56 0 4.838-3.094 8.987-7.397 10.562-.295.098-.478.394-.478.703v1.055c0 .422.323.66.731.534 5.456-1.744 9.394-6.834 9.394-12.867a13.449 13.449 0 0 0-9.394-12.84zm-3.544 3.839h-1.125a.564.564 0 0 0-.562.562v1.744c-2.222.31-3.67 1.8-3.67 3.698 0 2.461 1.49 3.418 4.64 3.84 2.138.351 2.742.815 2.742 2.025 0 1.209-1.04 2.025-2.489 2.025-1.968 0-2.615-.858-2.854-1.97

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	66851
Entropy (8bit):	7.985006004539967
Encrypted:	false
SSDEEP:	1536:+jT78fA1liQfyMGtPRB/9NHT8+p690Vjv6XjPC+MjG7p8T:M8DtH9NBI8jC7jwG7p8T
MD5:	56C929800203DC54878CC7CB05D49CC5
SHA1:	276517E532FAC6BDCF11086945FE71D42EB457AE
SHA-256:	EADF9A8173DA3E4FA1AE4D12A3EF8D4048C33DF4D667DC08C9619151E5AF0D5C
SHA-512:	BA3F5AEAA519FFFE625397057D3F4CC9B3B9ABE84B63D4666407008E707F8A492FAFE8A4B74BD3E33FB3A952B5D495E86C75946BF5BD8D17D45560CEB2FE701C
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/b8/b9/b8b9b67aad5b4627db15b960e8b956fa/b8b9b67aad5b4627db15b960e8b956fa.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................R~3z}&ihj#..%..,.H0.Idd.....j%. fi..4..L.4. .MDa&Y...Z.(...`......L.......4.]..Q.r..$.0`..`.f.I(.B. ..@l1f..iP6.F...RA..M...}...3.P...Dt.MW.&.1.#.n...T.g.4...:9..2....D.a.Uj..b.I.%J..........dKhd...30<.....}.Et.+.T...Ch.o=...X.xt..o...........,jfx.a...k...yJ..l...w./d`!^.y1. Y.....%%F..V{...Q.uo..PM<.+.....:F.<.........x...zTuV.7./T....VO^v.I:..O._.]. V.%\....,.hd....P.;y5.{.3.TC:RmB%._..[.8:m.....f......j...........3pn<...g..".W.NOd.u........U.._/u..... ..(2...C.[{..........s....I....M.qu.S6..3<W.D.....V.2..^o.).....W.I..`.~..*...k..>7.B..........RZ.KK#Cw.';._...3$W..V.=...&...4M)..vN...%.'n.W.]-.V..u.Z6.....}.R..`m...W.&n.7........=.)#,

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	66646
Entropy (8bit):	7.984470585083938
Encrypted:	false
SSDEEP:	1536:YYK0zQIhJloiyQPowfQkcDMDk8PxhhFY0j6shXH6v:YYt8ILUwfYizxhM4phXm
MD5:	74449ED2ACF097C062DC531D0B9F9543
SHA1:	AE1CDA237C92EEFD15C95BFA96A984886EA19CC7
SHA-256:	4C0F9F6D914E98F6F190758AC7810CD93D6508AFF8107C443D79DAF142F1FC7B
SHA-512:	4386C89103FBD51EF6B1B2C14701CB58756ABFDEB387DD4B307FF846428F997F5DAC2BA06EA5FE389BA337F3A82C040B1F95C1106D056FA4CCC6271B0A872334
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................k..Y].81..E.V.c.nQ.}..l$g.....Tt..S....9.......y...D.H9.H..F.@.j...3._.x.>i..>.] .......J.o...0..yU..g..%.Wf.^Y...[...l%.........X..zJ..U.{E_-'<~+L.U_.zAO..A.._B...&.Iv..m...8j.S#1....(......Z......M....#.=....@6O.88.H..F.\.'.-....x...,....V.#..N_../1z...u.."S..7.W...Y.5.}N1......ZTii3Vg.4.l.Y..fU.:F5.Nc.....a...>o`,o:....^l...q..k..?.......9.?7N....F{.4.L..-.MQ...1......Q.....!~.dZ....hX.(....#Y#.H....0..I:&....i...plE.\.......$U.\..*.kkl..;..ho.ng.N..\..FN..%.I....y1}.Y. J...b.ql..HN7p...h\....r.....<.[..!8...e5z.h...a......K...\A.6.R)..,.)\j......oF...Nw...5_B..3."P....B..V0.....U.3..6....^-W..-........!Q..tJ.V...s.......&!....>.TB]...Z...B

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65468)
Category:	downloaded
Size (bytes):	114973
Entropy (8bit):	5.293698456873672
Encrypted:	false
SSDEEP:	1536:LRD1/dGd+XTWaxsZ9ZMJ2DlvzAkaggUwEqcNBsf5V9pQGu1ulpgxgKVw0MwGYzt9:LhwDVAmbG5V9CRgKi0M7mgFHhLlS9H
MD5:	C9D8A7523921951F3DC02C71193D6FE4
SHA1:	575BBB766459FB6D3A077D1B641C44F5251DF098
SHA-256:	B0BFB0EF4FD78092A8B572592FB791D4C443093C3A1D218A6B3F2D2540BBC35D
SHA-512:	4976FFCAA30F347BEB06439DC7E48FF8398DFCE933561543C2E50541708FFBF364C765AA9B755A2E03EEAA7300FAD5FC5622ABBFAA532B381DCB8CD1198B67A9
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/app/v2/js/head.min.js?id=c9d8a7523921951f3dc02c71193d6fe4
Preview:	/! For license information please see head.min.js.LICENSE.txt /.(()=>{var e={755:function(e,t){var n;!function(t,n){"use strict";"object"==typeof e.exports?e.exports=t.document?n(t,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return n(e)}:n(t)}("undefined"!=typeof window?window:this,(function(r,i){"use strict";var o=[],a=Object.getPrototypeOf,s=o.slice,u=o.flat?function(e){return o.flat.call(e)}:function(e){return o.concat.apply([],e)},l=o.push,c=o.indexOf,f={},p=f.toString,d=f.hasOwnProperty,h=d.toString,v=h.call(Object),g={},y=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},m=function(e){return null!=e&&e===e.window},b=r.document,x={type:!0,src:!0,nonce:!0,noModule:!0};function w(e,t,n){var r,i,o=(n=n\|\|b).createElement("script");if(o.text=e,t)for(r in x)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function T(e){return null

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 13580, version 329.-1049
Category:	downloaded
Size (bytes):	13580
Entropy (8bit):	7.989333155573648
Encrypted:	false
SSDEEP:	192:/yDh0QnKydNXWbuhQ1GhRE35ZO8QosdzsvamFBxe1p7LgOOoScfrrzQXcOYtP1h:mrWihQ4nU5ZBH4AvamY1VObUrry6Pv
MD5:	E07D9E40B26048D9ABE2EF966CD6E263
SHA1:	C744217CAA82B3245CFFA2714AAF2EC9F749614D
SHA-256:	6A16C04229BC2B4DA226EB97E68D94F49BA6437B7B5E16C14A101B21A29384E9
SHA-512:	4275EC48BC24143BF793D2084445231D3552DC64296BFFDF7B9AE83417D366F050688DE45E8736E7204DE00AE621DE79E2AD5D5F998E743B72C13229DA229669
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/webfonts/fa-regular-400.woff2
Preview:	wOF2......5........,..4..I......................?FFTM....`..Z.....D..Q.6.$..T..6.. ..U..+..ke..l...5.E........1.v.]K....e..p...0Z...m.h.mf..J.~.!...!x.a..T.:}h.z.."...T.1...b.'{...!........_.8.....n*-..G.kR..hB....XS .4.P>...Jls..n.....- .l....mQ...p,p..u..hV...S.g....5.u.v..V.X6n.-...d...v.B.......%..Dv.0.D.......H6.Kl...........p@.....9.....l}.....=..P?3......K......3T..,....`i....3J~.....:~~..R.......^.PN...o......`...\ .4....{....O.j.d[-.m...u.I.... CG...z...V.M....\.e...%.`.Y...%N.s...L..08/.....iK[.....G.(9....j..7..0..Z...1.b......-J..%.....,'`..I.'..=..y....r".~..{CN..~..5W....mN...v...U...kj..a...Q.u..pv<>. .....k.:hi...................yD.....s....O.^.+...c{B...#.3..7V...0....r.........vf........w$.#.+\..}........x2..& .O.0\$.P..h.y.JVQ........=\../.._.p{..G...h.....7..W..#..;...=.IIn.S...M..X&.i..n.....brgd.,..h=iF.]...H..d.....L..e............\Kl.wuPg.qV.v+S.......Ae}b}..^w.c;..x.^....n..a.;.o.mz.........e.....t4..O._.......z..Z%

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	83089
Entropy (8bit):	7.987160176504003
Encrypted:	false
SSDEEP:	1536:qoL1DM5LS0MZxvy6j3JxhIiOW+8mfo0O1jaD8pNrNlENi7AJlizlC+nKoPiSyK+f:qoLpMNTG59xCWn0Ow8PrNlENi7AXizl8
MD5:	224BBE4D0F32851E9D2370421A6D5A9B
SHA1:	4BD878C24880381336347DF1562CDA9FFD570234
SHA-256:	69CC3CB0F68C07496DFBF7683F4B2A8990B1D463FCCA9E1A9ECBD6EF5689B48C
SHA-512:	33BDC1949D264F5A0EE4AE7D8CFFCD5105E1FB23557B22179534B6A729EF6C2AE3D23710B71B7A044466DFDDBEA705E466F0A28CB17DD1B79B5CF6E7381C961B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................<.f.W............/....[..CN..O...w1...w.).l..,..../K..9<...-......-...F..\..n..6.}...?......WR..9.=y..ff}....<..5.m...ag.Q... H.A.t..=...Z`..M...........Q.z........s33........m.(.!...-....>..33...\t...f....N.@........_.I..B...KK.&.."...J.N.aC.'n.W....h..fc...\|........!r..-MF..>6.....E.V.7........6m.CK".p..........n.k...?2..o.L.......}dT..k-.f.fU.V.-_~......m..q.k..ky....u%.q.x.gE._S^.y...(r+.....+...SbI7=......./e..)~..D..uL.Td.[..:.-...c..%.....2`........9.Vj.7.ou.o.......ln/.J.>.G2P....c.(m[!......Ci....I..w.d......c%V2E.xT...zMK." )....3D.B..n^WSW.M...6r.....0..U.o.Wuo..oyV1...ynl0.....D...Nd\.=.Z.n.Uoz.....YK..F...E...w`..j.[

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1465
Entropy (8bit):	4.5023529319478515
Encrypted:	false
SSDEEP:	24:2d54uk77MMpf1ymbsBKpSIbzTEGW+c3EZcl3Ma2h1EtU1b5SGwxq1FJmFJDbfste:cC1QmYLI3TEGW+EWmMpLeU1btwUAD7p
MD5:	FBCE27C7963B12186E1ADEF88DB8DAAB
SHA1:	5856AD879F967859ABCAFB07F836A9FBE48006FB
SHA-256:	158F37D287A28B352A06D27DB911F3104029C501F29BE7CFB9693D2600DA3C6D
SHA-512:	1EB443C2AD5E2C0564041C67B1BFF4D345194585BD96CDBD8FE1E07B74F7573106A05120BE76F8BF43B0412BFE3C9E524D107A55F075DD9412714D0134B7B655
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M18 0C8.06 0 0 8.059 0 18s8.059 18 18 18 18-8.059 18-18S27.941 0 18 0Z" fill="#F7931A"/><path fill-rule="evenodd" clip-rule="evenodd" d="M23.115 25.005c-1.295.47-2.5.308-3.068.232l-.042-.005c-.27-.036-.727-.12-1.215-.22l-.808 3.015-1.856-.497.795-2.966-1.413-.38-.795 2.967-1.856-.497.794-2.967L10 22.71l.979-2.127 1.11.297c.373.1.538.107.734.002.195-.106.29-.322.34-.504l2.057-7.68c.13-.481.125-.622-.03-.929-.155-.306-.666-.478-.96-.557l-1.072-.287.516-1.927 3.652.978L18.123 7l1.856.497-.798 2.975 1.414.379.797-2.975 1.856.497-.806 3.011c1.36.457 2.32.996 3.041 1.902.932 1.17.472 2.645.35 2.994-.12.348-.46.992-.891 1.35-.43.36-1.313.597-1.313.597s.851.432 1.357 1.08c.505.646.748 1.613.391 2.837-.355 1.225-.934 2.38-2.262 2.861Zm-1.939-5.427c-.3-.267-1.01-.708-1.912-1.015-.904-.307-2.1-.562-2.1-.562l-1.066 3.98s1.225.357 2.065.517c.84.16 1.746.18 2.234.06.487-.121 1.0

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	85422
Entropy (8bit):	7.984774989533944
Encrypted:	false
SSDEEP:	1536:0LG7l3mFbSVS1SsLUAgqle7XBFEqbirlDjhCdIGnTvpebSByBOtEqM9:3c+4BUA7I7xFElpDsdxT6pQE3
MD5:	E0C04111944FFD080476727318E540F0
SHA1:	F0D8E1D1F13C32CCA05C3BF6213EEB8391A861C2
SHA-256:	2D359BEC4BB94C0AC427D16BCAF45E2F12B16F2020E07019A68EB8D6537B791A
SHA-512:	97A68FE4D862BBB87C3FE56E626D47BB497DF8601DFF98FD0BE8AF4332614DAD67DB414A425DC632AB75A3D1DFD64C251AB2E9DEDE2CF8649BE1A1A051354F65
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/70/c3/70c31e2b9f0136a10872f07d9c635df6/70c31e2b9f0136a10872f07d9c635df6.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................v%.\..pY....4.s......f...S...A{.E...(o.....D...P.r...d...2.+)...~..@.ip.)......~.NE.N..>MCwud.3...]*.Y..{.r....3.1..v.>s.^>..2......7..Z...iN...}:\|+.......\!+0O.53.....r...^...6..y.r..2.,a.....zE.C8.&...&...KIt..=.9n.$".......?..:...g.z...6....G..!+.G0Tff....[.l...u3.`.de....J..r.]{....'..9.my5I....U.S....d.........^:....F.8.-;;E .FP.}!....x-.qf...4!...wt%..~..,.p..:R...^..........@..F.:.}.S..v...I.....L...+)".....^.......K....h.O..%....e.0....w....e...B....r.I....\|.g..w.^.s......n.rg9.3z.G.'.i:V....4........EW!.iJ....s.....8...-...CKH.?,..../.g...p.h.P.3&....U..J.b....bnj.v.n.r.z....r#......<m.95.d.8.D..h=%.}.t}"y.ueK?2.6...%..{\e..

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	95345
Entropy (8bit):	7.988175488268464
Encrypted:	false
SSDEEP:	1536:ZXhOEAtB6Y8hdmpUjgjuX/pKwQqJ/HUzalRUbLDnOaH/cNMj3HQE1+yexf4fUrdk:DOEc67mpmgjg0wQqiD/XHkCv1+yRfdGe
MD5:	96432FAFABE9D2D0840520B97E8FCC9A
SHA1:	29944D4377F105857775B8C581C4C3997E5D26CC
SHA-256:	0DEA0B33068A1C25D39FEB83CB4074B7FBD027DFFECD6F3BF35E0A2B169CD0CD
SHA-512:	17EAC4D0880FA849810C6EC29A34741FF9C2A84F40386DDC253C9D5802DED4D278199386F431CC8C9B719CC50BE6215660BAED0E20B44F4DB7E1FB9050DCD8B3
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/c3/69/c3697f53f903ddeb948f34cd439edbc9/c3697f53f903ddeb948f34cd439edbc9.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................MP-_.G.=.w.....f..w..Dq.S.]...].Li..9"....D..l..7..I...O!f......:29.L..HbBz...E.u=;.X.H_....Z)LtnM.......dW{MRy+...;.....d.T.]6h;O...1......C[......3.......s..e..o.1.&B.}..(.&%o...o.....jf.`.....[VM3D.........\.....qd.??.....~.@S..`..E3.m..Qc.\!.~.........k.p9p...K..=.J.-n".4.}.....W.<...3.QF.rQ.p...+....8.{.....K....;v.....)..._...;........D9GE.lb.s..iU&j..7..<....`}{..A.I..!.)R.f8c...~e.@.+..6Tb5.V.v.,W.!2;.R.nC}p..h/$..m.*......m....;v..G..2..]2...t..4.....`.M..!?...qX.....R.7.=~..]f..E.........OS..I!s\|..%.J.4..[_X...#.......&.TD.C.V.!4;....4..dQ.........=......i.....:....._..A&.Re.u.Z.^.b..p....u.....p.r(4.M..A.@r..DQ.E?u]x....\|.

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x370, components 3
Category:	dropped
Size (bytes):	52963
Entropy (8bit):	7.979863120366721
Encrypted:	false
SSDEEP:	1536:hTwSeRld0CwmIUvGXpYhZ+nQ5DCY4Ivw5QhWNLL:+SMfKQAY4IvwWQNLL
MD5:	904D53CC2CBD927FA0730112AF375566
SHA1:	A170BA9E6554E5A3F230861F7F7B244517115F85
SHA-256:	D74E34211AD23A4EAF47F3D53FC16515278B91A170AF58A2FE50C96E486DFD83
SHA-512:	7E343F408BBF4515156B81B7A41782DCD1FDF16D8EDDBB24835A0E45C5E374423DE6207D03FE648E4BC5D02D2C51DDF18A90FBB202AAF5DFE729DC5AA97C7CBF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................r....".....................................................................................dk7.k7.k7.k7.k7.k7.k7..7......o"...3~.'..}f.-9n.&...3s.S..Z\|....Hq..j..9..p..f.......z..w..1f.^..Y......v3...N..3.x......^z.........i.H..U..H.8..z..yY........7Y....p.#...^.V..`.%...........M]I.( ]...y.M#pRa.:R]...so~.#,.v..d.......`%5L.J...t.GD...YS..H{i..$.X..R..0])..c....S.r[A:.^[_..n.........XCF...G....&..,..9(.......~...O:#r.a(...6.....VzE`tZ.o....F...Iv...H$..}..U....$...$7-8.F(...QJ..j..g".....1.%\;.^.. u...............v../)..<.g1..\|.<....F3+....2..6.._...n.B.q.'...v.W..G.z.....1.x.\|d7?.A..N:j.mf..;d...U....A....+d..!..qB.\.0.dA..Ds...@.......t.\.Xp.j.vdq.e.)y.{T.......5u&t..."X. .T.~.....)...\....sQ.V(?.Jw]AG7...y)uJ\|^/..S.T..r

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	7277
Entropy (8bit):	5.509775887543341
Encrypted:	false
SSDEEP:	192:rjKfQK9KyK03XK/KsqKIrKW7KSKBKC3sKUKMNKfK3nKrKEKT3AKrKjpKJFH:CftI/y6ySXW+f8QZRRS3KuBjduoJ5
MD5:	3E50EB380C8ACC74A00B7EB6FEEDEBAA
SHA1:	04E29BF2ECCA02119278BD5973D282BE09EDB38D
SHA-256:	EB1D13E9D8E7ADA14F17502BED543EF7A083936B16BC88C8F577C2BCE45A2BB7
SHA-512:	F840620D37F1C7A3CC220EE1C221020EC7D19F7826AF1C10598F1C0663885570B7E049AA66BBB7BCB9D399977FA5E7167A34B063E68E74E07454C5392C97F216
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3&co=aHR0cHM6Ly8xbW92aWVzaGQuY2M6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yt1utwy5xg8e
Preview:	<!DOCTYPE HTML><html dir="ltr"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<style type="text/css">./* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. f

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1008 x 80, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1862
Entropy (8bit):	7.61929216019955
Encrypted:	false
SSDEEP:	48:LiL+8ATwHFLWnW5MVBsQt+TjESf3Z/MWgJJSLLCCu:2L+9TwHMgMLsQt+TjL/Z/MWgJUc
MD5:	FC1DC753EB729416A57C831EA8AD096B
SHA1:	342D91DC0A6EB226A09812E9704ED02ADB97D9F8
SHA-256:	6E2B727927DB030E2D4DDC3C63CDAC43342C782B48F5C36BAEFB65D56C05BCF3
SHA-512:	7DF3109DEFEE3B1D32C13016E7F2E7B8AD4422998848D608E9AC460A451FD4E0C8EBF13F383367B1940D38E18369F526C5225B5C6E0A142A45769E3E8C0D7F9B
Malicious:	false
Reputation:	low
URL:	https://app.plus500.com/Resources/dist/Resources/images/plus500-logo-menu.png
Preview:	.PNG........IHDR.......P......unO...iPLTE............................................................................................................v..."tRNS.i.D.3-.....!wU.....c.M.<Z.).q..J.....jIDATx....r.@......%..*j....]+....".0..7[..s0eB.y.lF.r`.....>....}"(8..DPp........A.!.'....B.}.D.3k~.goI.p..`..........S6...K.}"......>.BP..d.'....8x.S,...K.}"......>.BP..d.'....8x.S,...K.}"......>.B..]!wa.....>....}..<.l..<..@..E<<U..a.....>...b.>'.\|}.\|.....}J.E...[.2).9...O...~........dlb.CP(.}..F....z...e.>...KM....){.l. $(..QF.....1...+D..A{..O....n..W....x\G.....,....0..3.dC+m...FA.}...]..x.....\|y,...>....j.u.}.u......:..<.....z.2.....=p}......w.3...>..gi...y..A..AU.......9..u.r...{.,/....4....o.[..1...ka.m.s0A.%...M.t.g..j..?.......Q.9.,...m.4..'...4.............I....y. =-&..G;..M.O.<."...=.>..~.YD......r......2...y..G.Te.9S.....".....).\|...}.........Yy..J...d../....O.AU........."..?..%p....[6.z4.Rz.(......j......JL.f.....?.}J...)(.....O.A}.K

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3363
Entropy (8bit):	4.273868897690424
Encrypted:	false
SSDEEP:	48:cjfL3cXglZKkYOOOQVNoRagYOlEVd8quEg4Y+ymSMOejqZv71mzYeXO1LWzYH:UMXgDskQVyROVdRuEg4KEOe0D1+Y
MD5:	D272987F843F0984A81025C1E367A721
SHA1:	555ABF469C95CD3B7A6507B4B106F6FAB4ACFF60
SHA-256:	1AC9BAC60EA7B7B755462333F8696E70DA74235DD937BE792BDF8A6AA62ACA9F
SHA-512:	C0BE46B42E7F08B9DABEE4902726C75BC568D39C3ABEB3D680BB12DEA27CB72BF1954054C2194294D729AF651603DE6011CB8C36C2506A91BFD5FD09A64786DE
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/bci/navigation_icons/bcime-01.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><defs><style>.cls-1{fill:#f79797;}.cls-2{fill:#fff;}.cls-3{fill:#ff6bdb;}.cls-4{fill:#a31bb7;}.cls-5{fill:#3fea73;}.cls-6{fill:#276eb6;}</style></defs><path class="cls-2" d="M18,0C20.84,0,23.52,.66,25.91,1.83c5.98,2.93,10.09,9.07,10.09,16.17,0,9.94-8.06,18-18,18S0,27.95,0,18,8.06,0,18,0Z"/><path class="cls-3" d="M1.36,14.49c.03-.13,.08-.25,.15-.36,.07-.11,.17-.2,.28-.27,.11-.07,.23-.12,.36-.15,.13-.02,.26-.02,.39,0,.13,.03,.25,.08,.36,.15s.2,.17,.27,.28c.07,.11,.12,.23,.15,.36s.02,.26,0,.39c-.65,3.1-.31,6.32,.98,9.21s3.46,5.3,6.2,6.88c.23,.13,.39,.35,.46,.61s.03,.53-.1,.76-.35,.4-.6,.47-.53,.03-.76-.1c-3.11-1.79-5.56-4.52-7.03-7.8-1.46-3.27-1.85-6.93-1.11-10.43Z"/><path class="cls-1" d="M13,34.25c-.25-.08-.47-.25-.59-.49-.12-.23-.15-.51-.07-.76s.25-.47,.49-.59c.23-.12,.51-.15,.76-.07,6.92,2.13,14.44-1.01,17.77-7.53,.06-.12,.14-.22,.24-.31s.22-.15,.34-.19,.26-.06,.39-.05,.26,.0

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39767)
Category:	downloaded
Size (bytes):	43171
Entropy (8bit):	6.072760892799744
Encrypted:	false
SSDEEP:	768:7J5Ab8SnVCFqwivkAuLabUnQt2weVCFqwivkRRRum6AlVFyICfHXs:dyASniqILeUQmiq/m9W8
MD5:	5016E169748A6E203FDF156B9AB6DA33
SHA1:	E882467086E870ED3D166982CF27D8B855078CE0
SHA-256:	8356948D6F3BEF342FF37A4DECA7F6B64B58CA0B90CA128C1929C1BB76CC7A54
SHA-512:	CD47019302E7B9CC90EFD0FFD5CA921C139013DB9B3F44CAD87D1AE8536BA4F827EF67C01956A7569FCD73F23DF3746A0AD2E178D122D110D9584AE8BADBE7F9
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
Preview:	/*. Copyright (c) 2023 Apple Inc. All rights reserved.. * . * # Sign In with Apple License. * . * IMPORTANT: This Sign In with Apple software is supplied to you by Apple Inc. ("Apple") in consideration of your agreement to the following terms, and your use, reproduction, or installation of this Apple software constitutes acceptance of these terms. If you do not agree with these terms, please do not use, reproduce or install this Apple software.. * . * This software is licensed to you only for use with Sign In with Apple that you are authorized or legally permitted to embed or display on your website.. . The Sign In with Apple software is only licensed and intended for the purposes set forth above and may not be used for other purposes or in other contexts without Apple's prior written permission. For the sake of clarity, you may not and agree not to or enable others to, modify or create derivative works of the Sign In with Apple software.. . You may only use the Sign In wi

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	80025
Entropy (8bit):	7.986169711171559
Encrypted:	false
SSDEEP:	1536:d5rVbq7QrH/z8NkZGzq8BjE76HQ/xbbXJBH0Fziz+:d5dq7QT/z83Gkju6HobNR+B
MD5:	7A42C890601F6A699A46B5D011072CE1
SHA1:	29744DF72F49B21824E2FA61389791667097859F
SHA-256:	29902218B0DF20C834F4DC393B7FCDFC63F723AF4D65409F125A3541BE0E648B
SHA-512:	2167979EE1A2C347555C3F76C861EDED410EE675FCAE580250273DBC92AD1E0B5E20C4CE097A8D17B22A848DA92C2D442DD7DD84F365BF84CB5C855B87A9937D
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/97/53/975337a7c0992d113d956c6a15682043/975337a7c0992d113d956c6a15682043.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................N..'3...kJ:.]..Us..I...+e....{w.,,....b.&.wa....~Xh7.....D.....#>c.Q.V...7..s...o{.....xo.z..<...q%........}C.E....j\|{:.....!R..\|.Kq..JZlG...&.k...~..~...My.<mgLt.t.Y.5_.M...L.....Z=5_...-.<...e..\W.?.b.\|.._..v....O....v..jG+...../.&x....,.Wc!..ngz.]...k..hg.:\iKu.<.....%\|D..........W...:./..B..y._./...-...[.%V.s7{^.......ni...L4...o..\0.......Q3#.t:THG_...x~h.+...v..9....B.....".>.h8......i..O.g....JA.h.j..M........4.........ARXN..Re...mYU.......<\|Z..Z..K...v.U[T..&..A.........I.....`..7......wY!].%B..a.....n..Q;".G!.$.Vk._.A-..5..n.5...:f..c.....m.^G]M.v\E.\|..KQ..1....u..1..?.....M?\|..e}..Z.h...."..c}cU...R..aXM..v.3....../=

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4338
Entropy (8bit):	4.048036657333424
Encrypted:	false
SSDEEP:	96:TRaiLw/6yC5EQqVmYnLoB3Z+3/R0RW26SDqa3QD5:9FLw/Bt0YMqZHwBQD5
MD5:	AC1EB184A27E659EB4C67D563ADDF430
SHA1:	4344E1FC603F76E043DB3C899490B7618CC23E42
SHA-256:	4363E8AF49E111065EDB56B8D115D8DA95994008B18623B0FB178D0C59A92C38
SHA-512:	27CB7F318B2AD5ACBB48E822BDFEC325050E1A333CFD034C577BB7AA9976C8F55D68088C3730BE43FD1C9E7F15E6878EB855CC13BE88145AD788BE2B62146BAA
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/leverage/Cardano_2x_Long.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M18 36C8.065 36 0 27.931 0 17.998 0 8.064 8.06 0 18 0s18 8.07 18 18.002C36 27.936 27.935 36 18 36Z" fill="#1B5477"/><path fill-rule="evenodd" clip-rule="evenodd" d="M17.823 6.001a.734.734 0 0 1 .694.773.736.736 0 0 1-.778.69.735.735 0 0 1-.694-.773.736.736 0 0 1 .778-.69Zm10.636 6.122a.731.731 0 0 1-.326.984.74.74 0 0 1-.99-.325.73.73 0 0 1 .326-.984.74.74 0 0 1 .99.325Zm-1.037 12.426a.74.74 0 0 0 1.021-.211.73.73 0 0 0-.212-1.015.74.74 0 0 0-1.02.211.73.73 0 0 0 .211 1.015Zm-9.708 5.883a.734.734 0 0 1-.694-.774.736.736 0 0 1 .778-.69c.406.023.717.37.694.773a.736.736 0 0 1-.778.69ZM7.48 23.326a.73.73 0 0 0-.327.984.739.739 0 0 0 .99.324.73.73 0 0 0 .327-.984.74.74 0 0 0-.99-.324Zm-.31-11.231a.74.74 0 0 1 1.02-.211.73.73 0 0 1 .213 1.014.74.74 0 0 1-1.021.21.73.73 0 0 1-.212-1.013Zm11.672-1.007a1.05 1.05 0 0 0-.992-1.105 1.05 1.05 0 0 0-1.111.986 1.05 1.05 0 0 0 .99

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	75568
Entropy (8bit):	7.988951630654816
Encrypted:	false
SSDEEP:	1536:X/3C5W7UADmuKVAhcDdJRtmxuIK7FmDSoLor9g35WuGV8VGtlARZV1Dk:v3C5GXD/KFJRPVISoLormWuGVQGsw
MD5:	413935175B692C03C3CC78C1BC9C2E17
SHA1:	996EA2750FF85304E7F93C39411B8AB7F63DFB88
SHA-256:	668B3FA9A76500B8E32EE30FB716CB8227A352577FEB0FA24E23E2F88F9A933E
SHA-512:	517E9CB45BD2BF669ECCAE33B6A933A9C1D881B4A16506CDAA67DD238CBF189EC4910C07E98C0F90A4921EED851067127D0CD0A35AACE86B1E2EB86344B80429
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".........................................................................................\|..3\|.j4.....5c....;.....M.........:u.......Y..+....\|.....}.6........~.%p6..v._.L..i.. u.?.3..P.io.......I.6.!}.5...../.r.6..S.~.:.....#......E...e....7........$..v..3is.&U4...e3..8....6..1<.h..-.{.U..O..R...Gu.!..Q.8.P........A.0..u....zz.>{.YH......g[..il..........P.V....N.l.T..Ut......-...^v..H.A6,B..O.n.....:........SV/4.@.....;i.\|.m.7.6.)6#ft....b...I..~0.....>.K.U...-..e..nEw..\|;.^u.;.#..<O.+../r;.f.k.............t.2...q.FEF.6._<..1pW.I.. .YH%..7q...g2a.......:....h\|..]E.,..L.7..P&.8..M`.......A...-..{.......LG...X%FhH*]B.aF<.....E.N."Z...@..e..\..q...@..i.g.Ek...(`..XEHy...D.Q.Fp.........G.2.$...rChw..0C..ab.60.SE.-zD..~a..

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59348), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	264768
Entropy (8bit):	4.971679067524929
Encrypted:	false
SSDEEP:	3072:axQtdFNOUN3cxLs3jlcT5YW9gBLC42KNJgGlGmcccGmJs:axQBNbNuLs3jlU5YAGlpcGmJs
MD5:	2BAB27F6DC7B0BE0D6F89A688D9E0E24
SHA1:	A4D82486AD7BC4F49B02575824B093A63C5F2594
SHA-256:	B6E9FF8561886D592AFC02DC686EADA844F4AD440BB96DC89D03B6B4AFF6DF86
SHA-512:	E2250C0C5B39ED6D96679182B221A624CA1C1B904FBA586F3446E032EECC342AF151917B00F9BE2242AB2B5122029EFF48195B2904B522F21676516E3F3B5CCB
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">.<head>. <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>.. <meta name="robots" content="index, follow">. <meta name="revisit-after" content="1 days">..<meta http-equiv="content-language" content="en"/>.<link rel="dns-prefetch" href="//www.google-analytics.com">.<link rel="dns-prefetch" href="//www.gstatic.com">.<link rel="dns-prefetch" href="//fonts.gstatic.com">.<link rel="dns-prefetch" href="//cdnjs.cloudflare.com">.<link rel="dns-prefetch" href="//static.zdassets.com">..<link rel="dns-prefetch" href="//connect.facebook.net">.<link rel="dns-prefetch" href="//graph.facebook.com">.<meta name="description" content="1Movies Watch Movies online for free, Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/>.<meta name="keywords" content="1movies website, 1movies is, 1movies s

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 362 x 361, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	42970
Entropy (8bit):	7.92395563176268
Encrypted:	false
SSDEEP:	768:IdPD9llD9bEURVQNMoK9VqO0uHtVMndmo2TbVA3Sj2Zv7qnZmvMGLW:IlJ1bjVgfY/ydmZXVAW257qnkkGLW
MD5:	CED44FBE038B9CFFC00272A6EA8B9E95
SHA1:	F68B5796B6129DFCCA2F45F5614B880E8ED7F50E
SHA-256:	BE600483660E3DEEF8DBB01AD71F503F94DF774C627E2DE84179D77F2EBA6647
SHA-512:	01D16A676DFC0B12DE25060F4F6141F0D6DE61973226709095925913300F2908E1E061D664B8C6C58C02F736BA867801CB7369685D563E306F2032DA0DBE5299
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...j...i......LbM....sRGB.........IDATx..kr. .F..=.K...,.T..~.<..f.da;.0rN{.".8G...yx......a.?.b2.F&....+.3........!.m....r...p.s......u'".5....T5E.I5......G....F..{.....u:....2..0....ji?..F<r+.\3Po. .;......7.<....r.>].W-.._..$`.e....o_.\.....vl..........!f.Q..jKh..O...Q.y.....i'..[.bnA..f.&.1.o...........@E..;U}....q......~.q.......,.]...)j..5}......v..g.#..Dl..........*j.B.1..w>....}...8....a.(.?.BD~+....6 .r.YJ...\|#......;z...:.....K9G.?/.w."+)...sG......(.k..&g..z\|..1^-..p%....{..y...IQ.J.F.`r.@.S..k.....9Qzm....M..0$.fE...........M.S.nd.U\$..'j.C..K........[...~.. ..;..-....z....^q..1../..`.5..^.L3..Z..RC..V..j...t....^t..nUkD.jQ..\|\|...r>G.W...5..5....S.O.A.......Q................"Od.z.....C)j....._..1^)h.{.\....w..m.:.>.oL...t....:....#.\|...v.."M...8.`....]@.E!..t...5..N........5..:J....e..+8.:...j....=@.EE..u..mA>.=,.+..?..4i.0.rWPC..dM..~x........\PC.PC4s}Xw.u_..k=3YP+KY.},hc.g^3.P...a...!.K$.V.....-..

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	3.7712411708182247
Encrypted:	false
SSDEEP:	3:YWR4b5LkLLyAUKtfJacpn:YWyb5L1Dof9p
MD5:	864E7D68C370E4A879D3EB16E3E13287
SHA1:	0C5CFBDCA1D75586473370DC5514B1907F8E4EA8
SHA-256:	90099DEDF118253BFF1798E5F8C3BAB386D90C673FB759AEB4D9E383044F3904
SHA-512:	7979A66B33395EA6BBD5CF815031A67A01CB736A53375A8B2D51BADAF742A4A64136A60EFE4CB4BA06EE938337B83E8749418075C65249DFF9ABFDE6069FFE16
Malicious:	false
Reputation:	low
Preview:	{"status":true,"banners":{"top":"","middle":"","bottom":""}}

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	762
Entropy (8bit):	4.74279305027894
Encrypted:	false
SSDEEP:	12:TMHd64lWNxMiLjIoIDwUDgXf+fr9838DgXf+/hIDgXf+fr9ZQr:2d64lSxMijI55Dgv+fhHDgv+/hIDgv+w
MD5:	681A635E9E3CFEA14B58C3267FF59D89
SHA1:	8F866188062A65FAEFEE26E120075C53E3663EF5
SHA-256:	529A028192E3DE84BC47EB367CCB64C592B94468010D491F045EB771B24A9D04
SHA-512:	AF8B4CA5C27B337142040DC7E51099C0868E195DE263902B445938CEDD69618EBBACDAFEB5FA050208A056EC03C47463F7103AFD0E0E980EA5257505C386BD30
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/xpt.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#AB9883" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zM8.437 18c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73H8.436h.001zm6.75-9c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5A1.125 1.125 0 0 0 20.813 9h-5.626zm6.75 9c-.468 0-.888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73h-5.626z"/></g></svg>

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x333, components 3
Category:	dropped
Size (bytes):	63372
Entropy (8bit):	7.9853185865767875
Encrypted:	false
SSDEEP:	1536:Q0pQ1Tts/WgFZRBlH+m6vgcQ5fDXpc1YlIr0:Q0aoeg7Xj557le0
MD5:	DCDDECC165619764642D0E2464773DF5
SHA1:	8CC86DFCE1DE158694C6C1413F3C96D2A06FC2CD
SHA-256:	DE73AC6811CBCD8BBBE4979065318557F31CFEB2F1DAB795853D97A38DBC24AD
SHA-512:	2B35A638CB3647C913F02ACFEF673BB437C06F96A612F9BCC7C28330204ECBDE0D60BEDAC387931C3D32E8DB39AE3D683991A29ED745F39B97DE4D61F00ADB4A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................M...."..................................................................................O.....Ia!....I!^.....sUGO{OQ.GWj...$.@...`g....D{i...R.W-QN.j....}/]..\|..N8..$.zg/$.oW3"..n...(..Z......J.....CJ.,,m.m..3..j......M.G/.d..X.........1....d9...F.D.&T4.N.F.21..A,....;i.J.......ej.,....u.....,^z+9S.T j...y.b..P..^..QF).e.Qk..f(..l.c.._8I...7....W..q7........&.3R.0.q.:.E..B...(P..LVMn...\.....h[.bt....O8e..#M.\|.....s...xFa8...&6.....0.H.".Y.......k..wh5..1CD.8...U..6.V..Vcq..3.+>.+A..O.....gm...;.e....U_.H.{..os+L.....M....]j...E...kd~q.l...<.5.z.oo.5U.L.15..^.$b..?.[B+!.L..]_4.C_<.3:Z.l..(.....YH...D....k...\H......X.f..p..(Q....g......]Oa....R_..lDL~..9..^c.,"....cs'..Ps..#....8YF@.k.......WE.......Un..U....J.uL.cjj...1Zzv

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 280x200, components 3
Category:	downloaded
Size (bytes):	26786
Entropy (8bit):	7.962415697440149
Encrypted:	false
SSDEEP:	768:90XzvnTxc0cJsrf7Ov3O8tkTjLWJLdgq6aKLO/:C7nTxcDJsrfkkTjLWJJD6FLO/
MD5:	9BC988339A105A5514EC011FAEB50C9A
SHA1:	51C5A3FF061455B50B07DDD0238640513C52847C
SHA-256:	8E6CD89675D6F69ABCFB197B9230BDC69C6D8AFCF663960473B72AA9707B4A44
SHA-512:	426B11FE5C117D1717DFD27591751287056F99C8FDCD1A0F330B8E250F5F89CF5F0B8B56B9874FDBA9C2334744AE50AD64025D8FABDB6C47EC8B294199B63946
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Blog-nav-thumb3-280x200.jpg
Preview:	......JFIF..........................................................................................................................................................................:..............................................................................................7^..q................2L~....89.....m..mp...."............=..~......Eo..;.[.g.oL...'...........w..mm..Y...B?.....9k....7..t..,.+.6....7#..[<..e.........L. z.Hp...]#..:.S.g=z..g.C..M....>....I.$.....GI..............<.../<.:oV.m.W./<..;.\|C..\|\|.....VWj.e?..........zM............',..I...2.S...&.~...Nu...-..6.....zm.s.wh...........At...T..W.I.....v..........pL.L.W:_...\|..l.o.}zY.vuq.........n..].....r..I..@....].V..v3...g.6.=P....{.).......%m.....hY..l..d....j.....)..P.VG.J.<-..l...;..;v.........E......G.m..N..........fe..P.R....(..c.Z[.^.......E.\|.`..=.S......JO.........=#.._U9..q'i.X...N......t...l.!.L..8.y:.adU..e..1W..x.{;...0.}.{......%?.[..k..(...(...\#.tV..[Sy....a..q.,..

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	954
Entropy (8bit):	4.5678266880158915
Encrypted:	false
SSDEEP:	24:2dPl2jxY8f+MnWF2b1Xshj0AWUFCw0pRJorALio8:ct58WjQwj0s6RJorA2f
MD5:	7BCE84E41A8CE73920A3EE78B3946590
SHA1:	02651EFFD84A2CD52D376E8D10177B013877E026
SHA-256:	DF843128758B0AA7FF11B6DF2AB291E1E69418D7B471810AE673D98154C0E32C
SHA-512:	411BC5139ACBBF868333277FA00FCF3EB2EFA134EB82869D4FE4D1A1E031F150C3217DB79C2FC156A8A9976D242745A6C29B66EB1B57F0674D28A8721CAEA30D
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/eurostoxx50.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg height="36" viewBox="0 0 36 36" width="36" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="nonzero"><path d="m18 0c2.8367471 0 5.520171.65619537 7.906802 1.82505292 5.9774641 2.92747555 10.093198 9.07079278 10.093198 16.17494708 0 9.9415547-8.0584453 18-18 18-9.94064062 0-18-8.0573906-18-18 0-9.94064062 8.05935937-18 18-18z" fill="#f2f4f7"/><path d="m19.6532922 7.67617271v10.20042639h10.2004264v1.7739873c0 6.613286-5.3611276 11.9744136-11.9744136 11.9744136-6.6132861 0-11.9744137-5.3611276-11.9744137-11.9744136 0-6.6132861 5.3611276-11.97441369 11.9744137-11.97441369zm2.0511727 8.14925369v-10.2004264l.4571204.01763318.3848356.02181161c.0581156.00398347.1132193.00814104.1653111.01247271l.2764086.02807926c4.6202436.58013027 8.2790704 4.25046842 8.8416238 8.87615794l.0263765.2680299.0224471.338011.0185179.407992c.0027588.0738304.005354.1505767.0077854.2302388z" fill="#876f58"/></g></svg>

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H+uZYn:euZYn
MD5:	46DF3E5E2D15256CA16616EBFDA5427F
SHA1:	BE8F9B307E458075DA0D43585A05F1D451469182
SHA-256:	AF3248D0B278571EFF9A22F8ED1CEB54B70D202B44FD70ECA4CA13A5771CECC3
SHA-512:	88FBCC0A92317A0BADE7D4B72C023A16792F3728443075BF4B1767C8A55258836B54D56B24EABE36AE4EF240F796B58B8F1EA10C7E3C146BDE89882FC9ADE302
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkSgqcux1ce-xIFDZFhlU4=?alt=proto
Preview:	CgkKBw2RYZVOGgA=

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8754
Entropy (8bit):	7.939820160824363
Encrypted:	false
SSDEEP:	192:/e4n2Ox2yjb42Qa2w4C4T+04r4p0oy0W2fjDx:24n2Ox2wbkzw4Fj4r4pa0Bx
MD5:	7AB7A55370DA608D2BF85E1DD6691ACF
SHA1:	3221437F06D4F0563DC8ED3373C6038E8241C060
SHA-256:	3EF66A1721243E6411727960EF0C67DA8654E1974A016B5F9FB4A4ADD744EB37
SHA-512:	3AAF7A8310E00815CBC662C80DF18AAAAAA0A1475723EB52052F1F9527563529F3E30C1A3DC5DB8E39C7B67F6D7F260F94B04A00934FB95B2B3F8AC34DF7B877
Malicious:	false
Reputation:	low
URL:	https://1movieshd.cc/images/group_11/theme_3/favicon.png
Preview:	.PNG........IHDR...@...@......iq.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:7EF2E079233011EB9F5DEBCDE5465CAA" xmpMM:DocumentID="xmp.did:7EF2E07A233011EB9F5DEBCDE5465CAA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7EF2E077233011EB9F5DEBCDE5465CAA" stRef:documentID="xmp.did:7EF2E078233011EB9F5DEBCDE5465CAA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>hL.P....IDATx..{y.].y....m.wu.v..D$K."0...=v.gp0&.3.......CU......?..r%...<$..lWBR.......`..Y......%..[..~....}...

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65250)
Category:	downloaded
Size (bytes):	878107
Entropy (8bit):	5.2736158137499025
Encrypted:	false
SSDEEP:	12288:FE9efYQ0OBhwDu81pDVt6B9d9AKgfkuMer:FkefYQ0OBhwDug6B9d9AKgfkuMer
MD5:	4EE1F96333BE935FAA34D7AC6FC6E0DD
SHA1:	1CEF0BB934FC9928C5F7E089C9136275FA69A226
SHA-256:	D5174CCDA48752B04E0A1DFA8AF248EAB55BDCDB9CA327A86D60AFD87D7F91F3
SHA-512:	69250A68E383A087B8C4B61E40D053E05B75BA0AFCDA74C1ADFB7516540B4A2AA05923F546BACB1ECFC92EAEF69AFEF0B8E6A783A373ABE8EAF82FE12739D6E8
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/js/WinJS_4.4.4/ui.min.js
Preview:	/! Copyright (c) Microsoft Corporation. All Rights Reserved. Licensed under the MIT License. See License.txt in the project root for license information. /(function(){var ki=typeof window!="undefined"?window:typeof self!="undefined"?self:typeof global!="undefined"?global:{};(function(Bi){typeof define=="function"&&define.amd?define(["./base"],Bi):(ki.msWriteProfilerMark&&msWriteProfilerMark("WinJS.4.4 4.4.4.winjs.2017.7.24 ui.js,StartTM"),Bi(typeof exports=="object"&&typeof exports.nodeName!="string"?require("./base"):ki.WinJS),ki.msWriteProfilerMark&&msWriteProfilerMark("WinJS.4.4 4.4.4.winjs.2017.7.24 ui.js,StopTM"))})(function(Bi){var Bs=Bi.Utilities._require,Ie=Bi.Utilities._define;Ie("WinJS/VirtualizedDataSource/_VirtualizedDataSourceImpl",["exports","../Core/_Global","../Core/_Base","../Core/_BaseUtils","../Core/_ErrorFromName","../Core/_Events","../Core/_Log","../Core/_Resources","../Core/_WriteProfilerMark","../Promise","../Scheduler","../_Signal","../Utilities/_UI"],functio

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/basis?uid=febb0cc9-a867-4e01-8b79-fa3d8a253c66-662bf35d-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47976)
Category:	downloaded
Size (bytes):	513745
Entropy (8bit):	5.504113359873094
Encrypted:	false
SSDEEP:	6144:FhPtykyhGjbrbNgPzaIWbEahfHVWeRwxFgsaKXxYsqDX67BrS4z9dintsmwVm17i:FhPtHNg2IHsf1WeRwTlOsqbwz9whwVci
MD5:	679EF4747F980471C7C5F842F22355B2
SHA1:	F707CAC8131976465484AA63250A17D9CD1D98C6
SHA-256:	07039F791B14C7D112F9A0229A834F0DEDCDE7BCAA97FE377957565799C740DA
SHA-512:	E87FD025A6AA16DEDDCD9890AD39FBE5950DF5323F55CDDF539D2449C5FAEA20A31CEA2183FE09F7904DEC7EC3634A709FFA2506F7DC1FB08A79777C3E4D8A66
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/loginBundle.js
Preview:	(()=>{var __webpack_modules__={19913:function(n,e,r){/! airbrake-js v1.4.3 /(function(d,t){n.exports=t(function(){try{return r(Object(function(){var u=new Error("Cannot find module 'request'");throw u.code="MODULE_NOT_FOUND",u}()))}catch(a){}}(),function(){try{return r(Object(function(){var u=new Error("Cannot find module 'os'");throw u.code="MODULE_NOT_FOUND",u}()))}catch(a){}}())})(typeof self!="undefined"?self:this,function(o,d){return function(t){var i={};function a(u){if(i[u])return i[u].exports;var s=i[u]={i:u,l:!1,exports:{}};return t[u].call(s.exports,s,s.exports,a),s.l=!0,s.exports}return a.m=t,a.c=i,a.d=function(u,s,c){a.o(u,s)\|\|Object.defineProperty(u,s,{configurable:!1,enumerable:!0,get:c})},a.r=function(u){Object.defineProperty(u,"__esModule",{value:!0})},a.n=function(u){var s=u&&u.__esModule?function(){return u.default}:function(){return u};return a.d(s,"a",s),s},a.o=function(u,s){return Object.prototype.hasOwnProperty.call(u,s)},a.p="",a(a.s=0)}({"./node_modules/error-

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	760
Entropy (8bit):	4.617670976934863
Encrypted:	false
SSDEEP:	12:trz4uC3oCNcvE+nG2uHKp7TTXEdefzBlRa7wc7HgQaWJWUR3pR+CFjb/lRFzR2:t/4u7u+juwcdefzBlRa8oHZaWJbR5Rp4
MD5:	D3A90161A921A24B34DFD802B9F34D35
SHA1:	104A6477E9104866E004DDD96E9B1E6BCCA26D14
SHA-256:	8FD97C7FBF95637C8964F4ACBFA014F74D6D3B667190C6A598711E766757CC83
SHA-512:	9603A7BDBFBC3C064AADFC0A345640A0004620A8B7E957D7B37FDF64CEBC47FA381A24AFD3189DC0763801C6CDCC38171FB2533824DA53FC334DA927BF8CD928
Malicious:	false
Reputation:	low
URL:	https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/sc.svg
Preview:	<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#F2F4F7"/><path d="M22.201 18v4.2h-4.2a4.2 4.2 0 1 1 4.2-4.2Zm-4.146-7.003a7.003 7.003 0 1 0-.416 13.999c.121 0 .242.004.364 0h7v-6.912c0-3.86-3.087-7.059-6.946-7.088" fill="#20EE82"/><path d="M27.9 8.1c-4.79-4.79-12.187-5.383-17.623-1.78.157.174.292.368.402.575 5.16-3.405 12.188-2.838 16.726 1.7 5.185 5.185 5.185 13.623 0 18.809-5.185 5.185-13.623 5.185-18.808 0-4.538-4.538-5.105-11.567-1.701-16.726-.208-.11-.4-.245-.575-.403-3.605 5.436-3.01 12.834 1.78 17.624 5.467 5.467 14.331 5.467 19.798 0 5.468-5.468 5.468-14.332.001-19.799Z" fill="#7F8C8D"/><path d="M7.211 7.21a1.4 1.4 0 1 1 1.98 1.98 1.4 1.4 0 0 1-1.98-1.98Z" fill="#20EE82"/></svg>

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 507, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	69728
Entropy (8bit):	7.986369675781586
Encrypted:	false
SSDEEP:	1536:lM/Rfe0lHMmv0nSxlGYj05dWbhhZYs7dYyG7UFMBuAJV:G2CHGy4YAnUhP7d+UWZJV
MD5:	56F8D8B3D83CEC1839F27E1C102CED20
SHA1:	0685247239AC0A3DC2E4B60D3BAA871313DC4182
SHA-256:	C13E2F5714AC3DCF791436982B34D91184E991D344477538E52B1D7CB61FA688
SHA-512:	3148068E557AE8B9687BBA1F024EF7B2E3C6729193AA08B1F57FA689AD23B643ED79EA26D997675308F1D07FB06F18865DDAF472B472B25DAB385583AD25F5F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................Q....sRGB.........IDATx...1..0... (.....#.l.>...<r~..xDF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .\v.^5. ......\F.@.@....boa....z.b/.(.Z(.im.............lq.....M..}..........#F...p.1.....#F...p.1.....#F...p.1.....#F...p.1..........2.8..R....7.....R......6..z.....m.c........9..x.,k..........e.eY...f...\|`....pS.R.Z.F.Q......t:........x<..f+..h4.,Kkm.O.Z+.....r8.6..B..L&.......M$..\|.V.M&....W..m...\|0....\..H$.~...[$.I.R.B....f....6.[I.[.9.......F.!>H).Sk-..x<R.P(..F_^^...........U..N.

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31224)
Category:	downloaded
Size (bytes):	320674
Entropy (8bit):	5.554429024962914
Encrypted:	false
SSDEEP:	3072:aeQaf5qZ3fhO+Lwc/8ZG1LceF2/ea8LR9Wk9As6UOQPGA2hTnXDL9btIMoAnc9v9:zQX5NLWYLceF+oqTnXP9RIMhcf
MD5:	37E7030019AA06167543DA30229FC915
SHA1:	967E7AFCEFCFB5D1183F7E396746D9CC96DFDF3F
SHA-256:	2646EDACA3109C91523DE5CA3B1E0A4B144C6D55BE89A0F51A17421FAEE96730
SHA-512:	554D3B0002814A078427FC4C19A935C6869290887660EFEBDD7244DF57AD3F02411BDE73A4A8E770CBB51D70361E95B5D9E770F35F2E199D9F9C2FE6D89E804E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-P3DDK3&l=trackerDataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"112",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__v","vtp_name":"eventCategory","vtp_dataLayerVersion":2},{"function":"__v","vtp_name":"eventAction","vtp_dataLayerVersion":2},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"eventLabel","vtp_dataLayerVersion":2},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"ThemeMode"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"IsDeposited"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"IsRealSession"},{"function":"__v","vtp_dataLayerVersion":2,"

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	7277
Entropy (8bit):	5.51288539711842
Encrypted:	false
SSDEEP:	192:rjKfQK9KyK03XK/KsqKIrKW7KSKBKC3sKUKMNKfK3nKrKEKT3AKrKjpKK+H:CftI/y6ySXW+f8QZRRS3KuBjduoKu
MD5:	DE2E855E465231FA2B4BAC9DA3A9BFDA
SHA1:	45047D0A30239F3ED47D838CB359E43DE96C2D61
SHA-256:	68CE91DB3B6ED85B5BB4FA15A2CD7E5A4C9FF2D673684622EA82D893457AF609
SHA-512:	5938C687104C7DE23FE96FEEB8D7D1CFD7536F4E18264933D144E5972FF0D66A125774CCFB951F443921F6D4E065CE391F51F32EB759192BB8B33567CD221D50
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3&co=aHR0cHM6Ly8xbW92aWVzaGQuY2M6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=7fmypvln0sab
Preview:	<!DOCTYPE HTML><html dir="ltr"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.<meta http-equiv="X-UA-Compatible" content="IE=edge">.<style type="text/css">./* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. f

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1923
Entropy (8bit):	4.772733999562925
Encrypted:	false
SSDEEP:	24:2d593RL9hf6eaxM2Edsrr8EbZi8Y+WRNAtLSOmXvCdr2b1uKOL5N0ipmxNmQiTJg:cLpAr1/YReSO0efvLsipmxpKM9/tESJR
MD5:	208B36D307F2516BA3FC7C641F504F6F
SHA1:	C297A3C2A715929B15966F7ED2F337889C63D97F
SHA-256:	1E4D089E7D231BB7F7B1DF97FF00495C27BE0CEF93DBC57A1FC89AEF98630011
SHA-512:	2074289A116B4029B07A8273616A682749D14983B2390482728453F8DDBD2773F086695D9EFB614E431B2045A13D1449069F49CF781D9C747BB97155F821087B
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/aapl.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36px" height="36px" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>assets/stocks/aapl</title>. <g id="assets/stocks/aapl" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="asset-bg" fill="#F2F4F7" fill-rule="nonzero">. <path d="M18,0 C20.8367471,0 23.520171,0.656195372 25.906802,1.82505292 C31.8842661,4.75252847 36,10.8958457 36,18 C36,27.9415547 27.9415547,36 18,36 C8.05935938,36 0,27.9426094 0,18 C0,8.05935938 8.05935937,0 18,0 Z" id="bg"></path>. </g>. <g id="apple-black" transform="translate(8.000000, 6.000000)" fill="#000000" fill-rule="nonzero">. <path d="M16.2927914,12.7285134 C16.3264599,16.3542674 19.4734973,17.5608128 19.5083636,17.5761711 C19.481754,17.6612193 19.0055187,19.2955722 17.8503529,20.9837433 C16.8517219,22.4432941 15.8153583,23.8974118 14.1827166,23.9275294 C12.5784813,2

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.6234651896016468
Encrypted:	false
SSDEEP:	3:YWR4brk7VBn:YWybrm
MD5:	D3D22A2C483EA5BF5E1B887D19B710E9
SHA1:	31E5F0A94EAC2CCFF4801AA97255701460C3C078
SHA-256:	4C7BF259CF71E49AA671EA413172DA39DCD72C8B7E34948C01E21F5585370602
SHA-512:	85EF64BF19C397B0F34DDF055AA27F732078C8DACE8DAAA3AE3BC9D50B81453C3621EA936FAC49BF9F194CA9905717DD8BDEF9FCBDDE972FD099FB3C022714BE
Malicious:	false
Reputation:	low
Preview:	{"status":0,"error":1001}

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	615
Entropy (8bit):	4.772753180567369
Encrypted:	false
SSDEEP:	12:t44lWNxMiLjILoxwr/jCFxhX5NN7EE2BnYvTha2Y:t44lSxMijIcGLChGOrI
MD5:	784F2AADCC5B3DA45DA5F62D282F95B0
SHA1:	E45136F66AB9EE3EA80798792344FF1B821CF118
SHA-256:	207805A02F76341ED72F5232AEC32380C174C09F2D9507BA1B9EF5360011062F
SHA-512:	433655FCDE87FEEE1625ECF335EE7198BFF444A7C3267F0AB1C720160F4EC3CFCC0510F9599572F11959B94E3DE983FE4D7F88785D30091C84C6A5293B832767
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#F3BA2F" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zm4.654 19.905l-4.66 4.66-4.659-4.658-2.714 2.707 7.372 7.373 7.373-7.373-2.712-2.709zm-4.66-4.664l-2.753 2.752 2.752 2.752 2.75-2.75-2.75-2.754h.001zm9.282.043l-2.71 2.71 2.71 2.71 2.71-2.71-2.71-2.71zm-18.565-.002L6 17.993l2.71 2.71 2.71-2.71-2.71-2.71.001-.001zM17.993 6l-7.368 7.369 2.71 2.71 4.658-4.658 4.66 4.66 2.711-2.71L17.994 6h-.001z"/></g></svg>

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1957)
Category:	downloaded
Size (bytes):	3093
Entropy (8bit):	5.589738031541895
Encrypted:	false
SSDEEP:	48:A+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tk5YHIeklweDuExjGx:A+5AQHAray48f5JMYHIqeDu9
MD5:	AAC09965E24D63FD5BBB4C2BB262A6F1
SHA1:	6682D34FD98E25E2B17A00683066AEF68290F92A
SHA-256:	DE169EF135FDAF96BAA70D4055FB84008C2FC03F823D8105A53BBF7415D6C1A7
SHA-512:	FC1C2D3AAA4EE07CA7C3FD10DC8CAD06BEB01B4E31371215EEF26A7AB021EAE234E5924F06B8ACE34549BD17A0EAEF5A7FF81F0B4F71CFAC05EB512B090D3448
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js
Preview:	/1714156386,,JIT Construction: v1013080259,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	875
Entropy (8bit):	4.961773334929131
Encrypted:	false
SSDEEP:	24:2de4lLNH1uaSfb9JfxhJeKBISChJEmBHxhpJnSgyRMG:cb/PahJ5hvBIhhimBHxhjSgy
MD5:	8E997B7E5B9CD25F29F1A81EE8FD285C
SHA1:	9CE531A0BE26209196F1E0F65B0AAA378B8E3220
SHA-256:	0D466683B926965C039AB4C039CF91C934D91C85B5C22CBE4E7366439C58B650
SHA-512:	F888A256AD2B1CF27C85797C2893A819830384744B4B3B5FDA016F21EDEFD0944C1E03C43741F59E5E7644A39703C7407B2D0EC244ED38567918B9A92701BB13
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/metals-1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="v2" xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Bitpanda-Design-System-" transform="translate(-139 -7906)">. <g id="Shape-gold" transform="translate(139 7906)">. <path id="Path_35" data-name="Path 35" d="M18,0A18,18,0,1,1,0,18,18,18,0,0,1,18,0ZM14.063,18H8.438a1.125,1.125,0,0,0-1.053.73h0L5.7,23.23A1.125,1.125,0,0,0,6.75,24.75h9A1.125,1.125,0,0,0,16.8,23.23h0l-1.687-4.5A1.125,1.125,0,0,0,14.063,18Zm13.5,0H21.938a1.125,1.125,0,0,0-1.053.73h0L19.2,23.23a1.125,1.125,0,0,0,1.053,1.52h9A1.125,1.125,0,0,0,30.3,23.23h0l-1.687-4.5A1.125,1.125,0,0,0,27.563,18Zm-6.75-9H15.188a1.125,1.125,0,0,0-1.053.73h0l-1.687,4.5A1.125,1.125,0,0,0,13.5,15.75h9a1.125,1.125,0,0,0,1.053-1.52h0l-1.687-4.5A1.125,1.125,0,0,0,20.813,9Z" fill="#b68e46" fill-rule="evenodd"/>. </g>. </g>.</svg>.

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42581)
Category:	downloaded
Size (bytes):	52162
Entropy (8bit):	5.563308734774281
Encrypted:	false
SSDEEP:	1536:5ikrBHzmL9Qnw1F5HcLCvln7SMSfJT3OGyQB4eM63:jQlvln7u9
MD5:	A76622845618827910084FCA8D0F0C18
SHA1:	4A239EE9AF12B53749ECF4FF3572DB9278A34025
SHA-256:	88CD43C3F5453F7B4DB2CBE884B47DB3C8317860A2CE6E9B2BC934FF4B8E32EB
SHA-512:	DB03B2D9CC4F1449C7D9E3B00D529B22243DC5191EE4A612EDEA9D69863F3377B08CFF92E43551BDD9991F2116D384E5AF0B9FEF82442E41D0BFD5C094119EB0
Malicious:	false
Reputation:	low
URL:	https://tags.bkrtx.com/js/bk-coretag.js
Preview:	/!.bktag - v3.1.10 - 20210521;.Copyright (c) 1998, 2021, Oracle and/or its affiliates.././*!..es6-promise : 4.2.8.Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors..Permission is hereby granted, free of charge, to any person obtaining a copy of.this software and associated documentation files (the "Software"), to deal in.the Software without restriction, including without limitation the rights to.use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies.of the Software, and to permit persons to whom the Software is furnished to do.so, subject to the following conditions:..The above copyright notice and this permission notice shall be included in all.copies or substantial portions of the Software...THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,.FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE.AUTHORS OR COPYRIGHT HOL

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1256), with no line terminators
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	5.854429514687165
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAPN+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEcbKonR3evtTA87b1Muh6LrwUnG
MD5:	034423E160C23A6EED462F1C0E8545DE
SHA1:	9F81EF0EABCB4BCDDC1391808911F8EED84003DD
SHA-256:	B584B308131E6ACB9BBA558B49D2DFA97AA3412925D224C0CE60C7A82D7FC3C1
SHA-512:	4FDBC48BD26F59F0977280200700552A2AF33299A45CBF79D7CB6FB9CE19569B41C7029A761FF5149CAF42CD387BED9E15892D1B590888C764BCAF744949A216
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOV

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	44392
Entropy (8bit):	7.97676572186442
Encrypted:	false
SSDEEP:	768:o0NX4VgQIEPzHp6mS4k9bVxvgOmxVROPIkAQMDBixN+AaTGcQkNOyqN3:pQgQDJc4WPoOmAPItQSy+hTvbgyqV
MD5:	69E7C1CA94FB231833EBAFCB26186EB8
SHA1:	3836C3F7C4B8279DED2010E6FB743CFD41F3B8E8
SHA-256:	3A6846998F736F5B05472FE569B0525B2D9FF662B2A0F78009FBCDF2FA255D10
SHA-512:	9C6B04BA0D2B7364252A8024F1B88DE40BF8D260DDDD387BDFF7FCB34A24FA447B0243E254E0887DFF2CC323F84566527036CDB103DD7A90BEFF37454E2B04C6
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".................................................................................L.+....J,8...>`#I..+.=.h.T....J;.....`...Q...............x...Wf.CX..[T..-.V.Kp..l.Jy.Mz%.V.w5..=^..^....f..Q.. .@i.4..........X...BCzT..Ep.7e.......Y..eD.`...V..W......7c.oH.t...`a`..X.P.......]...t%.^b.....z.$.."\\|..Y4e..y.-.ib...%TV;.1iK.W.d...IRQb@.Q........\..X:.>.yu.]..@.A.Bi.r\.\|...N'..F&0}X.R.....&.....:..................@`......uo4^.r............k..r..j..$....g.};..j..6s.5rE!.(.e......'...... ........Kz#.dh{m...d......e.+.r.b..U.v.^.]...\|.}r{s....F<.<.KW($..W......(.+.S.aQ.j`..}a~.....{3..r-.].<.;G...b..W[o>YT..]...7..i.g.G]..mU..ajP.......}..sz^..=0..%.L.^.H]..f.....t....C.s....v..nR...V..QtG...KFt.KU..jV6[.a....$..k..g

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	downloaded
Size (bytes):	332406
Entropy (8bit):	7.986118589999881
Encrypted:	false
SSDEEP:	6144:9qhLePpalpvHZBQlA2RN1nvJLrsW5yAeSx2nfJYgTkFgLGn:9ieol5HZURN1nv1rsW5y9S4fLGn
MD5:	7438E6F05F39A1E62106F72BB1D95F86
SHA1:	3430F5B32A9A3EF3FC43E503988D7DB1DC65787D
SHA-256:	307331B3DD72DC3D23F0FE66315014BBAE1ABC4287ACF3ABB1CED895443E045F
SHA-512:	FF4F547FBAD0839A687D72AB4A477B35DBCE7053B3CEFD3D1BB2B5F7E526D3A46EB4B9830523D95AF249922B3A4BF5DD57B91997343176AC5E73E6A14FFAD33F
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/1200x600/793/8c/c0/8cc04d9bb6609db3bf10b294153239fa/8cc04d9bb6609db3bf10b294153239fa.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X...".....................................................................................7...`...t..M...Q0`.B.X.xP..M.....9.. ..........a......n.....r\O..:..9..429o.w..x.FQ%\....g.Z.(.r.\|..."....W...')...)r.~\.cVY...U.&c..Rqg.^pkYWp...>M..Y.fE..GHWXI.V...]...v.0()`...F[....24...@...$..... .vM......4p...CYn.5.D....!......c.?\2v.4T.7:....C.\|.......PJ^.O...4..5........)..0..8L...#..4.QH......R...aB. ......#.f......+`.*...<.6/.UL."2y........{[...1..^....tl..L.....6...0..V.....QY.p...'......I....s...U](dp.....c(..m.....;..<.<...3......H..\..(.j...I...z.o3{.#..F.j..M.fjr.D.....I&...%tj..m3..k.kZ+,....Y....&~.Z..X..5^..1....'!;..>lab.F ..D)s.D>L..+.e..er......cu....N.N......3A.r..H.#..:.P..0.h.>..c.W....).^.d(LY;..1.t\....h&>r{D.\.5.;

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1283
Entropy (8bit):	7.688564637926613
Encrypted:	false
SSDEEP:	24:TX9UnLfvC6YUHQ3+Dz1xAFkq/4I988ZWWAzJJOZZYXQufR8OD1gesCh:TXyzvC3l3pWq/PTkWAzJJOUXQq/BbTh
MD5:	FA763B97D1A01DEDEDE7B663CFFE25A5
SHA1:	31C64759AFFF3FADD0D41DA5716148DB13858D6F
SHA-256:	62FDF68EC095930F172B1FE7DAE379CFE5BEC74642DAAEFA82BF6AA2DACCE123
SHA-512:	D0A07C681D510F2CEE5056AABEEBDE7072C217935C417BB6A53B5F674BF1CCAF8C1AA3D42DCFD13752EB643A9ECF3C246F83F374DE8F0CFEBBE0EFFF21F77B93
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/corn%402x.png
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE.....@..@..@..@..E..@..@..E..D..C..F..C..B..C..B..B..D..D..D..D..D..D..C..E..C..D..D..C..D..D..E..D..D..D..E..C..E..D..D..........................................................................~.....s..r..g..h..g..\..[..P..O..Dd......(tRNS... 0000@PPP`oppp............................wIDATx...Z.@...P.h.T.n...5..".E"`.M...o.Y...%.x....N;%.Zw...........r.Z.A......(.....!..[.M4n......`...g..y..Y..M..H+D.>>.y..!O.-4f....cz......S.I2..T...G../T.2....Y}4Ljt....q..Q.L..Lu.e1..tB....m.yxZl...}.uz...E....)%...%quWZ....O..-dD.i".j+... J<.`....!m.'G.H.r.....#..f.....g4F&.#>U..R.E..3e.Z.6.f..B...l_......i.=7Wf.S"..$........V".:....T..}.8z/...U.w..\|...(P.>.:.RyLR .Rd.M..(.+."....J.2U.....U...e.....G...$.....s.DO....+...h.*.........v.<.A..h..Q9B.g.c....+j.r.F.X.8..(c....8>.....f..B3....X,.=l.#.b...D.........e....Z.U..0..g....2.1,..+rX...,o.J..m....5+~........t.e..0el.X..y..B#..?H

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	24856
Entropy (8bit):	4.654243973152658
Encrypted:	false
SSDEEP:	192:Y8FeB/wVIznk1vn00CndpkD2iPlMdtqImkT3OIB1UKDQ:/eB/wQnk1vlApkD2iPCLBeKDQ
MD5:	49218205A7FBE4B6B87FDE607B0C12D0
SHA1:	B467F049B207560EBA60CBC3B7FECBDC7D471711
SHA-256:	40E031494D2927E4CBA7CAC7D7D1426E0DB48C5A3E4FE7C51F7ADC31BFFEE5E2
SHA-512:	ECCE20D26AAD0EF7B1C9047C2F4198A662CEDB39C54D3D9DD26A64FC1EF003447C2842006AE859DA151AC2329C10C7D6412BC2C36319DDFF79E27AB2F22BF57A
Malicious:	false
Reputation:	low
URL:	https://api.bitpanda.com/v3/ohlc/eur/day?assets[]=B86C034B-EFE3-11EB-B56F-0691764446A7
Preview:	{"data":{"B86C034B-EFE3-11EB-B56F-0691764446A7":[{"type":"candle","attributes":{"low":"60114","high":"60194.8","open":"60161.9","close":"60172","time":{"date_iso8601":"2024-04-25T20:40:00+02:00","unix":"1714070400"}}},{"type":"candle","attributes":{"low":"60171.9","high":"60304.5","open":"60172","close":"60304.5","time":{"date_iso8601":"2024-04-25T20:50:00+02:00","unix":"1714071000"}}},{"type":"candle","attributes":{"low":"60208.1","high":"60355","open":"60304.5","close":"60232.2","time":{"date_iso8601":"2024-04-25T21:00:00+02:00","unix":"1714071600"}}},{"type":"candle","attributes":{"low":"60200.8","high":"60255.6","open":"60232.2","close":"60247.8","time":{"date_iso8601":"2024-04-25T21:10:00+02:00","unix":"1714072200"}}},{"type":"candle","attributes":{"low":"60247.8","high":"60312.4","open":"60247.8","close":"60303.2","time":{"date_iso8601":"2024-04-25T21:20:00+02:00","unix":"1714072800"}}},{"type":"candle","attributes":{"low":"60166.7","high":"60323.7","open":"60303.2","close":"6019

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=m4omg6v&google_gid=CAESEKQtqQHSa0ynV9jyDPDHJVI&google_cver=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	86173
Entropy (8bit):	7.984626469631935
Encrypted:	false
SSDEEP:	1536:SVTn5POSLG7Js88LffsojaHDUg/hyiWLKcPQLKpm0kYb2ToslxNe8r:MT5P87OfDaHDbhyiWLW+00CTo0xr
MD5:	B28F309DB35D8608031C48E7E2C27B45
SHA1:	0A81EDB908E35B5EF4A11EE80D7D9D93B06F203C
SHA-256:	3187E00EEBB7F9EBAFA7ACDEFE3F269F0A7A0FB4B9DE55754D676B78778836B1
SHA-512:	6739162EAC199C66599505CB4CAFC5B7143D8FB3E0D794D51F224A1B5AE5C531C75F2D6890944C3B41EFB22C62C23FC92364A88EF0DA505446F7E62588FD213F
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/f7/a2/f7a29a78a44a887ce683d98430bfb2fb/f7a29a78a44a887ce683d98430bfb2fb.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................1U.b.OE...s.4..?<..I....Zb...v.r_..?.).zG...82..r.W.f.{...B.bFM..}}\|.@..^.\X.4..2Dj.$\7y..#.a~@.JpVD...Ec..!......'r..~'N......H..n...l_N..o...20.p@.wo.X.R.T>.A.GY.00..c....y.LL...3...Rs..n.>...x.......S.&\.vl.9+.#.G..)2........A...+1...`...... 0.F.;52...$J6W..j&/.\|_)..7'.....&'.\|..)..F...Q.R..x...P.%.....u).m>J.....g...5..p.7i3ecI.:...\|.p...S)C...z.=.C.).d....../....i....z..@.V .....1......#...\| ..K...o.0.l...2...Dm.e..d..p:.MH.....lT.Z.m....\......=..r...)Lx.F.\....4.g.uH.{..+...k(.p......l...++...Q....KM.?.qJ..&.m......e..I.E+6.6\....E...\/.-.....;S.`:}T.X.._...R...K-.^0c.....V.I....6..d...W..\.!n..r.6`\.t.....X.mg95..K.k.\....LWl^V...W.....]

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1529
Entropy (8bit):	5.126754316123062
Encrypted:	false
SSDEEP:	24:2d64lYmuOfYyMJLR8EXmGIyjsJPVwjsz72wjs5q6wjsMtKx3jsR7+jsWqq6js2:c3YvfxRt0h2y6WtZSm
MD5:	870F0382DEA95C8DC1965CD5B89F6583
SHA1:	9CCB8FBE06BFCF4DDAD5FB58696D172AFFC6E93D
SHA-256:	4E8AD5F694764FFA5E74B3A00D043846ACEE45A42BB8A3A3E94F20405C467674
SHA-512:	FD63815F35A3DEDBE6F70D6F24389127203B3052B896EDE5835C1855625849C6B3E813C9B4AA6979A76AA373B1F8B7D003DF7E199FABC9B25FC08CD2851C4A87
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_1306" data-name="Group 1306" transform="translate(-203 -199)">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(203 199)" fill="#f2faf6"/>. <g id="Group_1089" data-name="Group 1089" transform="translate(208.463 202.732)">. <path id="Path_848" data-name="Path 848" d="M4.537,13.845v5.577a.986.986,0,0,0,.986.986H19.551a.986.986,0,0,0,.986-.986V9.254a.986.986,0,0,0-.986-.986H5.523a.986.986,0,0,0-.986.986v2.074h16" transform="translate(0)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_213" data-name="Line 213" x2="1.96" transform="translate(7.344 14.337)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_214" data-name="Line 214" x2="1.96" transform="translate(11.557 14.337)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_215" data-name="Line 215" x2="1.96"

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	3.7712411708182247
Encrypted:	false
SSDEEP:	3:YWR4b5LkLLyAUKtfJacpn:YWyb5L1Dof9p
MD5:	864E7D68C370E4A879D3EB16E3E13287
SHA1:	0C5CFBDCA1D75586473370DC5514B1907F8E4EA8
SHA-256:	90099DEDF118253BFF1798E5F8C3BAB386D90C673FB759AEB4D9E383044F3904
SHA-512:	7979A66B33395EA6BBD5CF815031A67A01CB736A53375A8B2D51BADAF742A4A64136A60EFE4CB4BA06EE938337B83E8749418075C65249DFF9ABFDE6069FFE16
Malicious:	false
Reputation:	low
URL:	https://1movieshd.cc/ajax/banners?page=home
Preview:	{"status":true,"banners":{"top":"","middle":"","bottom":""}}

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (942)
Category:	downloaded
Size (bytes):	943
Entropy (8bit):	4.973522007401014
Encrypted:	false
SSDEEP:	24:9t91/g4edYbZvuHAiwremTAM4s8u1i8HYzb/yzcAczcAWMoFx:n9aEZ7XxR8/8Hj4On
MD5:	E155BFE122BB17DF1DFCC4C011D703E0
SHA1:	D2CCF7439035A23367D88BFD097B38EA90ADBA5A
SHA-256:	B9D84888250E34E57EBD5CC8F4C8DFC89037413051FD5D3D30557424B5D2E3D7
SHA-512:	01B77D50B9819A2231F4FEED7B7F8DEB516EC1A85DC25343102AB3D2FC4D5AC6F4DD96F4075A576BAE3191C6B053D8D38B913B489445022A8820626A4C8A27C8
Malicious:	false
Reputation:	low
URL:	https://app.plus500.com/Resources/dist/Resources/pages/offline/offlineLoader.js
Preview:	(()=>{"use strict";var p={},m;u();function i(e){const s=`; ${document.cookie}`.split(`; ${e}=`);if(s.length===2)return s.pop().split(";").shift()}function u(){d()}function a(e,t=!0,s=!1,o=!0){return new Promise(function(r,c){const n=document.createElement("script");n.src=e,o\|\|(n.async=!1),t&&(n.crossOrigin="anonymous"),n.onload=function(){r(!0)},n.onerror=function(h){c("Error to load: "+e)},document.head.appendChild(n)})}function f(e){return new Promise((t,s)=>{var o=function(r){if(r&&r.length>0){var c=r.shift();c.then(function(){o(r)}).catch(function(n){s(n)})}else t(!0)};o(e)})}function l(e,t=!1){const s=e.map(function(o){return a(o,!0,t,!1)});return f(s)}function d(){const e=i("Lang2CharsCode");l(["/Resources/dist/Resources/strings/"+e+"/resources.js","/Resources/dist/Resources/strings/"+e+"/resources.chart.js","/Resources/dist/Resources/js/WebCommon/Vue/vue.min.js","/Resources/dist/Resources/pages/offline/offline.js"])}})();.

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	78624
Entropy (8bit):	7.987943657319972
Encrypted:	false
SSDEEP:	1536:8/j/ISeqyKXYM9lrwqlUdqa+8wPzrm6Fvbgi5lk9ZMnDMml:K/ISeqys1lrwqlUdqa+8wPzrPzlkdml
MD5:	F94E6CA3C2ABE918AC39F5AEC94FA6EB
SHA1:	BCA6F0D7AE09F6DD63056EC10EDC95912C6928FB
SHA-256:	567024978F30AADC59179087B584E0F939692F625B8F87FDC02D361237D61A26
SHA-512:	E4695539B65D0C7C20E9F8B7308B9AAD194D93C063ACEBD99E2BF154CDB2407739E2C028AC98924A0E3579469B16911497A662145AA548601849F105C7EC291E
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/f5/70/f5706571721222f8411fe7ab58e9b5e9/f5706571721222f8411fe7ab58e9b5e9.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................$..f"/..7...qwtdF.w2..ks'..9.l...x...y..\..Ln.k.`..F....._d$.......Cj...f...d.g".3G...)x....s3.....t.nE.p..S...G........%m+.{:.n{I....m......=I..N7.a.IC..z..'5.f^.-..2.s......6md..D.r..k.n(.9.."....x...{.(W..KB..?j..k.I.F...\US.S..I...J.....;g"....k)......I9...3h.>o..".z.TW..#.EBP.[e...V...).._k........Vi....bf(.Ae@.v.m=....K.3.CC".Zc...I..aar......X.5...h...ky...[km{\.C.HJQ\|m4...J.o......]....v..}..Yi.>d..7n..\M.)w..k\|...].@.?9.+..A..SZ.A.?...Skmj...:.....uy...j...........Q.\[uM..'.YY.f...2...M5...}..H.FFV..;B..Y.1.d....... .D.......[.5i.*...,...o.!...M.....Q.cd.K.o...wv.[.j.!a,..-.....bi6636..iy.n.Z.e&...e...@..X..B..S....r

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50758)
Category:	downloaded
Size (bytes):	51039
Entropy (8bit):	5.247253437401007
Encrypted:	false
SSDEEP:	768:E9Yw7GuJM+HV0cen/7Kh5rM7V4RxCKg8FW/xsXQUd+FiID65r48Hgp5HRl+:E9X7PMIM7V4R5LFAxTWyuHHgp5HRl+
MD5:	67176C242E1BDC20603C878DEE836DF3
SHA1:	27A71B00383D61EF3C489326B3564D698FC1227C
SHA-256:	56C12A125B021D21A69E61D7190CEFA168D6C28CE715265CEA1B3B0112D169C4
SHA-512:	9FA75814E1B9F7DB38FE61A503A13E60B82D83DB8F4CE30351BD08A6B48C0D854BAF472D891AF23C443C8293380C2325C7B3361B708AF9971AA0EA09A25CDD0A
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.1.3 (https://getbootstrap.com/). * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(r){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},e=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(o).filter(function(t){return Object.getOwnPropertyDescriptor(o,t).enum

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	410
Entropy (8bit):	4.994300638999028
Encrypted:	false
SSDEEP:	6:7j+WZFVYmc4slzqBWGEabtG2cRSvFZ6uF9oChTrfNiRFIy/6qWLdbDy3G14foEJM:XHZ4MBWyRcSvFguF9osIFIySMG1So7
MD5:	46A990311976549A778E1263866506D8
SHA1:	DF8AC0E56E5517980F952090382241F545FF3B3A
SHA-256:	54F6F29D2CA041818A97C8B8754AB5D165E65B6B619311BC8C23CB57EBD9CB9E
SHA-512:	B5F126474A8207754A2A587A835BAFB3875992987FF21879DF90ADF3A6FF54194383BE08B2638F67157F0580550241120FF12F05254958DB66ABC9CC22266238
Malicious:	false
Reputation:	low
Preview:	Generated by IcoMoon.io -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">.<title>asset-eth</title>.<path fill="#494949" d="M16 0c8.837 0 16 7.163 16 16s-7.163 16-16 16c-8.837 0-16-7.163-16-16s7.163-16 16-16zM15.988 4.571l-6.744 11.191 6.744 3.987 6.744-3.987-6.744-11.191zM15.887 21.025l-6.744-3.985 6.744 9.504 6.748-9.504-6.748 3.985z"></path>.</svg>.

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	823
Entropy (8bit):	4.872125467728489
Encrypted:	false
SSDEEP:	24:2d54uQjIMMooZpWv8H1FIhNTEslBBlh1cweW4JAiJZVXPe:cqFoZpMhtlBBluW4JAsXm
MD5:	2027C97ADED45B9497802248686A2057
SHA1:	522867B502EED4E00FFFA5C90C76B5CDD8ECC52C
SHA-256:	E066F35BB16C92768F274C09DB5B7F669CD185699D5B758BD4AB469499E86712
SHA-512:	C357C0DEE21FBB2CCC83FA4354542AB0E340BA844332C938484DDCF98E1A4E1E33A17FD7B435E4F12FBF2F953013C038D9AE4C9A8CDB9F593A71EFAD345DDF18
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/leverage/Ethereum_2x_Long.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="17" fill="#fff"/><path fill-rule="evenodd" clip-rule="evenodd" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0Zm-.014 5.143L10.4 17.733l7.587 4.484 7.588-4.485-7.588-12.59Zm-7.7 14.028 7.587 4.483 7.592-4.483-7.592 10.692-7.587-10.692Z" fill="#494949"/><circle cx="27" cy="27" r="9" fill="#7921EA"/><path d="M21.34 30h4.533v-1.033h-2.917l1.693-1.625c.679-.65 1.138-1.3 1.138-2.2 0-1.272-.928-2.046-2.104-2.046-1.176 0-2.094.746-2.304 1.874l1.032.23c.115-.603.612-1.071 1.224-1.071.65 0 1.1.478 1.1 1.061 0 .545-.363.975-.755 1.358l-2.64 2.544V30Zm7.904 0h.86v-5.279l1.885 1.894.612-.593-2.927-2.926-2.926 2.926.603.593 1.893-1.893V30Z" fill="#fff"/></svg>

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	954
Entropy (8bit):	4.5678266880158915
Encrypted:	false
SSDEEP:	24:2dPl2jxY8f+MnWF2b1Xshj0AWUFCw0pRJorALio8:ct58WjQwj0s6RJorA2f
MD5:	7BCE84E41A8CE73920A3EE78B3946590
SHA1:	02651EFFD84A2CD52D376E8D10177B013877E026
SHA-256:	DF843128758B0AA7FF11B6DF2AB291E1E69418D7B471810AE673D98154C0E32C
SHA-512:	411BC5139ACBBF868333277FA00FCF3EB2EFA134EB82869D4FE4D1A1E031F150C3217DB79C2FC156A8A9976D242745A6C29B66EB1B57F0674D28A8721CAEA30D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg height="36" viewBox="0 0 36 36" width="36" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="nonzero"><path d="m18 0c2.8367471 0 5.520171.65619537 7.906802 1.82505292 5.9774641 2.92747555 10.093198 9.07079278 10.093198 16.17494708 0 9.9415547-8.0584453 18-18 18-9.94064062 0-18-8.0573906-18-18 0-9.94064062 8.05935937-18 18-18z" fill="#f2f4f7"/><path d="m19.6532922 7.67617271v10.20042639h10.2004264v1.7739873c0 6.613286-5.3611276 11.9744136-11.9744136 11.9744136-6.6132861 0-11.9744137-5.3611276-11.9744137-11.9744136 0-6.6132861 5.3611276-11.97441369 11.9744137-11.97441369zm2.0511727 8.14925369v-10.2004264l.4571204.01763318.3848356.02181161c.0581156.00398347.1132193.00814104.1653111.01247271l.2764086.02807926c4.6202436.58013027 8.2790704 4.25046842 8.8416238 8.87615794l.0263765.2680299.0224471.338011.0185179.407992c.0027588.0738304.005354.1505767.0077854.2302388z" fill="#876f58"/></g></svg>

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	768
Entropy (8bit):	4.715821773318826
Encrypted:	false
SSDEEP:	12:Uzb0n3GX/Ny1j2tQjsiSBFC4uEjsiSBn4NHO+rzm/Tt:vGPNyAtataFtNZzGTt
MD5:	151D8CD60ACEAEE5BC6122ED6366B4F2
SHA1:	3DBB06016538E131C7065F18BCB6E3E3CC62F0AD
SHA-256:	8EFD0521CCE7BEAA470CB5466CD00D3371D56C360DBECE970B01F6D58B8A2713
SHA-512:	E49C4684E8FDF6669790286CCA72BF45E016EB80569FCEB015C54852707635102C33FD169269AB4FE9C2C6710CE8539899801F77C77FE5AC7C9C20E3678CE984
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/css/shame.css
Preview:	/* ********************************************************* /../ Temporary CSS for Developers /../ Put all your css here and i will convert it to SCSS later /../ DO NOT PUT RULES IN APP.CSS - THEY WILL BE OVERRIDEN !!! /../ WINDOWS STORE APP ONLY /../ ********************************************************* /..../ TEMP !!!!!! /../.verification-center .method-list .method[data-status="verified"] .actions button { display: block !important; }..@media only screen and (min-width: 50.063em) { .verification-center .method-list .method[data-status="verified"] .actions button { display: inline-block !important; visibility: visible !important; } }*/..[v-cloak] {.. display: none;..}..

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	41383
Entropy (8bit):	7.9730855214483345
Encrypted:	false
SSDEEP:	768:mscoK6rs3IA8y+n8hLQmKcU5Uz6BbHlaZfSafWT+ew7311CPQyR/nY4ZST8H:YoK+s4jznULQmkUz6BbaVoGPCPQD4YQH
MD5:	748765C9E319EE1A4E6348DFF43D0515
SHA1:	F8C59F361038EAF601978F13F6F1B168F838D114
SHA-256:	A9E5874E5E0D3C09F51275A5D5FD606E88743C9DC08B6B0CE411BEBD9E26AAD1
SHA-512:	EE0148A0074B6B89B9F018BDBECC00D326FE928FB4F9833341EC91B36786975100AC89203A62FFDAE8D5A004ED662B303281D0D4B43EA6AFCB2EF5CD5430CE52
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/68/22/68223cf08a407a8c5107c603202618c9/68223cf08a407a8c5107c603202618c9.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................qG...%."Mu.6.....u.]u....tJY...mz.$.t..D..AP..N.$m[.l.4B...\I...2.hkX..(S...&.T..i..S.....nZ..V.....&...r$..22...V.j.......YBt...m.!..g.<..~...t){p=.....A.@6H.j..mj4.j&.%F.I....5?..7.S..^..ko......T.-...........k".A...>.t..D......\|.q.wU..Y4.Q..z....O....;.nh.6.E7.+m.V...R..7.:.....M.l.5.>}.[v...Z5T..m...m.0.e.U....p.`..w.6'n.9.B.K...h~Q.^.z.....;.B..u.x....3..V...;zt.\|../Vo..y.....L.<.d..~.7.?..j}wT2...6..6..~M.Su.3...oh...w.3.9J..{D...v..G}'..ne[.."....qT\|._W.`~M...M.[~....;..B....DLo(..~.....4a....b.o(.Yk{....qLu.q.v....'.........[.ak.].....!..].B..d":.....Z.f31.6.#$...)-[.{./.+...3 ......%.o...4JL...W...e...zL..<...*9.+.HD(..'x..D.~

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	72591
Entropy (8bit):	7.986293945729795
Encrypted:	false
SSDEEP:	1536:lYEsmTC+TL7s4tnOfVj6UOxzE64EmI2+LGvqsuRG5gX8fw+F2taUQCn8IS6:lsmHLo4tneobfYvqsktWCn8f6
MD5:	135913FCA05453631815BF5F4B565D19
SHA1:	5685B1B3A0A7F76AF5E0CADBA531A6C5420D0943
SHA-256:	29AA155F463F22748BCC16249C5E661039B79DDCCB70C09A9485150925B329A9
SHA-512:	6CD668E876EA49E48A350ABAF191691CCABCE45667971746A9F681F3CD4420D5445DF579999BBC1798DD055EEA08183D05B339782897B041BDD27471406017A7
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/ff/7a/ff7a6b879952c69e1114457a4e47d156/ff7a6b879952c69e1114457a4e47d156.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................A.+U..psD.1..........;....K../.)...).6+.......M.Z^.V57..T...aW...:......%.M.=..&.Z/..:].Y.(..$%....K..k..x,.x.@GR.$.u1.X.Q..W.MXb....7k.u.3a0..iiY.e.SD..X...\|#c....WH4/...[.q.2.....[Ikf9.oyh..rX79.P0.g...`.....-..tf}]... .....fd\|....V.6?.....-.2I...[r.b.. .Q...Wp.......\.....k......k.qGk...`eF:....vO.c8...w&...v;.-C&..~..................1}.w$j/e.......-.U..z...k5C...p&...E.l.}.;..>.L.vj.?q......"..1E..<P.d..\|.....!......d..p....f$^P..R/e\......V...CT]....I[..H:....'M..j.5.=o...)l2...$........9.].Q.mx.v'..l4......TLQ..S"d..e....b..Y.....\i...Mm.!bt.cc.sK.....5..(D...>y....%.....y!^u...V.~.....g.w...(.n3.\.j/.<*-.7.....KV?r.....t.....Y....2.

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3095
Entropy (8bit):	4.779040348966046
Encrypted:	false
SSDEEP:	48:cQAvf3KwQN2NHUzy/bTXzOMw/D/i2VnckGXK8W8hEPMuSpKcmB0B8eDqxQ0bLIZJ:KvfawLbbzFw/D/ita8ZRKJ0BFlUQqu
MD5:	7AB3B4BC1D71846008B13761BE884585
SHA1:	25C05B4A4FFA2E6FC92F8679F82158E3393AEE85
SHA-256:	AAE3E5ABD9A787878D9FBA199FD9A546BC7E81E56897BD4B3BB98526A908CB33
SHA-512:	2C8888EF3A931505FE930926C39FD7171787E93691E062D2BBB906FD5C4542B9E86EC53FA4B8DE982E722191747C8645FED873613B19F7167B8857F00C683AC3
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#FCA17E;}...st1{fill:#2A6EDB;}...st2{fill:#23582A;}...st3{fill:#3FEA73;}...st4{fill:#53D7E3;}...st5{fill:#2B2B2B;}.</style>.<g>..<path class="st0" d="M1.365,14.49c0.114-0.54,0.645-0.886,1.185-0.772c0.54,0.114,0.886,0.645,0.772,1.185...c-1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364...C3.132,29.043-0.151,21.687,1.365,14.49z"/>..<path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66...c6.916,2.135,14.445-1.007,17.768-7.53c0.251-0.492,0.853-0.688,1.346-0.437s0.688,0.853,0.437,1.346...C29.378,33.109,20.845,36.67,13.004,

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39620, version 1.0
Category:	downloaded
Size (bytes):	39620
Entropy (8bit):	7.9944240208539705
Encrypted:	true
SSDEEP:	768:bdJh03UMP5eqpzELpwYw+Xu+eObBAHJoS5r3MKh7bFZ2vMMHyhX8S:bBTMBemIiYLBeOAHmStt1b/RMSFT
MD5:	1162C28DB253E6FF4B66C21BFEFACE94
SHA1:	DEE52974D3DA98163DC6FCA4C05946D5E6196873
SHA-256:	9AF4E5454A0DCFBCB066F7F676B34C46C832F59FF8C76DD4C9BC4FB5B3D26F72
SHA-512:	A880128CF1B5676CE183ED8EAB7A8908394B69864C039916189DEDEEAF4DC8D62F502FF57B5C02F8538B61602F5E504EB2E2A89CF944D471139B01039C2E658F
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/fonts/EuclidSquare/EuclidSquare-Semibold.woff2
Preview:	wOF2..............1....X...........................?FFTM..6........`..v...s........O.....6.$.... ..>..,..I[..r.u..&...M.X$..t.U.n...h.....M....6...N..d....K...er..E..(..m...p.).r..N..N....A.......(4.....tY.."....8kA.Z..9.S}.q..\|[..G...t."....WKX...9....6X/...%....!.5..3no#vS.o....V....m...5Y2w.R...W..;.c....&..N}..}.p.O..O$.:.jj...~M.L?b?&5<..o.....K^..).}n...u. .\|.s........iG..!;....t....?.].Y.ur......t.Jr.3"i.:C.....P.[...R5:Y...`O.q..C..X....<...._...... \|I1..tFd....7...W... .4.-...d..R..":....=.S.xWm..y...K.a......^+V....E.j..Z.n..n...Y.(...C..Ee."...p.,5Gej....(..5.ek]..l.,[..X7.....9o..XuP...W.mx7&.....@........._C.&4..B...{..{c.\....ij.O.>..G .... Ri.[.'].akW.....uk7.=}.:.......wa.....$.p.U.1.vp[.....>.6.T.[2.`n.+.%....}. ..1..j.".."E$(.........y.......L.j.u..6..g.2v....@..!..'......b...XdS...CK...<i.....%.gKlL\..n...U..-;u]....y..'.._.%S.w.....n....b%R"...\'...DK.\|t...f.K(.......r...F.i..s.5..:.....T".....~h.wF..oVv..t.$i.Ur....?.a..m

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1234
Entropy (8bit):	4.454685909316532
Encrypted:	false
SSDEEP:	24:2d644AjEtM44xA7+SQASr8nfsACnaPT2PTEO1FEE/hL3BmfCZEOw1cM:cPRxK+rnQkjnaPT2PTFhtmaqOw1
MD5:	7ECB0FDAAB89AC67988AC93A7D836B4B
SHA1:	00097E65730036D3E12506AFED25F8E95F645288
SHA-256:	E8985492079D9702313AF3B32CD885246CCC50DE8886614E9388FF41E838237D
SHA-512:	6BA70E3706F5C96E407140D4B866286E701E97CA7722D61C52DDF4A5B8419D0149F7500D1D18D5C446DA2DD5D1247500C737050C30655D4B952909599F5FA913
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/leverage/Polkadot_2x_Long.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" fill="none">. <circle cx="18" cy="18" r="18" fill="#fff"/>. <path fill="#E6007A" d="M18 10.62c2.53 0 4.58-1.2 4.58-2.67S20.53 5.3 18 5.3c-2.53 0-4.58 1.2-4.58 2.66 0 1.47 2.05 2.67 4.58 2.67Zm0 20.05c2.53 0 4.58-1.19 4.58-2.66 0-1.47-2.05-2.66-4.58-2.66-2.53 0-4.58 1.19-4.58 2.66 0 1.47 2.05 2.66 4.58 2.66ZM11.62 14.3c1.26-2.19 1.26-4.56-.02-5.3-1.27-.73-3.33.45-4.6 2.64-1.26 2.18-1.25 4.56.03 5.3 1.27.73 3.33-.45 4.6-2.64ZM29 24.33c1.26-2.2 1.25-4.56-.03-5.3-1.27-.73-3.33.45-4.6 2.63-1.25 2.2-1.25 4.56.03 5.3 1.27.74 3.33-.44 4.6-2.63Zm-17.4 2.63c1.28-.74 1.28-3.1.02-5.3-1.26-2.18-3.32-3.36-4.6-2.63-1.27.74-1.28 3.1-.01 5.3 1.26 2.19 3.32 3.37 4.6 2.63Zm17.37-10.03c1.28-.73 1.29-3.1.02-5.3-1.26-2.18-3.32-3.36-4.6-2.63-1.27.74-1.27 3.11-.01 5.3s3.32 3.37 4.6 2.63Z"/>. <circle cx="27" cy="27" r="9" fill="#7921EA"/>. <path fill="#fff" d="M21.34 30h4.53v-1.03h-2.91l1.69-1.63c.68-.65 1

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	75568
Entropy (8bit):	7.988951630654816
Encrypted:	false
SSDEEP:	1536:X/3C5W7UADmuKVAhcDdJRtmxuIK7FmDSoLor9g35WuGV8VGtlARZV1Dk:v3C5GXD/KFJRPVISoLormWuGVQGsw
MD5:	413935175B692C03C3CC78C1BC9C2E17
SHA1:	996EA2750FF85304E7F93C39411B8AB7F63DFB88
SHA-256:	668B3FA9A76500B8E32EE30FB716CB8227A352577FEB0FA24E23E2F88F9A933E
SHA-512:	517E9CB45BD2BF669ECCAE33B6A933A9C1D881B4A16506CDAA67DD238CBF189EC4910C07E98C0F90A4921EED851067127D0CD0A35AACE86B1E2EB86344B80429
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/25/36/25369637a43bd670ec087ed2046e8737/25369637a43bd670ec087ed2046e8737.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".........................................................................................\|..3\|.j4.....5c....;.....M.........:u.......Y..+....\|.....}.6........~.%p6..v._.L..i.. u.?.3..P.io.......I.6.!}.5...../.r.6..S.~.:.....#......E...e....7........$..v..3is.&U4...e3..8....6..1<.h..-.{.U..O..R...Gu.!..Q.8.P........A.0..u....zz.>{.YH......g[..il..........P.V....N.l.T..Ut......-...^v..H.A6,B..O.n.....:........SV/4.@.....;i.\|.m.7.6.)6#ft....b...I..~0.....>.K.U...-..e..nEw..\|;.^u.;.#..<O.+../r;.f.k.............t.2...q.FEF.6._<..1pW.I.. .YH%..7q...g2a.......:....h\|..]E.,..L.7..P&.8..M`.......A...-..{.......LG...X%FhH*]B.aF<.....E.N."Z...@..e..\..q...@..i.g.Ek...(`..XEHy...D.Q.Fp.........G.2.$...rChw..0C..ab.60.SE.-zD..~a..

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	62081
Entropy (8bit):	7.9848232494928695
Encrypted:	false
SSDEEP:	1536:k42/kzsGsayJJ0o+xHCscFakvLVW6T/oL9hdvE3G:k4hzsfnJJ0ojvLVWC6vEW
MD5:	969E79046BC68A8327DC3B0D4B3D78A5
SHA1:	004E8203983F36CFE0613ADC43DEE798926CE6F8
SHA-256:	42B16D4B90D8A47B3BAC9F82859B90A4E197BED6C4EAE5EA54841D754723FBE1
SHA-512:	F181E889940C523752DDDE3BF354C160F826E36C89619CFDE663AB53B6E8ABF62E80B0B33D1267D9C1D5C55404843A2FA8E8E4C9338EAB13BE0B0B0DB9F82C31
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."................................................................................................~... v.p..``..`...1......ys0.S...(y.....1L8.!...........e..hb...4v}.}OH.3.). L0.....p.....6.x.S.c..c....D..GiWk..1z...\|%nS.).^.!.M=..v..&.._.).j.Ox..zE...1s.......6..b..u...'..NU..9..3.z.^..Hq...c..s.....e.<...?1.t.=k.%..%....uV.....0RD......1C.:J...DS*.....n.Ej...w04.....!.V~.7~k...Y:..\.Il..h...?..T.u...v..._.I4.i.../(.u..\..P.......<Yc..9..Ee.u}7%.B.g[z3o..$.^........R.6..maH..,..V._.y8..`...$....;9. ,.E..N`q...>..El...<K7V....,.d.._'..Ud.W....b.. .f....<.gF.......W..f........F...k.Y....UI}..G.^.T^......[p5N.'......D.+..J5.bj..#-.V.~.X..:o..%..\|...8.1y.Ug6\rm.s.y...[K...)....8.+..6a......P...l....s7...L...:'.Ys.q..9......[1.Y4..^.

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	335543
Entropy (8bit):	7.939404043811188
Encrypted:	false
SSDEEP:	6144:w4bU8gMyHNqmpwWuqWl4NcZtqLb5Rn+iul6GoySxBnrIUHYm:VburJpwWHlW4nNGSymj
MD5:	F2385BFC171F19A2928B18FB1027B960
SHA1:	15BF9C9A2E4C580582D5F810354295681ECC4F35
SHA-256:	5DFF834809590C63524B7C4756E6B7F437AF184EF6100300F3D374114CDF9320
SHA-512:	C5A3F1AB095DB6C3FF38C3BC559A612F2F514EEA4897D760EDD8FF75C1AA059580F3C5C9A0719D7F973AB4659A5C41937F3B3EBFB4689B23ABE41F133F2850CE
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/BTC-halving/bitpanda-bitcoin-halving-countdown.jpg
Preview:	......JFIF.....d.d..............................................................................................................................................8...............:......................................................................./...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	downloaded
Size (bytes):	503754
Entropy (8bit):	7.9913602970117505
Encrypted:	true
SSDEEP:	12288:DWjYAlo8EX//8Gr3caQyP/f408wawCCJ4grtC:6no8EX38NaQyPH4rwaHCCgRC
MD5:	64653F7C8919DADE4AA8EB6DBA182A51
SHA1:	8A5A71C24937FE87A15393BF1905F9601C769762
SHA-256:	0784700F2DB993ED5C72488B777CF75A96882E9E58B07739F838A3C769D75416
SHA-512:	25E0732C15DCBA8B9ED4F202647BD07E762C7AED2A887628AB5F3DF437AB363E38C344B92E35EBCC656F2A520D67FBB61C57EF71EED902F00072EA310393F72C
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/1200x600/793/8b/69/8b69d6e6025464cd449ad0097791c41b/8b69d6e6025464cd449ad0097791c41b.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X...".....................................................................................s.......,.....$.#H5.<3...S..#...5....k.og.......o..ol...l=....e...Yq=..B..=D..V..^..`.n.(W+Y.....Li...).PjF...m.e.6...S_..}.,.Cg...&........z.....Kf.Y.sLV.o...{>..XH.$=%;........R...s..GB...O.&..}.9.=...d.(..&.........1.g:..y..u....".CY.]...y.{....1..re..PY.u....`...<Y.\a(...F...6....L'........+.:....M.@...>.. 2.E..0...q..0mt....9..-.x...4..+.....+........V...8...#..Q..pk.n5.w.\|G0O..0.c..K0..BgyQ.VkO.@........af.xdmt.4w....50l9!.p..GS....b:...T......s...Muq.^C.k8E..eaxA.e..u..."."=ljX...w.:.m4g.-.&....Z.a(..YA.v..$...Lf.g.......K{Yj0..4..l..0u!...;A."..6.9..!.=..y..;.{;k...s ?.I`OjB..o.#..s...2...WO.e..d...iB0.J.A\|...2:....8..Tm..Qo...

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	3.5939459514962726
Encrypted:	false
SSDEEP:	192:Z5Gb4or/fYaLU7PaXdOB55j5+9QwwDDQle:nSZrfr2PaN85t+9Q/Q
MD5:	DBD80DC62F783283F2B42C82900362D7
SHA1:	5AAF71A0D5ACB06D409FD4B3543F9836EDFDCCD2
SHA-256:	B6778BA8327B9A26DA77B4D547E0EA220385834A9187FC92D0982C48DEE87A14
SHA-512:	7092D0CAFDAF737B16E418861C2969AFE3319F20D76D3C295A861C52CD99787D7AC7E173191424F20050A2A2665AE3FC3FF0CB8F21739CC5C416BD8876BE4DBB
Malicious:	false
Reputation:	low
URL:	https://onlinetopchoice.com/favicon.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ....................................................................................................................................O...c...U...h...J..............................................r..........."...............................ff...............................*...$....................@@..cc.Mgg......c................................................ff..gg........-.......................................R...b...K...Fll........;...............................!......c...........F.............................&..............................rr..........E..............................P............@@..hh............G...N...T...u...p.......+............cc.;UU..@@..hh.......^^..hh.6...........................6....dd.zee.Nbb.'kk.....}}.1ff.vdd.J..........................j....bb.9cc.Cll.B......gg.>ff.Kdd.!.......................!......(...........Z.............................................

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	386
Entropy (8bit):	4.834976892106139
Encrypted:	false
SSDEEP:	12:Yg+SsG5aqH/dnQwYMrJoltYy/tYy5vWoFp0Y:Yg+Le7FQsdEiY
MD5:	179893FD5B53F411C3861527FEA0291F
SHA1:	FA51EA61EC9A82BE55F6A3607355AA1F52CE1C4D
SHA-256:	B1410C548C3C3B1FB3D0207D8905741C7D30DCB0A4B8674B2CCB8294A8FEF14D
SHA-512:	DA49D1D803454784AF9F705276CD56A9F587030A6E822109547F8FF1A15B456186F5A0A39E3BF823F293CA0F2F1D8530358B632D87917FCC49007CD02BDDD528
Malicious:	false
Reputation:	low
Preview:	{"data":{"type":"cryptocoin_details","attributes":{"asset_name":"Bitcoin","daily_high":"60834.80000000","daily_low":"59290.10000000","high_52_w":"67417.50000000","low_52_w":"22788.10000000","monthly_volatility":"0.13923867","market_cap":"1176790965924.73762500","market_cap_eur":"1176790965924.73762500","last_updated":{"date_iso8601":"2024-04-26T20:16:59+02:00","unix":"1714155419"}}}}

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	3.7712411708182247
Encrypted:	false
SSDEEP:	3:YWR4b5LkLLyAUKtfJacpn:YWyb5L1Dof9p
MD5:	864E7D68C370E4A879D3EB16E3E13287
SHA1:	0C5CFBDCA1D75586473370DC5514B1907F8E4EA8
SHA-256:	90099DEDF118253BFF1798E5F8C3BAB386D90C673FB759AEB4D9E383044F3904
SHA-512:	7979A66B33395EA6BBD5CF815031A67A01CB736A53375A8B2D51BADAF742A4A64136A60EFE4CB4BA06EE938337B83E8749418075C65249DFF9ABFDE6069FFE16
Malicious:	false
Reputation:	low
URL:	https://1movieshd.cc/ajax/banners?page=
Preview:	{"status":true,"banners":{"top":"","middle":"","bottom":""}}

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x333, components 3
Category:	downloaded
Size (bytes):	55724
Entropy (8bit):	7.980712288141641
Encrypted:	false
SSDEEP:	768:+fZisqviFnIP3yIE2yrUnHdMo0n5tsx273Irfj2dg0My5AYWa/ktuYXc5cM:+fZifU6iICrCdMffs47Y72dg0dktC5x
MD5:	4E72443BE3110A7E258D8DF91D40CE1D
SHA1:	09CEDCBB0A52758AF60CEDD423E55330A9721F8D
SHA-256:	D12CC644FF055869615B97C66D7913C794166ABEDF3C78DB57F93C3F486CAE5B
SHA-512:	EBF61B8776C4CDF8FB33295B292C623036F9F9BD03DB6B5FC4900B84D2D8C8BAA9CF05B2BC15FBE824E39564B0DB39C99922E8D4CD91AFD93B97F348ED8D8166
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/dc/29/dc29772a996038cfc64a97e80aa0e4a8/dc29772a996038cfc64a97e80aa0e4a8.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................M...."...................................................................................aw..W...M.l%.Z.w.......,....M.A.>.>.L..TzO.....E..qp......>r.~(\zS.&..pK..3.\|..^.... i..kC^....^-...VG.!N.......Z.q3.n.{E..B.>.kg...{MiS..+...e.........\|...p.:...s;k.H....6gR.I]....y.S..Q$u%.."[X.......N..t...._<t.&...F..o...&..,.,....{.r.86B..E+.\|...K..Z?9.....k.!...Nn(x.B#np......n..S>u..g...6^*...b^5....Odl.=~u.K.l...7.\l"So8ai...1ICd. ...]....HT.\I79....<;a.(P....\V..3.OR.e~....E..........c..7E#...l....K.yn....~..~.U.M...Q......R..=.;.....IG.......AB.J.Jj.&".DA...i.....<oM.Dt..4...G+.;YL....;....x.S.;}..o.J.RD.\.-..wzQ..`n...@....@F.........'t..)o6.2..h..7}7.0d]..z.Z..F-vdx~.l.3.I_?.n...d......}.5.p....`.........PQ.+.+1.r...16..0J..wB].z.e

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	438
Entropy (8bit):	5.390392063679119
Encrypted:	false
SSDEEP:	12:nCEo65Lxfb0bDNDRWUkEYwru3lRoSjzUoB69u:pLMDtRWUnpuzjzUc6I
MD5:	E180E9AF5449E133FA6D18383321CF3E
SHA1:	6CFB76D4436FBB2936C6F8E7F9765CEAA477D3B3
SHA-256:	CB92998656FAAC73D41161BB407AA022F8FFA52E1AED9A82C5C2EDBCA84CD439
SHA-512:	9B8C39923AC7430B07B11D0735683894EE6E69A8C54F3F918ED66EBFD71DFB4A992D67519F2C4D84A10B5C59AABBD1FB8F921BFAC8BBA5F440AEEB675593DED1
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/test_oracle
Preview:	Begin BlueKai Tag --> ......window.bk_async = function() {....var estid = 'ZGkACWYr8zMAAAAIA98YAw==';..bk_addPageCtx('id', estid);..BKTAG.doTag(59574, 5);..};....(function() { ..var scripts = document.getElementsByTagName('script')[0]; ..var s = document.createElement('script'); ..s.async = true; ..s.src = "https://tags.bkrtx.com/js/bk-coretag.js"; ..scripts.parentNode.insertBefore(s, scripts); ..}());.. End BlueKai Tag -->..

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16420, version 1.0
Category:	downloaded
Size (bytes):	16420
Entropy (8bit):	7.989072726257492
Encrypted:	false
SSDEEP:	384:tUOQQ+U/4IvHPE0yLp9d8sP/x3RcswyvzJlXFHZDHUjI6o:OOQRg4b0W8i/x3RcswIzXJNHUpo
MD5:	885C5B776D2D19E3688C7AE4D5CE0FF0
SHA1:	13E9B8620E5C1B203EBA6B4D3812E249BFDF2A96
SHA-256:	ACB8B0FCFCA04B49267F21293095D567E98949AA933756A604EA1F9C79E165C3
SHA-512:	B73BD4BC4E65EC09B581E99747D59F7D8C724DE7E3A1237F5C55FF79F0080626326A3E0ABB4D4B97350FDD351E92341A8294CFC917867ABC20CADDC914E388F2
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/fonts/bp-assets/bp-assets.woff2
Preview:	wOF2......@$..........?.........................?FFTM....`..^.....(.._....6.$..Z. ..3..Q..}E#r..`.kdD.j.(...:..b.....,R.F&.. .~Z]F.`Y\|dk.@.....Lh.....RH...uU...9Bc..BO./.....X.I..F.x2..D.M.u$.$X-!hV,.8.....Y\|...c.'3..L<b.C.MP.....%.R.O.d....8..s;-..?}S.9..Z.$....-.......... a.!D...v.......Vl.EA..hY..\..=....h...TJE..`$....h..F..7...w..O....y6....X.@Z.....tj>.AK..fL.G......S..!.~..J...%oW.Z........H...dS..G...D..$...3e..+.N.....4JiUW.x[.[.mJ.o.n..0O.3.8..o'j......5...2.Mj..\..@.0.(.....4.r!wi.!v.e..)...7q........C6mP....K..E..u.<......;2..2I..wD..;.....i..\5...,....7T..>,E4.._m.....f..w.."..4..p...aU9A..._m..56..P.{.n..:H.......C........Bcc.b......)T7..#.I..,..lX..o.Q.Al..p.j.8..-qf....^..\..d\.>=....235..!...Q...#....k..M......]7..@~..\|5....j]..Y.......R.C.....8./....K.m.[......q..e.\|~......&1...<...v;..\|...."..(...>..J..R.l.i\]9..l..m.:C.u.....X.+`.i.,;........"..~...4.K.M....8Y@aE5...Rz..#x...RI..p....4..f<..HVb...dE.R....b.....*.

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	92501
Entropy (8bit):	7.9883872541296155
Encrypted:	false
SSDEEP:	1536:KyS+UUJn7kxC2RqfcqeRZ6f7ZOL1I0FfqSeTsyi5HJns4SW4lK:OcJ7pLfFCiIMTVuHJnyW4lK
MD5:	121866A6E18D44520216200F2DDF9195
SHA1:	BDEA3BA263FA84370F9E2526C77D069E4DA73915
SHA-256:	B07B2D7894939AA5776EC40B7B88E82435819FCA23184B85F1A402F4A68CD68A
SHA-512:	70CAFE689A8D2DD22A95D54D84D0DD304E108EB8FEE82715438F43838D0931A6ED9A14A6B3933A29DD96C284BBF1DD79B61FEFFE405E6688C4C618C2401B0B66
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................t{8e/.....Ich.B+:.n.DSp_Y..B...\v).'.....:y>.{O....K>..(........9.\..K_%.........u..Y$......x...c..W~k.S.-......UW[6......{.bW.........B..w.<.Y.... e.E........iY}..Vy.4.....}cw..q...t>.O.:=.......y..s.Q...YPv".q..b...2..N...x....lR.X..w...%.'...7.t....S......e.r..t..X.....m.z.;5....U....X3......g.G.5v.]..]zeQ`..O)......Y........jI...`.A ....=....V.yZ..MiU..`>..\|.~.7..Z..OA.8. .6V...'..#.7gk....CQyhU.W..C......u...E........[..s......7..E...?...&.G..a..zL../...J..[...Z._.....Kf...hM.Sb..N...\|.J9..i^.5.'...O~t....V*......F..\.n{.8Q.........a.0}.....S.R....U.I...:.@.&v...........[.t..,Z.w.k..o....78S\Z.J.].........dl+}Jo.&.M........b..USm

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x333, components 3
Category:	downloaded
Size (bytes):	63372
Entropy (8bit):	7.9853185865767875
Encrypted:	false
SSDEEP:	1536:Q0pQ1Tts/WgFZRBlH+m6vgcQ5fDXpc1YlIr0:Q0aoeg7Xj557le0
MD5:	DCDDECC165619764642D0E2464773DF5
SHA1:	8CC86DFCE1DE158694C6C1413F3C96D2A06FC2CD
SHA-256:	DE73AC6811CBCD8BBBE4979065318557F31CFEB2F1DAB795853D97A38DBC24AD
SHA-512:	2B35A638CB3647C913F02ACFEF673BB437C06F96A612F9BCC7C28330204ECBDE0D60BEDAC387931C3D32E8DB39AE3D683991A29ED745F39B97DE4D61F00ADB4A
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/ec/b7/ecb756911e100cdf36643a0ef07f74a7/ecb756911e100cdf36643a0ef07f74a7.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................M...."..................................................................................O.....Ia!....I!^.....sUGO{OQ.GWj...$.@...`g....D{i...R.W-QN.j....}/]..\|..N8..$.zg/$.oW3"..n...(..Z......J.....CJ.,,m.m..3..j......M.G/.d..X.........1....d9...F.D.&T4.N.F.21..A,....;i.J.......ej.,....u.....,^z+9S.T j...y.b..P..^..QF).e.Qk..f(..l.c.._8I...7....W..q7........&.3R.0.q.:.E..B...(P..LVMn...\.....h[.bt....O8e..#M.\|.....s...xFa8...&6.....0.H.".Y.......k..wh5..1CD.8...U..6.V..Vcq..3.+>.+A..O.....gm...;.e....U_.H.{..os+L.....M....]j...E...kd~q.l...<.5.z.oo.5U.L.15..^.$b..?.[B+!.L..]_4.C_<.3:Z.l..(.....YH...D....k...\H......X.f..p..(Q....g......]Oa....R_..lDL~..9..^c.,"....cs'..Ps..#....8YF@.k.......WE.......Un..U....J.uL.cjj...1Zzv

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65471)
Category:	downloaded
Size (bytes):	639159
Entropy (8bit):	5.299923887936155
Encrypted:	false
SSDEEP:	12288:x8HsIm/Loz8+JNLqnfLwfThAzX0hFmpNnHXxnVs:6ifLwfThAzX0hFuxnVs
MD5:	9AC3FA897412C0E399A87DA045D24CAB
SHA1:	A5A1EC37D521560B7F1046EDF88D5279895E5388
SHA-256:	A2401941A1780899290D82CB3C38C730AC6CD6AA7905877FF227016C0FF842E4
SHA-512:	CBDFF19A25E5F261353C903F14ADCD3419D5BE5F2450EFC77771B6F0D675E976248A1172C5020BF6119AA892BB90BEC383B0813DB2C3E79D7FEAC34B42074082
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/app/v2/js/all.min.js?id=9ac3fa897412c0e399a87da045d24cab
Preview:	/! For license information please see all.min.js.LICENSE.txt /.(()=>{var __webpack_modules__={751:(t,e,n)=>{var r,i=n(155);self,r=()=>(()=>{var t={841:(t,e,n)=>{"use strict";n.d(e,{Z:()=>p});var r=n(81),i=n.n(r),s=n(645),a=n.n(s),o=n(667),l=n.n(o),h=new URL(n(529),n.b),c=a()(i()),u=l()(h);c.push([t.id,".adjust-smart-banner__AEqYlWgPonspKfseFq2N{height:76px}@media(min-width: 428px){.adjust-smart-banner__AEqYlWgPonspKfseFq2N{height:0}}.adjust-smart-banner__NVk5vwju_4kdaKzGWJPq{position:fixed;left:0;right:0;z-index:10000000}.adjust-smart-banner__NVk5vwju_4kdaKzGWJPq.adjust-smart-banner__jOV7BvlxDT7ATfbLPh3j{top:0}.adjust-smart-banner__NVk5vwju_4kdaKzGWJPq.adjust-smart-banner__XmomYv1VVQYz0lEtn9Q2{bottom:0}.adjust-smart-banner__NVk5vwju_4kdaKzGWJPq .adjust-smart-banner__eXKzWnRDn4RWUiSSeVYK{margin:0 auto;max-width:428px;background:#fff}.adjust-smart-banner__NVk5vwju_4kdaKzGWJPq .adjust-smart-banner__eXKzWnRDn4RWUiSSeVYK .adjust-smart-banner__r3JnN_RNhpzArrmKQ8jI{display:flex;align-items:

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1007
Entropy (8bit):	7.53719654370637
Encrypted:	false
SSDEEP:	24:MMqZZOXv/HOWOcZ9Z3QgBdXpU/qgu9qP9or1QuUV4QlQRaBCwEiaKs:MjOXv/uWjZv5IkqPIQu0BIaBC7iat
MD5:	3DA2FC2219B428684B3D9ED7888724CA
SHA1:	52BF064C3FDF683215D9BA4A82F418BAA4F114E9
SHA-256:	43099480E0B1B1C8C66F798A542F2D1AE0CA2E0975119FBC6A94ED2D127F8FCA
SHA-512:	20316B2B6AFCFD1524F3295B57BBF8E88F57DD8FC747D8DFDB0B06B257595E3B8DB2867AEC203BECB3D751B192B22CFCF796EE6A5FCB1AF0F18A89754C32F8BE
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/copper%402x.png
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE.....0.p0.p@.p0.p8.p0.p5.p5.p0.t4.t0.p0.s3.s3.p0.r2.s3.t4.r2.r2.t2.r2.t4.t2.r4.r2.t4.r2.s3.s2.q2.s3.r3.r3.t3.s3.t4.t3.s4.s3.s3.s2.r3.s3.....................................................s.s.f.Y..M..L.\|@.{@.s3.d.....-tRNS..... 000@@@PPP`oppp........................k......sIDATx....R.@.....F.R.) B...I.[..U..D[... ;d.....&./....{..!d........F...w@M.yC......&.F..Ap.m........:.t.".n.kA.0.@..G%^...i.....>.;....%.Pv..@.6.Y".Y...-.;....d...H...R...Q.Kp.\|4...lm>...Bj....]I..,...m...,E.h..J#i0-...s...R.&.W.7.n..4...............,.....P$-....$....&h@.A../m.;..)....A..6.&-5........n....Ev.`...?.....S.}..PL....CvEp'-$`W.b}%...e{........b)+..{j...E..S.Au[..>...Z].3..P9.f..'c.Y........y!e. ..+rJ...K.q..C.R.\|pU...V....e...e.b..{...Z.O.....k..(..&%...y>et..?L.B.F.P..G /.L...t>..F.pH..1.4.4NP.)i......j...rBX..2h...w..0...R...(q.!...b1...(1.:T....,...._.....{fJ.....Ny.......I

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkyi2z3eqHwuhIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	567
Entropy (8bit):	4.807794987902646
Encrypted:	false
SSDEEP:	12:TMHdVz1jjMdhFUYLTcMPJO4oDCSb4sOZZ0XQduWhZFtX1+XbmqJyWUUtETY:2d51j/YLo4O1yT0gdbvtlfqJ3OTY
MD5:	A35C32EC06F2A3DD54B0F95C86C6C02F
SHA1:	1A31E46578ACA638FD7968D344ED0682850D3D38
SHA-256:	E4A39820D688FD21F3235947E31DEB3F520DBB38C3BD96AC5BB423D368AE659F
SHA-512:	D6B74B662A7E97E4A940DB27D32536E6921A7F043B4C07674604C741D08507AEB608005FE32FC6B4C6FF12DD92B16AE0A94B497349A4FD902670D61B127760F1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z" fill="#F2F4F7"/><path d="M19.643 7.042v9.387h9.387v1.633c0 6.085-4.934 11.019-11.02 11.019-6.085 0-11.019-4.934-11.019-11.02 0-6.085 4.934-11.019 11.02-11.019h1.632zm1.887 7.5V5.155l.421.016.354.02.152.012.255.025a9.391 9.391 0 0 1 8.136 8.169l.024.246.021.311.017.376.007.212H21.53z" fill="#DD4D4D"/></g></svg>

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	60451
Entropy (8bit):	7.9874354327495105
Encrypted:	false
SSDEEP:	1536:/zy6U7RkUNoY7vYQkAzQuDyHeK/vg6cI+GQN:rAWUSYbYQVzzy+Eg6GvN
MD5:	2BD4E3B9AF9DB046B014ACC59BAE26A3
SHA1:	ED5A731F766D5F6F274330578B8E3ADD28E30A41
SHA-256:	64EBB564D61364617657D3B040AC0D5F99FC5D7BA0E33DE461CB6C3BA156F4FE
SHA-512:	3182052992EE53BD51FF2AB40BDCC4247B57EC50CC69B805CABF3FA019F8DEB65C177B72DABBF97EC3187638D29B52333A3354A313C9A4CFFFA4AC2AA53990C8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".............................................................................................g.....&Yq.S..S`.."....9;..co$..Y..h.;......l.\Mh..7.p...D.....d.'..S.s.>...d.4.V+.K)..r..b.]...:....;.0...,&S.5!:..H%.h......{....e.F.3\.[}.BT0.Uv.....'.#,..K....NA9\g.\|...............I..l."+Q..D...R_'.......sF...R}.vOYG.4-....4aOlIx.&..[....W..K...:..............4....$..Cy$..B_BF.#U....3...,5.........O..o..../.x.......;zQ..0~....Sa=0.H......[...^.....F...5!um.=....P/........h.-..:8.L...t........Q......{.q.a.I.r....&...'I..v\...l...9G...}.8v.,m....JA...tj..\Y2."...oT.!.f\tbyT..x.(..r.G3<.I.RG..RC.....G]...-E..`.gf&.d.`...%.].lx.6.x+I.:0......z.&...k.D....D.H%.q....-.m&!.......jK..wf~l.]C.s..$wA.ie..p..b...G.~y.Jq.NJ5}%..t1..

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	615
Entropy (8bit):	4.772753180567369
Encrypted:	false
SSDEEP:	12:t44lWNxMiLjILoxwr/jCFxhX5NN7EE2BnYvTha2Y:t44lSxMijIcGLChGOrI
MD5:	784F2AADCC5B3DA45DA5F62D282F95B0
SHA1:	E45136F66AB9EE3EA80798792344FF1B821CF118
SHA-256:	207805A02F76341ED72F5232AEC32380C174C09F2D9507BA1B9EF5360011062F
SHA-512:	433655FCDE87FEEE1625ECF335EE7198BFF444A7C3267F0AB1C720160F4EC3CFCC0510F9599572F11959B94E3DE983FE4D7F88785D30091C84C6A5293B832767
Malicious:	false
Reputation:	low
URL:	https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/bnb.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#F3BA2F" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zm4.654 19.905l-4.66 4.66-4.659-4.658-2.714 2.707 7.372 7.373 7.373-7.373-2.712-2.709zm-4.66-4.664l-2.753 2.752 2.752 2.752 2.75-2.75-2.75-2.754h.001zm9.282.043l-2.71 2.71 2.71 2.71 2.71-2.71-2.71-2.71zm-18.565-.002L6 17.993l2.71 2.71 2.71-2.71-2.71-2.71.001-.001zM17.993 6l-7.368 7.369 2.71 2.71 4.658-4.658 4.66 4.66 2.711-2.71L17.994 6h-.001z"/></g></svg>

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1256), with no line terminators
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	5.848773162653892
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAwtnD+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEcnnaKonR3evtTA87b1Muh6LrwUnG
MD5:	45817D31D3233B7C9F4FD9DCAEF4D974
SHA1:	856FF046A722938B70BE63363B18323843393A7F
SHA-256:	8B4C288AB90AE5C4BBF68D0799BF1F0372A5A04164C2758A1E47ABA0F8802AF3
SHA-512:	1379496FC46D2F76BBBA224F66F62E1BC8AE288012A97319D252F83E901C121740C3F1E007191B9C18C6522ED0687C1EE19AD600CE38C6BFD1A8548B810A450A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6LcmJpEUAAAAAIOXEGazFShMYgSr7POv6bAFn8bZ&_=1714156397633
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LcmJpEUAAAAAIOXEGazFShMYgSr7POv6bAFn8bZ');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOV

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	370
Entropy (8bit):	4.982761669887939
Encrypted:	false
SSDEEP:	6:tnrz4umc4sldMX3oBoEEqqdXU3eNKScQ9tu5ItqqILSMVzUTbL/lKScQ9te:trz4uC3oBoEBRONKSHbYhXLSy4vLNKSq
MD5:	B2DAC216F60DC75B697E87483829E1B2
SHA1:	FEB4CA66C8187C2AC560B60A25AC5E90F41CA06D
SHA-256:	D90CB7D32EE76A92649CA33D07922515D390F37513C128E75AA55AA1E8FAA79E
SHA-512:	FFD15C8A540EF2975513CB55A0514189CED9FAE644A024D7E0C001FC5F7F28BEA158FD713961D3C8EB32F1487C943E41A0A4F1F871FE05DA4D8DC31C6BF7F1C5
Malicious:	false
Reputation:	low
Preview:	<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#2A5284"/><path d="M22.806 5.69h3.4l-6.391 8.532h5.736L11.849 30.31l4.432-11.367h-5.006L16.323 5.69h6.483Z" fill="#fff" fill-opacity=".704"/><path d="M22.806 5.69h.205l-5.746 9.802h5.254L11.85 30.31l4.432-11.366h-5.006L16.323 5.69h6.483Z" fill="#fff"/></svg>

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1364
Entropy (8bit):	7.856540005424561
Encrypted:	false
SSDEEP:	24:XDvvqJMOD+ef+CVN54onvfaN57tSSPq9wY7TG8zVOVKPlSLJFwiMM7aDn+klZM:XDv4vDdme7vETq9wYzpO09XM7MM
MD5:	656227EDD497826260D9BEF5832F0AB5
SHA1:	7505464C0131EC0DACEA0EEA6E7C805D35828812
SHA-256:	A138291CE2DEAFD3017AAD7859C9F86760FE10EF899B19FEEA3699CA4A2A4CC8
SHA-512:	A068397F2D58DB3A444F753599A5A2D4258133B7368FD0C2E5D6A92AC7E18A187A7A1BE57F4A13B361854EAEAC976312714E87E892FBEA50CF92ACB53E0414FC
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=B&dmn=1movieshd.cc&rnd=1714156404044
Preview:	...........Vms.8..+d/e.Z...3m.....d.6y...e.,...-.(..o%..t.....Z...#..4.:J.".H%...:....V..f9......b.(... .H...'.M.@]..p].......H.......4.. .T.vFQ..IW.T..U..i.&...X.P...=..2....~Kn.4S..........B@..Q.L._( WY.H\...J....T....Y.....i..A.(<.....s6..d.i...F....:...s...p'\|......;?e%.;HsbR../T.......$.3..9e3..J.......#.......'.8.H.+....._O..\..QZh.1...]........l...\|..P2./4]...{..x....=ny..v....hy]...{HN...N...v.e.{.c.5...-..,......z..(.;i.Z..K........7Z...........F.y....x8._. .z.`..5...&..,...M4....?.2....~.BH#........6.Mh......../\|.......Z.g..^...l./b..F..R..T..[1.N}#...H.c%5..(n1..B..]_............H...m..N.4..A.=.;....p..0<..`.. xQ.\|vgB(.y....;.V.....f.`K...6..A.....j5pv.l.c&E.1n...T..k......9`+..J.)R.&.2.&:...(L....g..:._.S\|.7....=......S.>6..e.cq.i..E...u..1.E.Z...{...Y}..'...4.o>.kPDR...5.7&.-[.[..6...I.IE..E.>....>2......?.....9.M...y...D...'..ic.:....1.S_..v..k....A/J..9o..Axg...N.....V..........g...Sl..f.$+!=..kRv....P!...a... .%.........D.

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	dropped
Size (bytes):	423976
Entropy (8bit):	7.9890280631283215
Encrypted:	false
SSDEEP:	12288:Y4P2h63mUJb6S/R6REsWnIuXrP/8zKcmuBJBtFg:Yoh6S/Rup++HmuBly
MD5:	22583A1CE2F912E11F93AC685D76DEDE
SHA1:	B78CB230BEF0D466B482F5711342D10BAD19CC90
SHA-256:	56113AD94BD53B3C125DE70E3AC3F31A986894DA1B2FBE32213C8317E8F16EB3
SHA-512:	74F0FAE64E7281B86845111E19AF099D6E87F0FE9E108FA070C7AC8BD7AA5008D760C4B178B3E4913C52FE96AC0D3B30D4D2F42A3A7289E3A310D6843D6B9EFC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X...".......................................................................................Y.].6y....~.s4.5..u..rT%.MI..Y{t.qM .k..:..N....Ff.Y.c....1Fj9.G.}...B.m.,..hA.....x.a3W.F....8.Q)h..>.\|..qe..g.)....P.........%O..Bv.T._.X4...._.^.:....!x.o...%D.S...[..w...xv.N....$j..X..d.........u.n..H:\|.....V.....{.g..m@...lh$.B=/..eT.r.<j...".!.!.m..:.Bl2..,..h.+6.:.o........._..nX.c..6 ...yQJ..h.{.&.k.+..#.q.C?..{.1m,.c..).EZ..Y.w.;..}..G.o...D....}..JM.V(.v!+N.0.'.....K...D.](H.)?gi.x...8.....N...K.o_.D...J.7I..hw7-.-..QV ..a...l...5:.}...O.?5h=...l...:1.....0.[.....\....u...Vd.vo.X.y....[.v..v.9.x[.57..i=.@.6c.........\...........F.[.6.-.0.A.\|......@.m...4rdv..S.n.'....,..A..^W....TB..}b...0n.DO..-i.....v.....#...nz-.m..)7L.

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/yahoo?uid=y-CGpVWGtE2oN.rZelMURb0VRU6cP9F2UW8Mc-~A&gdpr=0
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1283
Entropy (8bit):	7.688564637926613
Encrypted:	false
SSDEEP:	24:TX9UnLfvC6YUHQ3+Dz1xAFkq/4I988ZWWAzJJOZZYXQufR8OD1gesCh:TXyzvC3l3pWq/PTkWAzJJOUXQq/BbTh
MD5:	FA763B97D1A01DEDEDE7B663CFFE25A5
SHA1:	31C64759AFFF3FADD0D41DA5716148DB13858D6F
SHA-256:	62FDF68EC095930F172B1FE7DAE379CFE5BEC74642DAAEFA82BF6AA2DACCE123
SHA-512:	D0A07C681D510F2CEE5056AABEEBDE7072C217935C417BB6A53B5F674BF1CCAF8C1AA3D42DCFD13752EB643A9ECF3C246F83F374DE8F0CFEBBE0EFFF21F77B93
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE.....@..@..@..@..E..@..@..E..D..C..F..C..B..C..B..B..D..D..D..D..D..D..C..E..C..D..D..C..D..D..E..D..D..D..E..C..E..D..D..........................................................................~.....s..r..g..h..g..\..[..P..O..Dd......(tRNS... 0000@PPP`oppp............................wIDATx...Z.@...P.h.T.n...5..".E"`.M...o.Y...%.x....N;%.Zw...........r.Z.A......(.....!..[.M4n......`...g..y..Y..M..H+D.>>.y..!O.-4f....cz......S.I2..T...G../T.2....Y}4Ljt....q..Q.L..Lu.e1..tB....m.yxZl...}.uz...E....)%...%quWZ....O..-dD.i".j+... J<.`....!m.'G.H.r.....#..f.....g4F&.#>U..R.E..3e.Z.6.f..B...l_......i.=7Wf.S"..$........V".:....T..}.8z/...U.w..\|...(P.>.:.RyLR .Rd.M..(.+."....J.2U.....U...e.....G...$.....s.DO....+...h.*.........v.<.A..h..Q9B.g.c....+j.r.F.X.8..(c....8>.....f..B3....X,.=l.#.b...D.........e....Z.U..0..g....2.1,..+rX...,o.J..m....5+~........t.e..0el.X..y..B#..?H

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	71668
Entropy (8bit):	7.986822860967624
Encrypted:	false
SSDEEP:	1536:Q/0Sr9odVwL9Prq72fPFGZqh+L13mtikhDt0LaofCK:YBWdWLtjzhS13st0LgK
MD5:	7F91D88DFBDFF9DC2A4EF0DB2E2E1A4C
SHA1:	6296E65989A340E355009A216A04CF4D171A64DA
SHA-256:	FA03789E9C6BC7B96DD03F2B2FBE45258938F7ED6C72228F9621807DFF6D8DAE
SHA-512:	DB0D31B6988692D0B13167C8F2E69287D5746404B9A9BB3478CACE32E897A79B802896C813FB9F12181A2FC7AD2DC655D5F4969D966D340CBC2B65268AFE5393
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................w_[.#..w.l.....f...."%...3..N...F....w.u[...6Kk..6?d.m...;..U;..<.Y..%.FK...#be..9...BC.nWvt.4..J..n."..^_L^..+...U...G.....L.I.y...(.\|B..k....%c...4.`.....n.\.`.....=.......$sR.n..$.....&..@.N* ..,%..eaQY..b.;=.v.3E0..jCG.K)u..u2.Q..-..=...$vd.1.Q1..W<..k.K.......>-.ZryV-.K.h&.....?ay..D."6Xe.....^.....E.<..%.V.Oz.~.. .L"......(2wH.r.......\|..#.....z.8.{.....#\QZ.e.D.[X....jt.....t..7F\.m.2a.{i..k.'..R...%/...kp...[\|...:)i....5........_.t].......k.^v.L..0.7........w$.L..,jto...t.POb.~y....a..{M_2.>kI.......(W}.Wodo'.wr}.......B.:..w\..^.{U.*..zU.tk.w....Z.\..DI..E3.....H\|{.....u.%..K..Zn<..U....'...M.s$...R.h..G.z._P...c..`+.p.5W...

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	410
Entropy (8bit):	4.903617436798018
Encrypted:	false
SSDEEP:	12:hPgMEEVWpgjXIAsQ1MNgjXIsQ1MCLf3Ln2naH2YUBRPGu:hP9VWpW2Q1MNWnQ1MCPnAh5
MD5:	01C314BAD285480DB632CD2BF33E32E7
SHA1:	397134903B38984F84E713FA538A743D14048611
SHA-256:	95B5AFE5834E7BFBDE66CD781F3466C6E3CB30CA46F91A8D2559EFF44C2EA23E
SHA-512:	216201D43A6F47F6A9467D1F3481A987DF56134145C2B67A6DF72B304CF17CE8237C5C2648C1F502566583B5A793E937924951184A5D2CCCC20B76390F4CE396
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/pages/login/loginLayout.html
Preview:	<!DOCTYPE html>..<html>..<head>...<meta charset="utf-8" />...<title>loginLayout</title>...<script src="loginLayoutBase.js" type="module" crossorigin="anonymous"></script>...<script src="loginLayout.js" type="module" crossorigin="anonymous"></script>..</head>..<body>.. <div id="loginWrap" class="login login-wrap">.. <div id="loginContent" class="login-content"></div>.. </div>..</body>..</html>..

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4338
Entropy (8bit):	4.048036657333424
Encrypted:	false
SSDEEP:	96:TRaiLw/6yC5EQqVmYnLoB3Z+3/R0RW26SDqa3QD5:9FLw/Bt0YMqZHwBQD5
MD5:	AC1EB184A27E659EB4C67D563ADDF430
SHA1:	4344E1FC603F76E043DB3C899490B7618CC23E42
SHA-256:	4363E8AF49E111065EDB56B8D115D8DA95994008B18623B0FB178D0C59A92C38
SHA-512:	27CB7F318B2AD5ACBB48E822BDFEC325050E1A333CFD034C577BB7AA9976C8F55D68088C3730BE43FD1C9E7F15E6878EB855CC13BE88145AD788BE2B62146BAA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M18 36C8.065 36 0 27.931 0 17.998 0 8.064 8.06 0 18 0s18 8.07 18 18.002C36 27.936 27.935 36 18 36Z" fill="#1B5477"/><path fill-rule="evenodd" clip-rule="evenodd" d="M17.823 6.001a.734.734 0 0 1 .694.773.736.736 0 0 1-.778.69.735.735 0 0 1-.694-.773.736.736 0 0 1 .778-.69Zm10.636 6.122a.731.731 0 0 1-.326.984.74.74 0 0 1-.99-.325.73.73 0 0 1 .326-.984.74.74 0 0 1 .99.325Zm-1.037 12.426a.74.74 0 0 0 1.021-.211.73.73 0 0 0-.212-1.015.74.74 0 0 0-1.02.211.73.73 0 0 0 .211 1.015Zm-9.708 5.883a.734.734 0 0 1-.694-.774.736.736 0 0 1 .778-.69c.406.023.717.37.694.773a.736.736 0 0 1-.778.69ZM7.48 23.326a.73.73 0 0 0-.327.984.739.739 0 0 0 .99.324.73.73 0 0 0 .327-.984.74.74 0 0 0-.99-.324Zm-.31-11.231a.74.74 0 0 1 1.02-.211.73.73 0 0 1 .213 1.014.74.74 0 0 1-1.021.21.73.73 0 0 1-.212-1.013Zm11.672-1.007a1.05 1.05 0 0 0-.992-1.105 1.05 1.05 0 0 0-1.111.986 1.05 1.05 0 0 0 .99

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	988
Entropy (8bit):	4.5231199374522975
Encrypted:	false
SSDEEP:	24:t44lSxMijIlwwvVRQoAjrMys4ovSni+uJ0GjiGE7:3MQjQJXk4oveuNiGg
MD5:	F3865339D1DCF0B0F5B6D136798B2D8C
SHA1:	09AD3E5A02494C2DAD9E7CEDF9BA37AEA9AC9F60
SHA-256:	43ABF957638B3F9922D58130CCABD53DB4A705EAE4E77D38C87B46CE4854D0C1
SHA-512:	6F9BFA44AEC33E3B178522D9229E09415DAC33E1FFE64DE76DFF359F505C4082CFA7DF0E15D1AEC4858B48395B66AB2026BC9352D6470A785F82431BCDF4822C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#00A479" d="M18 36C8.059 36 0 27.941 0 18S8.059 0 18 0s18 8.059 18 18-8.059 18-18 18zm-2.245-19.49v2.362a54.853 54.853 0 0 0 4.49 0V16.51c4.134.17 7.203.798 7.203 1.547 0 .865-4.095 1.57-9.196 1.592a57.657 57.657 0 0 1-.504 0c-5.101-.023-9.196-.727-9.196-1.592 0-.749 3.07-1.377 7.203-1.547zm0-.732c-1.717.07-3.29.218-4.557.432-.908.153-1.643.336-2.174.548a2.786 2.786 0 0 0-.744.413c-.281.231-.459.526-.459.885 0 .36.178.654.459.885.191.158.439.292.744.414.53.211 1.266.395 2.174.548 1.268.213 2.84.362 4.557.431V28h4.49v-7.666c1.717-.069 3.29-.218 4.557-.431.908-.153 1.643-.337 2.174-.548.305-.122.553-.256.744-.414.281-.23.459-.525.459-.885 0-.359-.178-.654-.459-.885a2.786 2.786 0 0 0-.744-.413c-.53-.212-1.266-.395-2.174-.548-1.268-.214-2.84-.362-4.557-.432v-2.55h5.846V9H9.909v4.228h5.846v2.55z"/></g></svg>

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/db_sync?pid=12608&puuid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&rand=1714156386901&gdpr=0&gdpr_consent=?https%3A%2F%2Fsync.sharethis.com%2Fdrawbridge%3Fuid%3D%24%7BUUID%7D%26gdpr%3D0%26gdpr_consent%3D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	567
Entropy (8bit):	4.794546756400398
Encrypted:	false
SSDEEP:	12:TMHdVz1jjMdhFUYLTcMPJO4oDCSb4sOZZ0XQduWhZFtX1+XbmqJyWUUtETu:2d51j/YLo4O1yT0gdbvtlfqJ3OTu
MD5:	BBD13C60676E3E326A2C079B57C3E761
SHA1:	BF615374B5547F6BC5D8B26628E393BD211915CF
SHA-256:	EF09E97F490E1C6F33AE5680B2618FE797F261CC43F777B61E604F65461135B7
SHA-512:	58C4EE893E7CB17148EC1C6DA92727F0A4DC39FDFE065986BA1903B17F0812E785F289171F05B9DF16961E42B9083DF4D0AEDB925AE5A92001047A573A5EB2E3
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/dax.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z" fill="#F2F4F7"/><path d="M19.643 7.042v9.387h9.387v1.633c0 6.085-4.934 11.019-11.02 11.019-6.085 0-11.019-4.934-11.019-11.02 0-6.085 4.934-11.019 11.02-11.019h1.632zm1.887 7.5V5.155l.421.016.354.02.152.012.255.025a9.391 9.391 0 0 1 8.136 8.169l.024.246.021.311.017.376.007.212H21.53z" fill="#9A5C93"/></g></svg>

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39488, version 1.0
Category:	downloaded
Size (bytes):	39488
Entropy (8bit):	7.993318214005034
Encrypted:	true
SSDEEP:	768:bE/ubATa9i43m4xg9R6m53Bn6oebfx9UfXuK2QXDih1b4gWtf5/:5cOf3jo6m7n6fWB7e13O5/
MD5:	39F022AF561204E2D500FD4DFAE4CD80
SHA1:	00F3319B0584F2223580B21B1A04B83E03EE750F
SHA-256:	7CB64691829A544DF976A3EBB83525762271952FFFC43C564AB82EA76D77D404
SHA-512:	6DDEFA3A61C0D6F34BB5CE0DF52D216D53ED211E251F116F44DC77525B541829F466A1BA1C522F795921F0C67769CD56B7CB8FFDCA90CF29C9E61E40F62FF4F5
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/fonts/EuclidSquare/EuclidSquare-Medium.woff2
Preview:	wOF2.......@......2$...............................?FFTM..6........`..v...s.....,..D.....6.$.... .. ..,..I[.....ns....D\|....5x.A....ve.....K<..DX+.........IE.L3H....PUU.{..r.g.Q...C.'...&(g.t..b....d.....7.B.Z....,..h.9.+.[.b..d.-.aD.;/......&...+:<.9.d.;H.p..".'s...3{...J....5.XM/..D..R.s..H.-~...v_O]Z...q...k._.(I."..H..].=.y.j`..Sv......P...jd_..cZ.G .\|-...~......Z..[o" ."J.x.a..X..<m15.c......Q...I&d..1.P.s..[GG..L.XM... {...so....J./........!j......P.....9W.,.~....F...pH.....sh..T..Z..i.....C~..Bf.s;I....@?....}{o.+.F.M..6b.....5.Q.6.....b3."p.&F......D..9....i K..X.Ygj$+.$duo...*<..X.-..,.6.#7"OP..&...b.6.kc..Q...+v.....7......4....3y`.N.X..Kx......mp<....#sP......lC.^..QA..a{.4.:......J.......e.EQ..m.1X....-.9........\.B...O,......\..Qx....6.ni\|P-......0Ij.[....~.O:..1.4l...F%.....u..W...B..!.wX\+\q..........(...q.mcr.<.F.(....9[..!y<...^.+....u........k>...4..e...r.....w..=\.p4......>.Bi.f....L.I...s.k.'.....4..<.<.?6..3.[.;.!&g^.

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	41383
Entropy (8bit):	7.9730855214483345
Encrypted:	false
SSDEEP:	768:mscoK6rs3IA8y+n8hLQmKcU5Uz6BbHlaZfSafWT+ew7311CPQyR/nY4ZST8H:YoK+s4jznULQmkUz6BbaVoGPCPQD4YQH
MD5:	748765C9E319EE1A4E6348DFF43D0515
SHA1:	F8C59F361038EAF601978F13F6F1B168F838D114
SHA-256:	A9E5874E5E0D3C09F51275A5D5FD606E88743C9DC08B6B0CE411BEBD9E26AAD1
SHA-512:	EE0148A0074B6B89B9F018BDBECC00D326FE928FB4F9833341EC91B36786975100AC89203A62FFDAE8D5A004ED662B303281D0D4B43EA6AFCB2EF5CD5430CE52
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................qG...%."Mu.6.....u.]u....tJY...mz.$.t..D..AP..N.$m[.l.4B...\I...2.hkX..(S...&.T..i..S.....nZ..V.....&...r$..22...V.j.......YBt...m.!..g.<..~...t){p=.....A.@6H.j..mj4.j&.%F.I....5?..7.S..^..ko......T.-...........k".A...>.t..D......\|.q.wU..Y4.Q..z....O....;.nh.6.E7.+m.V...R..7.:.....M.l.5.>}.[v...Z5T..m...m.0.e.U....p.`..w.6'n.9.B.K...h~Q.^.z.....;.B..u.x....3..V...;zt.\|../Vo..y.....L.<.d..~.7.?..j}wT2...6..6..~M.Su.3...oh...w.3.9J..{D...v..G}'..ne[.."....qT\|._W.`~M...M.[~....;..B....DLo(..~.....4a....b.o(.Yk{....qLu.q.v....'.........[.ak.].....!..].B..d":.....Z.f31.6.#$...)-[.{./.+...3 ......%.o...4JL...W...e...zL..<...*9.+.HD(..'x..D.~

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9150
Entropy (8bit):	5.436077308776826
Encrypted:	false
SSDEEP:	192:FlVQy5tfS0loQTEtmSblvQMrtFS+lSQ1OtcS9lBQWNtjST:fOaHaoOR2aV
MD5:	AFCFF0AB070ECCF88381BE75340A66E1
SHA1:	75451AFAEA739CD4C6560A795E732487E97CF14B
SHA-256:	9A8364DAD1C151156362A93903ED299FBEFF8A50A53DC57B3011813F2865C194
SHA-512:	00CC296D4BEA353CF9E02C5707F628A7D195E8491B46A3AFDED7E7D5F1C9E418737014032AA8070BAF8755FEEE142490501E3FF5CDD1AEC92845FB6203B870AE
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65521), with no line terminators
Category:	downloaded
Size (bytes):	361145
Entropy (8bit):	5.025881867215912
Encrypted:	false
SSDEEP:	1536:x3xzuaUjTQEQox9CWkah1EBPyBJ1+3zWjciG63XWjpcLGUJz1jG7mdgUFxhFplRW:vOQEQox9CWkackJ1qWVVKNZ
MD5:	1D6D10A5CA0775C369B050B5320F513A
SHA1:	15DD31333A701F9A8727876B295ADE511006ED8B
SHA-256:	F0DAD43C1CFFAC0881F1ECF3D8B85EC287293D9A5539FF94BFACFF675773A1D5
SHA-512:	8B6FADD642B9A5E1CE3E18AE0EEB1113B9AFDCA0D4720E288CA6A73D71CC7DA2BC4A31651661A929112A4D7E58C263A5E5569FE9DE8B9576C4DDFF2C49192018
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/pages/login/loginLayout.css
Preview:	.@font-face{font-display:block;font-family:icoplus;font-style:normal;font-weight:400;src:url(../../fonts/icoplus.woff2?f3g5qk) format("woff2"),url(../../fonts/icoplus.woff?f3g5qk) format("woff")}.icoplus:before,[class=" icon-"] [class^=path]:before,[class=" icon-"]:before,[class^=icon-] [class^=path]:before,[class^=icon-]:before{speak:never;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-family:icoplus!important;font-style:normal;font-variant:normal;font-weight:400;line-height:1;text-transform:none}.icon-alert-circle:before{content:"\e91b"}.icon-alert-triangle:before{content:"\e91f"}.icon-arrow-down:before{content:"\e98b"}.icon-arrow-down-circle:before,.icon-menu-home-screen:before{content:"\e98c"}.icon-arrow-left:before{content:"\e98d"}.icon-arrow-left-circle:before{content:"\e98e"}.icon-arrow-right:before{content:"\e98f"}.icon-arrow-right-circle:before{content:"\e990"}.icon-arrow-up:before{content:"\e991"}.icon-arrow-up-circle:before{content:"\e992"}.ico

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	567
Entropy (8bit):	4.810088541637124
Encrypted:	false
SSDEEP:	12:TMHdVz1jjMdhFUYLTcMPJO4oDCSb4sOZZ0XQduWhZFtX1+XbmqJyWUUtETC:2d51j/YLo4O1yT0gdbvtlfqJ3OTC
MD5:	36D4CC2B83B63AC0E2D16EE4DFAB5BE4
SHA1:	F7C5C6366FA3C85914456E6D44504A22773B10AE
SHA-256:	2B2DAF515DC4418C9467F4302DB9774F10FEF19CB5300368EFB35138A378AE7E
SHA-512:	55E9B215F6DDFEA3639EEDC47A9F8DC54C16B515763DD69D38535FEEA0A36733D1AB2C9E1AB65DE468AAA8175A52BABEEAB4C4F3ED01A775C7D1761767D04EBE
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/msci-em.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z" fill="#F2F4F7"/><path d="M19.643 7.042v9.387h9.387v1.633c0 6.085-4.934 11.019-11.02 11.019-6.085 0-11.019-4.934-11.019-11.02 0-6.085 4.934-11.019 11.02-11.019h1.632zm1.887 7.5V5.155l.421.016.354.02.152.012.255.025a9.391 9.391 0 0 1 8.136 8.169l.024.246.021.311.017.376.007.212H21.53z" fill="#5BA9D9"/></g></svg>

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3733
Entropy (8bit):	4.651449660216424
Encrypted:	false
SSDEEP:	96:KvfaGXbbzFw/D/ita8Z/Lm/PsUfDLyL3crUn4:CaGLSw7m/P1rUn4
MD5:	6FC27648D52718B6656F9AB05442CA95
SHA1:	D16EE984090DD4001949EA7D3A3DE7F36C564FEB
SHA-256:	499EDD67D5828D498CD242ABFCF3E3C0FF763779B946893DBD4D060114E806F0
SHA-512:	672CFDEAD06FE63B6B1DD4D2411956EB85B723D8E52347ED500BB25756D7FB528112881EB11DCE810EA0D5B0DB164F080AA46BBD5369D2160E2559C44FB7E521
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#51B4CB;}...st1{fill:#22385A;}...st2{fill:#E0DC0F;}...st3{fill:#3FEA73;}...st4{fill:#D71E5A;}...st5{fill:#2B2B2B;}.</style>.<g>..<path class="st0" d="M1.365,14.49c0.114-0.54,0.645-0.886,1.185-0.772c0.54,0.114,0.886,0.645,0.772,1.185...c-1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364...C3.132,29.043-0.151,21.687,1.365,14.49z"/>..<path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66...c6.916,2.135,14.445-1.007,17.768-7.53c0.251-0.492,0.853-0.688,1.346-0.437s0.688,0.853,0.437,1.346...C29.378,33.109,20.845,36.67,13.004,

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51451)
Category:	downloaded
Size (bytes):	333674
Entropy (8bit):	5.3804809908987945
Encrypted:	false
SSDEEP:	3072:y5+sqRGCPLJKFMjPA0lDW4xhHv8aaGfaGXMmBTR138T3zLaaL7Y0RjxGFa5B60xs:LyMDRU0HUVWj38TKkR264WBM
MD5:	D4CE0F73759B2DBCDCBE095B6DD9477D
SHA1:	8738A867B024A35670F794AA3BA8AF3A193B91FF
SHA-256:	F64806552364D33A0C664484E5AB4772ED8EA3AC354DAE724F2D6ED7E829DF64
SHA-512:	62289E3FEAA88AF8DA1EF62636689C7C3C226BD23C621C7B5CD0482CF16F23E600A7360201DA0938925B018973114A1F2E905B190E0F4891ECEB9C07398D961D
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/js/WinJS_4.4.4/base.min.js
Preview:	/! Copyright (c) Microsoft Corporation. All Rights Reserved. Licensed under the MIT License. See License.txt in the project root for license information. /(function(){var globalObject=typeof window!="undefined"?window:typeof self!="undefined"?self:typeof global!="undefined"?global:{};(function(f){typeof define=="function"&&define.amd?define([],f):(globalObject.msWriteProfilerMark&&msWriteProfilerMark("WinJS.4.4 4.4.4.winjs.2017.7.24 base.js,StartTM"),typeof exports=="object"&&typeof exports.nodeName!="string"?f():f(globalObject.WinJS),globalObject.msWriteProfilerMark&&msWriteProfilerMark("WinJS.4.4 4.4.4.winjs.2017.7.24 base.js,StopTM"))})(function(WinJS){var require,define;return function(){"use strict";function f(O,F){O=O\|\|"";var I=O.split("/");return I.pop(),F.map(function(k){if(k[0]==="."){var S=k.split("/"),o=I.slice(0);return S.forEach(function(N){N===".."?o.pop():N!=="."&&o.push(N)}),o.join("/")}return k})}function n(O,F,I){return O.map(function(k){if(k==="exports")return I;i

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	68779
Entropy (8bit):	7.986202455986305
Encrypted:	false
SSDEEP:	1536:dgkatfQnDOqe2V14x9TsqIFie9jrnoY1ZVmw4achDXd7xo9:dgk9DA9x9TsqujroWLv4acla
MD5:	47D9FD4E004C37E011FE88CE26405864
SHA1:	EAEB07668AAB912E014D7127ACC021CA422CBA89
SHA-256:	AD85312670A41AEBD0DE4052D702103C56F2F9DF27B88FD9D61C440092E4955C
SHA-512:	76D395D0DD85AA1F2F098F2D562BC5E4AEA8DD36D5B6B19D7548049F197D02D6B496B669C4971420019EA5CE1FFA51979441228C676D9FCA011B8CAE11DDDA5F
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/BTC-halving/bitpanda-academy-intermediate-22-bitcoin-halving-header-NEW.jpg
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......4........pixi............av1C........colrnclx...........ipma...................mdat........u.@CA.2........1@.X/].Q....3..........?.>4.............2.....mFE.V..>gI3....n....$Z..a\|...]...}..\.Jn.t.;.........B.q..!PE.Q...a..u.Hs.. g.V..<e.....i5.#.J.....Cj..^..s."]...."...9.L..j.....)%.&$...=.....A_..y./+}.W....+).N4.V.....VT....f..4..jRiA....uq'.($.b...lq.....\1{+.Z..~F...nIV9...k.g@.7I.1...H......e..iS.;.R.....u;P...0..!....;#......J...l~S.D).....}7.........../._..J..HP.C.........>..c.....G.*...2.g...Z>.1.m...J..7l......T.O.%D..a.tx...W.6.......q..?...3<..l...2.t.m..i..$5W.8....R.f^g.3qb../..8..I.o# ..&;k9.i..t.....2._... ov..K..Vf.......`..Y+.#....:1\..usK.\.(..YWA.w.@...R3.Z.....C;..I.e..P......... .....t.F....<...).s..i]....4.....WD)..(..R..Q.~..i.k....

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	70571
Entropy (8bit):	7.982319117433967
Encrypted:	false
SSDEEP:	1536:/wy5+HQZt5i61tjJPCodpc8i/akRlwRdj7qwAbSSVBEsI:Yy5+m66wo3cqkRyRd3qwAbSKI
MD5:	545544DEB628511A2E062F3FDE33F9E9
SHA1:	32C1FE7968477BCBB78EC5EC42BCFC51B43DAB94
SHA-256:	1C8A518CCC127B1DE4F9FEB82F8FFF77751413C920C4677E9EC3C4484C13EB5D
SHA-512:	E4957BA0D6C0E43232FB96BE0B4F49CE796F5226A858418DC6D8A008CA9331EF8BEF45E596B0F43104AFD675561BFFAFF091C575F3822158ABA1FC106D24524F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................../...L....cUb.W..S..F._..L.@c.'k.M...je..8.. ....}:...05.m.^h-Z...`..9...4.".D.............i......s!.Zk.Z.{.>..C2a..0.-......._V."v.VkIC..o.'...t.....J....S.M..[F. ..3.....\..X.4..12........CmGb.......t....{Y...!.b.b0~?...A...`._..p..VD.f..m.x.r..Z...w.....q.\|.\;)2og.vA..?.C....KG...Q.f.. m,0..r.l.[......MH.J<..G.Qr.mX0..ZO.Y.S.t.....!.g.\N..XE..c..<............D....F.(.v#d..a.TWo...b..>~..7..\|[.....]..S.e.......~v....<(....C.I..&=...X&...a...#..B$g............bW.e../..Gl0.+^....9....q8..w......?K..w..e./.8.. ......D7.8..\|M.P.x.8..$..u7.<..e1..C...*...x.y..........7.k..0.S...Hc...H.bp1."..)..U...rUg.o.....d<uE.[..L.R..'..dy....ad..F "n

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1233)
Category:	downloaded
Size (bytes):	1397
Entropy (8bit):	4.2794421904574556
Encrypted:	false
SSDEEP:	24:XHmMB5ssbZVJwjF8I+7h9b7SHOmYe1EHetoM5icwRB8aUDUnpTNbCM97:T6syF8Iqh9X2OjmEHGHrqB8opIO
MD5:	427AB7199692811ACD421C088014C704
SHA1:	902AF252B53EB8587F980DD2F392A1EC6E27CE20
SHA-256:	4FCEE45DBD691488ED1472568DC852B9D5331D7525EB3ABE7E603A9C05127F5E
SHA-512:	A81687720F444A825C6F326E543C7E470F2001995C0DEC1BC6927311D36BEE559ECB9C4D951E4EDCC3B20A19AEF7FBE0B24ED0C8F4C5D7CE7EA5C1F1462E67EC
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/asset-icons/asset-btc.svg
Preview:	Generated by IcoMoon.io -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">.<title>asset-btc</title>.<path fill="#f7931a" d="M16 0c-8.836 0-16 7.163-16 16s7.163 16 16 16c8.837 0 16-7.163 16-16s-7.163-16-16-16zM20.715 23.463c-1.364 0.494-2.631 0.307-3.194 0.233-0.277-0.037-0.747-0.122-1.247-0.226l-0.829 3.096-1.906-0.511 0.816-3.046-1.451-0.389-0.816 3.046-1.906-0.511 0.816-3.047-3.75-1.005 1.005-2.184 1.14 0.305c0.383 0.103 0.553 0.11 0.754 0.002s0.299-0.33 0.348-0.518l2.114-7.886c0.132-0.494 0.128-0.639-0.031-0.953s-0.684-0.492-0.985-0.572l-1.101-0.295 0.53-1.979 3.749 1.005 0.819-3.055 1.906 0.511-0.819 3.055 1.452 0.389 0.819-3.055 1.906 0.511-0.828 3.091c1.398 0.469 2.383 1.023 3.123 1.953 0.957 1.201 0.484 2.716 0.36 3.075-0.125 0.358-0.474 1.018-0.916 1.386s-1.348 0.613-1.348 0.613 0.873 0.444 1.393 1.108c0.518 0.664 0.768 1.657 0.402 2.914-0.365 1.258-0.96 2.445-2.323 2.938zM18.725 17.89c-0.308-0.273-1.037-0.726-1.963-1.041s

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39537), with no line terminators
Category:	downloaded
Size (bytes):	39537
Entropy (8bit):	5.368878233437066
Encrypted:	false
SSDEEP:	768:uA+mwK0Dcf+Xe4E8J5gUGqXn6vcTXRG46hW:uA+5K0DqBPC60TXM4aW
MD5:	78BCB1FA8771EF7EC646517EBFBC7318
SHA1:	401B8DB45E494762EB8DFED39648250004149A88
SHA-256:	A782015CECEB595C8305A944456587C4F2C4B3F0CA82AAC8E5C6D7B33138F392
SHA-512:	B957D5445E9DFF1A54001C99B0C147A68F286E0F007C562A1A722F8A08ABB3C7D97E084620314EF811BD37C0A9CF9F7A9CB0793BC8757B8BE4DAEA2142B549FD
Malicious:	false
Reputation:	low
URL:	https://platform-api.sharethis.com/panorama.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16621_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16621_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16621_a(a)}}var sync16621_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16621_c; if("function"==typeof Object.setPrototypeOf)sync16621_c=Object.setPrototypeOf;else{var sync16621_d;a:{var sync16621_ba={Sa:!0}

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://id5-sync.com/k/155.gif?puid=AAGbQU7MV-cAABTrRdAf4w&id5AccountNum=155&numCascadesAllowed=9
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3456)
Category:	downloaded
Size (bytes):	3492
Entropy (8bit):	5.162394902497723
Encrypted:	false
SSDEEP:	48:4Qj8tcGTWVUc4HKDiPx8UNZ5xD0Ucy4iIhTU7nY0F83aXHl6s8Nqd+LlWZsil4NO:Tj0cGTWS8pLNG7Ynk5M8ZsqJ
MD5:	0091BA6FCA85EBA88D94A5197F527DA8
SHA1:	C3B7E9D4E6E88F15AF5BB2F29738291FE56A464F
SHA-256:	94A96A4FC313FE6DFBA290ED6BC0E802EAAB40810E59032A06F6774553B1C6AE
SHA-512:	F5B7E62633BF658104443461E84F36D250C93F751CB8AC865B90AA0F4B2D78CC956A9FE0150DCBD7124F49353D15F7C39EE8E8F97554DE5C7DA623E8F1447ACE
Malicious:	false
Reputation:	low
URL:	https://geoip-js.com/js/apis/geoip2/v2.1/geoip2.js
Preview:	(function(){window.geoip2=function(){"use strict";var l={};function a(e,r,s,n){this.successCallback=e,this.errorCallback=r,this.type=n}a.prototype.returnSuccess=function(e){this.successCallback&&typeof this.successCallback=="function"&&this.successCallback(this.fillInObject(JSON.parse(e)))},a.prototype.returnError=function(e){this.errorCallback&&typeof this.errorCallback=="function"&&(e\|\|(e={error:"Unknown error"}),this.errorCallback(e))};var h={country:[["continent","Object","names","Object"],["country","Object","names","Object"],["registered_country","Object","names","Object"],["represented_country","Object","names","Object"],["traits","Object"]],city:[["city","Object","names","Object"],["continent","Object","names","Object"],["country","Object","names","Object"],["location","Object"],["postal","Object"],["registered_country","Object","names","Object"],["represented_country","Object","names","Object"],["subdivisions","Array",0,"Object","names","Object"],["traits","Object"]]};return a

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	downloaded
Size (bytes):	405569
Entropy (8bit):	7.977253307541965
Encrypted:	false
SSDEEP:	12288:i78RMhHQqQUQk1RSxaohIkG1e2JnyH6U4:+IMyGxvdfkb2Jnk4
MD5:	A7D01634052599EC3560C59F42671F92
SHA1:	06F570D6224F3F96A4E18D80EA38D08D51E737AC
SHA-256:	109352361AAE3A0A2A2F499DFCA80D1E54FEA88D9A7ABD5C1CC9E7B2209251E3
SHA-512:	6AD99B244F545D5C267D9D6545A16A9B1726F896F5E60FB366001636F17BBF5DE2B41AB6A31700D4B0847D62B68BD0B8A7A2F8BC0BDAF391B0DA4C9D0B233F78
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/1200x600/793/82/56/8256aff80a99d898f6a5cab994ba5e0b/8256aff80a99d898f6a5cab994ba5e0b.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X...".....................................................................................M.......,....Ll..~e'H..wB.....l."...c?...+V%.-9....v..5.G......=..!s. ..tC.r.\Y...$}..P._M7.....n.#<.X.O...%.86..?.my9f<na..0.$."....>..TE..(c).....U.5..E.k[....g..:].[.{.M._A..(~..c[.....c...T..[%V!u.6...l$^.S5^0....C..1.a8.`l.....H.S.5....<.....p...GE.5./V...X/I\s.Js!.z..7......A.......R..YX...m....h.....2../K.....}..62..#.zC..{.&s..(.`b.c.ba+1P-.e.#.r.`..<M.V.0.A/.........g .p.L_pL..x.....!4^7...........[.e.e......#......x1../(.p.8.......E...eX........tY......%W.i.:..7...>.VW."~..h....j&..~....D.j.N.=......Q}....g.....3..6...$..s.....>0&......v1..-5H.W....}...*bmXGBu......U.<.e..2..i;.A.. =..!...`..z...}....O..2$.Z.b...r....g.\C.D@5.p".D.#Na.>.

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	760
Entropy (8bit):	4.617670976934863
Encrypted:	false
SSDEEP:	12:trz4uC3oCNcvE+nG2uHKp7TTXEdefzBlRa7wc7HgQaWJWUR3pR+CFjb/lRFzR2:t/4u7u+juwcdefzBlRa8oHZaWJbR5Rp4
MD5:	D3A90161A921A24B34DFD802B9F34D35
SHA1:	104A6477E9104866E004DDD96E9B1E6BCCA26D14
SHA-256:	8FD97C7FBF95637C8964F4ACBFA014F74D6D3B667190C6A598711E766757CC83
SHA-512:	9603A7BDBFBC3C064AADFC0A345640A0004620A8B7E957D7B37FDF64CEBC47FA381A24AFD3189DC0763801C6CDCC38171FB2533824DA53FC334DA927BF8CD928
Malicious:	false
Reputation:	low
Preview:	<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#F2F4F7"/><path d="M22.201 18v4.2h-4.2a4.2 4.2 0 1 1 4.2-4.2Zm-4.146-7.003a7.003 7.003 0 1 0-.416 13.999c.121 0 .242.004.364 0h7v-6.912c0-3.86-3.087-7.059-6.946-7.088" fill="#20EE82"/><path d="M27.9 8.1c-4.79-4.79-12.187-5.383-17.623-1.78.157.174.292.368.402.575 5.16-3.405 12.188-2.838 16.726 1.7 5.185 5.185 5.185 13.623 0 18.809-5.185 5.185-13.623 5.185-18.808 0-4.538-4.538-5.105-11.567-1.701-16.726-.208-.11-.4-.245-.575-.403-3.605 5.436-3.01 12.834 1.78 17.624 5.467 5.467 14.331 5.467 19.798 0 5.468-5.468 5.468-14.332.001-19.799Z" fill="#7F8C8D"/><path d="M7.211 7.21a1.4 1.4 0 1 1 1.98 1.98 1.4 1.4 0 0 1-1.98-1.98Z" fill="#20EE82"/></svg>

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59864)
Category:	downloaded
Size (bytes):	60009
Entropy (8bit):	5.111262541009076
Encrypted:	false
SSDEEP:	768:WvhXu3WElnWNqcLS/gmIoAU+D55c5DdAesuyN:Wtu3WElnaqcLS/g2055c5qN
MD5:	4D28CE507B93DD66157F5E035E898D3B
SHA1:	6D12AF9604F3B2D6C2CCFBFF6E3FBD9875615894
SHA-256:	1B1B0AFA7250DB56AB3D60B4D93BB5192A7441CA6825FA4494C6BBD20EB2EFF7
SHA-512:	30F0FB3DE4EACB34609205E7E3F6CD53E03E4880CD7CA274F6577726BD38B4D0A092B88FC40F4F583E1E0EDF5B0D952E794D34F0F87E3B16C6BCB9BFE0BB3119
Malicious:	false
Reputation:	low
URL:	https://code.highcharts.com/modules/annotations.js
Preview:	!/*. Highcharts JS v11.4.1 (2024-04-04). . Annotations module. . (c) 2009-2024 Torstein Honsi. . License: www.highcharts.com/license. */function(t){"object"==typeof module&&module.exports?(t.default=t,module.exports=t):"function"==typeof define&&define.amd?define("highcharts/modules/annotations",["highcharts"],function(i){return t(i),t.Highcharts=i,t}):t("undefined"!=typeof Highcharts?Highcharts:void 0)}(function(t){"use strict";var i=t?t._modules:{};function s(t,i,s,e){t.hasOwnProperty(i)\|\|(t[i]=e.apply(null,s),"function"==typeof CustomEvent&&window.dispatchEvent(new CustomEvent("HighchartsModuleLoaded",{detail:{path:i,module:t[i]}})))}s(i,"Extensions/Annotations/AnnotationChart.js",[i["Core/Utilities.js"]],function(t){var i;let{addEvent:s,erase:e,find:o,fireEvent:n,pick:a,wrap:r}=t;function l(t,i){let s=this.initAnnotation(t);return this.options.annotations.push(s.options),a(i,!0)&&(s.redraw(),s.graphic.attr({opacity:1})),s}function h(){let t=this;t.plotBoxClip=this.rende

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 992 x 400
Category:	dropped
Size (bytes):	119792
Entropy (8bit):	7.943024273119429
Encrypted:	false
SSDEEP:	3072:BLYAwOYDn3PzCGOGq8UWNyYhFrEM6MA5cw/Ja5RU:9YATY7fOjGXUCyYhZ6MA5cQY5RU
MD5:	22007A462C703267DBD98CE750BA3F40
SHA1:	3256B632E29BB2D07B60541D06A6F914EA8E9F1D
SHA-256:	D0AF8A2505BC16B6E4FD484DCAEDFF90EDE2B943AACC538F8E83CF39D64F9C63
SHA-512:	AA2F76A4124481BB6599EFFDCADB5FD0C559451C6296E0A7604B5A88ADF5894B6ACB545F11BC404F222C89BB7479E90C7EA8A271F820910D80F4D891B421A283
Malicious:	false
Reputation:	low
Preview:	GIF89a..... ...................10/QOM...@><.......................ligzwt.........}ztqoda_#""\ZY............./....f.sJ)..Q4.<'.)....2...........W.....q......................S..IdVR.l......{.....}.4...y........1R.-P....,O...{...z..^n....Lc&......Wi.7U...4..n.........D].......\....N.........ix.......=Y......>.....+M.<]>Yl...._....3.'F.)J.#>.;I..........Yi.DM..Mt.%..<...Yn.......!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.3 (Macintosh)" xmpMM:InstanceID="xmp.iid:4935C5FDA70511EEBEACD463A8F0AF50" xmpMM:DocumentID="xmp.did:4935C5FEA70511EEBEACD

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	995
Entropy (8bit):	5.206333961533778
Encrypted:	false
SSDEEP:	12:TMHd64lWq/hFQF/hW5qH/4XQv/h+9JvRdTRrnv2csLO/D9bQaj43d79Bcj43hld8:2d64lGF1fcyk3TRrv2lVajsd9Bcjshl+
MD5:	5D6E0EAB88B3DEF1A2615330A1B41A9D
SHA1:	0E9F2620FBCC3C5FB3B2AF559C3E492101C751C0
SHA-256:	2C93E45441D68372E6A76C9CDD54F9D26C3E1CABB2817D9B82F7DF7C4E8982C0
SHA-512:	D8816BE8CD32B528FE29AD88A58CBED63E55CA341C74B9D83EF04B433E7AD06F7712D6AC7E6CA1B38D12750BFE7274A06D24BE222E3956C40164075E179B1C3A
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201307.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_1307" data-name="Group 1307" transform="translate(-203 -290)">. <g id="Group_1270" data-name="Group 1270" transform="translate(-2 137)">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(205 153)" fill="#f2faf6"/>. <g id="Group_1065" data-name="Group 1065" transform="translate(-178.879 72.838) rotate(-20)">. <path id="Path_807" data-name="Path 807" d="M20.737,18.309H6.617v1.637A1.793,1.793,0,0,0,8.41,21.739H20.824a1.793,1.793,0,0,0,1.793-1.793V12.9A1.793,1.793,0,0,0,20.824,11.1H8.41A1.793,1.793,0,0,0,6.617,12.9v2.05" transform="translate(329.86 213.135)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_209" data-name="Line 209" x1="1.215" transform="translate(348.737 227.102)" fill="none" stroke="#27d17f" stroke-linecap="round" stroke-width="1"/>. </g>. </g>. </g>.</svg>.

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	616848
Entropy (8bit):	7.997798493527489
Encrypted:	true
SSDEEP:	12288:gt+1ekwBxhKyxKVBe52kSdbrrgpNYGj4UhGKamTvqc2TrwHWVFHkXF4R:BskoHVxus5OaMahVacycwrxVZkXm
MD5:	8C9F73D22711B92603826F6975F2CAF4
SHA1:	9DD719A3680B9869ABEBF77CB6AB86D3C93130EC
SHA-256:	5E699F5B049595013849DF4C90514F7DF7BC70DE4025BF08CC79CEEE4B7B4928
SHA-512:	69FC979ED0E342289FA50EAC961B85BD949421A6B2E7997FEBAED70B2F076011ABA7D65728211399CA7DADA292BEC7B8A17A28AC8EAC30269D4FF1D6A9F42946
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/bpc%20b%20logo%20rounded%20square.png
Preview:	.PNG........IHDR...............+...iWIDATx....E.E...l....p.B ....C....F...;.\|-yg...ud9x7...U]U......\q...o............x.<Q.@....._.H....@n..m\... #V.fS9..bQ.2+.x.&.A....`..)..j..Q !.lr.{.....3.'.6..6..@@I@.=.....l<Bp..........X@.#.M.....(..\|(..$NiL a.@....r.....w...f.%...m....D..c...b.=p./.=!.f...M.}x!.Me"+../..<-....~.{8.:.}...G..;...7.f.jH.Y..U..u.....}.A\...+..........F....!..1..?.@.....q...........uT......H....v..<<C........B.P\|..y...-O.e....a..h...>.z.H.[.s.../.:m\....'..]..:.x:...C..N...zK.)]G...........x...^.@..E.(........."..H../../.....\q.g.w..3........ _O.U.@.l.....R..)?....'..w...+.d0x/=../.p...N(....yF6..A.x+...S.~U.FZI.(...`~...C9..=...n(...!.O...c...{...k.g.Gb..M......B..E.w7T..]..].T.{..+(..]T.`..{.K. ..cA..C._.3.q.y=.&&....x.}.W.c...c~7..2s.....#.~.,`pI...R.....s...."...A~n.R9...T.%..U....4.}qP......n...s${6!..5..C.../g.y.4v./..~...y...6.?i.XVh..H+.C.......l..Izn..8.\<g.J..fX.'Y4..BNZg..!-...v..k...N.......v.&..

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	66646
Entropy (8bit):	7.984470585083938
Encrypted:	false
SSDEEP:	1536:YYK0zQIhJloiyQPowfQkcDMDk8PxhhFY0j6shXH6v:YYt8ILUwfYizxhM4phXm
MD5:	74449ED2ACF097C062DC531D0B9F9543
SHA1:	AE1CDA237C92EEFD15C95BFA96A984886EA19CC7
SHA-256:	4C0F9F6D914E98F6F190758AC7810CD93D6508AFF8107C443D79DAF142F1FC7B
SHA-512:	4386C89103FBD51EF6B1B2C14701CB58756ABFDEB387DD4B307FF846428F997F5DAC2BA06EA5FE389BA337F3A82C040B1F95C1106D056FA4CCC6271B0A872334
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/73/e5/73e591c00ee5f6cfa061e6e4f5d56a92/73e591c00ee5f6cfa061e6e4f5d56a92.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................k..Y].81..E.V.c.nQ.}..l$g.....Tt..S....9.......y...D.H9.H..F.@.j...3._.x.>i..>.] .......J.o...0..yU..g..%.Wf.^Y...[...l%.........X..zJ..U.{E_-'<~+L.U_.zAO..A.._B...&.Iv..m...8j.S#1....(......Z......M....#.=....@6O.88.H..F.\.'.-....x...,....V.#..N_../1z...u.."S..7.W...Y.5.}N1......ZTii3Vg.4.l.Y..fU.:F5.Nc.....a...>o`,o:....^l...q..k..?.......9.?7N....F{.4.L..-.MQ...1......Q.....!~.dZ....hX.(....#Y#.H....0..I:&....i...plE.\.......$U.\..*.kkl..;..ho.ng.N..\..FN..%.I....y1}.Y. J...b.ql..HN7p...h\....r.....<.[..!8...e5z.h...a......K...\A.6.R)..,.)\j......oF...Nw...5_B..3."P....B..V0.....U.3..6....^-W..-........!Q..tJ.V...s.......&!....>.TB]...Z...B

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/oiq?uid=Q7674427541144600090
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	55818
Entropy (8bit):	7.975134248590787
Encrypted:	false
SSDEEP:	1536:M3MPdwPjoon/qXCesjSAKsrGfrA5Vq7D4:7wU2nesjSAKhy84
MD5:	140BC4285B4926CFE500933821A296E5
SHA1:	FDFAC188B843B53AC77DEE4379E1004D5F1ED906
SHA-256:	80CF41B1B1FC0E57C22678E6B5AFD156D5235FD803CF9763B33B39DF5BBD249F
SHA-512:	6121694337F62BA6E458B35E3FB693F44547B96AD3A1B578F9E307D0D9F292D45CA1425903DC6FC1E46383EC0ABFD383F55BB008B85FB88641E5E66F6A2A8762
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................{...z...j7]..>.h.(.d3.[.?~.<.-.Vy..;...............R.&..[......!O......r...^\....H.N.....b...">^.Y...z/.o..x.o...4~...~.s..}J........>.U.s_.].L.a.7.`.>&.xos..//...d).....-Q.^...l..C..Q.O.%.}Z.Mo..n..zk..~..^?....[..g.9.+..T`.\.A...mZZXk./]..OQ^{......).d.H.@u8..{r...w<l.XZ}Z.Ij..w...Wr....~~..g........-_R.VS...5:}..-2..}.((EX...T.\...m.k_=.?`.[J..........'.X.....3.......gNP&....3............B.-h..kI...~..w+.dn3.V.k...F.......m=.;m..J..k....G.....N......`...#?.9f2..weU....=..m....r..E..p....I._......(Y_u..S...eC.....F).w....m/..).eq~{.i.ea.x...\XwFI6.7\.U8L....W.$,..`..+.CA....."E.I...uW..+,.vS5......T..W.K.R.2.\OF....=Z.}..-.m..*

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 507, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	69728
Entropy (8bit):	7.986369675781586
Encrypted:	false
SSDEEP:	1536:lM/Rfe0lHMmv0nSxlGYj05dWbhhZYs7dYyG7UFMBuAJV:G2CHGy4YAnUhP7d+UWZJV
MD5:	56F8D8B3D83CEC1839F27E1C102CED20
SHA1:	0685247239AC0A3DC2E4B60D3BAA871313DC4182
SHA-256:	C13E2F5714AC3DCF791436982B34D91184E991D344477538E52B1D7CB61FA688
SHA-512:	3148068E557AE8B9687BBA1F024EF7B2E3C6729193AA08B1F57FA689AD23B643ED79EA26D997675308F1D07FB06F18865DDAF472B472B25DAB385583AD25F5F7
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Screenshot%202022-11-17%20at%2011.14.47.png
Preview:	.PNG........IHDR................Q....sRGB.........IDATx...1..0... (.....#.l.>...<r~..xDF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .....Q......0NF...2...8... .(...d... .\v.^5. ......\F.@.@....boa....z.b/.(.Z(.im.............lq.....M..}..........#F...p.1.....#F...p.1.....#F...p.1.....#F...p.1..........2.8..R....7.....R......6..z.....m.c........9..x.,k..........e.eY...f...\|`....pS.R.Z.F.Q......t:........x<..f+..h4.,Kkm.O.Z+.....r8.6..B..L&.......M$..\|.V.M&....W..m...\|0....\..H$.~...[$.I.R.B....f....6.[I.[.9.......F.!>H).Sk-..x<R.P(..F_^^...........U..N.

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	55
Entropy (8bit):	3.928388749920388
Encrypted:	false
SSDEEP:	3:Mt4c5fwn:y5I
MD5:	30DD540386785F7071CB4DF6945C34EB
SHA1:	1B117F6FE3A0B801EF527911433AB643F70F0C31
SHA-256:	3C4721A5A04B2F27A0077F73B5138EA74D74795AA4FFDCFB7BF06066CFA8F8AE
SHA-512:	BF7B787F785B5F80ACBE6BF429AFCCD58ECAEED6C03483928F131C3839E233CB5245115D975FB3D8D3CB7C09574B2DFEE44A8BD91700DBCB9F7B16FB8B5044C6
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/js/WebCommon/Vue/initVue.js
Preview:	VueClassComponent.Component=VueClassComponent.default;.

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	35741
Entropy (8bit):	7.953001167123851
Encrypted:	false
SSDEEP:	768:epn/7FTJStUaMiXNXzFHvK7NiRrke4RcMuMItktCl+xA:epn1JStUaM8NXzFCNCA1CAxA
MD5:	792CF90256E0658E45847461CBEA9385
SHA1:	D7A3B77F6D289F12C00C2A842F6C84B5A4D00A87
SHA-256:	E1FB92278B8925B26C65188DCDA7D1D3AE25E8793035D5A161FD8339AACA05EA
SHA-512:	EC5DC935EEF7AFC95E28E179BF759CE8705BD00732DA039F0EF05A4AEEBEEC918A1715228753C1C1252006F6ECF1C6714812490F93A7C41BC2BA5A816BC5D6E1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................x.`.....@..T..`... ..A .... .I..f.A..D`.J@.$...:i.....\g..z...%.......[.x.{.Ny.^.r.'.'.pK.#...:.X.y$.Z..$...L.....5.$..\..x3.,w.h.s.Z..8.....hk...tp.sw....qbCQ.I8.5.&Q.Q..../...g.22(PI.Lf@dd...Q.....s.H.r..Cq4Y.?.}."\|.P_..C.....O._$=q'.6w,uA]5Mz....(..4g../.8&^p.bJ.K..0...2..0.7..r....,m....~qZ..Xy..W..(Y.((.n.a.q..0Gf....n.........D.....D.H...w\|#.^;...c.uh..k..D..,.`.iP.h.%.R..P.i3....X....m..<I.w...j.#.^.x.ju.Hz..._..].?....O..8wsRF]\.(.E...@.(..P.H.F....(.}@....c.u.......jR.2.@60}E./-..dT.0.) j .J0H2.iP.)A............E.y......\|...j?..9.m...s.cYvhH..E.2....[.r.SN.P.:..@jA..............bN.N.r...ns7H..k......._.v..+.......e...hG..[..^\.'b...

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	dropped
Size (bytes):	369313
Entropy (8bit):	7.987891426482751
Encrypted:	false
SSDEEP:	6144:i1+Zvwf2B8Co1Wu/f44zUanT3ZTNGEpLQAYF9uyLnwjXJvxpNngW5:i1yv5BaWuf44IS1TNGEpLQfFoysTHb5
MD5:	BCAF9A9D473C83419518C5EF3BAC0E5A
SHA1:	0DD3839709B5965A485E13CF85857EAA18A2ED52
SHA-256:	81B9B7D536FAB4AE524808D775E57F2004C3D504823D7460C5CB366034C48019
SHA-512:	607744EB9118D6BFD466B0947625FD8694A4DC815887D71D004645172399264AA6E969B06244C98DC2F14E6DF0642C7E1D490D628F1DCFB9952603D7BC3BDC3B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X..."....................................................................................2.'}W...U.)....[9.s..1yB.=.c3..Q......V@k%......C...}..y)Z..')R....c....e..8.......6.#.x5...Fr......&.KKN..E.,Tt..H!.V\|...d...s.W..iDl:m...8g.>].mC/..u..6..,..V\......J..C..>L..C.../..=....7<...}&..i(.tc.a)>~pt."%9..5C.9d..P87.. ..]..(5....r..Z\\|2..P.e..D....n8R.J.e(s0^!....`.E.l.....=.x..Nds.a>..<..s.....IC(fA....aE+J..m..39R.=.z.....e..3.. ....e.)...2.[y..U.....4%K[k...z......H.d.\......V.....>.aj..%..l....h...:..ve7.r....x-....i....d.V.S6E.6..M.tv..t...~...........S...x............K....rk{....ar..+....>{....C.%O9x....AI...0....mC..B.i..A$e..YR....^...W..}a.{.l.6{F..'..{..N\.A.....8.....).eD1.'9....'.,...o,%..!...o....u..c.....!H...9..:....<=.P\|.

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	64837
Entropy (8bit):	7.986979437877228
Encrypted:	false
SSDEEP:	1536:I6E/gShZt3L4fKspBEzpwqtkS5muXBv2XshNYUJRY+f:I6aptb7spkIC9vcsoUJ3f
MD5:	E8EB1D9EF0B99BF6FB4EF6575EC5DAF2
SHA1:	51213455970F239A31072F1C643061B6174EC69F
SHA-256:	7E4F94842DBC458F968724EFD9F9AB6930BC96C467798E9328A0F490F82F5FFD
SHA-512:	CDDA49F8BFC7FBEF9377035E75393419FD448A87CF8EDB1518CBC984FD1E62472700AA204D5142BFB760A902991675BBA51FF9F3FA7A058ACD182C67747A303D
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/60/38/6038541d6bdc8473ff27026ea47017f2/6038541d6bdc8473ff27026ea47017f2.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................l.... .x/q]}....!....3=...{33..}9...&../.../TW..YP.!h..p..b.....E..7.U..^}...M8.e=.>x_p.4.2."q..&1<\|....fg..:t.,uoT...2.w...&...A.jP.TGc..F.rc..Ps..<...+..owD...rPe...wlvq5...65...BF.".m.l..g#d....h.F......FQN.>f..I.....y.p..+.l^..BU;~xA..H......N.a..f..4.8.7O.^.75@..jO.....4../m.Q=..q...P......{- w..X......Y........{.......6$./.L.;.+.5..^.YZxd.....9>.../.D....+...l.........1XK,.v7....i..../V.....q.U9...^..$.W2..3~..!..V.......Xd..</o.Y.k..R..+...+r').....=..}j..S-......I.`.....<.. 1.$....3...+x...R&K...#.%}.......z..8.>..dYq....a..._;..N...j5...n..,a....V.i.$...+y...[....X.%.......yT.....u. .HC4H...S......w.L.... .%.oI...Oz..7.g.+....&.

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1617
Entropy (8bit):	4.031327390782257
Encrypted:	false
SSDEEP:	48:TkNDi7BFteACCxLpxj0rTZc5LTYU8KNU4SncpjR:gyPQ1wj0hcVTV8KykR
MD5:	73B34DC61E24D681D8B8D3B83C2E9CA4
SHA1:	9ACA26A50EB4A84E065FEACEC67F5D40EB134CF0
SHA-256:	89CADC46509AF141EA9E83E6837EAE1FAE609E8D4628B1FDB9B6214B94FC9D06
SHA-512:	D120DD915ED23A54F807C687681876CABE3BE7AF35039C2B859E1C8B347FCA190C62E4F256F27BCFC375BC170CA645E5FDD2E90642253881D26201339633CC99
Malicious:	false
Reputation:	low
URL:	https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/xdb.svg
Preview:	<svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M20.3338 18.6776C21.4078 18.798 22.4317 19.0992 24.138 20.0728L29.1569 22.9335C29.6788 23.2246 29.99 23.7767 29.99 24.3689C29.99 25.6738 28.5546 26.4668 27.4504 25.7742L23.0138 22.9938L25.744 27.3702C26.4567 28.5245 25.6337 30.0101 24.2785 30.0101C23.6562 30.0101 23.0841 29.6788 22.7729 29.1268L19.9624 24.1481C19.0389 22.5119 18.8783 21.4479 18.8181 20.3539L18.0652 19.8821L17.3325 20.3338C17.2121 21.4078 16.9109 22.4317 15.9373 24.1381L13.0765 29.1569C12.7854 29.6788 12.2334 29.99 11.6411 29.99C10.3363 29.99 9.54325 28.5546 10.2358 27.4505L13.0163 23.0139L8.63991 25.7441C7.48555 26.4567 6 25.6337 6 24.2786C6 23.6562 6.33125 23.0841 6.88332 22.773L11.862 19.9624C13.4981 19.0389 14.5621 18.8683 15.6562 18.8181L16.128 18.0653L15.6663 17.3325C14.5922 17.212 13.5684 16.9109 11.862 15.9373L6.84316 13.0766C6.32121 12.7855 6.01004 12.2335 6.01004 11.6412C6.01004 10.3363 7.44539 9.5433 8.549

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	372
Entropy (8bit):	5.085833487113797
Encrypted:	false
SSDEEP:	6:tI9mc4sliuImRzAyAYXVQQcZqRILY/ZZTJv9qRTzOHUtLNu7aaTcJQStrV2Ws:t4IRMXVj8DL4FFqpO08QQSi
MD5:	A5AA43FA302867D3E888AC2F69B7B288
SHA1:	952B104251965AC706BACA3A022C103104E8FABE
SHA-256:	2986551FD9E82929EABB8CBA7C44F74A28D8496C744893432F067B320DFF55DA
SHA-512:	C32AF9ECF054F30FE9EBF1362385BA8E11106169251D433BEACEC02F3E0D7C078E35C109167B1360707BC5F1B0718B00E9044E2C75633F6D263F2C8B87274E2B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 50 50">. <g>. <path d="M25,2C12.3,2,2,11.6,2,23.5c0,6.3,2.9,12.2,8,16.3v8.8l8.6-4.5c2.1,0.6,4.2,0.8,6.4,0.8c12.7,0,23-9.6,23-21.5 C48,11.6,37.7,2,25,2z M27.3,30.6l-5.8-6.2l-10.8,6.1l12-12.7l5.9,5.9l10.5-5.9L27.3,30.6z"></path>. </g>.</svg>..

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/panorama?uid=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1&stid=ZGkACWYr8zMAAAAIA98YAw%3D%3D
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.408694969562841
Encrypted:	false
SSDEEP:	3:mS9ohkP/qiCnmddxCR:mS9ohkP/qspCR
MD5:	FDADC5E9AAC35E20C7592257764C6A59
SHA1:	87E1CFC8E008C80402B89A8C0E060E5565DFC77E
SHA-256:	9437A28E649F9C5754A7D1093BF2876B8DCC40A72E3795CC0BFA3ED6F7179EFB
SHA-512:	E8CE3F6D50223D85003E8F88C7C18DA5AF83684FE8B93A5F3EA971EC0A6A78CDAC922AAF84933BA5BD0323C2C22C615CE169F4A3887B8BF154EE99702C1EF0B3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgl-sZVIFS2SdRIFDb2Fgw8SBQ0pkDMoEgUNLQjvFg==?alt=proto
Preview:	ChsKBw29hYMPGgAKBw0pkDMoGgAKBw0tCO8WGgA=

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (610)
Category:	downloaded
Size (bytes):	611
Entropy (8bit):	5.16026894673604
Encrypted:	false
SSDEEP:	12:9RY1O/KAMsLgg5uKfncGmsORWZO1BcrPaYqCiCc5Ij:9RY1OYGx5pcGiRWZQcHvc5Ij
MD5:	2B89DEB5BA02A622743A5ACF6F1CD3CC
SHA1:	837EB12BFE72B72753E655ED892E2CC6B7171F5D
SHA-256:	706C59C52271C65ADFA48E72502894759AD9DEADAF2B7F8E0D1D6D94C14BF3AD
SHA-512:	5DB3C35D35C3327566018F392FE1F10D75C17155F34F12FBF188DDC61FAF6188A1674E9E4AC449CF80C6C42C6264105F89C46045C3A9E5774D1908BF2172B0F3
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/js/public-path.js
Preview:	(()=>{"use strict";var t={};t.g=function(){if(typeof globalThis=="object")return globalThis;try{return this\|\|new Function("return this")()}catch(r){if(typeof window=="object")return window}}(),(()=>{var r;t.g.importScripts&&(r=t.g.location+"");var e=t.g.document;if(!r&&e&&(e.currentScript&&(r=e.currentScript.src),!r)){var i=e.getElementsByTagName("script");i.length&&(r=i[i.length-1].src)}if(!r)throw new Error("Automatic publicPath is not supported in this browser");r=r.replace(/#.$/,"").replace(/\?.$/,"").replace(/\/[^\/]+$/,"/"),t.p=r+"../../"})();var c={};t.p=`${globalConfig.u}/Resources/dist/`})();.

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	640
Entropy (8bit):	5.030565511324362
Encrypted:	false
SSDEEP:	12:TMHdVz4uC3LjIM650wo6JdiB4RoLyWvnLW5RsqHllI8jFCw3h0xq2J8SbfsQKe:2d54uQjIMMooZpWv8H1FJmFJDbfste
MD5:	2F598D9E8034D366CAF7664286890A6D
SHA1:	CD1E0AEC69BCF48C4607E39D20CF185BCF47544D
SHA-256:	0256EB6B02A1D70F93FB0D4A569615BFC3A0435448894C1DE8B3980A623A952B
SHA-512:	058AA74BA22F3E2BF3A146754DB1F17818115C2447B5297AD26A55928A84632C655064CF9BBD5A161A3A3EE6A247ACAE04E7F9A7C52E5555501C4175FA78E002
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="17" fill="#fff"/><path fill-rule="evenodd" clip-rule="evenodd" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0Zm-.014 5.143L10.4 17.733l7.587 4.484 7.588-4.485-7.588-12.59Zm-7.7 14.028 7.587 4.483 7.592-4.483-7.592 10.692-7.587-10.692Z" fill="#494949"/><circle cx="27" cy="27" r="9" fill="#7921EA"/><path d="M23.384 30h1.052v-6.79h-2.104v1.043h1.052V30Zm5.221.115 2.926-2.926-.612-.593-1.893 1.893v-5.278h-.851v5.278l-1.894-1.893-.602.593 2.926 2.926Z" fill="#fff"/></svg>

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5636
Entropy (8bit):	5.018345325941602
Encrypted:	false
SSDEEP:	96:qSxKQMY7WVSJ7hnnPNrEwIAszUN4+drn6AVMjQ/SMU5TP:FxKDYTJ7RPVaUN4+drn1VqQ6
MD5:	345BE4EB0378455A9E71B97FFC64B9D0
SHA1:	1DC0A99D3BAF92F3D08993B5D8436A0639AD6F2E
SHA-256:	3D176AEA547EF7F3124E26932FE83806AF0AABE0C3AECC77B922B6D8DA231212
SHA-512:	800EAAA06ABC4C3BAF6E08C7652370DD9742B4996AFD014B2522EB5A9C5E46F53A146BB438CB36FB9DF7FDE3357630EAEEEFB1CB31CFBCC22F217947BCA97413
Malicious:	false
Reputation:	low
URL:	https://1movieshd.cc/css/group_11/theme_3/home.css
Preview:	@charset "utf-8";.@import url('https://fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700&display=swap');./* CSS Document */.html{position: relative;}.body{ background: #000; font-family: "Montserrat", Arial; color: #eee; font-size: 14px; line-height: 1.2em; font-weight: 400; padding: 0; margin: 0; -webkit-text-size-adjust: none;}.a{text-decoration:none !important; outline:none; -moz-outline: none; color: #fff}.a:hover{color: #F5C518}.button, .btn{ border: none !important;}..btn-sm{font-size: 12px;}..btn-radius{border-radius: 30px;}..ulclear{list-style: none; padding: 0;}..container{max-width: 1200px !important; width: 100% !important;}.#xwrapper{ width: 100%; position: relative;}.#xheader{background: #121212;}.#xheader{height: 60px; padding: 0; margin-bottom: 25px; position: relative; z-index: 99;}.#xheader #xlogo{display: inline-block; height: 34px; margin: 13px 0; float: left;}.#xheader #xlogo img{height: 100%; width: auto; margin-right: 10px; float: left;}.#xheade

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1080
Entropy (8bit):	7.609663187136788
Encrypted:	false
SSDEEP:	24:sRpKL51ZRUA54kSqvwt7iYTulbB5A8+bAzzI+aD01:so7wkZrB5A8nI7I1
MD5:	1225723EF98D1A35160861FC1DDF1322
SHA1:	A23900770579FC926E5296EB6191B0B3F3007238
SHA-256:	11046B58A6884E47D0A5F6719B25C1D1E5482D68A91028899A903D0308A91FBA
SHA-512:	0C132631653A7CB5E5838AF0CF0E277C33FDCAA50D513BCFF0E8213E2303F2FB18FDC9063B7736C1C13BC3112A8545560FEA4403A0A67506859E56A649B0968C
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/natgas%402x.png
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE....@P.@@.@P.@P.@J.:P.:P.@L.@L.<L.<L.@M.=M.=M.=M.=M.>L.=K.;M.;K.>L.>L.>L.>L.<L.<L.>M.>M.>L.<L.=L.=M.=K.=L.>L.>L.>K.=K.=L.=L...........................................................z..z..ny.bn.an.Vb.Ub.IW.IW.=L..D....)tRNS.... 000@@@@PPP``oppp.....................T......IDATx..mw.@......J5Zj..f.-E+..@.....?H.eO63...78'....R...1.`>.Qx@..J.'.....pxZ.dZ..L+.".KQ1..%0.Ev.$..H!0(...X..I./P..X...^.!..'.....IHUzJ.A"..r..?..3..)DL...>....Jg.9.!2.k&(wL."}.Y...Cde...y]f.R.e...^.!..s..d si..(...2......!3..M..o..e....s...pe..!OH....=Q.9.k.1$.).6.../D.."H......y3E.Y.l.%0....:...f....1..=...se3...`l7\|.....W,M.Sg..`...QJ...2.9{...)6.UW.W-ca..j.....K...u..2fG.!..M.!E..N=C.)..}.<.\|.;.`..z..}..'.._......rJ....-..&tDDu....@......v^......w.p.C6.1u..7.noC[N....YRi..!b,.>N._o=....l.._..d..n.e.y....z..!G.]H...-<.D..<..u...<:...]._AR6XMz.qJ~.F.N..G.9%.....X....x...M.n./3..".6\|..G.A.'......

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1364
Entropy (8bit):	7.856540005424561
Encrypted:	false
SSDEEP:	24:XDvvqJMOD+ef+CVN54onvfaN57tSSPq9wY7TG8zVOVKPlSLJFwiMM7aDn+klZM:XDv4vDdme7vETq9wYzpO09XM7MM
MD5:	656227EDD497826260D9BEF5832F0AB5
SHA1:	7505464C0131EC0DACEA0EEA6E7C805D35828812
SHA-256:	A138291CE2DEAFD3017AAD7859C9F86760FE10EF899B19FEEA3699CA4A2A4CC8
SHA-512:	A068397F2D58DB3A444F753599A5A2D4258133B7368FD0C2E5D6A92AC7E18A187A7A1BE57F4A13B361854EAEAC976312714E87E892FBEA50CF92ACB53E0414FC
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=B&dmn=1movieshd.cc&rnd=1714156381337
Preview:	...........Vms.8..+d/e.Z...3m.....d.6y...e.,...-.(..o%..t.....Z...#..4.:J.".H%...:....V..f9......b.(... .H...'.M.@]..p].......H.......4.. .T.vFQ..IW.T..U..i.&...X.P...=..2....~Kn.4S..........B@..Q.L._( WY.H\...J....T....Y.....i..A.(<.....s6..d.i...F....:...s...p'\|......;?e%.;HsbR../T.......$.3..9e3..J.......#.......'.8.H.+....._O..\..QZh.1...]........l...\|..P2./4]...{..x....=ny..v....hy]...{HN...N...v.e.{.c.5...-..,......z..(.;i.Z..K........7Z...........F.y....x8._. .z.`..5...&..,...M4....?.2....~.BH#........6.Mh......../\|.......Z.g..^...l./b..F..R..T..[1.N}#...H.c%5..(n1..B..]_............H...m..N.4..A.=.;....p..0<..`.. xQ.\|vgB(.y....;.V.....f.`K...6..A.....j5pv.l.c&E.1n...T..k......9`+..J.)R.&.2.&:...(L....g..:._.S\|.7....=......S.>6..e.cq.i..E...u..1.E.Z...{...Y}..'...4.o>.kPDR...5.7&.-[.[..6...I.IE..E.>....>2......?.....9.M...y...D...'..ic.:....1.S_..v..k....A/J..9o..Axg...N.....V..........g...Sl..f.$+!=..kRv....P!...a... .%.........D.

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.7628743492292966
Encrypted:	false
SSDEEP:	3:6zLcM1sZ9BcyAHn:0cMSztAH
MD5:	B59FFA18DAD64BE6459B90E0117C2E94
SHA1:	40AA97C33618FB5459F4B3B8D9B22022B6616C60
SHA-256:	5F789CCAE156B160492D89A6146B1974D15128790B74ABB995D8E89FA44CDE5E
SHA-512:	19C89EAB341DB35E83AA2AFB5D41707020AF849BA0790CBA277BE2C3BB09E6E53AD9B009410783228CAF8BB82E6B81AB97B2DFD1969755EE47D9668A97F9F7A8
Malicious:	false
Reputation:	low
Preview:	could not find initiating sync partner null

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2885
Entropy (8bit):	4.810768565552771
Encrypted:	false
SSDEEP:	48:cQAvf3Kk6pkeXNHUzy/bTXzOMw/D/i2VnckGXK8W8hEPveDk7E/sh8MhbJx2:KvfakKbbzFw/D/ita8ZIuk7E0Jg
MD5:	8811878EE283D7A3BEADC5B9AF9EB36E
SHA1:	286A0B06E15CCA108BD1E138BEDC4E5498E96160
SHA-256:	698F9D1F9FC32B0F1359983AA06C70BB3AD22B04DE0AF4540765330669D4A631
SHA-512:	1DD19658345C865272F805E70C079DACDA89D37FA5280E32C450E238435C8E5E79ECB3A4E2524AA0F37C4B967D780540416C0FC4F031D2A480AD89ACE7F167B3
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%20DeFi_36x36.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#C3EB77;}...st1{fill:#5287DF;}...st2{fill:#2F6B34;}...st3{fill:#3FEA73;}...st4{fill:#9A1F8A;}...st5{fill:#2B2B2B;}.</style>.<g>..<path class="st0" d="M1.365,14.49c0.114-0.54,0.645-0.886,1.185-0.772c0.54,0.114,0.886,0.645,0.772,1.185...c-1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364...C3.132,29.043-0.151,21.687,1.365,14.49z"/>..<path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66...c6.916,2.135,14.445-1.007,17.768-7.53c0.251-0.492,0.853-0.688,1.346-0.437s0.688,0.853,0.437,1.346...C29.378,33.109,20.845,36.67,13.004,

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	56220
Entropy (8bit):	7.983773441926508
Encrypted:	false
SSDEEP:	1536:64+rn4JcvJI6YkapH7rqggU9YfEZ3H4mS:0rn46vO6cpH4iTZ3HjS
MD5:	1B91344731CFB07696318C663EA08B67
SHA1:	680683A13898042D84EFA76BE712CF0C43130B92
SHA-256:	5EE2BC54655BFBCFB8C1857EE70C65A3A8B98BFFFB621ED342D51942CDA44E4A
SHA-512:	166C9795AE26C95D07115001DDA572EAD4FF48D3AE3FBDF1C114603364A9706B1BC685E910D2DB0603FD014C7F39CBFC0853054DBEBEEE93EA85047DDA1D678E
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/52/99/5299dcaeb71225b45ac215eb6bdcdf7c/5299dcaeb71225b45ac215eb6bdcdf7c.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."..................................................................................,d.....uMW.).l%...jS.`.T.>......)................tF..A...m...[q}.&.<<.M.B.m.\|2..mK.6.0.cC..B.BN.Y...I.=Ee./U.t.m......C.F6A>t..=}d.s...st.........L.g.7t.@....F.G] e."<V".2Ch..z........Y..CJ).pb...!..F.~j6...Q@`.q@..'-...9.....u...K..MOL.L.Wk...(.. @.?.G..j.\G[{...i....kW...>.@HY.&{.....h...^N..Y.=y..T..+..H9...Y..B2..G....xo.gD4g...x..A..f..W.T...)k>_c8E....n.Ppp...1.<.&T....X.R...iB..R.1....,.....'d.<u2...-.l..&.{$.j..!...P....eD;R......_....9(.Dj.q....ivX....D...&..Dd..<E~X....;..p7Vp...=[.g..n....}.:.sEl.D.i....9kW.}[..af..IZ....$v.}...D=.1y^..K.3%j3qL.r.I.-..0`....ZUb.x. !.."HM.-jTS......../..gJ}9.j.$;.....MeI..aG...E..Ql?T.vJ".f..!.

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	368
Entropy (8bit):	4.88314603220138
Encrypted:	false
SSDEEP:	6:tnrLnl/GKumc4sl7anZnGXIvXUuULhpL/AFVWtykBE9jLoOYuULcQwKHHULVcQwK:trLnl/GKucZnG4vywVWtykBs7zQw002G
MD5:	2DEB3D5121D475D195577A70B0A91A0C
SHA1:	A9464C6B41F55697D7AAD35C2555A95C476D5FD2
SHA-256:	76FFDC5337CD5A509F15D70767B85A793AEAD82975D0D86912E1607E963C9AED
SHA-512:	38671A7F4465B093D5E98675671B132B41F623B552EDEC29477A69F2B552CE6DC6DCA81C85FAEA57E0657657E2C0D67E46FCE6F158A57E8B320E806C78CED448
Malicious:	false
Reputation:	low
Preview:	<svg width="25" height="25" viewBox="0 0 25 25" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="25" height="25" />.<path d="M14.4821 11.6218L21.0389 4H19.4852L13.7919 10.6179L9.24467 4H4L10.8763 14.0074L4 22H5.55385L11.5661 15.0113L16.3683 22H21.613L14.4821 11.6218ZM6.11371 5.16972H8.50031L19.4859 20.8835H17.0993L6.11371 5.16972Z" fill="white"/>.</svg>.

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18486)
Category:	downloaded
Size (bytes):	19136
Entropy (8bit):	5.446849037762034
Encrypted:	false
SSDEEP:	384:WDzE+O0POz/ZxznXZOWEycLKS7Yb93qWEYRLNS9RdXgr+BXtfbab:YIXZFXZ9EycL4bJqDYROdXLtTab
MD5:	70EBD404C2E1E7BAD13998538B56887C
SHA1:	86E57AF8BA3CFC2C004DA3311835F6B54BA6D848
SHA-256:	D71EA61938136A384E4C53C5A7A3C36E68FCC70A68BAE691E270987D5D2EB11F
SHA-512:	0FC7EDAE9FD09289AD4065A1CC83BAE0E1384A372043B978AFDAC23BFF408306378D27BA96CEEA81DD378ECB9713C7306CB721758B34F9DB607AD67FE1C6E167
Malicious:	false
Reputation:	low
URL:	https://tzegilo.com/stattag.js
Preview:	!function(){window.__ds3dcv__.mmh=function(f,$){for(var x,_=f.length,e=$^_,d=0;_>=4;)x=(65535&(x=255&f.charCodeAt(d)\|(255&f.charCodeAt(++d))<<8\|(255&f.charCodeAt(++d))<<16\|(255&f.charCodeAt(++d))<<24))1540483477+(((x>>>16)1540483477&65535)<<16),x^=x>>>24,e=(65535&e)1540483477+(((e>>>16)1540483477&65535)<<16)^(x=(65535&x)1540483477+(((x>>>16)1540483477&65535)<<16)),_-=4,++d;switch(_){case 3:e^=(255&f.charCodeAt(d+2))<<16;case 2:e^=(255&f.charCodeAt(d+1))<<8;case 1:e^=255&f.charCodeAt(d),e=(65535&e)1540483477+(((e>>>16)1540483477&65535)<<16)}return e^=e>>>13,e=(65535&e)1540483477+(((e>>>16)1540483477&65535)<<16),(e^=e>>>15)>>>0};}();.(function(E){!function(){var n,e=E.u(),t=function(n,t=!E.E){if((n=n[E.x](new RegExp(E.dE,E.TE),E.j))in e)return e[n];var i=E.a+n+E.l,o=E.a+n+E.s,r=E.t;t&&r--;var a,d=window[E.ug][E.h],c=new RegExp(t?o:i)[E.gg](d);return c\|\|(a=E.Eg),c&&!c[r]&&(a=E.dg),c&&c[r]&&(a=decodeURIComponent(c[r][E.x](new RegExp(E.tT,E.TE),E.hE))),e[n]=a,a},i=function(){var n

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	88636
Entropy (8bit):	7.98364786431909
Encrypted:	false
SSDEEP:	1536:VAY8CyPZkV7+Y7U8LwQAhB8uUuKZIS8kczQTtQaEBTb5C42+aOUJO:VApPZkV7+38YBIZrCzetQaE5V92R4
MD5:	D0B336B19C64A9F90884D892AE1EAB59
SHA1:	BF441BFFFE951BD582D014E081C89ABB36FFE2E3
SHA-256:	3A2CC334F468F7C51829C984695736346F28699D6BD9F3C03413C764603B9E6D
SHA-512:	610CB024992A2E129B471B582F874EAB8DD86775EF21D9355FB046A9CAE1022CD74C646445382048804253EB1612FBF69E8F88E235A7DB017902FF5BBB74330B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................\.6.../.:...~.4lA.JIx.N..e_.O.[.S.W.O-.6....u.U.I..:.=...;k..q.mW!..9.....`Q......N.NM?....r.;.fn<.+...E...."k.87.(........hz..\|^..:.^....jG..hm.}k.h....q.6..j..n.s...u.kbr...U.S.....g9g...............o...Z....y..h..v..../VG.......V[5.^.}...v ...TdL.......$HL.7...x.....g64~.+..\|e.....vs...-.C........Nrt.....7..j.A....@....g..U.......p.8g..].....].}.../.G....Y/......].!..^.A{.'.RZ9.I.=&=......).".'I...K...]g.6..P....M.$.s'.8AE{.uof..L..L...?.{...T..m.}Z.?}...v.d0=...Y......._...o.?~...#..6.S..4....G.jh.......;....~J.U...x......TD_......%..Iu.......Z..QBm.d..@..f..^.{.9.Y.J....S.Q.U.c.......K..s]\.#......n.D...K.V?IC..x.........q..J...6.q..

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	166850
Entropy (8bit):	5.3720646282402305
Encrypted:	false
SSDEEP:	1536:0FRf6fjHwbXZ9uFzK8LT5v3Ait9zFzzWlAJSJZr5WP+7c2nyrCC+74LFeZ7SIEFE:FKEkQV9zF3cMD2n8+74LFeZ7SIbBQcwE
MD5:	18B9246B7C6EC7D3A5FE518837DAD0D5
SHA1:	D9DC10752068DB17FB3EAB39A7BD0F59FF15ECFA
SHA-256:	4BAB0331E1251641B96825DAB60F3B965AC33A42AACD13D565CAC1A5D2E42A86
SHA-512:	AE9C1834BF59EA374A8E88DB2563D294932B5680EDECDE593952BA432CCE92C2984F0C44C8A681BA7D940B530C08732C1884540D0B7421BE3F5C34C33CF7764C
Malicious:	false
Reputation:	low
URL:	https://1movieshd.cc/js/group_11/app.min.js?v=0.1
Preview:	var is_login=!1,movie=($.get("/ajax/login-state",function(e){is_login=e.is_login,$("#user-slot, #header_login").html(e.html),is_login&&$("#header").addClass("header-logged")}),$.get("/ajax/verify?domain="+window.location.hostname,function(e){e.status\|\|(window.location.href=e.redirectTo)}),{id:$(".detail_page-watch").attr("data-id"),type:$(".detail_page-watch").attr("data-type")}),is_process=!1;function check_login(){return!!is_login\|\|($("#modallogin").modal("show"),!1)}function redirect(e){e.redirect&&(location.href=e.redirect)}function vote_info(){$.get("/ajax/vote_info/"+movie.id,function(e){$("#block-rating").html(e)})}function vote_submit(t,s){$("#vote-loading").show(),"undefined"!=typeof recaptcha_site_key?grecaptcha.execute(recaptcha_site_key,{action:"vote_movie"}).then(function(e){$.post("/ajax/vote/"+t,{state:s,token:e},function(e){$("#block-rating").html(e)})}):$.post("/ajax/vote/"+t,{state:s},function(e){$("#block-rating").html(e)})}function like(e){check_login()&&vote_submit

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1227), with CRLF line terminators
Category:	downloaded
Size (bytes):	13399
Entropy (8bit):	4.959162551102171
Encrypted:	false
SSDEEP:	192:uz07JwJ0f1ZZ3JVvk7aRywFD9NDL4kBOLhWGYjTFpqiPkSAJnauFuBt:c0Ftf1TZ+WD3OLN+p5PkSAJaZt
MD5:	DDC8B570BCC034F8B5B11675DB126F6D
SHA1:	564D3512AD5AA72F9CED2B3A475DD34CDA46DDCE
SHA-256:	221E9CC24C4B135DCAE99EAED8D0231740D3E1F93EC24A1ADD1105F4A01A818C
SHA-512:	C31C981360CE40FB901D5C1E155566D78A70AFCF11C2440976EC1E1C499072DFE3F7E43A056B0C21FB28CD8C5744F6F9F5461DBA46BBA252683459B8B4EDF263
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/pages/login/registerNewUser/registerNewUser.html
Preview:	<!DOCTYPE html>..<html>..<head>.. <meta charset="utf-8" />.. <title>registerNewUser</title>..</head>..<body>.. <div id="newUserRegistration" class="register-new-user">.. <div class="login-section">.. <div class="login-form login-register">.. <div class="form">.. <div data-win-bind="this['data-show']: IsAffiliateTextVisible WinJS.Binding.setAttribute; className: AffiliateTextClass; textContent: AffiliateText"></div>.. <div data-win-bind="this['data-show']: IsAffiliateLogoVisible WinJS.Binding.setAttribute; className: AffiliateLogoClass Converters.affiliateLogoClass"></div>.. <div class="login-form-nav">.. <span class="login-form-nav-btn active" data-win-res="{textContent: 'strCREATE_ACCOUNT_LOGIN'}"></span>.. <a class="login-form-nav-btn" id="newUserCancelExperiment" data-win-res="{textContent: 'strLOG_IN'}"></a>.. </div>..

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2060
Category:	downloaded
Size (bytes):	1160
Entropy (8bit):	7.819521524266635
Encrypted:	false
SSDEEP:	24:XC005xdrhYNqWM9jCOdAET29nxl255CJXHrSQE+rIZZSOKOTTXV:X3uhYNBM9jCOd5T29nKcJbSKIS6TTXV
MD5:	1258C6DEBEEA7D4E0696160BF253F50D
SHA1:	ED3F33AB84B906C062E94E78068D28A9890F20BC
SHA-256:	0AF1F75CB7BDB1BDC7931CCCA360A6082A9DA78ABA1C96E51C08E3EBEC32D5E7
SHA-512:	B1ADE1194AA9729B29551D1778ABEE826DFCD23FE9617596D7E7FC5AB7C3E83ABCF69BBCB6EC1534127E377A2DF91247EA273901346245D35CA535CD2C51F8FD
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/a/t_.htm?ver=1.1325.23384&cid=c010&cls=B
Preview:	..........}V[W.6.~._.TN"a!C.....L.tC.&.m7.r.Y................A.....g.84I\|r....F...KrO.Ly&.R.gj...0rr\.".M.D&.$Z/..u......U........+.J.i.f...y.)Mm:sg..\|.....=$.].......3oNS.n.u.{.........#...mVE....M5;...b.,<....Nx.V.Z.:.L.V..%.35.R.V.i..../<...&........JRj.5...+..X..C.x&+..E7.{....{&L.Ds.6aV.^..+C....g?5..&Td3..'.....{...]l....x.o...j.........rD.w6......z...1..V....}'K.,........_IEC.t..8r.{~Vt.x_._igG.....,.V.s...=?`L.U:mG......Y5..6.\|Y....X.=.{...$J...@..&.o..c....e..F.E.p..V..~...l..X..A.&.m.Q.).H.;K..I.6.Ib%......9%e...0^.J.Np...]U17.I)._..Q......RWu.....UZ.\|...a.D..X....(...x.v{T..\|@...n}Y.......w6Q..X.U.S.h...=....t.B....7..A...u...Z.zY/HE..$..C.."....@k.k.=`.8v.W.dm......\..8..p. .C...OA..A..@t.A.0........0.:_..br.b..)..1b.....7.y.g..[.}F.Z?.v.....}B.4..A#..u.........n..$F\TVLp.G.\..s..uU f.D.3.rS....1_..../...."f...`..U..F ..f...s..e.I.PL0b.'..a'...lA`.n...,..t...U.+....+.Q...o..+...........`..1....t.r..#,..A...?.\|-..8.H...eQ.t0E.

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	48307
Entropy (8bit):	7.981705570713477
Encrypted:	false
SSDEEP:	768:5H6KBZZtQTMpteJqP8+5W+AdwdZg1iYuCP4zFFn4/HUjSUIAtI73Bus3SRBEX/R8:5HlZZt1feJj+5W+YwHg1iYvPCFFniDfG
MD5:	093536C5D70ADE648E6654AD5613D509
SHA1:	707899F208B4148B5F311BFC0B903E3CB6043A61
SHA-256:	6053FA298C095CF8AC43D30D53ADE10D99BF856E072FE20D45E7C28AA3830184
SHA-512:	F76F7C2A10EA01B3E737974F893B4F4172D61600E569716085C42362DEC2C9DF5B5DCCD7392D0D5B8CAB4D53D4D04BAB09493C5CAD0ECCC32C40C463EE1EF1CE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................o..(.......!..1.6.G........)..r...`..a.+a.".c..F.FC..1..AXy.x.p.G..pt.0...DA...(0.s..p...............K.p....x...b.R....F.J.0f+.C:....&....G.BM.. .0Dx..L..1 ..~.bM..J.....s.m..8...<.$.&..pM.}....+c.....Q....o.@G...`.sMR.P.ez...........,.+..0.w .0..<....}.]G..Axy.W.MY.T.5.Q.,\|#.....8Rp......0.,&}h.._]T.G.O...fE..h....P....NPj1.\4.....F.q..B.>+.].T%.XQ%Y`..0..B.f....X................5.uP..'.... ..37..Z;N,=..>.....N.(o.~_.....*...........P...@#....PO....j.TJV.....#~.i.y.z.....y....I.n..i....F.w..t./..u....c....a...,......BY.-...$X..F-..Z.D[s5..Oah.s.q.W.~....s...79k...U.S.....\}...?[..p)...)...%)Yp%.tl$... T...R.1.....A.?../ ...c!.>..

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	93463
Entropy (8bit):	7.98912754598122
Encrypted:	false
SSDEEP:	1536:fDQ6/BNsPt3gManiBy6ZYZ1LYgXV3UNrUL9pVCo85Ja/4Ae8zY9+7PGS:fZBWPtwM6iLEpYmMrUfVNl6sY9+7+S
MD5:	921BEDD579EE9DAB6F63F8195063AAFA
SHA1:	D4A4EC7E822E9839BF50A26604F87D41937B163F
SHA-256:	D908198173538AFB23E1144EAA9187ED0C716015D40C1A18F431C22D0A99C340
SHA-512:	DF8FEB128290631DA3368AA59B49A4B9DC13B7ACCD7A8D01EBCB5FDFC752D2464D00A1DFA46446068C40832FD84A932AD75D026366153603BE3DE9BC83409CC7
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."........................................................................................?3..\."X>..U.... ...P.....1.];e+{G.^......e..mi...=.\|.u.[>N......q..d.X:2...$%=..k....7..b..........V.k6.r.4\|.....Pb{4Q..P.......l....o.m.jN.77S..W.nG..W...EWSfA ...Yo.. .]w.P1{.."T."....3$....c......"...E..:0...T.Y.22..g..W...........g...O.Q..P..2dU....\..3...l.t=.........2.....y.X....7L....s.V.^.......y.Bq..Ds.!3.....L.[.]T...../..w.......... c!(.i.F.Ql...6..UI..C....F....m8.J2....'.1.UQ+...c.}...cq...._w.....Cv.%......q.F....S...9k.._I.m...j..M..bE.s...Z'.b........{.ro...e'.......Z.......LP.F...UG$..q....9C..!.l"mp..FU.i.t.g}..\|..............A...V.X..4s.5........Q.\|...L.....9n..&..\.Q21:....<....^..GX.......S.z9:....i.)...X..X.

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	210640
Entropy (8bit):	4.9316000431221445
Encrypted:	false
SSDEEP:	1536:m8/1MAqH1tkVI7c5yhKtz+EgN1W7dlU0zl+9RbgFVoMg7asS8pCIIH8q8yaVFbZR:+1tkf7AGPoMvcqopZCNaVS+8SFl+G3
MD5:	BF9461DAA197FB9B315066539BBE61A0
SHA1:	83FEB0A6B8A13A461EEC7A4CB303950E8753EA55
SHA-256:	98D32B00FCA86FC6994DF33302E051A6AD03461A43FF5797D5B10ACE4CF4772F
SHA-512:	2564469BBAC5A15C93DC3BCB79F2386F6E20A4506D98F81C8C5B2E49B5E2249FCD17180B4CA4C9B5013E92000F29A0C18F0AB47D31FF8BAA69B4F7884A9D69BF
Malicious:	false
Reputation:	low
URL:	https://platform-api.sharethis.com/js/sharethis.js
Preview:	if (!Date.now) {. Date.now = function now() {. return new Date().getTime();. };.}..(function(funcName, baseObj) {. "use strict";.. // The public function name defaults to window.docReady. // but you can modify the last line of this function to pass in a different object or method name. // if you want to put them in a different namespace and those will be used instead of . // window.docReady(...). funcName = funcName \|\| "docReady";. baseObj = baseObj \|\| window;. var readyList = [];. var readyFired = false;. var readyEventHandlersInstalled = false;. . // call this when the document is ready. // this function protects itself against being called more than once. function ready() {. if (!readyFired) {.. // this must be set to true before we start calling callbacks. readyFired = true;. for (var i = 0; i < readyList.length; i++) {.. // if a callback here happens to add new ready handlers,. // the docReady() function will see that it already f

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	858
Entropy (8bit):	5.160514036190716
Encrypted:	false
SSDEEP:	12:TMHdR9NCGi/nzVlT/KYf3n3ABPHQboGPQWFrYmePT/js91JAocNmnH1b/pCuopaM:2dReGAbTLf36wbDQsYLT/gDjnH1O
MD5:	E3F5E90FA57764CD951DB1B1BC688EDD
SHA1:	B620A8A9CBBDF976AE6A605EBAC91107E7ADC178
SHA-256:	03E42B95E9049816D901EABBE2A2247DEDA61A85972E3A50E3C8274E6C5FE39B
SHA-512:	394A233B18E93D298807E54B137355F9C6F68A89287AD75CB0D331592DBC9B8C529FA0ECD370FF6F30C2EFA34AF77EEEE88B62A2A7005EBF8FA9BF12F703A30F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8" ?>. Generator: Adobe Illustrator 24.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Warstwa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 47 47" style="enable-background:new 0 0 47 47;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<path class="st0" d="M23.5,0.6C10.8,0.6,0.6,10.8,0.6,23.5s10.3,22.9,22.9,22.9s22.9-10.3,22.9-22.9S36.2,0.6,23.5,0.6z M34.9,13.2..l-4.3,21.9c0,0-0.2,1-1.4,1c-0.7,0-1-0.3-1-0.3L22.4,31l-3.9,3.9c0,0-0.2,0.1-0.4,0.1c-0.1,0-0.2,0-0.3,0l1.1-6.8l0,0l11.3-10.4..c0.3-0.2,0.3-0.5,0.1-0.8h0c-0.2-0.3-0.6-0.3-0.8-0.1l-15.1,9l0,0l-5.8-1.6c0,0-1-0.3-1-1.2c0-0.7,1.1-1.1,1.1-1.1L33,12.3..c0,0,0.7-0.3,1.3-0.3c0.3,0,0.7,0.1,0.7,0.6C35,12.9,34.9,13.2,34.9,13.2z"/>.</svg>.

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12320
Entropy (8bit):	4.190148821875856
Encrypted:	false
SSDEEP:	192:WeEOzbmLBaK+CfH8EMzC2yrnIfOCZyeLgdjPiHFkmKQZMtRA9MvC4RxrY:jgHVMMIfUvty
MD5:	556477C42DCD50F153BB60E9A92427CD
SHA1:	687400C3B9B364A94423ACF72E6E5874A275388E
SHA-256:	1A23A9639EB44A01C2EE51F3DB8EB696A2926A2B4C3D426317F149787B36DBAB
SHA-512:	8048301B323224511A04943C60B596EAD91D5077B940E7C2A7DEF1C521EBBBC1D0DCDC2AF6AFC21DCAAFA54E08568E7318C101B9926D31C3F7B414C939516E39
Malicious:	false
Reputation:	low
URL:	https://www.fndsda.net/beige.js
Preview:	var ready = (function(){ .. var readyList,. DOMContentLoaded,. class2type = {};. class2type["[object Boolean]"] = "boolean";. class2type["[object Number]"] = "number";. class2type["[object String]"] = "string";. class2type["[object Function]"] = "function";. class2type["[object Array]"] = "array";. class2type["[object Date]"] = "date";. class2type["[object RegExp]"] = "regexp";. class2type["[object Object]"] = "object";.. var ReadyObj = {. // Is the DOM ready to be used? Set to true once it occurs.. isReady: false,. // A counter to track how many items to wait for before. // the ready event fires. See #6781. readyWait: 1,. // Hold (or release) the ready event. holdReady: function( hold ) {. if ( hold ) {. ReadyObj.readyWait++;. } else {. ReadyObj.ready( true );. }. },. // Handle when

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	74261
Entropy (8bit):	7.987607355211446
Encrypted:	false
SSDEEP:	1536:TNfc6AEFVNj2H0EhxifM5zTaUsfnZSeCOZxC5jBBkW8WNj2cC:T66AEhj2vTifMl+BfIe3rC5Lj8W92b
MD5:	70DCCCA93C4463487EA616D2282D402D
SHA1:	079305878E60C628F62349C4307C61F5261DB662
SHA-256:	B32191B73B9B3A88DAEC3183168B05A97DBCC50AE428546A7577252956BC5A13
SHA-512:	D8F0518BE510CB202A96DFA6DC33E527FDE12A2562D5465207DDCDE4AD412462711EB5CE9590B7BE324AA9638CB9C59EA088676DBA7F3B8022C3129221443D2F
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/81/37/81372ed9dcce1a4c6528e51235ff77f4/81372ed9dcce1a4c6528e51235ff77f4.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................i.Z1+.M.....6.)..c..*kc.a.......[G.B........!..\6gH........V{.ud....#..y....:.1..F..T.,S.k.F..!.Z..#.} ....8...$....x..dM...M..".M..) gYz..-.._..Dsv.....~w.5...~~...]ou~7.<g-..,..me....g..BV.{.K...4....<n.\|`.[.94u..=5.;....\....U."<V....>yHu..:...O...S.b2.Z.E.....rFj!d.V.Q.VA..N...b...#...C..ovN....O:.....:.Y.f.Q.]st_Uch...~#..p....p...iw...7...t.......m.1.c.X.\|e..>.3..(.0)...(t...L...r.\|`L..GdFj.')'.fz.3A....?._..Rd..-.K.4...6..O..9...A..VU...]C....Z...O6..Z.^{..r...N:....:E...E.(-.-...Qc....._f..>..=....h.S.L.s.IL.,.4...\o&....=......=.....JL.k.CF...m..H.....f\....C\|.A.=.s{b.{m.ZJ..".e....D=. ...R]....d......q....#.L..y...a.......x!.0E+.Z

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1648
Entropy (8bit):	4.435453015549135
Encrypted:	false
SSDEEP:	48:cC1QmYLI3TEGW+EWmMpLeU1btwLhtlBBluW4JAsXm:40TEBN+LeU1E
MD5:	414B60894723FDF8853654BD54518B58
SHA1:	2F0DA719FFD815A8F7BCF4CEB423A6CD019B92A7
SHA-256:	D3C88EFC65CD24B79E1DF3E312C54706D8CB975D3AAF7E80CC3F2B110E751A4F
SHA-512:	EAA31D1E64DCAA2D0B808EDBFC7C2CE7CF96E83AA033E6BD6A50735C22BDB03E757DF73DA3188724EE1C0EFE7C577A07FE3B8CB7B1FA8711E0B532C06EFD9386
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M18 0C8.06 0 0 8.059 0 18s8.059 18 18 18 18-8.059 18-18S27.941 0 18 0Z" fill="#F7931A"/><path fill-rule="evenodd" clip-rule="evenodd" d="M23.115 25.005c-1.295.47-2.5.308-3.068.232l-.042-.005c-.27-.036-.727-.12-1.215-.22l-.808 3.015-1.856-.497.795-2.966-1.413-.38-.795 2.967-1.856-.497.794-2.967L10 22.71l.979-2.127 1.11.297c.373.1.538.107.734.002.195-.106.29-.322.34-.504l2.057-7.68c.13-.481.125-.622-.03-.929-.155-.306-.666-.478-.96-.557l-1.072-.287.516-1.927 3.652.978L18.123 7l1.856.497-.798 2.975 1.414.379.797-2.975 1.856.497-.806 3.011c1.36.457 2.32.996 3.041 1.902.932 1.17.472 2.645.35 2.994-.12.348-.46.992-.891 1.35-.43.36-1.313.597-1.313.597s.851.432 1.357 1.08c.505.646.748 1.613.391 2.837-.355 1.225-.934 2.38-2.262 2.861Zm-1.939-5.427c-.3-.267-1.01-.708-1.912-1.015-.904-.307-2.1-.562-2.1-.562l-1.066 3.98s1.225.357 2.065.517c.84.16 1.746.18 2.234.06.487-.121 1.0

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	52216
Entropy (8bit):	7.98457706529982
Encrypted:	false
SSDEEP:	1536:VZLq4oPFZaeOd0eXIxklXRltfJpOBV1XyAIH:fq4gZydCklXbtfuBV1XyH
MD5:	5DDD43062F0081661147C9460FEECDED
SHA1:	42B81079246665FE0EB9797C90628F677D94DAD1
SHA-256:	10CFF4A24EE211442F64A7918DC633F1AEF8B604C3B14A5D660C30C6A835B769
SHA-512:	065D137435805F7176BF62A4ADAFB12CFD31975F54078B053159249675D0A19DFEA625DEA22D6FF3CE19AB2E2B73186EC7ABFC20B3FDBC6E1D465E986CECF935
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."........................................................................................H.`%....BX...c...2;mC...ZG2o...p.^ ....L...E....<Gv..<'...B..]...........0....2....3.....X.c....0y......:w..q.....n4l.....Z..a&.+3.G...^gc...lg..........Wg..A..........#....O../..J.4..y...."..3t..vY...ce...C.......8M....!...[.......K....64.8]....Y..y.b5A......=C.f.6\...e..m.v..k.L....dZ9..O...r.;.F.e....s]h.f6m.P#"^..`B.3.g.u.u..`J{#.u...q.d.l..E1#..'.....J...~C.....]dl.<k..&!....7...g3.....{f.o:..x4.-...b......G...y....y......s.,....%..cq...X.....&...#Mi]C.....3.e\|..A...&a....(.zX..+[.g..r.e.m=9.M..=....... .H.....&4%W.......g....s<..I-[.....X..]2B..U...!...&..b...-]..?.....#..@.... .H......<Y..........Uu.b.dgF+...7....].1..L..M.W.Z.

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	832
Entropy (8bit):	4.352583593893328
Encrypted:	false
SSDEEP:	12:t4IRMXV+DREfJoOASVofwfMBkHvqTughzC+O6NQbXvKF3M6FH8U88XKf9i:t4IuXV+N+oOF4m0uYz3O6NQbs8Jl8XA0
MD5:	AFE7FC60ED757DB39A88D2950FCE69C9
SHA1:	E120B53E856848419275723E24A539359CF41B4A
SHA-256:	847EB36B4DC4B05F94052DCD98077319E74D882334A106BB9CA451BA211C9C2C
SHA-512:	0A529A65C5BBEB88AEC8927C3FAA86118F3406C3450EBE9903BAE8C3E985A8926AB3688E75098AAC7B23DB76A280E55AC95675400D11D0D253341665A9B2EA98
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 40 40">. <g>. <path d="m25 21.7q0.3 0 2.2 1t2 1.2q0 0.1 0 0.3 0 0.8-0.4 1.7-0.3 0.9-1.6 1.5t-2.2 0.6q-1.3 0-4.3-1.4-2.2-1-3.8-2.6t-3.3-4.2q-1.6-2.3-1.6-4.3v-0.2q0.1-2 1.7-3.5 0.5-0.5 1.2-0.5 0.1 0 0.4 0t0.4 0.1q0.4 0 0.6 0.1t0.3 0.6q0.2 0.5 0.8 2t0.5 1.7q0 0.5-0.8 1.3t-0.7 1q0 0.2 0.1 0.3 0.7 1.7 2.3 3.1 1.2 1.2 3.3 2.2 0.3 0.2 0.5 0.2 0.4 0 1.2-1.1t1.2-1.1z m-4.5 11.9q2.8 0 5.4-1.1t4.5-3 3-4.5 1.1-5.4-1.1-5.5-3-4.5-4.5-2.9-5.4-1.2-5.5 1.2-4.5 2.9-2.9 4.5-1.2 5.5q0 4.5 2.7 8.2l-1.7 5.2 5.4-1.8q3.5 2.4 7.7 2.4z m0-30.9q3.4 0 6.5 1.4t5.4 3.6 3.5 5.3 1.4 6.6-1.4 6.5-3.5 5.3-5.4 3.6-6.5 1.4q-4.4 0-8.2-2.1l-9.3 3 3-9.1q-2.4-3.9-2.4-8.6 0-3.5 1.4-6.6t3.6-5.3 5.3-3.6 6.6-1.4z"></path>. </g>.</svg>..

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	335543
Entropy (8bit):	7.939404043811188
Encrypted:	false
SSDEEP:	6144:w4bU8gMyHNqmpwWuqWl4NcZtqLb5Rn+iul6GoySxBnrIUHYm:VburJpwWHlW4nNGSymj
MD5:	F2385BFC171F19A2928B18FB1027B960
SHA1:	15BF9C9A2E4C580582D5F810354295681ECC4F35
SHA-256:	5DFF834809590C63524B7C4756E6B7F437AF184EF6100300F3D374114CDF9320
SHA-512:	C5A3F1AB095DB6C3FF38C3BC559A612F2F514EEA4897D760EDD8FF75C1AA059580F3C5C9A0719D7F973AB4659A5C41937F3B3EBFB4689B23ABE41F133F2850CE
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d..............................................................................................................................................8...............:......................................................................./...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1125)
Category:	dropped
Size (bytes):	5633
Entropy (8bit):	5.154251684059028
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdN/rRD9PaQxJbBe4q0yTMQr+Cw:1j9jhjYj9K/Vo+nXaHvFdN/rp9ieJBP5
MD5:	8D2E9443F57C8955B2842493D6E7442F
SHA1:	440C89C78BD3FAC35DC34AF48F59E47A5E966BFC
SHA-256:	8982825362D8AA7C9AE5D400514F884EEBFE9B10876633A1B81894B28E1A4DED
SHA-512:	40C9FCE5D6878E2B458FB82F72421777BD80CAC5172EF322ECF100230E0FE635202B21885639C2587C8E5E3F7323015B0F2B91AE789DEFF0BD8B0B1BEAAB2AB1
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1347)
Category:	downloaded
Size (bytes):	1348
Entropy (8bit):	5.325032318420994
Encrypted:	false
SSDEEP:	24:9tOMjCtHy7ZKF0i/ygakqV5OVZfCGUXh+Tc8HymKS9XiX2cNwq7LIl9Gx/fKdB:N+NxK2M5kZfCdhVm3SX2cNdLIlE/f+B
MD5:	E763F2039006ADCE9EF7E70265117A11
SHA1:	E67573F75D81302C555B1CC00F99E37B133A0A29
SHA-256:	6F6C110EF2922577D0DD7AFE6163F20A16DB65CF5A93C60DC30BB605BD9F0309
SHA-512:	445D041CF06393C704326A64977397DCC00590E1CA652AE9D633F1B75A35136A821A291D276C423A1BCD32F6719895E7D51BC396936D1632189F5F91B7D177A1
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/js/WebCommon/Common/BrowserDetection.js
Preview:	(()=>{"use strict";var c={};window.BrowserDetection=function(){"use strict";var s=null,i={Chrome:1,FireFox:2,Opera:3,Safari:4,Edge:5,IE:6,SamsungInternet:7,AmazonSilk:8,Other:9};function o(){var r=navigator.userAgent,a,e=r.match(/(opera\|chrome\|SamsungBrowser\|Silk\|safari\|firefox\|msie\|trident(?=\/))\/?\s*(\d+)/i)\|\|[];return/trident/i.test(e[1])?(a=/\brv[ :]+(\d+)/g.exec(r)\|\|[],{name:"IE",version:a[1]\|\|""}):e[1]==="Chrome"&&(a=r.match(/\b(OPR\|Edg\|Edge)\/(\d+)/),a!=null)?{name:a[1].replace("OPR","Opera").replace("Edge","Edg"),version:a[2]}:e[1]==="Silk"?{name:e[1],version:e[2]}:(e=e[2]?[e[1],e[2]]:[navigator.appName,navigator.appVersion,"-?"],(a=r.match(/version\/(\d+)/i))!=null&&e.splice(1,1,a[1]),{name:e[0],version:e[1]})}function n(){if(s===null){var r=i.Other,a=o();switch(a.name.toLowerCase()){case"chrome":r=i.Chrome;break;case"samsungbrowser":r=i.SamsungInternet;break;case"silk":r=i.AmazonSilk;break;case"opera":r=i.Opera;break;case"edg":r=i.Edge;break;case"safari":r=i.Safari;break;cas

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3531
Entropy (8bit):	4.675579707609708
Encrypted:	false
SSDEEP:	48:cQAvf3K6DSPNHUzy/bTXzOMw/D/i2VnckGXK8W8hEPZY/uZB+xYNblAjdPCMKsIt:KvfafbbzFw/D/ita8Zm/1tl2dqMIF5M0
MD5:	D805465C3E3A81327E19E15A83B2632F
SHA1:	5E2DB0BFC6B9D643F21BE28D0CAB591FF6570BE7
SHA-256:	31FF7AD6D5303E4CCC42080BE57394050193EFFDC031F9914577B0F3A73292CA
SHA-512:	BF86F128101097B0173D2F4680BFC4F442E14E9BA4EEBD6742D10C629B0CBB5BF10AD5B7B596C85A66810223D7787838A1112EDC72076F858E6B291DABB37F5F
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%2025_36x36.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#5D5D81;}...st1{fill:#3B3355;}...st2{fill:#0D67AA;}...st3{fill:#3FEA73;}...st4{fill:#06A77D;}...st5{fill:#2B2B2B;}.</style>.<g>..<path class="st0" d="M1.365,14.49c0.114-0.54,0.645-0.886,1.185-0.772c0.54,0.114,0.886,0.645,0.772,1.185...c-1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364...C3.132,29.043-0.151,21.687,1.365,14.49z"/>..<path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66...c6.916,2.135,14.445-1.007,17.768-7.53c0.251-0.492,0.853-0.688,1.346-0.437s0.688,0.853,0.437,1.346...C29.378,33.109,20.845,36.67,13.004,

Chrome Cache Entry: 730

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	66436
Entropy (8bit):	7.986312336477505
Encrypted:	false
SSDEEP:	1536:k27nBx42J7L2QHmGqwgQzxdb5D1RXQGzjeES1OMDdjtSR:k2rBm2J7VmGqWzNBzj1SL7S
MD5:	FE31BF9CB5AA94E3B3EA1199DD620D12
SHA1:	CC3E0866EF5EA718FE0C78653F7D2954342670DC
SHA-256:	92F0F56AA52106420139CF0E1AC053B0BAD225B69F81B34CC963A42798A0D108
SHA-512:	C06C2FB13F983AF4B98EFCDCE634DCE6D0C3747CCC2EC707F2C1F91A1FE3448BC2861410FCCCFA3BAAD957054AE2C030B35A50F83F6CFBED9C7B0102144CACDE
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/c0/82/c082c3f3a6f1ca4252c6a30db3b88a63/c082c3f3a6f1ca4252c6a30db3b88a63.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................A;....RLN......qM...dHe......%..I...R4%.D.>...gm..oQ.!.%...&..1.1.].x..%...%.8pq.)4`.C........J...V..R5:.,F.,...j\|&fG..5..0I....W\|b.Y-..vtH.....'@]........3.c.-.`.iZ..`..<....".cl.l2....A..CR9.B.....D.D,q.c..K:e....r'....g.....0,+.Rp.]...............Nj}.x...>...)C..........4q....4..1....4..;4...4[.KZV.PeK.T.)...4..R.7. ,{.ku.h...m.-.y3..J.g....W..R.I*r...F..A.....#.7..D..aX..V G..Q.7..T.l..&.$.^.u....Lv....:.\...#.[.(.C......M3.o.....\.5.uJVT.L.(\|..x...<.r.,:^eR...].Y_S..M.k@&.B.6'.5...u..v..P.Q.(=..f.&.oo...y...3..K....W<Y8.[6.......W.#.!u.p......$....b.d.-...q.<.0&D..........H.m3.......W8wnr.}..8.......\|..j.......Nl....C8V.#...

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?google_gid=CAESEH572_eSjRp97nTOhZn8BNs&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=1a1f3838-e54f-4c21-6419-351f87b95f28&reqId=c6201517-1960-426a-5eed-0fdae320a0a6&zcluid=293f006c26e11ff7&zdid=1332
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1233)
Category:	dropped
Size (bytes):	1397
Entropy (8bit):	4.2794421904574556
Encrypted:	false
SSDEEP:	24:XHmMB5ssbZVJwjF8I+7h9b7SHOmYe1EHetoM5icwRB8aUDUnpTNbCM97:T6syF8Iqh9X2OjmEHGHrqB8opIO
MD5:	427AB7199692811ACD421C088014C704
SHA1:	902AF252B53EB8587F980DD2F392A1EC6E27CE20
SHA-256:	4FCEE45DBD691488ED1472568DC852B9D5331D7525EB3ABE7E603A9C05127F5E
SHA-512:	A81687720F444A825C6F326E543C7E470F2001995C0DEC1BC6927311D36BEE559ECB9C4D951E4EDCC3B20A19AEF7FBE0B24ED0C8F4C5D7CE7EA5C1F1462E67EC
Malicious:	false
Reputation:	low
Preview:	Generated by IcoMoon.io -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">.<title>asset-btc</title>.<path fill="#f7931a" d="M16 0c-8.836 0-16 7.163-16 16s7.163 16 16 16c8.837 0 16-7.163 16-16s-7.163-16-16-16zM20.715 23.463c-1.364 0.494-2.631 0.307-3.194 0.233-0.277-0.037-0.747-0.122-1.247-0.226l-0.829 3.096-1.906-0.511 0.816-3.046-1.451-0.389-0.816 3.046-1.906-0.511 0.816-3.047-3.75-1.005 1.005-2.184 1.14 0.305c0.383 0.103 0.553 0.11 0.754 0.002s0.299-0.33 0.348-0.518l2.114-7.886c0.132-0.494 0.128-0.639-0.031-0.953s-0.684-0.492-0.985-0.572l-1.101-0.295 0.53-1.979 3.749 1.005 0.819-3.055 1.906 0.511-0.819 3.055 1.452 0.389 0.819-3.055 1.906 0.511-0.828 3.091c1.398 0.469 2.383 1.023 3.123 1.953 0.957 1.201 0.484 2.716 0.36 3.075-0.125 0.358-0.474 1.018-0.916 1.386s-1.348 0.613-1.348 0.613 0.873 0.444 1.393 1.108c0.518 0.664 0.768 1.657 0.402 2.914-0.365 1.258-0.96 2.445-2.323 2.938zM18.725 17.89c-0.308-0.273-1.037-0.726-1.963-1.041s

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1383
Entropy (8bit):	5.012631578697225
Encrypted:	false
SSDEEP:	24:2d593RL10eaxMiI0NKgctISFJIWwJV56yABGnkuye:cLpcUmSFaWw/wI
MD5:	22ABCBD4023D3936F8BF954CA64C0645
SHA1:	AC5B57FCDAA3DF350EC845CF9354FE4B0AA20310
SHA-256:	CE76538DA29E7B6AB446E180F6EC4AEABF0E31F2F1EF43720B16D9808DFFDBF2
SHA-512:	7E94ABF6CADCB174A450F367E885EB40008608AE62F780C7408BCB11A75FF4A1507CE5001A2C537D5F78FC5809E0CB25F29B19CB620AA316640D6243CF6821DA
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/etf-1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36px" height="36px" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>assets/etfs/global</title>. <g id="assets/etfs/global" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <circle id="Oval" fill="#24458A" cx="18" cy="18" r="18"></circle>. <path d="M21.375,5.625 C21.8827493,5.64100047 22.2602852,5.66452794 22.5076077,5.69558243 C26.5841228,6.20744067 29.8123644,9.44583895 30.3087143,13.527159 C30.3378878,13.7670426 30.359983,14.1329896 30.375,14.625 C29.8595276,14.625 29.4729233,14.625 29.2151871,14.625 C27.4729233,14.625 24.8595276,14.625 21.375,14.625 C21.375,11.1229248 21.375,8.49636841 21.375,6.74533081 C21.375,6.49636841 21.375,6.1229248 21.375,5.625 Z" id="Path" fill="#FFFFFF" fill-rule="nonzero"></path>. <path d="M19.5652174,16.4347826 L28.5652174,16.4347826 L28.5652174,18 C28.5652174,23.8350084 23.8350084,28.565217

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4403
Entropy (8bit):	3.9545876127214177
Encrypted:	false
SSDEEP:	96:RrJkZB1ndZR/bfwNW+1iB+76mmKDZF7mxRZNqjFCq:RqB1nN/73d2meZF7MNqjn
MD5:	729A77746ED40F1771F20C4FA81D431A
SHA1:	59B32D22612BA17BADA58FCF44ABBD228928E190
SHA-256:	B4A0FDF0D1F1C3580E2E06721E9F6772D06BF098207EE3241096CC5EAF613E56
SHA-512:	1E81943A393FB24BA50E1AE2A49941C50789EDD8B239A724A3EB341B3897628B580E9CDF4FED6135D1644121867E405C73133AF5A1BC0D4B1FFF6B843A9A24C1
Malicious:	false
Reputation:	low
Preview:	<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#fff"/><path d="M12.458 15.005h-.14c-.332 0-.595.014-.886.191l-.064.055-.064.054c-.208.251-.247.469-.248.787v.252c0 .134 0 .269.002.404l.001.451.002.758c.002.326.003.652.003.98l.003 1.029.002.835.001.138c0 .071.002.143.006.214a.452.452 0 0 0 .042.075c.016.02.036.037.082.074.17.076.26.056.44.013a.398.398 0 0 0 .137-.262v-.116l.002-.132v-.145l.002-.483c0-.144 0-.288.002-.432l.003-.819.008-2 .001-.33.001-.153v-.277a1.41 1.41 0 0 1 .046-.378h4.841c.042.147.042.147.047.244v.089l.003.1.005.696.003.234v.112l.002.108v.102c.002.044.003.066 0 .088a.557.557 0 0 1-.02.083c-.082.109-.13.155-.265.182h-.119l-.135.002-.146-.001-.464.003-.481.002-.306.002h-.145l-.135.001c-.152 0-.255.009-.385.09a.533.533 0 0 0-.134.347c.015.16.05.248.153.37l.07.068.077.077.081.08.033.032c.114.115.229.23.352.336.194.166.377.342.558.524l.655.66.305.308.144.145.083.085.105.105c.111.117.24.216.382.293a.531.531 0

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2375
Entropy (8bit):	5.036552306753723
Encrypted:	false
SSDEEP:	24:2d64l6hPlp5f0k1q6cUjs7OjjsPSjs9IjsojjsqG3jsxLZxGjsxKyQDjsxvIjsx9:c361lrIOmJcLZPOA7X1f
MD5:	B005ACFCC0895F307855373DAB78301F
SHA1:	A9CE4FC1B4B69F92BC1B2DEBACAD3B885551DDED
SHA-256:	711CBE5952BF5BBF18D3EC10F0D9F73D3133C3CBA9098A4B3ED13E4F086F4F25
SHA-512:	25649C8AB691B07B05DB11B847904F0ACFD7975370A3F4BA5A504316F0F075E6A0C9A04CFD39264AD6140355959B752620350282C76A347896CA84A776C24945
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_1311" data-name="Group 1311" transform="translate(-611 -291)">. <g id="Group_1272" data-name="Group 1272" transform="translate(-1 41)">. <g id="Group_1078" data-name="Group 1078">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(612 250)" fill="#f2faf6"/>. </g>. <g id="Group_1096" data-name="Group 1096" transform="translate(617.156 256.368)">. <path id="Path_857" data-name="Path 857" d="M14.42,14a3.881,3.881,0,1,1-1.239,2.843" transform="translate(-3.826 -5.433)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_255" data-name="Line 255" y1="2.487" x2="2.632" transform="translate(15.68 6.577)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_256" data-name="Line 256" x2="1.592" y2="4.121" transform="translate(10.185 4.057)" fill="none" stroke="#27d17f"

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	80663
Entropy (8bit):	7.984511781546446
Encrypted:	false
SSDEEP:	1536:wh78Ho8b+l7sKXzIScTIYSGwAQsnSlUMRW52ypp4q7S+Wd6V0nZ/lOx2gZ64Cmmr:PLbkXMSYBDnSxW5xp4q7Soqn6T64VL9E
MD5:	2066A997E83B315CE93FBA282AB53593
SHA1:	9A083A650660084DC11A03E7F0592F2DC0E31377
SHA-256:	5B26C4FEA4FCB2025526517DC3053F7A3B7B1A1A6E18F00474DFA7D03945FD6A
SHA-512:	2BDB67C7C0C6FF5762FC43CCBF04CAA2A86302A5792F54495514A1A418DE2DCE05B2C36D4CBBDE9D14F037502FBCD6C880FDEE3CD6DC80CE26AA20A5A7AECC98
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/25/db/25db3b6e3d98ed5c09090a3ff67a8f50/25db3b6e3d98ed5c09090a3ff67a8f50.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."....................................................................................W_=..\|p.....9$.p....uz...Y.1.l...4K.K...^w7.t.K.&.U\.t.....R..WG....$.5P....g.4Y..}..s.c....\|9.q....;..[.~D..gd..R.n^.@..P.._]Q.+^..U....$...gs^..~C.rm,..@.:.BD.$`.......{........m.=....RM...:13.D.!TvC.l}...:..}.@....z7..V$.e.....>B.}..G..j#i.:OF.fcy..E...T....5vm%...+...I.t~m.pU...Qu.Z.nj9..2....~....8Gtg\|.&.4.GK.{./..y[?G...w...z....'Pkx...u.Y....Wi.h1kL...M9,./....yA.>....u.B.............,o.c..v:.[V.2..Q....v.U...k...YeK..X....V.S.k.%.-..Z..j.)[.+E._.(j..9/.b.E-1.C.U..[.....2.../....1..NGz{8j.}..&a-..y%E.6.....u..7..$).G..$...Xy..-....'.....Z.66v8..9..M..K5..].FK...\|......w*...#.D.V.'.Y.&...c.g....#l.qny.c`...Z../..\...Q.,.k...K0ZppD0b0

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1283
Entropy (8bit):	4.368626505897775
Encrypted:	false
SSDEEP:	24:t44lSxMijI50XZhSXbSArVN42t0qMw9adHWLG7eV4zzZFxsOX1jIKbMEX6zXFRfm:3MfZUVrJywWHWpVMZFxs0jIX4CX7fm
MD5:	4134B39675D96EFF2D44DC90FC3D2B63
SHA1:	39A843E8703DD65A5B452776A39B9F23123F4B46
SHA-256:	73552B1E926EE3561B64C118852ADAEA9B53B662FC23084F113C6DC70D221D81
SHA-512:	0066191248DAF9AFC003420F937180A692828895279CA2B4F21F8D4E65F2FC021D1D67D25B8CC278D262240E48083E7EF3915289C3BD7805ED491DBE018AA4EE
Malicious:	false
Reputation:	low
URL:	https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/b86c034b-efe3-11eb-b56f-0691764446a7.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#F7931A" fill-rule="nonzero" d="M18 0C8.06 0 0 8.059 0 18s8.059 18 18 18 18-8.059 18-18S27.941 0 18 0zm5.305 26.397c-1.534.555-2.96.345-3.592.261-.313-.041-.84-.138-1.403-.254l-.934 3.483-2.144-.574.918-3.427-1.633-.437-.918 3.426-2.144-.574.918-3.427-4.218-1.13 1.13-2.457 1.283.343c.431.116.622.124.848.002.226-.122.336-.372.392-.582l2.377-8.872c.15-.556.144-.719-.035-1.073-.178-.354-.77-.553-1.108-.643l-1.24-.332.597-2.227 4.218 1.13.921-3.436 2.144.574-.92 3.437 1.632.438.921-3.437 2.144.575-.931 3.477c1.572.528 2.68 1.151 3.513 2.197 1.077 1.352.545 3.056.405 3.459s-.533 1.146-1.03 1.56c-.498.414-1.517.69-1.517.69s.983.499 1.567 1.246c.583.747.865 1.864.453 3.278-.41 1.415-1.08 2.75-2.614 3.306zm-2.24-6.27c-.347-.308-1.166-.818-2.209-1.172-1.043-.355-2.425-.65-2.425-.65L15.2 22.903s1.415.412 2.386.597c.97.185 2.

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	80025
Entropy (8bit):	7.986169711171559
Encrypted:	false
SSDEEP:	1536:d5rVbq7QrH/z8NkZGzq8BjE76HQ/xbbXJBH0Fziz+:d5dq7QT/z83Gkju6HobNR+B
MD5:	7A42C890601F6A699A46B5D011072CE1
SHA1:	29744DF72F49B21824E2FA61389791667097859F
SHA-256:	29902218B0DF20C834F4DC393B7FCDFC63F723AF4D65409F125A3541BE0E648B
SHA-512:	2167979EE1A2C347555C3F76C861EDED410EE675FCAE580250273DBC92AD1E0B5E20C4CE097A8D17B22A848DA92C2D442DD7DD84F365BF84CB5C855B87A9937D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................N..'3...kJ:.]..Us..I...+e....{w.,,....b.&.wa....~Xh7.....D.....#>c.Q.V...7..s...o{.....xo.z..<...q%........}C.E....j\|{:.....!R..\|.Kq..JZlG...&.k...~..~...My.<mgLt.t.Y.5_.M...L.....Z=5_...-.<...e..\W.?.b.\|.._..v....O....v..jG+...../.&x....,.Wc!..ngz.]...k..hg.:\iKu.<.....%\|D..........W...:./..B..y._./...-...[.%V.s7{^.......ni...L4...o..\0.......Q3#.t:THG_...x~h.+...v..9....B.....".>.h8......i..O.g....JA.h.j..M........4.........ARXN..Re...mYU.......<\|Z..Z..K...v.U[T..&..A.........I.....`..7......wY!].%B..a.....n..Q;".G!.$.Vk._.A-..5..n.5...:f..c.....m.^G]M.v\E.\|..KQ..1....u..1..?.....M?\|..e}..Z.h...."..c}cU...R..aXM..v.3....../=

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/int/lotame?uid=afa9acdd318515b6d11857989cfe776c&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	3.7712411708182247
Encrypted:	false
SSDEEP:	3:YWR4b5LkLLyAUKtfJacpn:YWyb5L1Dof9p
MD5:	864E7D68C370E4A879D3EB16E3E13287
SHA1:	0C5CFBDCA1D75586473370DC5514B1907F8E4EA8
SHA-256:	90099DEDF118253BFF1798E5F8C3BAB386D90C673FB759AEB4D9E383044F3904
SHA-512:	7979A66B33395EA6BBD5CF815031A67A01CB736A53375A8B2D51BADAF742A4A64136A60EFE4CB4BA06EE938337B83E8749418075C65249DFF9ABFDE6069FFE16
Malicious:	false
Reputation:	low
Preview:	{"status":true,"banners":{"top":"","middle":"","bottom":""}}

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6360
Entropy (8bit):	5.195068149063181
Encrypted:	false
SSDEEP:	96:1CukenZN7/i2EfMyzZfg+vgJqbWFe8c5dO5lNj0OHdsyr/th:nr7/irzztvgGnODpsyzf
MD5:	18369A090C1BB7ACBE45F8A1ABEDD28E
SHA1:	3F794BE8E5F38616890E0FD3AB438A6E62BC1E98
SHA-256:	506992473223F4B992524A0E19CF6CEFB1FF17531F52B6AC11F160FDB95208B9
SHA-512:	7A9951280EF607188D51BB4B87549B3AD77453A878C5861A97CA98C421A1E5A0EEBFF16C50C698076E1D9E3CAC5C18E270AEADDBBB86AA1CA08BE2ED5F8D0B6B
Malicious:	false
Reputation:	low
URL:	https://app.plus500.com/ServiceWorker.js?u=https%3A%2F%2Fcdn-app.plus500.com%2F117405&lang=de
Preview:	// Incrementing CACHE_VERSION will kick off the install event and force previously cached..// resources to be cached again.....var urlPrefix = "";..var appVersion = "";....var CURRENT_CACHES = {...offline: 'offline-v' + appVersion + '-' + languageCode..};....var OFFLINE_URL = '/Resources/dist/Resources/pages/offline/offline.html';..var urlsToCache = [];....var languageCode = "en";....function prepareUrlsToCache() {...urlsToCache.push(OFFLINE_URL);...urlsToCache.push('/manifest.json');...urlsToCache.push('/Resources/dist/Resources/pages/offline/offlineLoader.js');...urlsToCache.push('/Resources/dist/Resources/pages/offline/offline.js');...urlsToCache.push('/Resources/dist/Resources/images/plus500-logo-menu.png');...urlsToCache.push('/Resources/dist/Resources/images/app-icon/Plus500AppIcon-192.png');...urlsToCache.push('/favicon.ico');...urlsToCache.push('/Resources/dist/Resources/js/WebCommon/Vue/vue.min.js');...urlsToCache.push('/Resources/dist/Resources/strings/' + languageCode + '/re

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (57969)
Category:	downloaded
Size (bytes):	655148
Entropy (8bit):	5.197444184649397
Encrypted:	false
SSDEEP:	6144:UyjFczCDpzeSc+eEHYXDnRsRbYW8DeUco:rFAGpzeSJeEHYXDnRsRbYW8DeU1
MD5:	0A6B6E34D2CE5388C046C8290BA08DFD
SHA1:	A9B4B527E7F275B05420CD1966EDF72B27098059
SHA-256:	C1A7A7A232ADF331399EB5E1A2AF63E7BDAB6CA2ABDFCE77BCE120BEFA799697
SHA-512:	99E39AB51886DFF744C7A747CDF6561A6DF279B0464826B6A6242908CBFF86021D1D8213E37607C0C4A908C6F3F09C8BCDDC6196B6C49550D67014FDA727E07B
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/app/v2/css/all.min.css?id=0a6b6e34d2ce5388c046c8290ba08dfd
Preview:	:root{--bpc-primary-color:var(--bpc-custom-primary-color,#4191ec);--bpc-secondary-color:var(--bpc-custom-secondary-color,#e04d4d);--bpc-spinner-color:var(--bpc-custom-spinner-color,#f7f7f8);--bpc-border-color:var(--bpc-custom-border-color,#2e3845);--bpc-text-light-color:var(--bpc-custom-text-light-color,#e8e9ea);--bpc-text-dark-color:var(--bpc-custom-text-dark-color,#7e8184);--bpc-text-separator-dark-color:var(--bpc-custom-text-separator-dark-color,#737679);--bpc-background-color:var(--bpc-custom-background-color,#0f1217);--bpc-font:var(--bpc-custom-font,"Roboto, sans-serif");--bpc-font-size:var(--bpc-custom-font-size,12px);--bpc-line-height:var(--bpc-custom-line-height,normal);--bpc-row-x-margin:var(--bpc-custom-row-x-margin,16px);--bpc-row-x-margin-s:var(--bpc-custom-row-x-margin-s,10px);--bpc-row-height:var(--bpc-custom-row-height,60px)}.bpc-fees-table .table__container{background-color:var(--bpc-background-color);color:var(--bpc-text-light-color);font-size:var(--bpc-font-size);line

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x350, components 3
Category:	dropped
Size (bytes):	70297
Entropy (8bit):	7.983026877252951
Encrypted:	false
SSDEEP:	1536:4JGNbawCQ57MS4ueUqQRgbx2YwE8bScCEgUemQ/V4fmV:4YNWSMgevQRgbx/VwgUe3umV
MD5:	B2C05A479326B73D38CD3531527FABBB
SHA1:	7598C399CC34E1E67D28AE7B91E79C1A0015FFB7
SHA-256:	E9A158748EC9483E59E8A0EBBF271271B72BAC869F445FE1496AD080B3E8BCFB
SHA-512:	E09C77E855E8C37F3085E8F7581F049B2FA4B5C29003C9C11AB4CDC08D5697F601DAFB6C35F6AB04E0F29DB2CD8124E615C4B8294B1A91875C55E06D6E7F823B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................^...."..................................................................................C.FsY....b...F1.Sb.....Y.4F.........m[3.X..P..u...S^.}]...J".;.Fc".!....[.X.....>..%..D^.5t..N]$.Y.5....1t_%2...:.[..;..J3.[..2....'..6.[...!....8pVh.C.,......#'...9.6...\.[1w......q=..<...../.$.)...+..=..r..~......A..!y.. e!.VR."...+`.3d}cX .#..,......Ec..[.G.J...6.(.g.q"..YD.dR@rD.bq.m..Gja2..#.0..c.6..U..ir..#`R.e.R..[.7.k...&..g..g..O.. 3E.c-=.....Q...G..VB#....C.XO...f:....\i.(7t..A..S.\|.p...{\|....Hy...LL.j...b.Q..q.`{..w...7h:%..>..G.s4q1.;i9...)z!..\|2...5. X.H.........cl....-H.6.2.......hUi..n..\|..cY.,.\.g..2l8wWk..{\H...h.65......,a..J.<..\|....em.\|;.e.....ff...Rz.2...>...{..X0Z...Kwk.hF..t..ns..Z..t.\M.... .Rk...Z..eguS.SD.K*E.e.D....5d

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	410
Entropy (8bit):	4.994300638999028
Encrypted:	false
SSDEEP:	6:7j+WZFVYmc4slzqBWGEabtG2cRSvFZ6uF9oChTrfNiRFIy/6qWLdbDy3G14foEJM:XHZ4MBWyRcSvFguF9osIFIySMG1So7
MD5:	46A990311976549A778E1263866506D8
SHA1:	DF8AC0E56E5517980F952090382241F545FF3B3A
SHA-256:	54F6F29D2CA041818A97C8B8754AB5D165E65B6B619311BC8C23CB57EBD9CB9E
SHA-512:	B5F126474A8207754A2A587A835BAFB3875992987FF21879DF90ADF3A6FF54194383BE08B2638F67157F0580550241120FF12F05254958DB66ABC9CC22266238
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/asset-icons/asset-eth.svg
Preview:	Generated by IcoMoon.io -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32">.<title>asset-eth</title>.<path fill="#494949" d="M16 0c8.837 0 16 7.163 16 16s-7.163 16-16 16c-8.837 0-16-7.163-16-16s7.163-16 16-16zM15.988 4.571l-6.744 11.191 6.744 3.987 6.744-3.987-6.744-11.191zM15.887 21.025l-6.744-3.985 6.744 9.504 6.748-9.504-6.748 3.985z"></path>.</svg>.

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2642)
Category:	downloaded
Size (bytes):	125413
Entropy (8bit):	5.535601782956423
Encrypted:	false
SSDEEP:	3072:uykzqGs0f009Imu3GltArX7Qd7oNEGmjWOe32:hpKRso7oNEGmSG
MD5:	7032FD7518B2CE2C66060570A1CBFF97
SHA1:	825D3DCBEE0125A4FDBE60BD4A97EA356B2E4172
SHA-256:	C4D8BEC3A04E8AAC28B40D20DE6DF3FABA2A084E06945BA32196A268FC1B4F22
SHA-512:	8BFFF01B159CB536412CE7BB1457BF687D152E254FE3FBD6E127CBBB62045B6B77F975847EFC049C58A9AA69630680AD2EDB73363748A0D9BCB3E54FECBEB0D4
Malicious:	false
Reputation:	low
URL:	https://www.googleoptimize.com/optimize.js?id=OPT-N3D6ZNP
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"function":"__dee"}],. "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenForMutations":false,"tag_id":6},{"function":"__asprv","tag_id":7}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":["macro",1]},{"function":"_eq","arg0":["macro",0],"arg1":"optimize.callback"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ .]..,"blob":{"1":"18"}.........};...var aa,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.length;++c

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18641)
Category:	downloaded
Size (bytes):	311748
Entropy (8bit):	5.500399202460505
Encrypted:	false
SSDEEP:	6144:GVPCQYGPGpcMj/yBNtuoAgai3YPhpR4JXcQ3:GPa/yBNtKJ3Q3
MD5:	D85836F54F2B4D4232C0BC67AA3AF887
SHA1:	11C81F3F3943193EBB34257A13C19EA29CCA2197
SHA-256:	835D5165C1ADB760C4CD1E0DD27BC708233289156D2311D8769A55DD34FA4A42
SHA-512:	C5CBBF46DC0DA9CFC1319382A00EEA95BDAA42E318EC1A888A434D4F763D626BD208B0C908DA424ED1B3CE5F284733A88D3E595C7EE103E53D9677B08E38C6EC
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/sdk.js?hash=27a4982780650a7ffce9fa0996996a07
Preview:	/1714150911,,JIT Construction: v1013080259,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	910
Entropy (8bit):	4.307334040413427
Encrypted:	false
SSDEEP:	24:t4IuXV+oRHLu+k3yaHle5gH91JJN4AT28MTYVP1TdqfzySb:816yaFq4PN4arGYVtTAfee
MD5:	78D796CA648D8A5E665B48ED0217C56A
SHA1:	510637C7CAB9640B28A9B08DE421A44B40F055AA
SHA-256:	DADBB59B37BFEA4C78C6E15C8CBB96DFBA84526E43A0767DC244FD062A841ABA
SHA-512:	C56F994F9279307F908993DCBBA92673A211995F17226F613D8BAD8644AC30BCF8738A73112A575836A1F4F0D40D74ED06100C040C8D9B34F96ADA99AD5EFFE8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 40 40">. <g>. <path d="m40 18.9q0 1.3-0.7 2.3t-1.7 1.7q0.2 1 0.2 2.1 0 3.5-2.3 6.4t-6.5 4.7-9 1.7-8.9-1.7-6.4-4.7-2.4-6.4q0-1.1 0.2-2.1-1.1-0.6-1.8-1.6t-0.7-2.4q0-1.8 1.3-3.2t3.1-1.3q1.9 0 3.3 1.4 4.8-3.3 11.5-3.6l2.6-11.6q0-0.3 0.3-0.5t0.6-0.1l8.2 1.8q0.4-0.8 1.2-1.3t1.8-0.5q1.4 0 2.4 1t0.9 2.3-0.9 2.4-2.4 1-2.4-1-0.9-2.4l-7.5-1.6-2.3 10.5q6.7 0.2 11.6 3.6 1.3-1.4 3.2-1.4 1.8 0 3.1 1.3t1.3 3.2z m-30.7 4.4q0 1.4 1 2.4t2.4 1 2.3-1 1-2.4-1-2.3-2.3-1q-1.4 0-2.4 1t-1 2.3z m18.1 8q0.3-0.3 0.3-0.6t-0.3-0.6q-0.2-0.2-0.5-0.2t-0.6 0.2q-0.9 0.9-2.7 1.4t-3.6 0.4-3.6-0.4-2.7-1.4q-0.2-0.2-0.5-0.2t-0.6 0.2q-0.3 0.2-0.3 0.6t0.3 0.6q1 0.9 2.6 1.5t2.8 0.6 2 0.1 2-0.1 2.8-0.6 2.6-1.6z m-0.1-4.6q1.4 0 2.4-1t1-2.4q0-1.3-1-2.3t-2.4-1q-1.3 0-2.3 1t-1 2.3 1 2.4 2.3 1z"></path>. </g>.</svg>..

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3363
Entropy (8bit):	4.273868897690424
Encrypted:	false
SSDEEP:	48:cjfL3cXglZKkYOOOQVNoRagYOlEVd8quEg4Y+ymSMOejqZv71mzYeXO1LWzYH:UMXgDskQVyROVdRuEg4KEOe0D1+Y
MD5:	D272987F843F0984A81025C1E367A721
SHA1:	555ABF469C95CD3B7A6507B4B106F6FAB4ACFF60
SHA-256:	1AC9BAC60EA7B7B755462333F8696E70DA74235DD937BE792BDF8A6AA62ACA9F
SHA-512:	C0BE46B42E7F08B9DABEE4902726C75BC568D39C3ABEB3D680BB12DEA27CB72BF1954054C2194294D729AF651603DE6011CB8C36C2506A91BFD5FD09A64786DE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><defs><style>.cls-1{fill:#f79797;}.cls-2{fill:#fff;}.cls-3{fill:#ff6bdb;}.cls-4{fill:#a31bb7;}.cls-5{fill:#3fea73;}.cls-6{fill:#276eb6;}</style></defs><path class="cls-2" d="M18,0C20.84,0,23.52,.66,25.91,1.83c5.98,2.93,10.09,9.07,10.09,16.17,0,9.94-8.06,18-18,18S0,27.95,0,18,8.06,0,18,0Z"/><path class="cls-3" d="M1.36,14.49c.03-.13,.08-.25,.15-.36,.07-.11,.17-.2,.28-.27,.11-.07,.23-.12,.36-.15,.13-.02,.26-.02,.39,0,.13,.03,.25,.08,.36,.15s.2,.17,.27,.28c.07,.11,.12,.23,.15,.36s.02,.26,0,.39c-.65,3.1-.31,6.32,.98,9.21s3.46,5.3,6.2,6.88c.23,.13,.39,.35,.46,.61s.03,.53-.1,.76-.35,.4-.6,.47-.53,.03-.76-.1c-3.11-1.79-5.56-4.52-7.03-7.8-1.46-3.27-1.85-6.93-1.11-10.43Z"/><path class="cls-1" d="M13,34.25c-.25-.08-.47-.25-.59-.49-.12-.23-.15-.51-.07-.76s.25-.47,.49-.59c.23-.12,.51-.15,.76-.07,6.92,2.13,14.44-1.01,17.77-7.53,.06-.12,.14-.22,.24-.31s.22-.15,.34-.19,.26-.06,.39-.05,.26,.0

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	832
Entropy (8bit):	4.352583593893328
Encrypted:	false
SSDEEP:	12:t4IRMXV+DREfJoOASVofwfMBkHvqTughzC+O6NQbXvKF3M6FH8U88XKf9i:t4IuXV+N+oOF4m0uYz3O6NQbs8Jl8XA0
MD5:	AFE7FC60ED757DB39A88D2950FCE69C9
SHA1:	E120B53E856848419275723E24A539359CF41B4A
SHA-256:	847EB36B4DC4B05F94052DCD98077319E74D882334A106BB9CA451BA211C9C2C
SHA-512:	0A529A65C5BBEB88AEC8927C3FAA86118F3406C3450EBE9903BAE8C3E985A8926AB3688E75098AAC7B23DB76A280E55AC95675400D11D0D253341665A9B2EA98
Malicious:	false
Reputation:	low
URL:	https://platform-cdn.sharethis.com/img/whatsapp.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 40 40">. <g>. <path d="m25 21.7q0.3 0 2.2 1t2 1.2q0 0.1 0 0.3 0 0.8-0.4 1.7-0.3 0.9-1.6 1.5t-2.2 0.6q-1.3 0-4.3-1.4-2.2-1-3.8-2.6t-3.3-4.2q-1.6-2.3-1.6-4.3v-0.2q0.1-2 1.7-3.5 0.5-0.5 1.2-0.5 0.1 0 0.4 0t0.4 0.1q0.4 0 0.6 0.1t0.3 0.6q0.2 0.5 0.8 2t0.5 1.7q0 0.5-0.8 1.3t-0.7 1q0 0.2 0.1 0.3 0.7 1.7 2.3 3.1 1.2 1.2 3.3 2.2 0.3 0.2 0.5 0.2 0.4 0 1.2-1.1t1.2-1.1z m-4.5 11.9q2.8 0 5.4-1.1t4.5-3 3-4.5 1.1-5.4-1.1-5.5-3-4.5-4.5-2.9-5.4-1.2-5.5 1.2-4.5 2.9-2.9 4.5-1.2 5.5q0 4.5 2.7 8.2l-1.7 5.2 5.4-1.8q3.5 2.4 7.7 2.4z m0-30.9q3.4 0 6.5 1.4t5.4 3.6 3.5 5.3 1.4 6.6-1.4 6.5-3.5 5.3-5.4 3.6-6.5 1.4q-4.4 0-8.2-2.1l-9.3 3 3-9.1q-2.4-3.9-2.4-8.6 0-3.5 1.4-6.6t3.6-5.3 5.3-3.6 6.6-1.4z"></path>. </g>.</svg>..

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	93463
Entropy (8bit):	7.98912754598122
Encrypted:	false
SSDEEP:	1536:fDQ6/BNsPt3gManiBy6ZYZ1LYgXV3UNrUL9pVCo85Ja/4Ae8zY9+7PGS:fZBWPtwM6iLEpYmMrUfVNl6sY9+7+S
MD5:	921BEDD579EE9DAB6F63F8195063AAFA
SHA1:	D4A4EC7E822E9839BF50A26604F87D41937B163F
SHA-256:	D908198173538AFB23E1144EAA9187ED0C716015D40C1A18F431C22D0A99C340
SHA-512:	DF8FEB128290631DA3368AA59B49A4B9DC13B7ACCD7A8D01EBCB5FDFC752D2464D00A1DFA46446068C40832FD84A932AD75D026366153603BE3DE9BC83409CC7
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/3e/34/3e34a78cd7ece10d0cc0a028b8702dfb/3e34a78cd7ece10d0cc0a028b8702dfb.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."........................................................................................?3..\."X>..U.... ...P.....1.];e+{G.^......e..mi...=.\|.u.[>N......q..d.X:2...$%=..k....7..b..........V.k6.r.4\|.....Pb{4Q..P.......l....o.m.jN.77S..W.nG..W...EWSfA ...Yo.. .]w.P1{.."T."....3$....c......"...E..:0...T.Y.22..g..W...........g...O.Q..P..2dU....\..3...l.t=.........2.....y.X....7L....s.V.^.......y.Bq..Ds.!3.....L.[.]T...../..w.......... c!(.i.F.Ql...6..UI..C....F....m8.J2....'.1.UQ+...c.}...cq...._w.....Cv.%......q.F....S...9k.._I.m...j..M..bE.s...Z'.b........{.ro...e'.......Z.......LP.F...UG$..q....9C..!.l"mp..FU.i.t.g}..\|..............A...V.X..4s.5........Q.\|...L.....9n..&..\.Q21:....<....^..GX.......S.z9:....i.)...X..X.

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63317)
Category:	downloaded
Size (bytes):	380227
Entropy (8bit):	5.29315187974486
Encrypted:	false
SSDEEP:	6144:Ua36oWbeR/bGjK7dEHAaDwYvEmX4UfVBXR:/6oWdjK7dJYtVBh
MD5:	CFA080C5C44FDF96532E131CD74184F4
SHA1:	78247C64FFE89C1408517359A523E416DED52645
SHA-256:	AB347E0B48B7B4A73F5FCCF21EF2770F4F7A6FBCC5A0CEACF5017E9F373BEA54
SHA-512:	3A30D393E6DFF120C40A3AA196B84D1C0F6CDC6C436CB6CF4CE4CDCAA1749C20FCAF93C5F454C82263A6C88995FA3B6002AAEEC7A9794CF3F15F72B7E74D526C
Malicious:	false
Reputation:	low
URL:	https://code.highcharts.com/stock/highstock.js
Preview:	!/*. Highstock JS v11.4.1 (2024-04-04). . (c) 2009-2024 Torstein Honsi. . License: www.highcharts.com/license. */function(t,e){"object"==typeof module&&module.exports?(e.default=e,module.exports=t&&t.document?e(t):e):"function"==typeof define&&define.amd?define("highcharts/highstock",function(){return e(t)}):(t.Highcharts&&t.Highcharts.error(16,!0),t.Highcharts=e(t))}("undefined"!=typeof window?window:this,function(t){"use strict";var e={};function i(e,i,s,o){e.hasOwnProperty(i)\|\|(e[i]=o.apply(null,s),"function"==typeof CustomEvent&&t.dispatchEvent(new CustomEvent("HighchartsModuleLoaded",{detail:{path:i,module:e[i]}})))}return i(e,"Core/Globals.js",[],function(){var e,i;return(i=e\|\|(e={})).SVG_NS="http://www.w3.org/2000/svg",i.product="Highcharts",i.version="11.4.1",i.win=void 0!==t?t:{},i.doc=i.win.document,i.svg=i.doc&&i.doc.createElementNS&&!!i.doc.createElementNS(i.SVG_NS,"svg").createSVGRect,i.userAgent=i.win.navigator&&i.win.navigator.userAgent\|\|"",i.isChrome=-1!==i.use

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	15
Entropy (8bit):	3.1898980954642875
Encrypted:	false
SSDEEP:	3:YWR4b5C:YWyb5C
MD5:	28EC1EEE5F4049E3C4F2135069C1D2C8
SHA1:	3505519507CA1C2A089C46E100B80408CA278421
SHA-256:	EDC48CD3B0BC4FA7BA23AAD40B8508A17D370CA38BE174BAE2A2F64634E65A2B
SHA-512:	F71618E40EBAA14AB6D523A2341258C0DA264B545388F8FFFD14C31C64B35F94B21EB633316C4D77AFCD864AADE1DB588EF6387EE0C4787E6F7770DB0ABC1183
Malicious:	false
Reputation:	low
URL:	https://1movieshd.cc/ajax/verify?domain=1movieshd.cc
Preview:	{"status":true}

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1234
Entropy (8bit):	4.454685909316532
Encrypted:	false
SSDEEP:	24:2d644AjEtM44xA7+SQASr8nfsACnaPT2PTEO1FEE/hL3BmfCZEOw1cM:cPRxK+rnQkjnaPT2PTFhtmaqOw1
MD5:	7ECB0FDAAB89AC67988AC93A7D836B4B
SHA1:	00097E65730036D3E12506AFED25F8E95F645288
SHA-256:	E8985492079D9702313AF3B32CD885246CCC50DE8886614E9388FF41E838237D
SHA-512:	6BA70E3706F5C96E407140D4B866286E701E97CA7722D61C52DDF4A5B8419D0149F7500D1D18D5C446DA2DD5D1247500C737050C30655D4B952909599F5FA913
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" fill="none">. <circle cx="18" cy="18" r="18" fill="#fff"/>. <path fill="#E6007A" d="M18 10.62c2.53 0 4.58-1.2 4.58-2.67S20.53 5.3 18 5.3c-2.53 0-4.58 1.2-4.58 2.66 0 1.47 2.05 2.67 4.58 2.67Zm0 20.05c2.53 0 4.58-1.19 4.58-2.66 0-1.47-2.05-2.66-4.58-2.66-2.53 0-4.58 1.19-4.58 2.66 0 1.47 2.05 2.66 4.58 2.66ZM11.62 14.3c1.26-2.19 1.26-4.56-.02-5.3-1.27-.73-3.33.45-4.6 2.64-1.26 2.18-1.25 4.56.03 5.3 1.27.73 3.33-.45 4.6-2.64ZM29 24.33c1.26-2.2 1.25-4.56-.03-5.3-1.27-.73-3.33.45-4.6 2.63-1.25 2.2-1.25 4.56.03 5.3 1.27.74 3.33-.44 4.6-2.63Zm-17.4 2.63c1.28-.74 1.28-3.1.02-5.3-1.26-2.18-3.32-3.36-4.6-2.63-1.27.74-1.28 3.1-.01 5.3 1.26 2.19 3.32 3.37 4.6 2.63Zm17.37-10.03c1.28-.73 1.29-3.1.02-5.3-1.26-2.18-3.32-3.36-4.6-2.63-1.27.74-1.27 3.11-.01 5.3s3.32 3.37 4.6 2.63Z"/>. <circle cx="27" cy="27" r="9" fill="#7921EA"/>. <path fill="#fff" d="M21.34 30h4.53v-1.03h-2.91l1.69-1.63c.68-.65 1

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (421), with no line terminators
Category:	downloaded
Size (bytes):	421
Entropy (8bit):	4.922822349584567
Encrypted:	false
SSDEEP:	12:ZnEIwPNK4TSpvyulww1tsnLQsOXZ0V7VJnhVZJ:ZEIv4TSEGgnLQ5J0V7VthVb
MD5:	D34A8A89944479EEF669417EB9F8E3C5
SHA1:	E40C0AAE9D842952A702CD43C63F08D1CAB6B5A7
SHA-256:	6267002F4B9A91BBFE17D88D15DF2D3F816724F072A81757BAF0771679C2D775
SHA-512:	832DFFA7F4E8ED9BE43E027C684B735B48281EC684272056C2A59C41E0A7061561F0C51F2EA98219157744EE8D973FDAC1BE565AB9785E85E0CBCD6A1293815A
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/app/v2/js/cta-button.min.js?id=d34a8a89944479eef669417eb9f8e3c5
Preview:	window.initCtaButton=function(){function r(r){for(var t=r+"=",e=document.cookie.split(";"),n=0;n<e.length;n++){for(var i=e[n];" "===i.charAt(0);)i=i.substring(1);if(0===i.indexOf(t))return i.substring(t.length,i.length)}return""}var t=r("ref"),e=r("tag"),n=r("irclickid");document.querySelectorAll(".js-bp3-cta-button a").forEach((function(r){r.href=r.href.replace(":ref",t).replace(":tag",e).replace(":irclickid",n)}))};

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	965
Entropy (8bit):	7.529922193965334
Encrypted:	false
SSDEEP:	24:tXYhw4CmP0fPHYHkO4mWdbBl5kPsMzWEth3vuU:tXk/4fl5biz9v9
MD5:	94AAF332709F03B5DC05CB3E26DA7211
SHA1:	29553F7022DC86860A7E7DA6071C50B34EBE9579
SHA-256:	77FABF222EEA2EAAB37F3DD2305A6EDB49D4D4687AB1B96F008BDCDDC71B8A80
SHA-512:	534A31E76C5BAA2A4C6F2F159690CA02DB7CA7DEDAFAEDFBB9DA852555AD9507546A7BEB71A0C42A39ED5251D36037DCD0C4BED9A56F8BCCDA25F977FEC7B7B3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE...p.ppppppppupppptttptpsvsssspsprrrprpsssrtrrrrprprtrrtrrtrqsqrurqtqqrqstsqtqsusstsqtqrurrsrqsqrtr.............................................................................................{}{{\|{z\|zrtr.{)....!tRNS... 00@@PPP``oppp................RT(....jIDATx....v.@...).b[-....P6...M..F[Kc...'s...f.e.....\.gf....w...i...]..G.....\r..N.....3.a..\|...E....c2.4< .?...7.....%.x...Hk.......t.'G..9..lv^....-j..{HY.y.Bz\...jg.....RkHC...H.c.......L....Z...@.+.r....v.c.Z.....Z.z.(.....#..K:..J.N...%%......-....3..fae#{C..$..<K..)\|..3..A.V.mPL#m...V.7.^...Z-.A..nk$......A....0b.Wv._wN......Kz.f.,.`....(..01.`.c..'..8...wD^..Nu...>j....p....>.....y........QB.z.&;#>........9.#.F.t.,\|i..(.6WO>.h.0QO.h.Z..U..A..M.Vh/..m..#.lUm...m+....-..+;@.xs..)*0U!.....lv..B..}...&..c.B.......B.z..~.......a.^.K.Gf'.U9.u.:...#.~.9.H.#.H.=...d.,.Zp...S..E\|~hJ....._..j....IEND.B`.

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18115)
Category:	downloaded
Size (bytes):	18186
Entropy (8bit):	5.193395551352643
Encrypted:	false
SSDEEP:	384:xZzbfjUMhxJQChFgIV1a1v1h1CxU3NaxmUWdXckk2g5ev0M:LjoMhxJQChbodbCxrxmPXckk2g5ev0M
MD5:	09DB388523F29A4E6879D1CD9650B068
SHA1:	CC19F7FDBFB362C71E37001F54D0126D7CC93682
SHA-256:	B714F41D94EC0F2D855E643D4E51D9FB0AA1F820CB931CDF0D9FA1B0148696D5
SHA-512:	616F87719E5CEE2F6832EBB4861CA734CFAFD72BFDCB3C09217B8F961A3C5AE74EC377A7151508F5A37430F60CBC2DB0789A5C280FD442B66D8C539B77547787
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/app/v2/js/stock.min.js?id=09db388523f29a4e6879d1cd9650b068
Preview:	/! For license information please see stock.min.js.LICENSE.txt /.(()=>{"use strict";var t=function(t){var e=t.amount,r=t.currency,n=void 0===r?"EUR":r,a=t.minimumPrecision,i=void 0===a?0:a,o=t.maximumPrecision,s=void 0===o?0:o,u=t.replaceZeroWith,c=void 0!==u&&u,l=t.index,d=void 0!==l&&l;return c&&0===parseFloat(e)?c:(d?new Intl.NumberFormat("de"===document.documentElement.lang?"de":"en",{maximumFractionDigits:s,minimumFractionDigits:i,signDisplay:"auto"}):new Intl.NumberFormat("de"===document.documentElement.lang?"de":"en",{style:"currency",currency:n,maximumFractionDigits:s,minimumFractionDigits:i,signDisplay:"auto"})).format(Number.parseFloat(e))},e=function(t,e){return new Intl.NumberFormat("de"===document.documentElement.lang?"de":"en",{maximumFractionDigits:e,minimumFractionDigits:2}).format(t)},r=function(e,r){var n=function(t){var e=arguments.length>1&&void 0!==arguments[1]?arguments[1]:8,r=!1;t<0&&(r=!0,t=Math.abs(t));var n,a=[{value:1,symbol:""},{value:1e3,symbol:"K"},{valu

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 901 x 505, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	56219
Entropy (8bit):	7.981079981899655
Encrypted:	false
SSDEEP:	1536:x8FFbFL/cZK4qmjSstfcsdpF5+4azXP9dJ:iFbR/c44q63U/PJ
MD5:	BCC6D4B39E14E11AAB455F55CA4D8752
SHA1:	DE8AD7A5797C941131E67FDAE7672C9918F933D3
SHA-256:	9BAFF00FCFE31176EB6E0B3571E8AFFFC485E35D143FC78C25406544286C5B8C
SHA-512:	E04A262821E63F806C8CBA20AFB5158DA15125A573017CA10337B4A0E6CFF14B56072FAF006A645F03F8EA851EA7F5A95FC13E79C931C80CD6BE0D188704C45E
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Screenshot%202022-11-17%20at%2011.15.02.png
Preview:	.PNG........IHDR................d....sRGB........UIDATx...A..@..1.........I........s......Q..6.....G...\|...>...`.Q...\|....G....Q..6.....G...\|...>...`.Q...\|....G....Q..6.....G...\|...>...`.Q...\|....G....Q..6.....G...\|...>...`.Q...\|....G....Q..6.....G...\|...>...`.Q...\|....G....Q..6.....G...\|...>...`.Q...~..h7m ............4.(....DJ.}.+km/..jfm.Q..z.(...'....G...>y....<.........Q...O....'....}.(..=y....G......l.<..@O...ZU}l1........W.S..9....^.."sy!......P....\|..?.(.2......G./.z...H.. ....S...y..).(.z\|.......<.c.l.4.\|....u:..GaGj...b.......H....Q.J...h.._...y...z./".....I..vd\|p,..cV..e.k..m.]..._...`..".j...hf....T............e^...9.j.F..l....Q..?:.F.s...<b.".q...c..q.>...,.j.\|:S.}"..\...I}..h......(...N...w.{U..{K..Z,.d[...B^e....a..K.q.O`.C..a'.L p..a;.3...@.f.b..1.`G...dY.%k....z..o..V..........S~.~O...;.w.{.A........l....:.....p..'.NdOQ.:..U...)...m.e...[.....MI.R.J..h......W.4<.u...^-u..}.......l......;6....\|.._....=.c....z.&....<.N.S ..J......5ffP.N*m.

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (595)
Category:	downloaded
Size (bytes):	596
Entropy (8bit):	5.086099195235125
Encrypted:	false
SSDEEP:	12:9iQVNkcULoP0uxVxx7oyHaamqIjRIXCUlQd0K3sMLMFU:9iQV6cULe04KEp7IjRIbK0K3sMLMu
MD5:	7881C3D113253E0E8509A0F365DE2B35
SHA1:	C6A24EFD0EE9906111C50CAF23260F5442D18BDC
SHA-256:	2E537E8EC86222379903E8D13F6D09326A6C68A308AAE607DAD28926B135162E
SHA-512:	C35E0CB1E1BC26C9E36D8E1945403BF8E13AE71806BF6012577C7837996F8E5C911428206045DBE6866A73EFCBBA370EC5A4EBB85C659EC071924D3DAD3FB33C
Malicious:	false
Reputation:	low
URL:	https://app.plus500.com/Resources/dist/Resources/pages/offline/offline.js
Preview:	(()=>{"use strict";var n={};(function(){"use strict";new Vue({el:"#offlineWrapper",data:{strYouAreOffline:t("strAPP_YouAreOffline"),strDontMissOut:t("strAPP_DontMissOut"),strEnsureYourDevice:t("strAPP_EnsureYourDevice"),strReconnectToPlus500:t("strAPP_ReconnectToPlus500"),isRtl:t("strLangDir")==="RTL"},methods:{reconnect:function(){window.location.reload()}},created:function(){document.title=t("strTITLE_PLUS500_GENERAL")}})})();function t(e){try{return e?window.strings[e]:""}catch(s){return e}}function r(e){return e.preventDefault(),!1}window.addEventListener("beforeinstallprompt",r)})();.

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	57351
Entropy (8bit):	7.968757759966139
Encrypted:	false
SSDEEP:	1536:7vBZm2SXsh0kQ1yv7NBBJzfBAdz1mfREVFK:bBZ8kQM7fBgN4/
MD5:	34ADABACC9F304AA1E7C3F8D8C9E96B4
SHA1:	2FCDD584D40E345D6776912E15B1F86BFAA7BEB3
SHA-256:	DFF2F0EAA1E34A041971D0681CD78A1B71B10B673732DE8344F30C6520F27449
SHA-512:	86C12535583656581FC0AD2AA037A2208C430A4B9E5270A34FB331B14C99DE10D32FE42D6782C9F7F792B829F2CC876AAA8FB9EF94F438F9DC53AE37EDC3BAAE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."..................................................................................Q.....2.i...i.`S.)..@.,..l...5Ik.C...zC.0.l.....k^..MU.L.}.U..>...n......U.`t6..l>.w.OnU.X..=....,....T.....XO.M.....VU.W.F..*....a.u..]...........J..:."..4.....V.{p0......m..-v.u..t..LE)\.d...R.m..u..s...............a.i..(.o.......u.X6.l>:D...4.........E...F.o......X..F.......B.o..WBbQ-.0...i....eC..CH....Z.:..U.g.;\|../.~S..a...N.<A.<.J$.}.w.T!.8.5h./....F..;LWm.....?./!.\|....\w.`.E...w...m..yA..Bk\)..{.St.M..YYQ..N...v......+\ugs.d.S.it{.mh.f.G@..Xzz."d>fO..#...F..GD....U..e..s\|......O.......+.m..qY.q<.c..3....eo5'rM.;....J...&...}..TM.....c....q.A6)....L}g...w..'mn..l..........I....>........>>..jJ..UN.GLIT.d.T..5.fY=.V...Y;.....i...._

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/adobe?uid=06291327801249806183443003251739176557&_rand=1714156364519
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	159515
Entropy (8bit):	5.07932870649894
Encrypted:	false
SSDEEP:	1536:a7OIJNT48SyEIA1pDEBi8INcuSEFO//uKFq3SYiLENM6HN26F:a7Za4GMq3SYiLENM6HN26F
MD5:	7CC40C199D128AF6B01E74A28C5900B0
SHA1:	D305110FB79113A961394B433D851A3410342B8C
SHA-256:	2FF5B959FA9F6B4B1D04D20A37D706E90039176AB1E2A202994D9580BAEEBFD6
SHA-512:	CE79937F81CDA05F54EA67C1E8A96101285B46F6EDE02BC2687A0D574832B2C7D3A0D43FF40D1E35D51BBEC4B038852825D323146DA7752BEBD0BA37669B13A9
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors. * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1182
Entropy (8bit):	7.599328535837399
Encrypted:	false
SSDEEP:	24:vnwdggO/iUWoPyoKaKBf+c+ub4tjLmoaMCKodoLnQSsNj6v:/6UWobuH+ub4tXmoxtLQKv
MD5:	930472995DD544191165591E392F6224
SHA1:	F295AC491EEB0A4D461F5E365244945144BEDDB5
SHA-256:	19239CEF09D24E9312BC336CE7B2DB3A570FCE0311C09FF1A861BAE3BDCA117D
SHA-512:	2622D50895FA9002D6440B3B26C7F3D44CD454F01D498AF302BFA2882CF3C6617F2F4B3FA996466E115533D85F2DD8E0F0EDC31A147F9BF8542B8B63AE9DE30A
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/wheat%402x.png
Preview:	.PNG........IHDR...H...H.....b3Cu....sRGB.........gAMA......a.....PLTE...............................................................................................................................................................................&]X....tRNS.... 00@@PP```opppp......................%.......IDATx...Z.@...C........b.G3.`h%...A......2...e2K..a.:.Y............}..wZ.......z{..Q....f.G........Z....-.#t.......H.P...\h.{....R...}{>......y...q..u...?.s...\Cj.....(.w3+5.......m..6....dq..4...B..C..K....ea.E..,'..b.%..;4R.)O....9....u..9..]....V..}?..j.aMVf3.K.F.6ke."..r...Aim...,...<.lnM4.....K.s.RT.B.Mx...Io...4..8C...k.U...@T............C.o.d...Ss....4."..L....eM..5.[..5..B.G.-.2..a....!V..DU....s..x.@..;..ILW..u4..*..1ete .Nm4.............4...g.B......<.&..+...Q.%Oh...P..........Rw..-G..M.X[.v\|].)...<1I.V....c[...I..b6..q......jqY..\|......V\|d._}.f.2.U...G4@...2(..b.L..,......G.]....C.MJ.

Chrome Cache Entry: 764

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3733
Entropy (8bit):	4.651449660216424
Encrypted:	false
SSDEEP:	96:KvfaGXbbzFw/D/ita8Z/Lm/PsUfDLyL3crUn4:CaGLSw7m/P1rUn4
MD5:	6FC27648D52718B6656F9AB05442CA95
SHA1:	D16EE984090DD4001949EA7D3A3DE7F36C564FEB
SHA-256:	499EDD67D5828D498CD242ABFCF3E3C0FF763779B946893DBD4D060114E806F0
SHA-512:	672CFDEAD06FE63B6B1DD4D2411956EB85B723D8E52347ED500BB25756D7FB528112881EB11DCE810EA0D5B0DB164F080AA46BBD5369D2160E2559C44FB7E521
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%20Smart_36x36.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 36 36" style="enable-background:new 0 0 36 36;" xml:space="preserve">.<style type="text/css">...st0{fill:#51B4CB;}...st1{fill:#22385A;}...st2{fill:#E0DC0F;}...st3{fill:#3FEA73;}...st4{fill:#D71E5A;}...st5{fill:#2B2B2B;}.</style>.<g>..<path class="st0" d="M1.365,14.49c0.114-0.54,0.645-0.886,1.185-0.772c0.54,0.114,0.886,0.645,0.772,1.185...c-1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364...C3.132,29.043-0.151,21.687,1.365,14.49z"/>..<path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66...c6.916,2.135,14.445-1.007,17.768-7.53c0.251-0.492,0.853-0.688,1.346-0.437s0.688,0.853,0.437,1.346...C29.378,33.109,20.845,36.67,13.004,

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	216
Entropy (8bit):	4.37150130014053
Encrypted:	false
SSDEEP:	6:YMrY8i/ZXrBJNRhi6ZJJ6W3P6m57yH5WsDAXgaFp2FmHL30n:YpXzDkiJ6NjZ3cXU4rEn
MD5:	67FF2B59E1125F8D43D37A736D829938
SHA1:	47A2454D80B3CFD24BC18538548A953065324B26
SHA-256:	DF14AC431BA862D0233F87C6EB95F1F5378F7BAE4CEE225B4A57328F5D936004
SHA-512:	01243FDC5C51BA1145038933C363E06D9B344884B2E8853F8D4B9EDB5560F2E88D84CBA35834DF6ED4EE9E466C7D7EACC0C24D974C2BD2305E20EE1B382FD6DB
Malicious:	false
Reputation:	low
URL:	https://1movieshd.cc/ajax/login-state
Preview:	{"is_login":false,"html":"\n <button data-toggle=\"modal\" data-target=\"#modallogin\"\n class=\"btn header-btn btn-login\"><i\n class=\"far fa-user mr-2\"></i> Login\n </button>\n\n"}

Chrome Cache Entry: 766

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	4.307334040413427
Encrypted:	false
SSDEEP:	24:t4IuXV+oRHLu+k3yaHle5gH91JJN4AT28MTYVP1TdqfzySb:816yaFq4PN4arGYVtTAfee
MD5:	78D796CA648D8A5E665B48ED0217C56A
SHA1:	510637C7CAB9640B28A9B08DE421A44B40F055AA
SHA-256:	DADBB59B37BFEA4C78C6E15C8CBB96DFBA84526E43A0767DC244FD062A841ABA
SHA-512:	C56F994F9279307F908993DCBBA92673A211995F17226F613D8BAD8644AC30BCF8738A73112A575836A1F4F0D40D74ED06100C040C8D9B34F96ADA99AD5EFFE8
Malicious:	false
Reputation:	low
URL:	https://platform-cdn.sharethis.com/img/reddit.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 40 40">. <g>. <path d="m40 18.9q0 1.3-0.7 2.3t-1.7 1.7q0.2 1 0.2 2.1 0 3.5-2.3 6.4t-6.5 4.7-9 1.7-8.9-1.7-6.4-4.7-2.4-6.4q0-1.1 0.2-2.1-1.1-0.6-1.8-1.6t-0.7-2.4q0-1.8 1.3-3.2t3.1-1.3q1.9 0 3.3 1.4 4.8-3.3 11.5-3.6l2.6-11.6q0-0.3 0.3-0.5t0.6-0.1l8.2 1.8q0.4-0.8 1.2-1.3t1.8-0.5q1.4 0 2.4 1t0.9 2.3-0.9 2.4-2.4 1-2.4-1-0.9-2.4l-7.5-1.6-2.3 10.5q6.7 0.2 11.6 3.6 1.3-1.4 3.2-1.4 1.8 0 3.1 1.3t1.3 3.2z m-30.7 4.4q0 1.4 1 2.4t2.4 1 2.3-1 1-2.4-1-2.3-2.3-1q-1.4 0-2.4 1t-1 2.3z m18.1 8q0.3-0.3 0.3-0.6t-0.3-0.6q-0.2-0.2-0.5-0.2t-0.6 0.2q-0.9 0.9-2.7 1.4t-3.6 0.4-3.6-0.4-2.7-1.4q-0.2-0.2-0.5-0.2t-0.6 0.2q-0.3 0.2-0.3 0.6t0.3 0.6q1 0.9 2.6 1.5t2.8 0.6 2 0.1 2-0.1 2.8-0.6 2.6-1.6z m-0.1-4.6q1.4 0 2.4-1t1-2.4q0-1.3-1-2.3t-2.4-1q-1.3 0-2.3 1t-1 2.3 1 2.4 2.3 1z"></path>. </g>.</svg>..

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	231
Entropy (8bit):	4.724304038352143
Encrypted:	false
SSDEEP:	6:7AqbX/HhJe/KaGee/8XxIgcMxY9ThAS0qZSRb:EqrmqGhcMxCAMoRb
MD5:	620E7ACF2C02F321D6886994751ABEB3
SHA1:	A12C3D788A9D5020FAA747BCF504D4F088F5C0EE
SHA-256:	BF366C060110BDAFBFC1649E970374AB55F8B9C0688C8B17657794DCD9A4F30D
SHA-512:	B51E68F7A40A116F7CC89FC862967E7A84FE5DE7D1642A4A3325BB3E405F2A1D9A2A653162D9F442F4A087DB61A3A189025380B062551EB37396314BD572ED99
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/Components/Plus500Library/Common/switchLanguage/switchLanguage.html
Preview:	<script type="text/x-template" id="p500-switch-language">.. <select v-model="selectedLanguage">.. <option v-for="language in supportedLanguages" :value="language.value">{{language.text}}</option>.. </select>..</script>

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 1200, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	137477
Entropy (8bit):	7.908832080441922
Encrypted:	false
SSDEEP:	3072:zA2NQ21pjspS/d3Rl9BmmGwjvOGzaoylGyM81HWA7lY:82NQYpxFjv2o2G+m
MD5:	3935EDD1FBB95151D1A25F94A0638033
SHA1:	87C02AE3D86905914AA14F03DE9A0C8D79523FBF
SHA-256:	EDAE2F4A8C7F968C3B758CDD6EB39C7F9C2BF18209CDA944227D3CDF65C57845
SHA-512:	7DFBEB7D3A83DFB205D32FFA68BB7CE44612099685CB6F86CAD222EE148E6593D10AE0E17E4F36F51052AF6601CC860AA61BE5EA35399358890CA6CBE171CA75
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/your-investment-your-assets-why-your-money-is-safe-with-bitpanda-bitpanda-blog-de.png
Preview:	.PNG........IHDR.............,FF.....sRGB.........IDATx...1.. ..@...."...KN@........\Zof......_.w.....0.......p...............w.....0...... .p..............w......0.......p.............2.w.....0.......p...............w.....0...... .p..............w......0.......p.............2.w.....0.......p...............w.....0...... .p..............w......0.......p.............2.w.....0.......p...............w.....0...... .p..............w......0.......p.............2.{...e..q....2.R.....FQCh........K.?..in"..(.".n.M*x.".......r....]....!y\|}}x...............@p..............!...............;......Cp..............w...............;......................w............ ..;............ ......@0.w............@p......`....... ......................@p..............!...............;......Cp..............w...............;......................w............ ..;............ ......@0.w.......Ig..7G.\2..x.............%.L...F.....Z^^^[[.....................X[Lv........-.H.s7....+.............r.\.V+.J.T

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	800
Entropy (8bit):	4.7189725430513105
Encrypted:	false
SSDEEP:	12:TMHdVz1jxJMdhFUYLTcMPJO4oDHt5yFMGCNTpxB0xBu0+BPmKY414ZaUcnS4+Ko3:2d51jxhYLo4OHtQFMGCBplOKIair3
MD5:	18CB43D2469C45AE6BCEC43993F35CBB
SHA1:	987176F2AEE63490FF7CF67DCFD7AAA23B8AA175
SHA-256:	F9EE26D1B9FBDEDA19DC44D53D682727BB91C609B0B14FF03739207AE593EBBD
SHA-512:	BA72C1EB448FD9320E29B57997FE80D59990FCE4D2129917058A4E3D69D3540C623B439404163A0E8DA2436F00E3B8A1E0AD889BC04232BCC70E4ADE26DC331B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="nonzero"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z" fill="#F2F4F7"/><g fill="#E82127"><path d="m18.029 30.953 3.365-18.927c3.208 0 4.22.352 4.366 1.788 0 0 2.152-.803 3.237-2.432-4.235-1.963-8.49-2.051-8.49-2.051l-2.484 3.024h.006L15.546 9.33s-4.256.089-8.49 2.051c1.084 1.63 3.237 2.432 3.237 2.432.147-1.436 1.157-1.787 4.344-1.79l3.392 18.93z"/><path d="M18.028 8.457c3.423-.026 7.342.53 11.353 2.278.537-.965.674-1.391.674-1.391C25.67 7.609 21.564 7.014 18.027 7c-3.536.015-7.642.609-12.027 2.344 0 0 .196.525.674 1.391 4.01-1.748 7.93-2.304 11.353-2.278z"/></g></g></svg>

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	84228
Entropy (8bit):	7.985058206869043
Encrypted:	false
SSDEEP:	1536:HXyfhTMuP4YEloFI+lSdOpohsQE9ZmZci2RlDFkREQGYYNA:HifhTMEElN+l0OpoiQJKhRPkR29NA
MD5:	8BC7AADC4BB035E046C38BE50842C161
SHA1:	195F9B12FDAD41362F3F606DFCFA99E8FDC8CE84
SHA-256:	CC3F507ADCDE779A4036CE4F450905C13FB2274A6DFFBEF480CB5A789B73993F
SHA-512:	F376783DCBEE80840AAE6259F3635057899D19F857DD65AAEFC8FEACB782C674DC252C39216A369ADF4F8D56956B7238E7A31BBE899B15E129955FE25842F3CC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................j..p.,...Sm.-J....~3.W..:"]M...........E.k.'....n....Oo"..]....mR...4.f....#.\.k.{..3..g..0....Vx.......ut..X.{.V`X.DU....`...7.UM.....-.k!Y..U...-,.....7.c{.}snz......?w..].)\Z.E....K....0.k......\|...b(55.p\|....."..@l...J_J...6.:-.7.u..kl_.h>...F..u%).....u.}Q1`.b.I..M5.....;.[&?zX...g\|..U....m.e..N!.....Q.!^s..,.0......[.....Nr...S..W...F....8............I.=<.<]&..u....)....+\|U.b..~-...).G..%O......]...s.c.._..\|..DS\|.i.cJ..u.....lz1Pm.^w..E..}.).:.......$a..Rm..........Fnlr.j.\|...&rv..W{...1....kx~D..De=AL.S.y+.\zD.<...s.........c.RLo$..i......W6.m2PD...{.+.....&a..,.v....2R.k3... .....................Q.] ......,n$.....M}.H.....

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	49540
Entropy (8bit):	7.974849306828911
Encrypted:	false
SSDEEP:	1536:NioVtjdOT8+1a1BX+rFaYeF/xTSb+kGsRa5p:NnVq8Ga/nrmb+kG3p
MD5:	50589C40430A93EBBAF87E7E7BA99303
SHA1:	F46C71A738DC27FB2916AD546D8C545BA6D01C2F
SHA-256:	07D9A1EE9B4D17590A73F8D028375FCE6CEEAFEC4A5422FA51C0C155F1769BC4
SHA-512:	FC65C58B808EEF0A8A36E3DAFBA35A26763A1EC3D5022A2CBE425C41785C5AB6179A1A57A687E0892E187656F5A1A5D1E4AECFCC5349D8AEE273E89A8D713282
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................GVx.',.bo......9.4....R3....,......+.#.O.Rz.rV....}Q.t..k.'s..bpL.-.K.L..t+..:..w5N.)..<m.0....Z\.;..#.R."ql....a...:......,..r[;._..\..B...pfd...Cv.D.V.<Z.Q.S.=...3.n..E..F....L.G-..4\|..E.$g.#.t...s/.}.[...\...F.<..=a..l{....2.k.n./n_1=..=...U....%-.V.LU.l/(,s..q.I{j.sv..'v].../.....W.2'.lv..26.%]x.....H....WU..>r.,.."......0.Ap.s.'.].U.....[..fow.2fX.QeyV.0-}V.3\T..#...EK.%.V.fc....VY...y;......T..#.......a.;).)..(..7.X.e.......^..vRF...=.......e....Da......tu.j6......+.7...\|..p....$L...$ .p...,...8.....a&?.zp...<.,t...(...O.8q.nT3..V.y.....rz9h:B.n.F.b.........3..^..N.Q.&.J..c..<.*w..eC.....%)7..dB..Lf....''Rl.V...&.L...q\.n.8f.

Chrome Cache Entry: 773

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	416
Entropy (8bit):	5.001246064344082
Encrypted:	false
SSDEEP:	6:tI9mc4slz2lWNsKMiLjtCG2DAVI0BU7kq8kdpUVY4dhER7KiFAbHQumG0R2fgE:t44lWNxMiLjI30WwI6JdiuMu7L/
MD5:	7B72368062DF486EED49627BF11AF312
SHA1:	1D1B1F6C27D196377CA1B3808C2D1456ABEAE849
SHA-256:	13FBECFEDBCFF5C25ED9844DEDB87EC1427E5DA2CDAC170C40EE9EEAB0661657
SHA-512:	9054671E3698C126E3A70FFD9871FE95F3E21FA6EABD6B8AD1FC2EF5B0D6097B8899F5F1347C30043A49BDA91D8D45D7284D90C4A2F79844A6957DC6C3F3BCE0
Malicious:	false
Reputation:	low
URL:	https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/eth.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#494949" fill-rule="nonzero" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0zm-.014 5.143L10.4 17.733l7.587 4.484 7.588-4.485-7.588-12.59zm-.113 18.51l-7.587-4.482 7.587 10.692 7.592-10.692-7.592 4.483z"/></g></svg>

Chrome Cache Entry: 774

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	54407
Entropy (8bit):	7.980776765736911
Encrypted:	false
SSDEEP:	1536:erW3iCLr/WT90cX7uswqE629fqtYqECu6HtzM:n3sLnF2FqtYqECrHRM
MD5:	4B5683EE152ECFC3706DBB9C1E7DCF7B
SHA1:	53FAACEE3E18596A8399BAE56DC86A8A1B839E3E
SHA-256:	42CB033A542749775BC4E1CECE9BB7E79683C65FE94A787EED80FE20D9B2C3F6
SHA-512:	AA32B0C40F9BC0799D2174B8346A46E968A43B91C7FF7751F74087AF5F3A4A3363E211103F74BE3C1AC30E301D506C577537BA647BA61697C4AD8D252E7E6C7C
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/0b/8c/0b8c097a412960670694249a6bd690de/0b8c097a412960670694249a6bd690de.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."................................................................................................................................................a3a....... bp..4............cT.l._.S..U.^M....ED..R..1.4..........v2..EFJ.p........I.:Sw$..r..k.:....+.QTjlk.O.x~....M_M.....dx.../FTjY..O...:........IK,.^.ZZODIu.........t....L+'..{'=.]..-. .Z....a#^..QIf.~.7..J?m6...`........v...mm.u..e.{.:;mY.7..r7..2..,...x"x.<.....U.WQ.p......j...........oh.$Y........i...j?f.y...]-x..z...y.H..+>.........Y.n.2...Ja...?..2d.......n.Hn-T...^nO..yb...B._...f..5vcj..SisG>.......k.\~-y.2.j(.!.}.V.......CA^\|.....Y.....4.$w&.%q....e..D~....b.J...n+"......Z..-..K.}...F$.d...X..k.LY.......4.......S.}^G...k8}Y...ju..K.}..ZB..0....Z.........`

Chrome Cache Entry: 775

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	60021
Entropy (8bit):	7.9868263173415075
Encrypted:	false
SSDEEP:	1536:53m9iOdO5DQI5F9pG6xBqy7KLbgSXiRbxa9jqA:g9MSvyYTL9jqA
MD5:	40D78DDA707007FD8A403CEC082F2412
SHA1:	F901249BE4A71ABE434DAA77B3DF210841F46203
SHA-256:	994A234B4B86FF2FC7EDD7DFFCD69455E2652AF72BEC9A92D9DF2939565F3C81
SHA-512:	9DDD02BA43517E0427758182D421BFEAE5E5DC84365B20D938E0790D69DAAD8753AA3C4DE348644F641030BBB253D5A4B2AA6F1F25A6086789876294C5B6E1B2
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/ad/bf/adbfa1b6d35934408e86806c521bf235/adbfa1b6d35934408e86806c521bf235.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................+.S..R`.....+..T.....K...B..Qh..g.@..>\=b..Dj...#.z.....N=.$..q....PP.;].1Y.yq..~..;./....U....'/.-WQ....B(.q..l..Bm.q....^..8...f].........r...D.W..%B.v..1y.(I..I...N.Vi.I...ih4.Pb?.dR.y^.%.-.4Q.oq..]..Z.f>3p..F.U..h..6}.w..wx..j....b.4H..$.x#..e.'....:...UdM.)N?X."b.....A.~Q....Jqhz.U.. p..E:..wr.HQ....$A.b.(YP..].Z4'.X1.K....xW..\...<....\|~.......w...(E.9...-. \..YE..\./z.3l.U..o....,.~..E.2.X...RR..#.\|..26L....).,...$......p...\|...t.>./.c.\#7........0..........L.a!..~.].XzD0g.s.Q.@t.....$..w.5x.~'.5......a.:q...(/`.,....V<.0..{g.?*{..{.j5i1....LZ..rA..Ud.Wm.a..$.~...e.Ad.f...E.ZR..5s.>.........`..s:........x.....?.....

Chrome Cache Entry: 776

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	66851
Entropy (8bit):	7.985006004539967
Encrypted:	false
SSDEEP:	1536:+jT78fA1liQfyMGtPRB/9NHT8+p690Vjv6XjPC+MjG7p8T:M8DtH9NBI8jC7jwG7p8T
MD5:	56C929800203DC54878CC7CB05D49CC5
SHA1:	276517E532FAC6BDCF11086945FE71D42EB457AE
SHA-256:	EADF9A8173DA3E4FA1AE4D12A3EF8D4048C33DF4D667DC08C9619151E5AF0D5C
SHA-512:	BA3F5AEAA519FFFE625397057D3F4CC9B3B9ABE84B63D4666407008E707F8A492FAFE8A4B74BD3E33FB3A952B5D495E86C75946BF5BD8D17D45560CEB2FE701C
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................R~3z}&ihj#..%..,.H0.Idd.....j%. fi..4..L.4. .MDa&Y...Z.(...`......L.......4.]..Q.r..$.0`..`.f.I(.B. ..@l1f..iP6.F...RA..M...}...3.P...Dt.MW.&.1.#.n...T.g.4...:9..2....D.a.Uj..b.I.%J..........dKhd...30<.....}.Et.+.T...Ch.o=...X.xt..o...........,jfx.a...k...yJ..l...w./d`!^.y1. Y.....%%F..V{...Q.uo..PM<.+.....:F.<.........x...zTuV.7./T....VO^v.I:..O._.]. V.%\....,.hd....P.;y5.{.3.TC:RmB%._..[.8:m.....f......j...........3pn<...g..".W.NOd.u........U.._/u..... ..(2...C.[{..........s....I....M.qu.S6..3<W.D.....V.2..^o.).....W.I..`.~..*...k..>7.B..........RZ.KK#Cw.';._...3$W..V.=...&...4M)..vN...%.'n.W.]-.V..u.Z6.....}.R..`m...W.&n.7........=.)#,

Chrome Cache Entry: 777

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	96881
Entropy (8bit):	7.988491530590886
Encrypted:	false
SSDEEP:	1536:q3GyegPX/b2QLq22BMfhgNu/YO53yb5stL+n9wui1KnXl6hOd2A+hMIVYqAwtdhD:qWyee2QLq1qfKL5sGyQnXl6I2rsw
MD5:	2468D8BB93A58EF56317B2015B976CCA
SHA1:	62A980348AA1B593B665FB4E002D9C10D0FED6DE
SHA-256:	E4A85582EB02CEA1C78800C1DE9C067985F9167FDBD1A56CA27290F1D2A7F12E
SHA-512:	F3AEC11FF0247DF515554CA9F7E54E7BE2ECB2FD570D0D9BD387FC6C8848C09518C1D4E0A2FC535DD9BBDA95DEFEA9B39AB99E31A453D6809BEA9A38BD620694
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................m..d)...\|.t{o.............7.a.O6l.d........a..jI[\|...5........5....yY;.x_....z....6..OG>..g..s>...g.{.u............=Zy..-...2..Tu.a..ps..Gt..e..m...B.....I.N.~..Nz'j....4H.y.....G.x...4.L..j.%....~..-..Z.X...+....^>..t.F...5...>}...S.F...9...4Y.9....g...x.3....c...YwEHX....K...5.V.k..{y>.n.lb66..i.Z7nN?uW.M..:.:..E..=..n ....`....H.\|.B....E.r.....x..jc....?`.......;.....V\...F@.... k\|....e.y.}..&".e..4....+....>..*6.q....-E...Y$@~J...R.....].f'..........g.Z...........s.y..Bl@/...A..GF.."..F..}.)n...B.}qu&...R......._..?O..C.iOk'.5.~w...v^..u3..J...;.....(gL.3.L..j.LL..'...x9T......F....}m..Q...... .G@.Vp.... ..O......tMa..u...GVH./[.P..Q%OG. .k

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	84444
Entropy (8bit):	7.985780509115842
Encrypted:	false
SSDEEP:	1536:EQJqvijd2P1L1rh4/O7qufBlm3fUo4PJU23Wi04vFPBGmG6s5f0dq:XJqqjd2Pd4/K/fBkaJ/3tvDGmHssq
MD5:	2AAFB5A7D09B51C1E1C2DD65F911C155
SHA1:	CF0A4B639469FD7E63657954C71E1D2491615824
SHA-256:	D7A5E3AB92EEB248A78CF320928F18904AFEBF7A9381AC321A7EFA610BB74329
SHA-512:	AB0928E2F1DC4C2316C8A2BB8B1FE4D21C5AB1910E1BAB7792A715ED653F6D92FE06927D67E5350BBA10AADC5D26B4F101EA1663355A2E900CC7AD3F83B7EBEB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................#,......J..7ek->.m\..>.H.........~...3......W...W.}.K....;Z~....k...b\|.^PM..]r..B=,7....$...z...z._.lE.{,.Xr...sG./2.V...v/..B...}.....^#......[.X..^...........-{...$gD..6..my.O.\`.`......g`~.....~..8.6.G..7....b.................=y....6e....S.mn....c.U"...9.....:.$Dt.Pj.._...e.j...&...3}...C..e...X.iAE..`.....=.5Y+.Z..CW-.#.g..5...z..".)...ok!..^'./...<.K..F\............[.D.gW..tx..1Y.Qf..1. ..........HjQ......Y.^"pto.....[Q:..].v../...xWW.....\|5...@}"Z..z....a..A...8.s.._5k.\|t...V.E.;t._..'....^..l..>.'.G..A..,.d..f..\..t2..*2[x.......\Up..Vty+..D,.q....U.....).w.j.=. ...W..#4>.l....+....z.J.?]...s...9..Z.@P.#...s.....T.

Chrome Cache Entry: 779

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (475), with no line terminators
Category:	downloaded
Size (bytes):	475
Entropy (8bit):	5.014547373483384
Encrypted:	false
SSDEEP:	12:0nX2qjqty9zVby9zVUSASPeYiQHbd+6zVpTpApqR0iAwthzVPW:wQ2Vb2VUtS/iQHrVpAqgs1VPW
MD5:	418046627D829DCF7600C6E5A8714272
SHA1:	9AC4BEEFD636500F62F321171B862ED636751753
SHA-256:	86699904BF4093AFA91D643515CF352A433C8A220784D8DFA351F7E7D1E647DB
SHA-512:	2803D1CF71D4CB368EB7E04A4139828103D19C0D6F6E59D53495D315E1A0F80672C1F567AB4BA2A3EF032F25650170071571AC782DBD0F50BEE695DCA35C19F1
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/app/v2/js/dotcom-components/dotcom-components.esm.js?id=418046627d829dcf7600c6e5a8714272
Preview:	import{p as e,b as a}from"./p-06f88acc.js";e().then(e=>a([["p-da68d0a2",[[0,"bpc-fee-levels",{language:[1],headers:[32]}],[0,"bpc-markets",{language:[1],headers:[32]}],[0,"bpc-scoreboard-table",{language:[1],filterZeros:[4,"filter-zeros"],ranksNumber:[2,"ranks-number"],competitionId:[2,"competition-id"],headers:[32]}],[0,"bpc-data-table",{headers:[8],language:[1],classes:[1],getData:[16],getHeaders:[16],translatedKeys:[32],data:[32],error:[32]}],[0,"bpc-spinner"]]]],e));

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	52216
Entropy (8bit):	7.98457706529982
Encrypted:	false
SSDEEP:	1536:VZLq4oPFZaeOd0eXIxklXRltfJpOBV1XyAIH:fq4gZydCklXbtfuBV1XyH
MD5:	5DDD43062F0081661147C9460FEECDED
SHA1:	42B81079246665FE0EB9797C90628F677D94DAD1
SHA-256:	10CFF4A24EE211442F64A7918DC633F1AEF8B604C3B14A5D660C30C6A835B769
SHA-512:	065D137435805F7176BF62A4ADAFB12CFD31975F54078B053159249675D0A19DFEA625DEA22D6FF3CE19AB2E2B73186EC7ABFC20B3FDBC6E1D465E986CECF935
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/4e/83/4e83cbfdc6263b8fdd928b5e14aaaac1/4e83cbfdc6263b8fdd928b5e14aaaac1.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."........................................................................................H.`%....BX...c...2;mC...ZG2o...p.^ ....L...E....<Gv..<'...B..]...........0....2....3.....X.c....0y......:w..q.....n4l.....Z..a&.+3.G...^gc...lg..........Wg..A..........#....O../..J.4..y...."..3t..vY...ce...C.......8M....!...[.......K....64.8]....Y..y.b5A......=C.f.6\...e..m.v..k.L....dZ9..O...r.;.F.e....s]h.f6m.P#"^..`B.3.g.u.u..`J{#.u...q.d.l..E1#..'.....J...~C.....]dl.<k..&!....7...g3.....{f.o:..x4.-...b......G...y....y......s.,....%..cq...X.....&...#Mi]C.....3.e\|..A...&a....(.zX..+[.g..r.e.m=9.M..=....... .H.....&4%W.......g....s<..I-[.....X..]2B..U...!...&..b...-]..?.....#..@.... .H......<Y..........Uu.b.dgF+...7....].1..L..M.W.Z.

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	5254
Entropy (8bit):	7.936533345649808
Encrypted:	false
SSDEEP:	96:FPXuWElHM9IHb2HEHSQh2+P/La8mVKBq0g/GF2uOSQ6n4hyx6wa9k+GBN9UNeamo:FPuFlHyIHaHaSIdTrYKBqJ/HuX7n4n9x
MD5:	C4D693AD59141BE669EEABAD5E8645C5
SHA1:	B085C52C41DEF35AAA8763943F1961773C18A213
SHA-256:	63422AFAD149A6998F5D82CD2D3F4D16B220945A8697371B325B4E0D831DBCF4
SHA-512:	FA2F469A4EBD280FD54AB8EF4364D944CD476E7C2C0DB61AF59130CCD4F3C28C49D4EA39C2651AC645644E1523B0F9C0E7F8BB8C5E41171C9BCAE67F66662A21
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............MO3...MIDATx...t]U..&}..I.......M..G(.-.)..m...3...(:..Vq." ..h.N}...NK...A...:U..].Z.........9k....w.9..m.............9.f......l[za.......`zszkzGzWzwzOz_z(.;...+.W.+.hk^.`f]^..y.m.r9....\.^..>.&E...=.....e....#..-.=....e..T.,H.O..^7.e..h1k .1......P1P.Y..y..e.~2+......mj..........%j.aRvI.{..9..]...Y...dfe.{nLs.2s..=.....,..1./E..g.Y}.FvL..4.z<;...s...l..W.)..A..Qf......gf.......AQ..<....u.o........7......,<?....ff.gPv..O .Sd..g..kJ.t..PO.S..d..3h.....O.&.gRL#..f.....[....t....~2G\S.2....mk.h.4K.._...x.U.M=.2G...m.^x4..%I-Q....;....8..3pd..&.%iR...L....3.#V.0..jib......./p.u4.U-N.)c....j<.D..R(5......>.{.QM3g.1.d?a.c...h.......e.^.F..:sFm9:.F..:9..<Bx..l.\.]w...Q[..?ef...8.L.O.S.c&......_....<f3...L.}.~.Ak%.)...@9:..Z.Is9w.8a..\|.."....%.g7.ji..tP...u..&Im._.}...X..Z.&....{.......B.........\|.ml....F2..U.....Y.......{}t.6n.;.#.....r2....Fn.~.p..a.U...T..%.>.U.w.Sj..b2. ...7....P..\|.....62

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	73660
Entropy (8bit):	7.986255367425026
Encrypted:	false
SSDEEP:	1536:RGHReVxcHy/Etpqz+YYzQb9L7NaLFfneYwW2xMmwV5:YqxcTtpqz+YYzQbBW2qV/
MD5:	49884FEC4E6F5AB23140BEA8DFDE8C83
SHA1:	074BD2027BB441DD1B19A4E071D3DE208C4FE0C8
SHA-256:	195D1C8A3060F26C47E848223E7BCBFE740D10F9B675BB0BF0EDE2C77574F460
SHA-512:	65025818CDD73F75C2FA373051DF63FF937E4613FC8A37C9B8AF70C6AC8F15BF6E99530C2B4ADE1B9660F8C2182B353D0AF877FD86E4D9D807B04887C8C4196A
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................}...}:k.7.\|go=....4;#.[........%tR..d...o.U...S&... .B.7..#R..{pv;IWy...k.=..O:.8s..8.l.ow....m..(#i....vRWWQ.W..c`.O...V0.D..../...y..r.........ax(`..o.......Q.+z.G..-.^N[y.2....!.>}.....P....fjW...wH...z..4d.0...!.xr.....m.s...HA,q\U.d..0&.1.H.<.I....K... 3..5o.f...jj.n....9.Y..c....?.u.l9`.J.f.a=m...I..j......+q...V}.8..9j..t.b4.A.-)0.5k...Y.m.....J...-.....l8.C.....o;sj.].d.'.i....U..q..$R.4zV..Q..u.f..J.o......N..RBY]U.ot.-.......?mfO~.~t~.gd..!.R)J4....D....R...U....Jm...!...y..$K<..u)....2i.C.M.j4.....=WJ...).BF.3..(..o-YXH$..`ec.D.FU.a.z4-D).j...T.`..w}..W 7..[..r..6.yZXe....l..9...i.....Dwt."."3.....<.^...t.^...q..6>...ey}.Ai.

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	164
Entropy (8bit):	5.036268490932439
Encrypted:	false
SSDEEP:	3:HOkgVEnkePltTbbNPSOiCYOVu0AunGkPW8hwXbKKYz+cln:d5XbbNP/iWxVW8hwOz+Kn
MD5:	A53719657F26399C5A329D5C89FFD4DF
SHA1:	3A4860242475102892AF1459A0207D379691C58A
SHA-256:	46A4F9E0D1F2EA07BE78A81A9F2C175DCEDA9B641064463A21A0527FC89B29FC
SHA-512:	35B193AB018A1B057455C37E2065FA56B4380E9BFE735B15EC999C0027001ADA78D839C28DA1D9D3A9437E832D3BD338630C8569AF98604C31953BAB2BFC65CB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmgksH6Q_yw0xIFDQKP-2gSFwnh8ITPHAhVYxIFDYOoWz0SBQ3OQUx6EhAJqlpJtRrfL5oSBQ2g_vU9EiUJmWfBRTVOq7wSBQ3QelK6EgUNfo857RIFDYHUMeUSBQ0srVge?alt=proto
Preview:	CgkKBw0Cj/toGgAKIAoRDYOoWz0aBAgJGAEaBAhWGAIKCw3OQUx6GgQISxgCCgkKBw2g/vU9GgAKQQoHDdB6UroaAAoLDX6POe0aBAhWGAIKHA2B1DHlGgQITBgCKg8IClILCgFAEAEY/////w8KCw0srVgeGgQIXxgC

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	965
Entropy (8bit):	4.65215973069083
Encrypted:	false
SSDEEP:	12:EqkBs3EERvFGv5m8SEyjUmoQNCADygWoRSlZVHVFFN7/SxnKKNhCbzNEDHKNRCBq:GU8SJhzQlZ9FExnYEO/b
MD5:	317EAC53C6DDFBB71E2A5009963E6169
SHA1:	DA391027A9723DCC5AF34B9855884562E82171C9
SHA-256:	A14B7FEBBE81216D4CFD1584AC77D2E8B0BD9378B1A662330A4FFAD365361517
SHA-512:	B36C731D1B1E6473033A13FEA212341A1987B31E0EF320093F1883CD28F4824F72800FE0A542DB9321BD9EE747171184645396DD8012086D4D90C2DB25125F63
Malicious:	false
Reputation:	low
URL:	https://cdn-app.plus500.com/117405/Resources/dist/Resources/Components/Plus500Library/Common/overrideFes/overrideFes.html
Preview:	<script type="text/x-template" id="p500-override-fes">.. <div id="changeServer" class="change-server-container" v-if="visible">.. <div class="change-server-inner">.. <select v-model="selectedServer" @change="onChoose" class="change-server-select">.. <option disabled value="">Choose Server</option>.. <option v-for="option in serverMap" :value="option.serverURL"> {{option.name}} </option>.. </select>.. <div v-if="selectedServer === 'custom'" class="change-server-custom">.. <input v-model="customServer" class="change-server-custom-field" placeholder="http://{dev_name}.dev.plus500.com:40000/">.. <button @click="onChoose" class="change-server-custom-btn">Choose Server</button>.. </div>.. <button v-if="!isVisibleInOpen" type="button" @click="hideChangeServer" class="change-server-close"></button>.. </div>.. </div>..</script>

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	837
Entropy (8bit):	5.233674414660833
Encrypted:	false
SSDEEP:	12:TMHd64lWq/hlDwdSH/6Qn/hwWMENlmj43dYdNDpZMyLyj43dQ:2d64ld8dSf6ynWjs2d5RLyjs2
MD5:	CCE584B0BA1FB7C2D326FCD3C0767ECD
SHA1:	A6AAB59C214429CF9754420D02542EAB0084E7C6
SHA-256:	B99AD8EEAE5A55B3C3CCAA5147B121B5EB2E9C9C4AC678E2105ECA7C4D70FEB1
SHA-512:	2E526A1BFC1685E8786C0700EDF432E1ECB2EC69669CC76BE93A8BF39E112277EDE0E11AA5CB2214A3413C0363392F87473A464FD0248F3B0D151C4D9A662B74
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%2043-2.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_43" data-name="Group 43" transform="translate(-612 -167.5)">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(612 167.5)" fill="#f2faf6"/>. <g id="Group_1085" data-name="Group 1085" transform="translate(619.648 172.883)">. <path id="Path_838" data-name="Path 838" d="M21.231,14.467h6.843a1.064,1.064,0,0,1,1.064,1.064V20.4" transform="translate(-9.786 -5.106)" fill="none" stroke="#27d17f" stroke-width="1"/>. <path id="Path_839" data-name="Path 839" d="M16.934,7.43,11.549,4.617l-9.2,4.847,9.2,4.847,5.4-2.873v5.5a7.219,7.219,0,0,1-10.882.048l-.042-.048v-3.36" transform="translate(0)" fill="none" stroke="#27d17f" stroke-width="1"/>. </g>. </g>.</svg>.

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	60021
Entropy (8bit):	7.9868263173415075
Encrypted:	false
SSDEEP:	1536:53m9iOdO5DQI5F9pG6xBqy7KLbgSXiRbxa9jqA:g9MSvyYTL9jqA
MD5:	40D78DDA707007FD8A403CEC082F2412
SHA1:	F901249BE4A71ABE434DAA77B3DF210841F46203
SHA-256:	994A234B4B86FF2FC7EDD7DFFCD69455E2652AF72BEC9A92D9DF2939565F3C81
SHA-512:	9DDD02BA43517E0427758182D421BFEAE5E5DC84365B20D938E0790D69DAAD8753AA3C4DE348644F641030BBB253D5A4B2AA6F1F25A6086789876294C5B6E1B2
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................+.S..R`.....+..T.....K...B..Qh..g.@..>\=b..Dj...#.z.....N=.$..q....PP.;].1Y.yq..~..;./....U....'/.-WQ....B(.q..l..Bm.q....^..8...f].........r...D.W..%B.v..1y.(I..I...N.Vi.I...ih4.Pb?.dR.y^.%.-.4Q.oq..]..Z.f>3p..F.U..h..6}.w..wx..j....b.4H..$.x#..e.'....:...UdM.)N?X."b.....A.~Q....Jqhz.U.. p..E:..wr.HQ....$A.b.(YP..].Z4'.X1.K....xW..\...<....\|~.......w...(E.9...-. \..YE..\./z.3l.U..o....,.~..E.2.X...RR..#.\|..26L....).,...$......p...\|...t.>./.c.\#7........0..........L.a!..~.].XzD0g.s.Q.@t.....$..w.5x.~'.5......a.:q...(/`.,....V<.0..{g.?*{..{.j5i1....LZ..rA..Ud.Wm.a..$.~...e.Ad.f...E.ZR..5s.>.........`..s:........x.....?.....

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1731
Entropy (8bit):	4.851350142084748
Encrypted:	false
SSDEEP:	24:2de4lNFNH1wwzOyNylq3awaq2OTaRIWnjxOn3w3wtNglmJcSsHBn7C+47vgkv3mF:crNp89hw0O3gFlmcBn+v7MV2CV+TV+
MD5:	AF2BDC3D5D19D82D96339842B52193C5
SHA1:	E083A3E22FC479CD5D668C80B180452C243FEF33
SHA-256:	4051FC45D079522D912ABD695E326798042D39A7AC74AB9C6A5115ACA7BB8BF7
SHA-512:	B8F22F6DB01157886A35F2005B505DF1257D0A6DE1B3033AA572CD2EAE9195685123D70C72198808A410C3A28951CD331E6093C7F92FE958FA142A5C9BB8CD27
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="v2" xmlns="http://www.w3.org/2000/svg" width="35.795" height="35.795" viewBox="0 0 35.795 35.795">. <g id="Bitpanda-Design-System-" transform="translate(-139 -7962)">. <g id="Group-33" transform="translate(139 7962)">. <path id="Fill-1" d="M35.8,17.9A17.9,17.9,0,1,1,17.9,0,17.9,17.9,0,0,1,35.8,17.9" fill="#24458a"/>. <path id="Fill-4" d="M5.053,19.74a12.849,12.849,0,0,1-.131-1.532" fill="#fff"/>. <path id="Fill-6" d="M6.435,17.869A11.481,11.481,0,0,1,15.427,6.705l.006,9.147ZM16.95,6.481V4.957A12.918,12.918,0,0,0,4.908,17.942c0,.09.012.177.015.266a12.849,12.849,0,0,0,.131,1.532l1.487-.334,10.417-2.335Z" fill="#fff"/>. <path id="Fill-8" d="M5.752,22.465A13.016,13.016,0,0,1,5.3,21.006" fill="#fff"/>. <path id="Fill-10" d="M9.817,26.033a11.418,11.418,0,0,1-2.58-3.919l8.245-1.944.024,8.932a11.4,11.4,0,0,1-5.688-3.069Zm7.212,3.286L17,18.247,6.777,20.657,5.3,21.006a12.742,12.742,0,0,0,.454,1.458,12.877,12.877,0,0,0,1

Chrome Cache Entry: 788

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/db_sync?pid=12608&puuid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&rand=1714156352981&gdpr=0&gdpr_consent=?https%3A%2F%2Fsync.sharethis.com%2Fdrawbridge%3Fuid%3D%24%7BUUID%7D%26gdpr%3D0%26gdpr_consent%3D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 789

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	15
Entropy (8bit):	3.1898980954642875
Encrypted:	false
SSDEEP:	3:YWR4b5C:YWyb5C
MD5:	28EC1EEE5F4049E3C4F2135069C1D2C8
SHA1:	3505519507CA1C2A089C46E100B80408CA278421
SHA-256:	EDC48CD3B0BC4FA7BA23AAD40B8508A17D370CA38BE174BAE2A2F64634E65A2B
SHA-512:	F71618E40EBAA14AB6D523A2341258C0DA264B545388F8FFFD14C31C64B35F94B21EB633316C4D77AFCD864AADE1DB588EF6387EE0C4787E6F7770DB0ABC1183
Malicious:	false
Reputation:	low
Preview:	{"status":true}

Chrome Cache Entry: 790

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	62081
Entropy (8bit):	7.9848232494928695
Encrypted:	false
SSDEEP:	1536:k42/kzsGsayJJ0o+xHCscFakvLVW6T/oL9hdvE3G:k4hzsfnJJ0ojvLVWC6vEW
MD5:	969E79046BC68A8327DC3B0D4B3D78A5
SHA1:	004E8203983F36CFE0613ADC43DEE798926CE6F8
SHA-256:	42B16D4B90D8A47B3BAC9F82859B90A4E197BED6C4EAE5EA54841D754723FBE1
SHA-512:	F181E889940C523752DDDE3BF354C160F826E36C89619CFDE663AB53B6E8ABF62E80B0B33D1267D9C1D5C55404843A2FA8E8E4C9338EAB13BE0B0B0DB9F82C31
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/0f/d8/0fd896384421a0238181d000ddf2a1b9/0fd896384421a0238181d000ddf2a1b9.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."................................................................................................~... v.p..``..`...1......ys0.S...(y.....1L8.!...........e..hb...4v}.}OH.3.). L0.....p.....6.x.S.c..c....D..GiWk..1z...\|%nS.).^.!.M=..v..&.._.).j.Ox..zE...1s.......6..b..u...'..NU..9..3.z.^..Hq...c..s.....e.<...?1.t.=k.%..%....uV.....0RD......1C.:J...DS*.....n.Ej...w04.....!.V~.7~k...Y:..\.Il..h...?..T.u...v..._.I4.i.../(.u..\..P.......<Yc..9..Ee.u}7%.B.g[z3o..$.^........R.6..maH..,..V._.y8..`...$....;9. ,.E..N`q...>..El...<K7V....,.d.._'..Ud.W....b.. .f....<.gF.......W..f........F...k.Y....UI}..G.^.T^......[p5N.'......D.+..J5.bj..#-.V.~.X..:o..%..\|...8.1y.Ug6\rm.s.y...[K...)....8.+..6a......P...l....s7...L...:'.Ys.q..9......[1.Y4..^.

Chrome Cache Entry: 791

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	66611
Entropy (8bit):	7.985731795274259
Encrypted:	false
SSDEEP:	1536:DSGmeXX1Q+LiDuHDtPJ7d+Qb6Wh/pKL28IWtNC+6aXXJvDww65rjSu:DSGmCXSuqsBPX+U66/pKL27Wts+jFDm7
MD5:	7D644724020BB8B7E9C8A5D42BE433F7
SHA1:	C254FAE40D996717809DBED2994CB7A274400817
SHA-256:	D21D34C2DB8F64A285CE80DE294EBC9724252A1DF5C3DAB3A09A904A0399A360
SHA-512:	D700F67764A20785D2E5CB8AC521A914CDAE51B38AC2DF08AF62E8122EC70560E40FCCDB628D07D2D8581B8D971EE08634355DF7CF32A0D43CF0131357172EF5
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/81/a6/81a6f809123d73982bcf71dae330052f/81a6f809123d73982bcf71dae330052f.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................9}.O.....\|...yw.3.. ..g{.....n....R.D1.c5B<.Ob...J.A..]o.2V.3........@.q.[Ap...>y\|Kg.......K.{...uI..QJ.;.N.<e...>8A.<....3 .T.W.=M.D....X\..mtJ..C.;....g.l.uc.ZJ6b.H.&....4...Z.2..M...$4Y..$.Pt....\lU...@8k..}..D:`I.u......DmK...Z-.r3r&m.....\......&vR.7....+.@fi...d..]..V.Sw..=-OH\C5.u;....y.#.dp.c..nL.9....."....wY.e.S..-..~A.=....v...m/.h..5&.. .1.O..ob....}..mAh.B..z...7.6....Z..d...<.c...B.......;.$.I.W.l..c......b.6.k./..5$.#.\|Ns.G.S.k^........u..\D 5.8QYlC.GB"..98..FMi.&..l.:.}..W...r..G(....p[hu....l....-qI+...=../.1.Q..q.......\|1.W)RN...`.&.7<^..!.F4...j../D.G..ay.4bmWp.qe.....!.C........*..l.k.rV.)f.m.)..&...q....ZI:

Chrome Cache Entry: 792

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	95345
Entropy (8bit):	7.988175488268464
Encrypted:	false
SSDEEP:	1536:ZXhOEAtB6Y8hdmpUjgjuX/pKwQqJ/HUzalRUbLDnOaH/cNMj3HQE1+yexf4fUrdk:DOEc67mpmgjg0wQqiD/XHkCv1+yRfdGe
MD5:	96432FAFABE9D2D0840520B97E8FCC9A
SHA1:	29944D4377F105857775B8C581C4C3997E5D26CC
SHA-256:	0DEA0B33068A1C25D39FEB83CB4074B7FBD027DFFECD6F3BF35E0A2B169CD0CD
SHA-512:	17EAC4D0880FA849810C6EC29A34741FF9C2A84F40386DDC253C9D5802DED4D278199386F431CC8C9B719CC50BE6215660BAED0E20B44F4DB7E1FB9050DCD8B3
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................MP-_.G.=.w.....f..w..Dq.S.]...].Li..9"....D..l..7..I...O!f......:29.L..HbBz...E.u=;.X.H_....Z)LtnM.......dW{MRy+...;.....d.T.]6h;O...1......C[......3.......s..e..o.1.&B.}..(.&%o...o.....jf.`.....[VM3D.........\.....qd.??.....~.@S..`..E3.m..Qc.\!.~.........k.p9p...K..=.J.-n".4.}.....W.<...3.QF.rQ.p...+....8.{.....K....;v.....)..._...;........D9GE.lb.s..iU&j..7..<....`}{..A.I..!.)R.f8c...~e.@.+..6Tb5.V.v.,W.!2;.R.nC}p..h/$..m.*......m....;v..G..2..]2...t..4.....`.M..!?...qX.....R.7.=~..]f..E.........OS..I!s\|..%.J.4..[_X...#.......&.TD.C.V.!4;....4..dQ.........=......i.....:....._..A&.Re.u.Z.^.b..p....u.....p.r(4.M..A.@r..DQ.E?u]x....\|.

Chrome Cache Entry: 793

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4072
Entropy (8bit):	4.12708297314211
Encrypted:	false
SSDEEP:	96:NCTBUAa3f6o5XTITZPAtQuBxysMXigS4e:wTNZPAdxdMSgSd
MD5:	1FF45187322FE8A144D1CAB5F34602CC
SHA1:	99C0067F81645DC1076CF344499021508170AEE7
SHA-256:	505E0EB966A2F079A100CE20F115B140E1FC5CCB95F1020D39B5485099933F81
SHA-512:	45E60BE0DD871F34445A7C6728F4FC8101B549ED7820959917F9BA4AC11A0C541371B409EEC5AFF497B1A2DA3AE79429F79F03C8FB7E1923CC88385F85A425CE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg">.<ellipse cx="18" cy="17.9998" rx="18" ry="17.5135" fill="#7921EA"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M10.8509 17.6926C10.9566 17.9477 10.8355 18.2402 10.5803 18.3458C10.2677 18.4754 9.97944 18.6141 9.71776 18.7602C8.5324 19.4223 8 20.1674 8 20.8421C8 21.237 8.17669 21.65 8.57072 22.0671C8.96725 22.4869 9.56443 22.8875 10.3404 23.2349C11.891 23.9292 14.0684 24.3715 16.5 24.3715C18.9316 24.3715 21.109 23.9292 22.6596 23.2349C23.4356 22.8875 24.0328 22.4869 24.4293 22.0671C24.8233 21.65 25 21.237 25 20.8421C25 20.5659 25.2239 20.3421 25.5 20.3421C25.7761 20.3421 26 20.5659 26 20.8421C26 20.9465 25.9931 21.0495 25.9796 21.1508C25.9929 21.1958 26 21.2433 26 21.2925V25.2925C26 25.988 25.6631 26.6066 25.1455 27.1219C24.6298 27.6353 23.9088 28.0746 23.058 28.4329C21.3543 29.1502 19.0354 29.582 16.5 29.582C13.9646 29.582 11.6457 29.1502 9.94201 2

Chrome Cache Entry: 794

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 795

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	5254
Entropy (8bit):	7.936533345649808
Encrypted:	false
SSDEEP:	96:FPXuWElHM9IHb2HEHSQh2+P/La8mVKBq0g/GF2uOSQ6n4hyx6wa9k+GBN9UNeamo:FPuFlHyIHaHaSIdTrYKBqJ/HuX7n4n9x
MD5:	C4D693AD59141BE669EEABAD5E8645C5
SHA1:	B085C52C41DEF35AAA8763943F1961773C18A213
SHA-256:	63422AFAD149A6998F5D82CD2D3F4D16B220945A8697371B325B4E0D831DBCF4
SHA-512:	FA2F469A4EBD280FD54AB8EF4364D944CD476E7C2C0DB61AF59130CCD4F3C28C49D4EA39C2651AC645644E1523B0F9C0E7F8BB8C5E41171C9BCAE67F66662A21
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/redesign/favicon/favicon-32x32.png
Preview:	.PNG........IHDR.............MO3...MIDATx...t]U..&}..I.......M..G(.-.)..m...3...(:..Vq." ..h.N}...NK...A...:U..].Z.........9k....w.9..m.............9.f......l[za.......`zszkzGzWzwzOz_z(.;...+.W.+.hk^.`f]^..y.m.r9....\.^..>.&E...=.....e....#..-.=....e..T.,H.O..^7.e..h1k .1......P1P.Y..y..e.~2+......mj..........%j.aRvI.{..9..]...Y...dfe.{nLs.2s..=.....,..1./E..g.Y}.FvL..4.z<;...s...l..W.)..A..Qf......gf.......AQ..<....u.o........7......,<?....ff.gPv..O .Sd..g..kJ.t..PO.S..d..3h.....O.&.gRL#..f.....[....t....~2G\S.2....mk.h.4K.._...x.U.M=.2G...m.^x4..%I-Q....;....8..3pd..&.%iR...L....3.#V.0..jib......./p.u4.U-N.)c....j<.D..R(5......>.{.QM3g.1.d?a.c...h.......e.^.F..:sFm9:.F..:9..<Bx..l.\.]w...Q[..?ef...8.L.O.S.c&......_....<f3...L.}.~.Ak%.)...@9:..Z.Is9w.8a..\|.."....%.g7.ji..tP...u..&Im._.}...X..Z.&....{.......B.........\|.ml....F2..U.....Y.......{}t.6n.;.#.....r2....Fn.~.p..a.U...T..%.>.U.w.Sj..b2. ...7....P..\|.....62

Chrome Cache Entry: 796

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1923
Entropy (8bit):	4.772733999562925
Encrypted:	false
SSDEEP:	24:2d593RL9hf6eaxM2Edsrr8EbZi8Y+WRNAtLSOmXvCdr2b1uKOL5N0ipmxNmQiTJg:cLpAr1/YReSO0efvLsipmxpKM9/tESJR
MD5:	208B36D307F2516BA3FC7C641F504F6F
SHA1:	C297A3C2A715929B15966F7ED2F337889C63D97F
SHA-256:	1E4D089E7D231BB7F7B1DF97FF00495C27BE0CEF93DBC57A1FC89AEF98630011
SHA-512:	2074289A116B4029B07A8273616A682749D14983B2390482728453F8DDBD2773F086695D9EFB614E431B2045A13D1449069F49CF781D9C747BB97155F821087B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36px" height="36px" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>assets/stocks/aapl</title>. <g id="assets/stocks/aapl" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="asset-bg" fill="#F2F4F7" fill-rule="nonzero">. <path d="M18,0 C20.8367471,0 23.520171,0.656195372 25.906802,1.82505292 C31.8842661,4.75252847 36,10.8958457 36,18 C36,27.9415547 27.9415547,36 18,36 C8.05935938,36 0,27.9426094 0,18 C0,8.05935938 8.05935937,0 18,0 Z" id="bg"></path>. </g>. <g id="apple-black" transform="translate(8.000000, 6.000000)" fill="#000000" fill-rule="nonzero">. <path d="M16.2927914,12.7285134 C16.3264599,16.3542674 19.4734973,17.5608128 19.5083636,17.5761711 C19.481754,17.6612193 19.0055187,19.2955722 17.8503529,20.9837433 C16.8517219,22.4432941 15.8153583,23.8974118 14.1827166,23.9275294 C12.5784813,2

Chrome Cache Entry: 797

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	92164
Entropy (8bit):	7.983012950343332
Encrypted:	false
SSDEEP:	1536:K/b++qZJzV1p52EhRRmkM6PEpx/NBgAZ8mEjta1fiRCxLgkOh4X5:2Sd5hhR1CNBgAZK50hpbQ4X5
MD5:	24CF9CB6B547B83FE67BD85B0CEF30F7
SHA1:	5453A664C9B2DFCDB24ED846B2B41883B7CAA249
SHA-256:	5C43903737337B7734E9E2CE72A182439CF40F746D955D15D8239351E466B218
SHA-512:	5CFF806F12E5C955603B55A56D8BDF741C07C7330F5E78BB9934B5EE0005E54E68A0F87886D112220C838F2C804B034D3E7D855D919C229A2756EBC0B8D9D56B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."...................................................................................\|X.Y..=ew[S=.=Lr.....$...gmllt..z5>V....m.....$L..v7+w.k.K...v.;...x.&.'}.=-Vd..$MD.c-.S....#0.e....O....}...eI....@.f..S9..YJ..m.8..Z....D..,zxr..]...v...9.......N..C ..74..i...u9..0....H0E.ki..K6'...C,..Lpz.*..7......u.m.D..T0o.^Yq.d..0..=....`....Qc..zY.......U.....#.1.[.j$..<.1..7QN..B>.Z6J..-...1..M.3...RD....&Wu..5.A.t#."..;...X....>}....fcg...>.#.#.E}..p.-..+\n..f$.3I..&....JME....5...'R...V%..............J..b.BH.s...`.j....AS4.].A......B4.....Z......nX....z..%P..RQ.o...f.:.r..{...T...+........&`.M.-.Y... .t\|.zv.:.&.'])..E$.b.....X./...u5g.....H.W....#............6.vI.....t...d.q./)UI..mH....du.........Pn.D{...U.c...F:-U.-...$m4.\.c....

Chrome Cache Entry: 798

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4403
Entropy (8bit):	3.9545876127214177
Encrypted:	false
SSDEEP:	96:RrJkZB1ndZR/bfwNW+1iB+76mmKDZF7mxRZNqjFCq:RqB1nN/73d2meZF7MNqjn
MD5:	729A77746ED40F1771F20C4FA81D431A
SHA1:	59B32D22612BA17BADA58FCF44ABBD228928E190
SHA-256:	B4A0FDF0D1F1C3580E2E06721E9F6772D06BF098207EE3241096CC5EAF613E56
SHA-512:	1E81943A393FB24BA50E1AE2A49941C50789EDD8B239A724A3EB341B3897628B580E9CDF4FED6135D1644121867E405C73133AF5A1BC0D4B1FFF6B843A9A24C1
Malicious:	false
Reputation:	low
URL:	https://bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com/static/cryptocoin/troy.svg
Preview:	<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#fff"/><path d="M12.458 15.005h-.14c-.332 0-.595.014-.886.191l-.064.055-.064.054c-.208.251-.247.469-.248.787v.252c0 .134 0 .269.002.404l.001.451.002.758c.002.326.003.652.003.98l.003 1.029.002.835.001.138c0 .071.002.143.006.214a.452.452 0 0 0 .042.075c.016.02.036.037.082.074.17.076.26.056.44.013a.398.398 0 0 0 .137-.262v-.116l.002-.132v-.145l.002-.483c0-.144 0-.288.002-.432l.003-.819.008-2 .001-.33.001-.153v-.277a1.41 1.41 0 0 1 .046-.378h4.841c.042.147.042.147.047.244v.089l.003.1.005.696.003.234v.112l.002.108v.102c.002.044.003.066 0 .088a.557.557 0 0 1-.02.083c-.082.109-.13.155-.265.182h-.119l-.135.002-.146-.001-.464.003-.481.002-.306.002h-.145l-.135.001c-.152 0-.255.009-.385.09a.533.533 0 0 0-.134.347c.015.16.05.248.153.37l.07.068.077.077.081.08.033.032c.114.115.229.23.352.336.194.166.377.342.558.524l.655.66.305.308.144.145.083.085.105.105c.111.117.24.216.382.293a.531.531 0

Chrome Cache Entry: 799

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 800

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1283
Entropy (8bit):	4.368626505897775
Encrypted:	false
SSDEEP:	24:t44lSxMijI50XZhSXbSArVN42t0qMw9adHWLG7eV4zzZFxsOX1jIKbMEX6zXFRfm:3MfZUVrJywWHWpVMZFxs0jIX4CX7fm
MD5:	4134B39675D96EFF2D44DC90FC3D2B63
SHA1:	39A843E8703DD65A5B452776A39B9F23123F4B46
SHA-256:	73552B1E926EE3561B64C118852ADAEA9B53B662FC23084F113C6DC70D221D81
SHA-512:	0066191248DAF9AFC003420F937180A692828895279CA2B4F21F8D4E65F2FC021D1D67D25B8CC278D262240E48083E7EF3915289C3BD7805ED491DBE018AA4EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#F7931A" fill-rule="nonzero" d="M18 0C8.06 0 0 8.059 0 18s8.059 18 18 18 18-8.059 18-18S27.941 0 18 0zm5.305 26.397c-1.534.555-2.96.345-3.592.261-.313-.041-.84-.138-1.403-.254l-.934 3.483-2.144-.574.918-3.427-1.633-.437-.918 3.426-2.144-.574.918-3.427-4.218-1.13 1.13-2.457 1.283.343c.431.116.622.124.848.002.226-.122.336-.372.392-.582l2.377-8.872c.15-.556.144-.719-.035-1.073-.178-.354-.77-.553-1.108-.643l-1.24-.332.597-2.227 4.218 1.13.921-3.436 2.144.574-.92 3.437 1.632.438.921-3.437 2.144.575-.931 3.477c1.572.528 2.68 1.151 3.513 2.197 1.077 1.352.545 3.056.405 3.459s-.533 1.146-1.03 1.56c-.498.414-1.517.69-1.517.69s.983.499 1.567 1.246c.583.747.865 1.864.453 3.278-.41 1.415-1.08 2.75-2.614 3.306zm-2.24-6.27c-.347-.308-1.166-.818-2.209-1.172-1.043-.355-2.425-.65-2.425-.65L15.2 22.903s1.415.412 2.386.597c.97.185 2.

Chrome Cache Entry: 801

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	80528
Entropy (8bit):	7.987708484827293
Encrypted:	false
SSDEEP:	1536:yVyvOZFnqO9NtstUunSK+zbiBQE3Pw9Ujh5Z5/qu5agLrQ7lAcCiWvamu4:7Obnv9vstFSKKE3Pw9azrTlQBAcdWvaM
MD5:	23389B80FCEF8D25466B7FAFC0C73E82
SHA1:	59333D396863E2BFB9B4BEB1771A7EBAD7F9742A
SHA-256:	B3A209612C22C32FAB101A43AF136EFCE3F0FC3973059400C460425C0D75B6C1
SHA-512:	EB541C3F1BA5247D3F3F0B6F93A147E11F6CC1001A15B598955AFBE9B1DC1FAFDD3B6A77E08FB802AE1D6BB7A412ED9B4E91B0C1437CDBE54203775B3E375BC7
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/72/a2/72a241dad98940029994fbe42b5a85ae/72a241dad98940029994fbe42b5a85ae.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".......................................................................................tnt.'..87..v.h.I..b...&p)".\|....3I.A.F.TH....Z...S.......A.....f.g....o..9Z)5..X`. .%.F.+.K....P..o..H!...Q...+V..x1.6.t].uT.s....E..7(.d.S..g....c...QH..\].c.o.f.v....-.,...^...ll.b.1Y0.....'-x....G5Q..,e[b.M~"(......e.F..$u......f.)..pr8.K>X..2eM.H.c..s0.......C...qk/..4....~...zg....`._ 1....x..z[.....e6.....a.g8..N........r.C..2..."F..=o...a.).w\uV.n.$.D.>.w~.:Ej.^.['.`..S.u..R.0..;.c.9,a.i..nB..b..{.Rz}7.a.........F.gJ.1=...^..b..e......._s..?(.c.vyi....!.Y..A.pA.Y ..a.....6w...NBf....TR...yp.L....U.G...>....Vj.P.=..uU....N...3..$"j..........e.y...P.....9G.IYA.f......?.......-....0,........-.R......'.ls3...z.N...x.R5.\.qq....dH....

Chrome Cache Entry: 802

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 901 x 505, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	56219
Entropy (8bit):	7.981079981899655
Encrypted:	false
SSDEEP:	1536:x8FFbFL/cZK4qmjSstfcsdpF5+4azXP9dJ:iFbR/c44q63U/PJ
MD5:	BCC6D4B39E14E11AAB455F55CA4D8752
SHA1:	DE8AD7A5797C941131E67FDAE7672C9918F933D3
SHA-256:	9BAFF00FCFE31176EB6E0B3571E8AFFFC485E35D143FC78C25406544286C5B8C
SHA-512:	E04A262821E63F806C8CBA20AFB5158DA15125A573017CA10337B4A0E6CFF14B56072FAF006A645F03F8EA851EA7F5A95FC13E79C931C80CD6BE0D188704C45E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................d....sRGB........UIDATx...A..@..1.........I........s......Q..6.....G...\|...>...`.Q...\|....G....Q..6.....G...\|...>...`.Q...\|....G....Q..6.....G...\|...>...`.Q...\|....G....Q..6.....G...\|...>...`.Q...\|....G....Q..6.....G...\|...>...`.Q...\|....G....Q..6.....G...\|...>...`.Q...~..h7m ............4.(....DJ.}.+km/..jfm.Q..z.(...'....G...>y....<.........Q...O....'....}.(..=y....G......l.<..@O...ZU}l1........W.S..9....^.."sy!......P....\|..?.(.2......G./.z...H.. ....S...y..).(.z\|.......<.c.l.4.\|....u:..GaGj...b.......H....Q.J...h.._...y...z./".....I..vd\|p,..cV..e.k..m.]..._...`..".j...hf....T............e^...9.j.F..l....Q..?:.F.s...<b.".q...c..q.>...,.j.\|:S.}"..\...I}..h......(...N...w.{U..{K..Z,.d[...B^e....a..K.q.O`.C..a'.L p..a;.3...@.f.b..1.`G...dY.%k....z..o..V..........S~.~O...;.w.{.A........l....:.....p..'.NdOQ.:..U...)...m.e...[.....MI.R.J..h......W.4<.u...^-u..}.......l......;6....\|.._....=.c....z.&....<.N.S ..J......5ffP.N*m.

Chrome Cache Entry: 803

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 804

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 805

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://pixel.onaudience.com/?partner=138&gdpr=0&gdpr_consent=&mapped=ZGkACWYr8zMAAAAIA98YAw%3D%3D
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 806

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	dropped
Size (bytes):	49067
Entropy (8bit):	7.980624928300864
Encrypted:	false
SSDEEP:	768:sSjMvBjjITl2YEle1d9mwBGp05XqRgZHmTlHsjoCb4mpzecptIt95COO1efy:XMVD2d9GuXwgZHmTlMWmpzzpCJCO0
MD5:	2B232F2B56CC15AA880F8B7B39C3B09E
SHA1:	3DAFDB96477718CFD18B79CF6DA8CE5DC9CFF2FF
SHA-256:	50DEEDBF178E65F23AE3D724F7AB0EB783C0328AAEDD9E9893EE6A6D7F2F9333
SHA-512:	756D7DCA2A5D44CF99001D8515CB579452639C78FA1F53CE6A4C7905987DD586E381EA584F1B68D4F3472AC9841E6F4AE60DD4F87794E3B9F1FDD72C1253B364
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".................................................................................... ...){D..d ..f]..=.....#...oS..w_....;..j`.B.G9.[4..D.v7.-....Y..t..V.I0+$..V......{..$...WD.Q.4.hQ.....r}r.8.P.T..b2Mt.Q.T,.PF.0..q...}z....S...0{.NJ..Ua.K/3...p.H(..`...^i).....n....3;......56%=W...`z4.+me..E.E...2....N.2.(.....@.t.h.Y...R.l.'..i....:..,.T....Ha..bV'.A.....^.(4....LR..n.]4~......~T.T.b'T.rP..>,[.%...wFl.....0....P.P.5..a.@.U..Qe_7..V:o..p.Nl...C....C.z.L...8,..yU..z.4O@..r..tV\|4.j@..k^..H.bV1DO.... 45..~(..@"e[6V...G.puB>...4..:..B.$...)li.-.ZU5.]>}!_..6.....k...B(."Qx.oaC).. T[.j.H.W2.)b..q....MC.mz..-kW#h...X..uF.+.......4.....B.K.r.hX..+..$...N.!..Y.M..4..Q.E)J..$..a\..X.h..eNU......X..a.....32....x.h......16.6S...s

Chrome Cache Entry: 807

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUkwx7tHh/:fD/
MD5:	221D8352905F2C38B3CB2BD191D630B0
SHA1:	D804B495CB9B84B9007A25B5D85F9AE674004CDE
SHA-256:	89FE0EE6020314794FC2CFEACF3D10C31050CFE56F8EBDDF1ED0A33FBE941FA7
SHA-512:	CB3397776F5CA1D15D24786896B2478C6548D0B14DEC0832BFB16C4C419135300704F8A7A4DFBF56D625429C1598EE8110958648F25A3CCA09E6956C1FD3335F
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 808

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 809

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59352), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	133655
Entropy (8bit):	5.564620628456994
Encrypted:	false
SSDEEP:	3072:vxQtdFNOUN3cxLs3uWrUU2KNJgGlGmcccGmJx:vxQBNbNuLs3uW8GlpcGmJx
MD5:	DD910BCA2708F2875EEBFA48A89C4C4C
SHA1:	578802C630C594AD9D9E1DB6DBE560F41E1254D1
SHA-256:	D9725ACE28B547BEAB324A5DB219F318361A3B0C38A494BC415E24C23DDBEAE8
SHA-512:	74745BE4AED56A9772F4A91C7693393AABAE7A66E1EA562E72FDBB4BD66B60F5CA466704A3586944568C477C5271B6E3BF46D0455F9D95B0BF40D5111447E49B
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">.<head>. <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title>. . <meta name="robots" content="index, follow">. <meta name="revisit-after" content="1 days">. . <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>. <meta http-equiv="content-language" content="en"/>. <meta name="description" content="1Movies Watch Movies online for free, Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/>. <meta name="keywords" content="1movies website, 1movies is, 1movies se, 1movies online, 1 movies free online, 1movies series, #1movies, #1movies is, 1movies series"/>. <meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1, maximum-scale=1"/>. <link rel="shortcut icon" href="/images/group_11/theme_3/favicon.png". type="image/x-icon"/>. <meta property="og:type" content="webs

Chrome Cache Entry: 810

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	dropped
Size (bytes):	303058
Entropy (8bit):	7.982787786372559
Encrypted:	false
SSDEEP:	6144:FgGtMXryfNFXIAtvL7hMfwOw3HaoCjl/qGHxOCdvDH1/n:uemyVFXIAtvL7a66oqCfCdtn
MD5:	7172B33C60D6897DC71E5C890C2C303B
SHA1:	FCD900950D1C040684E402DC3141391360148DE0
SHA-256:	E4A29BB3527EB33EED7190AB3FEB65E31734A90AAB44EC9CD9BA3B422E3044A3
SHA-512:	327AB5CF7FCDC1955F123EBCC33700C53CF16451C2223162B275E1F00F184E23158BC078F4C8C2F318DE2F9E538F588612EBDA3CC44F0CFED6573FEC187D1AFD
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X..."....................................................................................i'..}..qf..35..0..R...JV.....,.?.......Id...Y%f.)..eL..^....t.....t....a.....g.s....Kf/^....&.j...K\Q.6J."\|.....q..r..rm$.u&.(kP....kw.......B..M........s."k...>....d!k..6R&....F.....d.m.s.~.IHKF......!Ct.;N..Yk..l.,3:.i.n...Lq...;N;.Dv[.....w..@.!B......[6.J...;.(&.%~.......J.\......4.A.L..J~0....w.$..7.,q.H...`2.L...t...!.].:.\....#..zJLZKg....`).I.F.`...N\|..g...8...i3&.p.M..@.:@).E...Y&...a.L1W...B]..H.l...x.&~>.2l.m4{.1.Q..e .a0.B.a..1.J..@.V..Z6....j..T+....-.,VHe..(.Z..M#&.G...3f.a....;Xm#g.9..Ga.~..2p.z.!.d.......d....5.n.;.......o.\.-.s.c...2.L.(.!Q.I.g.q..H........[$,:B.fK%$,..Z.q..'....OJ....V....U.c..:....`_c..... ...QG."j...D...\

Chrome Cache Entry: 811

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	73660
Entropy (8bit):	7.986255367425026
Encrypted:	false
SSDEEP:	1536:RGHReVxcHy/Etpqz+YYzQb9L7NaLFfneYwW2xMmwV5:YqxcTtpqz+YYzQbBW2qV/
MD5:	49884FEC4E6F5AB23140BEA8DFDE8C83
SHA1:	074BD2027BB441DD1B19A4E071D3DE208C4FE0C8
SHA-256:	195D1C8A3060F26C47E848223E7BCBFE740D10F9B675BB0BF0EDE2C77574F460
SHA-512:	65025818CDD73F75C2FA373051DF63FF937E4613FC8A37C9B8AF70C6AC8F15BF6E99530C2B4ADE1B9660F8C2182B353D0AF877FD86E4D9D807B04887C8C4196A
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/0a/a9/0aa95e98d17d7e708b1d9ab1086189f5/0aa95e98d17d7e708b1d9ab1086189f5.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w...."......................................................................................}...}:k.7.\|go=....4;#.[........%tR..d...o.U...S&... .B.7..#R..{pv;IWy...k.=..O:.8s..8.l.ow....m..(#i....vRWWQ.W..c`.O...V0.D..../...y..r.........ax(`..o.......Q.+z.G..-.^N[y.2....!.>}.....P....fjW...wH...z..4d.0...!.xr.....m.s...HA,q\U.d..0&.1.H.<.I....K... 3..5o.f...jj.n....9.Y..c....?.u.l9`.J.f.a=m...I..j......+q...V}.8..9j..t.b4.A.-)0.5k...Y.m.....J...-.....l8.C.....o;sj.].d.'.i....U..q..$R.4zV..Q..u.f..J.o......N..RBY]U.ot.-.......?mfO~.~t~.gd..!.R)J4....D....R...U....Jm...!...y..$K<..u)....2i.C.M.j4.....=WJ...).BF.3..(..o-YXH$..`ec.D.FU.a.z4-D).j...T.`..w}..W 7..[..r..6.yZXe....l..9...i.....Dwt."."3.....<.^...t.^...q..6>...ey}.Ai.

Chrome Cache Entry: 812

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	837
Entropy (8bit):	5.233674414660833
Encrypted:	false
SSDEEP:	12:TMHd64lWq/hlDwdSH/6Qn/hwWMENlmj43dYdNDpZMyLyj43dQ:2d64ld8dSf6ynWjs2d5RLyjs2
MD5:	CCE584B0BA1FB7C2D326FCD3C0767ECD
SHA1:	A6AAB59C214429CF9754420D02542EAB0084E7C6
SHA-256:	B99AD8EEAE5A55B3C3CCAA5147B121B5EB2E9C9C4AC678E2105ECA7C4D70FEB1
SHA-512:	2E526A1BFC1685E8786C0700EDF432E1ECB2EC69669CC76BE93A8BF39E112277EDE0E11AA5CB2214A3413C0363392F87473A464FD0248F3B0D151C4D9A662B74
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_43" data-name="Group 43" transform="translate(-612 -167.5)">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(612 167.5)" fill="#f2faf6"/>. <g id="Group_1085" data-name="Group 1085" transform="translate(619.648 172.883)">. <path id="Path_838" data-name="Path 838" d="M21.231,14.467h6.843a1.064,1.064,0,0,1,1.064,1.064V20.4" transform="translate(-9.786 -5.106)" fill="none" stroke="#27d17f" stroke-width="1"/>. <path id="Path_839" data-name="Path 839" d="M16.934,7.43,11.549,4.617l-9.2,4.847,9.2,4.847,5.4-2.873v5.5a7.219,7.219,0,0,1-10.882.048l-.042-.048v-3.36" transform="translate(0)" fill="none" stroke="#27d17f" stroke-width="1"/>. </g>. </g>.</svg>.

Chrome Cache Entry: 813

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	823
Entropy (8bit):	4.872125467728489
Encrypted:	false
SSDEEP:	24:2d54uQjIMMooZpWv8H1FIhNTEslBBlh1cweW4JAiJZVXPe:cqFoZpMhtlBBluW4JAsXm
MD5:	2027C97ADED45B9497802248686A2057
SHA1:	522867B502EED4E00FFFA5C90C76B5CDD8ECC52C
SHA-256:	E066F35BB16C92768F274C09DB5B7F669CD185699D5B758BD4AB469499E86712
SHA-512:	C357C0DEE21FBB2CCC83FA4354542AB0E340BA844332C938484DDCF98E1A4E1E33A17FD7B435E4F12FBF2F953013C038D9AE4C9A8CDB9F593A71EFAD345DDF18
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="17" fill="#fff"/><path fill-rule="evenodd" clip-rule="evenodd" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18 0Zm-.014 5.143L10.4 17.733l7.587 4.484 7.588-4.485-7.588-12.59Zm-7.7 14.028 7.587 4.483 7.592-4.483-7.592 10.692-7.587-10.692Z" fill="#494949"/><circle cx="27" cy="27" r="9" fill="#7921EA"/><path d="M21.34 30h4.533v-1.033h-2.917l1.693-1.625c.679-.65 1.138-1.3 1.138-2.2 0-1.272-.928-2.046-2.104-2.046-1.176 0-2.094.746-2.304 1.874l1.032.23c.115-.603.612-1.071 1.224-1.071.65 0 1.1.478 1.1 1.061 0 .545-.363.975-.755 1.358l-2.64 2.544V30Zm7.904 0h.86v-5.279l1.885 1.894.612-.593-2.927-2.926-2.926 2.926.603.593 1.893-1.893V30Z" fill="#fff"/></svg>

Chrome Cache Entry: 814

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	downloaded
Size (bytes):	418738
Entropy (8bit):	7.9768465670875965
Encrypted:	false
SSDEEP:	12288:MjbzuT5mHyV2y0D6XB64kRTH8GwLrlLxeWwGq:MnzuVmH3yM4kJHTwLrzeV3
MD5:	8534EC9967B4B3B10E50CE81DAC03565
SHA1:	29C4F92B0126CACE231E74762F57F03FE6F69617
SHA-256:	510621B55091F3C561693A34961DD492A877E5BB4E40FA108ECCD7AC4085BAE9
SHA-512:	6246B9EB6A96D30AC79E1292DD9C42C2279BC99CCDBED1F353D4168D7F0B139635ADC50DCC189F5EC9A94B2EF0CFDCC2E3A5931BDD0FC88C9699BC21DADA8035
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/1200x600/793/40/31/4031ee4fad85314df43b8f30d191dad9/4031ee4fad85314df43b8f30d191dad9.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X..."........................................................................................... .uvMcI..qE/f..t....;]..#T.e0\|.,k].....2...(._p..M..z....Kk.M.....6.e-.I.w.k.........{$..c...........J.GI"..l.E......lw.u.8....s.e.].l$.Xs`".z..n..._.y..:.].............9.k..qQ........).....t.3..&[.K.....^..I2...o.^...#..v.$5^U..&...)..#..t.h..!.....wF...d.st.<MG.@.)?..R8u.U!7.C..eS].....1.$r..uV.....w......L..8b....)).)......5r...'..1.:...i.L.......&.Y?..1....U..c...j..-...M.%A.X.x..d..$...j..)).Z...Ocpy".[z....UckT.R....Yo._^`......z...aUQGX;YT.D......'...-..o.....]$]...G...i...].~F...l.X..]...VH.N.6.5..G.>Da..QR^a.$.Hs...$fs.v%.S .S.VV.........D.....K\.m.....e.q....WO....v...A4.......N.Cy..B..o.x.f.....kAGru.1.V1.

Chrome Cache Entry: 815

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x375, components 3
Category:	downloaded
Size (bytes):	84228
Entropy (8bit):	7.985058206869043
Encrypted:	false
SSDEEP:	1536:HXyfhTMuP4YEloFI+lSdOpohsQE9ZmZci2RlDFkREQGYYNA:HifhTMEElN+l0OpoiQJKhRPkR29NA
MD5:	8BC7AADC4BB035E046C38BE50842C161
SHA1:	195F9B12FDAD41362F3F606DFCFA99E8FDC8CE84
SHA-256:	CC3F507ADCDE779A4036CE4F450905C13FB2274A6DFFBEF480CB5A789B73993F
SHA-512:	F376783DCBEE80840AAE6259F3635057899D19F857DD65AAEFC8FEACB782C674DC252C39216A369ADF4F8D56956B7238E7A31BBE899B15E129955FE25842F3CC
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/f8/a1/f8a16dbbb585ff763b323c908ceccf38/f8a16dbbb585ff763b323c908ceccf38.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................w....".....................................................................................j..p.,...Sm.-J....~3.W..:"]M...........E.k.'....n....Oo"..]....mR...4.f....#.\.k.{..3..g..0....Vx.......ut..X.{.V`X.DU....`...7.UM.....-.k!Y..U...-,.....7.c{.}snz......?w..].)\Z.E....K....0.k......\|...b(55.p\|....."..@l...J_J...6.:-.7.u..kl_.h>...F..u%).....u.}Q1`.b.I..M5.....;.[&?zX...g\|..U....m.e..N!.....Q.!^s..,.0......[.....Nr...S..W...F....8............I.=<.<]&..u....)....+\|U.b..~-...).G..%O......]...s.c.._..\|..DS\|.i.cJ..u.....lz1Pm.^w..E..}.).:.......$a..Rm..........Fnlr.j.\|...&rv..W{...1....kx~D..De=AL.S.y+.\zD.<...s.........c.RLo$..i......W6.m2PD...{.+.....&a..,.v....2R.k3... .....................Q.] ......,n$.....M}.H.....

Chrome Cache Entry: 816

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/2981?id=&google_gid=CAESEM6aIdoOX5XaL2WUlP9o-74&google_cver=1
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 817

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 250x350, components 3
Category:	downloaded
Size (bytes):	70297
Entropy (8bit):	7.983026877252951
Encrypted:	false
SSDEEP:	1536:4JGNbawCQ57MS4ueUqQRgbx2YwE8bScCEgUemQ/V4fmV:4YNWSMgevQRgbx/VwgUe3umV
MD5:	B2C05A479326B73D38CD3531527FABBB
SHA1:	7598C399CC34E1E67D28AE7B91E79C1A0015FFB7
SHA-256:	E9A158748EC9483E59E8A0EBBF271271B72BAC869F445FE1496AD080B3E8BCFB
SHA-512:	E09C77E855E8C37F3085E8F7581F049B2FA4B5C29003C9C11AB4CDC08D5697F601DAFB6C35F6AB04E0F29DB2CD8124E615C4B8294B1A91875C55E06D6E7F823B
Malicious:	false
Reputation:	low
URL:	https://img.1movieshd.cc/xxrz/250x400/793/5b/2e/5b2e29e646212b63555576cc5a122117/5b2e29e646212b63555576cc5a122117.jpg
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................^...."..................................................................................C.FsY....b...F1.Sb.....Y.4F.........m[3.X..P..u...S^.}]...J".;.Fc".!....[.X.....>..%..D^.5t..N]$.Y.5....1t_%2...:.[..;..J3.[..2....'..6.[...!....8pVh.C.,......#'...9.6...\.[1w......q=..<...../.$.)...+..=..r..~......A..!y.. e!.VR."...+`.3d}cX .#..,......Ec..[.G.J...6.(.g.q"..YD.dR@rD.bq.m..Gja2..#.0..c.6..U..ir..#`R.e.R..[.7.k...&..g..g..O.. 3E.c-=.....Q...G..VB#....C.XO...f:....\i.(7t..A..S.\|.p...{\|....Hy...LL.j...b.Q..q.`{..w...7h:%..>..G.s4q1.;i9...)z!..\|2...5. X.H.........cl....-H.6.2.......hUi..n..\|..cY.,.\.g..2l8wWk..{\H...h.65......,a..J.<..\|....em.\|;.e.....ff...Rz.2...>...{..X0Z...Kwk.hF..t..ns..Z..t.\M.... .Rk...Z..eguS.SD.K*E.e.D....5d

Chrome Cache Entry: 818

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2375
Entropy (8bit):	5.036552306753723
Encrypted:	false
SSDEEP:	24:2d64l6hPlp5f0k1q6cUjs7OjjsPSjs9IjsojjsqG3jsxLZxGjsxKyQDjsxvIjsx9:c361lrIOmJcLZPOA7X1f
MD5:	B005ACFCC0895F307855373DAB78301F
SHA1:	A9CE4FC1B4B69F92BC1B2DEBACAD3B885551DDED
SHA-256:	711CBE5952BF5BBF18D3EC10F0D9F73D3133C3CBA9098A4B3ED13E4F086F4F25
SHA-512:	25649C8AB691B07B05DB11B847904F0ACFD7975370A3F4BA5A504316F0F075E6A0C9A04CFD39264AD6140355959B752620350282C76A347896CA84A776C24945
Malicious:	false
Reputation:	low
URL:	https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/Group%201311.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36">. <g id="Group_1311" data-name="Group 1311" transform="translate(-611 -291)">. <g id="Group_1272" data-name="Group 1272" transform="translate(-1 41)">. <g id="Group_1078" data-name="Group 1078">. <rect id="Rectangle" width="36" height="36" rx="18" transform="translate(612 250)" fill="#f2faf6"/>. </g>. <g id="Group_1096" data-name="Group 1096" transform="translate(617.156 256.368)">. <path id="Path_857" data-name="Path 857" d="M14.42,14a3.881,3.881,0,1,1-1.239,2.843" transform="translate(-3.826 -5.433)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_255" data-name="Line 255" y1="2.487" x2="2.632" transform="translate(15.68 6.577)" fill="none" stroke="#27d17f" stroke-width="1"/>. <line id="Line_256" data-name="Line 256" x2="1.592" y2="4.121" transform="translate(10.185 4.057)" fill="none" stroke="#27d17f"

Chrome Cache Entry: 819

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793", progressive, precision 8, 1066x600, components 3
Category:	dropped
Size (bytes):	492546
Entropy (8bit):	7.98830149900321
Encrypted:	false
SSDEEP:	12288:7JMZxmSY/3JYXKNOyXDsXF644rkJB4n1bbdR1:7ZSY/3JKKN1sI44kJ09Z
MD5:	82F48EACAFFDC58BC3521E7D6022A89C
SHA1:	612B5E64CF5B5996A73C22B2A9CD6368E7E49EDC
SHA-256:	D6C1C086B139EC0063E70D9EFF8DC034070DD83DA15927407C75926CAD6BFF59
SHA-512:	49BB48F7DA32FA5BA5BD180B6ED4A60B0489F0E2134C79FB82C7985EE1D4A43CB75631A291B889D409C5F053722397F4FFC285B44EC4A01EF5541B8199B1B215
Malicious:	false
Reputation:	low
Preview:	......JFIF.............<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793....C....................................................................C.......................................................................X...".....................................................................................%I].....X.i..o..0`..b....cO..z2.h.C..z..........k.t8%_m=J0.....Erf.8..Q4...6.S...l..\|.a...l.}.....!...W..D.#K../,....C+.7d6.._:a.!.:...6 r...CG.].T~.jUO.n.=...hLw.O..K...KUb...$..i.........XH!....$wcL\..Yl..Ob>.....R.;!.M/..w/M5.1.U..Z..Rxg..3B.\|m..0..b.&8p.....F.?.oGu..B...U.U.^C..4.n...NKEA..u.....h..>....cw..w.. ....0....."G..p.N.S..g..........'.O.:.CJ..........~.m....u.,...%...cp.}...z..9g.........5.s\...Z...]L..!.V..Y..o9%..^\.4.r.f.;2.D.[...{.W.G.F.wo...&....gg\.V...$7..uB..v...Vl....u.....RW.X^.t.J<.e...5.5.>...6..f@r...>..-..S..a..xZ.w...........8...{.]$...,...L....Z..^6....M.E^....z.&.6...b....j.,3.r.e....!...R\.<..2D5.PX~Ic....>

Chrome Cache Entry: 820

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 821

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.327819531114783
Encrypted:	false
SSDEEP:	3:YWR4brEJ4:YWybrZ
MD5:	1F57CBD1F1A1CED8F62D34242408414C
SHA1:	52279C54B16F0A88D43D57B4CBB9813EA3CC39AB
SHA-256:	C462D460EAB61DE19F36CC384C99666E5BF65EAEBA0C12B8F594C5410C01F220
SHA-512:	74A8B00878ACBFF90771AB31062D088CCEE50794F975DB0B2B0C26EE37EEB7792B99F456B1105D07C94DEAB79F376CEC630E4761111CD6BDA4120EB226D666D5
Malicious:	false
Reputation:	low
URL:	https://1movieshd.cc/ajax/banner/vpn
Preview:	{"status":false}

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 20:32:05.540693998 CEST	192.168.2.4	1.1.1.1	0x8a03	Standard query (0)	1movieshd.cc	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:05.540818930 CEST	192.168.2.4	1.1.1.1	0x79be	Standard query (0)	1movieshd.cc	65	IN (0x0001)	false
Apr 26, 2024 20:32:06.728745937 CEST	192.168.2.4	1.1.1.1	0x60ea	Standard query (0)	1movieshd.cc	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:06.728888988 CEST	192.168.2.4	1.1.1.1	0x6714	Standard query (0)	1movieshd.cc	65	IN (0x0001)	false
Apr 26, 2024 20:32:06.786551952 CEST	192.168.2.4	1.1.1.1	0xe21e	Standard query (0)	1movieshd.cc	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:06.786683083 CEST	192.168.2.4	1.1.1.1	0x6e3b	Standard query (0)	1movieshd.cc	65	IN (0x0001)	false
Apr 26, 2024 20:32:07.935434103 CEST	192.168.2.4	1.1.1.1	0x5964	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:07.935777903 CEST	192.168.2.4	1.1.1.1	0x2d96	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:07.937048912 CEST	192.168.2.4	1.1.1.1	0x3e36	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:07.937505960 CEST	192.168.2.4	1.1.1.1	0xf43f	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:07.941472054 CEST	192.168.2.4	1.1.1.1	0x305f	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:07.941863060 CEST	192.168.2.4	1.1.1.1	0x9b16	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:08.782282114 CEST	192.168.2.4	1.1.1.1	0xbe09	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:08.782402992 CEST	192.168.2.4	1.1.1.1	0x8195	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:11.311814070 CEST	192.168.2.4	1.1.1.1	0xc0ac	Standard query (0)	eephaush.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:11.312552929 CEST	192.168.2.4	1.1.1.1	0xb31b	Standard query (0)	eephaush.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:11.323856115 CEST	192.168.2.4	1.1.1.1	0xc375	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:11.325443983 CEST	192.168.2.4	1.1.1.1	0xf795	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:12.089731932 CEST	192.168.2.4	1.1.1.1	0x9a83	Standard query (0)	1movieshd.cc	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.090233088 CEST	192.168.2.4	1.1.1.1	0x61aa	Standard query (0)	1movieshd.cc	65	IN (0x0001)	false
Apr 26, 2024 20:32:12.192903042 CEST	192.168.2.4	1.1.1.1	0x53c7	Standard query (0)	platform-api.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.193048954 CEST	192.168.2.4	1.1.1.1	0xf83f	Standard query (0)	platform-api.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:12.476738930 CEST	192.168.2.4	1.1.1.1	0x599	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.477020979 CEST	192.168.2.4	1.1.1.1	0x1406	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:12.479180098 CEST	192.168.2.4	1.1.1.1	0xffe7	Standard query (0)	yonmewon.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.479692936 CEST	192.168.2.4	1.1.1.1	0xa0c	Standard query (0)	yonmewon.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:12.585411072 CEST	192.168.2.4	1.1.1.1	0xb055	Standard query (0)	eephaush.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.585756063 CEST	192.168.2.4	1.1.1.1	0x977f	Standard query (0)	eephaush.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:12.605607033 CEST	192.168.2.4	1.1.1.1	0xbefa	Standard query (0)	sr7pv7n5x.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.605813026 CEST	192.168.2.4	1.1.1.1	0x975d	Standard query (0)	sr7pv7n5x.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:17.195801020 CEST	192.168.2.4	1.1.1.1	0x9d9b	Standard query (0)	rndhaunteran.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:17.195951939 CEST	192.168.2.4	1.1.1.1	0xbd38	Standard query (0)	rndhaunteran.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:17.598718882 CEST	192.168.2.4	1.1.1.1	0x21d0	Standard query (0)	buttons-config.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:17.599858999 CEST	192.168.2.4	1.1.1.1	0x491f	Standard query (0)	buttons-config.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:17.601306915 CEST	192.168.2.4	1.1.1.1	0x6cc7	Standard query (0)	l.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:17.601571083 CEST	192.168.2.4	1.1.1.1	0x5fdc	Standard query (0)	l.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:19.713053942 CEST	192.168.2.4	1.1.1.1	0x5448	Standard query (0)	platform-cdn.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:19.713160038 CEST	192.168.2.4	1.1.1.1	0xfaf3	Standard query (0)	platform-cdn.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:20.233009100 CEST	192.168.2.4	1.1.1.1	0xe9bc	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.233139038 CEST	192.168.2.4	1.1.1.1	0x838a	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:20.259931087 CEST	192.168.2.4	1.1.1.1	0x817b	Standard query (0)	l.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.260075092 CEST	192.168.2.4	1.1.1.1	0x430c	Standard query (0)	l.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:20.394464970 CEST	192.168.2.4	1.1.1.1	0xcb3c	Standard query (0)	platform-cdn.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.394582033 CEST	192.168.2.4	1.1.1.1	0x6513	Standard query (0)	platform-cdn.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:20.512938023 CEST	192.168.2.4	1.1.1.1	0x8668	Standard query (0)	count-server.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.513196945 CEST	192.168.2.4	1.1.1.1	0x4db0	Standard query (0)	count-server.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:20.513763905 CEST	192.168.2.4	1.1.1.1	0xbc67	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.513897896 CEST	192.168.2.4	1.1.1.1	0x5d41	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:21.243000984 CEST	192.168.2.4	1.1.1.1	0x60e8	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:21.243134975 CEST	192.168.2.4	1.1.1.1	0xf70f	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:21.317006111 CEST	192.168.2.4	1.1.1.1	0xcac4	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:21.317125082 CEST	192.168.2.4	1.1.1.1	0x6b78	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:23.818259954 CEST	192.168.2.4	1.1.1.1	0xf7f6	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:23.818519115 CEST	192.168.2.4	1.1.1.1	0x7fec	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:24.381911993 CEST	192.168.2.4	1.1.1.1	0xe3cd	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:24.382076979 CEST	192.168.2.4	1.1.1.1	0x499b	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:25.093215942 CEST	192.168.2.4	1.1.1.1	0x54aa	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.093400002 CEST	192.168.2.4	1.1.1.1	0x2875	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:25.183805943 CEST	192.168.2.4	1.1.1.1	0x3324	Standard query (0)	loadus.exelator.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.184406996 CEST	192.168.2.4	1.1.1.1	0xc4aa	Standard query (0)	loadus.exelator.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:25.186211109 CEST	192.168.2.4	1.1.1.1	0x8078	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.186593056 CEST	192.168.2.4	1.1.1.1	0xae5e	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:25.188846111 CEST	192.168.2.4	1.1.1.1	0xd6b3	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.189209938 CEST	192.168.2.4	1.1.1.1	0x17c2	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 26, 2024 20:32:25.191144943 CEST	192.168.2.4	1.1.1.1	0xc6e2	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.191524982 CEST	192.168.2.4	1.1.1.1	0x264f	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:25.191951036 CEST	192.168.2.4	1.1.1.1	0x2c14	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.192369938 CEST	192.168.2.4	1.1.1.1	0x6d37	Standard query (0)	ml314.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:25.199162006 CEST	192.168.2.4	1.1.1.1	0xa48d	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.199743986 CEST	192.168.2.4	1.1.1.1	0x71ca	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:27.840451956 CEST	192.168.2.4	1.1.1.1	0xbeda	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:27.840595961 CEST	192.168.2.4	1.1.1.1	0x86b6	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:27.841078043 CEST	192.168.2.4	1.1.1.1	0x4eea	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:27.841367960 CEST	192.168.2.4	1.1.1.1	0xda12	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:27.842236042 CEST	192.168.2.4	1.1.1.1	0x6185	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:27.842437983 CEST	192.168.2.4	1.1.1.1	0x2737	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:30.193979025 CEST	192.168.2.4	1.1.1.1	0x93da	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:30.194127083 CEST	192.168.2.4	1.1.1.1	0xcb0	Standard query (0)	ml314.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:33.581599951 CEST	192.168.2.4	1.1.1.1	0x4b45	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.581938028 CEST	192.168.2.4	1.1.1.1	0x8daa	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:33.584042072 CEST	192.168.2.4	1.1.1.1	0xafb7	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.584182978 CEST	192.168.2.4	1.1.1.1	0x8e3d	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:33.584753990 CEST	192.168.2.4	1.1.1.1	0x45db	Standard query (0)	visitor.fiftyt.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.584964037 CEST	192.168.2.4	1.1.1.1	0x1f7c	Standard query (0)	visitor.fiftyt.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:33.585804939 CEST	192.168.2.4	1.1.1.1	0x8d39	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.585958958 CEST	192.168.2.4	1.1.1.1	0x1a3e	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:33.591980934 CEST	192.168.2.4	1.1.1.1	0xa557	Standard query (0)	pd.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.592394114 CEST	192.168.2.4	1.1.1.1	0x7fa4	Standard query (0)	pd.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:34.733736038 CEST	192.168.2.4	1.1.1.1	0x7bc7	Standard query (0)	eephaush.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:34.734011889 CEST	192.168.2.4	1.1.1.1	0x8dbf	Standard query (0)	eephaush.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:34.762789011 CEST	192.168.2.4	1.1.1.1	0x5712	Standard query (0)	tzegilo.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:34.763221979 CEST	192.168.2.4	1.1.1.1	0xc1ec	Standard query (0)	tzegilo.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:35.172097921 CEST	192.168.2.4	1.1.1.1	0x36a4	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:35.172271967 CEST	192.168.2.4	1.1.1.1	0xd495	Standard query (0)	pippio.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:35.456496000 CEST	192.168.2.4	1.1.1.1	0x32b1	Standard query (0)	tags.bkrtx.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:35.456602097 CEST	192.168.2.4	1.1.1.1	0xf532	Standard query (0)	tags.bkrtx.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:35.488243103 CEST	192.168.2.4	1.1.1.1	0x154a	Standard query (0)	flerap.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:35.488388062 CEST	192.168.2.4	1.1.1.1	0x5b7d	Standard query (0)	flerap.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:35.489367008 CEST	192.168.2.4	1.1.1.1	0x7b00	Standard query (0)	fleraprt.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:35.489625931 CEST	192.168.2.4	1.1.1.1	0x9a23	Standard query (0)	fleraprt.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:35.499142885 CEST	192.168.2.4	1.1.1.1	0x25f3	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:35.499268055 CEST	192.168.2.4	1.1.1.1	0x156f	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:35.613784075 CEST	192.168.2.4	1.1.1.1	0xe276	Standard query (0)	datatechonert.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:35.614218950 CEST	192.168.2.4	1.1.1.1	0x96cf	Standard query (0)	datatechonert.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:36.108213902 CEST	192.168.2.4	1.1.1.1	0xe66a	Standard query (0)	yonmewon.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.108444929 CEST	192.168.2.4	1.1.1.1	0x2f6	Standard query (0)	yonmewon.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:36.108961105 CEST	192.168.2.4	1.1.1.1	0x3445	Standard query (0)	my.rtmark.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.109215021 CEST	192.168.2.4	1.1.1.1	0xe0f3	Standard query (0)	my.rtmark.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:36.329596043 CEST	192.168.2.4	1.1.1.1	0xf626	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.330302954 CEST	192.168.2.4	1.1.1.1	0xb420	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:36.715132952 CEST	192.168.2.4	1.1.1.1	0xbd55	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.715471029 CEST	192.168.2.4	1.1.1.1	0xaa7a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:36.720012903 CEST	192.168.2.4	1.1.1.1	0xb83	Standard query (0)	graph.facebook.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.720146894 CEST	192.168.2.4	1.1.1.1	0xffbc	Standard query (0)	graph.facebook.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:36.846200943 CEST	192.168.2.4	1.1.1.1	0x711d	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.846515894 CEST	192.168.2.4	1.1.1.1	0xa78d	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:36.848097086 CEST	192.168.2.4	1.1.1.1	0xc6e	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.848370075 CEST	192.168.2.4	1.1.1.1	0x667d	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:36.981345892 CEST	192.168.2.4	1.1.1.1	0xa54a	Standard query (0)	img.1movieshd.cc	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.981605053 CEST	192.168.2.4	1.1.1.1	0x96d1	Standard query (0)	img.1movieshd.cc	65	IN (0x0001)	false
Apr 26, 2024 20:32:37.226218939 CEST	192.168.2.4	1.1.1.1	0xbf3f	Standard query (0)	datatechonert.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:37.226351023 CEST	192.168.2.4	1.1.1.1	0xe681	Standard query (0)	datatechonert.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:39.310707092 CEST	192.168.2.4	1.1.1.1	0x51a	Standard query (0)	valueclick.cc	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:39.310887098 CEST	192.168.2.4	1.1.1.1	0x8ca4	Standard query (0)	valueclick.cc	65	IN (0x0001)	false
Apr 26, 2024 20:32:39.413779020 CEST	192.168.2.4	1.1.1.1	0xa40c	Standard query (0)	bitpanda.pxf.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:39.414020061 CEST	192.168.2.4	1.1.1.1	0x6231	Standard query (0)	bitpanda.pxf.io	65	IN (0x0001)	false
Apr 26, 2024 20:32:39.637696028 CEST	192.168.2.4	1.1.1.1	0xee66	Standard query (0)	img.1movieshd.cc	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:39.637934923 CEST	192.168.2.4	1.1.1.1	0xde8a	Standard query (0)	img.1movieshd.cc	65	IN (0x0001)	false
Apr 26, 2024 20:32:40.275856018 CEST	192.168.2.4	1.1.1.1	0x484f	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:40.276179075 CEST	192.168.2.4	1.1.1.1	0xf73	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:40.667381048 CEST	192.168.2.4	1.1.1.1	0x7344	Standard query (0)	www.ojrq.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:40.667381048 CEST	192.168.2.4	1.1.1.1	0x956d	Standard query (0)	www.ojrq.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:42.821357012 CEST	192.168.2.4	1.1.1.1	0xe0b2	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.821834087 CEST	192.168.2.4	1.1.1.1	0x94e1	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:42.823940992 CEST	192.168.2.4	1.1.1.1	0xf50b	Standard query (0)	ws.rqtrk.eu	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.824270964 CEST	192.168.2.4	1.1.1.1	0xdaf1	Standard query (0)	ws.rqtrk.eu	65	IN (0x0001)	false
Apr 26, 2024 20:32:43.145895958 CEST	192.168.2.4	1.1.1.1	0x5783	Standard query (0)	www.bitpanda.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:43.146286964 CEST	192.168.2.4	1.1.1.1	0xc692	Standard query (0)	www.bitpanda.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:44.201704979 CEST	192.168.2.4	1.1.1.1	0x2e82	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.201847076 CEST	192.168.2.4	1.1.1.1	0x9f7f	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:44.202883959 CEST	192.168.2.4	1.1.1.1	0x93fe	Standard query (0)	cdn.bitpanda.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.203017950 CEST	192.168.2.4	1.1.1.1	0xa6ad	Standard query (0)	cdn.bitpanda.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:44.203947067 CEST	192.168.2.4	1.1.1.1	0x2826	Standard query (0)	code.highcharts.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.204274893 CEST	192.168.2.4	1.1.1.1	0xa810	Standard query (0)	code.highcharts.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:44.205730915 CEST	192.168.2.4	1.1.1.1	0x658e	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.206073999 CEST	192.168.2.4	1.1.1.1	0x4e7f	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:44.715226889 CEST	192.168.2.4	1.1.1.1	0xf830	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.715353966 CEST	192.168.2.4	1.1.1.1	0x4e8d	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:44.730247021 CEST	192.168.2.4	1.1.1.1	0xe63e	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.730386972 CEST	192.168.2.4	1.1.1.1	0x2653	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:44.852233887 CEST	192.168.2.4	1.1.1.1	0xc3b2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.852430105 CEST	192.168.2.4	1.1.1.1	0x62fa	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:45.087052107 CEST	192.168.2.4	1.1.1.1	0xef97	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.087214947 CEST	192.168.2.4	1.1.1.1	0x347e	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:45.088542938 CEST	192.168.2.4	1.1.1.1	0xcef	Standard query (0)	eus-api.ccgateway.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.088700056 CEST	192.168.2.4	1.1.1.1	0x3775	Standard query (0)	eus-api.ccgateway.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:45.091922998 CEST	192.168.2.4	1.1.1.1	0x357b	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.092613935 CEST	192.168.2.4	1.1.1.1	0xef86	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:45.093743086 CEST	192.168.2.4	1.1.1.1	0x71c4	Standard query (0)	map.go.affec.tv	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.094290972 CEST	192.168.2.4	1.1.1.1	0xa02f	Standard query (0)	map.go.affec.tv	65	IN (0x0001)	false
Apr 26, 2024 20:32:45.096019983 CEST	192.168.2.4	1.1.1.1	0x1880	Standard query (0)	ib.mookie1.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.096250057 CEST	192.168.2.4	1.1.1.1	0xc298	Standard query (0)	ib.mookie1.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:45.775777102 CEST	192.168.2.4	1.1.1.1	0x57a6	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.775979996 CEST	192.168.2.4	1.1.1.1	0xb305	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:45.849138975 CEST	192.168.2.4	1.1.1.1	0xce5d	Standard query (0)	match.360yield.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.849262953 CEST	192.168.2.4	1.1.1.1	0x6ab2	Standard query (0)	match.360yield.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:46.075421095 CEST	192.168.2.4	1.1.1.1	0x267a	Standard query (0)	ib.mookie1.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:46.075676918 CEST	192.168.2.4	1.1.1.1	0xfffd	Standard query (0)	ib.mookie1.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:48.431972027 CEST	192.168.2.4	1.1.1.1	0x2d26	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:48.432162046 CEST	192.168.2.4	1.1.1.1	0xdf9a	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:48.443852901 CEST	192.168.2.4	1.1.1.1	0xc0c2	Standard query (0)	sr7pv7n5x.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:48.445050001 CEST	192.168.2.4	1.1.1.1	0xd4bd	Standard query (0)	sr7pv7n5x.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:48.862092972 CEST	192.168.2.4	1.1.1.1	0x221e	Standard query (0)	geoip-js.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:48.862221003 CEST	192.168.2.4	1.1.1.1	0xc418	Standard query (0)	geoip-js.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:49.054119110 CEST	192.168.2.4	1.1.1.1	0xc43a	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.054331064 CEST	192.168.2.4	1.1.1.1	0xf4c9	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:49.994287968 CEST	192.168.2.4	1.1.1.1	0xdf12	Standard query (0)	bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.994476080 CEST	192.168.2.4	1.1.1.1	0x2ee	Standard query (0)	bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:50.026868105 CEST	192.168.2.4	1.1.1.1	0x828b	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.027086020 CEST	192.168.2.4	1.1.1.1	0xfaf1	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:50.028471947 CEST	192.168.2.4	1.1.1.1	0xebf1	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.028615952 CEST	192.168.2.4	1.1.1.1	0xaa9f	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:50.030491114 CEST	192.168.2.4	1.1.1.1	0xdb22	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.030740976 CEST	192.168.2.4	1.1.1.1	0x76c2	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:50.032166004 CEST	192.168.2.4	1.1.1.1	0xfe81	Standard query (0)	api.bitpanda.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.032337904 CEST	192.168.2.4	1.1.1.1	0xe109	Standard query (0)	api.bitpanda.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:50.055932045 CEST	192.168.2.4	1.1.1.1	0xab5a	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.056088924 CEST	192.168.2.4	1.1.1.1	0xc365	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Apr 26, 2024 20:32:50.060863018 CEST	192.168.2.4	1.1.1.1	0xc963	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.061027050 CEST	192.168.2.4	1.1.1.1	0xa347	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:50.062674046 CEST	192.168.2.4	1.1.1.1	0xc205	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.062803984 CEST	192.168.2.4	1.1.1.1	0xf911	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:51.815608978 CEST	192.168.2.4	1.1.1.1	0x517b	Standard query (0)	starpassing.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:51.815798044 CEST	192.168.2.4	1.1.1.1	0x563f	Standard query (0)	starpassing.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:51.948605061 CEST	192.168.2.4	1.1.1.1	0xf6b1	Standard query (0)	cdn.bitpanda.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:51.948903084 CEST	192.168.2.4	1.1.1.1	0x1232	Standard query (0)	cdn.bitpanda.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:52.370158911 CEST	192.168.2.4	1.1.1.1	0xea1a	Standard query (0)	bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.370307922 CEST	192.168.2.4	1.1.1.1	0x76dc	Standard query (0)	bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:52.815812111 CEST	192.168.2.4	1.1.1.1	0x5702	Standard query (0)	api.bitpanda.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.816266060 CEST	192.168.2.4	1.1.1.1	0xb5e3	Standard query (0)	api.bitpanda.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:52.872209072 CEST	192.168.2.4	1.1.1.1	0xfb90	Standard query (0)	spl.zeotap.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.872466087 CEST	192.168.2.4	1.1.1.1	0x8b58	Standard query (0)	spl.zeotap.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:52.894710064 CEST	192.168.2.4	1.1.1.1	0x8104	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.895268917 CEST	192.168.2.4	1.1.1.1	0xbd2f	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:52.938956976 CEST	192.168.2.4	1.1.1.1	0xb530	Standard query (0)	onlinetopchoice.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.939641953 CEST	192.168.2.4	1.1.1.1	0xdc64	Standard query (0)	onlinetopchoice.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:53.023116112 CEST	192.168.2.4	1.1.1.1	0x37b5	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.230357885 CEST	192.168.2.4	1.1.1.1	0xf699	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.230778933 CEST	192.168.2.4	1.1.1.1	0x4b5a	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:53.247750044 CEST	192.168.2.4	1.1.1.1	0xb30e	Standard query (0)	api5137.d41.co	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.248074055 CEST	192.168.2.4	1.1.1.1	0x4a6b	Standard query (0)	api5137.d41.co	65	IN (0x0001)	false
Apr 26, 2024 20:32:54.056416988 CEST	192.168.2.4	1.1.1.1	0xdfa1	Standard query (0)	starpassing.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:54.056485891 CEST	192.168.2.4	1.1.1.1	0xe238	Standard query (0)	starpassing.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:54.149300098 CEST	192.168.2.4	1.1.1.1	0xbd39	Standard query (0)	static.agkn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:54.149636984 CEST	192.168.2.4	1.1.1.1	0x1b43	Standard query (0)	static.agkn.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:54.251445055 CEST	192.168.2.4	1.1.1.1	0xdfd9	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:54.252065897 CEST	192.168.2.4	1.1.1.1	0x6b8f	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:55.707318068 CEST	192.168.2.4	1.1.1.1	0xc4d	Standard query (0)	www.plus500.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:55.707704067 CEST	192.168.2.4	1.1.1.1	0x6ad0	Standard query (0)	www.plus500.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:56.555078030 CEST	192.168.2.4	1.1.1.1	0xcc21	Standard query (0)	onlinetopchoice.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:56.555473089 CEST	192.168.2.4	1.1.1.1	0x526a	Standard query (0)	onlinetopchoice.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:56.556117058 CEST	192.168.2.4	1.1.1.1	0x3089	Standard query (0)	static.agkn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:56.556355953 CEST	192.168.2.4	1.1.1.1	0xfcda	Standard query (0)	static.agkn.com	65	IN (0x0001)	false
Apr 26, 2024 20:32:56.945235968 CEST	192.168.2.4	1.1.1.1	0x428d	Standard query (0)	ecf.d41.co	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:56.945368052 CEST	192.168.2.4	1.1.1.1	0xabd5	Standard query (0)	ecf.d41.co	65	IN (0x0001)	false
Apr 26, 2024 20:32:56.945707083 CEST	192.168.2.4	1.1.1.1	0x9570	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:56.945888042 CEST	192.168.2.4	1.1.1.1	0xcd32	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Apr 26, 2024 20:32:56.983098984 CEST	192.168.2.4	1.1.1.1	0x4593	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:56.983247995 CEST	192.168.2.4	1.1.1.1	0x3799	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:00.843552113 CEST	192.168.2.4	1.1.1.1	0x5e5e	Standard query (0)	app.plus500.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:00.843704939 CEST	192.168.2.4	1.1.1.1	0x22ae	Standard query (0)	app.plus500.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:00.865257025 CEST	192.168.2.4	1.1.1.1	0x4027	Standard query (0)	pixel.mathtag.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:00.865685940 CEST	192.168.2.4	1.1.1.1	0x65ae	Standard query (0)	pixel.mathtag.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:00.966752052 CEST	192.168.2.4	1.1.1.1	0xc9f	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:00.966962099 CEST	192.168.2.4	1.1.1.1	0xdebe	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:03.773849010 CEST	192.168.2.4	1.1.1.1	0x1e8	Standard query (0)	cdn-app.plus500.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:03.773964882 CEST	192.168.2.4	1.1.1.1	0x4364	Standard query (0)	cdn-app.plus500.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:04.253007889 CEST	192.168.2.4	1.1.1.1	0xe5fc	Standard query (0)	ecf.d41.co	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.253161907 CEST	192.168.2.4	1.1.1.1	0xb544	Standard query (0)	ecf.d41.co	65	IN (0x0001)	false
Apr 26, 2024 20:33:04.260375023 CEST	192.168.2.4	1.1.1.1	0x79c0	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.260516882 CEST	192.168.2.4	1.1.1.1	0x2b9b	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:04.264301062 CEST	192.168.2.4	1.1.1.1	0xc68a	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.264432907 CEST	192.168.2.4	1.1.1.1	0xd8f9	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:06.327483892 CEST	192.168.2.4	1.1.1.1	0xf310	Standard query (0)	cdn.matomo.cloud	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:06.328252077 CEST	192.168.2.4	1.1.1.1	0xe0ef	Standard query (0)	cdn.matomo.cloud	65	IN (0x0001)	false
Apr 26, 2024 20:33:06.329875946 CEST	192.168.2.4	1.1.1.1	0x4bc7	Standard query (0)	www.fndsda.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:06.330013990 CEST	192.168.2.4	1.1.1.1	0x3481	Standard query (0)	www.fndsda.net	65	IN (0x0001)	false
Apr 26, 2024 20:33:07.367171049 CEST	192.168.2.4	1.1.1.1	0x7986	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:07.367171049 CEST	192.168.2.4	1.1.1.1	0x88c0	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:08.103040934 CEST	192.168.2.4	1.1.1.1	0x4e5	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:08.103688955 CEST	192.168.2.4	1.1.1.1	0x1247	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:09.252579927 CEST	192.168.2.4	1.1.1.1	0x8cae	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:09.252716064 CEST	192.168.2.4	1.1.1.1	0xa041	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:12.041733027 CEST	192.168.2.4	1.1.1.1	0xf9d3	Standard query (0)	rc.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:12.042208910 CEST	192.168.2.4	1.1.1.1	0x1b74	Standard query (0)	rc.rlcdn.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:12.255078077 CEST	192.168.2.4	1.1.1.1	0x558a	Standard query (0)	fleraprt.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:12.256141901 CEST	192.168.2.4	1.1.1.1	0x2ec9	Standard query (0)	fleraprt.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:17.045247078 CEST	192.168.2.4	1.1.1.1	0x340d	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:17.045578957 CEST	192.168.2.4	1.1.1.1	0xa199	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 26, 2024 20:33:17.048192978 CEST	192.168.2.4	1.1.1.1	0x9c06	Standard query (0)	www.fndsda.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:17.048521042 CEST	192.168.2.4	1.1.1.1	0x8940	Standard query (0)	www.fndsda.net	65	IN (0x0001)	false
Apr 26, 2024 20:33:18.389089108 CEST	192.168.2.4	1.1.1.1	0xe22	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:18.389288902 CEST	192.168.2.4	1.1.1.1	0x25cb	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:18.661422014 CEST	192.168.2.4	1.1.1.1	0x6cf5	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:18.661782026 CEST	192.168.2.4	1.1.1.1	0x378d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 20:33:18.767564058 CEST	192.168.2.4	1.1.1.1	0x37af	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:18.767748117 CEST	192.168.2.4	1.1.1.1	0xa2f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:18.963886976 CEST	192.168.2.4	1.1.1.1	0x263a	Standard query (0)	www.fndsda.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:18.964025974 CEST	192.168.2.4	1.1.1.1	0x5ed7	Standard query (0)	www.fndsda.net	65	IN (0x0001)	false
Apr 26, 2024 20:33:18.964365959 CEST	192.168.2.4	1.1.1.1	0x2e0d	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:18.964481115 CEST	192.168.2.4	1.1.1.1	0xd805	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:20.418905020 CEST	192.168.2.4	1.1.1.1	0xcea7	Standard query (0)	www.fndsda.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:20.419249058 CEST	192.168.2.4	1.1.1.1	0x1e94	Standard query (0)	www.fndsda.net	65	IN (0x0001)	false
Apr 26, 2024 20:33:22.529377937 CEST	192.168.2.4	1.1.1.1	0xc9cf	Standard query (0)	l.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:22.529704094 CEST	192.168.2.4	1.1.1.1	0xc14a	Standard query (0)	l.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:22.730282068 CEST	192.168.2.4	1.1.1.1	0x82ca	Standard query (0)	sr7pv7n5x.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:22.730561972 CEST	192.168.2.4	1.1.1.1	0xb3e5	Standard query (0)	sr7pv7n5x.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:22.754276037 CEST	192.168.2.4	1.1.1.1	0xd763	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:22.754411936 CEST	192.168.2.4	1.1.1.1	0x67e1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:22.784810066 CEST	192.168.2.4	1.1.1.1	0xd055	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:22.784946918 CEST	192.168.2.4	1.1.1.1	0xcb15	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:25.474354982 CEST	192.168.2.4	1.1.1.1	0x75dd	Standard query (0)	trade.plus500.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:25.474507093 CEST	192.168.2.4	1.1.1.1	0x1538	Standard query (0)	trade.plus500.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:25.635273933 CEST	192.168.2.4	1.1.1.1	0x134b	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:25.635648966 CEST	192.168.2.4	1.1.1.1	0x4553	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:25.646251917 CEST	192.168.2.4	1.1.1.1	0xbe45	Standard query (0)	l.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:25.646542072 CEST	192.168.2.4	1.1.1.1	0x3d2f	Standard query (0)	l.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:25.648510933 CEST	192.168.2.4	1.1.1.1	0x429a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:25.648794889 CEST	192.168.2.4	1.1.1.1	0xf7de	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:25.933209896 CEST	192.168.2.4	1.1.1.1	0xad4d	Standard query (0)	buttons-config.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:25.933537960 CEST	192.168.2.4	1.1.1.1	0x39bb	Standard query (0)	buttons-config.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:26.077699900 CEST	192.168.2.4	1.1.1.1	0x4531	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:26.077994108 CEST	192.168.2.4	1.1.1.1	0x77d	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:26.783117056 CEST	192.168.2.4	1.1.1.1	0x4f9	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:26.783443928 CEST	192.168.2.4	1.1.1.1	0x88de	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:26.959634066 CEST	192.168.2.4	1.1.1.1	0xf954	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:26.959836006 CEST	192.168.2.4	1.1.1.1	0xac85	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:27.681389093 CEST	192.168.2.4	1.1.1.1	0xd6e5	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:27.682192087 CEST	192.168.2.4	1.1.1.1	0x66d8	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 26, 2024 20:33:27.708302021 CEST	192.168.2.4	1.1.1.1	0x1cd	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:27.708543062 CEST	192.168.2.4	1.1.1.1	0xe5ee	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:27.884377003 CEST	192.168.2.4	1.1.1.1	0xefaf	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:27.884601116 CEST	192.168.2.4	1.1.1.1	0xf396	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:28.033518076 CEST	192.168.2.4	1.1.1.1	0x2ebf	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:28.034828901 CEST	192.168.2.4	1.1.1.1	0x5d4f	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:28.038460016 CEST	192.168.2.4	1.1.1.1	0x4155	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:28.038748026 CEST	192.168.2.4	1.1.1.1	0x3bf8	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:28.199031115 CEST	192.168.2.4	1.1.1.1	0x9201	Standard query (0)	cdn-app.plus500.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:28.199198008 CEST	192.168.2.4	1.1.1.1	0x5f68	Standard query (0)	cdn-app.plus500.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:28.204303026 CEST	192.168.2.4	1.1.1.1	0x1da9	Standard query (0)	trade.plus500.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:28.204899073 CEST	192.168.2.4	1.1.1.1	0x8b0e	Standard query (0)	trade.plus500.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:29.897829056 CEST	192.168.2.4	1.1.1.1	0x766c	Standard query (0)	app.plus500.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:29.898111105 CEST	192.168.2.4	1.1.1.1	0x9e7f	Standard query (0)	app.plus500.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:30.339215040 CEST	192.168.2.4	1.1.1.1	0x23ce	Standard query (0)	appleid.cdn-apple.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:30.339523077 CEST	192.168.2.4	1.1.1.1	0x8017	Standard query (0)	appleid.cdn-apple.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:31.031054020 CEST	192.168.2.4	1.1.1.1	0x5c6e	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:31.031514883 CEST	192.168.2.4	1.1.1.1	0xb5db	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:32.627937078 CEST	192.168.2.4	1.1.1.1	0xa4ff	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:32.628051043 CEST	192.168.2.4	1.1.1.1	0xb7f0	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:32.631438971 CEST	192.168.2.4	1.1.1.1	0x307a	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:32.631630898 CEST	192.168.2.4	1.1.1.1	0xa64f	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 26, 2024 20:33:32.777507067 CEST	192.168.2.4	1.1.1.1	0xe5ee	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:32.777761936 CEST	192.168.2.4	1.1.1.1	0xfa10	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:34.186964035 CEST	192.168.2.4	1.1.1.1	0x4464	Standard query (0)	usermatch.krxd.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:34.187105894 CEST	192.168.2.4	1.1.1.1	0xf90d	Standard query (0)	usermatch.krxd.net	65	IN (0x0001)	false
Apr 26, 2024 20:33:34.316163063 CEST	192.168.2.4	1.1.1.1	0x6724	Standard query (0)	usermatch.krxd.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:35.603631020 CEST	192.168.2.4	1.1.1.1	0xdcdf	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:35.603991985 CEST	192.168.2.4	1.1.1.1	0xaae5	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:36.238522053 CEST	192.168.2.4	1.1.1.1	0xaffa	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:36.238923073 CEST	192.168.2.4	1.1.1.1	0xd372	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 26, 2024 20:33:36.687390089 CEST	192.168.2.4	1.1.1.1	0x5498	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:36.687484980 CEST	192.168.2.4	1.1.1.1	0xf533	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 20:32:05.669004917 CEST	1.1.1.1	192.168.2.4	0x8a03	No error (0)	1movieshd.cc		104.21.22.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:05.669004917 CEST	1.1.1.1	192.168.2.4	0x8a03	No error (0)	1movieshd.cc		172.67.203.85	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:05.669055939 CEST	1.1.1.1	192.168.2.4	0x79be	No error (0)	1movieshd.cc			65	IN (0x0001)	false
Apr 26, 2024 20:32:06.856144905 CEST	1.1.1.1	192.168.2.4	0x6714	No error (0)	1movieshd.cc			65	IN (0x0001)	false
Apr 26, 2024 20:32:06.914123058 CEST	1.1.1.1	192.168.2.4	0xe21e	No error (0)	1movieshd.cc		172.67.203.85	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:06.914123058 CEST	1.1.1.1	192.168.2.4	0xe21e	No error (0)	1movieshd.cc		104.21.22.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:06.916424990 CEST	1.1.1.1	192.168.2.4	0x6e3b	No error (0)	1movieshd.cc			65	IN (0x0001)	false
Apr 26, 2024 20:32:06.921843052 CEST	1.1.1.1	192.168.2.4	0x60ea	No error (0)	1movieshd.cc		104.21.22.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:06.921843052 CEST	1.1.1.1	192.168.2.4	0x60ea	No error (0)	1movieshd.cc		172.67.203.85	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:08.061095953 CEST	1.1.1.1	192.168.2.4	0x5964	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:08.061095953 CEST	1.1.1.1	192.168.2.4	0x5964	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:08.062069893 CEST	1.1.1.1	192.168.2.4	0x2d96	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:08.062201023 CEST	1.1.1.1	192.168.2.4	0x3e36	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:08.063291073 CEST	1.1.1.1	192.168.2.4	0xf43f	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:08.067122936 CEST	1.1.1.1	192.168.2.4	0x305f	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:08.067122936 CEST	1.1.1.1	192.168.2.4	0x305f	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:08.068330050 CEST	1.1.1.1	192.168.2.4	0x9b16	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:08.907649994 CEST	1.1.1.1	192.168.2.4	0xbe09	No error (0)	www.google.com		142.250.64.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:08.908257008 CEST	1.1.1.1	192.168.2.4	0x8195	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:11.449237108 CEST	1.1.1.1	192.168.2.4	0xc375	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:11.449237108 CEST	1.1.1.1	192.168.2.4	0xc375	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:11.451351881 CEST	1.1.1.1	192.168.2.4	0xf795	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:11.453712940 CEST	1.1.1.1	192.168.2.4	0xc0ac	No error (0)	eephaush.com		139.45.197.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.216958046 CEST	1.1.1.1	192.168.2.4	0x9a83	No error (0)	1movieshd.cc		104.21.22.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.216958046 CEST	1.1.1.1	192.168.2.4	0x9a83	No error (0)	1movieshd.cc		172.67.203.85	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.222887993 CEST	1.1.1.1	192.168.2.4	0x61aa	No error (0)	1movieshd.cc			65	IN (0x0001)	false
Apr 26, 2024 20:32:12.318768024 CEST	1.1.1.1	192.168.2.4	0x53c7	No error (0)	platform-api.sharethis.com		18.64.174.59	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.318768024 CEST	1.1.1.1	192.168.2.4	0x53c7	No error (0)	platform-api.sharethis.com		18.64.174.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.318768024 CEST	1.1.1.1	192.168.2.4	0x53c7	No error (0)	platform-api.sharethis.com		18.64.174.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.318768024 CEST	1.1.1.1	192.168.2.4	0x53c7	No error (0)	platform-api.sharethis.com		18.64.174.125	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.602130890 CEST	1.1.1.1	192.168.2.4	0x599	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.604846954 CEST	1.1.1.1	192.168.2.4	0xffe7	No error (0)	yonmewon.com		139.45.197.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.725600958 CEST	1.1.1.1	192.168.2.4	0xb055	No error (0)	eephaush.com		139.45.197.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.731765032 CEST	1.1.1.1	192.168.2.4	0xbefa	No error (0)	sr7pv7n5x.com		172.240.83.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.731765032 CEST	1.1.1.1	192.168.2.4	0xbefa	No error (0)	sr7pv7n5x.com		172.240.83.22	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:12.731765032 CEST	1.1.1.1	192.168.2.4	0xbefa	No error (0)	sr7pv7n5x.com		172.240.83.20	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:17.336417913 CEST	1.1.1.1	192.168.2.4	0x9d9b	No error (0)	rndhaunteran.com		139.45.197.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:17.724980116 CEST	1.1.1.1	192.168.2.4	0x21d0	No error (0)	buttons-config.sharethis.com	d2znr2yi078d75.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:17.724980116 CEST	1.1.1.1	192.168.2.4	0x21d0	No error (0)	d2znr2yi078d75.cloudfront.net		13.226.52.128	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:17.724980116 CEST	1.1.1.1	192.168.2.4	0x21d0	No error (0)	d2znr2yi078d75.cloudfront.net		13.226.52.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:17.724980116 CEST	1.1.1.1	192.168.2.4	0x21d0	No error (0)	d2znr2yi078d75.cloudfront.net		13.226.52.10	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:17.724980116 CEST	1.1.1.1	192.168.2.4	0x21d0	No error (0)	d2znr2yi078d75.cloudfront.net		13.226.52.77	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:17.725502014 CEST	1.1.1.1	192.168.2.4	0x491f	No error (0)	buttons-config.sharethis.com	d2znr2yi078d75.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:17.727591991 CEST	1.1.1.1	192.168.2.4	0x6cc7	No error (0)	l.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:17.727591991 CEST	1.1.1.1	192.168.2.4	0x6cc7	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.16.63.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:17.727591991 CEST	1.1.1.1	192.168.2.4	0x6cc7	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.19.205.32	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:17.727591991 CEST	1.1.1.1	192.168.2.4	0x6cc7	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.225.2.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:17.727644920 CEST	1.1.1.1	192.168.2.4	0x5fdc	No error (0)	l.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:19.840338945 CEST	1.1.1.1	192.168.2.4	0xfaf3	No error (0)	platform-cdn.sharethis.com	d3oiwf0xhhk8m1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:19.843249083 CEST	1.1.1.1	192.168.2.4	0x5448	No error (0)	platform-cdn.sharethis.com	d3oiwf0xhhk8m1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:19.843249083 CEST	1.1.1.1	192.168.2.4	0x5448	No error (0)	d3oiwf0xhhk8m1.cloudfront.net		108.156.83.74	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:19.843249083 CEST	1.1.1.1	192.168.2.4	0x5448	No error (0)	d3oiwf0xhhk8m1.cloudfront.net		108.156.83.129	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:19.843249083 CEST	1.1.1.1	192.168.2.4	0x5448	No error (0)	d3oiwf0xhhk8m1.cloudfront.net		108.156.83.83	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:19.843249083 CEST	1.1.1.1	192.168.2.4	0x5448	No error (0)	d3oiwf0xhhk8m1.cloudfront.net		108.156.83.9	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.360006094 CEST	1.1.1.1	192.168.2.4	0xe9bc	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.385430098 CEST	1.1.1.1	192.168.2.4	0x430c	No error (0)	l.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:20.385706902 CEST	1.1.1.1	192.168.2.4	0x817b	No error (0)	l.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:20.385706902 CEST	1.1.1.1	192.168.2.4	0x817b	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.16.63.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.385706902 CEST	1.1.1.1	192.168.2.4	0x817b	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.19.205.32	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.385706902 CEST	1.1.1.1	192.168.2.4	0x817b	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.225.2.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.520148993 CEST	1.1.1.1	192.168.2.4	0xcb3c	No error (0)	platform-cdn.sharethis.com	d3oiwf0xhhk8m1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:20.520148993 CEST	1.1.1.1	192.168.2.4	0xcb3c	No error (0)	d3oiwf0xhhk8m1.cloudfront.net		108.156.83.9	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.520148993 CEST	1.1.1.1	192.168.2.4	0xcb3c	No error (0)	d3oiwf0xhhk8m1.cloudfront.net		108.156.83.74	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.520148993 CEST	1.1.1.1	192.168.2.4	0xcb3c	No error (0)	d3oiwf0xhhk8m1.cloudfront.net		108.156.83.83	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.520148993 CEST	1.1.1.1	192.168.2.4	0xcb3c	No error (0)	d3oiwf0xhhk8m1.cloudfront.net		108.156.83.129	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.521482944 CEST	1.1.1.1	192.168.2.4	0x6513	No error (0)	platform-cdn.sharethis.com	d3oiwf0xhhk8m1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:20.638828993 CEST	1.1.1.1	192.168.2.4	0x5d41	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:20.639420033 CEST	1.1.1.1	192.168.2.4	0x8668	No error (0)	count-server.sharethis.com		13.226.52.40	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.639420033 CEST	1.1.1.1	192.168.2.4	0x8668	No error (0)	count-server.sharethis.com		13.226.52.36	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.639420033 CEST	1.1.1.1	192.168.2.4	0x8668	No error (0)	count-server.sharethis.com		13.226.52.73	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.639420033 CEST	1.1.1.1	192.168.2.4	0x8668	No error (0)	count-server.sharethis.com		13.226.52.4	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:20.639642000 CEST	1.1.1.1	192.168.2.4	0xbc67	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:21.369347095 CEST	1.1.1.1	192.168.2.4	0x60e8	No error (0)	bcp.crwdcntrl.net		52.20.151.97	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:21.369347095 CEST	1.1.1.1	192.168.2.4	0x60e8	No error (0)	bcp.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:21.369347095 CEST	1.1.1.1	192.168.2.4	0x60e8	No error (0)	bcp.crwdcntrl.net		3.234.91.248	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:21.369347095 CEST	1.1.1.1	192.168.2.4	0x60e8	No error (0)	bcp.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:21.369347095 CEST	1.1.1.1	192.168.2.4	0x60e8	No error (0)	bcp.crwdcntrl.net		54.91.74.173	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:21.369347095 CEST	1.1.1.1	192.168.2.4	0x60e8	No error (0)	bcp.crwdcntrl.net		34.196.226.77	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:21.369347095 CEST	1.1.1.1	192.168.2.4	0x60e8	No error (0)	bcp.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:21.369347095 CEST	1.1.1.1	192.168.2.4	0x60e8	No error (0)	bcp.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:21.442924023 CEST	1.1.1.1	192.168.2.4	0xcac4	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:21.465496063 CEST	1.1.1.1	192.168.2.4	0x1ce3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:21.465496063 CEST	1.1.1.1	192.168.2.4	0x1ce3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:21.473335981 CEST	1.1.1.1	192.168.2.4	0x6b78	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:23.942941904 CEST	1.1.1.1	192.168.2.4	0x7fec	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:23.944053888 CEST	1.1.1.1	192.168.2.4	0xf7f6	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:23.944053888 CEST	1.1.1.1	192.168.2.4	0xf7f6	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.16.63.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:23.944053888 CEST	1.1.1.1	192.168.2.4	0xf7f6	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.225.2.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:23.944053888 CEST	1.1.1.1	192.168.2.4	0xf7f6	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.19.205.32	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:24.507596970 CEST	1.1.1.1	192.168.2.4	0xe3cd	No error (0)	bcp.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:24.507596970 CEST	1.1.1.1	192.168.2.4	0xe3cd	No error (0)	bcp.crwdcntrl.net		3.234.91.248	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:24.507596970 CEST	1.1.1.1	192.168.2.4	0xe3cd	No error (0)	bcp.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:24.507596970 CEST	1.1.1.1	192.168.2.4	0xe3cd	No error (0)	bcp.crwdcntrl.net		54.91.74.173	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:24.507596970 CEST	1.1.1.1	192.168.2.4	0xe3cd	No error (0)	bcp.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:24.507596970 CEST	1.1.1.1	192.168.2.4	0xe3cd	No error (0)	bcp.crwdcntrl.net		44.206.188.238	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:24.507596970 CEST	1.1.1.1	192.168.2.4	0xe3cd	No error (0)	bcp.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:24.507596970 CEST	1.1.1.1	192.168.2.4	0xe3cd	No error (0)	bcp.crwdcntrl.net		52.20.151.97	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.219052076 CEST	1.1.1.1	192.168.2.4	0x2875	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.219327927 CEST	1.1.1.1	192.168.2.4	0x54aa	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.219327927 CEST	1.1.1.1	192.168.2.4	0x54aa	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.19.205.32	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.219327927 CEST	1.1.1.1	192.168.2.4	0x54aa	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.225.2.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.219327927 CEST	1.1.1.1	192.168.2.4	0x54aa	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.16.63.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.311800003 CEST	1.1.1.1	192.168.2.4	0x3324	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.311800003 CEST	1.1.1.1	192.168.2.4	0x3324	No error (0)	loadus.tm.ssl.exelator.com	us-central.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.311800003 CEST	1.1.1.1	192.168.2.4	0x3324	No error (0)	us-central.load.exelator.com	load-usw2.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.311800003 CEST	1.1.1.1	192.168.2.4	0x3324	No error (0)	load-usw2.exelator.com		44.235.243.161	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.312966108 CEST	1.1.1.1	192.168.2.4	0xc4aa	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.312966108 CEST	1.1.1.1	192.168.2.4	0xc4aa	No error (0)	loadus.tm.ssl.exelator.com	us-central.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.312966108 CEST	1.1.1.1	192.168.2.4	0xc4aa	No error (0)	us-central.load.exelator.com	load-use1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.314984083 CEST	1.1.1.1	192.168.2.4	0x8078	No error (0)	bcp.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.314984083 CEST	1.1.1.1	192.168.2.4	0x8078	No error (0)	bcp.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.314984083 CEST	1.1.1.1	192.168.2.4	0x8078	No error (0)	bcp.crwdcntrl.net		52.20.151.97	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.314984083 CEST	1.1.1.1	192.168.2.4	0x8078	No error (0)	bcp.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.314984083 CEST	1.1.1.1	192.168.2.4	0x8078	No error (0)	bcp.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.314984083 CEST	1.1.1.1	192.168.2.4	0x8078	No error (0)	bcp.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.314984083 CEST	1.1.1.1	192.168.2.4	0x8078	No error (0)	bcp.crwdcntrl.net		3.234.91.248	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.314984083 CEST	1.1.1.1	192.168.2.4	0x8078	No error (0)	bcp.crwdcntrl.net		34.196.226.77	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.316880941 CEST	1.1.1.1	192.168.2.4	0xd6b3	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.316880941 CEST	1.1.1.1	192.168.2.4	0xd6b3	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.316880941 CEST	1.1.1.1	192.168.2.4	0xd6b3	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.316880941 CEST	1.1.1.1	192.168.2.4	0xd6b3	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.318686962 CEST	1.1.1.1	192.168.2.4	0xc6e2	No error (0)	ps.eyeota.net		3.232.64.79	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.320390940 CEST	1.1.1.1	192.168.2.4	0x2c14	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.328906059 CEST	1.1.1.1	192.168.2.4	0xa48d	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.328906059 CEST	1.1.1.1	192.168.2.4	0xa48d	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.328906059 CEST	1.1.1.1	192.168.2.4	0xa48d	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.328906059 CEST	1.1.1.1	192.168.2.4	0xa48d	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.328906059 CEST	1.1.1.1	192.168.2.4	0xa48d	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:25.330064058 CEST	1.1.1.1	192.168.2.4	0x71ca	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.330064058 CEST	1.1.1.1	192.168.2.4	0x71ca	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:25.330064058 CEST	1.1.1.1	192.168.2.4	0x71ca	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:27.966371059 CEST	1.1.1.1	192.168.2.4	0x4eea	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:27.966835976 CEST	1.1.1.1	192.168.2.4	0x86b6	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:27.966835976 CEST	1.1.1.1	192.168.2.4	0x86b6	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:27.966835976 CEST	1.1.1.1	192.168.2.4	0x86b6	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:27.967051983 CEST	1.1.1.1	192.168.2.4	0xbeda	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:27.967051983 CEST	1.1.1.1	192.168.2.4	0xbeda	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:27.967051983 CEST	1.1.1.1	192.168.2.4	0xbeda	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:27.967051983 CEST	1.1.1.1	192.168.2.4	0xbeda	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:27.967051983 CEST	1.1.1.1	192.168.2.4	0xbeda	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:27.967940092 CEST	1.1.1.1	192.168.2.4	0x6185	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:27.967940092 CEST	1.1.1.1	192.168.2.4	0x6185	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.19.205.32	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:27.967940092 CEST	1.1.1.1	192.168.2.4	0x6185	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.16.63.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:27.967940092 CEST	1.1.1.1	192.168.2.4	0x6185	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.225.2.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:27.968931913 CEST	1.1.1.1	192.168.2.4	0x2737	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:30.319423914 CEST	1.1.1.1	192.168.2.4	0x93da	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.706603050 CEST	1.1.1.1	192.168.2.4	0x8daa	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:33.706603050 CEST	1.1.1.1	192.168.2.4	0x8daa	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:33.706962109 CEST	1.1.1.1	192.168.2.4	0x4b45	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:33.706962109 CEST	1.1.1.1	192.168.2.4	0x4b45	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.709064007 CEST	1.1.1.1	192.168.2.4	0xafb7	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.710453033 CEST	1.1.1.1	192.168.2.4	0x45db	No error (0)	visitor.fiftyt.com		35.201.96.126	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.710609913 CEST	1.1.1.1	192.168.2.4	0x1a3e	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:33.711802006 CEST	1.1.1.1	192.168.2.4	0x8d39	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:33.718317032 CEST	1.1.1.1	192.168.2.4	0xa557	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:33.718317032 CEST	1.1.1.1	192.168.2.4	0xa557	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		18.216.131.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.718317032 CEST	1.1.1.1	192.168.2.4	0xa557	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.134.135.3	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.718317032 CEST	1.1.1.1	192.168.2.4	0xa557	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		18.119.20.139	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:33.718596935 CEST	1.1.1.1	192.168.2.4	0x7fa4	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:34.859412909 CEST	1.1.1.1	192.168.2.4	0x7bc7	No error (0)	eephaush.com		139.45.197.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:34.889221907 CEST	1.1.1.1	192.168.2.4	0x5712	No error (0)	tzegilo.com		104.21.11.245	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:34.889221907 CEST	1.1.1.1	192.168.2.4	0x5712	No error (0)	tzegilo.com		172.67.193.52	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:34.889655113 CEST	1.1.1.1	192.168.2.4	0xc1ec	No error (0)	tzegilo.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:35.298284054 CEST	1.1.1.1	192.168.2.4	0x36a4	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:35.581834078 CEST	1.1.1.1	192.168.2.4	0x32b1	No error (0)	tags.bkrtx.com	wildcard.bkrtx.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:35.582982063 CEST	1.1.1.1	192.168.2.4	0xf532	No error (0)	tags.bkrtx.com	wildcard.bkrtx.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:35.613711119 CEST	1.1.1.1	192.168.2.4	0x154a	No error (0)	flerap.com		139.45.195.254	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:35.615313053 CEST	1.1.1.1	192.168.2.4	0x7b00	No error (0)	fleraprt.com		139.45.195.254	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:35.624069929 CEST	1.1.1.1	192.168.2.4	0x25f3	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:35.624069929 CEST	1.1.1.1	192.168.2.4	0x25f3	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:35.625804901 CEST	1.1.1.1	192.168.2.4	0x156f	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:35.625804901 CEST	1.1.1.1	192.168.2.4	0x156f	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:35.739173889 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	datatechonert.com		37.48.68.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.233589888 CEST	1.1.1.1	192.168.2.4	0xe66a	No error (0)	yonmewon.com		139.45.197.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.234622002 CEST	1.1.1.1	192.168.2.4	0x3445	No error (0)	my.rtmark.net		139.45.195.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.456033945 CEST	1.1.1.1	192.168.2.4	0xf626	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:36.456846952 CEST	1.1.1.1	192.168.2.4	0xb420	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:36.840753078 CEST	1.1.1.1	192.168.2.4	0xbd55	No error (0)	www.google.com		192.178.50.68	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.841069937 CEST	1.1.1.1	192.168.2.4	0xaa7a	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:36.845206976 CEST	1.1.1.1	192.168.2.4	0xb83	No error (0)	graph.facebook.com	star.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:36.845206976 CEST	1.1.1.1	192.168.2.4	0xb83	No error (0)	star.c10r.facebook.com		157.240.14.15	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.845575094 CEST	1.1.1.1	192.168.2.4	0xffbc	No error (0)	graph.facebook.com	star.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:36.845575094 CEST	1.1.1.1	192.168.2.4	0xffbc	No error (0)	star.c10r.facebook.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:36.845575094 CEST	1.1.1.1	192.168.2.4	0xffbc	No error (0)	star.c10r.facebook.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:36.971976995 CEST	1.1.1.1	192.168.2.4	0x711d	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:36.971976995 CEST	1.1.1.1	192.168.2.4	0x711d	No error (0)	scontent.xx.fbcdn.net		157.240.14.19	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.972002983 CEST	1.1.1.1	192.168.2.4	0xa78d	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:36.973726034 CEST	1.1.1.1	192.168.2.4	0xc6e	No error (0)	static.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:36.973726034 CEST	1.1.1.1	192.168.2.4	0xc6e	No error (0)	static.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:37.110094070 CEST	1.1.1.1	192.168.2.4	0xa54a	No error (0)	img.1movieshd.cc		172.67.203.85	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:37.110094070 CEST	1.1.1.1	192.168.2.4	0xa54a	No error (0)	img.1movieshd.cc		104.21.22.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:37.146270990 CEST	1.1.1.1	192.168.2.4	0x96d1	No error (0)	img.1movieshd.cc			65	IN (0x0001)	false
Apr 26, 2024 20:32:37.352581978 CEST	1.1.1.1	192.168.2.4	0xbf3f	No error (0)	datatechonert.com		37.48.68.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:37.648897886 CEST	1.1.1.1	192.168.2.4	0xe678	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:37.648897886 CEST	1.1.1.1	192.168.2.4	0xe678	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:39.441071987 CEST	1.1.1.1	192.168.2.4	0x8ca4	No error (0)	valueclick.cc			65	IN (0x0001)	false
Apr 26, 2024 20:32:39.441085100 CEST	1.1.1.1	192.168.2.4	0x51a	No error (0)	valueclick.cc		172.67.195.52	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:39.441085100 CEST	1.1.1.1	192.168.2.4	0x51a	No error (0)	valueclick.cc		104.21.92.146	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:39.540424109 CEST	1.1.1.1	192.168.2.4	0xa40c	No error (0)	bitpanda.pxf.io		35.201.76.231	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:39.766077995 CEST	1.1.1.1	192.168.2.4	0xee66	No error (0)	img.1movieshd.cc		104.21.22.71	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:39.766077995 CEST	1.1.1.1	192.168.2.4	0xee66	No error (0)	img.1movieshd.cc		172.67.203.85	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:39.767015934 CEST	1.1.1.1	192.168.2.4	0xde8a	No error (0)	img.1movieshd.cc			65	IN (0x0001)	false
Apr 26, 2024 20:32:40.400616884 CEST	1.1.1.1	192.168.2.4	0x484f	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:40.400616884 CEST	1.1.1.1	192.168.2.4	0x484f	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:40.400616884 CEST	1.1.1.1	192.168.2.4	0x484f	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:40.400616884 CEST	1.1.1.1	192.168.2.4	0x484f	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:40.400616884 CEST	1.1.1.1	192.168.2.4	0x484f	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:40.401065111 CEST	1.1.1.1	192.168.2.4	0xf73	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:40.793941021 CEST	1.1.1.1	192.168.2.4	0x7344	No error (0)	www.ojrq.net		34.95.127.121	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.946846962 CEST	1.1.1.1	192.168.2.4	0x94e1	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:42.947387934 CEST	1.1.1.1	192.168.2.4	0xe0b2	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:42.947387934 CEST	1.1.1.1	192.168.2.4	0xe0b2	No error (0)	idaas-ext.cph.liveintent.com		3.89.179.162	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.947387934 CEST	1.1.1.1	192.168.2.4	0xe0b2	No error (0)	idaas-ext.cph.liveintent.com		34.233.65.26	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.947387934 CEST	1.1.1.1	192.168.2.4	0xe0b2	No error (0)	idaas-ext.cph.liveintent.com		44.219.73.112	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.947387934 CEST	1.1.1.1	192.168.2.4	0xe0b2	No error (0)	idaas-ext.cph.liveintent.com		54.82.233.250	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.947387934 CEST	1.1.1.1	192.168.2.4	0xe0b2	No error (0)	idaas-ext.cph.liveintent.com		107.20.165.138	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.947387934 CEST	1.1.1.1	192.168.2.4	0xe0b2	No error (0)	idaas-ext.cph.liveintent.com		204.236.219.255	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.947387934 CEST	1.1.1.1	192.168.2.4	0xe0b2	No error (0)	idaas-ext.cph.liveintent.com		3.237.57.79	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.947387934 CEST	1.1.1.1	192.168.2.4	0xe0b2	No error (0)	idaas-ext.cph.liveintent.com		34.206.227.129	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.950052977 CEST	1.1.1.1	192.168.2.4	0xf50b	No error (0)	ws.rqtrk.eu		51.222.241.100	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.950052977 CEST	1.1.1.1	192.168.2.4	0xf50b	No error (0)	ws.rqtrk.eu		51.222.241.106	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:42.950052977 CEST	1.1.1.1	192.168.2.4	0xf50b	No error (0)	ws.rqtrk.eu		51.222.241.145	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:43.278990984 CEST	1.1.1.1	192.168.2.4	0x5783	No error (0)	www.bitpanda.com		104.18.33.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:43.278990984 CEST	1.1.1.1	192.168.2.4	0x5783	No error (0)	www.bitpanda.com		172.64.154.186	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:43.279961109 CEST	1.1.1.1	192.168.2.4	0xc692	No error (0)	www.bitpanda.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:44.328600883 CEST	1.1.1.1	192.168.2.4	0x2e82	No error (0)	www.googleoptimize.com		142.250.189.142	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.329138994 CEST	1.1.1.1	192.168.2.4	0x2826	No error (0)	code.highcharts.com		104.18.8.9	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.329138994 CEST	1.1.1.1	192.168.2.4	0x2826	No error (0)	code.highcharts.com		104.18.9.9	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.330621004 CEST	1.1.1.1	192.168.2.4	0xa810	No error (0)	code.highcharts.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:44.330745935 CEST	1.1.1.1	192.168.2.4	0x93fe	No error (0)	cdn.bitpanda.com		104.18.33.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.330745935 CEST	1.1.1.1	192.168.2.4	0x93fe	No error (0)	cdn.bitpanda.com		172.64.154.186	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.330965996 CEST	1.1.1.1	192.168.2.4	0x658e	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:44.330965996 CEST	1.1.1.1	192.168.2.4	0x658e	No error (0)	d296je7bbdd650.cloudfront.net		18.64.168.178	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.331459999 CEST	1.1.1.1	192.168.2.4	0xa6ad	No error (0)	cdn.bitpanda.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:44.332182884 CEST	1.1.1.1	192.168.2.4	0x4e7f	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:44.840560913 CEST	1.1.1.1	192.168.2.4	0xf830	No error (0)	d.turn.com	d.turncdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:44.840560913 CEST	1.1.1.1	192.168.2.4	0xf830	No error (0)	d.turncdn.com	d-iad1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:44.840560913 CEST	1.1.1.1	192.168.2.4	0xf830	No error (0)	d-iad1.turn.com	presentation-iad1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:44.840560913 CEST	1.1.1.1	192.168.2.4	0xf830	No error (0)	presentation-iad1.turn.com		69.194.242.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.841027975 CEST	1.1.1.1	192.168.2.4	0x4e8d	No error (0)	d.turn.com	d.turncdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:44.841027975 CEST	1.1.1.1	192.168.2.4	0x4e8d	No error (0)	d.turncdn.com	d-iad1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:44.841027975 CEST	1.1.1.1	192.168.2.4	0x4e8d	No error (0)	d-iad1.turn.com	presentation-iad1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:44.855542898 CEST	1.1.1.1	192.168.2.4	0xe63e	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:44.977624893 CEST	1.1.1.1	192.168.2.4	0x62fa	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:44.977665901 CEST	1.1.1.1	192.168.2.4	0xc3b2	No error (0)	www.google.com		192.178.50.68	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214395046 CEST	1.1.1.1	192.168.2.4	0xef97	No error (0)	pixel.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214395046 CEST	1.1.1.1	192.168.2.4	0xef97	No error (0)	pixel.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214395046 CEST	1.1.1.1	192.168.2.4	0xef97	No error (0)	pixel.onaudience.com		15.235.15.221	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214395046 CEST	1.1.1.1	192.168.2.4	0xef97	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214395046 CEST	1.1.1.1	192.168.2.4	0xef97	No error (0)	pixel.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214395046 CEST	1.1.1.1	192.168.2.4	0xef97	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214395046 CEST	1.1.1.1	192.168.2.4	0xef97	No error (0)	pixel.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214395046 CEST	1.1.1.1	192.168.2.4	0xef97	No error (0)	pixel.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214395046 CEST	1.1.1.1	192.168.2.4	0xef97	No error (0)	pixel.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214395046 CEST	1.1.1.1	192.168.2.4	0xef97	No error (0)	pixel.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214523077 CEST	1.1.1.1	192.168.2.4	0xcef	No error (0)	eus-api.ccgateway.net	ext-lb-aws-prod.ccgateway.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214523077 CEST	1.1.1.1	192.168.2.4	0xcef	No error (0)	ext-lb-aws-prod.ccgateway.net		18.212.140.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214523077 CEST	1.1.1.1	192.168.2.4	0xcef	No error (0)	ext-lb-aws-prod.ccgateway.net		3.237.175.195	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214523077 CEST	1.1.1.1	192.168.2.4	0xcef	No error (0)	ext-lb-aws-prod.ccgateway.net		52.91.215.149	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.214642048 CEST	1.1.1.1	192.168.2.4	0x3775	No error (0)	eus-api.ccgateway.net	ext-lb-aws-prod.ccgateway.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.216928959 CEST	1.1.1.1	192.168.2.4	0x357b	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.216928959 CEST	1.1.1.1	192.168.2.4	0x357b	No error (0)	gslb-2.demdex.net	edge-sae.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.216928959 CEST	1.1.1.1	192.168.2.4	0x357b	No error (0)	edge-sae.demdex.net	dcs-public-edge-sae-1366952363.sa-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.216928959 CEST	1.1.1.1	192.168.2.4	0x357b	No error (0)	dcs-public-edge-sae-1366952363.sa-east-1.elb.amazonaws.com		18.230.167.103	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.216928959 CEST	1.1.1.1	192.168.2.4	0x357b	No error (0)	dcs-public-edge-sae-1366952363.sa-east-1.elb.amazonaws.com		54.94.14.61	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.216928959 CEST	1.1.1.1	192.168.2.4	0x357b	No error (0)	dcs-public-edge-sae-1366952363.sa-east-1.elb.amazonaws.com		54.233.231.106	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.216928959 CEST	1.1.1.1	192.168.2.4	0x357b	No error (0)	dcs-public-edge-sae-1366952363.sa-east-1.elb.amazonaws.com		54.94.141.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.216928959 CEST	1.1.1.1	192.168.2.4	0x357b	No error (0)	dcs-public-edge-sae-1366952363.sa-east-1.elb.amazonaws.com		18.228.90.136	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.216928959 CEST	1.1.1.1	192.168.2.4	0x357b	No error (0)	dcs-public-edge-sae-1366952363.sa-east-1.elb.amazonaws.com		54.233.84.213	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.216928959 CEST	1.1.1.1	192.168.2.4	0x357b	No error (0)	dcs-public-edge-sae-1366952363.sa-east-1.elb.amazonaws.com		54.233.249.0	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.216928959 CEST	1.1.1.1	192.168.2.4	0x357b	No error (0)	dcs-public-edge-sae-1366952363.sa-east-1.elb.amazonaws.com		54.94.18.198	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.218149900 CEST	1.1.1.1	192.168.2.4	0xef86	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.218149900 CEST	1.1.1.1	192.168.2.4	0xef86	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.218149900 CEST	1.1.1.1	192.168.2.4	0xef86	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.218386889 CEST	1.1.1.1	192.168.2.4	0x71c4	No error (0)	map.go.affec.tv		35.169.4.189	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.218386889 CEST	1.1.1.1	192.168.2.4	0x71c4	No error (0)	map.go.affec.tv		18.208.103.149	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.222466946 CEST	1.1.1.1	192.168.2.4	0x1880	No error (0)	ib.mookie1.com	m.ib-ibi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.222466946 CEST	1.1.1.1	192.168.2.4	0x1880	No error (0)	m.ib-ibi.com		69.169.85.7	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.274044991 CEST	1.1.1.1	192.168.2.4	0xc298	No error (0)	ib.mookie1.com	m.ib-ibi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.901000023 CEST	1.1.1.1	192.168.2.4	0x57a6	No error (0)	cm.g.doubleclick.net		142.250.189.130	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.974011898 CEST	1.1.1.1	192.168.2.4	0x6ab2	No error (0)	match.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.974011898 CEST	1.1.1.1	192.168.2.4	0x6ab2	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.974488020 CEST	1.1.1.1	192.168.2.4	0xce5d	No error (0)	match.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.974488020 CEST	1.1.1.1	192.168.2.4	0xce5d	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:45.974488020 CEST	1.1.1.1	192.168.2.4	0xce5d	No error (0)	na-ice.360yield.com		18.211.29.223	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.974488020 CEST	1.1.1.1	192.168.2.4	0xce5d	No error (0)	na-ice.360yield.com		3.208.44.61	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.974488020 CEST	1.1.1.1	192.168.2.4	0xce5d	No error (0)	na-ice.360yield.com		44.198.149.171	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.974488020 CEST	1.1.1.1	192.168.2.4	0xce5d	No error (0)	na-ice.360yield.com		34.228.173.163	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.974488020 CEST	1.1.1.1	192.168.2.4	0xce5d	No error (0)	na-ice.360yield.com		44.215.237.174	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.974488020 CEST	1.1.1.1	192.168.2.4	0xce5d	No error (0)	na-ice.360yield.com		54.80.164.68	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.974488020 CEST	1.1.1.1	192.168.2.4	0xce5d	No error (0)	na-ice.360yield.com		3.219.176.158	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:45.974488020 CEST	1.1.1.1	192.168.2.4	0xce5d	No error (0)	na-ice.360yield.com		35.171.248.111	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:46.202858925 CEST	1.1.1.1	192.168.2.4	0x267a	No error (0)	ib.mookie1.com	m.ib-ibi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:46.202858925 CEST	1.1.1.1	192.168.2.4	0x267a	No error (0)	m.ib-ibi.com		64.58.232.180	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:46.250514030 CEST	1.1.1.1	192.168.2.4	0xfffd	No error (0)	ib.mookie1.com	m.ib-ibi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:48.557833910 CEST	1.1.1.1	192.168.2.4	0xdf9a	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:48.557929993 CEST	1.1.1.1	192.168.2.4	0x2d26	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:48.557929993 CEST	1.1.1.1	192.168.2.4	0x2d26	No error (0)	idaas6.cph.liveintent.com		44.215.14.95	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:48.557929993 CEST	1.1.1.1	192.168.2.4	0x2d26	No error (0)	idaas6.cph.liveintent.com		52.23.56.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:48.557929993 CEST	1.1.1.1	192.168.2.4	0x2d26	No error (0)	idaas6.cph.liveintent.com		34.227.19.233	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:48.569667101 CEST	1.1.1.1	192.168.2.4	0xc0c2	No error (0)	sr7pv7n5x.com		172.240.83.22	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:48.569667101 CEST	1.1.1.1	192.168.2.4	0xc0c2	No error (0)	sr7pv7n5x.com		172.240.83.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:48.569667101 CEST	1.1.1.1	192.168.2.4	0xc0c2	No error (0)	sr7pv7n5x.com		172.240.83.20	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:48.987837076 CEST	1.1.1.1	192.168.2.4	0xc418	No error (0)	geoip-js.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:48.989857912 CEST	1.1.1.1	192.168.2.4	0x221e	No error (0)	geoip-js.com		104.18.33.110	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:48.989857912 CEST	1.1.1.1	192.168.2.4	0x221e	No error (0)	geoip-js.com		172.64.154.146	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:49.179404974 CEST	1.1.1.1	192.168.2.4	0xc43a	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.123142958 CEST	1.1.1.1	192.168.2.4	0x2ee	No error (0)	bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com	s3-r-w.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:50.124927044 CEST	1.1.1.1	192.168.2.4	0xdf12	No error (0)	bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com	s3-r-w.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:50.124927044 CEST	1.1.1.1	192.168.2.4	0xdf12	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.218.29.128	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.124927044 CEST	1.1.1.1	192.168.2.4	0xdf12	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.218.90.208	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.124927044 CEST	1.1.1.1	192.168.2.4	0xdf12	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.218.0.120	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.124927044 CEST	1.1.1.1	192.168.2.4	0xdf12	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.218.28.160	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.124927044 CEST	1.1.1.1	192.168.2.4	0xdf12	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.218.102.40	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.124927044 CEST	1.1.1.1	192.168.2.4	0xdf12	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.92.19.154	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.124927044 CEST	1.1.1.1	192.168.2.4	0xdf12	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.218.89.88	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.124927044 CEST	1.1.1.1	192.168.2.4	0xdf12	No error (0)	s3-r-w.eu-west-1.amazonaws.com		3.5.71.121	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.152499914 CEST	1.1.1.1	192.168.2.4	0xfaf1	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:50.152499914 CEST	1.1.1.1	192.168.2.4	0xfaf1	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153381109 CEST	1.1.1.1	192.168.2.4	0x828b	No error (0)	ce.lijit.com	ce-ue1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153381109 CEST	1.1.1.1	192.168.2.4	0x828b	No error (0)	ce-ue1.lijit.com	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153381109 CEST	1.1.1.1	192.168.2.4	0x828b	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		107.20.88.0	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153381109 CEST	1.1.1.1	192.168.2.4	0x828b	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		54.81.49.146	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153381109 CEST	1.1.1.1	192.168.2.4	0x828b	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.213.50.86	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153381109 CEST	1.1.1.1	192.168.2.4	0x828b	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.198.5.111	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153381109 CEST	1.1.1.1	192.168.2.4	0x828b	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.230.201.142	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153381109 CEST	1.1.1.1	192.168.2.4	0x828b	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		34.195.106.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153381109 CEST	1.1.1.1	192.168.2.4	0x828b	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		3.229.158.192	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153381109 CEST	1.1.1.1	192.168.2.4	0x828b	No error (0)	raptor-prd-ue1-alb-1693497337.us-east-1.elb.amazonaws.com		18.205.228.34	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153800011 CEST	1.1.1.1	192.168.2.4	0xebf1	No error (0)	sync.crwdcntrl.net		34.196.226.77	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153800011 CEST	1.1.1.1	192.168.2.4	0xebf1	No error (0)	sync.crwdcntrl.net		3.234.91.248	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153800011 CEST	1.1.1.1	192.168.2.4	0xebf1	No error (0)	sync.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153800011 CEST	1.1.1.1	192.168.2.4	0xebf1	No error (0)	sync.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153800011 CEST	1.1.1.1	192.168.2.4	0xebf1	No error (0)	sync.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153800011 CEST	1.1.1.1	192.168.2.4	0xebf1	No error (0)	sync.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153800011 CEST	1.1.1.1	192.168.2.4	0xebf1	No error (0)	sync.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.153800011 CEST	1.1.1.1	192.168.2.4	0xebf1	No error (0)	sync.crwdcntrl.net		44.206.188.238	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.155603886 CEST	1.1.1.1	192.168.2.4	0xdb22	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.155603886 CEST	1.1.1.1	192.168.2.4	0xdb22	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.155603886 CEST	1.1.1.1	192.168.2.4	0xdb22	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.155603886 CEST	1.1.1.1	192.168.2.4	0xdb22	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.155603886 CEST	1.1.1.1	192.168.2.4	0xdb22	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.155603886 CEST	1.1.1.1	192.168.2.4	0xdb22	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.155603886 CEST	1.1.1.1	192.168.2.4	0xdb22	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.155603886 CEST	1.1.1.1	192.168.2.4	0xdb22	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.155603886 CEST	1.1.1.1	192.168.2.4	0xdb22	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.155603886 CEST	1.1.1.1	192.168.2.4	0xdb22	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.159187078 CEST	1.1.1.1	192.168.2.4	0xfe81	No error (0)	api.bitpanda.com		104.18.33.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.159187078 CEST	1.1.1.1	192.168.2.4	0xfe81	No error (0)	api.bitpanda.com		172.64.154.186	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.161721945 CEST	1.1.1.1	192.168.2.4	0xe109	No error (0)	api.bitpanda.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:50.181318045 CEST	1.1.1.1	192.168.2.4	0xab5a	No error (0)	ps.eyeota.net		52.55.144.0	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.186434984 CEST	1.1.1.1	192.168.2.4	0xa347	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:50.186764002 CEST	1.1.1.1	192.168.2.4	0xc963	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:50.186764002 CEST	1.1.1.1	192.168.2.4	0xc963	No error (0)	idaas6.cph.liveintent.com		44.215.14.95	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.186764002 CEST	1.1.1.1	192.168.2.4	0xc963	No error (0)	idaas6.cph.liveintent.com		34.227.19.233	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.186764002 CEST	1.1.1.1	192.168.2.4	0xc963	No error (0)	idaas6.cph.liveintent.com		52.23.56.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:50.187701941 CEST	1.1.1.1	192.168.2.4	0xc205	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:51.943836927 CEST	1.1.1.1	192.168.2.4	0x517b	No error (0)	starpassing.com		104.21.6.192	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:51.943836927 CEST	1.1.1.1	192.168.2.4	0x517b	No error (0)	starpassing.com		172.67.135.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:51.945496082 CEST	1.1.1.1	192.168.2.4	0x563f	No error (0)	starpassing.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:52.077476025 CEST	1.1.1.1	192.168.2.4	0xf6b1	No error (0)	cdn.bitpanda.com		104.18.33.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.077476025 CEST	1.1.1.1	192.168.2.4	0xf6b1	No error (0)	cdn.bitpanda.com		172.64.154.186	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.078352928 CEST	1.1.1.1	192.168.2.4	0x1232	No error (0)	cdn.bitpanda.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:52.500019073 CEST	1.1.1.1	192.168.2.4	0x76dc	No error (0)	bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com	s3-r-w.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:52.501820087 CEST	1.1.1.1	192.168.2.4	0xea1a	No error (0)	bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com	s3-r-w.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:52.501820087 CEST	1.1.1.1	192.168.2.4	0xea1a	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.92.0.210	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.501820087 CEST	1.1.1.1	192.168.2.4	0xea1a	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.218.118.82	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.501820087 CEST	1.1.1.1	192.168.2.4	0xea1a	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.218.29.40	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.501820087 CEST	1.1.1.1	192.168.2.4	0xea1a	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.92.4.42	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.501820087 CEST	1.1.1.1	192.168.2.4	0xea1a	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.92.4.18	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.501820087 CEST	1.1.1.1	192.168.2.4	0xea1a	No error (0)	s3-r-w.eu-west-1.amazonaws.com		3.5.68.224	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.501820087 CEST	1.1.1.1	192.168.2.4	0xea1a	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.218.61.216	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.501820087 CEST	1.1.1.1	192.168.2.4	0xea1a	No error (0)	s3-r-w.eu-west-1.amazonaws.com		52.218.120.234	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.941966057 CEST	1.1.1.1	192.168.2.4	0x5702	No error (0)	api.bitpanda.com		104.18.33.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.941966057 CEST	1.1.1.1	192.168.2.4	0x5702	No error (0)	api.bitpanda.com		172.64.154.186	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.944504023 CEST	1.1.1.1	192.168.2.4	0xb5e3	No error (0)	api.bitpanda.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:52.997068882 CEST	1.1.1.1	192.168.2.4	0xfb90	No error (0)	spl.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.997068882 CEST	1.1.1.1	192.168.2.4	0xfb90	No error (0)	spl.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.997068882 CEST	1.1.1.1	192.168.2.4	0xfb90	No error (0)	spl.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:52.997762918 CEST	1.1.1.1	192.168.2.4	0x8b58	No error (0)	spl.zeotap.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:53.019999027 CEST	1.1.1.1	192.168.2.4	0x8104	Name error (3)	ice.360yield.com	none	none	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.020689011 CEST	1.1.1.1	192.168.2.4	0xbd2f	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:53.100471020 CEST	1.1.1.1	192.168.2.4	0xdc64	No error (0)	onlinetopchoice.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:53.101777077 CEST	1.1.1.1	192.168.2.4	0xb530	No error (0)	onlinetopchoice.com		104.21.56.65	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.101777077 CEST	1.1.1.1	192.168.2.4	0xb530	No error (0)	onlinetopchoice.com		172.67.179.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.149286985 CEST	1.1.1.1	192.168.2.4	0x37b5	No error (0)	ice.360yield.com	na-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:53.149286985 CEST	1.1.1.1	192.168.2.4	0x37b5	No error (0)	na-ice.360yield.com		44.210.231.214	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.149286985 CEST	1.1.1.1	192.168.2.4	0x37b5	No error (0)	na-ice.360yield.com		44.206.156.187	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.149286985 CEST	1.1.1.1	192.168.2.4	0x37b5	No error (0)	na-ice.360yield.com		54.197.192.75	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.149286985 CEST	1.1.1.1	192.168.2.4	0x37b5	No error (0)	na-ice.360yield.com		34.205.44.85	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.149286985 CEST	1.1.1.1	192.168.2.4	0x37b5	No error (0)	na-ice.360yield.com		3.214.248.167	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.149286985 CEST	1.1.1.1	192.168.2.4	0x37b5	No error (0)	na-ice.360yield.com		3.210.4.162	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.149286985 CEST	1.1.1.1	192.168.2.4	0x37b5	No error (0)	na-ice.360yield.com		3.208.44.61	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.149286985 CEST	1.1.1.1	192.168.2.4	0x37b5	No error (0)	na-ice.360yield.com		54.235.229.237	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.381517887 CEST	1.1.1.1	192.168.2.4	0xf699	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:53.381517887 CEST	1.1.1.1	192.168.2.4	0xf699	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.239.225.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.381517887 CEST	1.1.1.1	192.168.2.4	0xf699	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.239.225.101	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.381517887 CEST	1.1.1.1	192.168.2.4	0xf699	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.239.225.115	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.381517887 CEST	1.1.1.1	192.168.2.4	0xf699	No error (0)	d20qwf0wrdtevy.cloudfront.net		18.239.225.97	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.382827044 CEST	1.1.1.1	192.168.2.4	0x4b5a	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:53.394094944 CEST	1.1.1.1	192.168.2.4	0xb30e	No error (0)	api5137.d41.co	ecf.d41.co		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:53.394094944 CEST	1.1.1.1	192.168.2.4	0xb30e	No error (0)	ecf.d41.co	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:53.394094944 CEST	1.1.1.1	192.168.2.4	0xb30e	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		3.225.96.121	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.394094944 CEST	1.1.1.1	192.168.2.4	0xb30e	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		52.200.221.249	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.394094944 CEST	1.1.1.1	192.168.2.4	0xb30e	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		23.20.59.107	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:53.396006107 CEST	1.1.1.1	192.168.2.4	0x4a6b	No error (0)	api5137.d41.co	ecf.d41.co		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:53.396006107 CEST	1.1.1.1	192.168.2.4	0x4a6b	No error (0)	ecf.d41.co	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:54.184998035 CEST	1.1.1.1	192.168.2.4	0xdfa1	No error (0)	starpassing.com		104.21.6.192	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:54.184998035 CEST	1.1.1.1	192.168.2.4	0xdfa1	No error (0)	starpassing.com		172.67.135.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:54.186039925 CEST	1.1.1.1	192.168.2.4	0xe238	No error (0)	starpassing.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:54.276618958 CEST	1.1.1.1	192.168.2.4	0x1b43	No error (0)	static.agkn.com	d10jk3zb4x05up.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:54.278785944 CEST	1.1.1.1	192.168.2.4	0xbd39	No error (0)	static.agkn.com	d10jk3zb4x05up.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:54.278785944 CEST	1.1.1.1	192.168.2.4	0xbd39	No error (0)	d10jk3zb4x05up.cloudfront.net		18.239.225.4	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:54.278785944 CEST	1.1.1.1	192.168.2.4	0xbd39	No error (0)	d10jk3zb4x05up.cloudfront.net		18.239.225.54	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:54.278785944 CEST	1.1.1.1	192.168.2.4	0xbd39	No error (0)	d10jk3zb4x05up.cloudfront.net		18.239.225.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:54.278785944 CEST	1.1.1.1	192.168.2.4	0xbd39	No error (0)	d10jk3zb4x05up.cloudfront.net		18.239.225.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:54.376877069 CEST	1.1.1.1	192.168.2.4	0xdfd9	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:55.834655046 CEST	1.1.1.1	192.168.2.4	0xc4d	No error (0)	www.plus500.com		172.64.154.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:55.834655046 CEST	1.1.1.1	192.168.2.4	0xc4d	No error (0)	www.plus500.com		104.18.33.187	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:55.835153103 CEST	1.1.1.1	192.168.2.4	0x6ad0	No error (0)	www.plus500.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:56.681957006 CEST	1.1.1.1	192.168.2.4	0x3089	No error (0)	static.agkn.com	d10jk3zb4x05up.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:56.681957006 CEST	1.1.1.1	192.168.2.4	0x3089	No error (0)	d10jk3zb4x05up.cloudfront.net		18.239.225.54	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:56.681957006 CEST	1.1.1.1	192.168.2.4	0x3089	No error (0)	d10jk3zb4x05up.cloudfront.net		18.239.225.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:56.681957006 CEST	1.1.1.1	192.168.2.4	0x3089	No error (0)	d10jk3zb4x05up.cloudfront.net		18.239.225.4	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:56.681957006 CEST	1.1.1.1	192.168.2.4	0x3089	No error (0)	d10jk3zb4x05up.cloudfront.net		18.239.225.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:56.682835102 CEST	1.1.1.1	192.168.2.4	0xfcda	No error (0)	static.agkn.com	d10jk3zb4x05up.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:56.689683914 CEST	1.1.1.1	192.168.2.4	0x526a	No error (0)	onlinetopchoice.com			65	IN (0x0001)	false
Apr 26, 2024 20:32:56.746403933 CEST	1.1.1.1	192.168.2.4	0xcc21	No error (0)	onlinetopchoice.com		104.21.56.65	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:56.746403933 CEST	1.1.1.1	192.168.2.4	0xcc21	No error (0)	onlinetopchoice.com		172.67.179.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.071351051 CEST	1.1.1.1	192.168.2.4	0x9570	No error (0)	match.prod.bidr.io		54.146.132.60	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.071351051 CEST	1.1.1.1	192.168.2.4	0x9570	No error (0)	match.prod.bidr.io		54.158.106.27	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.071351051 CEST	1.1.1.1	192.168.2.4	0x9570	No error (0)	match.prod.bidr.io		54.160.108.204	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.071351051 CEST	1.1.1.1	192.168.2.4	0x9570	No error (0)	match.prod.bidr.io		54.152.125.5	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.071351051 CEST	1.1.1.1	192.168.2.4	0x9570	No error (0)	match.prod.bidr.io		52.73.25.103	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.071351051 CEST	1.1.1.1	192.168.2.4	0x9570	No error (0)	match.prod.bidr.io		52.7.175.100	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.071351051 CEST	1.1.1.1	192.168.2.4	0x9570	No error (0)	match.prod.bidr.io		52.73.177.129	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.071351051 CEST	1.1.1.1	192.168.2.4	0x9570	No error (0)	match.prod.bidr.io		52.87.24.128	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.072000980 CEST	1.1.1.1	192.168.2.4	0x428d	No error (0)	ecf.d41.co	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:57.072000980 CEST	1.1.1.1	192.168.2.4	0x428d	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		52.200.221.249	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.072000980 CEST	1.1.1.1	192.168.2.4	0x428d	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		3.225.96.121	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.072000980 CEST	1.1.1.1	192.168.2.4	0x428d	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		23.20.59.107	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.085441113 CEST	1.1.1.1	192.168.2.4	0xabd5	No error (0)	ecf.d41.co	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:32:57.109361887 CEST	1.1.1.1	192.168.2.4	0x4593	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.109361887 CEST	1.1.1.1	192.168.2.4	0x4593	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.109361887 CEST	1.1.1.1	192.168.2.4	0x4593	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:32:57.109939098 CEST	1.1.1.1	192.168.2.4	0x3799	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Apr 26, 2024 20:33:00.972115040 CEST	1.1.1.1	192.168.2.4	0x5e5e	No error (0)	app.plus500.com	cs662.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:00.972115040 CEST	1.1.1.1	192.168.2.4	0x5e5e	No error (0)	cs662.adn.psicdn.net		152.195.55.165	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:00.973663092 CEST	1.1.1.1	192.168.2.4	0x22ae	No error (0)	app.plus500.com	cs662.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:00.992075920 CEST	1.1.1.1	192.168.2.4	0x4027	No error (0)	pixel.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:00.992075920 CEST	1.1.1.1	192.168.2.4	0x4027	No error (0)	pixel-origin.mathtag.com		216.200.232.249	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:00.992075920 CEST	1.1.1.1	192.168.2.4	0x4027	No error (0)	pixel-origin.mathtag.com		216.200.232.253	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:00.992075920 CEST	1.1.1.1	192.168.2.4	0x4027	No error (0)	pixel-origin.mathtag.com		74.121.140.211	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:00.993571997 CEST	1.1.1.1	192.168.2.4	0x65ae	No error (0)	pixel.mathtag.com	pixel-origin.mathtag.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:01.092515945 CEST	1.1.1.1	192.168.2.4	0xc9f	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:03.902755976 CEST	1.1.1.1	192.168.2.4	0x4364	No error (0)	cdn-app.plus500.com	cs488.wpc.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:03.903218031 CEST	1.1.1.1	192.168.2.4	0x1e8	No error (0)	cdn-app.plus500.com	cs488.wpc.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:03.903218031 CEST	1.1.1.1	192.168.2.4	0x1e8	No error (0)	cs488.wpc.psicdn.net		192.229.210.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.383023977 CEST	1.1.1.1	192.168.2.4	0xb544	No error (0)	ecf.d41.co	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:04.389636040 CEST	1.1.1.1	192.168.2.4	0x79c0	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.389636040 CEST	1.1.1.1	192.168.2.4	0x79c0	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.389636040 CEST	1.1.1.1	192.168.2.4	0x79c0	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.389736891 CEST	1.1.1.1	192.168.2.4	0x2b9b	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
Apr 26, 2024 20:33:04.391120911 CEST	1.1.1.1	192.168.2.4	0xc68a	No error (0)	pixel.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.391120911 CEST	1.1.1.1	192.168.2.4	0xc68a	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.391120911 CEST	1.1.1.1	192.168.2.4	0xc68a	No error (0)	pixel.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.391120911 CEST	1.1.1.1	192.168.2.4	0xc68a	No error (0)	pixel.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.391120911 CEST	1.1.1.1	192.168.2.4	0xc68a	No error (0)	pixel.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.391120911 CEST	1.1.1.1	192.168.2.4	0xc68a	No error (0)	pixel.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.391120911 CEST	1.1.1.1	192.168.2.4	0xc68a	No error (0)	pixel.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.391120911 CEST	1.1.1.1	192.168.2.4	0xc68a	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.391120911 CEST	1.1.1.1	192.168.2.4	0xc68a	No error (0)	pixel.onaudience.com		15.235.15.221	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.391120911 CEST	1.1.1.1	192.168.2.4	0xc68a	No error (0)	pixel.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.394347906 CEST	1.1.1.1	192.168.2.4	0xe5fc	No error (0)	ecf.d41.co	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:04.394347906 CEST	1.1.1.1	192.168.2.4	0xe5fc	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		3.225.96.121	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.394347906 CEST	1.1.1.1	192.168.2.4	0xe5fc	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		52.200.221.249	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:04.394347906 CEST	1.1.1.1	192.168.2.4	0xe5fc	No error (0)	vici-asg-prod-alb-2112236320.us-east-1.elb.amazonaws.com		23.20.59.107	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:06.453238010 CEST	1.1.1.1	192.168.2.4	0xf310	No error (0)	cdn.matomo.cloud		18.239.225.79	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:06.453238010 CEST	1.1.1.1	192.168.2.4	0xf310	No error (0)	cdn.matomo.cloud		18.239.225.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:06.453238010 CEST	1.1.1.1	192.168.2.4	0xf310	No error (0)	cdn.matomo.cloud		18.239.225.54	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:06.453238010 CEST	1.1.1.1	192.168.2.4	0xf310	No error (0)	cdn.matomo.cloud		18.239.225.112	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:06.456814051 CEST	1.1.1.1	192.168.2.4	0x4bc7	No error (0)	www.fndsda.net		87.230.104.210	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:08.228434086 CEST	1.1.1.1	192.168.2.4	0x4e5	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:08.228434086 CEST	1.1.1.1	192.168.2.4	0x4e5	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:08.228434086 CEST	1.1.1.1	192.168.2.4	0x4e5	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:08.228434086 CEST	1.1.1.1	192.168.2.4	0x4e5	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:08.228434086 CEST	1.1.1.1	192.168.2.4	0x4e5	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:08.228434086 CEST	1.1.1.1	192.168.2.4	0x4e5	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:08.228434086 CEST	1.1.1.1	192.168.2.4	0x4e5	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:08.228434086 CEST	1.1.1.1	192.168.2.4	0x4e5	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:08.228434086 CEST	1.1.1.1	192.168.2.4	0x4e5	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:08.228434086 CEST	1.1.1.1	192.168.2.4	0x4e5	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:09.378887892 CEST	1.1.1.1	192.168.2.4	0x8cae	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:09.379429102 CEST	1.1.1.1	192.168.2.4	0xa041	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:12.167139053 CEST	1.1.1.1	192.168.2.4	0xf9d3	No error (0)	rc.rlcdn.com	rc-ext-geo.rlcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:12.167139053 CEST	1.1.1.1	192.168.2.4	0xf9d3	No error (0)	rc-ext-geo.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:12.168454885 CEST	1.1.1.1	192.168.2.4	0x1b74	No error (0)	rc.rlcdn.com	rc-ext-geo.rlcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:12.379909039 CEST	1.1.1.1	192.168.2.4	0x558a	No error (0)	fleraprt.com		139.45.195.254	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:17.171914101 CEST	1.1.1.1	192.168.2.4	0x340d	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:17.171914101 CEST	1.1.1.1	192.168.2.4	0x340d	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:17.244323969 CEST	1.1.1.1	192.168.2.4	0x9c06	No error (0)	www.fndsda.net		87.230.104.210	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:18.514429092 CEST	1.1.1.1	192.168.2.4	0xe22	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:18.514429092 CEST	1.1.1.1	192.168.2.4	0xe22	No error (0)	image6v2.pubmnet.com	pugm-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:18.514429092 CEST	1.1.1.1	192.168.2.4	0xe22	No error (0)	pugm-vac.pubmnet.com		8.28.7.81	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:18.515038967 CEST	1.1.1.1	192.168.2.4	0x25cb	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:18.515038967 CEST	1.1.1.1	192.168.2.4	0x25cb	No error (0)	image6v2.pubmnet.com	pugm-nje1.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:18.787318945 CEST	1.1.1.1	192.168.2.4	0x6cf5	No error (0)	googleads.g.doubleclick.net		142.250.217.226	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:18.788933039 CEST	1.1.1.1	192.168.2.4	0x378d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 26, 2024 20:33:18.894392967 CEST	1.1.1.1	192.168.2.4	0x37af	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:18.894392967 CEST	1.1.1.1	192.168.2.4	0x37af	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:18.895175934 CEST	1.1.1.1	192.168.2.4	0xa2f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 26, 2024 20:33:19.089807987 CEST	1.1.1.1	192.168.2.4	0xd805	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:19.090487957 CEST	1.1.1.1	192.168.2.4	0x2e0d	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:19.146213055 CEST	1.1.1.1	192.168.2.4	0x263a	No error (0)	www.fndsda.net		87.230.104.210	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:20.552047968 CEST	1.1.1.1	192.168.2.4	0xcea7	No error (0)	www.fndsda.net		87.230.104.210	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:22.655823946 CEST	1.1.1.1	192.168.2.4	0xc9cf	No error (0)	l.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:22.655823946 CEST	1.1.1.1	192.168.2.4	0xc9cf	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.16.63.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:22.655823946 CEST	1.1.1.1	192.168.2.4	0xc9cf	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.19.205.32	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:22.655823946 CEST	1.1.1.1	192.168.2.4	0xc9cf	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.225.2.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:22.656462908 CEST	1.1.1.1	192.168.2.4	0xc14a	No error (0)	l.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:22.855905056 CEST	1.1.1.1	192.168.2.4	0x82ca	No error (0)	sr7pv7n5x.com		172.240.83.21	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:22.855905056 CEST	1.1.1.1	192.168.2.4	0x82ca	No error (0)	sr7pv7n5x.com		172.240.83.20	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:22.855905056 CEST	1.1.1.1	192.168.2.4	0x82ca	No error (0)	sr7pv7n5x.com		172.240.83.22	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:22.879446983 CEST	1.1.1.1	192.168.2.4	0xd763	No error (0)	www.google.com		142.250.217.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:22.879679918 CEST	1.1.1.1	192.168.2.4	0x67e1	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 20:33:22.910334110 CEST	1.1.1.1	192.168.2.4	0xd055	No error (0)	s.amazon-adsystem.com		52.46.143.56	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:25.602484941 CEST	1.1.1.1	192.168.2.4	0x75dd	No error (0)	trade.plus500.com	cs662.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:25.602484941 CEST	1.1.1.1	192.168.2.4	0x75dd	No error (0)	cs662.adn.psicdn.net		152.195.55.165	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:25.603696108 CEST	1.1.1.1	192.168.2.4	0x1538	No error (0)	trade.plus500.com	cs662.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:25.760941029 CEST	1.1.1.1	192.168.2.4	0x134b	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:25.771855116 CEST	1.1.1.1	192.168.2.4	0xbe45	No error (0)	l.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:25.771855116 CEST	1.1.1.1	192.168.2.4	0xbe45	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.19.205.32	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:25.771855116 CEST	1.1.1.1	192.168.2.4	0xbe45	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.225.2.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:25.771855116 CEST	1.1.1.1	192.168.2.4	0xbe45	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.16.63.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:25.771950006 CEST	1.1.1.1	192.168.2.4	0x3d2f	No error (0)	l.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:25.773471117 CEST	1.1.1.1	192.168.2.4	0x429a	No error (0)	www.google.com		142.250.189.132	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:25.774666071 CEST	1.1.1.1	192.168.2.4	0xf7de	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 20:33:26.061311007 CEST	1.1.1.1	192.168.2.4	0x39bb	No error (0)	buttons-config.sharethis.com	d2znr2yi078d75.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:26.062865019 CEST	1.1.1.1	192.168.2.4	0xad4d	No error (0)	buttons-config.sharethis.com	d2znr2yi078d75.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:26.062865019 CEST	1.1.1.1	192.168.2.4	0xad4d	No error (0)	d2znr2yi078d75.cloudfront.net		13.226.52.77	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:26.062865019 CEST	1.1.1.1	192.168.2.4	0xad4d	No error (0)	d2znr2yi078d75.cloudfront.net		13.226.52.84	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:26.062865019 CEST	1.1.1.1	192.168.2.4	0xad4d	No error (0)	d2znr2yi078d75.cloudfront.net		13.226.52.128	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:26.062865019 CEST	1.1.1.1	192.168.2.4	0xad4d	No error (0)	d2znr2yi078d75.cloudfront.net		13.226.52.10	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:26.204166889 CEST	1.1.1.1	192.168.2.4	0x77d	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:26.236622095 CEST	1.1.1.1	192.168.2.4	0x4531	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:26.908869028 CEST	1.1.1.1	192.168.2.4	0x88de	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:26.910024881 CEST	1.1.1.1	192.168.2.4	0x4f9	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:26.910024881 CEST	1.1.1.1	192.168.2.4	0x4f9	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.19.205.32	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:26.910024881 CEST	1.1.1.1	192.168.2.4	0x4f9	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.16.63.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:26.910024881 CEST	1.1.1.1	192.168.2.4	0x4f9	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.225.2.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:27.084683895 CEST	1.1.1.1	192.168.2.4	0xf954	No error (0)	www.google.com		142.250.217.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:27.085838079 CEST	1.1.1.1	192.168.2.4	0xac85	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 20:33:27.808155060 CEST	1.1.1.1	192.168.2.4	0xd6e5	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:27.808155060 CEST	1.1.1.1	192.168.2.4	0xd6e5	No error (0)	scontent.xx.fbcdn.net		157.240.14.19	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:27.808171034 CEST	1.1.1.1	192.168.2.4	0x66d8	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:27.833223104 CEST	1.1.1.1	192.168.2.4	0xe5ee	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:27.833739042 CEST	1.1.1.1	192.168.2.4	0x1cd	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:27.833739042 CEST	1.1.1.1	192.168.2.4	0x1cd	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.225.2.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:27.833739042 CEST	1.1.1.1	192.168.2.4	0x1cd	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.19.205.32	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:27.833739042 CEST	1.1.1.1	192.168.2.4	0x1cd	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.16.63.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:28.010086060 CEST	1.1.1.1	192.168.2.4	0xefaf	No error (0)	s.amazon-adsystem.com		52.46.128.147	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:28.162353039 CEST	1.1.1.1	192.168.2.4	0x2ebf	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:28.163464069 CEST	1.1.1.1	192.168.2.4	0x5d4f	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:28.165870905 CEST	1.1.1.1	192.168.2.4	0x4155	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:28.165870905 CEST	1.1.1.1	192.168.2.4	0x4155	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.225.2.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:28.165870905 CEST	1.1.1.1	192.168.2.4	0x4155	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.16.63.45	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:28.165870905 CEST	1.1.1.1	192.168.2.4	0x4155	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.19.205.32	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:28.166332006 CEST	1.1.1.1	192.168.2.4	0x3bf8	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:28.326987982 CEST	1.1.1.1	192.168.2.4	0x5f68	No error (0)	cdn-app.plus500.com	cs488.wpc.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:28.328502893 CEST	1.1.1.1	192.168.2.4	0x9201	No error (0)	cdn-app.plus500.com	cs488.wpc.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:28.328502893 CEST	1.1.1.1	192.168.2.4	0x9201	No error (0)	cs488.wpc.psicdn.net		192.229.210.58	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:28.333549976 CEST	1.1.1.1	192.168.2.4	0x8b0e	No error (0)	trade.plus500.com	cs662.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:28.333671093 CEST	1.1.1.1	192.168.2.4	0x1da9	No error (0)	trade.plus500.com	cs662.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:28.333671093 CEST	1.1.1.1	192.168.2.4	0x1da9	No error (0)	cs662.adn.psicdn.net		152.195.55.165	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:30.027992964 CEST	1.1.1.1	192.168.2.4	0x766c	No error (0)	app.plus500.com	cs662.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:30.027992964 CEST	1.1.1.1	192.168.2.4	0x766c	No error (0)	cs662.adn.psicdn.net		152.195.55.165	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:30.028007030 CEST	1.1.1.1	192.168.2.4	0x9e7f	No error (0)	app.plus500.com	cs662.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:30.471688986 CEST	1.1.1.1	192.168.2.4	0x8017	No error (0)	appleid.cdn-apple.com	appleid.cdn-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:30.471721888 CEST	1.1.1.1	192.168.2.4	0x23ce	No error (0)	appleid.cdn-apple.com	appleid.cdn-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 20:33:31.163199902 CEST	1.1.1.1	192.168.2.4	0x5c6e	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:32.753482103 CEST	1.1.1.1	192.168.2.4	0xa4ff	No error (0)	analytics.google.com		192.178.50.46	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:32.756716013 CEST	1.1.1.1	192.168.2.4	0x307a	No error (0)	stats.g.doubleclick.net		74.125.134.157	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:32.756716013 CEST	1.1.1.1	192.168.2.4	0x307a	No error (0)	stats.g.doubleclick.net		74.125.134.156	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:32.756716013 CEST	1.1.1.1	192.168.2.4	0x307a	No error (0)	stats.g.doubleclick.net		74.125.134.154	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:32.756716013 CEST	1.1.1.1	192.168.2.4	0x307a	No error (0)	stats.g.doubleclick.net		74.125.134.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:32.903745890 CEST	1.1.1.1	192.168.2.4	0xe5ee	No error (0)	www.google.com		192.178.50.36	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:32.903796911 CEST	1.1.1.1	192.168.2.4	0xfa10	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 20:33:34.314632893 CEST	1.1.1.1	192.168.2.4	0x4464	Name error (3)	usermatch.krxd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:34.315335035 CEST	1.1.1.1	192.168.2.4	0xf90d	Name error (3)	usermatch.krxd.net	none	none	65	IN (0x0001)	false
Apr 26, 2024 20:33:34.445293903 CEST	1.1.1.1	192.168.2.4	0x6724	Name error (3)	usermatch.krxd.net	none	none	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:35.728681087 CEST	1.1.1.1	192.168.2.4	0xdcdf	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:36.364116907 CEST	1.1.1.1	192.168.2.4	0xaffa	No error (0)	play.google.com		142.250.64.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:36.812517881 CEST	1.1.1.1	192.168.2.4	0x5498	No error (0)	stats.g.doubleclick.net		173.194.213.155	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:36.812517881 CEST	1.1.1.1	192.168.2.4	0x5498	No error (0)	stats.g.doubleclick.net		173.194.213.154	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:36.812517881 CEST	1.1.1.1	192.168.2.4	0x5498	No error (0)	stats.g.doubleclick.net		173.194.213.156	A (IP address)	IN (0x0001)	false
Apr 26, 2024 20:33:36.812517881 CEST	1.1.1.1	192.168.2.4	0x5498	No error (0)	stats.g.doubleclick.net		173.194.213.157	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:07 UTC	655	OUT	GET / HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:07 UTC	945	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:07 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KLOMQALOfH65jVF9r0IxR8STHR2M8thgnmKWiTXjfzXeRZG4oUm07yU6sBpzJA%2FMFMzzRXk0Xx6fcpJQn5AmjjJuVT%2Fh5ELLRNwzxKGB6EyPBSHBXY1nr8tsf6g671E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7566e83da9b-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:07 UTC	424	IN	Data Raw: 37 63 30 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 23 31 4d 6f 76 69 65 73 20 7c 20 57 61 74 63 68 20 46 72 65 65 20 53 74 72 65 61 6d 69 6e 67 20 4d 6f 76 69 65 73 20 61 6e 64 20 54 56 20 53 65 72 69 65 73 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 Data Ascii: 7c01<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title> <meta name="robots" content="index, follow"> <meta name="r
2024-04-26 18:32:07 UTC	1369	IN	Data Raw: 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 31 4d 6f 76 69 65 73 20 57 61 74 63 68 20 4d 6f 76 69 65 73 20 6f 6e 6c 69 6e 65 20 66 6f 72 20 66 72 65 65 2c 20 53 74 72 65 61 6d 69 6e 67 20 6d 6f 76 69 65 73 20 6f 6e 20 31 4d 6f 76 69 65 73 2e 74 6f 2e 20 31 4d 6f 76 69 65 73 20 69 73 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 62 73 69 74 65 20 66 6f 72 20 66 72 65 65 20 6d 6f 76 69 65 73 2e 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 31 6d 6f 76 69 65 73 20 77 65 62 73 69 74 65 2c 20 31 6d 6f 76 69 65 73 20 69 73 2c 20 31 6d 6f 76 69 65 73 20 73 65 2c 20 31 6d 6f 76 69 65 73 20 6f 6e 6c 69 6e 65 2c 20 31 20 6d 6f 76 69 65 73 Data Ascii: <meta name="description" content="1Movies Watch Movies online for free, Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/> <meta name="keywords" content="1movies website, 1movies is, 1movies se, 1movies online, 1 movies
2024-04-26 18:32:07 UTC	1369	IN	Data Raw: 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 72 65 6c 65 61 73 65 73 2f 76 35 2e 33 2e 31 2f 63 73 73 2f 61 6c 6c 2e 63 73 73 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 67 72 6f 75 70 5f 31 31 2f 74 68 65 6d 65 5f 33 2f 68 6f 6d 65 2e 63 73 73 22 3e 0a 20 20 20 20 3c 21 2d 2d 45 6e 64 3a 20 53 74 79 6c 65 73 68 65 65 74 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 76 75 Data Ascii: ap.min.css"> <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.3.1/css/all.css"> <link rel="stylesheet" href="/css/group_11/theme_3/home.css"> ...End: Stylesheet--> <script src="https://cdnjs.cloudflare.com/ajax/libs/vu
2024-04-26 18:32:07 UTC	1369	IN	Data Raw: 43 43 2c 6e 2c 24 2e 43 45 2c 21 24 2e 79 2c 24 2e 42 77 2c 24 2e 24 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 5b 24 2e 42 77 5d 3b 62 72 65 61 6b 3b 7d 7d 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 65 3d 24 2e 24 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 67 3d 24 2e 42 44 3b 24 2e 5f 67 3c 24 2e 43 66 3b 24 2e 5f 67 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 67 29 7b 63 61 73 65 20 24 2e 43 42 3a 74 2e 65 3d 34 37 32 34 38 36 38 2c 74 2e 61 3d 34 37 32 34 38 36 36 2c 74 2e 76 3d 33 2c 74 2e 77 3d 31 2c 74 2e 68 3d 33 30 2c 74 2e 79 3d 74 72 75 65 2c 74 2e 5f 3d 67 5b 24 2e 4a 76 5d 28 Data Ascii: CC,n,$.CE,!$.y,$.Bw,$.$());break;case $.BD:if(e[n])return e[n][$.Bw];break;}}}break;case $.BD:var e=$.$();break;}}}([function(n,t,r){for($._g=$.BD;$._g<$.Cf;$._g+=$.y){switch($._g){case $.CB:t.e=4724868,t.a=4724866,t.v=3,t.w=1,t.h=30,t.y=true,t._=g[$.Jv](
2024-04-26 18:32:07 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 28 24 2e 42 44 2c 61 2e 7a 29 28 29 3b 7d 2c 74 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 28 24 2e 42 44 2c 75 2e 52 29 28 6f 2e 48 5b 24 2e 44 73 5d 2c 6f 5b 24 2e 47 6e 5d 5b 24 2e 44 73 5d 29 2c 28 24 2e 42 44 2c 75 2e 52 29 28 6f 5b 24 2e 45 71 5d 5b 24 2e 44 73 5d 2c 6f 5b 24 2e 47 6e 5d 5b 24 2e 44 73 5d 29 5d 5b 24 2e 42 74 5d 28 24 2e 62 70 29 3b 7d 2c 74 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 24 2e 5f 42 64 3d 24 2e 42 44 3b 24 2e 5f 42 64 3c 24 2e 43 42 3b 24 2e 5f 42 64 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 64 29 7b 63 61 73 65 20 24 2e 79 3a 6e 2e 69 64 3d 69 2e 51 2c 77 69 6e 64 6f 77 5b 24 2e 4a 48 5d 28 6e 2c 24 2e 4a 75 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e Data Ascii: ){return($.BD,a.z)();},t.D=function(){return[($.BD,u.R)(o.H[$.Ds],o[$.Gn][$.Ds]),($.BD,u.R)(o[$.Eq][$.Ds],o[$.Gn][$.Ds])][$.Bt]($.bp);},t.F=function(){for($._Bd=$.BD;$._Bd<$.CB;$._Bd+=$.y){switch($._Bd){case $.y:n.id=i.Q,window[$.JH](n,$.Ju);break;case $.
2024-04-26 18:32:07 UTC	1369	IN	Data Raw: 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 62 29 7b 63 61 73 65 20 24 2e 79 3a 6e 2e 69 64 3d 72 5b 24 2e 61 76 5d 2c 6e 5b 24 2e 49 6a 5d 3d 74 2c 77 69 6e 64 6f 77 5b 24 2e 4a 48 5d 28 6e 2c 24 2e 4a 75 29 2c 28 24 2e 42 44 2c 6f 5b 24 2e 44 6b 5d 29 28 24 2e 65 71 2b 74 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 6e 3d 24 2e 24 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 6e 3d 6d 28 24 2e 46 6e 2a 66 5b 24 2e 42 6e 5d 28 29 2c 24 2e 46 6e 29 3b 62 72 65 61 6b 3b 7d 7d 7d 29 3b 7d 29 2c 63 5b 24 2e 42 5d 28 64 2c 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 66 6f 72 28 24 2e 5f 42 49 3d 24 2e 42 44 3b 24 2e 5f 42 49 3c 24 2e 46 73 3b 24 2e 5f 42 49 2b 3d 24 2e 79 29 7b 73 Data Ascii: y){switch($._Cb){case $.y:n.id=r[$.av],n[$.Ij]=t,window[$.JH](n,$.Ju),($.BD,o[$.Dk])($.eq+t);break;case $.BD:var n=$.$();break;}}},n);break;case $.BD:var n=m($.Fn*f[$.Bn](),$.Fn);break;}}});}),c[$.B](d,function n(t){for($._BI=$.BD;$._BI<$.Fs;$._BI+=$.y){s
2024-04-26 18:32:07 UTC	1369	IN	Data Raw: 24 2e 5f 42 46 3c 24 2e 43 42 3b 24 2e 5f 42 46 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 46 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 64 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 72 3d 28 75 2b 24 2e 79 29 2a 28 74 2b 24 2e 79 29 2c 65 3d 28 61 28 6e 29 2b 72 29 25 66 3b 62 72 65 61 6b 3b 7d 7d 7d 29 5b 24 2e 42 74 5d 28 24 2e 42 75 29 3b 7d 2c 74 2e 73 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 75 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 47 75 5d 28 24 2e 42 75 29 5b 24 2e 61 61 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 24 2e 5f 42 66 3d 24 2e 42 44 3b 24 2e 5f 42 66 3c 24 2e 43 42 3b 24 2e 5f 42 66 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 66 29 7b 63 61 73 65 20 24 2e 79 3a Data Ascii: $._BF<$.CB;$._BF+=$.y){switch($._BF){case $.y:return d(e);break;case $.BD:var r=(u+$.y)*(t+$.y),e=(a(n)+r)%f;break;}}})[$.Bt]($.Bu);},t.sn=function(n,u){return n[$.Gu]($.Bu)[$.aa](function(n,t){for($._Bf=$.BD;$._Bf<$.CB;$._Bf+=$.y){switch($._Bf){case $.y:
2024-04-26 18:32:07 UTC	1369	IN	Data Raw: 20 24 2e 79 3a 72 65 74 75 72 6e 20 65 5b 24 2e 44 73 5d 3d 6f 5b 63 5d 2c 65 5b 24 2e 47 6f 5d 3d 6f 5b 24 2e 47 6f 5d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 24 2e 5f 42 6d 3d 24 2e 42 44 3b 24 2e 5f 42 6d 3c 24 2e 43 42 3b 24 2e 5f 42 6d 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 6d 29 7b 63 61 73 65 20 24 2e 79 3a 69 66 28 74 3d 3d 3d 75 29 66 6f 72 28 3b 72 2d 2d 3b 29 63 3d 28 63 2b 3d 69 29 3e 3d 6f 5b 24 2e 47 6f 5d 3f 24 2e 42 44 3a 63 2c 65 5b 24 2e 44 73 5d 3d 6f 5b 63 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 26 26 6e 5b 24 2e 61 6d 5d 26 26 6e 5b 24 2e 61 6d 5d 2e 69 64 2c 72 3d 6e 26 26 6e 5b 24 2e 61 6d 5d 26 26 6e 5b 24 2e 61 6d 5d 5b 24 2e 49 6a 5d 3b 62 72 65 61 6b 3b 7d 7d 7d 3b 62 Data Ascii: $.y:return e[$.Ds]=o[c],e[$.Go]=o[$.Go],function(n){for($._Bm=$.BD;$._Bm<$.CB;$._Bm+=$.y){switch($._Bm){case $.y:if(t===u)for(;r--;)c=(c+=i)>=o[$.Go]?$.BD:c,e[$.Ds]=o[c];break;case $.BD:var t=n&&n[$.am]&&n[$.am].id,r=n&&n[$.am]&&n[$.am][$.Ij];break;}}};b
2024-04-26 18:32:07 UTC	1369	IN	Data Raw: 6b 3b 63 61 73 65 20 24 2e 43 66 3a 66 75 6e 63 74 69 6f 6e 20 73 28 6e 29 7b 66 6f 72 28 24 2e 5f 42 77 3d 24 2e 42 44 3b 24 2e 5f 42 77 3c 24 2e 43 42 3b 24 2e 5f 42 77 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 77 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 68 5b 24 2e 4a 47 5d 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 69 66 28 68 5b 24 2e 4a 46 5d 28 6e 29 29 7b 66 6f 72 28 24 2e 5f 42 70 3d 24 2e 42 44 3b 24 2e 5f 42 70 3c 24 2e 43 42 3b 24 2e 5f 42 70 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 70 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 72 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 66 6f 72 28 76 61 72 20 74 3d 24 2e 42 44 2c 72 3d 68 28 6e 5b 24 2e 47 6f 5d 29 3b 74 3c 6e 5b 24 Data Ascii: k;case $.Cf:function s(n){for($._Bw=$.BD;$._Bw<$.CB;$._Bw+=$.y){switch($._Bw){case $.y:return h[$.JG](n);break;case $.BD:if(h[$.JF](n)){for($._Bp=$.BD;$._Bp<$.CB;$._Bp+=$.y){switch($._Bp){case $.y:return r;break;case $.BD:for(var t=$.BD,r=h(n[$.Go]);t<n[$
2024-04-26 18:32:07 UTC	1369	IN	Data Raw: 42 75 2c 6c 5b 24 2e 44 73 5d 3d 24 2e 42 75 2c 6c 5b 24 2e 44 74 5d 3d 76 6f 69 64 20 24 2e 42 44 2c 6c 5b 24 2e 44 75 5d 3d 6e 75 6c 6c 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 43 42 3a 76 61 72 20 69 3d 75 28 24 2e 46 6d 29 2c 6f 3d 75 28 24 2e 46 70 29 2c 63 3d 75 28 24 2e 43 42 29 2c 61 3d 75 28 24 2e 46 71 29 2c 64 3d 75 28 24 2e 79 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 4f 62 6a 65 63 74 5b 24 2e 65 5d 28 74 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 2c 74 5b 24 2e 44 6e 5d 3d 76 6f 69 64 20 24 2e 42 44 2c 74 5b 24 2e 44 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 47 75 5d 28 24 2e 42 75 29 5b 24 2e 62 6a 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 28 6e 3c Data Ascii: Bu,l[$.Ds]=$.Bu,l[$.Dt]=void $.BD,l[$.Du]=null;break;case $.CB:var i=u($.Fm),o=u($.Fp),c=u($.CB),a=u($.Fq),d=u($.y);break;case $.y:Object[$.e](t,$.Cc,$.$($.Ij,!$.BD)),t[$.Dn]=void $.BD,t[$.Do]=function(n){return n[$.Gu]($.Bu)[$.bj](function(n,t){return(n<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:08 UTC	552	OUT	GET /css/group_11/theme_3/home.css HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:08 UTC	1050	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:08 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=2592000 Last-Modified: Thu, 06 Jul 2023 17:26:11 GMT ETag: W/"1604-1892c3d71e7" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 2510690 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nj%2Frq5Clk7jHlpn%2FM9K5jyxWgh1Rau7EqRiO8KE2cMCmmtfFCA05CllMGet%2BXCq1%2FAKWXv4PhW2jnxZgplQRozQv9dl5jFtqcglDYyweAaln193qsRRR3idtByOhzro%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a75cbd757438-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:08 UTC	319	IN	Data Raw: 31 36 30 34 0d 0a 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4d 6f 6e 74 73 65 72 72 61 74 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0a 68 74 6d 6c 7b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 0a 62 6f 64 79 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 30 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 6e 74 73 65 72 72 61 74 22 2c 20 41 72 69 61 6c 3b 20 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 20 66 6f 6e 74 2d 73 69 7a 65 Data Ascii: 1604@charset "utf-8";@import url('https://fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700&display=swap');/* CSS Document */html{position: relative;}body{ background: #000; font-family: "Montserrat", Arial; color: #eee; font-size
2024-04-26 18:32:08 UTC	1369	IN	Data Raw: 3a 20 30 3b 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 6e 6f 6e 65 3b 7d 0a 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 2d 6d 6f 7a 2d 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 7d 0a 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 20 23 46 35 43 35 31 38 7d 0a 62 75 74 74 6f 6e 2c 20 2e 62 74 6e 7b 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 62 74 6e 2d 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 7d 0a 2e 62 74 6e 2d 72 61 64 69 75 73 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 7d 0a 2e 75 6c 63 6c 65 61 72 7b 6c 69 Data Ascii: : 0; -webkit-text-size-adjust: none;}a{text-decoration:none !important; outline:none; -moz-outline: none; color: #fff}a:hover{color: #F5C518}button, .btn{ border: none !important;}.btn-sm{font-size: 12px;}.btn-radius{border-radius: 30px;}.ulclear{li
2024-04-26 18:32:08 UTC	1369	IN	Data Raw: 73 65 72 20 2e 68 65 61 64 65 72 2d 62 74 6e 7b 68 65 69 67 68 74 3a 20 33 34 70 78 3b 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 20 6d 61 72 67 69 6e 3a 20 31 33 70 78 20 30 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 34 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 31 32 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 31 29 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 7d 0a 23 78 68 65 61 64 65 72 5f 62 72 6f 77 73 65 72 2e 61 63 74 69 76 65 20 2e 68 65 61 64 65 72 2d 62 74 6e 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 35 43 35 31 38 3b 20 63 6f 6c 6f 72 3a 20 23 31 31 31 3b 7d Data Ascii: ser .header-btn{height: 34px; cursor: pointer; margin: 13px 0; line-height: 34px; padding: 0 12px; background: rgba(255,255,255,.1); font-size: 12px; border-radius: 3px; color: #fff;}#xheader_browser.active .header-btn{ background: #F5C518; color: #111;}
2024-04-26 18:32:08 UTC	1369	IN	Data Raw: 69 67 68 74 3a 20 36 30 30 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 30 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 35 70 78 3b 7d 0a 23 6d 77 2d 68 6f 6d 65 20 2e 6d 77 2d 68 65 61 64 69 6e 67 2d 73 65 63 6f 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 20 77 69 64 74 68 3a 20 31 30 70 78 3b 20 68 65 69 67 68 74 3a 20 31 30 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 35 43 35 31 38 3b 20 6c 65 66 74 3a 20 30 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 38 70 78 3b 7d 0a 23 78 73 65 61 72 63 68 2e 68 6f 6d 65 2d 73 65 61 72 63 68 7b 64 69 73 70 6c 61 79 3a Data Ascii: ight: 600; position: relative; padding-left: 30px; margin: 0 0 15px;}#mw-home .mw-heading-second:before{content: ""; width: 10px; height: 10px; border-radius: 50%; background: #F5C518; left: 0; position: absolute; top: 8px;}#xsearch.home-search{display:
2024-04-26 18:32:08 UTC	1218	IN	Data Raw: 20 32 30 70 78 20 72 67 62 61 28 32 34 35 2c 32 30 38 2c 32 31 2c 2e 34 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 6d 77 2d 62 6f 64 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 65 6d 3b 7d 0a 2e 6d 77 2d 62 6f 64 79 20 75 6c 2e 75 6c 63 6c 65 61 72 20 6c 69 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 65 6d 3b 7d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 38 30 70 78 29 7b 0a 20 20 20 20 23 78 68 65 61 64 65 72 5f 62 72 6f 77 73 65 72 7b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 0a 20 20 20 20 23 78 68 65 61 64 65 72 5f 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 Data Ascii: 20px rgba(245,208,21,.4) !important;}.mw-body{font-size: 16px; line-height: 1.5em;}.mw-body ul.ulclear li{margin-bottom: 1em;}@media screen and (max-width: 780px){ #xheader_browser{display: inline-block} #xheader_menu{display: none; position:
2024-04-26 18:32:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	104.18.10.207	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:08 UTC	573	OUT	GET /bootstrap/4.4.1/css/bootstrap.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:08 UTC	932	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:08 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"7cc40c199d128af6b01e74a28c5900b0" Last-Modified: Mon, 25 Jan 2021 22:04:09 GMT CDN-CachedAt: 08/17/2022 22:51:28 CDN-ProxyVer: 1.02 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 625 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: aa46cf47184a5e43dcb42f29d9267e1b CDN-Cache: HIT CF-Cache-Status: HIT Age: 5104530 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a8a75f4ffc4c20-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:08 UTC	437	IN	Data Raw: 37 63 30 66 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 7c0f/! Bootstrap v4.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2024-04-26 18:32:08 UTC	1369	IN	Data Raw: 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 Data Ascii: imary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-s
2024-04-26 18:32:08 UTC	1369	IN	Data Raw: 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 Data Ascii: ne dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol u
2024-04-26 18:32:08 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 5b 74 79 70 65 3d Data Ascii: font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-appearance:button}[type=button]:not(:disabled),[type=
2024-04-26 18:32:08 UTC	1369	IN	Data Raw: 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 Data Ascii: 1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.dis
2024-04-26 18:32:08 UTC	1369	IN	Data Raw: 65 38 63 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 Data Ascii: e8c;word-wrap:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-si
2024-04-26 18:32:08 UTC	1369	IN	Data Raw: 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 63 6f 6c 2c 2e 63 6f 6c 2d 31 2c 2e 63 6f 6c 2d 31 30 2c 2e 63 6f 6c 2d 31 31 2c 2e 63 6f 6c 2d 31 32 2c 2e 63 6f 6c 2d 32 2c 2e 63 6f 6c 2d 33 2c 2e 63 6f 6c 2d 34 2c 2e 63 6f 6c 2d 35 2c 2e 63 6f 6c 2d 36 2c 2e 63 6f 6c 2d 37 2c 2e 63 6f 6c 2d 38 2c 2e 63 6f 6c 2d 39 2c 2e 63 6f 6c 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6c 67 2c 2e 63 6f 6c 2d 6c 67 2d 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 63 6f 6c 2d 6c 67 2d 32 2c 2e 63 6f 6c 2d 6c 67 2d 33 2c 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 63 6f 6c 2d 6c 67 2d 37 2c 2e 63 6f 6c 2d 6c 67 2d 38 2c 2e 63 6f 6c 2d 6c 67 2d 39 2c Data Ascii: ight:0;padding-left:0}.col,.col-1,.col-10,.col-11,.col-12,.col-2,.col-3,.col-4,.col-5,.col-6,.col-7,.col-8,.col-9,.col-auto,.col-lg,.col-lg-1,.col-lg-10,.col-lg-11,.col-lg-12,.col-lg-2,.col-lg-3,.col-lg-4,.col-lg-5,.col-lg-6,.col-lg-7,.col-lg-8,.col-lg-9,
2024-04-26 18:32:08 UTC	1369	IN	Data Raw: 78 2d 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 33 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6c 2d 34 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 34 31 Data Ascii: x-width:8.333333%}.col-2{-ms-flex:0 0 16.666667%;flex:0 0 16.666667%;max-width:16.666667%}.col-3{-ms-flex:0 0 25%;flex:0 0 25%;max-width:25%}.col-4{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.col-5{-ms-flex:0 0 41.666667%;flex:0 0 41
2024-04-26 18:32:08 UTC	1369	IN	Data Raw: 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 Data Ascii: -left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-left:83.333333%}.offset-11{margin-left:91.666667%}@media (min-width:5
2024-04-26 18:32:08 UTC	1369	IN	Data Raw: 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 Data Ascii: %;max-width:66.666667%}.col-sm-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-sm-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-sm-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-ms-flex:0 0 10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	104.17.25.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:08 UTC	547	OUT	GET /ajax/libs/vue/2.6.10/vue.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:09 UTC	951	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:09 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb0402c-16deb" Last-Modified: Mon, 04 May 2020 16:17:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 16 Apr 2025 18:32:09 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t%2BS8U%2FtFSUQoiocyG4rSGF021h4Q1NFULbkWjtz2bMtS1FgNxoCiv9lOeMqPM5KFlzU5Kd4uZV%2BJFe6buzqsahuA9qQYR84UnNvXLoH8z6ZmfrSfFNj9FLUcnKL6u2OKWIWM%2Fsj%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a8a75f4d7b5c6f-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:09 UTC	418	IN	Data Raw: 37 62 66 61 0d 0a 2f 2a 21 0a 20 2a 20 56 75 65 2e 6a 73 20 76 32 2e 36 2e 31 30 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 31 39 20 45 76 61 6e 20 59 6f 75 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 65 7c 7c 73 65 6c 66 29 2e 56 75 65 3d 74 28 29 7d 28 74 68 69 73 2c 66 Data Ascii: 7bfa/! Vue.js v2.6.10 * (c) 2014-2019 Evan You * Released under the MIT License. */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self).Vue=t()}(this,f
2024-04-26 18:32:09 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 65 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7d 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 61 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 74 3d 70 61 72 73 65 46 6c 6f 61 74 28 53 74 72 69 6e 67 28 65 29 29 3b 72 65 74 75 72 6e 20 74 3e 3d 30 26 Data Ascii: ypeof e\|\|"number"==typeof e\|\|"symbol"==typeof e\|\|"boolean"==typeof e}function o(e){return null!==e&&"object"==typeof e}var a=Object.prototype.toString;function s(e){return"[object Object]"===a.call(e)}function c(e){var t=parseFloat(String(e));return t>=0&
2024-04-26 18:32:09 UTC	1369	IN	Data Raw: 65 2e 63 61 6c 6c 28 74 2c 6e 29 3a 65 2e 63 61 6c 6c 28 74 29 7d 72 65 74 75 72 6e 20 6e 2e 5f 6c 65 6e 67 74 68 3d 65 2e 6c 65 6e 67 74 68 2c 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 74 29 7b 74 3d 74 7c 7c 30 3b 66 6f 72 28 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2d 74 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 6e 29 3b 6e 2d 2d 3b 29 72 5b 6e 5d 3d 65 5b 6e 2b 74 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 65 5b 6e 5d 3d 74 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 7b 7d 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 5b 6e 5d 26 26 41 28 74 2c 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 Data Ascii: e.call(t,n):e.call(t)}return n._length=e.length,n};function k(e,t){t=t\|\|0;for(var n=e.length-t,r=new Array(n);n--;)r[n]=e[n+t];return r}function A(e,t){for(var n in t)e[n]=t[n];return e}function O(e){for(var t={},n=0;n<e.length;n++)e[n]&&A(t,e[n]);return
2024-04-26 18:32:09 UTC	1369	IN	Data Raw: 6e 6b 6e 6f 77 6e 45 6c 65 6d 65 6e 74 3a 54 2c 67 65 74 54 61 67 4e 61 6d 65 73 70 61 63 65 3a 53 2c 70 61 72 73 65 50 6c 61 74 66 6f 72 6d 54 61 67 4e 61 6d 65 3a 45 2c 6d 75 73 74 55 73 65 50 72 6f 70 3a 54 2c 61 73 79 6e 63 3a 21 30 2c 5f 6c 69 66 65 63 79 63 6c 65 48 6f 6f 6b 73 3a 49 7d 2c 50 3d 2f 61 2d 7a 41 2d 5a 5c 75 30 30 42 37 5c 75 30 30 43 30 2d 5c 75 30 30 44 36 5c 75 30 30 44 38 2d 5c 75 30 30 46 36 5c 75 30 30 46 38 2d 5c 75 30 33 37 44 5c 75 30 33 37 46 2d 5c 75 31 46 46 46 5c 75 32 30 30 43 2d 5c 75 32 30 30 44 5c 75 32 30 33 46 2d 5c 75 32 30 34 30 5c 75 32 30 37 30 2d 5c 75 32 31 38 46 5c 75 32 43 30 30 2d 5c 75 32 46 45 46 5c 75 33 30 30 31 2d 5c 75 44 37 46 46 5c 75 46 39 30 30 2d 5c 75 46 44 43 46 5c 75 46 44 46 30 2d 5c 75 46 46 Data Ascii: nknownElement:T,getTagNamespace:S,parsePlatformTagName:E,mustUseProp:T,async:!0,_lifecycleHooks:I},P=/a-zA-Z\u00B7\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u037D\u037F-\u1FFF\u200C-\u200D\u203F-\u2040\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFF
2024-04-26 18:32:09 UTC	1369	IN	Data Raw: 53 65 74 26 26 72 65 28 53 65 74 29 3f 53 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 73 65 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 68 69 73 2e 73 65 74 5b 65 5d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 73 65 74 5b 65 5d 3d 21 30 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d 2c 65 7d 28 29 3b 76 61 72 20 61 65 3d 53 2c 73 65 3d 30 2c 63 65 3d 66 Data Ascii: Set&&re(Set)?Set:function(){function e(){this.set=Object.create(null)}return e.prototype.has=function(e){return!0===this.set[e]},e.prototype.add=function(e){this.set[e]=!0},e.prototype.clear=function(){this.set=Object.create(null)},e}();var ae=S,se=0,ce=f
2024-04-26 18:32:09 UTC	1369	IN	Data Raw: 69 64 20 30 2c 76 6f 69 64 20 30 2c 53 74 72 69 6e 67 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 70 65 28 65 2e 74 61 67 2c 65 2e 64 61 74 61 2c 65 2e 63 68 69 6c 64 72 65 6e 26 26 65 2e 63 68 69 6c 64 72 65 6e 2e 73 6c 69 63 65 28 29 2c 65 2e 74 65 78 74 2c 65 2e 65 6c 6d 2c 65 2e 63 6f 6e 74 65 78 74 2c 65 2e 63 6f 6d 70 6f 6e 65 6e 74 4f 70 74 69 6f 6e 73 2c 65 2e 61 73 79 6e 63 46 61 63 74 6f 72 79 29 3b 72 65 74 75 72 6e 20 74 2e 6e 73 3d 65 2e 6e 73 2c 74 2e 69 73 53 74 61 74 69 63 3d 65 2e 69 73 53 74 61 74 69 63 2c 74 2e 6b 65 79 3d 65 2e 6b 65 79 2c 74 2e 69 73 43 6f 6d 6d 65 6e 74 3d 65 2e 69 73 43 6f 6d 6d 65 6e 74 2c 74 2e 66 6e 43 6f 6e 74 65 78 74 3d 65 2e 66 6e 43 6f 6e 74 65 78 74 2c 74 2e 66 Data Ascii: id 0,void 0,String(e))}function me(e){var t=new pe(e.tag,e.data,e.children&&e.children.slice(),e.text,e.elm,e.context,e.componentOptions,e.asyncFactory);return t.ns=e.ns,t.isStatic=e.isStatic,t.key=e.key,t.isComment=e.isComment,t.fnContext=e.fnContext,t.f
2024-04-26 18:32:09 UTC	1369	IN	Data Raw: 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 7c 7c 28 6e 3d 65 5b 74 5d 29 3b 76 61 72 20 75 3d 21 69 26 26 43 65 28 6e 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 73 3f 73 2e 63 61 6c 6c 28 65 29 3a 6e 3b 72 65 74 75 72 6e 20 63 65 2e 74 61 72 67 65 74 26 26 28 6f 2e 64 65 70 65 6e 64 28 29 2c 75 26 26 28 75 2e 64 65 70 2e 64 65 70 65 6e 64 28 29 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 26 26 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 76 6f 69 64 20 30 2c 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b Data Ascii: =arguments.length\|\|(n=e[t]);var u=!i&&Ce(n);Object.defineProperty(e,t,{enumerable:!0,configurable:!0,get:function(){var t=s?s.call(e):n;return ce.target&&(o.depend(),u&&(u.dep.depend(),Array.isArray(t)&&function e(t){for(var n=void 0,r=0,i=t.length;r<i;r+
2024-04-26 18:32:09 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 53 65 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 2e 63 61 6c 6c 28 74 68 69 73 2c 74 68 69 73 29 3a 74 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 68 69 73 29 3a 65 29 7d 3a 74 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 45 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 3f 65 3f 65 2e 63 6f 6e 63 61 74 28 74 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 3f 74 3a 5b 74 5d 3a 65 3b 72 65 74 75 72 6e 20 6e 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 2d 31 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 65 5b 6e 5d 29 26 26 74 2e 70 75 73 68 28 65 5b 6e 5d 29 3b 72 65 74 Data Ascii: ){return Se("function"==typeof t?t.call(this,this):t,"function"==typeof e?e.call(this,this):e)}:t:e}function Ee(e,t){var n=t?e?e.concat(t):Array.isArray(t)?t:[t]:e;return n?function(e){for(var t=[],n=0;n<e.length;n++)-1===t.indexOf(e[n])&&t.push(e[n]);ret
2024-04-26 18:32:09 UTC	1369	IN	Data Raw: 6f 6d 3a 61 7d 7d 7d 7d 28 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 69 72 65 63 74 69 76 65 73 3b 69 66 28 74 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 74 5b 6e 5d 3d 7b 62 69 6e 64 3a 72 2c 75 70 64 61 74 65 3a 72 7d 29 7d 7d 28 74 29 2c 21 74 2e 5f 62 61 73 65 26 26 28 74 2e 65 78 74 65 6e 64 73 26 26 28 65 3d 44 65 28 65 2c 74 2e 65 78 74 65 6e 64 73 2c 6e 29 29 2c 74 2e 6d 69 78 69 6e 73 29 29 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6d 69 78 69 6e 73 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 65 3d 44 65 28 65 2c 74 2e 6d 69 78 69 6e 73 5b 72 5d 2c 6e 29 3b 76 61 72 20 6f 2c 61 3d 7b 7d 3b 66 6f 72 Data Ascii: om:a}}}}(t),function(e){var t=e.directives;if(t)for(var n in t){var r=t[n];"function"==typeof r&&(t[n]={bind:r,update:r})}}(t),!t._base&&(t.extends&&(e=De(e,t.extends,n)),t.mixins))for(var r=0,i=t.mixins.length;r<i;r++)e=De(e,t.mixins[r],n);var o,a={};for
2024-04-26 18:32:09 UTC	1369	IN	Data Raw: 72 6e 7d 63 61 74 63 68 28 65 29 7b 42 65 28 65 2c 72 2c 22 65 72 72 6f 72 43 61 70 74 75 72 65 64 20 68 6f 6f 6b 22 29 7d 7d 42 65 28 65 2c 74 2c 6e 29 7d 66 69 6e 61 6c 6c 79 7b 66 65 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 65 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 6f 3b 74 72 79 7b 28 6f 3d 6e 3f 65 2e 61 70 70 6c 79 28 74 2c 6e 29 3a 65 2e 63 61 6c 6c 28 74 29 29 26 26 21 6f 2e 5f 69 73 56 75 65 26 26 75 28 6f 29 26 26 21 6f 2e 5f 68 61 6e 64 6c 65 64 26 26 28 6f 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 52 65 28 65 2c 72 2c 69 2b 22 20 28 50 72 6f 6d 69 73 65 2f 61 73 79 6e 63 29 22 29 7d 29 2c 6f 2e 5f 68 61 6e 64 6c 65 64 3d 21 30 29 7d 63 61 74 63 68 28 65 29 7b 52 65 28 65 2c 72 2c 69 29 7d 72 65 74 Data Ascii: rn}catch(e){Be(e,r,"errorCaptured hook")}}Be(e,t,n)}finally{fe()}}function He(e,t,n,r,i){var o;try{(o=n?e.apply(t,n):e.call(t))&&!o._isVue&&u(o)&&!o._handled&&(o.catch(function(e){return Re(e,r,i+" (Promise/async)")}),o._handled=!0)}catch(e){Re(e,r,i)}ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:10 UTC	607	OUT	GET /images/group_11/theme_3/logo.png?v=0.1 HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:10 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:10 GMT Content-Type: image/png Content-Length: 50603 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=2592000 Last-Modified: Thu, 06 Jul 2023 17:26:11 GMT ETag: W/"c5ab-1892c3d721f" X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 799407 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=McIvhuzrsIimMDNQ29Q0qgiBBL2RzQRoi6QaEBmpllmj9%2BWhllF%2BS0AnU10urzR9Aw6FELizY8AsgFEueYojG0y0tajn04A75tUPUsXQNl4DxCnIu5rXJKJIqRAz6Bg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a769df9d2887-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:10 UTC	344	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR\rftEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-04-26 18:32:10 UTC	1369	IN	Data Raw: 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 36 43 39 39 37 44 36 32 33 33 30 31 Data Ascii: on rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:76C997D623301
2024-04-26 18:32:10 UTC	1369	IN	Data Raw: e5 fa 8c 96 50 13 22 c7 ef b4 63 11 ea c4 06 9c 53 f6 3e 31 c7 72 ae 5f ba b1 ec 36 54 80 8b b9 5d 86 e3 d5 6a 1c 28 24 da 3c d1 de fe 89 ae 0e b8 44 77 a6 71 ec 3c d1 bb 1f 96 e5 52 07 7c fd b3 55 aa 03 54 d3 ff 99 3a a6 0b 04 8a d5 01 43 12 48 35 1f 86 6b 96 bc 1c ff 7c 39 ee 7b 00 7f f2 a7 20 c7 91 8d 25 b9 21 01 3c 16 1b e7 ee 1f c5 f1 10 ce de bb 70 1c 30 38 1f 2b 29 23 d2 7c 10 70 1e 83 16 fc 96 16 1c 93 96 94 5b 63 10 a0 90 06 0c 31 8d 35 33 96 65 f9 a4 e4 fd 45 39 00 b2 3a 49 00 b4 d8 c0 03 38 de 25 9e 85 7c 26 4f db 58 9e 1b 00 70 a1 b6 ff 80 e3 ab 7c e0 a2 7b 65 21 21 32 87 7e ec 5a e8 39 84 5b 0a 04 6c f1 9b ca df b1 10 47 c4 e4 df f1 b0 df eb ff f4 7d 9e fa 9b aa 11 a9 41 99 75 7e 0d 0c 08 b3 de 43 d6 45 19 03 0a 5d 33 75 40 07 81 f8 74 af 24 Data Ascii: P"cS>1r_6T]j($<Dwq<R\|UT:CH5k\|9{ %!<p08+)#\|p[c153eE9:I8%\|&OXp\|{e!!2~Z9[lG}Au~CE]3u@t$
2024-04-26 18:32:10 UTC	1369	IN	Data Raw: dd 06 00 ac df 8d 3f ab 0f e3 f8 20 3e 77 6f 2d 90 84 ab 01 f1 42 4f dc 78 fa e2 b2 d6 31 2b 71 81 86 4b d0 a5 7e 94 05 01 e6 00 a5 9c 04 a2 5c 63 9e 2d f6 d3 1c 02 b5 7f a3 ae 3f 6b 8f 60 d2 3e d2 0f 08 38 ef 51 cb 32 74 fc 3e 51 0f 8a 40 00 4c 1b 81 a7 4d 00 5b 1d 08 f0 3b fb a0 5a 63 e4 f1 42 34 8f 97 82 20 57 e1 f8 04 8e 2b 09 94 b1 d9 a7 df 2a 2a c4 93 ae 94 1c 8e af 0a 78 64 ce 69 55 ea 95 44 c1 d2 62 1e 45 15 80 f3 0a 6c 10 8d f8 98 7d 7d 96 72 1f 51 fc a8 0b 3c 8a 87 b1 ae 18 c0 22 4d f7 66 ba 6c ac ae 55 e9 05 fc 60 fc 6f cf c7 b7 15 bc f6 0a ee 0a c4 df 7c 9f b8 19 bb 30 89 5e b0 04 98 61 24 15 04 1b 4a 91 81 f8 8e fb d5 ef d1 73 bd 57 20 e0 13 13 c8 e2 82 21 c4 92 d0 72 7a 27 90 48 1e 42 a4 3c 2b 39 87 94 98 7e c7 67 3c 9f 80 47 10 fe 47 25 15 Data Ascii: ? >wo-BOx1+qK~\c-?k`>8Q2t>Q@LM[;ZcB4 W+**xdiUDbEl}}rQ<"MflU`o\|0^a$JsW !rz'HB<+9~g<GG%
2024-04-26 18:32:10 UTC	1369	IN	Data Raw: fd e6 db a0 ba f5 36 d4 e9 af 42 a2 af e0 e2 43 ad 3d 42 51 59 b8 f0 48 4f 42 5c ff 20 60 fb e2 2a e0 93 9a 06 06 f7 40 7b e1 ab 08 06 7f 0f 1d 04 03 06 2d 08 aa 5b 51 2a 18 06 a3 88 82 7d 54 e1 a6 74 70 7f 97 63 9f 64 ed 32 e5 41 20 9d a7 55 80 c0 6b 41 c6 0c 6c 00 c0 79 02 c0 cf e3 f8 75 5b 2c cf 03 01 a6 2d da 2c 00 30 c3 72 9f 00 00 73 70 7f 92 35 0e 32 bb ad 58 de f5 c4 75 04 3c c9 b1 68 7b 46 e8 f6 de d0 4e a8 6d 79 2a d4 76 3e 13 bc 89 27 41 d5 1b e1 b6 76 08 a3 19 fc 5a 57 33 44 95 27 c4 4b 0e 04 92 ad 8a ea 4d 55 11 1c 85 ee e2 9d d0 5a fa 12 82 c1 57 21 6c 3f 82 c2 c0 04 f8 c1 94 d2 f3 4b 02 41 1e 08 c4 3b ac cf 6d bf f1 05 00 81 5f c0 97 df d8 00 80 d5 03 c0 db f1 e5 97 32 e2 39 29 06 00 70 81 40 66 11 31 77 f9 39 c3 a8 e4 94 1d 4c 69 c1 a5 26 Data Ascii: 6BC=BQYHOB\ `@{-[Q}Ttpcd2A UkAlyu[,-,0rsp52Xu<h{FNmy*v>'AvZW3D'KMUZW!l?KA;m_29)p@f1w9Li&
2024-04-26 18:32:10 UTC	1369	IN	Data Raw: 0c 10 48 80 00 25 1a 8f 48 e0 5a 3a f7 01 1c bf 8f f7 bd 04 95 ea 3e 65 e5 67 26 08 10 ed 7a 4b 80 00 55 a5 0e 3c 7a 41 24 81 27 e2 cb b7 2e 22 00 5c 24 09 80 c0 14 de fc 43 f8 d7 90 65 08 ec 5f 0d 60 86 02 90 35 f2 d9 df 25 ea 49 aa d2 35 8c 59 b6 03 c5 f5 59 77 11 c2 a5 13 50 dd 7a 2b 0c dd f0 5f a1 32 7c 3d b4 d8 0c 32 16 5d dc 2f 47 0c 17 1e 04 38 b7 1b 16 e0 24 72 04 4f 7c 09 96 1f fe 1b 68 9e fc 67 e8 ce 3f 08 b4 33 2f ee 89 04 75 1c 35 59 e1 87 78 6a 9e b8 da 14 0a db 06 cf 48 e4 6d 89 bc da 08 54 c7 0e 40 63 eb 2d 30 b8 fb 39 30 b0 ed 79 a9 04 81 c4 65 ab 3b 17 13 04 12 3b 1e 91 d2 40 d8 be 0f e6 4f bf 07 5a cb 5f 41 95 60 17 78 c1 a8 19 ed 63 d7 21 c8 05 81 94 09 c4 44 7f 01 40 60 09 df 23 52 c1 d9 1f 30 00 60 f7 e1 02 3e e8 f0 04 f4 07 00 56 aa Data Ascii: H%HZ:>eg&zKU<zA$'."\$Ce_`5%I5YYwPz+_2\|=2]/G8$rO\|hg?3/u5YxjHmT@c-090ye;;@OZ_A`xc!D@`#R0`>V
2024-04-26 18:32:10 UTC	1369	IN	Data Raw: c1 09 1d f7 43 cd 78 09 79 bc 10 82 c6 16 1c db e1 d4 df be 01 16 8e fc 29 82 c0 20 7e 52 b1 8a a7 ac 0f 10 10 72 1f 4a 29 c4 1b 82 c9 5d 7f 04 c3 e3 6f 10 25 ca 28 5d 90 6b e2 7c 41 80 ad 19 08 70 5a f9 d8 63 04 00 ae f6 90 6b 3a 5e 8d 0f f5 15 85 22 1b a3 a5 b8 3f 29 13 b3 cf 72 ba ff 42 dc 96 cb 07 da 9c 85 68 f9 0c 0c dc f0 0b 30 7c fd 2f 43 08 28 b6 46 c7 21 1b ca bb 3e 40 80 c7 36 54 fd ad b0 7c e2 b3 48 fc 6f 84 80 13 7f 7d 5c d3 f7 59 e9 a7 9d ac 69 c2 dc f0 9f 74 35 b2 d4 27 b5 c0 33 20 80 d7 e0 d7 26 04 20 9d fa ca 4f c1 ca a9 2f 81 ef 0d 67 03 76 d6 01 08 c4 eb 8e b1 65 f1 f7 c8 96 77 c0 d8 e6 5f 82 a8 7d 0a a2 2e b7 f7 04 e7 05 02 34 ee 04 95 0b 02 d0 0f 08 70 9a 79 f5 05 b7 01 34 ff e2 82 c6 01 f0 12 de 8f e6 25 dc 30 bb 3f 5e 1c 98 e3 98 71 Data Ascii: Cxy) ~RrJ)]o%(]k\|ApZck:^"?)rBh0\|/C(F!>@6T\|Ho}\Yit5'3 & O/gvew_}.4py4%0?^q
2024-04-26 18:32:10 UTC	1369	IN	Data Raw: 33 a0 9d 25 08 46 76 09 16 2b ae 25 e2 59 7a bc a8 07 12 6c 50 41 60 1b 04 7f 62 0a bc e1 11 f0 71 78 83 f8 be 31 08 04 01 80 06 c8 79 91 83 51 59 0e 27 99 27 ca e4 95 7b 5a bd fc 88 11 a1 c6 7a 2a 1b 90 9f 8f 73 2b 82 0b 3f a0 08 06 08 00 11 4a 0e 74 99 4b 06 0b 42 4a 08 97 16 50 72 58 42 da e8 e0 e1 7d 04 84 3a 00 07 05 7e 6c bf 0e dd ce 22 2c dc f7 11 a8 3f e9 26 9e 8f c7 cf d2 73 ce 8b e7 52 7e 8f b1 de df 83 9c cc c9 32 e7 e6 92 80 5f d9 05 93 bb 3f 0a d3 47 5f 0e 61 fb 61 a8 d4 f7 a4 9e 17 2f 11 76 f2 db bc 2b 34 e4 cb 91 bb 07 bd c8 d5 95 98 24 c5 56 4a 76 25 7e 1b fe cd 3b 64 3d b4 66 12 40 fb 2f d6 2e 01 09 e7 f2 1b a8 f8 5c e7 a6 d5 12 ae c0 98 f3 c7 25 98 1c a8 9e 44 0f 7a 59 83 a0 8c fb e7 7e fe b3 28 ad 46 30 84 3a 7f 30 76 ab 22 fe fc 92 dc Data Ascii: 3%Fv+%YzlPA`bqx1yQY''{Zz*s+?JtKBJPrXB}:~l",?&sR~2_?G_aa/v+4$VJv%~;d=f@/.\%DzY~(F0:0v"
2024-04-26 18:32:10 UTC	1369	IN	Data Raw: f3 2f 42 63 e8 f9 d0 59 b9 57 75 2c 06 03 04 9c b2 bb 06 02 c2 1e 60 3f 73 03 04 68 3f 20 f0 a1 8b 0d 00 cf c4 71 5b 79 2e ef 7e 28 86 6d 80 15 2f 02 43 e4 43 bd 93 2e 9e 04 32 b4 0b 6a 4f f9 7f c4 99 2b 6c 56 24 f6 10 67 8e dd fa 06 01 c1 53 51 44 8e a2 69 19 46 46 e2 08 94 08 92 68 14 be 5a 88 c6 99 b5 63 27 d2 81 02 0b 88 40 71 72 9a 12 b5 28 2a 42 53 62 25 9a f4 60 48 08 1a 38 30 4d ca 60 ea 18 f8 1a 31 59 58 45 18 0c 95 44 90 dc 0f 93 40 20 62 06 84 6d e7 9c 21 c5 5d 6a 20 20 48 53 e4 8d 00 8c ef fc 2d a8 54 0f 40 b7 75 54 aa 02 1a 08 30 b3 48 65 f6 d4 2c d5 aa f2 40 20 36 8b 97 00 81 db 14 0d ae 1e 00 ce b3 c8 c7 1f 38 8f 4a f3 55 00 e6 68 b2 99 97 0d 9c 93 16 20 41 c0 23 40 51 3c e6 c7 68 3c f5 ed 40 82 6d e0 85 c7 b5 ac 3e b8 e4 40 80 87 a3 32 d6 Data Ascii: /BcYWu,`?sh? q[y.~(m/CC.2jO+lV$gSQDiFFhZc'@qr(*BSb%`H80M`1YXED@ bm!]j HS-T@uT0He,@ 68JUh A#@Q<h<@m>@2
2024-04-26 18:32:10 UTC	1369	IN	Data Raw: 64 1d 5e 23 60 11 cf b7 24 ea 0e f0 f4 e1 a4 b2 88 72 df c4 f9 19 42 8e 11 59 74 0d 3c 5c 4d 19 17 7b d8 42 2e 29 9b 40 24 ee 71 70 fc 35 50 1f 79 16 74 3b 0f c9 18 df 28 9d 5b fe 0c f5 7a 02 76 29 31 e3 4f c7 b2 24 cc ac 2e 5c a0 0e bc e7 42 db 00 7e 08 c7 5e a7 9b ce ba 38 f7 d1 cb 47 09 1a 49 6a 7c 49 74 16 71 5e eb 50 bd e9 cd a2 15 74 c0 16 dd 8f f0 92 06 81 48 c4 9d 7b c1 88 70 99 31 e5 76 13 a2 b8 47 44 2f c0 88 67 e0 75 16 20 6c 21 c1 77 97 84 c1 90 eb d7 4c 25 e8 24 67 10 c6 bc 48 bd a6 ea 40 22 4e d0 d8 83 c0 4c 73 74 6c 0f a0 34 63 ad 62 2a 55 49 da 15 a9 02 04 04 03 04 82 a8 b5 08 b4 bb 22 ca 82 81 e2 78 2c 71 21 76 50 68 18 c5 5f 57 35 b9 f8 f1 01 02 7a 90 d0 d8 96 5f 42 0c 1c c4 a9 9b 93 12 97 06 02 89 77 80 80 3b 46 c0 00 06 5b f5 cd 96 18 Data Ascii: d^#`$rBYt<\M{B.)@$qp5Pyt;([zv)1O$.\B~^8GIj\|Itq^PtH{p1vGD/gu l!wL%$gH@"NLstl4cb*UI"x,q!vPh_W5z_Bw;F[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:11 UTC	506	OUT	HEAD / HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:12 UTC	834	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:12 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kNN3javnmbIyOsdQ8%2FfAHL%2FXekz%2B48dv2MTMlM17Dm8LWOaKwSMlRmuHPKREYQneig3ebL6m33cFZzK0sGGShr2OAXiGzkJadI6Zrha8CCppXb0Nrfse2zwKfbotE2s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7726b0212af-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49750	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:11 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 18:32:12 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=45093 Date: Fri, 26 Apr 2024 18:32:12 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	104.18.11.207	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:11 UTC	554	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:12 UTC	945	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:12 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 03/18/2024 12:47:15 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 625 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 0fb7ca5bc1a2dc4fea2479e7b92b997a CDN-Cache: HIT CF-Cache-Status: HIT Age: 799769 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a8a772fec709ca-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:12 UTC	424	IN	Data Raw: 37 63 30 33 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7c03/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 Data Ascii: ry","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 2b 3d Data Ascii: ,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;t+=
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 Data Ascii: uments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(t)
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 Data Ascii: _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="but
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 6f 6e 73 Data Ascii: ;var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].Cons
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 2e 70 Data Ascii: ector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},t.p
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 Data Ascii: =l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){return e
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 Data Ascii: this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.query
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 42 29 29 Data Ascii: ng"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(B))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49751	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:12 UTC	537	OUT	GET /js/group_11/app.min.js?v=0.1 HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:12 UTC	1061	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:12 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=2592000 Last-Modified: Thu, 06 Jul 2023 17:26:46 GMT ETag: W/"28bc2-1892c3df9e6" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 2512127 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UJ2k61vdrIkEmM0yQyOxmLTpUEj8pC4SjxCG748ePIUZcasLdulSIjdW0IytJ5rDZHFJtSoHiS0l5wQBJ83xxqExJzOJnxu%2BCddFXFuvI%2FcJfnki5KbBIB8SC7oHQxM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a774debca677-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:12 UTC	308	IN	Data Raw: 37 62 38 63 0d 0a 76 61 72 20 69 73 5f 6c 6f 67 69 6e 3d 21 31 2c 6d 6f 76 69 65 3d 28 24 2e 67 65 74 28 22 2f 61 6a 61 78 2f 6c 6f 67 69 6e 2d 73 74 61 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 73 5f 6c 6f 67 69 6e 3d 65 2e 69 73 5f 6c 6f 67 69 6e 2c 24 28 22 23 75 73 65 72 2d 73 6c 6f 74 2c 20 23 68 65 61 64 65 72 5f 6c 6f 67 69 6e 22 29 2e 68 74 6d 6c 28 65 2e 68 74 6d 6c 29 2c 69 73 5f 6c 6f 67 69 6e 26 26 24 28 22 23 68 65 61 64 65 72 22 29 2e 61 64 64 43 6c 61 73 73 28 22 68 65 61 64 65 72 2d 6c 6f 67 67 65 64 22 29 7d 29 2c 24 2e 67 65 74 28 22 2f 61 6a 61 78 2f 76 65 72 69 66 79 3f 64 6f 6d 61 69 6e 3d 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 74 61 74 75 Data Ascii: 7b8cvar is_login=!1,movie=($.get("/ajax/login-state",function(e){is_login=e.is_login,$("#user-slot, #header_login").html(e.html),is_login&&$("#header").addClass("header-logged")}),$.get("/ajax/verify?domain="+window.location.hostname,function(e){e.statu
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 69 6c 5f 70 61 67 65 2d 77 61 74 63 68 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 69 64 22 29 2c 74 79 70 65 3a 24 28 22 2e 64 65 74 61 69 6c 5f 70 61 67 65 2d 77 61 74 63 68 22 29 2e 61 74 74 72 28 22 64 61 74 61 2d 74 79 70 65 22 29 7d 29 2c 69 73 5f 70 72 6f 63 65 73 73 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 5f 6c 6f 67 69 6e 28 29 7b 72 65 74 75 72 6e 21 21 69 73 5f 6c 6f 67 69 6e 7c 7c 28 24 28 22 23 6d 6f 64 61 6c 6c 6f 67 69 6e 22 29 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 64 69 72 65 63 74 28 65 29 7b 65 2e 72 65 64 69 72 65 63 74 26 26 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 65 2e 72 65 64 69 72 65 63 74 29 7d 66 75 6e 63 74 69 6f 6e 20 76 6f 74 65 5f 69 6e 66 6f 28 29 7b 24 2e Data Ascii: il_page-watch").attr("data-id"),type:$(".detail_page-watch").attr("data-type")}),is_process=!1;function check_login(){return!!is_login\|\|($("#modallogin").modal("show"),!1)}function redirect(e){e.redirect&&(location.href=e.redirect)}function vote_info(){$.
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 7b 69 73 5f 70 72 6f 63 65 73 73 7c 7c 63 68 65 63 6b 5f 6c 6f 67 69 6e 28 29 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 72 65 63 61 70 74 63 68 61 5f 73 69 74 65 5f 6b 65 79 3f 67 72 65 63 61 70 74 63 68 61 2e 65 78 65 63 75 74 65 28 72 65 63 61 70 74 63 68 61 5f 73 69 74 65 5f 6b 65 79 2c 7b 61 63 74 69 6f 6e 3a 22 61 64 64 5f 66 61 76 6f 72 69 74 65 22 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 75 62 6d 69 74 5f 61 64 64 5f 66 61 76 6f 72 69 74 65 28 65 29 7d 29 3a 73 75 62 6d 69 74 5f 61 64 64 5f 66 61 76 6f 72 69 74 65 28 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 76 65 5f 66 61 76 6f 72 69 74 65 28 65 29 7b 69 73 5f 70 72 6f 63 65 73 73 7c 7c 63 68 65 63 6b 5f 6c 6f 67 69 6e 28 29 26 26 63 6f Data Ascii: {is_process\|\|check_login()&&("undefined"!=typeof recaptcha_site_key?grecaptcha.execute(recaptcha_site_key,{action:"add_favorite"}).then(function(e){submit_add_favorite(e)}):submit_add_favorite(""))}function remove_favorite(e){is_process\|\|check_login()&&co
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 2e 62 69 6e 64 28 22 6d 6f 75 73 65 6f 76 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 68 65 61 64 65 72 5f 6d 65 6e 75 2d 73 75 62 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 62 6c 6f 63 6b 22 29 7d 29 2c 24 28 22 2e 68 65 61 64 65 72 5f 6d 65 6e 75 2d 6c 69 73 74 3e 20 2e 6e 61 76 2d 69 74 65 6d 22 29 2e 62 69 6e 64 28 22 6d 6f 75 73 65 6f 75 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 68 65 61 64 65 72 5f 6d 65 6e 75 2d 73 75 62 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 6e 6f 6e 65 22 29 7d 29 2c 24 28 22 23 74 75 72 6e 2d 6f 66 66 2d 6c 69 67 68 74 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 24 28 22 23 6d 61 73 6b 2d 6f 76 Data Ascii: .bind("mouseover",function(){$(this).find(".header_menu-sub").css("display","block")}),$(".header_menu-list> .nav-item").bind("mouseout",function(){$(this).find(".header_menu-sub").css("display","none")}),$("#turn-off-light").click(function(e){$("#mask-ov
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 6b 65 64 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 75 73 68 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 29 7d 29 2c 24 28 22 2e 63 6f 75 6e 74 72 79 2d 69 64 73 3a 63 68 65 63 6b 65 64 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 70 75 73 68 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 29 7d 29 2c 65 3d 30 3c 65 2e 6c 65 6e 67 74 68 3f 65 2e 6a 6f 69 6e 28 22 2d 22 29 3a 22 61 6c 6c 22 2c 74 3d 30 3c 74 2e 6c 65 6e 67 74 68 3f 74 2e 6a 6f 69 6e 28 22 2d 22 29 3a 22 61 6c 6c 22 2c 24 28 22 69 6e 70 75 74 5b 6e 61 6d 65 3d 72 65 6c 65 61 73 65 5f 79 65 61 72 5d 3a 63 68 65 63 6b 65 64 22 29 2e 76 61 6c 28 29 7c 7c 24 28 22 73 65 6c 65 63 74 5b 6e 61 6d 65 3d 72 65 6c 65 61 73 65 5f 79 65 61 72 5d 22 29 2e 76 61 6c 28 29 Data Ascii: ked").each(function(){e.push($(this).val())}),$(".country-ids:checked").each(function(){t.push($(this).val())}),e=0<e.length?e.join("-"):"all",t=0<t.length?t.join("-"):"all",$("input[name=release_year]:checked").val()\|\|$("select[name=release_year]").val()
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 61 74 74 72 28 22 73 72 63 22 2c 22 22 29 7d 29 7d 29 3b 76 61 72 20 61 70 70 3d 6e 65 77 20 56 75 65 28 7b 65 6c 3a 22 23 61 70 70 22 2c 64 61 74 61 3a 7b 6e 61 6d 65 3a 22 22 2c 65 6d 61 69 6c 3a 22 22 2c 70 61 73 73 77 6f 72 64 3a 22 22 2c 63 6f 6e 66 69 72 6d 5f 70 61 73 73 77 6f 72 64 3a 22 22 2c 6e 65 77 5f 70 61 73 73 77 6f 72 64 3a 22 22 2c 72 65 6d 65 6d 62 65 72 3a 21 31 2c 65 72 72 6f 72 5f 6c 6f 67 69 6e 3a 21 31 2c 65 72 72 6f 72 5f 72 65 67 69 73 74 65 72 3a 21 31 2c 65 72 72 6f 72 5f 66 6f 72 67 6f 74 3a 21 31 2c 65 72 72 6f 72 5f 70 72 6f 66 69 6c 65 3a 21 31 2c 65 72 72 6f 72 5f 6d 65 73 73 61 67 65 3a 22 22 2c 6b 65 79 77 6f 72 64 3a 22 22 2c 69 73 5f 70 72 6f 63 65 73 73 3a 21 31 7d 2c 6d 65 74 68 6f 64 73 3a 7b 73 68 6f 77 5f 6c 6f 67 Data Ascii: attr("src","")})});var app=new Vue({el:"#app",data:{name:"",email:"",password:"",confirm_password:"",new_password:"",remember:!1,error_login:!1,error_register:!1,error_forgot:!1,error_profile:!1,error_message:"",keyword:"",is_process:!1},methods:{show_log
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 72 6f 63 65 73 73 3d 21 30 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 72 65 63 61 70 74 63 68 61 5f 73 69 74 65 5f 6b 65 79 3f 67 72 65 63 61 70 74 63 68 61 2e 65 78 65 63 75 74 65 28 72 65 63 61 70 74 63 68 61 5f 73 69 74 65 5f 6b 65 79 2c 7b 61 63 74 69 6f 6e 3a 22 72 65 67 69 73 74 65 72 22 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 73 75 62 6d 69 74 5f 72 65 67 69 73 74 65 72 28 65 29 7d 29 3a 74 2e 73 75 62 6d 69 74 5f 72 65 67 69 73 74 65 72 28 22 22 29 29 2c 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 2c 73 75 62 6d 69 74 5f 72 65 67 69 73 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 24 2e 70 6f 73 74 28 22 2f 61 6a 61 78 2f 72 65 67 69 73 74 65 72 22 2c 7b Data Ascii: rocess=!0,"undefined"!=typeof recaptcha_site_key?grecaptcha.execute(recaptcha_site_key,{action:"register"}).then(function(e){t.submit_register(e)}):t.submit_register("")),e.preventDefault()},submit_register:function(e){var t=this;$.post("/ajax/register",{
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 62 61 72 2c 20 23 73 69 64 65 62 61 72 5f 6d 65 6e 75 5f 62 67 2c 20 23 62 74 6e 2d 66 69 6c 74 65 72 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 24 28 22 23 73 69 64 65 62 61 72 5f 6d 65 6e 75 2c 20 23 6d 6f 62 69 6c 65 5f 6d 65 6e 75 2c 20 23 73 69 64 65 62 61 72 5f 6d 65 6e 75 5f 62 67 2c 20 23 73 65 61 72 63 68 2d 74 6f 67 67 6c 65 2c 20 23 73 65 61 72 63 68 2c 20 23 68 65 61 64 65 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 24 28 22 62 6f 64 79 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 62 6f 64 79 2d 68 69 64 64 65 6e 22 29 7d 29 2c 24 28 22 23 6d 6f 62 69 6c 65 5f 73 65 61 72 63 68 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 24 28 22 23 73 65 61 72 63 68 2c 20 23 6d 6f 62 Data Ascii: bar, #sidebar_menu_bg, #btn-filter").click(function(e){$("#sidebar_menu, #mobile_menu, #sidebar_menu_bg, #search-toggle, #search, #header").removeClass("active"),$("body").removeClass("body-hidden")}),$("#mobile_search").click(function(e){$("#search, #mob
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 72 67 6f 74 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 20 73 68 6f 77 22 29 7d 29 2c 24 28 22 2e 66 6f 72 67 6f 74 2d 74 61 62 2d 6c 69 6e 6b 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 24 28 22 2e 6d 6c 74 2d 69 74 65 6d 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 24 28 22 23 6d 6f 64 61 6c 2d 74 61 62 2d 66 6f 72 67 6f 74 22 29 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 20 73 68 6f 77 22 29 2c 24 28 22 23 6d 6f 64 61 6c 2d 74 61 62 2d 6c 6f 67 69 6e 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 20 73 68 6f 77 22 29 7d 29 2c 24 28 22 2e 6c 6f 67 69 6e 2d 74 61 62 2d 6c 69 6e 6b 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 24 28 22 23 6d Data Ascii: rgot").removeClass("active show")}),$(".forgot-tab-link").click(function(e){$(".mlt-item").removeClass("active"),$("#modal-tab-forgot").addClass("active show"),$("#modal-tab-login").removeClass("active show")}),$(".login-tab-link").click(function(e){$("#m
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 63 68 69 6c 64 72 65 6e 3a 5b 5d 2c 63 68 69 6c 64 4e 6f 64 65 73 3a 5b 5d 2c 73 74 79 6c 65 3a 7b 7d 2c 73 65 74 41 74 74 72 69 62 75 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 5d 7d 7d 7d 2c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 2c 69 6d 70 6f 72 74 4e 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 6c 6f 63 61 74 69 6f 6e 3a 7b 68 61 73 68 3a 22 22 2c 68 6f 73 74 3a 22 22 2c 68 6f 73 74 6e 61 6d 65 3a 22 22 2c 68 72 65 66 3a 22 22 2c 6f 72 69 67 69 6e 3a 22 22 2c 70 61 74 68 6e 61 6d 65 3a Data Ascii: ion(){return{children:[],childNodes:[],style:{},setAttribute:function(){},getElementsByTagName:function(){return[]}}},createElementNS:function(){return{}},importNode:function(){return null},location:{hash:"",host:"",hostname:"",href:"",origin:"",pathname:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:12 UTC	555	OUT	GET /5/4724866/?oo=1&aab=1 HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:12 UTC	1363	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:12 GMT Content-Type: application/json Content-Length: 2885 Connection: close X-Trace-Id: f440e2638c87611b832046d8967609bc Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=00804a0338e44dedfdba96734544e68d; expires=Sat, 26 Apr 2025 18:32:12 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156332; expires=Sat, 26 Apr 2025 18:32:12 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-04-26 18:32:12 UTC	2885	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 3f 72 62 3d 50 48 6d 53 31 63 75 74 69 2d 2d 43 39 4f 63 38 5a 64 5f 6a 5f 31 38 49 41 4b 64 68 30 78 44 67 41 73 43 51 65 5f 46 36 44 64 75 46 65 50 50 57 6b 43 78 36 2d 54 4c 54 53 51 7a 4f 34 54 55 43 66 67 4f 76 65 52 30 79 39 61 45 4b 6b 50 49 4f 4d 74 65 53 45 36 65 46 46 73 78 58 67 5a 6c 38 6f 43 52 48 37 62 78 7a 38 71 70 51 5a 49 6e 7a 4a 72 4d 55 63 5a 45 36 54 51 71 34 66 4d 63 4b 41 78 2d 50 78 54 4a 30 2d 46 70 6b 43 44 34 7a 68 4a 66 43 4a 5a 74 55 51 77 4f 59 43 65 71 4e 6e 77 6c 4c 49 49 43 6e 65 69 47 4b 75 6f 30 62 56 56 6b 2d 71 30 33 6f 6b 32 6e 56 52 32 77 2d 54 77 4d 6b 75 45 6e 55 6e 45 74 59 58 69 4e 4e 34 6b 64 57 70 71 4e 65 73 70 39 62 35 55 55 53 6a 2d 41 67 Data Ascii: {"url":"//eephaush.com/?rb=PHmS1cuti--C9Oc8Zd_j_18IAKdh0xDgAsCQe_F6DduFePPWkCx6-TLTSQzO4TUCfgOveR0y9aEKkPIOMteSE6eFFsxXgZl8oCRH7bxz8qpQZInzJrMUcZE6TQq4fMcKAx-PxTJ0-FpkCD4zhJfCJZtUQwOYCeqNnwlLIICneiGKuo0bVVk-q03ok2nVR2w-TwMkuEnUnEtYXiNN4kdWpqNesp9b5UUSj-Ag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:12 UTC	374	OUT	GET /images/group_11/theme_3/logo.png?v=0.1 HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:12 UTC	1027	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:12 GMT Content-Type: image/png Content-Length: 50603 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=2592000 Last-Modified: Thu, 06 Jul 2023 17:26:11 GMT ETag: W/"c5ab-1892c3d721f" X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 799409 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gpv1pwUfa01XxwoIFnNKN8aogWnZ1R0dSkCW1x6xTeLUECteJEK5u55%2FU3BoAmwMINXcux0rrwiOrZn8ynIFch4iSVvp2P%2BbVufg3zIsjAqcMdACCYt0UA0x%2FuXuAC8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7778a8f4960-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:12 UTC	342	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR\rftEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 36 43 39 39 37 44 36 32 33 33 Data Ascii: tion rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:76C997D6233
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: de 54 e5 fa 8c 96 50 13 22 c7 ef b4 63 11 ea c4 06 9c 53 f6 3e 31 c7 72 ae 5f ba b1 ec 36 54 80 8b b9 5d 86 e3 d5 6a 1c 28 24 da 3c d1 de fe 89 ae 0e b8 44 77 a6 71 ec 3c d1 bb 1f 96 e5 52 07 7c fd b3 55 aa 03 54 d3 ff 99 3a a6 0b 04 8a d5 01 43 12 48 35 1f 86 6b 96 bc 1c ff 7c 39 ee 7b 00 7f f2 a7 20 c7 91 8d 25 b9 21 01 3c 16 1b e7 ee 1f c5 f1 10 ce de bb 70 1c 30 38 1f 2b 29 23 d2 7c 10 70 1e 83 16 fc 96 16 1c 93 96 94 5b 63 10 a0 90 06 0c 31 8d 35 33 96 65 f9 a4 e4 fd 45 39 00 b2 3a 49 00 b4 d8 c0 03 38 de 25 9e 85 7c 26 4f db 58 9e 1b 00 70 a1 b6 ff 80 e3 ab 7c e0 a2 7b 65 21 21 32 87 7e ec 5a e8 39 84 5b 0a 04 6c f1 9b ca df b1 10 47 c4 e4 df f1 b0 df eb ff f4 7d 9e fa 9b aa 11 a9 41 99 75 7e 0d 0c 08 b3 de 43 d6 45 19 03 0a 5d 33 75 40 07 81 f8 74 Data Ascii: TP"cS>1r_6T]j($<Dwq<R\|UT:CH5k\|9{ %!<p08+)#\|p[c153eE9:I8%\|&OXp\|{e!!2~Z9[lG}Au~CE]3u@t
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 37 7e dd 06 00 ac df 8d 3f ab 0f e3 f8 20 3e 77 6f 2d 90 84 ab 01 f1 42 4f dc 78 fa e2 b2 d6 31 2b 71 81 86 4b d0 a5 7e 94 05 01 e6 00 a5 9c 04 a2 5c 63 9e 2d f6 d3 1c 02 b5 7f a3 ae 3f 6b 8f 60 d2 3e d2 0f 08 38 ef 51 cb 32 74 fc 3e 51 0f 8a 40 00 4c 1b 81 a7 4d 00 5b 1d 08 f0 3b fb a0 5a 63 e4 f1 42 34 8f 97 82 20 57 e1 f8 04 8e 2b 09 94 b1 d9 a7 df 2a 2a c4 93 ae 94 1c 8e af 0a 78 64 ce 69 55 ea 95 44 c1 d2 62 1e 45 15 80 f3 0a 6c 10 8d f8 98 7d 7d 96 72 1f 51 fc a8 0b 3c 8a 87 b1 ae 18 c0 22 4d f7 66 ba 6c ac ae 55 e9 05 fc 60 fc 6f cf c7 b7 15 bc f6 0a ee 0a c4 df 7c 9f b8 19 bb 30 89 5e b0 04 98 61 24 15 04 1b 4a 91 81 f8 8e fb d5 ef d1 73 bd 57 20 e0 13 13 c8 e2 82 21 c4 92 d0 72 7a 27 90 48 1e 42 a4 3c 2b 39 87 94 98 7e c7 67 3c 9f 80 47 10 fe 47 Data Ascii: 7~? >wo-BOx1+qK~\c-?k`>8Q2t>Q@LM[;ZcB4 W+**xdiUDbEl}}rQ<"MflU`o\|0^a$JsW !rz'HB<+9~g<GG
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 95 13 fd e6 db a0 ba f5 36 d4 e9 af 42 a2 af e0 e2 43 ad 3d 42 51 59 b8 f0 48 4f 42 5c ff 20 60 fb e2 2a e0 93 9a 06 06 f7 40 7b e1 ab 08 06 7f 0f 1d 04 03 06 2d 08 aa 5b 51 2a 18 06 a3 88 82 7d 54 e1 a6 74 70 7f 97 63 9f 64 ed 32 e5 41 20 9d a7 55 80 c0 6b 41 c6 0c 6c 00 c0 79 02 c0 cf e3 f8 75 5b 2c cf 03 01 a6 2d da 2c 00 30 c3 72 9f 00 00 73 70 7f 92 35 0e 32 bb ad 58 de f5 c4 75 04 3c c9 b1 68 7b 46 e8 f6 de d0 4e a8 6d 79 2a d4 76 3e 13 bc 89 27 41 d5 1b e1 b6 76 08 a3 19 fc 5a 57 33 44 95 27 c4 4b 0e 04 92 ad 8a ea 4d 55 11 1c 85 ee e2 9d d0 5a fa 12 82 c1 57 21 6c 3f 82 c2 c0 04 f8 c1 94 d2 f3 4b 02 41 1e 08 c4 3b ac cf 6d bf f1 05 00 81 5f c0 97 df d8 00 80 d5 03 c0 db f1 e5 97 32 e2 39 29 06 00 70 81 40 66 11 31 77 f9 39 c3 a8 e4 94 1d 4c 69 c1 Data Ascii: 6BC=BQYHOB\ `@{-[Q}Ttpcd2A UkAlyu[,-,0rsp52Xu<h{FNmy*v>'AvZW3D'KMUZW!l?KA;m_29)p@f1w9Li
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 2d 5c 0c 10 48 80 00 25 1a 8f 48 e0 5a 3a f7 01 1c bf 8f f7 bd 04 95 ea 3e 65 e5 67 26 08 10 ed 7a 4b 80 00 55 a5 0e 3c 7a 41 24 81 27 e2 cb b7 2e 22 00 5c 24 09 80 c0 14 de fc 43 f8 d7 90 65 08 ec 5f 0d 60 86 02 90 35 f2 d9 df 25 ea 49 aa d2 35 8c 59 b6 03 c5 f5 59 77 11 c2 a5 13 50 dd 7a 2b 0c dd f0 5f a1 32 7c 3d b4 d8 0c 32 16 5d dc 2f 47 0c 17 1e 04 38 b7 1b 16 e0 24 72 04 4f 7c 09 96 1f fe 1b 68 9e fc 67 e8 ce 3f 08 b4 33 2f ee 89 04 75 1c 35 59 e1 87 78 6a 9e b8 da 14 0a db 06 cf 48 e4 6d 89 bc da 08 54 c7 0e 40 63 eb 2d 30 b8 fb 39 30 b0 ed 79 a9 04 81 c4 65 ab 3b 17 13 04 12 3b 1e 91 d2 40 d8 be 0f e6 4f bf 07 5a cb 5f 41 95 60 17 78 c1 a8 19 ed 63 d7 21 c8 05 81 94 09 c4 44 7f 01 40 60 09 df 23 52 c1 d9 1f 30 00 60 f7 e1 02 3e e8 f0 04 f4 07 00 Data Ascii: -\H%HZ:>eg&zKU<zA$'."\$Ce_`5%I5YYwPz+_2\|=2]/G8$rO\|hg?3/u5YxjHmT@c-090ye;;@OZ_A`xc!D@`#R0`>
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 24 00 c1 09 1d f7 43 cd 78 09 79 bc 10 82 c6 16 1c db e1 d4 df be 01 16 8e fc 29 82 c0 20 7e 52 b1 8a a7 ac 0f 10 10 72 1f 4a 29 c4 1b 82 c9 5d 7f 04 c3 e3 6f 10 25 ca 28 5d 90 6b e2 7c 41 80 ad 19 08 70 5a f9 d8 63 04 00 ae f6 90 6b 3a 5e 8d 0f f5 15 85 22 1b a3 a5 b8 3f 29 13 b3 cf 72 ba ff 42 dc 96 cb 07 da 9c 85 68 f9 0c 0c dc f0 0b 30 7c fd 2f 43 08 28 b6 46 c7 21 1b ca bb 3e 40 80 c7 36 54 fd ad b0 7c e2 b3 48 fc 6f 84 80 13 7f 7d 5c d3 f7 59 e9 a7 9d ac 69 c2 dc f0 9f 74 35 b2 d4 27 b5 c0 33 20 80 d7 e0 d7 26 04 20 9d fa ca 4f c1 ca a9 2f 81 ef 0d 67 03 76 d6 01 08 c4 eb 8e b1 65 f1 f7 c8 96 77 c0 d8 e6 5f 82 a8 7d 0a a2 2e b7 f7 04 e7 05 02 34 ee 04 95 0b 02 d0 0f 08 70 9a 79 f5 05 b7 01 34 ff e2 82 c6 01 f0 12 de 8f e6 25 dc 30 bb 3f 5e 1c 98 e3 Data Ascii: $Cxy) ~RrJ)]o%(]k\|ApZck:^"?)rBh0\|/C(F!>@6T\|Ho}\Yit5'3 & O/gvew_}.4py4%0?^
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: ee fe 33 a0 9d 25 08 46 76 09 16 2b ae 25 e2 59 7a bc a8 07 12 6c 50 41 60 1b 04 7f 62 0a bc e1 11 f0 71 78 83 f8 be 31 08 04 01 80 06 c8 79 91 83 51 59 0e 27 99 27 ca e4 95 7b 5a bd fc 88 11 a1 c6 7a 2a 1b 90 9f 8f 73 2b 82 0b 3f a0 08 06 08 00 11 4a 0e 74 99 4b 06 0b 42 4a 08 97 16 50 72 58 42 da e8 e0 e1 7d 04 84 3a 00 07 05 7e 6c bf 0e dd ce 22 2c dc f7 11 a8 3f e9 26 9e 8f c7 cf d2 73 ce 8b e7 52 7e 8f b1 de df 83 9c cc c9 32 e7 e6 92 80 5f d9 05 93 bb 3f 0a d3 47 5f 0e 61 fb 61 a8 d4 f7 a4 9e 17 2f 11 76 f2 db bc 2b 34 e4 cb 91 bb 07 bd c8 d5 95 98 24 c5 56 4a 76 25 7e 1b fe cd 3b 64 3d b4 66 12 40 fb 2f d6 2e 01 09 e7 f2 1b a8 f8 5c e7 a6 d5 12 ae c0 98 f3 c7 25 98 1c a8 9e 44 0f 7a 59 83 a0 8c fb e7 7e fe b3 28 ad 46 30 84 3a 7f 30 76 ab 22 fe fc Data Ascii: 3%Fv+%YzlPA`bqx1yQY''{Zz*s+?JtKBJPrXB}:~l",?&sR~2_?G_aa/v+4$VJv%~;d=f@/.\%DzY~(F0:0v"
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 60 64 f3 2f 42 63 e8 f9 d0 59 b9 57 75 2c 06 03 04 9c b2 bb 06 02 c2 1e 60 3f 73 03 04 68 3f 20 f0 a1 8b 0d 00 cf c4 71 5b 79 2e ef 7e 28 86 6d 80 15 2f 02 43 e4 43 bd 93 2e 9e 04 32 b4 0b 6a 4f f9 7f c4 99 2b 6c 56 24 f6 10 67 8e dd fa 06 01 c1 53 51 44 8e a2 69 19 46 46 e2 08 94 08 92 68 14 be 5a 88 c6 99 b5 63 27 d2 81 02 0b 88 40 71 72 9a 12 b5 28 2a 42 53 62 25 9a f4 60 48 08 1a 38 30 4d ca 60 ea 18 f8 1a 31 59 58 45 18 0c 95 44 90 dc 0f 93 40 20 62 06 84 6d e7 9c 21 c5 5d 6a 20 20 48 53 e4 8d 00 8c ef fc 2d a8 54 0f 40 b7 75 54 aa 02 1a 08 30 b3 48 65 f6 d4 2c d5 aa f2 40 20 36 8b 97 00 81 db 14 0d ae 1e 00 ce b3 c8 c7 1f 38 8f 4a f3 55 00 e6 68 b2 99 97 0d 9c 93 16 20 41 c0 23 40 51 3c e6 c7 68 3c f5 ed 40 82 6d e0 85 c7 b5 ac 3e b8 e4 40 80 87 a3 Data Ascii: `d/BcYWu,`?sh? q[y.~(m/CC.2jO+lV$gSQDiFFhZc'@qr(*BSb%`H80M`1YXED@ bm!]j HS-T@uT0He,@ 68JUh A#@Q<h<@m>@
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 8d e7 64 1d 5e 23 60 11 cf b7 24 ea 0e f0 f4 e1 a4 b2 88 72 df c4 f9 19 42 8e 11 59 74 0d 3c 5c 4d 19 17 7b d8 42 2e 29 9b 40 24 ee 71 70 fc 35 50 1f 79 16 74 3b 0f c9 18 df 28 9d 5b fe 0c f5 7a 02 76 29 31 e3 4f c7 b2 24 cc ac 2e 5c a0 0e bc e7 42 db 00 7e 08 c7 5e a7 9b ce ba 38 f7 d1 cb 47 09 1a 49 6a 7c 49 74 16 71 5e eb 50 bd e9 cd a2 15 74 c0 16 dd 8f f0 92 06 81 48 c4 9d 7b c1 88 70 99 31 e5 76 13 a2 b8 47 44 2f c0 88 67 e0 75 16 20 6c 21 c1 77 97 84 c1 90 eb d7 4c 25 e8 24 67 10 c6 bc 48 bd a6 ea 40 22 4e d0 d8 83 c0 4c 73 74 6c 0f a0 34 63 ad 62 2a 55 49 da 15 a9 02 04 04 03 04 82 a8 b5 08 b4 bb 22 ca 82 81 e2 78 2c 71 21 76 50 68 18 c5 5f 57 35 b9 f8 f1 01 02 7a 90 d0 d8 96 5f 42 0c 1c c4 a9 9b 93 12 97 06 02 89 77 80 80 3b 46 c0 00 06 5b f5 cd Data Ascii: d^#`$rBYt<\M{B.)@$qp5Pyt;([zv)1O$.\B~^8GIj\|Itq^PtH{p1vGD/gu l!wL%$gH@"NLstl4cb*UI"x,q!vPh_W5z_Bw;F[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49754	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:12 UTC	336	OUT	GET / HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:12 UTC	953	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:12 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rqRnPVi707dLplx82qb%2B%2B%2FM08cu1Jsg9ykpB8pqJTjq%2BxUrmIswng9x9D5zUsJeO12mjvlOShj9v%2FBSspvPlk04s9JRyiYrOZQJfOxc7wHKW%2Fhi9ON0EuDQTsHtSVVA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a777990b287a-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:12 UTC	416	IN	Data Raw: 31 36 30 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 23 31 4d 6f 76 69 65 73 20 7c 20 57 61 74 63 68 20 46 72 65 65 20 53 74 72 65 61 6d 69 6e 67 20 4d 6f 76 69 65 73 20 61 6e 64 20 54 56 20 53 65 72 69 65 73 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 Data Ascii: 1608<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title> <meta name="robots" content="index, follow"> <meta name="r
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 31 4d 6f 76 69 65 73 20 57 61 74 63 68 20 4d 6f 76 69 65 73 20 6f 6e 6c 69 6e 65 20 66 6f 72 20 66 72 65 65 2c 20 53 74 72 65 61 6d 69 6e 67 20 6d 6f 76 69 65 73 20 6f 6e 20 31 4d 6f 76 69 65 73 2e 74 6f 2e 20 31 4d 6f 76 69 65 73 20 69 73 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 62 73 69 74 65 20 66 6f 72 20 66 72 65 65 20 6d 6f 76 69 65 73 2e 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 31 6d 6f 76 69 65 73 20 77 65 62 73 69 74 65 2c 20 31 6d 6f 76 69 65 73 20 69 73 2c 20 31 6d 6f 76 69 65 73 20 73 65 2c 20 31 6d 6f 76 69 65 73 20 6f 6e 6c 69 6e 65 2c 20 Data Ascii: "/> <meta name="description" content="1Movies Watch Movies online for free, Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/> <meta name="keywords" content="1movies website, 1movies is, 1movies se, 1movies online,
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 72 65 6c 65 61 73 65 73 2f 76 35 2e 33 2e 31 2f 63 73 73 2f 61 6c 6c 2e 63 73 73 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 67 72 6f 75 70 5f 31 31 2f 74 68 65 6d 65 5f 33 2f 68 6f 6d 65 2e 63 73 73 22 3e 0a 20 20 20 20 3c 21 2d 2d 45 6e 64 3a 20 53 74 79 6c 65 73 68 65 65 74 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 Data Ascii: /bootstrap.min.css"> <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.3.1/css/all.css"> <link rel="stylesheet" href="/css/group_11/theme_3/home.css"> ...End: Stylesheet--> <script src="https://cdnjs.cloudflare.com/ajax
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 5d 3d 24 2e 24 28 24 2e 43 43 2c 6e 2c 24 2e 43 45 2c 21 24 2e 79 2c 24 2e 42 77 2c 24 2e 24 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 5b 24 2e 42 77 5d 3b 62 72 65 61 6b 3b 7d 7d 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 65 3d 24 2e 24 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 67 3d 24 2e 42 44 3b 24 2e 5f 67 3c 24 2e 43 66 3b 24 2e 5f 67 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 67 29 7b 63 61 73 65 20 24 2e 43 42 3a 74 2e 65 3d 34 37 32 34 38 36 38 2c 74 2e 61 3d 34 37 32 34 38 36 36 2c 74 2e 76 3d 33 2c 74 2e 77 3d 31 2c 74 2e 68 3d 33 30 2c 74 2e 79 3d 74 72 75 65 2c 74 2e 5f 3d Data Ascii: ]=$.$($.CC,n,$.CE,!$.y,$.Bw,$.$());break;case $.BD:if(e[n])return e[n][$.Bw];break;}}}break;case $.BD:var e=$.$();break;}}}([function(n,t,r){for($._g=$.BD;$._g<$.Cf;$._g+=$.y){switch($._g){case $.CB:t.e=4724868,t.a=4724866,t.v=3,t.w=1,t.h=30,t.y=true,t._=
2024-04-26 18:32:12 UTC	1125	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 24 2e 42 44 2c 61 2e 7a 29 28 29 3b 7d 2c 74 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 28 24 2e 42 44 2c 75 2e 52 29 28 6f 2e 48 5b 24 2e 44 73 5d 2c 6f 5b 24 2e 47 6e 5d 5b 24 2e 44 73 5d 29 2c 28 24 2e 42 44 2c 75 2e 52 29 28 6f 5b 24 2e 45 71 5d 5b 24 2e 44 73 5d 2c 6f 5b 24 2e 47 6e 5d 5b 24 2e 44 73 5d 29 5d 5b 24 2e 42 74 5d 28 24 2e 62 70 29 3b 7d 2c 74 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 24 2e 5f 42 64 3d 24 2e 42 44 3b 24 2e 5f 42 64 3c 24 2e 43 42 3b 24 2e 5f 42 64 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 64 29 7b 63 61 73 65 20 24 2e 79 3a 6e 2e 69 64 3d 69 2e 51 2c 77 69 6e 64 6f 77 5b 24 2e 4a 48 5d 28 6e 2c 24 2e 4a 75 29 3b 62 72 65 61 6b Data Ascii: unction(){return($.BD,a.z)();},t.D=function(){return[($.BD,u.R)(o.H[$.Ds],o[$.Gn][$.Ds]),($.BD,u.R)(o[$.Eq][$.Ds],o[$.Gn][$.Ds])][$.Bt]($.bp);},t.F=function(){for($._Bd=$.BD;$._Bd<$.CB;$._Bd+=$.y){switch($._Bd){case $.y:n.id=i.Q,window[$.JH](n,$.Ju);break
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 32 38 35 35 0d 0a 75 6e 29 28 6e 5b 24 2e 63 73 5d 29 2c 28 24 2e 42 44 2c 69 2e 69 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 42 5d 5b 24 2e 74 5d 29 2c 28 24 2e 42 44 2c 69 2e 63 6e 29 28 6e 65 77 20 65 28 29 29 2c 28 24 2e 42 44 2c 69 2e 66 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 72 5d 5b 24 2e 62 78 5d 29 2c 28 24 2e 42 44 2c 69 2e 61 6e 29 28 6e 5b 24 2e 63 78 5d 7c 7c 6e 5b 24 2e 64 6f 5d 29 5d 5b 24 2e 6c 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 24 2e 5f 43 68 3d 24 2e 42 44 3b 24 2e 5f 43 68 3c 24 2e 43 42 3b 24 2e 5f 43 68 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 68 29 7b 63 61 73 65 20 24 2e 79 3a 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 24 2e 5f 43 62 3d 24 2e 42 44 3b 24 2e 5f 43 62 3c 24 2e 43 42 3b 24 2e 5f 43 Data Ascii: 2855un)(n[$.cs]),($.BD,i.in)(window[$.bB][$.t]),($.BD,i.cn)(new e()),($.BD,i.fn)(window[$.br][$.bx]),($.BD,i.an)(n[$.cx]\|\|n[$.do])][$.l](function(t){for($._Ch=$.BD;$._Ch<$.CB;$._Ch+=$.y){switch($._Ch){case $.y:q(function(){for($._Cb=$.BD;$._Cb<$.CB;$._C
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 68 28 24 2e 5f 42 6b 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 65 3c 3d 74 26 26 74 3c 3d 75 3f 74 2d 65 3a 6f 3c 3d 74 26 26 74 3c 3d 63 3f 74 2d 6f 2b 69 3a 24 2e 42 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 5b 24 2e 42 76 5d 28 29 5b 24 2e 62 43 5d 28 24 2e 42 44 29 3b 62 72 65 61 6b 3b 7d 7d 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 4f 62 6a 65 63 74 5b 24 2e 65 5d 28 74 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 2c 74 5b 24 2e 44 6c 5d 3d 61 2c 74 5b 24 2e 6f 5d 3d 64 2c 74 2e 64 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 75 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 47 75 5d 28 24 2e 42 75 29 5b 24 2e 61 61 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 24 2e 5f 42 46 3d Data Ascii: h($._Bk){case $.y:return e<=t&&t<=u?t-e:o<=t&&t<=c?t-o+i:$.BD;break;case $.BD:var t=n[$.Bv]()[$.bC]($.BD);break;}}}break;case $.y:Object[$.e](t,$.Cc,$.$($.Ij,!$.BD)),t[$.Dl]=a,t[$.o]=d,t.dn=function(n,u){return n[$.Gu]($.Bu)[$.aa](function(n,t){for($._BF=
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 2c 6c 3d 72 28 24 2e 42 44 29 2c 66 3d 74 2e 70 6e 3d 6e 65 77 20 6a 28 24 2e 61 42 2c 24 2e 42 75 29 2c 69 3d 28 24 2e 43 73 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 3a 24 2e 24 28 24 2e 61 2c 6e 75 6c 6c 29 29 5b 24 2e 61 5d 2c 77 3d 24 2e 43 78 2c 79 3d 24 2e 43 79 2c 62 3d 24 2e 43 7a 2c 5f 3d 24 2e 44 41 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 4f 62 6a 65 63 74 5b 24 2e 65 5d 28 74 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 2c 74 2e 70 6e 3d 76 6f 69 64 20 24 2e 42 44 2c 74 2e 67 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 75 2c 69 29 7b 66 6f 72 28 24 2e 5f 42 7a 3d 24 2e 42 44 3b 24 2e 5f 42 7a 3c 24 2e 43 42 3b 24 2e 5f 42 7a 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 7a 29 Data Ascii: ,l=r($.BD),f=t.pn=new j($.aB,$.Bu),i=($.Cs!=typeof document?document:$.$($.a,null))[$.a],w=$.Cx,y=$.Cy,b=$.Cz,_=$.DA;break;case $.y:Object[$.e](t,$.Cc,$.$($.Ij,!$.BD)),t.pn=void $.BD,t.gn=function(e,u,i){for($._Bz=$.BD;$._Bz<$.CB;$._Bz+=$.y){switch($._Bz)
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 28 6e 75 6c 6c 2c 24 2e 24 28 24 2e 47 6f 2c 6e 29 29 5b 24 2e 61 61 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 28 24 2e 42 44 2c 75 2e 64 6e 29 28 72 2c 74 29 3b 7d 29 5b 24 2e 42 74 5d 28 24 2e 65 67 29 3b 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 66 6f 72 28 24 2e 5f 44 6c 3d 24 2e 42 44 3b 24 2e 5f 44 6c 3c 24 2e 46 6b 3b 24 2e 5f 44 6c 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 44 6c 29 7b 63 61 73 65 20 24 2e 46 6c 3a 66 75 6e 63 74 69 6f 6e 20 79 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2b 28 6c 5b 24 2e 44 73 5d 3d 24 2e 61 7a 2a 6c 5b 24 2e 44 73 5d 25 24 2e 62 76 2c 6c 5b 24 2e 44 73 5d 25 28 74 2d 6e 29 29 3b Data Ascii: (null,$.$($.Go,n))[$.aa](function(n,t){return($.BD,u.dn)(r,t);})[$.Bt]($.eg);};break;case $.BD:$.Cr;break;}}},function(n,t,u){for($._Dl=$.BD;$._Dl<$.Fk;$._Dl+=$.y){switch($._Dl){case $.Fl:function y(n,t){return n+(l[$.Ds]=$.az*l[$.Ds]%$.bv,l[$.Ds]%(t-n));
2024-04-26 18:32:12 UTC	1369	IN	Data Raw: 6f 77 5b 24 2e 43 5d 28 24 2e 47 6c 2c 6e 29 2c 24 2e 63 47 3d 3d 3d 6c 5b 24 2e 44 73 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6c 5b 24 2e 44 74 5d 3d 21 24 2e 42 44 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 24 2e 4a 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 77 3d 6e 65 77 20 65 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 44 43 3a 77 69 6e 64 6f 77 5b 24 2e 42 5d 28 24 2e 47 6c 2c 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 43 42 3a 76 61 72 20 6e 3d 28 24 2e 42 44 2c 6f 5b 24 2e 44 6d 5d 29 28 6c 2c 63 2e 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 6c 5b 24 2e 44 74 5d 3d 21 24 2e 79 3b 62 72 65 61 6b 3b 7d 7d 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 46 73 3a 6c 5b 24 2e 42 6e 5d 3d 24 2e 42 75 2c 6c 5b 24 2e 44 Data Ascii: ow[$.C]($.Gl,n),$.cG===l[$.Ds])return void(l[$.Dt]=!$.BD);break;}}}},$.Jj);break;case $.y:w=new e();break;case $.DC:window[$.B]($.Gl,n);break;case $.CB:var n=($.BD,o[$.Dm])(l,c.Q);break;case $.BD:l[$.Dt]=!$.y;break;}}}();break;case $.Fs:l[$.Bn]=$.Bu,l[$.D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49755	18.64.174.59	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:12 UTC	537	OUT	GET /js/sharethis.js HTTP/1.1 Host: platform-api.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:12 UTC	598	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 210640 Connection: close Edge-control: cache-maxage=60m,downstream-ttl=60m X-Frame-Options: SAMEORIGIN Date: Fri, 26 Apr 2024 18:32:12 GMT Cache-Control: max-age=600, public ETag: W/"336d0-g/6wprihOkYe7HpMswOVDodT6lU" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 365e59ad1bbb7b57baa147f2406c99bc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P4 X-Amz-Cf-Id: bz1gukWoszFIFEPIAVWfCEPogT30sQ43qHWb49-QFS-DfWshAooMnA== Age: 264 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:12 UTC	15786	IN	Data Raw: 69 66 20 28 21 44 61 74 65 2e 6e 6f 77 29 20 7b 0a 20 20 44 61 74 65 2e 6e 6f 77 20 3d 20 66 75 6e 63 74 69 6f 6e 20 6e 6f 77 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 0a 20 20 7d 3b 0a 7d 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 66 75 6e 63 4e 61 6d 65 2c 20 62 61 73 65 4f 62 6a 29 20 7b 0a 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 20 20 2f 2f 20 54 68 65 20 70 75 62 6c 69 63 20 66 75 6e 63 74 69 6f 6e 20 6e 61 6d 65 20 64 65 66 61 75 6c 74 73 20 74 6f 20 77 69 6e 64 6f 77 2e 64 6f 63 52 65 61 64 79 0a 20 20 2f 2f 20 62 75 74 20 79 6f 75 20 63 61 6e 20 6d 6f 64 69 66 79 20 74 68 65 20 6c 61 73 74 20 6c 69 6e 65 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 74 6f 20 70 61 73 Data Ascii: if (!Date.now) { Date.now = function now() { return new Date().getTime(); };}(function(funcName, baseObj) { "use strict"; // The public function name defaults to window.docReady // but you can modify the last line of this function to pas
2024-04-26 18:32:12 UTC	16384	IN	Data Raw: 3d 20 5b 24 65 6c 2e 63 6c 61 73 73 4e 61 6d 65 2c 20 24 65 6c 2e 69 64 5d 3b 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 2c 20 6c 65 6e 20 3d 20 72 65 66 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 73 74 72 20 3d 20 72 65 66 5b 69 5d 3b 0a 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 73 74 72 20 21 3d 3d 20 27 73 74 72 69 6e 67 27 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 69 6e 75 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 69 66 20 28 72 65 2e 74 65 73 74 28 28 73 74 72 20 7c 7c 20 27 27 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 66 Data Ascii: = [$el.className, $el.id]; for (i = 0, len = ref.length; i < len; i++) { str = ref[i]; if (typeof str !== 'string') { continue; } if (re.test((str \|\| '').toLowerCase())) { return true; } } return f
2024-04-26 18:32:12 UTC	16384	IN	Data Raw: 20 2b 20 28 73 74 2e 71 73 28 70 61 72 61 6d 73 29 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 6d 67 20 3d 20 6e 65 77 20 49 6d 61 67 65 28 31 2c 20 31 29 3b 0a 20 20 20 20 69 6d 67 2e 73 72 63 20 3d 20 72 65 73 6f 75 72 63 65 3b 0a 20 20 20 20 69 6d 67 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6e 65 78 74 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 20 6e 65 78 74 28 74 72 75 65 29 20 3a 20 76 6f 69 64 20 30 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 69 6d 67 2e 6f 6e 65 72 72 6f 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6e 65 78 74 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 Data Ascii: + (st.qs(params)); } img = new Image(1, 1); img.src = resource; img.onload = function() { return typeof next === "function" ? next(true) : void 0; }; return img.onerror = function() { return typeof next === "function"
2024-04-26 18:32:13 UTC	16384	IN	Data Raw: 2e 5f 5f 73 68 61 72 65 74 68 69 73 5f 5f 0a 0a 20 20 73 74 2e 43 75 73 74 6f 6d 43 6f 6c 6f 72 20 3d 20 63 6c 61 73 73 20 43 75 73 74 6f 6d 43 6f 6c 6f 72 20 7b 0a 20 20 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 28 72 2c 20 67 2c 20 62 29 20 7b 0a 20 20 20 20 20 20 74 68 69 73 2e 73 65 74 28 72 2c 20 67 2c 20 62 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 0a 20 20 20 20 74 6f 53 74 72 69 6e 67 28 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 60 72 67 62 28 24 7b 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 72 29 7d 2c 20 24 7b 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 67 29 7d 2c 20 24 7b 4d 61 74 68 2e 72 6f 75 6e 64 28 74 68 69 73 2e 62 29 7d 29 60 3b 0a 20 20 20 20 7d 0a 20 20 0a 20 20 20 20 73 65 74 28 72 2c 20 67 2c 20 62 29 20 7b 0a 20 20 20 Data Ascii: .__sharethis__ st.CustomColor = class CustomColor { constructor(r, g, b) { this.set(r, g, b); } toString() { return `rgb(${Math.round(this.r)}, ${Math.round(this.g)}, ${Math.round(this.b)})`; } set(r, g, b) {
2024-04-26 18:32:13 UTC	16384	IN	Data Raw: 69 64 65 6f 27 2c 0a 20 20 20 20 27 2e 74 77 69 74 74 65 72 2d 77 69 64 67 65 74 27 2c 0a 20 20 20 20 27 65 6d 62 65 64 27 2c 0a 20 20 20 20 27 69 66 72 61 6d 65 27 2c 0a 20 20 20 20 27 5b 63 6c 61 73 73 5e 3d 22 50 49 4e 22 5d 27 0a 20 20 5d 3b 0a 0a 20 20 76 61 72 20 63 6f 6e 66 69 67 20 3d 20 5b 0a 20 20 20 20 7b 20 74 79 70 65 3a 20 22 61 75 64 69 6f 22 2c 20 75 72 6c 3a 20 22 61 6e 63 68 6f 72 2e 66 6d 22 20 7d 2c 0a 20 20 20 20 7b 20 74 79 70 65 3a 20 22 61 75 64 69 6f 22 2c 20 75 72 6c 3a 20 22 6f 70 65 6e 2e 73 70 6f 74 69 66 79 2e 63 6f 6d 2f 65 6d 62 65 64 22 20 7d 2c 0a 20 20 20 20 7b 20 74 79 70 65 3a 20 22 61 75 64 69 6f 22 2c 20 75 72 6c 3a 20 22 70 6c 61 79 65 72 2e 6d 65 67 61 70 68 6f 6e 65 2e 66 6d 22 20 7d 2c 0a 20 20 20 20 7b 20 74 79 Data Ascii: ideo', '.twitter-widget', 'embed', 'iframe', '[class^="PIN"]' ]; var config = [ { type: "audio", url: "anchor.fm" }, { type: "audio", url: "open.spotify.com/embed" }, { type: "audio", url: "player.megaphone.fm" }, { ty
2024-04-26 18:32:13 UTC	16384	IN	Data Raw: 43 4f 4e 53 5f 57 48 49 54 45 20 3d 20 7b 0a 20 20 20 20 61 69 72 62 6e 62 3a 20 69 6d 67 28 27 61 69 72 62 6e 62 2d 77 68 69 74 65 2e 73 76 67 27 29 2c 0a 20 20 20 20 61 6d 61 7a 6f 6e 3a 20 69 6d 67 28 27 61 6d 61 7a 6f 6e 2d 77 68 69 74 65 2e 73 76 67 27 29 2c 0a 20 20 20 20 62 61 6e 64 63 61 6d 70 3a 20 69 6d 67 28 27 62 61 6e 64 63 61 6d 70 2d 77 68 69 74 65 2e 73 76 67 27 29 2c 0a 20 20 20 20 62 65 68 61 6e 63 65 3a 20 69 6d 67 28 27 62 65 68 61 6e 63 65 2d 77 68 69 74 65 2e 73 76 67 27 29 2c 0a 20 20 20 20 62 6c 6f 67 67 65 72 3a 20 69 6d 67 28 27 62 6c 6f 67 67 65 72 2d 77 68 69 74 65 2e 73 76 67 27 29 2c 0a 20 20 20 20 62 6c 6d 3a 20 69 6d 67 28 27 62 6c 6d 2d 77 68 69 74 65 2e 73 76 67 27 29 2c 0a 20 20 20 20 62 69 74 62 75 63 6b 65 74 3a 20 69 Data Ascii: CONS_WHITE = { airbnb: img('airbnb-white.svg'), amazon: img('amazon-white.svg'), bandcamp: img('bandcamp-white.svg'), behance: img('behance-white.svg'), blogger: img('blogger-white.svg'), blm: img('blm-white.svg'), bitbucket: i
2024-04-26 18:32:13 UTC	16384	IN	Data Raw: 6f 69 6e 74 65 72 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 36 70 78 3b 5c 6e 20 20 68 65 69 67 68 74 3a 20 35 36 70 78 3b 5c 6e 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 38 70 78 3b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 5c 6e 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 5c 6e 20 20 72 69 67 68 74 3a 20 31 34 70 78 3b 5c 6e 20 20 77 69 64 74 68 3a 20 35 36 70 78 3b 5c 6e 20 20 7a 2d 69 6e 64 65 78 3a 20 34 30 3b 5c 6e 7d 22 3b 0a 20 20 20 20 73 74 2e 63 73 73 28 6d 6f 62 69 6c 65 5f 63 73 73 29 3b 0a 20 20 20 20 68 74 6d 6c 20 3d 20 22 3c 64 69 76 20 63 6c 61 73 73 3d 27 73 74 2d 62 61 63 6b 64 72 6f 70 27 3e 3c 2f 64 69 76 3e 22 3b 0a 20 20 20 20 68 74 6d 6c 20 2b 3d 20 22 3c 64 69 76 20 63 6c 61 73 73 3d 27 73 74 Data Ascii: ointer;\n font-size: 36px;\n height: 56px;\n line-height: 28px;\n padding: 10px;\n position: fixed;\n right: 14px;\n width: 56px;\n z-index: 40;\n}"; st.css(mobile_css); html = "<div class='st-backdrop'></div>"; html += "<div class='st
2024-04-26 18:32:13 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 73 74 5f 73 61 6d 65 73 69 74 65 3d 31 3b 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 53 65 63 75 72 65 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 5f 5f 73 74 64 6f 73 5f 5f 2e 64 61 74 61 2e 70 61 72 73 65 43 6f 6f 6b 69 65 28 22 73 74 5f 73 61 6d 65 73 69 74 65 22 2c 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 61 6d 65 73 69 74 65 5f 73 65 63 75 72 65 20 3d 20 22 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 53 65 63 75 72 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 22 73 74 5f 73 61 6d 65 73 69 74 65 3d 31 3b 6d 61 78 2d 61 67 65 3d 30 Data Ascii: document.cookie = "st_samesite=1;SameSite=None;Secure"; if (__stdos__.data.parseCookie("st_samesite", document.cookie)) { samesite_secure = "SameSite=None;Secure" document.cookie = "st_samesite=1;max-age=0
2024-04-26 18:32:13 UTC	16384	IN	Data Raw: 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 73 74 6c 69 62 20 21 3d 3d 20 6e 75 6c 6c 20 26 26 20 73 74 6c 69 62 2e 6f 6e 73 63 72 69 70 74 6c 6f 61 64 3b 0a 0a 20 20 69 66 20 28 21 73 74 5f 70 76 69 65 77 5f 6c 6f 67 67 65 64 20 26 26 20 21 5f 5f 73 74 64 6f 73 5f 5f 2e 6f 6e 73 63 72 69 70 74 6c 6f 61 64 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 55 52 4c 2e 69 6e 64 65 78 4f 66 28 22 65 64 67 65 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 22 29 20 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 5f 5f 73 74 64 6f 73 5f 5f 2e 64 61 74 61 2e 69 6e 69 74 28 29 3b 0a 20 20 20 20 20 20 5f 5f 73 74 64 6f 73 5f 5f 2e 64 61 74 61 2e 73 65 74 28 22 63 6d 73 22 2c 20 5f 73 74 2e 63 6d 73 2c 20 22 70 61 67 65 49 6e 66 6f 22 29 3b 0a 20 20 20 20 20 20 5f 5f 73 74 64 Data Ascii: = 'undefined' && stlib !== null && stlib.onscriptload; if (!st_pview_logged && !__stdos__.onscriptload && document.URL.indexOf("edge.sharethis.com") == -1) { __stdos__.data.init(); __stdos__.data.set("cms", _st.cms, "pageInfo"); __std
2024-04-26 18:32:13 UTC	16384	IN	Data Raw: 73 74 72 69 63 74 69 6f 6e 73 3a 20 70 75 62 6c 69 73 68 65 72 5f 72 65 73 74 72 69 63 74 69 6f 6e 73 2c 0a 20 20 20 20 20 20 70 75 72 70 6f 73 65 73 3a 20 70 75 62 6c 69 73 68 65 72 5f 70 75 72 70 6f 73 65 73 2c 0a 20 20 20 20 20 20 74 65 78 74 5f 63 6f 6c 6f 72 3a 20 74 65 78 74 5f 63 6f 6c 6f 72 2c 0a 20 20 20 20 20 20 70 72 65 76 69 65 77 3a 20 70 72 65 76 69 65 77 0a 20 20 20 20 7d 3b 0a 20 20 20 20 69 66 20 28 64 69 73 70 6c 61 79 20 3d 3d 3d 20 22 61 6c 77 61 79 73 22 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 73 74 2e 6a 73 28 22 68 74 74 70 73 3a 2f 2f 67 64 70 72 2d 61 70 69 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 63 6d 70 2d 76 32 2e 6a 73 22 29 3b 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 64 69 73 70 6c 61 79 20 3d 3d 3d 20 Data Ascii: strictions: publisher_restrictions, purposes: publisher_purposes, text_color: text_color, preview: preview }; if (display === "always") { return st.js("https://gdpr-api.sharethis.com/cmp-v2.js"); } else if (display ===

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49756	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:12 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 18:32:12 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=45087 Date: Fri, 26 Apr 2024 18:32:12 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 18:32:12 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:16 UTC	518	OUT	GET /tag.min.js HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:17 UTC	942	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:16 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 89125 Connection: close X-Trace-Id: a50ee67a6a8ba6c001feba98f8bdef59 Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Accept-Ranges: bytes Last-Modified: Fri, 26 Apr 2024 13:38:20 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:17 UTC	15442	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 71 77 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 71 77 2e 71 3b 76 61 72 20 65 3d 71 77 2e 56 28 29 2c 74 3d 71 77 2e 53 79 5b 71 77 2e 44 79 5d 28 71 77 2e 76 29 5b 71 77 2e 76 65 5d 28 29 5b 71 77 2e 42 5d 28 71 77 2e 76 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 74 3d 65 5b 71 77 2e 48 5d 3b 74 72 79 7b 65 5b 71 77 2e 75 74 5d 3d 74 5b 71 77 2e 75 74 5d 7d 63 61 74 63 68 28 72 29 7b 76 61 72 20 6e 3d 5b 5d 5b 71 77 2e 56 70 5d 5b 71 77 2e 4e 65 5d 28 74 5b 71 77 2e 59 61 5d 28 71 77 2e 6f 77 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 77 2e 6e 65 3d 3d 3d 65 5b 71 77 2e 63 5d 7d 29 3b 65 5b 71 77 2e 75 74 5d 3d 6e 26 26 6e 5b 71 77 2e 59 79 5d 5b 71 77 2e 75 74 5d 7d 7d 71 77 2e 77 21 3d Data Ascii: (function(qw){!function(){qw.q;var e=qw.V(),t=qw.Sy[qw.Dy](qw.v)[qw.ve]()[qw.B](qw.v);function n(){var t=e[qw.H];try{e[qw.ut]=t[qw.ut]}catch(r){var n=[][qw.Vp][qw.Ne](t[qw.Ya](qw.ow),function(e){return qw.ne===e[qw.c]});e[qw.ut]=n&&n[qw.Yy][qw.ut]}}qw.w!=
2024-04-26 18:32:17 UTC	16384	IN	Data Raw: 77 2e 66 75 5d 7c 7c 65 5b 71 77 2e 61 6f 5d 26 26 65 5b 71 77 2e 70 72 5d 5b 71 77 2e 64 77 5d 26 26 21 61 5b 71 77 2e 64 77 5d 29 26 26 61 5b 71 77 2e 46 65 5d 28 6f 5b 71 77 2e 43 65 5d 29 2c 55 65 28 29 26 26 61 5b 71 77 2e 46 65 5d 28 55 65 28 29 29 3b 74 3b 29 7b 69 66 28 65 74 28 74 2c 69 29 29 72 65 74 75 72 6e 21 71 77 2e 6b 3b 69 66 28 65 74 28 74 2c 61 29 29 72 65 74 75 72 6e 21 71 77 2e 6a 3b 74 3d 74 5b 71 77 2e 67 75 5d 7d 72 65 74 75 72 6e 21 71 77 2e 6b 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3f 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 65 5b 71 77 2e 64 75 5d 3d 3d 3d 74 3f 65 3a 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3f 69 74 28 65 Data Ascii: w.fu]\|\|e[qw.ao]&&e[qw.pr][qw.dw]&&!a[qw.dw])&&a[qw.Fe](o[qw.Ce]),Ue()&&a[qw.Fe](Ue());t;){if(et(t,i))return!qw.k;if(et(t,a))return!qw.j;t=t[qw.gu]}return!qw.k}function it(e,t){return e?e instanceof HTMLElement&&e[qw.du]===t?e:e instanceof HTMLElement?it(e
2024-04-26 18:32:17 UTC	16384	IN	Data Raw: 2e 76 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 5b 71 77 2e 5a 67 5d 5b 71 77 2e 44 79 5d 28 71 77 2e 47 6a 29 5b 71 77 2e 41 74 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 71 77 2e 50 6b 5d 28 29 5b 71 77 2e 44 79 5d 28 71 77 2e 6a 75 29 7d 29 5b 71 77 2e 4b 72 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 71 77 2e 6a 5d 3d 3d 65 7d 29 5b 71 77 2e 6a 5d 3b 69 66 28 74 29 72 65 74 75 72 6e 20 74 5b 71 77 2e 6b 5d 7d 2c 65 5b 71 77 2e 67 72 5d 5b 71 77 2e 62 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 71 77 2e 6a 3d 3d 3d 74 26 26 28 74 3d 21 71 77 2e 6b 29 2c 76 6f 69 64 20 71 77 2e 6a 3d 3d 3d 74 68 69 73 5b 71 77 2e 6c Data Ascii: .vp]=function(e){var t=document[qw.Zg][qw.Dy](qw.Gj)[qw.At](function(e){return e[qw.Pk]()[qw.Dy](qw.ju)})[qw.Kr](function(t){return t[qw.j]==e})[qw.j];if(t)return t[qw.k]},e[qw.gr][qw.bp]=function(e,t){return void qw.j===t&&(t=!qw.k),void qw.j===this[qw.l
2024-04-26 18:32:17 UTC	16384	IN	Data Raw: 2c 64 65 6c 65 74 65 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 63 5d 29 3a 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 5b 63 5d 3d 68 2b 71 77 2e 6b 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 63 5d 3d 68 2b 71 77 2e 6b 29 29 7d 74 68 69 73 5b 71 77 2e 71 64 5d 5b 71 77 2e 59 77 5d 3d 6e 65 77 20 44 61 74 65 28 29 5b 71 77 2e 4f 77 5d 28 29 2c 74 68 69 73 5b 71 77 2e 47 70 5d 28 65 29 2c 6f 5b 71 77 2e 47 5d 5b 71 77 2e 4c 68 5b 71 77 2e 51 77 5d 28 6e 29 5d 3d 21 71 77 2e 6a 7d 2c 65 5b 71 77 2e 67 72 5d 5b 71 77 2e 47 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 65 5b 71 77 2e 57 69 5d 2c 72 3d 65 5b 71 77 2e 7a 65 5d 2c 69 3d 65 5b 71 77 2e 45 61 5d 2c 61 3d 43 6e 5b 71 77 2e 41 74 5d 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ,delete localStorage[c]):(sessionStorage[c]=h+qw.k,localStorage[c]=h+qw.k))}this[qw.qd][qw.Yw]=new Date()[qw.Ow](),this[qw.Gp](e),o[qw.G][qw.Lh[qw.Qw](n)]=!qw.j},e[qw.gr][qw.Gp]=function(e){var t=this,n=e[qw.Wi],r=e[qw.ze],i=e[qw.Ea],a=Cn[qw.At](function(
2024-04-26 18:32:17 UTC	16384	IN	Data Raw: 29 7b 50 65 28 71 77 2e 6e 67 29 2c 6f 5b 71 77 2e 47 5d 5b 71 77 2e 53 5d 28 65 29 7d 29 3a 71 77 2e 6e 67 20 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 6e 61 76 69 67 61 74 6f 72 5b 71 77 2e 6e 67 5d 5b 71 77 2e 4e 6b 5d 26 26 28 50 65 28 71 77 2e 6e 67 29 2c 6f 5b 71 77 2e 47 5d 5b 71 77 2e 53 5d 28 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 71 77 2e 79 68 29 29 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 72 28 65 29 7b 76 61 72 20 74 3d 65 5b 71 77 2e 42 72 5d 2c 6e 3d 65 5b 71 77 2e 4e 72 5d 2c 72 3d 65 5b 71 77 2e 4d 72 5d 2c 6f 3d 65 5b 71 77 2e 48 65 5d 2c 69 3d 65 5b 71 77 2e 71 74 5d 2c 61 3d 65 5b 71 77 2e 77 74 5d 2c 63 3d 65 5b 71 77 2e 65 74 5d 2c 73 3d 65 5b 71 Data Ascii: ){Pe(qw.ng),o[qw.G][qw.S](e)}):qw.ng in navigator&&setInterval(function(){try{navigator[qw.ng][qw.Nk]&&(Pe(qw.ng),o[qw.G][qw.S]())}catch(e){}},qw.yh))}}}}function nr(e){var t=e[qw.Br],n=e[qw.Nr],r=e[qw.Mr],o=e[qw.He],i=e[qw.qt],a=e[qw.wt],c=e[qw.et],s=e[q
2024-04-26 18:32:17 UTC	8147	IN	Data Raw: 66 27 2c 27 6f 78 61 65 71 4f 61 67 7a 66 27 5d 2c 5b 27 6d 66 27 2c 27 62 62 67 50 75 65 6d 6e 78 71 46 64 75 73 73 71 64 27 5d 2c 5b 27 51 66 27 2c 27 5f 5f 42 42 47 5f 42 44 52 32 27 5d 2c 5b 27 57 66 27 2c 27 4d 4d 4e 27 5d 2c 5b 27 45 66 27 2c 27 65 71 66 27 5d 2c 5b 27 52 66 27 2c 27 61 7a 45 77 75 7a 4f 78 75 6f 77 46 64 75 73 73 71 64 27 5d 2c 5b 27 54 66 27 2c 27 47 44 58 27 5d 2c 5b 27 59 66 27 2c 27 69 75 70 73 71 66 41 62 66 75 61 7a 65 27 5d 2c 5b 27 55 66 27 2c 27 66 6d 73 41 62 66 75 61 7a 65 27 5d 2c 5b 27 49 66 27 2c 27 70 71 7a 71 66 65 67 77 2e 6f 61 79 27 5d 2c 5b 27 4f 66 27 2c 27 61 62 66 75 61 7a 65 42 6d 64 65 71 52 6d 75 78 27 5d 2c 5b 27 50 66 27 2c 31 35 5d 2c 5b 27 41 66 27 2c 27 7a 61 20 69 75 7a 70 61 69 27 5d 2c 5b 27 53 66 Data Ascii: f','oxaeqOagzf'],['mf','bbgPuemnxqFdussqd'],['Qf','__BBG_BDR2'],['Wf','MMN'],['Ef','eqf'],['Rf','azEwuzOxuowFdussqd'],['Tf','GDX'],['Yf','iupsqfAbfuaze'],['Uf','fmsAbfuaze'],['If','pqzqfegw.oay'],['Of','abfuazeBmdeqRmux'],['Pf',15],['Af','za iuzpai'],['Sf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49764	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:16 UTC	555	OUT	GET /ajax/login-state HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:17 UTC	997	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:16 GMT Content-Type: application/json; charset=utf-8 Content-Length: 216 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"d8-R6JFTYCzz9JLwYU4VIqVMGUySyY" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FRDR4znqSG7yv3hUgXbaCGhyiUYApbYtxJ%2BTmbfHiDYnzi463yP%2FJ%2BU9cTvjbfgr%2FboWnjr3yIJEa3kUPqxndWMe0yZn2YTKOe19oaxU%2Bq3Pw2R0S1nvug9CX%2BuEwOc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7912a8aa530-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:17 UTC	216	IN	Data Raw: 7b 22 69 73 5f 6c 6f 67 69 6e 22 3a 66 61 6c 73 65 2c 22 68 74 6d 6c 22 3a 22 5c 6e 20 20 20 20 3c 62 75 74 74 6f 6e 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 5c 22 6d 6f 64 61 6c 5c 22 20 64 61 74 61 2d 74 61 72 67 65 74 3d 5c 22 23 6d 6f 64 61 6c 6c 6f 67 69 6e 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 5c 22 62 74 6e 20 68 65 61 64 65 72 2d 62 74 6e 20 62 74 6e 2d 6c 6f 67 69 6e 5c 22 3e 3c 69 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 5c 22 66 61 72 20 66 61 2d 75 73 65 72 20 6d 72 2d 32 5c 22 3e 3c 2f 69 3e 20 4c 6f 67 69 6e 5c 6e 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 5c 6e 22 7d Data Ascii: {"is_login":false,"html":"\n <button data-toggle=\"modal\" data-target=\"#modallogin\"\n class=\"btn header-btn btn-login\"><i\n class=\"far fa-user mr-2\"></i> Login\n </button>\n\n"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49763	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:16 UTC	570	OUT	GET /ajax/verify?domain=1movieshd.cc HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:17 UTC	985	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:17 GMT Content-Type: application/json; charset=utf-8 Content-Length: 15 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"f-NQVRlQfKHCoInEbhALgECMonhCE" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=939BvWcV3xipL%2F4XCyAKzskG4GACPCtKc4Qy5o79bP83iKWekry5QsJpPWWOzAophtEohL7LiefDiN9DpTEZbIVldEq9PC1Tx7cIFXbnJ4X%2FFn1GOU7xN1eblYLXYCQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a79129376da1-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:17 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 7d Data Ascii: {"status":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49765	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:16 UTC	506	OUT	HEAD / HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:17 UTC	836	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:17 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OChREssdWS4WYavvjEETAx74lzUA6mnh14iG5TPM4Z35sTJJb0tKJWEgIJlE8jKQfS5AgZhPOp4mk3D47XyAKWXiegNR2WvUFs%2BfzgrFwTX6FsTZ3%2BKAqB%2BSy%2BrBPlo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7916cb05f20-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49762	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:16 UTC	423	OUT	GET /5/4724866/?oo=1&aab=1 HTTP/1.1 Host: eephaush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=00804a0338e44dedfdba96734544e68d; oaidts=1714156332
2024-04-26 18:32:17 UTC	1278	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:16 GMT Content-Type: application/json Content-Length: 2853 Connection: close X-Trace-Id: dbb7cb0f220154bfd31d1242d4b3ec28 Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=00804a0338e44dedfdba96734544e68d; expires=Sat, 26 Apr 2025 18:32:16 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156332; expires=Sat, 26 Apr 2025 18:32:16 GMT; path=/; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-04-26 18:32:17 UTC	2853	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 3f 72 62 3d 51 54 66 58 67 47 5a 75 32 31 69 66 47 49 67 37 4d 43 46 48 74 69 44 39 43 6a 78 49 47 45 36 6a 54 45 71 76 77 72 33 6f 76 56 76 79 68 38 61 76 62 71 48 4b 79 43 4b 72 75 41 32 36 74 74 57 5f 6b 45 39 50 52 7a 57 4b 34 67 55 41 6b 32 31 41 37 78 30 65 73 6b 49 58 77 31 41 50 30 4d 43 53 56 71 4f 49 33 33 64 30 66 78 61 65 49 33 45 4b 63 50 53 44 39 55 79 6e 6b 6e 4f 6c 6e 4d 58 4c 43 48 50 66 5a 6b 49 6c 6a 75 79 78 68 47 4b 79 6e 30 32 78 33 73 57 54 35 51 55 34 41 37 58 59 34 47 37 4f 4e 6a 79 45 57 73 67 64 5f 32 75 77 6a 57 67 78 4e 48 30 53 45 69 4f 59 4b 36 6f 7a 51 34 39 50 71 39 4a 6e 69 4f 66 30 62 43 62 69 59 69 56 73 62 52 37 45 68 50 4c 49 68 2d 4b 41 38 6b 59 33 Data Ascii: {"url":"//eephaush.com/?rb=QTfXgGZu21ifGIg7MCFHtiD9CjxIGE6jTEqvwr3ovVvyh8avbqHKyCKruA26ttW_kE9PRzWK4gUAk21A7x0eskIXw1AP0MCSVqOI33d0fxaeI3EKcPSD9UynknOlnMXLCHPfZkIljuyxhGKyn02x3sWT5QU4A7XY4G7ONjyEWsgd_2uwjWgxNH0SEiOYK6ozQ49Pq9JniOf0bCbiYiVsbR7EhPLIh-KA8kY3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49767	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:16 UTC	568	OUT	GET /ajax/banners?page=home_search HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:17 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:17 GMT Content-Type: application/json; charset=utf-8 Content-Length: 60 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"3c-DFz73KHXVYZHM3DcVRSxkH+OTqg" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y00mGt3jFmWkgOwh964TJSWQsC2caFOyxiewXA7gNEHk6sxTvBncFdMVwUqXK1BFuL%2B3CkrlhKojewYT6QxHUEq0wTGDOTzdsxdXYk7vvx2M392H7WPDlgNs6Jp2k%2F0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7937bed4c18-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:17 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 62 61 6e 6e 65 72 73 22 3a 7b 22 74 6f 70 22 3a 22 22 2c 22 6d 69 64 64 6c 65 22 3a 22 22 2c 22 62 6f 74 74 6f 6d 22 3a 22 22 7d 7d Data Ascii: {"status":true,"banners":{"top":"","middle":"","bottom":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49766	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:16 UTC	554	OUT	GET /ajax/banner/vpn HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:17 UTC	984	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:17 GMT Content-Type: application/json; charset=utf-8 Content-Length: 16 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"10-UiecVLFvCojUPVe0y7mBPqPMOas" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YSZD7PGmfFQVDoSY0azcklZkm5pIBdVAuPgqLYqQ3IryarYBh4%2BT5V98de5L54zwRbV5meWxiE0DC6xe1KGOciaI3viYpsv99BdxHz7Chx8LNumMYmBsHSJCVGFooHY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7938975a665-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:17 UTC	16	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"status":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49759	139.45.195.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:17 UTC	581	OUT	GET /gid.js?userId=00804a0338e44dedfdba96734544e68d HTTP/1.1 Host: my.rtmark.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:17 UTC	700	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:17 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=00804a0338e44dedfdba96734544e68d; expires=Sat, 26 Apr 2025 18:32:17 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:17 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 30 30 38 30 34 61 30 33 33 38 65 34 34 64 65 64 66 64 62 61 39 36 37 33 34 35 34 34 65 36 38 64 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"00804a0338e44dedfdba96734544e68d","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49771	13.226.52.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:19 UTC	554	OUT	GET /js/6433be364f61b7001240a339.js HTTP/1.1 Host: buttons-config.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:19 UTC	588	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 595 Connection: close Date: Fri, 26 Apr 2024 18:32:20 GMT Last-Modified: Mon, 10 Apr 2023 15:31:13 GMT ETag: "aa9a89c515666311fb7e3ff5378ea759" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 813798c6f06431d5dd58aa438e312b3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: CRYlXD62ZocjAM96hmU8PAXS3Tj7MKDIzWqT4YFyrro2QrUJkFVDtA== Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:19 UTC	595	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 5f 73 68 61 72 65 74 68 69 73 5f 5f 2e 69 6e 69 74 28 7b 22 74 73 22 3a 31 36 38 31 31 34 30 36 37 32 33 30 34 2c 22 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 73 22 3a 31 36 38 31 31 34 30 36 37 32 31 35 34 2c 22 75 70 64 61 74 65 64 5f 61 74 22 3a 22 32 30 32 33 2d 30 34 2d 31 30 54 31 35 3a 33 31 3a 31 32 2e 31 35 34 5a 22 7d 2c 22 69 6e 6c 69 6e 65 2d 73 68 61 72 65 2d 62 75 74 74 6f 6e 73 22 3a 7b 22 61 6c 69 67 6e 6d 65 6e 74 22 3a 22 63 65 6e 74 65 72 22 2c 22 63 6f 6c 6f 72 22 3a 22 73 6f 63 69 61 6c 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 66 6f 6e 74 5f 73 69 7a 65 22 3a 31 31 2c 22 68 61 73 5f 73 70 61 63 69 6e 67 22 3a 74 72 75 65 2c 22 69 73 5f 73 73 62 22 3a 66 Data Ascii: window.__sharethis__.init({"ts":1681140672304,"analytics":{"enabled":true,"ts":1681140672154,"updated_at":"2023-04-10T15:31:12.154Z"},"inline-share-buttons":{"alignment":"center","color":"social","enabled":true,"font_size":11,"has_spacing":true,"is_ssb":f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49769	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:19 UTC	523	OUT	GET /400/4724873 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:19 UTC	849	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:19 GMT Content-Type: application/javascript Content-Length: 83836 Connection: close X-Trace-Id: b6a2fe557c4304bd5fdc6e7d124bb18f Expires: Tue, 11 Jan 1994 10:00:00 GMT Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Pragma: no-cache Timing-Allow-Origin: * Vary: Origin Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Set-Cookie: OAID=03004a756c234c92f8304449495a10c1; expires=Sat, 26 Apr 2025 18:32:19 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:19 UTC	15535	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 28 66 75 6e 63 74 69 6f 6e 28 65 69 29 7b 28 28 29 3d 3e 7b 65 69 2e 65 3b 76 61 72 20 74 3d 65 69 2e 6d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 65 69 2e 44 4e 5d 28 74 2c 65 69 2e 6a 41 29 2c 65 5b 65 69 2e 77 7a 5d 28 74 29 2c 65 5b 65 69 2e 4c 44 5d 28 74 29 2c 21 65 69 2e 71 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 65 69 2e 76 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 5b 65 69 2e 52 44 5d 3d 65 69 2e 50 28 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 65 69 2e 61 5d 28 74 5b 65 69 2e 76 44 5d 2c 65 69 2e 51 69 2c 65 69 2e 50 28 65 69 2e 4a 6d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: (function(options) {(function(ei){(()=>{ei.e;var t=ei.m,e=function(e){try{return e[ei.DN](t,ei.jA),e[ei.wz](t),e[ei.LD](t),!ei.q}catch(t){return!ei.v}},n=function(){function t(){this[ei.RD]=ei.P()}return Object[ei.a](t[ei.vD],ei.Qi,ei.P(ei.Jm,function(){r
2024-04-26 18:32:19 UTC	16384	IN	Data Raw: 65 69 2e 76 3f 78 74 3a 6e 65 77 20 44 61 74 65 28 29 5b 65 69 2e 66 5d 28 29 29 3a 6b 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 78 74 3d 2d 65 69 2e 76 7d 2c 65 69 2e 44 6d 29 7d 76 61 72 20 4d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 6e 7c 7c 65 69 2e 46 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 69 2e 51 69 5d 29 66 6f 72 28 76 61 72 20 6f 2c 72 3d 65 69 2e 71 2c 69 3d 65 5b 65 69 2e 51 69 5d 3b 72 3c 69 3b 72 2b 2b 29 21 6f 26 26 72 20 69 6e 20 65 7c 7c 28 6f 7c 7c 28 6f 3d 41 72 72 61 79 5b 65 69 2e 76 44 5d 5b 65 69 2e 4f 5d 5b 65 69 2e 77 63 5d 28 65 2c 65 69 2e 71 2c 72 29 29 2c 6f 5b 72 5d 3d 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 5b 65 69 2e 41 69 5d 28 6f 7c 7c 41 72 72 61 79 5b 65 69 2e 76 Data Ascii: ei.v?xt:new Date()[ei.f]()):kt=setTimeout(function(){xt=-ei.v},ei.Dm)}var Mt=function(t,e,n){if(n\|\|ei.F===arguments[ei.Qi])for(var o,r=ei.q,i=e[ei.Qi];r<i;r++)!o&&r in e\|\|(o\|\|(o=Array[ei.vD][ei.O][ei.wc](e,ei.q,r)),o[r]=e[r]);return t[ei.Ai](o\|\|Array[ei.v
2024-04-26 18:32:19 UTC	16384	IN	Data Raw: 69 2e 6d 63 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 69 5b 53 79 6d 62 6f 6c 5b 65 69 2e 58 44 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 69 3b 66 75 6e 63 74 69 6f 6e 20 63 28 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 65 69 2e 54 51 29 3b 66 6f 72 28 3b 61 3b 29 74 72 79 7b 69 66 28 6e 3d 65 69 2e 76 2c 6f 26 26 28 72 3d 65 69 2e 46 26 69 5b 65 69 2e 71 5d 3f 6f 5b 65 69 2e 79 55 5d 3a 69 5b 65 69 2e 71 5d 3f 6f 5b 65 69 2e 5a 55 5d 7c 7c 28 28 72 3d 6f 5b 65 69 2e 79 55 5d 29 26 26 72 5b 65 69 2e 77 63 5d 28 6f 29 2c 65 69 2e 71 29 3a 6f 5b 65 69 Data Ascii: i.mc==typeof Symbol&&(i[Symbol[ei.XD]]=function(){return this}),i;function c(i){return function(c){return function(i){if(n)throw new TypeError(ei.TQ);for(;a;)try{if(n=ei.v,o&&(r=ei.F&i[ei.q]?o[ei.yU]:i[ei.q]?o[ei.ZU]\|\|((r=o[ei.yU])&&r[ei.wc](o),ei.q):o[ei
2024-04-26 18:32:19 UTC	16384	IN	Data Raw: 6d 29 3b 74 72 79 7b 77 69 6e 64 6f 77 5b 65 69 2e 57 5d 5b 65 69 2e 72 5b 65 69 2e 41 69 5d 28 65 69 2e 71 62 29 5b 65 69 2e 41 69 5d 28 65 29 5d 3d 6e 65 77 20 44 61 74 65 28 29 5b 65 69 2e 66 5d 28 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 68 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 6f 3d 6e 65 77 20 44 61 74 65 28 29 5b 65 69 2e 66 5d 28 29 2c 72 3d 74 5b 65 69 2e 75 6d 5d 2c 69 3d 74 5b 65 69 2e 4f 45 5d 3b 69 66 28 69 29 76 61 72 20 61 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 21 65 7c 7c 65 5b 65 69 2e 6f 62 5d 29 74 68 72 6f 77 20 65 69 2e 51 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 65 28 29 5b 65 69 2e 66 5d 28 29 2d 6f 3b 63 6c 65 61 72 49 6e Data Ascii: m);try{window[ei.W][ei.r[ei.Ai](ei.qb)[ei.Ai](e)]=new Date()[ei.f]()}catch(t){}}(h),function(t,e,n){var o=new Date()[ei.f](),r=t[ei.um],i=t[ei.OE];if(i)var a=setInterval(function(){try{if(!e\|\|e[ei.ob])throw ei.Q}catch(e){var t=new Date()[ei.f]()-o;clearIn
2024-04-26 18:32:19 UTC	16384	IN	Data Raw: 61 27 5d 2c 5b 27 67 77 27 2c 27 70 79 76 70 78 27 5d 2c 5b 27 4b 77 27 2c 27 76 73 65 6e 7a 72 5f 79 6e 61 71 76 61 74 5f 68 65 79 27 5d 2c 5b 27 47 77 27 2c 27 6f 79 68 65 43 6e 74 72 27 5d 2c 5b 27 52 77 27 2c 27 62 68 67 66 76 71 72 50 79 62 66 72 27 5d 2c 5b 27 48 77 27 2c 27 7a 66 74 46 67 6e 67 72 27 5d 2c 5b 27 68 77 27 2c 27 66 72 66 66 76 62 61 27 5d 2c 5b 27 65 4e 27 2c 27 70 65 72 6e 67 72 5a 72 66 66 6e 74 72 27 5d 2c 5b 27 69 4e 27 2c 27 66 68 6f 70 62 61 67 6e 76 61 72 65 46 67 6c 79 72 66 27 5d 2c 5b 27 6d 4e 27 2c 27 76 73 65 6e 7a 72 46 67 6c 79 72 66 27 5d 2c 5b 27 7a 4e 27 2c 27 74 72 67 5a 6e 6b 4e 70 67 76 69 72 5a 72 66 66 6e 74 72 66 27 5d 2c 5b 27 77 4e 27 2c 27 70 62 79 79 72 70 67 52 65 65 62 65 5a 72 66 66 6e 74 72 27 5d 2c 5b Data Ascii: a'],['gw','pyvpx'],['Kw','vsenzr_ynaqvat_hey'],['Gw','oyheCntr'],['Rw','bhgfvqrPybfr'],['Hw','zftFgngr'],['hw','frffvba'],['eN','perngrZrffntr'],['iN','fhopbagnvareFglyrf'],['mN','vsenzrFglyrf'],['zN','trgZnkNpgvirZrffntrf'],['wN','pbyyrpgReebeZrffntr'],[
2024-04-26 18:32:19 UTC	2765	IN	Data Raw: 2e 4a 2e 6d 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 58 57 5a 2e 23 2e 4a 2e 54 2e 29 2e 55 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 28 28 2e 62 2e 23 2e 4a 2e 30 2e 78 2e 78 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 2c 36 6c 4d 6f 57 39 28 28 2e 62 2e 23 2e 4a 2e 5f 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 40 45 23 6c 36 3a 68 71 6c 4e 5a 6f 36 3a 2e 23 2e 4a 48 57 4d 23 6c 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 40 45 3a 6c 36 7d 57 4d 2e 23 2e 4a 2e 6d 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 40 45 3a 6c 36 7d 57 4d 2e 7c 6f 35 71 4d 6c 2e 23 2e 4a 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 28 71 77 6c 6f 69 3a 2e 23 2e 4a 2e 5f 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 28 71 77 6c 6f 69 3a 2e 7c 6f 35 71 4d 6c 2e 23 2e 4a 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 Data Ascii: .J.m.V.#HW~lZi#3.XWZ.#.J.T.).U.V.#HW~lZi#3((.b.#.J.0.x.x.T.V.#HW~lZi#3.,6lMoW9((.b.#.J._.V.#HW~lZi#3.@E#l6:hqlNZo6:.#.JHWM#l.V.#HW~lZi#3.@E:l6}WM.#.J.m.V.#HW~lZi#3.@E:l6}WM.\|o5qMl.#.J.T.V.#HW~lZi#3(qwloi:.#.J._.T.V.#HW~lZi#3(qwloi:.\|o5qMl.#.J.T.V.#HW~lZi#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49770	3.16.63.45	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:19 UTC	1435	OUT	GET /pview?event=pview&hostname=1movieshd.cc&location=%2F&product=inline-share-buttons&url=https%3A%2F%2F1movieshd.cc%2F&source=platform&fcmp=false&fcmpv2=false&has_segmentio=false&title=%231Movies%20%7C%20Watch%20Free%20Streaming%20Movies%20and%20TV%20Series%20Online&cms=unknown&publisher=6433be364f61b7001240a339&sop=true&version=st_sop.js&lang=en&description=1Movies%20Watch%20Movies%20online%20for%20free%2C%20Streaming%20movies%20on%201Movies.to.%201Movies%20is%20the%20biggest%20website%20for%20free%20movies.&ua=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&ua_mobile=false&ua_platform=Windows&ua_full_version_list=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&ua_platform_version=10.0.0&uuid=48528ff4-c065-4879-ac18-f0f89e829048 HTTP/1.1 Host: l.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:19 UTC	1702	IN	HTTP/1.1 301 Moved Permanently Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Expose-Headers: stid Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=utf-8 Date: Fri, 26 Apr 2024 18:32:19 GMT Location: /sc?event=pview&hostname=1movieshd.cc&location=%2F&product=inline-share-buttons&url=https%3A%2F%2F1movieshd.cc%2F&source=platform&fcmp=false&fcmpv2=false&has_segmentio=false&title=%231Movies%20%7C%20Watch%20Free%20Streaming%20Movies%20and%20TV%20Series%20Online&cms=unknown&publisher=6433be364f61b7001240a339&sop=true&version=st_sop.js&lang=en&description=1Movies%20Watch%20Movies%20online%20for%20free%2C%20Streaming%20movies%20on%201Movies.to.%201Movies%20is%20the%20biggest%20website%20for%20free%20movies.&ua=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&ua_mobile=false&ua_platform=Windows&ua_full_version_list=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&ua_platform_version=10.0.0&uuid=48528ff4-c065-4879-ac18-f0f89e829048&samesite=None Set-Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; Path=/; Domain=sharethis.com; Expires=Sat, 26 Apr 2025 18:32:19 GMT; Secure; SameSite=None Set-Cookie: __stidv=2; Path=/; Domain=sharethis.com; Expires=Sat, 26 Apr 2025 18:32:19 GMT; Secure; SameSite=None Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 1033 Connection: Close
2024-04-26 18:32:19 UTC	1033	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 73 63 3f 65 76 65 6e 74 3d 70 76 69 65 77 26 61 6d 70 3b 68 6f 73 74 6e 61 6d 65 3d 31 6d 6f 76 69 65 73 68 64 2e 63 63 26 61 6d 70 3b 6c 6f 63 61 74 69 6f 6e 3d 25 32 46 26 61 6d 70 3b 70 72 6f 64 75 63 74 3d 69 6e 6c 69 6e 65 2d 73 68 61 72 65 2d 62 75 74 74 6f 6e 73 26 61 6d 70 3b 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 31 6d 6f 76 69 65 73 68 64 2e 63 63 25 32 46 26 61 6d 70 3b 73 6f 75 72 63 65 3d 70 6c 61 74 66 6f 72 6d 26 61 6d 70 3b 66 63 6d 70 3d 66 61 6c 73 65 26 61 6d 70 3b 66 63 6d 70 76 32 3d 66 61 6c 73 65 26 61 6d 70 3b 68 61 73 5f 73 65 67 6d 65 6e 74 69 6f 3d 66 61 6c 73 65 26 61 6d 70 3b 74 69 74 6c 65 3d 25 32 33 31 4d 6f 76 69 65 73 25 32 30 25 37 43 25 32 30 57 61 74 63 68 25 32 30 46 72 65 Data Ascii: <a href="/sc?event=pview&hostname=1movieshd.cc&location=%2F&product=inline-share-buttons&url=https%3A%2F%2F1movieshd.cc%2F&source=platform&fcmp=false&fcmpv2=false&has_segmentio=false&title=%231Movies%20%7C%20Watch%20Fre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49772	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:19 UTC	352	OUT	GET /ajax/login-state HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:20 UTC	999	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 216 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"d8-R6JFTYCzz9JLwYU4VIqVMGUySyY" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZrUNJTb6o0usd0%2FoP4y6H16whu6yDvwNqY%2BF9%2Brbs6ln4Lo8t%2Bd%2FabuJxtL%2FTT%2BJOpxz5a9MZ6WbhEUFc3niwis4Va%2BuBVr0ITO3n7wV7RclkboauQ2DQiOEI8U7IcE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7a36ae67482-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:20 UTC	216	IN	Data Raw: 7b 22 69 73 5f 6c 6f 67 69 6e 22 3a 66 61 6c 73 65 2c 22 68 74 6d 6c 22 3a 22 5c 6e 20 20 20 20 3c 62 75 74 74 6f 6e 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 5c 22 6d 6f 64 61 6c 5c 22 20 64 61 74 61 2d 74 61 72 67 65 74 3d 5c 22 23 6d 6f 64 61 6c 6c 6f 67 69 6e 5c 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 5c 22 62 74 6e 20 68 65 61 64 65 72 2d 62 74 6e 20 62 74 6e 2d 6c 6f 67 69 6e 5c 22 3e 3c 69 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 5c 22 66 61 72 20 66 61 2d 75 73 65 72 20 6d 72 2d 32 5c 22 3e 3c 2f 69 3e 20 4c 6f 67 69 6e 5c 6e 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 5c 6e 22 7d Data Ascii: {"is_login":false,"html":"\n <button data-toggle=\"modal\" data-target=\"#modallogin\"\n class=\"btn header-btn btn-login\"><i\n class=\"far fa-user mr-2\"></i> Login\n </button>\n\n"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49773	139.45.195.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:19 UTC	581	OUT	GET /gid.js?userId=k3oa752910bk686846683x2y8sbun072 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:20 UTC	700	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:20 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:20 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 6b 33 6f 61 37 35 32 39 31 30 62 6b 36 38 36 38 34 36 36 38 33 78 32 79 38 73 62 75 6e 30 37 32 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"k3oa752910bk686846683x2y8sbun072","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49775	3.16.63.45	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:19 UTC	1498	OUT	GET /sc?event=pview&hostname=1movieshd.cc&location=%2F&product=inline-share-buttons&url=https%3A%2F%2F1movieshd.cc%2F&source=platform&fcmp=false&fcmpv2=false&has_segmentio=false&title=%231Movies%20%7C%20Watch%20Free%20Streaming%20Movies%20and%20TV%20Series%20Online&cms=unknown&publisher=6433be364f61b7001240a339&sop=true&version=st_sop.js&lang=en&description=1Movies%20Watch%20Movies%20online%20for%20free%2C%20Streaming%20movies%20on%201Movies.to.%201Movies%20is%20the%20biggest%20website%20for%20free%20movies.&ua=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&ua_mobile=false&ua_platform=Windows&ua_full_version_list=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&ua_platform_version=10.0.0&uuid=48528ff4-c065-4879-ac18-f0f89e829048&samesite=None HTTP/1.1 Host: l.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:20 UTC	513	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Expose-Headers: stid Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain; charset=utf-8 Date: Fri, 26 Apr 2024 18:32:20 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 176 Connection: Close
2024-04-26 18:32:20 UTC	176	IN	Data Raw: 7b 22 66 70 65 73 74 69 64 22 3a 22 65 2d 65 6f 68 6c 63 35 73 65 67 7a 55 5a 4a 33 68 6b 59 7a 70 4e 70 6d 30 35 6d 35 51 54 57 78 4b 61 48 75 77 71 6c 5a 73 75 43 55 30 43 6e 6f 41 61 74 66 39 43 6b 73 35 7a 71 4b 33 57 50 6b 4a 68 6e 32 55 41 22 2c 22 66 70 65 73 74 69 64 5f 6d 61 78 61 67 65 22 3a 33 31 35 33 35 39 39 39 2c 22 6c 6f 74 61 6d 65 22 3a 22 74 72 75 65 22 2c 22 73 74 61 74 75 73 22 3a 22 74 72 75 65 22 2c 22 73 74 69 64 22 3a 22 5a 47 6b 41 43 57 59 72 38 7a 4d 41 41 41 41 49 41 39 38 59 41 77 3d 3d 22 7d Data Ascii: {"fpestid":"e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA","fpestid_maxage":31535999,"lotame":"true","status":"true","stid":"ZGkACWYr8zMAAAAIA98YAw=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49774	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:19 UTC	1542	OUT	GET /?rb=PHmS1cuti--C9Oc8Zd_j_18IAKdh0xDgAsCQe_F6DduFePPWkCx6-TLTSQzO4TUCfgOveR0y9aEKkPIOMteSE6eFFsxXgZl8oCRH7bxz8qpQZInzJrMUcZE6TQq4fMcKAx-PxTJ0-FpkCD4zhJfCJZtUQwOYCeqNnwlLIICneiGKuo0bVVk-q03ok2nVR2w-TwMkuEnUnEtYXiNN4kdWpqNesp9b5UUSj-AgMrzpphMFZGG7SylO0c6esmk02S696o9p-urTenHsv9nQLpLxlGp7U7G_kc5lkjH-GRbcUUOlW0Cx6UrV2Yvwk5d5PAZ7YyxfJQ%3D%3D&request_ab2=0&zoneid=4724866&js_build=iclick-v1.785.1-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=907&wiw=1280&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=1263&wfc=2&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-120&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.785.1-auto&navlng=en-US&pnt=0&pnrc=0&bs=145397bc-0884-4ea1-ae3b-d7b7212354f2&wasm=1&userId=k3oa752910bk686846683x2y8sbun072&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.132&m=link HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=00804a0338e44dedfdba96734544e68d; oaidts=1714156332
2024-04-26 18:32:20 UTC	1201	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:20 GMT Content-Type: application/json Content-Length: 4456 Connection: close X-Trace-Id: 1b5c716c915cd0e5bca02762cdb4eafa Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:20 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156340; expires=Sat, 26 Apr 2025 18:32:20 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Fri, 03 May 2024 18:32:20 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:20 UTC	4456	IN	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 32 36 39 35 39 31 37 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 39 35 38 37 34 39 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 34 2f 36 31 31 38 37 38 30 2f 3f 76 61 72 3d 34 37 32 34 38 36 36 5c 75 30 30 32 36 62 74 7a 3d 45 75 72 6f 70 65 2f 5a 75 72 69 63 68 5c 75 30 30 32 36 62 74 6f 3d 2d 31 32 30 5c 75 30 30 32 36 62 61 72 3d 78 22 2c 22 63 61 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 63 61 74 2e 70 68 70 3f 75 73 65 72 49 64 3d 6b 33 6f 61 37 35 32 39 31 30 62 6b 36 38 36 38 34 36 36 38 33 78 32 79 38 73 62 75 6e 30 37 32 5c 75 30 30 32 36 7a 6f 6e 65 69 64 3d 34 37 32 34 38 36 36 5c 75 30 30 32 36 72 62 3d 50 48 6d 53 Data Ascii: {"bannerId":2695917,"campaignId":1958749,"dstUrl":"https://eephaush.com/4/6118780/?var=4724866\u0026btz=Europe/Zurich\u0026bto=-120\u0026bar=x","catUrl":"https://eephaush.com/cat.php?userId=k3oa752910bk686846683x2y8sbun072\u0026zoneid=4724866\u0026rb=PHmS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49776	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:19 UTC	400	OUT	GET /ajax/verify?domain=1movieshd.cc HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true
2024-04-26 18:32:20 UTC	985	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 15 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"f-NQVRlQfKHCoInEbhALgECMonhCE" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9rTYkD7qGsnJ2cP8Xgq6z0f2saoTPCxbU8wnJURASg7m6WH3M0cwFu2gR0uy0LBZqZeAFWCayepw1B0hqJ5EEk8UHekY8%2BVPRG0o3tD%2F6maXVVeR9mYr5ozwcff5bOk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7a66f7309ca-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:20 UTC	15	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 7d Data Ascii: {"status":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49777	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:19 UTC	369	OUT	GET / HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true
2024-04-26 18:32:20 UTC	947	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:20 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pC3SSmE3SU1uZpY5C1YiESfoHVuA4khOvmLqfccEDc4tbcu3wjIlQkUL5L7vGi7j1onzgOB%2F1I4qVtDecFKQ5NKpPqZv%2BWnNEU7ydckpnImgqdlEIDfCsu9Cf%2Bjz8Vo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7a66f7e09ca-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:20 UTC	422	IN	Data Raw: 31 36 30 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 23 31 4d 6f 76 69 65 73 20 7c 20 57 61 74 63 68 20 46 72 65 65 20 53 74 72 65 61 6d 69 6e 67 20 4d 6f 76 69 65 73 20 61 6e 64 20 54 56 20 53 65 72 69 65 73 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 Data Ascii: 1608<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title> <meta name="robots" content="index, follow"> <meta name="r
2024-04-26 18:32:20 UTC	1369	IN	Data Raw: 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 31 4d 6f 76 69 65 73 20 57 61 74 63 68 20 4d 6f 76 69 65 73 20 6f 6e 6c 69 6e 65 20 66 6f 72 20 66 72 65 65 2c 20 53 74 72 65 61 6d 69 6e 67 20 6d 6f 76 69 65 73 20 6f 6e 20 31 4d 6f 76 69 65 73 2e 74 6f 2e 20 31 4d 6f 76 69 65 73 20 69 73 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 62 73 69 74 65 20 66 6f 72 20 66 72 65 65 20 6d 6f 76 69 65 73 2e 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 31 6d 6f 76 69 65 73 20 77 65 62 73 69 74 65 2c 20 31 6d 6f 76 69 65 73 20 69 73 2c 20 31 6d 6f 76 69 65 73 20 73 65 2c 20 31 6d 6f 76 69 65 73 20 6f 6e 6c 69 6e 65 2c 20 31 20 6d 6f 76 69 Data Ascii: <meta name="description" content="1Movies Watch Movies online for free, Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/> <meta name="keywords" content="1movies website, 1movies is, 1movies se, 1movies online, 1 movi
2024-04-26 18:32:20 UTC	1369	IN	Data Raw: 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 72 65 6c 65 61 73 65 73 2f 76 35 2e 33 2e 31 2f 63 73 73 2f 61 6c 6c 2e 63 73 73 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 67 72 6f 75 70 5f 31 31 2f 74 68 65 6d 65 5f 33 2f 68 6f 6d 65 2e 63 73 73 22 3e 0a 20 20 20 20 3c 21 2d 2d 45 6e 64 3a 20 53 74 79 6c 65 73 68 65 65 74 2d 2d 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f Data Ascii: trap.min.css"> <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.3.1/css/all.css"> <link rel="stylesheet" href="/css/group_11/theme_3/home.css"> ...End: Stylesheet--> <script src="https://cdnjs.cloudflare.com/ajax/libs/
2024-04-26 18:32:20 UTC	1369	IN	Data Raw: 24 2e 43 43 2c 6e 2c 24 2e 43 45 2c 21 24 2e 79 2c 24 2e 42 77 2c 24 2e 24 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 5b 24 2e 42 77 5d 3b 62 72 65 61 6b 3b 7d 7d 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 65 3d 24 2e 24 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 67 3d 24 2e 42 44 3b 24 2e 5f 67 3c 24 2e 43 66 3b 24 2e 5f 67 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 67 29 7b 63 61 73 65 20 24 2e 43 42 3a 74 2e 65 3d 34 37 32 34 38 36 38 2c 74 2e 61 3d 34 37 32 34 38 36 36 2c 74 2e 76 3d 33 2c 74 2e 77 3d 31 2c 74 2e 68 3d 33 30 2c 74 2e 79 3d 74 72 75 65 2c 74 2e 5f 3d 67 5b 24 2e 4a 76 Data Ascii: $.CC,n,$.CE,!$.y,$.Bw,$.$());break;case $.BD:if(e[n])return e[n][$.Bw];break;}}}break;case $.BD:var e=$.$();break;}}}([function(n,t,r){for($._g=$.BD;$._g<$.Cf;$._g+=$.y){switch($._g){case $.CB:t.e=4724868,t.a=4724866,t.v=3,t.w=1,t.h=30,t.y=true,t._=g[$.Jv
2024-04-26 18:32:20 UTC	1119	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 28 24 2e 42 44 2c 61 2e 7a 29 28 29 3b 7d 2c 74 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 28 24 2e 42 44 2c 75 2e 52 29 28 6f 2e 48 5b 24 2e 44 73 5d 2c 6f 5b 24 2e 47 6e 5d 5b 24 2e 44 73 5d 29 2c 28 24 2e 42 44 2c 75 2e 52 29 28 6f 5b 24 2e 45 71 5d 5b 24 2e 44 73 5d 2c 6f 5b 24 2e 47 6e 5d 5b 24 2e 44 73 5d 29 5d 5b 24 2e 42 74 5d 28 24 2e 62 70 29 3b 7d 2c 74 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 24 2e 5f 42 64 3d 24 2e 42 44 3b 24 2e 5f 42 64 3c 24 2e 43 42 3b 24 2e 5f 42 64 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 64 29 7b 63 61 73 65 20 24 2e 79 3a 6e 2e 69 64 3d 69 2e 51 2c 77 69 6e 64 6f 77 5b 24 2e 4a 48 5d 28 6e 2c 24 2e 4a 75 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 Data Ascii: n(){return($.BD,a.z)();},t.D=function(){return[($.BD,u.R)(o.H[$.Ds],o[$.Gn][$.Ds]),($.BD,u.R)(o[$.Eq][$.Ds],o[$.Gn][$.Ds])][$.Bt]($.bp);},t.F=function(){for($._Bd=$.BD;$._Bd<$.CB;$._Bd+=$.y){switch($._Bd){case $.y:n.id=i.Q,window[$.JH](n,$.Ju);break;case
2024-04-26 18:32:20 UTC	1369	IN	Data Raw: 32 38 35 35 0d 0a 75 6e 29 28 6e 5b 24 2e 63 73 5d 29 2c 28 24 2e 42 44 2c 69 2e 69 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 42 5d 5b 24 2e 74 5d 29 2c 28 24 2e 42 44 2c 69 2e 63 6e 29 28 6e 65 77 20 65 28 29 29 2c 28 24 2e 42 44 2c 69 2e 66 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 72 5d 5b 24 2e 62 78 5d 29 2c 28 24 2e 42 44 2c 69 2e 61 6e 29 28 6e 5b 24 2e 63 78 5d 7c 7c 6e 5b 24 2e 64 6f 5d 29 5d 5b 24 2e 6c 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 24 2e 5f 43 68 3d 24 2e 42 44 3b 24 2e 5f 43 68 3c 24 2e 43 42 3b 24 2e 5f 43 68 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 68 29 7b 63 61 73 65 20 24 2e 79 3a 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 24 2e 5f 43 62 3d 24 2e 42 44 3b 24 2e 5f 43 62 3c 24 2e 43 42 3b 24 2e 5f 43 Data Ascii: 2855un)(n[$.cs]),($.BD,i.in)(window[$.bB][$.t]),($.BD,i.cn)(new e()),($.BD,i.fn)(window[$.br][$.bx]),($.BD,i.an)(n[$.cx]\|\|n[$.do])][$.l](function(t){for($._Ch=$.BD;$._Ch<$.CB;$._Ch+=$.y){switch($._Ch){case $.y:q(function(){for($._Cb=$.BD;$._Cb<$.CB;$._C
2024-04-26 18:32:20 UTC	1369	IN	Data Raw: 68 28 24 2e 5f 42 6b 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 65 3c 3d 74 26 26 74 3c 3d 75 3f 74 2d 65 3a 6f 3c 3d 74 26 26 74 3c 3d 63 3f 74 2d 6f 2b 69 3a 24 2e 42 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 5b 24 2e 42 76 5d 28 29 5b 24 2e 62 43 5d 28 24 2e 42 44 29 3b 62 72 65 61 6b 3b 7d 7d 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 4f 62 6a 65 63 74 5b 24 2e 65 5d 28 74 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 2c 74 5b 24 2e 44 6c 5d 3d 61 2c 74 5b 24 2e 6f 5d 3d 64 2c 74 2e 64 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 75 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 47 75 5d 28 24 2e 42 75 29 5b 24 2e 61 61 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 24 2e 5f 42 46 3d Data Ascii: h($._Bk){case $.y:return e<=t&&t<=u?t-e:o<=t&&t<=c?t-o+i:$.BD;break;case $.BD:var t=n[$.Bv]()[$.bC]($.BD);break;}}}break;case $.y:Object[$.e](t,$.Cc,$.$($.Ij,!$.BD)),t[$.Dl]=a,t[$.o]=d,t.dn=function(n,u){return n[$.Gu]($.Bu)[$.aa](function(n,t){for($._BF=
2024-04-26 18:32:20 UTC	1369	IN	Data Raw: 2c 6c 3d 72 28 24 2e 42 44 29 2c 66 3d 74 2e 70 6e 3d 6e 65 77 20 6a 28 24 2e 61 42 2c 24 2e 42 75 29 2c 69 3d 28 24 2e 43 73 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 3a 24 2e 24 28 24 2e 61 2c 6e 75 6c 6c 29 29 5b 24 2e 61 5d 2c 77 3d 24 2e 43 78 2c 79 3d 24 2e 43 79 2c 62 3d 24 2e 43 7a 2c 5f 3d 24 2e 44 41 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 4f 62 6a 65 63 74 5b 24 2e 65 5d 28 74 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 2c 74 2e 70 6e 3d 76 6f 69 64 20 24 2e 42 44 2c 74 2e 67 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 75 2c 69 29 7b 66 6f 72 28 24 2e 5f 42 7a 3d 24 2e 42 44 3b 24 2e 5f 42 7a 3c 24 2e 43 42 3b 24 2e 5f 42 7a 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 7a 29 Data Ascii: ,l=r($.BD),f=t.pn=new j($.aB,$.Bu),i=($.Cs!=typeof document?document:$.$($.a,null))[$.a],w=$.Cx,y=$.Cy,b=$.Cz,_=$.DA;break;case $.y:Object[$.e](t,$.Cc,$.$($.Ij,!$.BD)),t.pn=void $.BD,t.gn=function(e,u,i){for($._Bz=$.BD;$._Bz<$.CB;$._Bz+=$.y){switch($._Bz)
2024-04-26 18:32:20 UTC	1369	IN	Data Raw: 28 6e 75 6c 6c 2c 24 2e 24 28 24 2e 47 6f 2c 6e 29 29 5b 24 2e 61 61 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 28 24 2e 42 44 2c 75 2e 64 6e 29 28 72 2c 74 29 3b 7d 29 5b 24 2e 42 74 5d 28 24 2e 65 67 29 3b 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 75 29 7b 66 6f 72 28 24 2e 5f 44 6c 3d 24 2e 42 44 3b 24 2e 5f 44 6c 3c 24 2e 46 6b 3b 24 2e 5f 44 6c 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 44 6c 29 7b 63 61 73 65 20 24 2e 46 6c 3a 66 75 6e 63 74 69 6f 6e 20 79 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2b 28 6c 5b 24 2e 44 73 5d 3d 24 2e 61 7a 2a 6c 5b 24 2e 44 73 5d 25 24 2e 62 76 2c 6c 5b 24 2e 44 73 5d 25 28 74 2d 6e 29 29 3b Data Ascii: (null,$.$($.Go,n))[$.aa](function(n,t){return($.BD,u.dn)(r,t);})[$.Bt]($.eg);};break;case $.BD:$.Cr;break;}}},function(n,t,u){for($._Dl=$.BD;$._Dl<$.Fk;$._Dl+=$.y){switch($._Dl){case $.Fl:function y(n,t){return n+(l[$.Ds]=$.az*l[$.Ds]%$.bv,l[$.Ds]%(t-n));
2024-04-26 18:32:20 UTC	1369	IN	Data Raw: 6f 77 5b 24 2e 43 5d 28 24 2e 47 6c 2c 6e 29 2c 24 2e 63 47 3d 3d 3d 6c 5b 24 2e 44 73 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6c 5b 24 2e 44 74 5d 3d 21 24 2e 42 44 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 24 2e 4a 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 77 3d 6e 65 77 20 65 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 44 43 3a 77 69 6e 64 6f 77 5b 24 2e 42 5d 28 24 2e 47 6c 2c 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 43 42 3a 76 61 72 20 6e 3d 28 24 2e 42 44 2c 6f 5b 24 2e 44 6d 5d 29 28 6c 2c 63 2e 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 6c 5b 24 2e 44 74 5d 3d 21 24 2e 79 3b 62 72 65 61 6b 3b 7d 7d 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 46 73 3a 6c 5b 24 2e 42 6e 5d 3d 24 2e 42 75 2c 6c 5b 24 2e 44 Data Ascii: ow[$.C]($.Gl,n),$.cG===l[$.Ds])return void(l[$.Dt]=!$.BD);break;}}}},$.Jj);break;case $.y:w=new e();break;case $.DC:window[$.B]($.Gl,n);break;case $.CB:var n=($.BD,o[$.Dm])(l,c.Q);break;case $.BD:l[$.Dt]=!$.y;break;}}}();break;case $.Fs:l[$.Bn]=$.Bu,l[$.D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49778	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	398	OUT	GET /ajax/banners?page=home_search HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true
2024-04-26 18:32:20 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 60 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"3c-DFz73KHXVYZHM3DcVRSxkH+OTqg" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QPI3rvyYEC%2BeUDsJQRrQ8tf9HzapDMHNPS74r0y4e1ze7x2SZ2PP%2FZK0g6haLk9R62T0yIWjC34L44wgXpuPmWjMnmXyEX7Kkka6UMVFMvB3G8brz9tNMxITXBqDad4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7a67b95a677-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:20 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 62 61 6e 6e 65 72 73 22 3a 7b 22 74 6f 70 22 3a 22 22 2c 22 6d 69 64 64 6c 65 22 3a 22 22 2c 22 62 6f 74 74 6f 6d 22 3a 22 22 7d 7d Data Ascii: {"status":true,"banners":{"top":"","middle":"","bottom":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49779	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	384	OUT	GET /ajax/banner/vpn HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true
2024-04-26 18:32:20 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:20 GMT Content-Type: application/json; charset=utf-8 Content-Length: 16 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"10-UiecVLFvCojUPVe0y7mBPqPMOas" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NzHD5i6UybF6p4h2NTFk5dZJuZMGp1smtxyHihUYkgNnVvJsfQUOyO1qqMdnOf9eBlFO88xiwKt9ebhVTphiPYQMwKsR8QBhVNqSCV9Uzawv79wa6dQdfeS7zQuTmYk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7a67d09a54f-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:20 UTC	16	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d Data Ascii: {"status":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49780	108.156.83.74	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	649	OUT	GET /img/twitter.svg HTTP/1.1 Host: platform-cdn.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:20 UTC	551	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 368 Connection: close Date: Fri, 26 Apr 2024 18:32:21 GMT Last-Modified: Fri, 15 Sep 2023 16:58:49 GMT ETag: "2deb3d5121d475d195577a70b0a91a0c" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 82fa657b9d38704a9381cf8976dc013e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: hTuEnlTzOt8s0hUwHB8hnLPuvoVSe1HnY8G8p6e0geDavZSPAA0YBg== Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:20 UTC	368	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 22 20 68 65 69 67 68 74 3d 22 32 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 20 32 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 32 35 22 20 68 65 69 67 68 74 3d 22 32 35 22 20 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 34 2e 34 38 32 31 20 31 31 2e 36 32 31 38 4c 32 31 2e 30 33 38 39 20 34 48 31 39 2e 34 38 35 32 4c 31 33 2e 37 39 31 39 20 31 30 2e 36 31 37 39 4c 39 2e 32 34 34 36 37 20 34 48 34 4c 31 30 2e 38 37 36 33 20 31 34 2e 30 30 37 34 4c 34 20 32 32 48 35 2e 35 35 33 38 35 4c 31 31 2e 35 36 36 31 20 31 35 2e 30 31 31 33 4c 31 36 2e 33 36 38 33 20 32 32 Data Ascii: <svg width="25" height="25" viewBox="0 0 25 25" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="25" height="25" /><path d="M14.4821 11.6218L21.0389 4H19.4852L13.7919 10.6179L9.24467 4H4L10.8763 14.0074L4 22H5.55385L11.5661 15.0113L16.3683 22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49783	108.156.83.74	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	650	OUT	GET /img/telegram.svg HTTP/1.1 Host: platform-cdn.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:20 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 858 Connection: close Last-Modified: Fri, 12 Aug 2022 01:07:51 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 26 Apr 2024 18:32:21 GMT ETag: "e3f5e90fa57764cd951db1b1bc688edd" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 502a7bd52b3ae4d20a5e032564344cee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: qJXE_s0GsTuEAPuBOGzpdOGLh_SfqM92vB-f0TsJP2G9ZwTMOLFK1w== Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:20 UTC	858	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 57 61 72 73 74 77 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8" ?>... Generator: Adobe Illustrator 24.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Warstwa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49781	108.156.83.74	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	650	OUT	GET /img/facebook.svg HTTP/1.1 Host: platform-cdn.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:20 UTC	603	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 301 Connection: close Date: Thu, 25 Apr 2024 13:49:42 GMT Last-Modified: Thu, 10 Oct 2019 01:20:12 GMT ETag: "c6e9be45643e197ce1db1d7e24a99adc" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 8e5d44dec7efea195d680ed573f3c5f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: TrjnBu0DuTKFB7vbF6zAzvphQ_xxC3isB2kfiPPd624236plN6LlfQ== Age: 103359 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:20 UTC	301	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 20 6d 65 65 74 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 32 31 2e 37 20 31 36 2e 37 68 35 76 35 68 2d 35 76 31 31 2e 36 68 2d 35 76 2d 31 31 2e 36 68 2d 35 76 2d 35 68 35 76 2d 32 2e 31 63 30 2d 32 20 30 2e 36 2d 34 2e 35 20 31 2e 38 2d 35 2e 39 20 31 2e 33 2d 31 2e 33 20 32 2e 38 2d 32 20 34 2e 37 2d 32 68 33 2e 35 76 35 68 2d 33 2e 35 63 2d 30 2e 39 20 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 40 40"> <g> <path d="m21.7 16.7h5v5h-5v11.6h-5v-11.6h-5v-5h5v-2.1c0-2 0.6-4.5 1.8-5.9 1.3-1.3 2.8-2 4.7-2h3.5v5h-3.5c-0.9 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49782	108.156.83.74	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	648	OUT	GET /img/reddit.svg HTTP/1.1 Host: platform-cdn.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:20 UTC	603	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 910 Connection: close Date: Fri, 19 Apr 2024 13:51:32 GMT Last-Modified: Thu, 10 Oct 2019 01:20:13 GMT ETag: "78d796ca648d8a5e665b48ed0217c56a" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 f3407167245d79d14876c53a82e27948.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: 5nTGzn2-tPr9t2ldHs2vkUzkNoREp0hXK8GlU3gXwOFB0An72JfKhQ== Age: 621649 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:20 UTC	910	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 20 6d 65 65 74 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 34 30 20 31 38 2e 39 71 30 20 31 2e 33 2d 30 2e 37 20 32 2e 33 74 2d 31 2e 37 20 31 2e 37 71 30 2e 32 20 31 20 30 2e 32 20 32 2e 31 20 30 20 33 2e 35 2d 32 2e 33 20 36 2e 34 74 2d 36 2e 35 20 34 2e 37 2d 39 20 31 2e 37 2d 38 2e 39 2d 31 2e 37 2d 36 2e 34 2d 34 2e 37 2d 32 2e 34 2d 36 2e 34 71 30 2d 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 40 40"> <g> <path d="m40 18.9q0 1.3-0.7 2.3t-1.7 1.7q0.2 1 0.2 2.1 0 3.5-2.3 6.4t-6.5 4.7-9 1.7-8.9-1.7-6.4-4.7-2.4-6.4q0-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49784	108.156.83.74	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	650	OUT	GET /img/whatsapp.svg HTTP/1.1 Host: platform-cdn.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:20 UTC	603	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 832 Connection: close Date: Thu, 18 Apr 2024 18:51:29 GMT Last-Modified: Thu, 10 Oct 2019 01:20:13 GMT ETag: "afe7fc60ed757db39a88d2950fce69c9" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 111ebfb08854e3536ddd29ae1254b43e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: q47QlfOb9lsOKudoIYcoD0EyvaC4yHcwLj7r-jBpiBNpjHuYbMsGSg== Age: 690052 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:20 UTC	832	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 20 6d 65 65 74 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 32 35 20 32 31 2e 37 71 30 2e 33 20 30 20 32 2e 32 20 31 74 32 20 31 2e 32 71 30 20 30 2e 31 20 30 20 30 2e 33 20 30 20 30 2e 38 2d 30 2e 34 20 31 2e 37 2d 30 2e 33 20 30 2e 39 2d 31 2e 36 20 31 2e 35 74 2d 32 2e 32 20 30 2e 36 71 2d 31 2e 33 20 30 2d 34 2e 33 2d 31 2e 34 2d 32 2e 32 2d 31 2d 33 2e 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 40 40"> <g> <path d="m25 21.7q0.3 0 2.2 1t2 1.2q0 0.1 0 0.3 0 0.8-0.4 1.7-0.3 0.9-1.6 1.5t-2.2 0.6q-1.3 0-4.3-1.4-2.2-1-3.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49785	108.156.83.74	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	651	OUT	GET /img/messenger.svg HTTP/1.1 Host: platform-cdn.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:20 UTC	603	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 372 Connection: close Date: Sun, 21 Apr 2024 20:45:28 GMT Last-Modified: Thu, 10 Oct 2019 01:20:13 GMT ETag: "a5aa43fa302867d3e888ac2f69b7b288" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 ea17bb5c24692755a274a9116072570a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: fuDZZ4mRq-pnKupVvbNpBnFjnwV0__X-J9FXl_dgqRvSsveFYuq5Ig== Age: 424013 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:20 UTC	372	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 20 6d 65 65 74 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 35 2c 32 43 31 32 2e 33 2c 32 2c 32 2c 31 31 2e 36 2c 32 2c 32 33 2e 35 63 30 2c 36 2e 33 2c 32 2e 39 2c 31 32 2e 32 2c 38 2c 31 36 2e 33 76 38 2e 38 6c 38 2e 36 2d 34 2e 35 63 32 2e 31 2c 30 2e 36 2c 34 2e 32 2c 30 2e 38 2c 36 2e 34 2c 30 2e 38 63 31 32 2e 37 2c 30 2c 32 33 2d 39 2e 36 2c 32 33 2d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 50 50"> <g> <path d="M25,2C12.3,2,2,11.6,2,23.5c0,6.3,2.9,12.2,8,16.3v8.8l8.6-4.5c2.1,0.6,4.2,0.8,6.4,0.8c12.7,0,23-9.6,23-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49789	3.16.63.45	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	1300	OUT	GET /sc?event=pview&hostname=1movieshd.cc&location=%2F&product=inline-share-buttons&url=https%3A%2F%2F1movieshd.cc%2F&source=platform&fcmp=false&fcmpv2=false&has_segmentio=false&title=%231Movies%20%7C%20Watch%20Free%20Streaming%20Movies%20and%20TV%20Series%20Online&cms=unknown&publisher=6433be364f61b7001240a339&sop=true&version=st_sop.js&lang=en&description=1Movies%20Watch%20Movies%20online%20for%20free%2C%20Streaming%20movies%20on%201Movies.to.%201Movies%20is%20the%20biggest%20website%20for%20free%20movies.&ua=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&ua_mobile=false&ua_platform=Windows&ua_full_version_list=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&ua_platform_version=10.0.0&uuid=48528ff4-c065-4879-ac18-f0f89e829048&samesite=None HTTP/1.1 Host: l.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:21 UTC	494	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Access-Control-Expose-Headers: stid Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain; charset=utf-8 Date: Fri, 26 Apr 2024 18:32:20 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 176 Connection: Close
2024-04-26 18:32:21 UTC	176	IN	Data Raw: 7b 22 66 70 65 73 74 69 64 22 3a 22 6f 46 42 39 2d 56 54 77 48 46 67 73 4b 37 66 41 43 76 77 70 42 6a 36 4d 4e 64 54 73 64 46 70 70 78 30 42 6b 42 6a 64 59 76 33 62 6b 74 64 6f 4e 66 30 2d 55 6a 38 56 47 43 43 52 52 73 55 56 55 72 62 39 70 44 67 22 2c 22 66 70 65 73 74 69 64 5f 6d 61 78 61 67 65 22 3a 33 31 35 33 35 39 39 39 2c 22 6c 6f 74 61 6d 65 22 3a 22 74 72 75 65 22 2c 22 73 74 61 74 75 73 22 3a 22 74 72 75 65 22 2c 22 73 74 69 64 22 3a 22 5a 47 6b 41 43 57 59 72 38 7a 4d 41 41 41 41 49 41 39 38 59 41 77 3d 3d 22 7d Data Ascii: {"fpestid":"oFB9-VTwHFgsK7fACvwpBj6MNdTsdFppx0BkBjdYv3bktdoNf0-Uj8VGCCRRsUVUrb9pDg","fpestid_maxage":31535999,"lotame":"true","status":"true","stid":"ZGkACWYr8zMAAAAIA98YAw=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49795	108.156.83.9	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	416	OUT	GET /img/reddit.svg HTTP/1.1 Host: platform-cdn.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:21 UTC	603	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 910 Connection: close Date: Fri, 19 Apr 2024 13:51:32 GMT Last-Modified: Thu, 10 Oct 2019 01:20:13 GMT ETag: "78d796ca648d8a5e665b48ed0217c56a" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 18133da1ea724d113c4123fb3f20be9e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: V1G9OnldGAYlm8GS7xxRdlA9LfVn5fGIPiuql06N6Hwx2u7Bh_YJJA== Age: 621649 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:21 UTC	910	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 20 6d 65 65 74 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 34 30 20 31 38 2e 39 71 30 20 31 2e 33 2d 30 2e 37 20 32 2e 33 74 2d 31 2e 37 20 31 2e 37 71 30 2e 32 20 31 20 30 2e 32 20 32 2e 31 20 30 20 33 2e 35 2d 32 2e 33 20 36 2e 34 74 2d 36 2e 35 20 34 2e 37 2d 39 20 31 2e 37 2d 38 2e 39 2d 31 2e 37 2d 36 2e 34 2d 34 2e 37 2d 32 2e 34 2d 36 2e 34 71 30 2d 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 40 40"> <g> <path d="m40 18.9q0 1.3-0.7 2.3t-1.7 1.7q0.2 1 0.2 2.1 0 3.5-2.3 6.4t-6.5 4.7-9 1.7-8.9-1.7-6.4-4.7-2.4-6.4q0-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49791	108.156.83.9	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	419	OUT	GET /img/messenger.svg HTTP/1.1 Host: platform-cdn.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:21 UTC	603	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 372 Connection: close Date: Sun, 21 Apr 2024 20:45:28 GMT Last-Modified: Thu, 10 Oct 2019 01:20:13 GMT ETag: "a5aa43fa302867d3e888ac2f69b7b288" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 038457f797aa314915a62d82c1c45e26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: cp22ettNpMP42pQikhIb4QfmK8qvooLwdATFPQbGqYCS6GMX3_G9Pw== Age: 424013 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:21 UTC	372	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 20 6d 65 65 74 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 35 30 22 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 35 2c 32 43 31 32 2e 33 2c 32 2c 32 2c 31 31 2e 36 2c 32 2c 32 33 2e 35 63 30 2c 36 2e 33 2c 32 2e 39 2c 31 32 2e 32 2c 38 2c 31 36 2e 33 76 38 2e 38 6c 38 2e 36 2d 34 2e 35 63 32 2e 31 2c 30 2e 36 2c 34 2e 32 2c 30 2e 38 2c 36 2e 34 2c 30 2e 38 63 31 32 2e 37 2c 30 2c 32 33 2d 39 2e 36 2c 32 33 2d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 50 50"> <g> <path d="M25,2C12.3,2,2,11.6,2,23.5c0,6.3,2.9,12.2,8,16.3v8.8l8.6-4.5c2.1,0.6,4.2,0.8,6.4,0.8c12.7,0,23-9.6,23-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49792	108.156.83.9	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	418	OUT	GET /img/facebook.svg HTTP/1.1 Host: platform-cdn.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:21 UTC	603	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 301 Connection: close Date: Thu, 25 Apr 2024 13:49:42 GMT Last-Modified: Thu, 10 Oct 2019 01:20:12 GMT ETag: "c6e9be45643e197ce1db1d7e24a99adc" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 5d219c13711b70ba6da9405b48e9ea06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: ddb7w-QyRWb46BGgiTNtylAUOqsCzsxgsUZOqGARen4ErhbBeEnLwA== Age: 103359 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:21 UTC	301	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 20 6d 65 65 74 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 32 31 2e 37 20 31 36 2e 37 68 35 76 35 68 2d 35 76 31 31 2e 36 68 2d 35 76 2d 31 31 2e 36 68 2d 35 76 2d 35 68 35 76 2d 32 2e 31 63 30 2d 32 20 30 2e 36 2d 34 2e 35 20 31 2e 38 2d 35 2e 39 20 31 2e 33 2d 31 2e 33 20 32 2e 38 2d 32 20 34 2e 37 2d 32 68 33 2e 35 76 35 68 2d 33 2e 35 63 2d 30 2e 39 20 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 40 40"> <g> <path d="m21.7 16.7h5v5h-5v11.6h-5v-11.6h-5v-5h5v-2.1c0-2 0.6-4.5 1.8-5.9 1.3-1.3 2.8-2 4.7-2h3.5v5h-3.5c-0.9 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49794	108.156.83.9	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	418	OUT	GET /img/whatsapp.svg HTTP/1.1 Host: platform-cdn.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:21 UTC	603	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 832 Connection: close Date: Thu, 18 Apr 2024 18:51:29 GMT Last-Modified: Thu, 10 Oct 2019 01:20:13 GMT ETag: "afe7fc60ed757db39a88d2950fce69c9" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 19730f0d78f5675aa7f2838252596968.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: jh1eZ6UkVnaaYXrdtKH2u0VLQzMw4D6w1T2jDtCUOP7jYPfyHyG-0w== Age: 690052 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:21 UTC	832	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 20 6d 65 65 74 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 32 35 20 32 31 2e 37 71 30 2e 33 20 30 20 32 2e 32 20 31 74 32 20 31 2e 32 71 30 20 30 2e 31 20 30 20 30 2e 33 20 30 20 30 2e 38 2d 30 2e 34 20 31 2e 37 2d 30 2e 33 20 30 2e 39 2d 31 2e 36 20 31 2e 35 74 2d 32 2e 32 20 30 2e 36 71 2d 31 2e 33 20 30 2d 34 2e 33 2d 31 2e 34 2d 32 2e 32 2d 31 2d 33 2e 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="#fff" preserveAspectRatio="xMidYMid meet" height="1em" width="1em" viewBox="0 0 40 40"> <g> <path d="m25 21.7q0.3 0 2.2 1t2 1.2q0 0.1 0 0.3 0 0.8-0.4 1.7-0.3 0.9-1.6 1.5t-2.2 0.6q-1.3 0-4.3-1.4-2.2-1-3.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49793	108.156.83.9	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	418	OUT	GET /img/telegram.svg HTTP/1.1 Host: platform-cdn.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:21 UTC	573	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 858 Connection: close Last-Modified: Fri, 12 Aug 2022 01:07:51 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 26 Apr 2024 18:32:21 GMT ETag: "e3f5e90fa57764cd951db1b1bc688edd" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 19730f0d78f5675aa7f2838252596968.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: j1QwbHGx6zEaxLks2rASEdXh6xzV2FIm12g8IZUqxJRNDV7N26drIQ== Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:21 UTC	858	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 57 61 72 73 74 77 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8" ?>... Generator: Adobe Illustrator 24.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Warstwa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49796	18.64.174.59	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	585	OUT	GET /panorama.js HTTP/1.1 Host: platform-api.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:21 UTC	606	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 39537 Connection: close Accept-Ranges: bytes Last-Modified: Tue, 19 Mar 2024 22:24:27 GMT X-Frame-Options: SAMEORIGIN Date: Fri, 26 Apr 2024 18:05:52 GMT Cache-Control: public, max-age=3600 ETag: W/"9a71-18e58d0dd78" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ccacd494408408c101c27d29759e4e26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P4 X-Amz-Cf-Id: 0dFm-pbK0IiVisoDQQkqN18oT9yXqMymkehJzrt6nQ146gLhw_2Fow== Age: 3170 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:21 UTC	16384	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-04-26 18:32:21 UTC	16384	IN	Data Raw: 27 22 2b 61 2e 69 64 2b 22 27 22 29 3a 73 79 6e 63 31 36 36 32 31 5f 2e 65 72 72 6f 72 28 22 44 65 63 6c 61 72 65 64 20 49 44 20 6f 62 6a 65 63 74 20 74 79 70 65 20 6d 75 73 74 20 6f 6e 65 20 6f 66 20 22 2b 73 79 6e 63 31 36 36 32 31 5f 76 2e 6a 6f 69 6e 28 29 2b 22 2c 20 66 6f 75 6e 64 20 27 22 2b 61 2e 74 79 70 65 2b 22 27 22 29 3a 73 79 6e 63 31 36 36 32 31 5f 2e 65 72 72 6f 72 28 22 44 65 63 6c 61 72 65 64 20 49 44 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 62 26 26 28 74 68 69 73 2e 68 3d 61 29 7d 73 79 6e 63 31 36 36 32 31 5f 67 28 73 79 6e 63 31 36 36 32 31 5f 77 2c 73 79 6e 63 31 36 36 32 31 5f 74 29 3b 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 36 32 31 5f 68 61 28 61 2c 62 29 7b 62 26 26 28 41 72 72 61 79 2e 69 73 Data Ascii: '"+a.id+"'"):sync16621_.error("Declared ID object type must one of "+sync16621_v.join()+", found '"+a.type+"'"):sync16621_.error("Declared ID should be an object");b&&(this.h=a)}sync16621_g(sync16621_w,sync16621_t); function sync16621_ha(a,b){b&&(Array.is
2024-04-26 18:32:21 UTC	6769	IN	Data Raw: 20 30 3d 3d 3d 64 3f 22 64 61 74 61 22 3a 64 2c 63 29 2c 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 64 61 74 61 3a 62 2c 4a 61 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 61 2e 48 61 3d 6e 65 77 20 73 79 6e 63 31 36 36 32 31 5f 4f 28 68 2c 61 2e 66 29 3b 66 28 61 2e 48 61 29 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 73 79 6e 63 31 36 36 32 31 5f 2e 65 72 72 6f 72 28 22 41 62 6f 72 74 69 6e 67 20 64 75 65 20 74 6f 20 65 72 72 6f 72 20 63 6f 6e 74 61 63 74 69 6e 67 20 4c 6f 74 61 6d 65 27 73 20 73 65 72 76 65 72 73 2e 20 45 72 72 6f 72 20 72 65 61 73 6f 6e 20 77 61 73 20 27 22 2b 28 76 6f 69 64 20 30 3d 3d 3d 67 3f 22 20 6e 6f 74 20 70 72 6f 76 69 64 65 64 22 3a 67 29 2b 22 27 2e 22 29 7d 7d 29 7d 20 73 79 6e 63 31 36 36 32 31 5f 47 61 Data Ascii: 0===d?"data":d,c),{method:"POST",data:b,Ja:function(h){a.Ha=new sync16621_O(h,a.f);f(a.Ha)},error:function(h,g){sync16621_.error("Aborting due to error contacting Lotame's servers. Error reason was '"+(void 0===g?" not provided":g)+"'.")}})} sync16621_Ga

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49797	108.156.83.9	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	417	OUT	GET /img/twitter.svg HTTP/1.1 Host: platform-cdn.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:21 UTC	558	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 368 Connection: close Date: Fri, 26 Apr 2024 18:32:21 GMT Last-Modified: Fri, 15 Sep 2023 16:58:49 GMT ETag: "2deb3d5121d475d195577a70b0a91a0c" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 dd2d6c5b6e642ed1fe019e9ccc631034.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P2 X-Amz-Cf-Id: QexPm0vQg623eGcDelZVm3ZezrwG8cSvTW6hFPTHcr5w5umndeDiKQ== Age: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:21 UTC	368	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 22 20 68 65 69 67 68 74 3d 22 32 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 20 32 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 32 35 22 20 68 65 69 67 68 74 3d 22 32 35 22 20 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 34 2e 34 38 32 31 20 31 31 2e 36 32 31 38 4c 32 31 2e 30 33 38 39 20 34 48 31 39 2e 34 38 35 32 4c 31 33 2e 37 39 31 39 20 31 30 2e 36 31 37 39 4c 39 2e 32 34 34 36 37 20 34 48 34 4c 31 30 2e 38 37 36 33 20 31 34 2e 30 30 37 34 4c 34 20 32 32 48 35 2e 35 35 33 38 35 4c 31 31 2e 35 36 36 31 20 31 35 2e 30 31 31 33 4c 31 36 2e 33 36 38 33 20 32 32 Data Ascii: <svg width="25" height="25" viewBox="0 0 25 25" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="25" height="25" /><path d="M14.4821 11.6218L21.0389 4H19.4852L13.7919 10.6179L9.24467 4H4L10.8763 14.0074L4 22H5.55385L11.5661 15.0113L16.3683 22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49798	13.226.52.40	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	650	OUT	GET /v2.0/get_counts?cb=window.__sharethis__.cb&url=https%3A%2F%2F1movieshd.cc%2F HTTP/1.1 Host: count-server.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:21 UTC	500	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 346 Connection: close Date: Fri, 26 Apr 2024 18:32:21 GMT Cache-Control: public, max-age=86400 ETag: e49974753a246e01b98f5510661c3633 Apigw-Requestid: W2LwWgJroAMEPvw= X-Cache: Miss from cloudfront Via: 1.1 945393cefc4bfc81e302c26bac47e4f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: N-ne6kxn3hjwz8xeX0GX7Qw3SHtzyoZg3oNQF66_QYF9YNNTK2wdrw== Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:21 UTC	346	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 5f 73 68 61 72 65 74 68 69 73 5f 5f 2e 63 62 28 7b 22 63 6c 69 63 6b 73 22 3a 7b 22 61 6c 6c 22 3a 33 37 30 30 2c 22 61 6d 61 7a 6f 6e 5f 77 69 73 68 6c 69 73 74 22 3a 31 2c 22 65 6d 61 69 6c 22 3a 31 30 2c 22 66 61 63 65 62 6f 6f 6b 22 3a 39 36 34 2c 22 69 6e 73 74 61 67 72 61 6d 22 3a 32 32 31 2c 22 6d 65 73 73 65 6e 67 65 72 22 3a 35 2c 22 71 75 6f 72 61 22 3a 39 2c 22 72 65 64 64 69 74 22 3a 32 31 39 32 2c 22 73 6e 61 70 63 68 61 74 22 3a 39 32 2c 22 74 77 69 74 74 65 72 22 3a 32 30 32 2c 22 79 6f 75 74 75 62 65 22 3a 34 7d 2c 22 74 6f 74 61 6c 22 3a 38 35 32 36 2c 22 73 68 61 72 65 73 22 3a 7b 22 61 6c 6c 22 3a 34 38 32 36 2c 22 66 61 63 65 62 6f 6f 6b 22 3a 35 31 32 2c 22 6d 65 73 73 65 6e Data Ascii: (function(){window.__sharethis__.cb({"clicks":{"all":3700,"amazon_wishlist":1,"email":10,"facebook":964,"instagram":221,"messenger":5,"quora":9,"reddit":2192,"snapchat":92,"twitter":202,"youtube":4},"total":8526,"shares":{"all":4826,"facebook":512,"messen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49787	139.45.195.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:20 UTC	626	OUT	GET /gid.js?userId=k3oa752910bk686846683x2y8sbun072 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=k3oa752910bk686846683x2y8sbun072
2024-04-26 18:32:21 UTC	700	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:21 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:21 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:21 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 6b 33 6f 61 37 35 32 39 31 30 62 6b 36 38 36 38 34 36 36 38 33 78 32 79 38 73 62 75 6e 30 37 32 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"k3oa752910bk686846683x2y8sbun072","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49788	139.45.195.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:21 UTC	428	OUT	GET /gid.js?userId=k3oa752910bk686846683x2y8sbun072 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=k3oa752910bk686846683x2y8sbun072
2024-04-26 18:32:21 UTC	681	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:21 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:21 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:21 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 6b 33 6f 61 37 35 32 39 31 30 62 6b 36 38 36 38 34 36 36 38 33 78 32 79 38 73 62 75 6e 30 37 32 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"k3oa752910bk686846683x2y8sbun072","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49790	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:21 UTC	1363	OUT	GET /?rb=PHmS1cuti--C9Oc8Zd_j_18IAKdh0xDgAsCQe_F6DduFePPWkCx6-TLTSQzO4TUCfgOveR0y9aEKkPIOMteSE6eFFsxXgZl8oCRH7bxz8qpQZInzJrMUcZE6TQq4fMcKAx-PxTJ0-FpkCD4zhJfCJZtUQwOYCeqNnwlLIICneiGKuo0bVVk-q03ok2nVR2w-TwMkuEnUnEtYXiNN4kdWpqNesp9b5UUSj-AgMrzpphMFZGG7SylO0c6esmk02S696o9p-urTenHsv9nQLpLxlGp7U7G_kc5lkjH-GRbcUUOlW0Cx6UrV2Yvwk5d5PAZ7YyxfJQ%3D%3D&request_ab2=0&zoneid=4724866&js_build=iclick-v1.785.1-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=907&wiw=1280&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=1263&wfc=2&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-120&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.785.1-auto&navlng=en-US&pnt=0&pnrc=0&bs=145397bc-0884-4ea1-ae3b-d7b7212354f2&wasm=1&userId=k3oa752910bk686846683x2y8sbun072&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.132&m=link HTTP/1.1 Host: eephaush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; oaidts=1714156340; syncedCookie=true
2024-04-26 18:32:21 UTC	1182	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:21 GMT Content-Type: application/json Content-Length: 4348 Connection: close X-Trace-Id: 031a573bc871452db3dc3bad9085be65 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:21 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156341; expires=Sat, 26 Apr 2025 18:32:21 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Fri, 03 May 2024 18:32:21 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:21 UTC	4348	IN	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 32 36 39 35 39 31 37 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 39 35 38 37 34 39 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 34 2f 36 31 31 38 37 38 30 2f 3f 76 61 72 3d 34 37 32 34 38 36 36 5c 75 30 30 32 36 62 74 7a 3d 45 75 72 6f 70 65 2f 5a 75 72 69 63 68 5c 75 30 30 32 36 62 74 6f 3d 2d 31 32 30 5c 75 30 30 32 36 62 61 72 3d 78 22 2c 22 63 61 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 63 61 74 2e 70 68 70 3f 75 73 65 72 49 64 3d 6b 33 6f 61 37 35 32 39 31 30 62 6b 36 38 36 38 34 36 36 38 33 78 32 79 38 73 62 75 6e 30 37 32 5c 75 30 30 32 36 7a 6f 6e 65 69 64 3d 34 37 32 34 38 36 36 5c 75 30 30 32 36 72 62 3d 50 48 6d 53 Data Ascii: {"bannerId":2695917,"campaignId":1958749,"dstUrl":"https://eephaush.com/4/6118780/?var=4724866\u0026btz=Europe/Zurich\u0026bto=-120\u0026bar=x","catUrl":"https://eephaush.com/cat.php?userId=k3oa752910bk686846683x2y8sbun072\u0026zoneid=4724866\u0026rb=PHmS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49801	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:21 UTC	850	OUT	OPTIONS /500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=2&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://1movieshd.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:21 UTC	737	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:21 GMT Content-Length: 0 Connection: close Allow: GET, OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49807	139.45.195.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:23 UTC	428	OUT	GET /gid.js?userId=k3oa752910bk686846683x2y8sbun072 HTTP/1.1 Host: my.rtmark.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=k3oa752910bk686846683x2y8sbun072
2024-04-26 18:32:23 UTC	681	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:23 GMT Content-Type: application/json; charset=utf-8 Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:23 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:23 UTC	65	IN	Data Raw: 7b 22 67 69 64 22 3a 22 6b 33 6f 61 37 35 32 39 31 30 62 6b 36 38 36 38 34 36 36 38 33 78 32 79 38 73 62 75 6e 30 37 32 22 2c 22 73 6b 69 70 53 75 62 73 63 72 69 62 65 22 3a 66 61 6c 73 65 7d 0a Data Ascii: {"gid":"k3oa752910bk686846683x2y8sbun072","skipSubscribe":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49808	52.20.151.97	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:23 UTC	606	OUT	POST /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive Content-Length: 439 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:23 UTC	439	OUT	Data Raw: 7b 22 72 22 3a 7b 22 72 69 64 22 3a 74 72 75 65 7d 2c 22 6d 22 3a 7b 22 64 63 63 22 3a 31 36 36 32 31 2c 22 73 72 63 22 3a 22 53 59 4e 43 4a 53 22 2c 22 63 68 22 3a 7b 22 62 72 61 6e 64 73 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 22 7d 2c 7b 22 62 72 61 6e 64 22 3a 22 43 68 72 6f 6d 69 75 6d 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 22 7d 5d 2c 22 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 22 3a 5b 7b 22 62 72 61 6e 64 22 3a 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 7d Data Ascii: {"r":{"rid":true},"m":{"dcc":16621,"src":"SYNCJS","ch":{"brands":[{"brand":"Google Chrome","version":"117"},{"brand":"Not;A=Brand","version":"8"},{"brand":"Chromium","version":"117"}],"fullVersionList":[{"brand":"Google Chrome","version":"117.0.5938.132"}
2024-04-26 18:32:23 UTC	645	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:23 GMT Content-Type: application/json;charset=utf-8 Content-Length: 235 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.63.248 Set-Cookie: _cc_dc=0;Path=/;Domain=crwdcntrl.net;Expires=Tue, 21-Jan-2025 18:01:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=afa9acdd318515b6d11857989cfe776c;Path=/;Domain=crwdcntrl.net;Expires=Tue, 21-Jan-2025 18:01:00 GMT;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://1movieshd.cc Server: Jetty(9.4.38.v20210224)
2024-04-26 18:32:23 UTC	235	IN	Data Raw: 7b 22 70 69 64 22 3a 22 61 66 61 39 61 63 64 64 33 31 38 35 31 35 62 36 64 31 31 38 35 37 39 38 39 63 66 65 37 37 36 63 22 2c 22 63 22 3a 5b 7b 22 6b 22 3a 22 5f 63 63 5f 69 64 22 2c 22 76 22 3a 22 61 66 61 39 61 63 64 64 33 31 38 35 31 35 62 36 64 31 31 38 35 37 39 38 39 63 66 65 37 37 36 63 22 2c 22 65 22 3a 32 33 33 32 38 30 30 30 7d 5d 2c 22 69 64 73 22 3a 5b 7b 22 69 22 3a 22 31 63 39 63 33 64 31 35 30 63 61 36 38 36 34 37 65 35 61 32 30 38 36 37 30 30 62 38 31 38 35 63 61 30 32 63 37 31 38 33 30 37 37 31 38 38 66 30 33 30 64 63 62 62 35 61 35 64 66 61 33 31 61 31 22 2c 22 74 22 3a 22 63 22 2c 22 63 22 3a 22 63 6f 72 65 22 2c 22 65 22 3a 22 31 37 31 34 37 36 31 31 34 33 32 38 30 22 7d 5d 7d Data Ascii: {"pid":"afa9acdd318515b6d11857989cfe776c","c":[{"k":"_cc_id","v":"afa9acdd318515b6d11857989cfe776c","e":23328000}],"ids":[{"i":"1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1","t":"c","c":"core","e":"1714761143280"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49812	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:23 UTC	973	OUT	GET /500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=2&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=03004a756c234c92f8304449495a10c1
2024-04-26 18:32:24 UTC	815	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 26 Apr 2024 18:32:24 GMT Connection: close X-Trace-Id: 69da1622b8b49b088c6bc8dd87e1e5c7 Expires: Tue, 11 Jan 1994 10:00:00 GMT Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Pragma: no-cache Timing-Allow-Origin: * Vary: Origin Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:24 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49813	3.16.63.45	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:24 UTC	737	OUT	GET /panorama?uid=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1&stid=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:24 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:24 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49817	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:24 UTC	895	OUT	GET /images/group_11/theme_3/favicon.png HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:25 UTC	1028	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:25 GMT Content-Type: image/png Content-Length: 8754 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=2592000 Last-Modified: Thu, 06 Jul 2023 17:26:04 GMT ETag: W/"2232-1892c3d5530" X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 799550 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=or44lNwzA1i13F0396mX%2B%2FqHJO2YkRKy77jbgvRMaeRO5O7wHe82PZ7RRsxF0AWNixivbWLOtw3WPN1IHW%2FFoywnDc2tH2IB9%2BKDd5kUeLHdP45FGiOry2qOkdobv2w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7c5481309fa-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:25 UTC	341	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR@@iqtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-04-26 18:32:25 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 45 46 32 45 30 37 39 32 33 Data Ascii: ption rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:7EF2E07923
2024-04-26 18:32:25 UTC	1369	IN	Data Raw: 3f 05 77 64 37 8a 13 1f 43 61 fd 2f c2 71 46 ac 20 f1 3c 6f 6e 51 56 ab 36 c6 08 ff e9 5f f1 82 48 4c 84 31 d1 a4 0e 23 41 9e f7 e4 52 05 6b a0 be 70 37 6a f3 7f 41 ad 78 52 41 70 f2 43 6d 1f 62 ce 0c c2 77 79 f8 e0 4f 05 a0 76 cf 9b df 43 f1 fe 96 42 7c 38 63 82 ea e8 69 94 aa 01 a9 4a 86 4b af c3 e4 7b 51 f8 b9 df 84 3f f1 71 e4 dd 41 34 93 05 86 ae e5 d4 59 59 b1 62 7e ce b9 63 da 47 ab f2 2c 82 ca 11 fd ec f7 6d 44 ae 77 67 0a c4 12 2c ef 73 ad ba f3 93 e3 f4 a6 be 35 42 6d ee eb 58 3e 79 07 12 77 01 5e 71 b3 ed 3e 05 21 72 24 78 38 dd 20 7c 87 87 6b de 1c 80 bb af 7c 43 c9 d9 eb 6d 14 f4 06 8d d7 26 9d 7b 8e 2a 92 8b a2 7f 71 83 c2 1f 86 bb fa 62 f4 5e f8 05 f8 3d bb d1 a0 e0 26 5a e4 a3 2e 87 a2 81 d0 0a 64 8a f0 9c 61 d4 4f 3c 88 f9 67 fe 17 9a b3 Data Ascii: ?wd7Ca/qF <onQV6_HL1#ARkp7jAxRApCmbwyOvCB\|8ciJK{Q?qA4YYb~cG,mDwg,s5BmX>yw^q>!r$x8 \|k\|Cm&{*qb^=&Z.daO<g
2024-04-26 18:32:25 UTC	1369	IN	Data Raw: 12 14 50 f0 20 d0 cf 4a b2 5a 73 7c ae 8f aa 7c 11 9f 6d aa ff 96 54 d9 75 86 f4 d8 8a 4f a0 b1 f0 08 1a b3 8f ea 75 97 e1 d0 d5 90 a8 05 04 1d 77 71 f0 3f c0 2f 5e 48 30 8f 77 6a 10 b1 cd 96 8c 9d e5 1b dc b4 e2 96 65 83 97 b1 ad eb 30 c0 24 b5 04 3e d1 a2 c3 3a f7 2a c6 ee 55 9c fd d7 14 69 2f b7 99 03 9e c2 dc 8f ff 08 b5 97 ef a3 0a 4f c1 bf e4 02 78 ad 71 9a c7 20 bd f2 bb 90 ef fb b7 7c 9e 33 14 51 7b fc 1d 18 5a 77 1d 8e ef db 8b 5c 69 13 35 a5 a0 a1 4f 79 82 98 98 11 72 43 d7 13 54 c8 f2 0e 63 74 e2 66 f8 de 66 0d b1 9e 3b c2 01 e7 d1 68 7c 0f 8d fa e3 74 bb 35 b8 d5 e3 a8 fc f0 7e 78 a5 d5 28 9f f3 21 0c bc e3 46 82 40 b5 97 94 3a e1 75 46 9e 9e a1 df c4 c2 d1 cf c2 0d c7 91 39 00 91 4b d8 69 ec 24 eb 28 87 c8 fc 88 bb f7 63 db 04 96 df e3 95 8b Data Ascii: P JZs\|\|mTuOuwq?/^H0wje0$>:*Ui/Oxq \|3Q{Zw\i5OyrCTctff;h\|t5~x(!F@:uF9Ki$(c
2024-04-26 18:32:25 UTC	1369	IN	Data Raw: 50 63 72 65 a6 b4 f4 1f 46 f9 ba ab 26 d0 0a 5f 56 d2 14 33 51 0a 49 61 c3 e8 04 cd 63 ca ce bc 56 48 6a 54 c0 d5 e4 0c eb 11 d4 67 ac ee 12 04 9d 45 19 8b b0 47 36 97 00 06 42 92 8a 34 13 a6 d2 1c 14 0a 23 bb 3a 13 29 5a e2 93 40 b9 03 3a 66 1d 5f 90 b4 13 25 b6 11 01 a0 dc ad 01 8a 0f 5f 64 f2 74 5a b4 75 37 b1 2f 0d c2 69 f8 eb df 8b fc 9a 5d 68 4d cf 28 00 5a 95 d5 65 2c 51 d9 c8 da bf 98 8a 84 bd b8 a9 a8 f7 af 7b af 9a 93 43 00 5d 0e b6 49 e1 a3 f8 18 3f e7 b5 5f c7 58 8a 1b 31 b4 25 cc 31 6c 86 47 80 a9 77 7d ab df af 5a 94 44 4d d5 1a 6d b1 5d 52 b2 60 c4 4a 94 1d 02 10 2c bc 8e c2 d8 05 6c ef 41 94 d8 49 8b d4 f9 f6 c0 71 cb 3a 41 dd 75 b2 54 49 ca e2 03 f2 76 f5 c5 74 45 01 f1 01 39 9a 88 63 8d 45 33 2a 3a 35 d2 df a1 7f f3 39 29 f0 d2 d6 a6 b5 Data Ascii: PcreF&_V3QIacVHjTgEG6B4#:)Z@:f_%_dtZu7/i]hM(Ze,Q{C]I?_X1%1lGw}ZDMm]R`J,lAIq:AuTIvtE9cE3*:59)
2024-04-26 18:32:25 UTC	1369	IN	Data Raw: 87 b1 cc 4c cb 0d e7 d5 33 af 04 81 a0 b8 3d 1a 86 4e be fa df 39 c8 1f 31 07 df 6a f9 04 a9 ac e3 14 f9 d2 93 cc 24 fb 35 bc ce bf f4 10 71 bc 19 eb 2e ff 1a d5 9d f1 3a b6 5c df f7 06 b4 86 70 f4 f1 eb b1 f8 fa 77 51 1c dd c1 7e 3d 6d 5e b1 8f 93 42 fb a5 ef 10 09 9a f5 c7 b1 38 fd c7 e8 1b fd 9c 9a 8b 24 4f 02 e2 4a 10 a4 fc 3b 40 0d 7c 1a e1 c2 0b ba 62 94 44 69 a1 5b 1d 60 7b e3 d6 a3 24 68 74 c7 41 74 a0 2b 41 b0 75 75 d9 ae 52 a5 7d 4f be 40 61 0a ed ea 6c 9c 74 ea fe ea 75 bd 21 d4 16 ff 1e cb 33 3f 40 a1 ff 1d bc b5 6c 79 01 a9 aa 51 01 46 28 88 af 51 be 34 be 06 0b af 3e 88 a5 03 df 44 c9 bf 80 21 71 8c b8 8f 22 cf c8 b0 c8 73 0b 14 be 24 74 5b 2b 65 ae ae 24 09 d1 b1 99 52 44 8d e8 45 be 74 2e 6a 95 c7 b1 5c fb 1e 9d e7 90 4d a0 52 da 1b 77 55 Data Ascii: L3=N91j$5q.:\pwQ~=m^B8$OJ;@\|bDi[`{$htAt+AuuR}O@altu!3?@lyQF(Q4>D!q"s$t[+e$RDEt.j\MRwU
2024-04-26 18:32:25 UTC	1369	IN	Data Raw: 20 16 eb 30 c7 17 80 93 8b f4 ca fb 65 5b 3c 56 9d ff df 68 db 17 d0 23 4f 65 bb 89 39 90 2a 6d 7d 33 f2 7d 1b 50 3d 70 37 c2 97 9e 05 0e 9d 44 74 e0 08 92 2a b5 8c a0 ea ea d1 b1 d7 51 58 33 81 d5 d7 fe a5 32 c7 48 ca 6a a6 a8 6b 08 f5 d7 fe 14 8d a7 ef a0 f0 1b 6c 3d 31 dd a2 63 d2 fd 4a 29 c3 ff 0c db 8f ba f7 07 b8 37 bf 7b dd ca 7a 58 9c 3c c1 76 0d 01 18 57 e1 5d d7 2e 2b 69 4d 84 9f 73 3e cc c1 27 e8 dc 8a 68 8c ee d1 8a ad 1f ce 20 2c 4e a0 f7 82 0f f2 3e 52 e7 99 83 d4 ee 19 bb ee df a4 b6 2d 57 50 64 9a 3c 7a e9 5e 78 c3 ef 26 0d 3e da 5d 80 b3 ec 3d 5e a6 fd ef a6 ff a4 26 ed 7f 06 ad a3 fb 34 52 c4 61 55 f7 20 ba 0c 83 e5 f3 af c5 aa 5f fe df 74 bc 9b a8 79 e4 6e a6 8c 82 b7 11 8d 43 5f 47 e3 c7 5f b2 4e 4f 8a a2 ba ab 24 5d f4 ed 6c af 7a 86 Data Ascii: 0e[<Vh#Oe9m}3}P=p7DtQX32Hjkl=1cJ)7{zX<vW].+iMs>'h ,N>R-WPd<z^x&>]=^&4RaU _tynC_G_NO$]lz
2024-04-26 18:32:25 UTC	199	IN	Data Raw: 20 05 fc 0d f8 de 0e f5 0d 12 1e 9d d4 2c dc ce 0f aa ed e7 ce 96 bc f6 32 66 d2 f5 52 a7 3b 57 40 a6 f2 2f ca 8f 38 78 fc 1a 67 7d 26 33 95 24 db 9e 9f 3e f7 56 4c e0 ed 01 a0 2d 8c b1 1b 51 8d f3 3e fa 84 0f 11 88 f7 13 94 9d 1d 27 d9 b5 4b 39 03 c1 69 ff ac 68 c5 a0 b3 9f c7 f1 da f3 fc df fe 78 da 24 0f 64 20 a9 d0 6f 03 00 6f ef af c7 8d c9 c0 79 80 04 ea 01 2d b1 25 c9 36 44 ce 1e 66 2f bb 08 c4 36 0a be 9e 83 1c e1 91 59 53 52 b0 19 27 1a 3c 57 31 8e 99 e5 f1 88 ac d8 d0 1f 3c 47 11 9e a4 34 fb 13 93 e0 67 f5 f7 7f 05 18 00 6b 86 e8 3b 3b e4 26 51 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ,2fR;W@/8xg}&3$>VL-Q>'K9ihx$d ooy-%6Df/6YSR'<W1<G4gk;;&QIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49816	54.159.210.141	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:24 UTC	405	OUT	GET /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=afa9acdd318515b6d11857989cfe776c
2024-04-26 18:32:25 UTC	239	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 26 Apr 2024 18:32:25 GMT Content-Type: text/html;charset=iso-8859-1 Content-Length: 484 Connection: close Cache-Control: must-revalidate,no-cache,no-store Server: Jetty(9.4.38.v20210224)
2024-04-26 18:32:25 UTC	484	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 36 2f 6d 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 3e 34 30 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/6/map</td></tr><tr><th>STATUS:</th><td>40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49820	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:25 UTC	662	OUT	GET /images/group_11/theme_3/favicon.png HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:25 UTC	1024	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:25 GMT Content-Type: image/png Content-Length: 8754 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=2592000 Last-Modified: Thu, 06 Jul 2023 17:26:04 GMT ETag: W/"2232-1892c3d5530" X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 799550 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FWVr8scyfxvUNsnQ1CsoWJiCnRETCZxLMLZs6CDQHbJwrBBzvVsNvCSjsBYmv0BMg3DzBqA8qLJaj%2BAZBkvGd6nH78X46LDxjEiy6nJ7ZPUlPLXKpuMY93Q1tIxzC5M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a7c93dcc4c0f-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:25 UTC	345	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR@@iqtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-04-26 18:32:25 UTC	1369	IN	Data Raw: 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 45 46 32 45 30 37 39 32 33 33 30 31 31 Data Ascii: n rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)" xmpMM:InstanceID="xmp.iid:7EF2E079233011
2024-04-26 18:32:25 UTC	1369	IN	Data Raw: 37 8a 13 1f 43 61 fd 2f c2 71 46 ac 20 f1 3c 6f 6e 51 56 ab 36 c6 08 ff e9 5f f1 82 48 4c 84 31 d1 a4 0e 23 41 9e f7 e4 52 05 6b a0 be 70 37 6a f3 7f 41 ad 78 52 41 70 f2 43 6d 1f 62 ce 0c c2 77 79 f8 e0 4f 05 a0 76 cf 9b df 43 f1 fe 96 42 7c 38 63 82 ea e8 69 94 aa 01 a9 4a 86 4b af c3 e4 7b 51 f8 b9 df 84 3f f1 71 e4 dd 41 34 93 05 86 ae e5 d4 59 59 b1 62 7e ce b9 63 da 47 ab f2 2c 82 ca 11 fd ec f7 6d 44 ae 77 67 0a c4 12 2c ef 73 ad ba f3 93 e3 f4 a6 be 35 42 6d ee eb 58 3e 79 07 12 77 01 5e 71 b3 ed 3e 05 21 72 24 78 38 dd 20 7c 87 87 6b de 1c 80 bb af 7c 43 c9 d9 eb 6d 14 f4 06 8d d7 26 9d 7b 8e 2a 92 8b a2 7f 71 83 c2 1f 86 bb fa 62 f4 5e f8 05 f8 3d bb d1 a0 e0 26 5a e4 a3 2e 87 a2 81 d0 0a 64 8a f0 9c 61 d4 4f 3c 88 f9 67 fe 17 9a b3 4f 23 aa 2f Data Ascii: 7Ca/qF <onQV6_HL1#ARkp7jAxRApCmbwyOvCB\|8ciJK{Q?qA4YYb~cG,mDwg,s5BmX>yw^q>!r$x8 \|k\|Cm&{*qb^=&Z.daO<gO#/
2024-04-26 18:32:25 UTC	1369	IN	Data Raw: 20 d0 cf 4a b2 5a 73 7c ae 8f aa 7c 11 9f 6d aa ff 96 54 d9 75 86 f4 d8 8a 4f a0 b1 f0 08 1a b3 8f ea 75 97 e1 d0 d5 90 a8 05 04 1d 77 71 f0 3f c0 2f 5e 48 30 8f 77 6a 10 b1 cd 96 8c 9d e5 1b dc b4 e2 96 65 83 97 b1 ad eb 30 c0 24 b5 04 3e d1 a2 c3 3a f7 2a c6 ee 55 9c fd d7 14 69 2f b7 99 03 9e c2 dc 8f ff 08 b5 97 ef a3 0a 4f c1 bf e4 02 78 ad 71 9a c7 20 bd f2 bb 90 ef fb b7 7c 9e 33 14 51 7b fc 1d 18 5a 77 1d 8e ef db 8b 5c 69 13 35 a5 a0 a1 4f 79 82 98 98 11 72 43 d7 13 54 c8 f2 0e 63 74 e2 66 f8 de 66 0d b1 9e 3b c2 01 e7 d1 68 7c 0f 8d fa e3 74 bb 35 b8 d5 e3 a8 fc f0 7e 78 a5 d5 28 9f f3 21 0c bc e3 46 82 40 b5 97 94 3a e1 75 46 9e 9e a1 df c4 c2 d1 cf c2 0d c7 91 39 00 91 4b d8 69 ec 24 eb 28 87 c8 fc 88 bb f7 63 db 04 96 df e3 95 8b db b9 6c aa Data Ascii: JZs\|\|mTuOuwq?/^H0wje0$>:*Ui/Oxq \|3Q{Zw\i5OyrCTctff;h\|t5~x(!F@:uF9Ki$(cl
2024-04-26 18:32:25 UTC	1369	IN	Data Raw: a6 b4 f4 1f 46 f9 ba ab 26 d0 0a 5f 56 d2 14 33 51 0a 49 61 c3 e8 04 cd 63 ca ce bc 56 48 6a 54 c0 d5 e4 0c eb 11 d4 67 ac ee 12 04 9d 45 19 8b b0 47 36 97 00 06 42 92 8a 34 13 a6 d2 1c 14 0a 23 bb 3a 13 29 5a e2 93 40 b9 03 3a 66 1d 5f 90 b4 13 25 b6 11 01 a0 dc ad 01 8a 0f 5f 64 f2 74 5a b4 75 37 b1 2f 0d c2 69 f8 eb df 8b fc 9a 5d 68 4d cf 28 00 5a 95 d5 65 2c 51 d9 c8 da bf 98 8a 84 bd b8 a9 a8 f7 af 7b af 9a 93 43 00 5d 0e b6 49 e1 a3 f8 18 3f e7 b5 5f c7 58 8a 1b 31 b4 25 cc 31 6c 86 47 80 a9 77 7d ab df af 5a 94 44 4d d5 1a 6d b1 5d 52 b2 60 c4 4a 94 1d 02 10 2c bc 8e c2 d8 05 6c ef 41 94 d8 49 8b d4 f9 f6 c0 71 cb 3a 41 dd 75 b2 54 49 ca e2 03 f2 76 f5 c5 74 45 01 f1 01 39 9a 88 63 8d 45 33 2a 3a 35 d2 df a1 7f f3 39 29 f0 d2 d6 a6 b5 ee 67 9d 9e Data Ascii: F&_V3QIacVHjTgEG6B4#:)Z@:f_%_dtZu7/i]hM(Ze,Q{C]I?_X1%1lGw}ZDMm]R`J,lAIq:AuTIvtE9cE3*:59)g
2024-04-26 18:32:25 UTC	1369	IN	Data Raw: cb 0d e7 d5 33 af 04 81 a0 b8 3d 1a 86 4e be fa df 39 c8 1f 31 07 df 6a f9 04 a9 ac e3 14 f9 d2 93 cc 24 fb 35 bc ce bf f4 10 71 bc 19 eb 2e ff 1a d5 9d f1 3a b6 5c df f7 06 b4 86 70 f4 f1 eb b1 f8 fa 77 51 1c dd c1 7e 3d 6d 5e b1 8f 93 42 fb a5 ef 10 09 9a f5 c7 b1 38 fd c7 e8 1b fd 9c 9a 8b 24 4f 02 e2 4a 10 a4 fc 3b 40 0d 7c 1a e1 c2 0b ba 62 94 44 69 a1 5b 1d 60 7b e3 d6 a3 24 68 74 c7 41 74 a0 2b 41 b0 75 75 d9 ae 52 a5 7d 4f be 40 61 0a ed ea 6c 9c 74 ea fe ea 75 bd 21 d4 16 ff 1e cb 33 3f 40 a1 ff 1d bc b5 6c 79 01 a9 aa 51 01 46 28 88 af 51 be 34 be 06 0b af 3e 88 a5 03 df 44 c9 bf 80 21 71 8c b8 8f 22 cf c8 b0 c8 73 0b 14 be 24 74 5b 2b 65 ae ae 24 09 d1 b1 99 52 44 8d e8 45 be 74 2e 6a 95 c7 b1 5c fb 1e 9d e7 90 4d a0 52 da 1b 77 55 a3 45 3b 5b Data Ascii: 3=N91j$5q.:\pwQ~=m^B8$OJ;@\|bDi[`{$htAt+AuuR}O@altu!3?@lyQF(Q4>D!q"s$t[+e$RDEt.j\MRwUE;[
2024-04-26 18:32:25 UTC	1369	IN	Data Raw: c7 17 80 93 8b f4 ca fb 65 5b 3c 56 9d ff df 68 db 17 d0 23 4f 65 bb 89 39 90 2a 6d 7d 33 f2 7d 1b 50 3d 70 37 c2 97 9e 05 0e 9d 44 74 e0 08 92 2a b5 8c a0 ea ea d1 b1 d7 51 58 33 81 d5 d7 fe a5 32 c7 48 ca 6a a6 a8 6b 08 f5 d7 fe 14 8d a7 ef a0 f0 1b 6c 3d 31 dd a2 63 d2 fd 4a 29 c3 ff 0c db 8f ba f7 07 b8 37 bf 7b dd ca 7a 58 9c 3c c1 76 0d 01 18 57 e1 5d d7 2e 2b 69 4d 84 9f 73 3e cc c1 27 e8 dc 8a 68 8c ee d1 8a ad 1f ce 20 2c 4e a0 f7 82 0f f2 3e 52 e7 99 83 d4 ee 19 bb ee df a4 b6 2d 57 50 64 9a 3c 7a e9 5e 78 c3 ef 26 0d 3e da 5d 80 b3 ec 3d 5e a6 fd ef a6 ff a4 26 ed 7f 06 ad a3 fb 34 52 c4 61 55 f7 20 ba 0c 83 e5 f3 af c5 aa 5f fe df 74 bc 9b a8 79 e4 6e a6 8c 82 b7 11 8d 43 5f 47 e3 c7 5f b2 4e 4f 8a a2 ba ab 24 5d f4 ed 6c af 7a 86 30 fc 96 c1 Data Ascii: e[<Vh#Oe9m}3}P=p7DtQX32Hjkl=1cJ)7{zX<vW].+iMs>'h ,N>R-WPd<z^x&>]=^&4RaU _tynC_G_NO$]lz0
2024-04-26 18:32:25 UTC	195	IN	Data Raw: f8 de 0e f5 0d 12 1e 9d d4 2c dc ce 0f aa ed e7 ce 96 bc f6 32 66 d2 f5 52 a7 3b 57 40 a6 f2 2f ca 8f 38 78 fc 1a 67 7d 26 33 95 24 db 9e 9f 3e f7 56 4c e0 ed 01 a0 2d 8c b1 1b 51 8d f3 3e fa 84 0f 11 88 f7 13 94 9d 1d 27 d9 b5 4b 39 03 c1 69 ff ac 68 c5 a0 b3 9f c7 f1 da f3 fc df fe 78 da 24 0f 64 20 a9 d0 6f 03 00 6f ef af c7 8d c9 c0 79 80 04 ea 01 2d b1 25 c9 36 44 ce 1e 66 2f bb 08 c4 36 0a be 9e 83 1c e1 91 59 53 52 b0 19 27 1a 3c 57 31 8e 99 e5 f1 88 ac d8 d0 1f 3c 47 11 9e a4 34 fb 13 93 e0 67 f5 f7 7f 05 18 00 6b 86 e8 3b 3b e4 26 51 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ,2fR;W@/8xg}&3$>VL-Q>'K9ihx$d ooy-%6Df/6YSR'<W1<G4gk;;&QIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49822	54.159.210.141	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:25 UTC	811	OUT	GET /5/c=9084/tp=SARE/tpid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent=?https%3A%2F%2Fsync.sharethis.com%2Fint%2Flotame%3Fuid%3D%24%7Bprofile_id%7D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=afa9acdd318515b6d11857989cfe776c
2024-04-26 18:32:25 UTC	506	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:25 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.50.59 Set-Cookie: _cc_id=afa9acdd318515b6d11857989cfe776c;Path=/;Domain=crwdcntrl.net;Expires=Tue, 21-Jan-2025 18:01:00 GMT;SameSite=None;Secure Location: https://sync.sharethis.com/int/lotame?uid=afa9acdd318515b6d11857989cfe776c&gdpr=0&gdpr_consent= Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49826	3.225.218.10	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:25 UTC	620	OUT	GET /cms?partner_id=SHARE&gdpr=0&euconsent= HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:25 UTC	290	IN	HTTP/1.1 302 Redirect Date: Fri, 26 Apr 2024 18:32:25 GMT Connection: close Server: ATS/9.1.10.112 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58724/cms?partner_id=SHARE&gdpr=0&euconsent= Content-Type: text/html Content-Language: en Content-Length: 362
2024-04-26 18:32:25 UTC	362	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49825	34.117.77.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:25 UTC	737	OUT	GET /utsync.ashx?eid=50131&et=13&cid=lr&fp=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fidsync.rlcdn.com%2F395886.gif%3Fpartner_uid%3D%5BPersonID%5D HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:26 UTC	678	IN	HTTP/1.1 302 Found content-type: image/gif cache-control: no-cache, no-store, must-revalidate expires: 0,Sat, 27 Apr 2024 18:32:25 GMT location: https://idsync.rlcdn.com/395886.gif?partner_uid=3643740180748173373 pragma: no-cache set-cookie: pi=3643740180748173373; expires=Sat, 26 Apr 2025 18:32:25 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" x-cloud-trace-context: dfc6b140bad94395f22411f9f2fe797f date: Fri, 26 Apr 2024 18:32:25 GMT server: Google Frontend Content-Length: 43 via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:32:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49819	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:25 UTC	505	OUT	GET /panorama?uid=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1&stid=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:25 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:25 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49824	3.232.64.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:26 UTC	616	OUT	GET /pixel?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:26 UTC	720	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: mako_uid=18f1bae1d9d-42c70000010a45f6; Domain=eyeota.net; Path=/; Expires=Sat, 26 Apr 2025 18:32:26 GMT; Secure; SameSite=None; Set-Cookie: SERVERID=17910~DM; Domain=eyeota.net; Path=/; Expires=Fri, 26 Apr 2024 18:42:26 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: /pixel/bounce/?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= Content-Length: 0 Date: Fri, 26 Apr 2024 18:32:26 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49823	15.197.193.217	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:26 UTC	639	OUT	GET /track/cmf/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:26 UTC	500	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:26 GMT Content-Length: 209 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= set-cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; expires=Sat, 26 Apr 2025 18:32:26 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI1L6gw76K8zwQBTgB; expires=Sat, 26 Apr 2025 18:32:26 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 18:32:26 UTC	209	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 31 68 31 79 31 61 37 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 31 68 31 79 31 61 37 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49821	44.235.243.161	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:26 UTC	620	OUT	GET /load/?p=847&g=001&j=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: loadus.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:26 UTC	959	IN	HTTP/1.1 302 server: nginx date: Fri, 26 Apr 2024 18:32:26 GMT content-type: image/gif content-length: 0 set-cookie: EE="a19a850734a267b9c36559160770466b"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 24-Aug-2024 06:32:26 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQSHR0DLRwtTA3Ngk0cjMPMky2djM1NTS0MzA3NzAxMwsaXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo%252F3XgcA%252BAcmyQ%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 24-Aug-2024 06:32:26 GMT; SameSite=None; Secure; cache-control: no-cache p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://loadus.exelator.com/load/?p=847&g=001&j=0&gdpr=0&gdpr_consent=&xl8blockcheck=1 access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49828	3.232.64.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:28 UTC	690	OUT	GET /pixel/bounce/?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18f1bae1d9d-42c70000010a45f6; SERVERID=17910~DM
2024-04-26 18:32:28 UTC	481	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=17910~DM; Domain=eyeota.net; Path=/; Expires=Fri, 26 Apr 2024 18:42:28 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://sync.sharethis.com/eyeota?uid=2HixY-PPDeSNqqRlGesWrlhSOuUI2lETdqA-Oof-BqgA&gdpr=0&gdpr_consent= Content-Length: 0 Date: Fri, 26 Apr 2024 18:32:28 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49827	44.235.243.161	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:28 UTC	858	OUT	GET /load/?p=847&g=001&j=0&gdpr=0&gdpr_consent=&xl8blockcheck=1 HTTP/1.1 Host: loadus.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="a19a850734a267b9c36559160770466b"; ud="eJxrXxzq6XKLQSHR0DLRwtTA3Ngk0cjMPMky2djM1NTS0MzA3NzAxMwsaXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo%252F3XgcA%252BAcmyQ%253D%253D"
2024-04-26 18:32:28 UTC	975	IN	HTTP/1.1 302 server: nginx date: Fri, 26 Apr 2024 18:32:28 GMT content-type: image/gif content-length: 0 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="a19a850734a267b9c36559160770466b"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 24-Aug-2024 06:32:28 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQSHR0DLRwtTA3Ngk0cjMPMky2djM1NTS0MzA3NzAxMwsaXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252FvvQ4AR8cpyA%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 24-Aug-2024 06:32:28 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://sync.sharethis.com/nlsn?uid=a19a850734a267b9c36559160770466b access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49831	3.225.218.10	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:28 UTC	630	OUT	GET /ups/58724/cms?partner_id=SHARE&gdpr=0&euconsent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:28 UTC	579	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:28 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58724/cms?partner_id=SHARE&gdpr=0&gdpr_consent=&verify=true Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBDzzK2YCEM-qQq_ZRFSzk-4Ew6R4gE4FEgEBAQFELWY1ZtxI0iMA_eMAAA&S=AQAAAhTZVDy-_SuM5Mmx-sV1a4k; Expires=Sun, 27 Apr 2025 00:32:28 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49829	15.197.193.217	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:28 UTC	726	OUT	GET /track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; TDCPM=CAEYBSgCMgsI1L6gw76K8zwQBTgB
2024-04-26 18:32:28 UTC	507	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:28 GMT Content-Length: 215 Connection: close server: Kestrel location: https://sync.sharethis.com/ttd?uid=6f67744e-1091-4048-adba-e024cc18f2d2&gdpr=0&gdpr_consent= set-cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; expires=Sat, 26 Apr 2025 18:32:28 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwjUvqDDvorzPBAFOAE.; expires=Sat, 26 Apr 2025 18:32:28 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 18:32:28 UTC	215	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 74 74 64 3f 75 69 64 3d 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 74 74 64 3f 75 69 64 3d 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.sharethis.com/ttd?uid=6f67744e-1091-4048-adba-e024cc18f2d2&gdpr=0&gdpr_consent=">https://sync.sharethis.com/ttd?uid=6f67744e-1091-4048-adba-e024cc18f2d2&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49832	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:28 UTC	617	OUT	GET /395886.gif?partner_uid=3643740180748173373 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:28 UTC	711	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0Mzc0MDE4MDc0ODE3MzM3MxAAGg0IvOavsQYSBQjoBxAAQgBKAA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=/uCdRKxKVl6So69+bIV443hsJRGTPFXk2cRiIRWhd08=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 18:32:28 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 18:32:28 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:32:28 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49830	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:28 UTC	697	OUT	GET /int/lotame?uid=afa9acdd318515b6d11857989cfe776c&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:28 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:28 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:28 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49833	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:28 UTC	694	OUT	GET /ttd?uid=6f67744e-1091-4048-adba-e024cc18f2d2&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:29 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:29 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49834	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:28 UTC	705	OUT	GET /eyeota?uid=2HixY-PPDeSNqqRlGesWrlhSOuUI2lETdqA-Oof-BqgA&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:29 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:29 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49835	3.225.218.10	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:28 UTC	752	OUT	GET /ups/58724/cms?partner_id=SHARE&gdpr=0&gdpr_consent=&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDzzK2YCEM-qQq_ZRFSzk-4Ew6R4gE4FEgEBAQFELWY1ZtxI0iMA_eMAAA&S=AQAAAhTZVDy-_SuM5Mmx-sV1a4k
2024-04-26 18:32:29 UTC	719	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:29 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19b8~2i36;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 26-Apr-2025 18:32:29 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://sync.sharethis.com/yahoo?uid=y-CGpVWGtE2oN.rZelMURb0VRU6cP9F2UW8Mc-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBDzzK2YCEM-qQq_ZRFSzk-4Ew6R4gE4FEgEBAQFELWY1ZtxI0iMA_eMAAA&S=AQAAAhTZVDy-_SuM5Mmx-sV1a4k; Expires=Sun, 27 Apr 2025 00:32:29 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49837	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:28 UTC	462	OUT	GET /int/lotame?uid=afa9acdd318515b6d11857989cfe776c&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:29 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:29 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49836	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:29 UTC	734	OUT	GET /1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0Mzc0MDE4MDc0ODE3MzM3MxAAGg0IvOavsQYSBQjoBxAAQgBKAA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=/uCdRKxKVl6So69+bIV443hsJRGTPFXk2cRiIRWhd08=; pxrc=CAA=
2024-04-26 18:32:29 UTC	774	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://ml314.com/csync.ashx?fp=16e155cde49574b3bd549a6c3880d29893d4e97dd7bcf0095bce42054e66b03ef4cb09cee1a4f8eb&person_id=3643740180748173373&eid=50082 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=Q+aQQz8AGFCSo69+bIV443hsJRGTPFXk2cRiIRWhd08=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 18:32:29 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL3mr7EGEgUI6AcQABIFCNtOEAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 18:32:29 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:32:29 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49838	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:29 UTC	670	OUT	GET /nlsn?uid=a19a850734a267b9c36559160770466b HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:29 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:29 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49841	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:29 UTC	459	OUT	GET /ttd?uid=6f67744e-1091-4048-adba-e024cc18f2d2&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:29 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:29 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49840	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:29 UTC	470	OUT	GET /eyeota?uid=2HixY-PPDeSNqqRlGesWrlhSOuUI2lETdqA-Oof-BqgA&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:29 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:29 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49839	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:29 UTC	686	OUT	GET /yahoo?uid=y-CGpVWGtE2oN.rZelMURb0VRU6cP9F2UW8Mc-~A&gdpr=0 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:29 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:29 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49842	34.117.77.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:29 UTC	734	OUT	GET /csync.ashx?fp=16e155cde49574b3bd549a6c3880d29893d4e97dd7bcf0095bce42054e66b03ef4cb09cee1a4f8eb&person_id=3643740180748173373&eid=50082 HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3643740180748173373
2024-04-26 18:32:30 UTC	279	IN	HTTP/1.1 200 OK content-type: image/gif expires: Sat, 27 Apr 2024 18:32:30 GMT date: Fri, 26 Apr 2024 18:32:30 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-26 18:32:30 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-26 18:32:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49843	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:29 UTC	435	OUT	GET /nlsn?uid=a19a850734a267b9c36559160770466b HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:30 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:30 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49844	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:30 UTC	451	OUT	GET /yahoo?uid=y-CGpVWGtE2oN.rZelMURb0VRU6cP9F2UW8Mc-~A&gdpr=0 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:30 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:30 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:30 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49846	34.117.77.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:31 UTC	499	OUT	GET /csync.ashx?fp=16e155cde49574b3bd549a6c3880d29893d4e97dd7bcf0095bce42054e66b03ef4cb09cee1a4f8eb&person_id=3643740180748173373&eid=50082 HTTP/1.1 Host: ml314.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3643740180748173373
2024-04-26 18:32:31 UTC	279	IN	HTTP/1.1 200 OK content-type: image/gif expires: Sat, 27 Apr 2024 18:32:31 GMT date: Fri, 26 Apr 2024 18:32:31 GMT server: Google Frontend via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-26 18:32:31 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49847	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:34 UTC	742	OUT	GET /386076.gif?partner_uid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=Q+aQQz8AGFCSo69+bIV443hsJRGTPFXk2cRiIRWhd08=; pxrc=CL3mr7EGEgUI6AcQABIFCNtOEAA=
2024-04-26 18:32:34 UTC	759	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&it=1&iv=424ffe81dd3b616cea4f8459dfd9f3cdce85a74cb67447af25be8697f4d69094791426b5417dce21&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=SHC2Pha8gAiOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 18:32:34 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAA; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 18:32:34 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:32:34 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49850	68.67.160.75	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:34 UTC	662	OUT	GET /getuid?https%3A%2F%2Fsync.sharethis.com%2Fadnxs%3Fuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:34 UTC	1523	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 26 Apr 2024 18:32:34 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.sharethis.com%252Fadnxs%253Fuid%253D%2524UID%2526gdpr%253D0%2526gdpr_consent%253D AN-X-Request-Uuid: ef11d343-fe73-4a96-8859-1ec167129153 Set-Cookie: XANDR_PANID=-lBTO87oE1q2j5ZgQrZoc7orAwxvjOJuHVqHh1IudHjfYH1iAps-CU7yEFaCrGbChgtgds1o0wDPMQKlmeD3MbgxClGbwDhR2tcv_pRCcWc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:32:34 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 14-Apr-2034 18:32:34 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6576787287013452325; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:32:34 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.220; 102.129.152.220; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49852	18.216.131.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:34 UTC	580	OUT	GET /pd/test_oracle HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:34 UTC	232	IN	HTTP/1.1 200 OK Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:32:34 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 438 Connection: Close
2024-04-26 18:32:34 UTC	438	IN	Data Raw: 3c 21 2d 2d 20 42 65 67 69 6e 20 42 6c 75 65 4b 61 69 20 54 61 67 20 2d 2d 3e 20 0d 0a 0d 0a 0d 0a 77 69 6e 64 6f 77 2e 62 6b 5f 61 73 79 6e 63 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 0d 0a 76 61 72 20 65 73 74 69 64 20 3d 20 27 5a 47 6b 41 43 57 59 72 38 7a 4d 41 41 41 41 49 41 39 38 59 41 77 3d 3d 27 3b 0d 0a 62 6b 5f 61 64 64 50 61 67 65 43 74 78 28 27 69 64 27 2c 20 65 73 74 69 64 29 3b 0d 0a 42 4b 54 41 47 2e 64 6f 54 61 67 28 35 39 35 37 34 2c 20 35 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 0d 0a 76 61 72 20 73 63 72 69 70 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 20 0d 0a 76 61 72 20 73 20 3d 20 64 6f 63 75 Data Ascii: ... Begin BlueKai Tag --> window.bk_async = function() {var estid = 'ZGkACWYr8zMAAAAIA98YAw==';bk_addPageCtx('id', estid);BKTAG.doTag(59574, 5);};(function() { var scripts = document.getElementsByTagName('script')[0]; var s = docu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49849	35.201.96.126	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:34 UTC	615	OUT	GET /st2.gif?gdpr=0&gdpr_consent=&gdpr_pd=0 HTTP/1.1 Host: visitor.fiftyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:34 UTC	961	IN	HTTP/1.1 302 Found Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Content-Type: text/html; charset=utf-8 Location: https://visitor.fiftyt.com/st2.gif?gdpr=0&gdpr_consent=&gdpr_pd=0&fbounce=1 P3p: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: fifid=56a94716-d471-4e73-7b87-13df68a214a1; Path=/; Domain=fiftyt.com; Expires=Sat, 26 Apr 2025 18:32:34 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Set-Cookie: cs=MTcxNDE1NjM1NHxEdi1CQkFFQ180SUFBUkFCRUFBQVBmLUNBQUlHYzNSeWFXNW5EQVlBQkdka2NISUdjM1J5YVc1bkRBTUFBVEFHYzNSeWFXNW5EQWtBQjJka2NISmZjR1FHYzNSeWFXNW5EQU1BQVRBPXwVp0o-Zi3ATDaXhJbkUGs0btbDXZ7J0qwrHQfubSGSUw==; Path=/; Domain=fiftyt.com; Expires=Sat, 26 Apr 2025 18:32:34 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Date: Fri, 26 Apr 2024 18:32:34 GMT Content-Length: 110 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:32:34 UTC	110	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 76 69 73 69 74 6f 72 2e 66 69 66 74 79 74 2e 63 6f 6d 2f 73 74 32 2e 67 69 66 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 64 70 72 5f 70 64 3d 30 26 61 6d 70 3b 66 62 6f 75 6e 63 65 3d 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://visitor.fiftyt.com/st2.gif?gdpr=0&gdpr_consent=&gdpr_pd=0&fbounce=1">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49856	104.21.11.245	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:35 UTC	517	OUT	GET /stattag.js HTTP/1.1 Host: tzegilo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:35 UTC	807	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:35 GMT Content-Type: application/javascript Content-Length: 19136 Connection: close Last-Modified: Wed, 07 Feb 2024 12:51:13 GMT ETag: "65c37cc1-4ac0" Link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 7166 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Odrl0mQOGcLGL0EsWRG%2FDNpPonuES0yN6Vj1irRLc67KMP6j1m0CGZj7VOYOjGnaJE7sTzdj25%2F6nTlxasnXT5w9xaWmnO%2FNlYnbDZidhEAVsp8MMy7Vpxt%2BfKxusQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8054fd79071-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:35 UTC	562	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 5f 64 73 33 64 63 76 5f 5f 2e 6d 6d 68 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 24 29 7b 66 6f 72 28 76 61 72 20 78 2c 5f 3d 66 2e 6c 65 6e 67 74 68 2c 65 3d 24 5e 5f 2c 64 3d 30 3b 5f 3e 3d 34 3b 29 78 3d 28 36 35 35 33 35 26 28 78 3d 32 35 35 26 66 2e 63 68 61 72 43 6f 64 65 41 74 28 64 29 7c 28 32 35 35 26 66 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 64 29 29 3c 3c 38 7c 28 32 35 35 26 66 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 64 29 29 3c 3c 31 36 7c 28 32 35 35 26 66 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 64 29 29 3c 3c 32 34 29 29 2a 31 35 34 30 34 38 33 34 37 37 2b 28 28 28 78 3e 3e 3e 31 36 29 2a 31 35 34 30 34 38 33 34 37 37 26 36 35 35 33 35 29 3c 3c 31 36 29 2c 78 5e 3d 78 3e 3e 3e 32 Data Ascii: !function(){window.__ds3dcv__.mmh=function(f,$){for(var x,_=f.length,e=$^_,d=0;_>=4;)x=(65535&(x=255&f.charCodeAt(d)\|(255&f.charCodeAt(++d))<<8\|(255&f.charCodeAt(++d))<<16\|(255&f.charCodeAt(++d))<<24))1540483477+(((x>>>16)1540483477&65535)<<16),x^=x>>>2
2024-04-26 18:32:35 UTC	1369	IN	Data Raw: 5e 3d 65 3e 3e 3e 31 33 2c 65 3d 28 36 35 35 33 35 26 65 29 2a 31 35 34 30 34 38 33 34 37 37 2b 28 28 28 65 3e 3e 3e 31 36 29 2a 31 35 34 30 34 38 33 34 37 37 26 36 35 35 33 35 29 3c 3c 31 36 29 2c 28 65 5e 3d 65 3e 3e 3e 31 35 29 3e 3e 3e 30 7d 3b 7d 28 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 45 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 65 3d 45 2e 75 28 29 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 3d 21 45 2e 45 29 7b 69 66 28 28 6e 3d 6e 5b 45 2e 78 5d 28 6e 65 77 20 52 65 67 45 78 70 28 45 2e 64 45 2c 45 2e 54 45 29 2c 45 2e 6a 29 29 69 6e 20 65 29 72 65 74 75 72 6e 20 65 5b 6e 5d 3b 76 61 72 20 69 3d 45 2e 61 2b 6e 2b 45 2e 6c 2c 6f 3d 45 2e 61 2b 6e 2b 45 2e 73 2c 72 3d 45 2e 74 3b 74 26 26 72 2d 2d 3b 76 61 72 20 61 2c 64 3d 77 Data Ascii: ^=e>>>13,e=(65535&e)1540483477+(((e>>>16)1540483477&65535)<<16),(e^=e>>>15)>>>0};}();(function(E){!function(){var n,e=E.u(),t=function(n,t=!E.E){if((n=n[E.x](new RegExp(E.dE,E.TE),E.j))in e)return e[n];var i=E.a+n+E.l,o=E.a+n+E.s,r=E.t;t&&r--;var a,d=w
2024-04-26 18:32:35 UTC	1369	IN	Data Raw: 48 74 74 70 52 65 71 75 65 73 74 3b 77 5b 45 2e 66 45 5d 28 45 2e 51 45 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 28 4a 53 4f 4e 5b 45 2e 78 67 5d 28 77 5b 45 2e 7a 7a 5d 29 29 7d 63 61 74 63 68 28 6e 29 7b 69 28 45 2e 75 28 45 2e 4c 59 2c 2d 45 2e 45 29 29 7d 7d 29 2c 77 5b 45 2e 47 45 5d 28 45 2e 58 45 2c 63 29 3b 66 6f 72 28 76 61 72 20 6c 3d 45 2e 4a 3b 6c 3c 75 5b 45 2e 72 5d 3b 6c 2b 2b 29 6f 3d 75 5b 6c 5d 2c 77 5b 45 2e 49 45 5d 28 6f 2c 61 5b 6f 5d 29 3b 77 5b 45 2e 4c 67 5d 28 64 29 7d 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 45 2e 4a 29 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 2c 69 2c 6f 2c 72 3d 45 2e 75 28 29 2c 61 3d 45 2e 4a 3b 61 3c 6e 5b 45 2e Data Ascii: HttpRequest;w[E.fE](E.QE,function(){try{i(JSON[E.xg](w[E.zz]))}catch(n){i(E.u(E.LY,-E.E))}}),w[E.GE](E.XE,c);for(var l=E.J;l<u[E.r];l++)o=u[l],w[E.IE](o,a[o]);w[E.Lg](d)}},c=function(n){setTimeout(n,E.J)},u=function(n){for(var e,t,i,o,r=E.u(),a=E.J;a<n[E.
2024-04-26 18:32:35 UTC	1369	IN	Data Raw: 45 2e 47 54 5d 28 6f 5b 45 2e 73 54 5d 29 5b 45 2e 56 54 5d 28 29 2c 6e 5b 45 2e 6a 45 5d 3d 69 5b 45 2e 47 54 5d 28 6f 5b 45 2e 43 4b 5d 29 5b 45 2e 56 54 5d 28 29 3b 66 6f 72 28 76 61 72 20 72 3d 70 65 72 66 6f 72 6d 61 6e 63 65 5b 45 2e 57 64 5d 28 29 2c 61 3d 45 2e 4a 3b 45 2e 75 45 3e 70 65 72 66 6f 72 6d 61 6e 63 65 5b 45 2e 57 64 5d 28 29 2d 72 3b 29 69 5b 45 2e 47 54 5d 28 6f 5b 45 2e 73 54 5d 29 2c 69 5b 45 2e 47 54 5d 28 6f 5b 45 2e 73 54 5d 29 2c 69 5b 45 2e 47 54 5d 28 6f 5b 45 2e 73 54 5d 29 2c 69 5b 45 2e 47 54 5d 28 6f 5b 45 2e 73 54 5d 29 2c 69 5b 45 2e 47 54 5d 28 6f 5b 45 2e 73 54 5d 29 2c 69 5b 45 2e 47 54 5d 28 6f 5b 45 2e 73 54 5d 29 2c 69 5b 45 2e 47 54 5d 28 6f 5b 45 2e 73 54 5d 29 2c 69 5b 45 2e 47 54 5d 28 6f 5b 45 2e 73 54 5d 29 Data Ascii: E.GT](o[E.sT])[E.VT](),n[E.jE]=i[E.GT](o[E.CK])[E.VT]();for(var r=performance[E.Wd](),a=E.J;E.uE>performance[E.Wd]()-r;)i[E.GT](o[E.sT]),i[E.GT](o[E.sT]),i[E.GT](o[E.sT]),i[E.GT](o[E.sT]),i[E.GT](o[E.sT]),i[E.GT](o[E.sT]),i[E.GT](o[E.sT]),i[E.GT](o[E.sT])
2024-04-26 18:32:35 UTC	1369	IN	Data Raw: 2e 75 28 45 2e 53 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 45 2e 46 64 5d 3d 76 6f 69 64 20 45 2e 4a 21 3d 3d 77 69 6e 64 6f 77 5b 45 2e 46 64 5d 26 26 77 69 6e 64 6f 77 5b 45 2e 46 64 5d 5b 45 2e 72 5d 3e 45 2e 4a 3f 77 69 6e 64 6f 77 5b 45 2e 46 64 5d 3a 45 2e 45 67 2c 6e 7d 2c 45 2e 6d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 45 2e 50 64 5d 3d 64 6f 63 75 6d 65 6e 74 5b 45 2e 48 64 5d 2c 6e 7d 2c 45 2e 57 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 45 2e 6f 64 5d 3d 64 6f 63 75 6d 65 6e 74 5b 45 2e 75 67 5d 5b 45 2e 68 5d 2c 6e 7d 2c 45 2e 76 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 45 2e 4f 64 5d 3d 76 6f 69 64 20 45 2e 4a 21 3d 3d 6e 61 76 69 67 61 74 6f Data Ascii: .u(E.S,function(n){return n[E.Fd]=void E.J!==window[E.Fd]&&window[E.Fd][E.r]>E.J?window[E.Fd]:E.Eg,n},E.m,function(n){return n[E.Pd]=document[E.Hd],n},E.W,function(n){return n[E.od]=document[E.ug][E.h],n},E.v,function(n){return n[E.Od]=void E.J!==navigato
2024-04-26 18:32:35 UTC	1369	IN	Data Raw: 5b 45 2e 7a 67 5d 28 77 69 6e 64 6f 77 29 5b 45 2e 50 54 5d 28 45 2e 56 45 29 2c 6e 7d 2c 45 2e 42 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 45 2e 67 54 5d 3d 4f 62 6a 65 63 74 5b 45 2e 7a 67 5d 28 77 69 6e 64 6f 77 29 5b 45 2e 72 5d 2c 6e 7d 2c 45 2e 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 45 2e 45 54 5d 3d 76 6f 69 64 20 45 2e 4a 21 3d 3d 77 69 6e 64 6f 77 5b 45 2e 63 54 5d 26 26 76 6f 69 64 20 45 2e 4a 21 3d 3d 77 69 6e 64 6f 77 5b 45 2e 63 54 5d 5b 45 2e 48 54 5d 3f 77 69 6e 64 6f 77 5b 45 2e 63 54 5d 5b 45 2e 48 54 5d 3a 45 2e 45 67 2c 6e 7d 2c 45 2e 6b 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 45 2e 64 54 5d 3d 76 6f 69 64 20 45 2e 4a 21 3d 3d 6e 61 76 69 67 61 74 6f 72 5b Data Ascii: [E.zg](window)[E.PT](E.VE),n},E.B,function(n){return n[E.gT]=Object[E.zg](window)[E.r],n},E.n,function(n){return n[E.ET]=void E.J!==window[E.cT]&&void E.J!==window[E.cT][E.HT]?window[E.cT][E.HT]:E.Eg,n},E.k,function(n){return n[E.dT]=void E.J!==navigator[
2024-04-26 18:32:35 UTC	1369	IN	Data Raw: 2c 65 5b 45 2e 41 4b 5d 3d 74 5b 45 2e 41 4b 5d 2c 65 5b 45 2e 4e 4b 5d 3d 74 5b 45 2e 4e 4b 5d 2c 65 5b 45 2e 46 4b 5d 3d 74 5b 45 2e 46 4b 5d 2c 65 5b 45 2e 50 4b 5d 3d 74 5b 45 2e 50 4b 5d 2c 65 5b 45 2e 48 4b 5d 3d 74 5b 45 2e 48 4b 5d 2c 65 5b 45 2e 6f 4b 5d 3d 74 5b 45 2e 6f 4b 5d 2c 65 5b 45 2e 4f 4b 5d 3d 74 5b 45 2e 4f 4b 5d 2c 6e 5b 45 2e 6b 45 5d 3d 65 7d 65 6c 73 65 20 6e 5b 45 2e 6b 45 5d 3d 45 2e 75 28 29 3b 72 65 74 75 72 6e 20 6e 7d 29 29 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 65 3d 45 2e 4a 2c 74 3d 45 2e 4a 3b 74 3c 6e 5b 45 2e 72 5d 3b 74 2b 2b 29 6e 5b 74 5d 26 26 28 65 2b 3d 45 2e 45 29 3b 72 65 74 75 72 6e 20 65 7d 3b 73 5b 45 2e 67 5d 28 45 2e 75 28 45 2e 48 2c 66 75 6e 63 74 69 6f 6e 28 6e Data Ascii: ,e[E.AK]=t[E.AK],e[E.NK]=t[E.NK],e[E.FK]=t[E.FK],e[E.PK]=t[E.PK],e[E.HK]=t[E.HK],e[E.oK]=t[E.oK],e[E.OK]=t[E.OK],n[E.kE]=e}else n[E.kE]=E.u();return n}));var f=function(n){for(var e=E.J,t=E.J;t<n[E.r];t++)n[t]&&(e+=E.E);return e};s[E.g](E.u(E.H,function(n
2024-04-26 18:32:35 UTC	1369	IN	Data Raw: 77 5b 45 2e 56 45 5d 26 26 76 6f 69 64 20 45 2e 4a 21 3d 3d 77 69 6e 64 6f 77 5b 45 2e 56 45 5d 5b 45 2e 52 54 5d 26 26 45 2e 69 45 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5b 45 2e 56 45 5d 5b 45 2e 52 54 5d 5d 29 3e 3d 45 2e 74 3b 6e 5b 45 2e 52 45 5d 3d 45 2e 75 28 45 2e 65 45 2c 75 2c 45 2e 41 45 2c 65 2c 45 2e 4e 45 2c 64 2c 45 2e 46 45 2c 69 2c 45 2e 50 45 2c 74 2c 45 2e 48 45 2c 61 2c 45 2e 6f 45 2c 6f 2c 45 2e 4f 45 2c 63 2c 45 2e 4d 45 2c 72 2c 45 2e 5a 45 2c 77 29 7d 29 29 2c 73 5b 45 2e 67 5d 28 45 2e 75 28 45 2e 6f 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 77 69 6e 64 6f 77 5b 45 2e 4d 5d 26 26 45 2e 69 45 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5b 45 2e 4d 5d 5b 45 2e 5a 54 5d 26 26 28 6e 5b 45 2e 74 45 5d 3d 77 69 6e 64 6f 77 5b 45 2e Data Ascii: w[E.VE]&&void E.J!==window[E.VE][E.RT]&&E.iE==typeof window[E.VE][E.RT]])>=E.t;n[E.RE]=E.u(E.eE,u,E.AE,e,E.NE,d,E.FE,i,E.PE,t,E.HE,a,E.oE,o,E.OE,c,E.ME,r,E.ZE,w)})),s[E.g](E.u(E.o,function(n){window[E.M]&&E.iE==typeof window[E.M][E.ZT]&&(n[E.tE]=window[E.
2024-04-26 18:32:35 UTC	1369	IN	Data Raw: 6a 65 63 74 5b 45 2e 7a 67 5d 28 65 29 2c 6f 3d 45 2e 4a 3b 6f 3c 69 5b 45 2e 72 5d 3b 6f 2b 2b 29 21 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 63 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 69 5b 6f 5d 2c 65 5b 74 5d 28 6e 29 7d 29 7d 28 6f 29 7d 28 74 2c 6e 29 7d 29 3b 76 61 72 20 69 3d 45 2e 75 28 29 3b 77 69 6e 64 6f 77 5b 45 2e 4f 5d 3f 6e 65 77 20 55 52 4c 28 77 69 6e 64 6f 77 5b 45 2e 75 67 5d 5b 45 2e 68 5d 29 5b 45 2e 52 54 5d 5b 45 2e 72 5d 3e 45 2e 4a 26 26 28 69 3d 6f 28 29 29 3a 69 3d 6f 28 29 3b 76 61 72 20 61 3d 45 2e 75 28 29 3b 6e 5b 45 2e 6c 45 5d 26 26 28 61 3d 72 28 6e 5b 45 2e 6c 45 5d 29 2c 64 65 6c 65 74 65 20 6e 5b 45 2e 6c 45 5d 29 2c 6e 5b 45 2e 71 45 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 7c 7c 45 2e 4a 3d 3d 3d 6e 5b Data Ascii: ject[E.zg](e),o=E.J;o<i[E.r];o++)!function(o){c(function(){t=i[o],e[t](n)})}(o)}(t,n)});var i=E.u();window[E.O]?new URL(window[E.ug][E.h])[E.RT][E.r]>E.J&&(i=o()):i=o();var a=E.u();n[E.lE]&&(a=r(n[E.lE]),delete n[E.lE]),n[E.qE]=function(n){if(!n\|\|E.J===n[
2024-04-26 18:32:35 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 76 61 72 20 6f 62 6a 3d 7b 7d 3b 76 61 72 20 61 72 67 73 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 66 6f 72 28 6c 65 74 20 69 3d 30 3b 69 3c 61 72 67 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 2b 3d 32 29 7b 6f 62 6a 5b 61 72 67 73 5b 69 5d 5d 3d 61 72 67 73 5b 69 2b 31 5d 7d 72 65 74 75 72 6e 20 6f 62 6a 7d 5d 2c 5b 27 67 27 2c 27 63 68 66 75 27 5d 2c 5b 27 45 27 2c 31 5d 2c 5b 27 64 27 2c 27 6e 71 71 4a 72 6f 54 79 27 5d 2c 5b 27 54 27 2c 27 6e 71 71 47 76 7a 72 4d 62 61 72 42 73 73 66 72 67 27 5d 2c 5b 27 4b 27 2c 27 6e 71 71 4a 76 61 71 62 6a 46 76 6d 72 58 72 6c 66 27 5d 2c 5b 27 59 27 2c 27 6e 71 71 47 62 68 70 75 27 5d 2c 5b 27 7a 27 2c 27 6e 71 71 48 66 72 65 4e 74 72 61 67 27 5d 2c 5b 27 71 27 2c 27 Data Ascii: ion(){var obj={};var args=[].slice.call(arguments);for(let i=0;i<args.length-1;i+=2){obj[args[i]]=args[i+1]}return obj}],['g','chfu'],['E',1],['d','nqqJroTy'],['T','nqqGvzrMbarBssfrg'],['K','nqqJvaqbjFvmrXrlf'],['Y','nqqGbhpu'],['z','nqqHfreNtrag'],['q','

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49853	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:35 UTC	1076	OUT	POST /cat.php?userId=k3oa752910bk686846683x2y8sbun072&zoneid=4724866&rb=PHmS1cuti--C9Oc8Zd_j_18IAKdh0xDgAsCQe_F6DduFePPWkCx6-TLTSQzO4TUCfgOveR0y9aEKkPIOMteSE6eFFsxXgZl8oCRH7bxz8qpQZInzJrMUcZE6TQq4fMcKAx-PxTJ0-FpkCD4zhJfCJZtUQwOYCeqNnwlLIICneiGKuo0bVVk-q03ok2nVR2w-TwMkuEnUnEtYXiNN4kdWpqNesp9b5UUSj-AgMrzpphMFZGG7SylO0c6esmk02S696o9p-urTenHsv9nQLpLxlGp7U7G_kc5lkjH-GRbcUUOlW0Cx6UrV2Yvwk5d5PAZ7YyxfJQ== HTTP/1.1 Host: eephaush.com Connection: keep-alive Content-Length: 3926 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156341
2024-04-26 18:32:35 UTC	3926	OUT	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 32 36 39 35 39 31 37 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 39 35 38 37 34 39 2c 22 72 65 71 75 65 73 74 49 6d 70 72 65 73 73 69 6f 6e 22 3a 22 63 58 62 74 48 59 52 2d 30 57 54 55 38 41 6a 6a 6d 4e 58 6e 72 4b 4e 37 52 5f 38 46 5a 31 76 45 70 64 78 44 32 62 68 47 72 65 54 6e 45 57 4b 61 36 7a 71 38 72 76 33 38 6e 32 50 4d 36 70 5a 76 66 73 76 59 64 72 53 57 37 6b 32 73 53 6a 46 62 6d 76 32 4a 43 58 6c 6e 45 33 55 47 46 71 5f 56 64 6c 59 6d 78 54 57 63 74 33 2d 4e 45 52 49 51 50 57 77 58 48 53 77 34 52 66 56 43 64 36 4b 4a 66 64 62 45 63 4f 37 51 55 4e 73 4e 6e 71 6f 79 54 48 5f 34 72 48 5a 7a 65 68 5f 45 75 43 35 66 58 6d 52 6e 2d 61 51 71 62 4b 32 6a 33 77 44 58 39 65 73 6d 64 67 4f 77 47 75 78 49 6a 61 59 71 4d Data Ascii: {"bannerId":2695917,"campaignId":1958749,"requestImpression":"cXbtHYR-0WTU8AjjmNXnrKN7R_8FZ1vEpdxD2bhGreTnEWKa6zq8rv38n2PM6pZvfsvYdrSW7k2sSjFbmv2JCXlnE3UGFq_VdlYmxTWct3-NERIQPWwXHSw4RfVCd6KJfdbEcO7QUNsNnqoyTH_4rHZzeh_EuC5fXmRn-aQqbK2j3wDX9esmdgOwGuxIjaYqM
2024-04-26 18:32:35 UTC	843	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:35 GMT Content-Length: 0 Connection: close X-Trace-Id: 3dd1714db03125f723dfde79b33903f3 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49857	68.67.160.75	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:35 UTC	883	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fsync.sharethis.com%252Fadnxs%253Fuid%253D%2524UID%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=-lBTO87oE1q2j5ZgQrZoc7orAwxvjOJuHVqHh1IudHjfYH1iAps-CU7yEFaCrGbChgtgds1o0wDPMQKlmeD3MbgxClGbwDhR2tcv_pRCcWc.; receive-cookie-deprecation=1; uuid2=6576787287013452325
2024-04-26 18:32:35 UTC	1448	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 26 Apr 2024 18:32:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://sync.sharethis.com/adnxs?uid=6576787287013452325&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 2c1ad057-0f92-44c8-8a69-c2e01a5e3aed Set-Cookie: XANDR_PANID=-lBTO87oE1q2j5ZgQrZoc7orAwxvjOJuHVqHh1IudHjfYH1iAps-CU7yEFaCrGbChgtgds1o0wDPMQKlmeD3MbgxClGbwDhR2tcv_pRCcWc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:32:35 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 14-Apr-2034 18:32:35 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6576787287013452325; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:32:35 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.220; 102.129.152.220; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49859	35.201.96.126	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:35 UTC	882	OUT	GET /st2.gif?gdpr=0&gdpr_consent=&gdpr_pd=0&fbounce=1 HTTP/1.1 Host: visitor.fiftyt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fifid=56a94716-d471-4e73-7b87-13df68a214a1; cs=MTcxNDE1NjM1NHxEdi1CQkFFQ180SUFBUkFCRUFBQVBmLUNBQUlHYzNSeWFXNW5EQVlBQkdka2NISUdjM1J5YVc1bkRBTUFBVEFHYzNSeWFXNW5EQWtBQjJka2NISmZjR1FHYzNSeWFXNW5EQU1BQVRBPXwVp0o-Zi3ATDaXhJbkUGs0btbDXZ7J0qwrHQfubSGSUw==
2024-04-26 18:32:35 UTC	1124	IN	HTTP/1.1 302 Found Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Content-Type: text/html; charset=utf-8 Location: https://sync.sharethis.com/fifty?uid=56a94716-d471-4e73-7b87-13df68a214a1&gdpr=0&gdpr_pd=0 P3p: CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: fifid=56a94716-d471-4e73-7b87-13df68a214a1; Path=/; Domain=fiftyt.com; Expires=Sat, 26 Apr 2025 18:32:35 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Set-Cookie: cs=MTcxNDE1NjM1NXxEdi1CQkFFQ180SUFBUkFCRUFBQVBmLUNBQUlHYzNSeWFXNW5EQVlBQkdka2NISUdjM1J5YVc1bkRBTUFBVEFHYzNSeWFXNW5EQWtBQjJka2NISmZjR1FHYzNSeWFXNW5EQU1BQVRBPXzfEWh2ZjGsAPBiXBlNU4sBekavMPUzuClgTBbS6CZ9VQ==; Path=/; Domain=fiftyt.com; Expires=Sat, 26 Apr 2025 18:32:35 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Set-Cookie: fpst=20240426183235; Path=/; Domain=fiftyt.com; Expires=Fri, 03 May 2024 18:32:35 GMT; Max-Age=604800; HttpOnly; Secure; SameSite=None Date: Fri, 26 Apr 2024 18:32:35 GMT Content-Length: 121 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:32:35 UTC	121	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 66 69 66 74 79 3f 75 69 64 3d 35 36 61 39 34 37 31 36 2d 64 34 37 31 2d 34 65 37 33 2d 37 62 38 37 2d 31 33 64 66 36 38 61 32 31 34 61 31 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 70 64 3d 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://sync.sharethis.com/fifty?uid=56a94716-d471-4e73-7b87-13df68a214a1&gdpr=0&gdpr_pd=0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49854	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:35 UTC	801	OUT	GET /4/6118780/?var=4724866&btz=Europe/Zurich&bto=-120&bar=x HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156341
2024-04-26 18:32:36 UTC	1205	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:35 GMT Content-Type: text/html; charset=utf8 Content-Length: 34082 Connection: close X-Trace-Id: ab8b6ee384cef980aaac0f52257d125a Link: <https://yonmewon.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:35 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156341; expires=Sat, 26 Apr 2025 18:32:35 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:36 UTC	15179	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 68 74 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 65 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 Data Ascii: <!doctype html><html lang="en" xmlns="http://www.w3.org/1999/html"><head> <meta charset="UTF-8"/> <meta http-equiv="cache-control" content="no-cache"/> <meta http-equiv="expires" content="0"/> <meta http-equiv="pragma" content="no-cache"
2024-04-26 18:32:36 UTC	16384	IN	Data Raw: 5f 32 27 5d 2c 5b 27 79 67 27 2c 27 70 79 76 70 78 5f 76 71 27 5d 2c 5b 27 52 67 27 2c 27 70 62 66 67 27 5d 2c 5b 27 44 67 27 2c 27 77 66 67 6e 74 27 5d 2c 5b 27 66 67 27 2c 27 62 6e 5f 76 71 27 5d 2c 5b 27 51 67 27 2c 27 6e 71 71 76 67 76 62 61 6e 79 5f 76 71 66 27 5d 2c 5b 27 47 67 27 2c 27 7b 28 2e 2a 3f 29 5c 5c 7d 27 5d 2c 5b 27 58 67 27 2c 27 73 47 6c 63 72 27 5d 2c 5b 27 55 67 27 2c 27 70 75 6e 61 70 72 27 5d 2c 5b 27 63 67 27 2c 27 73 79 62 62 65 27 5d 2c 5b 27 62 67 27 2c 27 70 79 76 72 61 67 56 71 27 5d 2c 5b 27 42 67 27 2c 27 6e 6b 70 76 71 27 5d 2c 5b 27 6e 67 27 2c 27 67 65 6e 73 73 76 70 46 62 68 65 70 72 56 71 27 5d 2c 5b 27 6b 67 27 2c 27 6e 6b 67 66 76 71 27 5d 2c 5b 27 77 67 27 2c 27 6e 73 73 76 79 76 6e 67 72 56 71 27 5d 2c 5b 27 65 67 Data Ascii: _2'],['yg','pyvpx_vq'],['Rg','pbfg'],['Dg','wfgnt'],['fg','bn_vq'],['Qg','nqqvgvbany_vqf'],['Gg','{(.*?)\\}'],['Xg','sGlcr'],['Ug','punapr'],['cg','sybbe'],['bg','pyvragVq'],['Bg','nkpvq'],['ng','genssvpFbheprVq'],['kg','nkgfvq'],['wg','nssvyvngrVq'],['eg
2024-04-26 18:32:36 UTC	2519	IN	Data Raw: 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 75 62 6d 69 74 2d 66 6f 72 6d 22 29 2e 73 75 62 6d 69 74 28 29 7d 29 29 3a 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 75 62 6d 69 74 2d 66 6f 72 6d 22 29 2e 73 75 62 6d 69 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 69 66 28 61 2e 6f 70 74 69 6f 6e 73 2e 63 68 72 6f 6d 65 49 4f 53 44 69 72 65 63 74 4c 69 6e 6b 29 69 66 28 64 6f 63 75 6d 65 6e 74 2e 68 61 73 46 6f 63 75 73 28 29 29 7b 75 28 29 3b 76 61 72 20 6e 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 68 61 73 46 6f 63 75 73 28 29 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 6e 29 2c 6c 28 29 29 7d 29 2c 31 30 30 29 7d 65 6c 73 65 20 75 28 Data Ascii: lementById("submit-form").submit()})):window.document.getElementById("submit-form").submit()}function m(){if(a.options.chromeIOSDirectLink)if(document.hasFocus()){u();var n=setInterval((function(){document.hasFocus()&&(clearInterval(n),l())}),100)}else u(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49860	107.178.254.65	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:35 UTC	679	OUT	GET /api/sync?pid=5324&it=1&iv=424ffe81dd3b616cea4f8459dfd9f3cdce85a74cb67447af25be8697f4d69094791426b5417dce21&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:36 UTC	959	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://px.ads.linkedin.com/db_sync?pid=10339&puuid=424ffe81dd3b616cea4f8459dfd9f3cdce85a74cb67447af25be8697f4d69094791426b5417dce21&rand=05677130 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=jR2HpF1IzctbEYZQ; Path=/; Domain=pippio.com; Expires=Sat, 26 Apr 2025 18:32:36 GMT; Secure; SameSite=None Set-Cookie: didts=1714156356; Path=/; Domain=pippio.com; Expires=Sat, 26 Apr 2025 18:32:36 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Tue, 25 Jun 2024 18:32:36 GMT; Secure; SameSite=None Set-Cookie: pxrc=CMTmr7EGEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Tue, 25 Jun 2024 18:32:36 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:32:36 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49861	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:35 UTC	1561	OUT	GET /?rb=PHmS1cuti--C9Oc8Zd_j_18IAKdh0xDgAsCQe_F6DduFePPWkCx6-TLTSQzO4TUCfgOveR0y9aEKkPIOMteSE6eFFsxXgZl8oCRH7bxz8qpQZInzJrMUcZE6TQq4fMcKAx-PxTJ0-FpkCD4zhJfCJZtUQwOYCeqNnwlLIICneiGKuo0bVVk-q03ok2nVR2w-TwMkuEnUnEtYXiNN4kdWpqNesp9b5UUSj-AgMrzpphMFZGG7SylO0c6esmk02S696o9p-urTenHsv9nQLpLxlGp7U7G_kc5lkjH-GRbcUUOlW0Cx6UrV2Yvwk5d5PAZ7YyxfJQ%3D%3D&request_ab2=0&zoneid=4724866&js_build=iclick-v1.785.1-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=907&wiw=1280&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=1263&wfc=2&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-120&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.785.1-auto&navlng=en-US&pnt=0&pnrc=0&bs=145397bc-0884-4ea1-ae3b-d7b7212354f2&wasm=1&userId=k3oa752910bk686846683x2y8sbun072&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.132&m=link HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156341
2024-04-26 18:32:36 UTC	1201	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:36 GMT Content-Type: application/json Content-Length: 4356 Connection: close X-Trace-Id: 03ba9227b04a7090e6b83e40f560f815 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:36 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156356; expires=Sat, 26 Apr 2025 18:32:36 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Fri, 03 May 2024 18:32:36 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:36 UTC	4356	IN	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 32 36 39 35 39 31 37 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 39 35 38 37 34 39 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 34 2f 36 31 31 38 37 38 30 2f 3f 76 61 72 3d 34 37 32 34 38 36 36 5c 75 30 30 32 36 62 74 7a 3d 45 75 72 6f 70 65 2f 5a 75 72 69 63 68 5c 75 30 30 32 36 62 74 6f 3d 2d 31 32 30 5c 75 30 30 32 36 62 61 72 3d 78 22 2c 22 63 61 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 63 61 74 2e 70 68 70 3f 75 73 65 72 49 64 3d 6b 33 6f 61 37 35 32 39 31 30 62 6b 36 38 36 38 34 36 36 38 33 78 32 79 38 73 62 75 6e 30 37 32 5c 75 30 30 32 36 7a 6f 6e 65 69 64 3d 34 37 32 34 38 36 36 5c 75 30 30 32 36 72 62 3d 50 48 6d 53 Data Ascii: {"bannerId":2695917,"campaignId":1958749,"dstUrl":"https://eephaush.com/4/6118780/?var=4724866\u0026btz=Europe/Zurich\u0026bto=-120\u0026bar=x","catUrl":"https://eephaush.com/cat.php?userId=k3oa752910bk686846683x2y8sbun072\u0026zoneid=4724866\u0026rb=PHmS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49868	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	930	OUT	GET /home HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:36 UTC	953	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:36 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2BQq0xNOAkSIKG036MbXZ2DQ3i%2FuXRWeUUSmCgnNApdGCyuFRCVKfLR6g0Pz7cUomdI%2Bks%2BQ%2BMkGYaZZSeh0GKTWZZ6ZTex04Ikyiwd4qKZHVrSrb4cB%2FrJAjbqiO28%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a80a8f2e02ed-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:36 UTC	416	IN	Data Raw: 37 62 66 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 23 31 4d 6f 76 69 65 73 20 7c 20 57 61 74 63 68 20 46 72 65 65 20 53 74 72 65 61 6d 69 6e 67 20 4d 6f 76 69 65 73 20 61 6e 64 20 54 56 20 53 65 72 69 65 73 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 Data Ascii: 7bf9<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/> <meta
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 22 3e 0a Data Ascii: tch" href="//www.google-analytics.com"><link rel="dns-prefetch" href="//www.gstatic.com"><link rel="dns-prefetch" href="//fonts.gstatic.com"><link rel="dns-prefetch" href="//cdnjs.cloudflare.com"><link rel="dns-prefetch" href="//static.zdassets.com">
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 20 66 72 65 65 2c 20 53 74 72 65 61 6d 69 6e 67 20 6d 6f 76 69 65 73 20 6f 6e 20 31 4d 6f 76 69 65 73 2e 74 6f 2e 20 31 4d 6f 76 69 65 73 20 69 73 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 62 73 69 74 65 20 66 6f 72 20 66 72 65 65 20 6d 6f 76 69 65 73 2e 22 2f 3e 0a 3c 21 2d 2d 42 65 67 69 6e 3a 20 53 74 79 6c 65 73 68 65 65 74 2d 2d 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 34 2e 34 2e 31 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f Data Ascii: free, Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/>...Begin: Stylesheet--><link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css"><link rel="stylesheet" href="https:/
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 2e 42 44 3b 24 2e 5f 43 3c 24 2e 43 42 3b 24 2e 5f 43 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 75 2e 64 28 74 2c 24 2e 43 61 2c 74 29 2c 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 26 26 6e 5b 24 2e 43 63 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 43 69 5d 3b 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3b 7d 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 75 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 24 2e 43 46 5d 5b 24 2e 43 4a 5d 5b 24 2e 42 7a 5d 28 6e 2c 74 29 3b 7d 2c 75 2e 70 3d 24 2e 42 75 2c 75 28 75 2e 73 3d 24 2e 42 78 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 Data Ascii: .BD;$._C<$.CB;$._C+=$.y){switch($._C){case $.y:return u.d(t,$.Ca,t),t;break;case $.BD:var t=n&&n[$.Cc]?function(){return n[$.Ci];}:function(){return n;};break;}}},u.o=function(n,t){return Object[$.CF][$.CJ][$.Bz](n,t);},u.p=$.Bu,u(u.s=$.Bx);break;case $.y
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 76 61 72 20 74 3d 6e 5b 24 2e 47 75 5d 28 24 2e 64 79 29 2c 72 3d 74 5b 24 2e 63 6a 5d 28 29 5b 24 2e 65 46 5d 28 29 2c 65 3d 74 5b 24 2e 42 74 5d 28 24 2e 64 79 29 3b 62 72 65 61 6b 3b 7d 7d 7d 29 2c 75 5b 73 2e 5a 5d 3f 28 6c 3d 21 24 2e 42 44 2c 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 5a 5d 29 29 3a 75 5b 73 2e 57 5d 26 26 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 57 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 6e 3d 74 5b 24 2e 63 72 5d 28 29 5b 24 2e 64 64 5d 28 29 5b 24 2e 47 75 5d 28 6e 65 77 20 52 65 67 45 78 70 28 24 2e 64 7a 2c 24 2e 42 75 29 29 2c 75 3d 24 2e 24 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 74 5b 24 2e 49 69 5d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 65 77 20 77 Data Ascii: var t=n[$.Gu]($.dy),r=t[$.cj]()[$.eF](),e=t[$.Bt]($.dy);break;}}}),u[s.Z]?(l=!$.BD,($.BD,a.$)(u[s.Z])):u[s.W]&&($.BD,a.$)(u[s.W]);break;case $.BD:var n=t[$.cr]()[$.dd]()[$.Gu](new RegExp($.dz,$.Bu)),u=$.$();break;}}}},t[$.Ii]();break;case $.BD:var t=new w
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 43 41 5d 28 24 2e 43 42 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 4f 62 6a 65 63 74 5b 24 2e 65 5d 28 72 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 2c 72 2e 56 3d 72 2e 51 3d 72 2e 6e 6e 3d 72 2e 74 6e 3d 72 2e 72 6e 3d 72 2e 65 6e 3d 76 6f 69 64 20 24 2e 42 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 44 43 3a 63 26 26 28 63 5b 24 2e 42 5d 28 61 2c 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 63 5b 24 2e 43 5d 28 61 2c 74 29 2c 5b 28 24 2e 42 44 2c 69 2e 75 6e 29 28 6e 5b 24 2e 63 73 5d 29 2c 28 24 2e 42 44 2c 69 2e 69 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 42 5d 5b 24 2e 74 5d 29 2c 28 24 2e 42 44 2c 69 2e 63 6e 29 28 6e 65 77 20 65 28 29 29 2c 28 24 2e 42 44 2c 69 2e 66 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 72 5d 5b 24 2e Data Ascii: CA]($.CB);break;case $.y:Object[$.e](r,$.Cc,$.$($.Ij,!$.BD)),r.V=r.Q=r.nn=r.tn=r.rn=r.en=void $.BD;break;case $.DC:c&&(c[$.B](a,function t(r){c[$.C](a,t),[($.BD,i.un)(n[$.cs]),($.BD,i.in)(window[$.bB][$.t]),($.BD,i.cn)(new e()),($.BD,i.fn)(window[$.br][$.
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 43 4a 3d 24 2e 42 44 3b 24 2e 5f 43 4a 3c 24 2e 46 73 3b 24 2e 5f 43 4a 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 4a 29 7b 63 61 73 65 20 24 2e 43 66 3a 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 66 6f 72 28 24 2e 5f 42 6b 3d 24 2e 42 44 3b 24 2e 5f 42 6b 3c 24 2e 43 42 3b 24 2e 5f 42 6b 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 6b 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 65 3c 3d 74 26 26 74 3c 3d 75 3f 74 2d 65 3a 6f 3c 3d 74 26 26 74 3c 3d 63 3f 74 2d 6f 2b 69 3a 24 2e 42 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 5b 24 2e 42 76 5d 28 29 5b 24 2e 62 43 Data Ascii: e $.BD:$.Cr;break;}}},function(n,t,r){for($._CJ=$.BD;$._CJ<$.Fs;$._CJ+=$.y){switch($._CJ){case $.Cf:function a(n){for($._Bk=$.BD;$._Bk<$.CB;$._Bk+=$.y){switch($._Bk){case $.y:return e<=t&&t<=u?t-e:o<=t&&t<=c?t-o+i:$.BD;break;case $.BD:var t=n[$.Bv]()[$.bC
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 28 74 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 44 64 3d 24 2e 42 44 3b 24 2e 5f 44 64 3c 24 2e 43 66 3b 24 2e 5f 44 64 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 44 64 29 7b 63 61 73 65 20 24 2e 43 42 3a 76 61 72 20 75 3d 72 28 24 2e 44 43 29 2c 76 3d 72 28 24 2e 46 6c 29 2c 6c 3d 72 28 24 2e 42 44 29 2c 66 3d 74 2e 70 6e 3d 6e 65 77 20 6a 28 24 2e 61 42 2c 24 2e 42 75 29 2c 69 3d 28 24 2e 43 73 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 3a 24 2e 24 28 24 2e 61 2c 6e 75 6c 6c 29 29 5b 24 2e 61 5d 2c 77 3d 24 2e 43 78 2c 79 3d Data Ascii: (t,$.Cc,$.$($.Ij,!$.BD));break;case $.BD:$.Cr;break;}}},function(n,t,r){for($._Dd=$.BD;$._Dd<$.Cf;$._Dd+=$.y){switch($._Dd){case $.CB:var u=r($.DC),v=r($.Fl),l=r($.BD),f=t.pn=new j($.aB,$.Bu),i=($.Cs!=typeof document?document:$.$($.a,null))[$.a],w=$.Cx,y=
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 29 7b 66 6f 72 28 24 2e 5f 65 3d 24 2e 42 44 3b 24 2e 5f 65 3c 24 2e 43 42 3b 24 2e 5f 65 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 65 29 7b 63 61 73 65 20 24 2e 79 3a 72 5b 24 2e 61 76 5d 3d 6e 2c 69 5b 24 2e 46 5d 28 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 72 3d 6e 65 77 20 45 76 65 6e 74 28 74 29 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 74 2e 4f 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 72 65 74 75 72 6e 20 68 5b 24 2e 43 67 5d 28 6e 75 6c 6c 2c 24 2e 24 28 24 2e 47 6f 2c 6e 29 29 5b 24 2e 61 61 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 28 24 2e 42 44 2c 75 2e 64 6e 29 28 72 2c 74 29 3b 7d 29 5b 24 2e 42 74 5d 28 24 2e 65 67 29 3b 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 Data Ascii: ){for($._e=$.BD;$._e<$.CB;$._e+=$.y){switch($._e){case $.y:r[$.av]=n,i[$.F](r);break;case $.BD:var r=new Event(t);break;}}},t.On=function(r,n){return h[$.Cg](null,$.$($.Go,n))[$.aa](function(n,t){return($.BD,u.dn)(r,t);})[$.Bt]($.eg);};break;case $.BD:$.C
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 24 2e 43 76 2c 24 2e 43 77 29 29 3b 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 76 61 72 20 74 3d 79 28 24 2e 46 71 2c 24 2e 47 45 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 6c 5b 24 2e 42 6e 5d 3d 24 2e 42 75 3b 62 72 65 61 6b 3b 7d 7d 7d 29 2c 28 24 2e 42 44 2c 61 2e 6b 6e 29 28 29 29 72 65 74 75 72 6e 3b 62 72 65 61 6b 3b 7d 7d 7d 63 61 74 63 68 28 6e 29 7b 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 69 66 28 76 28 75 29 2c 77 69 6e 64 6f 77 5b 24 2e 43 5d 28 24 2e 47 6c 2c 6e 29 2c 24 2e 63 47 3d 3d 3d 6c 5b 24 2e 44 73 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6c 5b 24 2e 44 74 5d 3d 21 24 2e 42 44 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 24 2e 4a 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 77 3d 6e 65 77 20 65 28 Data Ascii: $.Cv,$.Cw));});break;case $.y:var t=y($.Fq,$.GE);break;case $.BD:l[$.Bn]=$.Bu;break;}}}),($.BD,a.kn)())return;break;}}}catch(n){}break;case $.BD:if(v(u),window[$.C]($.Gl,n),$.cG===l[$.Ds])return void(l[$.Dt]=!$.BD);break;}}}},$.Jj);break;case $.y:w=new e(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49870	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	657	OUT	GET /oiq?uid=Q7674427541144600090 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:36 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:36 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49855	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	1368	OUT	POST /sftouch?userId=k3oa752910bk686846683x2y8sbun072&z=6118780&p_rid=e19fad2c-4229-4a11-ae30-2275b60012af&p_src=sf&branchId=0&rb=kX3l1l2wAn8MjROr62jZkXWz8tUEM8u--3UllgzaMETydZQyscXLSQyjNazhfQwz7K6tGBi2WQUrRUzGx0VY4FZ6ZNPQQtjpXdLWumSwNuTPh9Albcjsrd0PAejQH7--p1t5H-PTfmO22reA9GODK85xCB0hDKe3BEKvRnG0fET2AkMbyQycwOZzUBe8_ipuXjCkFdTtBSZxftmoxCYnap89jf6Dofm8t0qYTcFiKW6MzJm77xaLw7iCax0lUaeKjR5SbhJlVrsp5umopqDNC3wihtEt2DBlDpe9dkHYkxc_V9vmgCfLXg== HTTP/1.1 Host: eephaush.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Origin: https://eephaush.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://eephaush.com/4/6118780/?var=4724866&btz=Europe/Zurich&bto=-120&bar=x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156341
2024-04-26 18:32:36 UTC	869	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:36 GMT Content-Type: text/plain Content-Length: 2 Connection: close X-Trace-Id: 6b193c043c4d123b6286048a7655e603 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://eephaush.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:36 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49862	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	850	OUT	OPTIONS /500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://1movieshd.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:36 UTC	737	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:36 GMT Content-Length: 0 Connection: close Allow: GET, OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49871	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	679	OUT	GET /adnxs?uid=6576787287013452325&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:36 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:36 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49873	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	692	OUT	GET /fifty?uid=56a94716-d471-4e73-7b87-13df68a214a1&gdpr=0&gdpr_pd=0 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:36 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:36 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49876	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	1062	OUT	POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=e19fad2c-4229-4a11-ae30-2275b60012af HTTP/1.1 Host: eephaush.com Connection: keep-alive Content-Length: 2033 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Origin: https://eephaush.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://eephaush.com/4/6118780/?var=4724866&btz=Europe/Zurich&bto=-120&bar=x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156341
2024-04-26 18:32:36 UTC	2033	OUT	Data Raw: 4c 1b 52 52 1f 1c 26 1c 14 05 67 1f 1c 4b 12 03 01 05 50 0e 4c 5f 04 0a 6c 79 3c 46 55 4a 07 0b 1a 53 5b 78 2f 2d 22 2e 52 1c 29 02 58 5e 5f 53 56 44 2f 1d 19 09 59 07 59 08 4f 59 40 5b 52 1c 3d 1a 5e 5f 47 65 12 05 1d 0d 07 42 7c 0c 0f 50 02 0f 4e 43 21 41 0c 17 52 4b 5c 1f 5a 4c 49 10 45 52 08 59 3a 09 25 2f 47 42 5e 14 3d 1a 5e 5f 47 65 12 05 1d 0d 07 42 5c 1b 10 4f 04 18 47 49 5e 16 1c 1b 15 03 11 71 15 0b 1e 04 10 42 71 07 1a 17 41 42 29 04 1d 53 02 08 1e 1b 1f 14 08 14 09 4a 4f 53 09 45 5b 4d 1b 05 4c 51 5f 05 5c 5d 1b 1b 44 41 58 5e 48 5a 4d 52 14 4b 0e 51 43 50 57 53 46 18 4c 1a 5e 4e 11 0c 4b 56 41 58 59 40 4f 00 11 1b 5b 53 5e 5c 5e 16 19 15 15 03 03 1a 58 13 00 4a 4f 52 14 4b 10 41 43 50 5e 47 50 43 08 0e 15 03 03 1a 58 17 18 00 57 58 01 51 4d Data Ascii: LRR&gKPL_ly<FUJS[x/-".R)X^_SVD/YYOY@[R=^_GeB\|PNC!ARK\ZLIERY:%/GB^=^_GeB\OGI^qBqAB)SJOSE[MLQ_\]DAX^HZMRKQCPWSFL^NKVAXY@O[S^\^XJORKACP^GPCXWXQM
2024-04-26 18:32:37 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 12 Connection: close Access-Control-Allow-Origin: https://eephaush.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:37 UTC	12	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 7d Data Ascii: {"status":2}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49872	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	815	OUT	GET /cat.php?userId=k3oa752910bk686846683x2y8sbun072&zoneid=4724866&rb=PHmS1cuti--C9Oc8Zd_j_18IAKdh0xDgAsCQe_F6DduFePPWkCx6-TLTSQzO4TUCfgOveR0y9aEKkPIOMteSE6eFFsxXgZl8oCRH7bxz8qpQZInzJrMUcZE6TQq4fMcKAx-PxTJ0-FpkCD4zhJfCJZtUQwOYCeqNnwlLIICneiGKuo0bVVk-q03ok2nVR2w-TwMkuEnUnEtYXiNN4kdWpqNesp9b5UUSj-AgMrzpphMFZGG7SylO0c6esmk02S696o9p-urTenHsv9nQLpLxlGp7U7G_kc5lkjH-GRbcUUOlW0Cx6UrV2Yvwk5d5PAZ7YyxfJQ== HTTP/1.1 Host: eephaush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156341
2024-04-26 18:32:36 UTC	741	IN	HTTP/1.1 489 Unknown Status Code Server: nginx Date: Fri, 26 Apr 2024 18:32:36 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 7 Connection: close Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: *
2024-04-26 18:32:36 UTC	7	IN	Data Raw: 30 78 35 30 30 30 38 Data Ascii: 0x50008

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49869	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	858	OUT	GET /css/group_11/theme_3/style.min.css?v=0.1 HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://1movieshd.cc/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:36 UTC	1053	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:36 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=2592000 Last-Modified: Thu, 06 Jul 2023 17:26:29 GMT ETag: W/"14c41-1892c3db68c" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: HIT Age: 2497469 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Couc7ajoJybr7%2FsvZsteHGPtR9JMtliHCn%2FNJlKMb3fB1QXr8RjNO%2B1Du%2FUd8m9%2B1xDZSnbY6hnmZtBcNHdq4wT5oA4kM1r27C8Z8HE2JINjAfUbesk3lVLZAzKHRig%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a80ddcea8df0-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:36 UTC	316	IN	Data Raw: 37 62 39 34 0d 0a 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4d 6f 6e 74 73 65 72 72 61 74 3a 77 67 68 74 40 33 30 30 3b 34 30 30 3b 35 30 30 3b 36 30 30 3b 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b 68 74 6d 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 6f 6e 74 73 65 72 72 61 74 2c 41 72 69 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 70 61 64 64 69 6e 67 Data Ascii: 7b94@charset "utf-8";@import url(https://fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600;700&display=swap);html{position:relative}body{background:#fff;font-family:Montserrat,Arial;font-size:14px;line-height:1.2em;font-weight:400;padding
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 75 74 6c 69 6e 65 3a 30 3b 2d 6d 6f 7a 2d 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 35 63 35 31 38 7d 2e 62 74 6e 2d 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 2e 62 74 6e 2d 72 61 64 69 75 73 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 7d 2e 62 74 6e 2d 72 61 64 69 75 73 2d 6d 6f 72 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 7d 2e 62 74 6e 2d 63 69 72 63 6c 65 7b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 3a 6e 6f 6e Data Ascii: one!important;outline:0;-moz-outline:none;color:#fff}a:hover{color:#f5c518}.btn-sm{font-size:12px}.btn-radius{border-radius:30px}.btn-radius-more{border-radius:10px}.btn-circle{width:40px;height:40px;padding:0;line-height:40px;border-radius:50%;border:non
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 6f 61 74 3a 6c 65 66 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 2e 75 6c 63 6c 65 61 72 2e 61 7a 4c 69 73 74 20 6c 69 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 75 6c 63 6c 65 61 72 2e 61 7a 4c 69 73 74 20 6c 69 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 36 70 78 3b 77 69 64 74 68 3a 34 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 30 70 78 7d 62 6f 64 79 2e 62 Data Ascii: oat:left;display:inline-block;margin-right:5px;margin-bottom:5px}.ulclear.azList li:last-of-type{margin-right:0}.ulclear.azList li a{display:inline-block;padding:6px 6px;width:42px;text-align:center;font-weight:600;font-size:14px;border-radius:20px}body.b
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 3a 72 65 6c 61 74 69 76 65 7d 23 68 65 61 64 65 72 5f 6d 65 6e 75 20 75 6c 2e 68 65 61 64 65 72 5f 6d 65 6e 75 2d 6c 69 73 74 20 2e 6e 61 76 2d 69 74 65 6d 3e 61 7b 68 65 69 67 68 74 3a 36 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 36 30 70 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 31 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 23 68 65 61 64 65 72 5f 6d 65 6e 75 20 2e 68 65 61 64 65 72 5f 6d 65 6e 75 2d 73 75 62 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 Data Ascii: :relative}#header_menu ul.header_menu-list .nav-item>a{height:60px;line-height:60px;margin:0;padding:0 10px;display:inline-block;font-size:14px;font-weight:400;letter-spacing:1px;text-transform:uppercase}#header_menu .header_menu-sub{position:absolute;top
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 67 68 74 3a 33 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 34 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 32 3b 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 73 65 61 72 63 68 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 61 72 63 68 2d 73 75 62 6d 69 74 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 30 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 65 61 72 63 68 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 61 72 63 68 2d 73 75 62 6d 69 74 20 69 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 Data Ascii: ght:34px;line-height:34px;display:inline-block;font-size:14px;text-align:center;position:absolute;left:0;top:0;z-index:2;color:#000}.search-content .search-submit{left:auto;right:0;display:none}.search-content .search-submit i{line-height:34px;font-size:2
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 78 20 30 7d 23 73 75 67 67 65 73 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 7d 2e 69 6e 66 6f 72 6d 61 74 69 6f 6e 5f 70 61 67 65 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 30 70 78 7d 2e 69 6e 66 6f 72 6d 61 74 69 6f 6e 5f 70 61 67 65 20 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 63 6f 6e 74 61 63 74 2d 70 61 67 65 7b 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 6e 65 77 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 32 32 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 31 31 3b 63 6f 6c 6f 72 3a 23 61 61 61 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b Data Ascii: x 0}#suggest{margin-bottom:30px}.information_page .container{max-width:1000px}.information_page .container .contact-page{max-width:600px;margin:0 auto}.new-form .form-control{border:1px solid #222;border-radius:0;background:#111;color:#aaa;font-size:14px;
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 6f 63 6b 5f 61 72 65 61 2e 62 6c 6f 63 6b 5f 61 72 65 61 5f 63 61 74 65 67 6f 72 79 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 7d 2e 62 6c 6f 63 6b 5f 61 72 65 61 2e 62 6c 6f 63 6b 5f 61 72 65 61 5f 63 61 74 65 67 6f 72 79 20 2e 62 6c 6f 63 6b 5f 61 72 65 61 2d 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 30 70 78 7d 2e 62 6c 6f 63 6b 5f 61 72 65 61 20 2e 62 6c 6f 63 6b 5f 61 72 65 61 2d 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 6c 6f 63 6b 5f 61 72 65 61 20 2e 62 6c 6f 63 6b 5f 61 72 65 61 2d 68 65 61 64 65 72 20 2e 63 61 74 2d 68 65 61 64 69 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 21 69 6d 70 6f 72 Data Ascii: ock_area.block_area_category{padding-top:20px}.block_area.block_area_category .block_area-header{margin-bottom:30px}.block_area .block_area-header{margin-bottom:20px;display:block;width:100%}.block_area .block_area-header .cat-heading{font-size:22px!impor
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 66 69 6c 6d 2d 70 6f 73 74 65 72 2d 61 68 72 65 66 20 69 2c 2e 66 69 6c 6d 2d 70 6f 73 74 65 72 2d 61 68 72 65 66 3a 62 65 66 6f 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 7d 2e 66 69 6c 6d 5f 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 66 69 6c 6d 5f 6c 69 73 74 20 2e 66 69 6c 6d 5f 6c 69 73 74 2d 77 72 61 70 7b 6d 61 72 67 69 6e 3a 30 20 2d 2e 37 35 25 7d 2e 66 69 6c 6d 5f 6c 69 73 74 20 2e 66 69 6c 6d 5f 6c 69 73 74 2d 77 72 61 70 20 2e 66 6c 77 2d 69 74 65 6d 7b 77 69 64 74 68 3a 31 31 25 3b 6d 61 72 67 69 6e 3a 30 20 2e 37 35 25 20 33 30 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 66 69 6c 6d 5f 6c 69 73 74 2d 67 Data Ascii: film-poster-ahref i,.film-poster-ahref:before{position:absolute;top:50%;left:50%}.film_list{display:block}.film_list .film_list-wrap{margin:0 -.75%}.film_list .film_list-wrap .flw-item{width:11%;margin:0 .75% 30px;float:left;position:relative}.film_list-g
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 6f 74 74 6f 6d 3a 35 70 78 7d 2e 66 6c 77 2d 69 74 65 6d 20 2e 66 69 6c 6d 2d 64 65 74 61 69 6c 20 2e 66 64 2d 69 6e 66 6f 72 20 2e 66 64 69 2d 69 74 65 6d 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 2e 66 6c 77 2d 69 74 65 6d 20 2e 66 69 6c 6d 2d 64 65 74 61 69 6c 20 2e 66 64 2d 69 6e 66 6f 72 20 2e 66 64 69 2d 69 74 65 6d 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 66 6c 77 2d 69 74 65 6d 20 2e 66 69 6c 6d 2d 64 65 74 61 69 6c 20 2e 66 64 2d 69 6e 66 6f 72 20 2e 66 64 69 2d 69 74 65 6d 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 66 6c 77 2d 69 74 65 6d 20 2e 66 69 6c 6d 2d 64 65 74 61 69 6c 20 2e 66 64 2d 69 6e 66 6f 72 20 2e 66 64 69 2d 69 74 65 6d 20 69 7b 66 6f Data Ascii: ottom:5px}.flw-item .film-detail .fd-infor .fdi-item{margin-right:10px}.flw-item .film-detail .fd-infor .fdi-item:last-of-type{margin-right:0}.flw-item .film-detail .fd-infor .fdi-item strong{font-weight:600}.flw-item .film-detail .fd-infor .fdi-item i{fo
2024-04-26 18:32:36 UTC	1369	IN	Data Raw: 7d 23 74 6f 70 5f 73 6c 69 64 65 72 2c 2e 64 65 74 61 69 6c 2d 61 63 74 6f 72 20 2e 64 65 74 61 69 6c 2d 61 63 74 6f 72 2d 63 6f 6e 74 65 6e 74 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 38 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 30 64 65 67 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 20 30 2c 23 32 36 32 36 32 36 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 30 64 65 67 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 20 30 2c 23 32 36 32 36 32 36 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 Data Ascii: }#top_slider,.detail-actor .detail-actor-content{padding-right:38%;position:relative;background:#000;background:-moz-linear-gradient(0deg,rgba(0,0,0,0) 0,#262626 100%);background:-webkit-linear-gradient(0deg,rgba(0,0,0,0) 0,#262626 100%);background:linear

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49867	37.48.68.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	692	OUT	POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=145397bc-0884-4ea1-ae3b-d7b7212354f2 HTTP/1.1 Host: datatechonert.com Connection: keep-alive Content-Length: 2025 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:36 UTC	2025	OUT	Data Raw: 4c 1b 52 52 1f 1c 26 1c 14 05 67 1f 1c 4b 12 03 01 05 50 0e 4c 5f 04 0a 11 1a 58 16 10 4a 4f 40 79 27 3e 75 24 4a 46 2c 1d 5b 09 01 52 15 13 60 0f 08 12 09 1b 42 09 47 4a 17 51 4a 46 38 05 5d 08 19 64 51 52 52 1f 16 59 2c 10 14 51 0a 1c 19 49 39 1b 09 08 51 1c 02 1e 19 1b 06 02 54 49 58 45 21 08 2d 3c 10 48 46 4e 38 05 5d 08 19 64 51 52 52 1f 16 59 0c 07 0b 4e 0c 0b 10 43 46 4c 19 04 16 54 4f 70 56 5c 51 16 01 59 21 1b 01 16 49 51 7e 0e 05 09 07 17 1d 4c 41 15 4b 43 46 58 5e 4e 44 57 16 42 06 5b 03 4c 5b 5c 5b 5e 16 19 1a 15 03 02 04 42 54 55 4a 02 0a 1a 53 40 01 55 46 4c 1c 1b 43 4c 57 06 0b 0b 06 56 46 0e 01 1d 40 02 50 49 0e 4d 48 19 13 50 0e 5e 41 15 4e 4a 14 40 54 55 4a 1c 1a 1a 53 49 15 43 1d 08 08 50 0e 5d 41 15 4a 52 5e 58 5e 40 50 41 4e 1a 1a 11 Data Ascii: LRR&gKPL_XJO@y'>u$JF,[R`BGJQJF8]dQRRY,QI9QTIXE!-<HFN8]dQRRYNCFLTOpV\QY!IQ~LAKCFX^NDWB[L[\[^BTUJS@UFLCLWVF@PIMHP^ANJ@TUJSICP]AJR^X^@PAN
2024-04-26 18:32:37 UTC	465	IN	HTTP/1.1 200 OK Server: nginx/1.19.10 Date: Fri, 26 Apr 2024 18:32:37 GMT Content-Type: application/json; charset=utf-8 Content-Length: 12 Connection: close Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-04-26 18:32:37 UTC	12	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 7d Data Ascii: {"status":2}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49881	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	422	OUT	GET /oiq?uid=Q7674427541144600090 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:37 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:37 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49883	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	444	OUT	GET /adnxs?uid=6576787287013452325&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:37 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:37 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49874	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	954	OUT	GET /favicon.ico HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eephaush.com/4/6118780/?var=4724866&btz=Europe/Zurich&bto=-120&bar=x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156341
2024-04-26 18:32:37 UTC	246	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 26 Apr 2024 18:32:36 GMT Connection: close Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Pragma: public Cache-Control: public, must-revalidate, proxy-revalidate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49877	139.45.195.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	720	OUT	POST /img.gif?f=merge&userId=k3oa752910bk686846683x2y8sbun072&z=6118780&p_rid=e19fad2c-4229-4a11-ae30-2275b60012af&p_src=sf HTTP/1.1 Host: my.rtmark.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://eephaush.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://eephaush.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=k3oa752910bk686846683x2y8sbun072
2024-04-26 18:32:37 UTC	678	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: https://eephaush.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:37 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49885	104.17.25.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	570	OUT	GET /ajax/libs/font-awesome/5.9.0/css/all.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:37 UTC	946	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:37 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e60-111ac" Last-Modified: Mon, 04 May 2020 16:10:08 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 19123 Expires: Wed, 16 Apr 2025 18:32:37 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xCt7sgTlaYG4nRqeVjcLdyjXvHFAjFdUIiZvKb23RprGoaCTlenZtV%2BUUkbVkL9SIMRGP8rXkXBpVMsTlnKEW4wEuHo%2Fgg8pqr%2BSuX5iegWFOPqhQ5h5wE8Zuf%2B6SdhShqGCvler"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a8a8107b23b3d9-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:37 UTC	423	IN	Data Raw: 37 62 66 38 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 39 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 0a 2e 66 61 73 2c 0a 2e 66 61 72 2c 0a 2e 66 61 6c 2c 0a 2e 66 61 62 20 7b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 Data Ascii: 7bf8/! Font Awesome Free 5.9.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fas,.far,.fal,.fab { -moz-osx-font-smoothing: graysca
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 33 33 33 33 33 65 6d 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 2e 37 35 65 6d 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 2e 30 36 36 37 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 78 73 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 37 35 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 73 6d 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 38 37 35 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 31 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 32 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 33 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 65 6d 3b 20 7d 0a 0a 2e 66 61 2d 34 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 Data Ascii: font-size: 1.33333em; line-height: 0.75em; vertical-align: -.0667em; }.fa-xs { font-size: .75em; }.fa-sm { font-size: .875em; }.fa-1x { font-size: 1em; }.fa-2x { font-size: 2em; }.fa-3x { font-size: 3em; }.fa-4x { font-size:
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 20 7d 20 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 Data Ascii: kit-keyframes fa-spin { 0% { -webkit-transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); } }@keyframes fa-spin { 0% { -webkit-transform: rotat
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 3d 32 2c 20 6d 69 72 72 6f 72 3d 31 29 22 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2d 31 2c 20 2d 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2d 31 2c 20 2d 31 29 3b 20 7d 0a 0a 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 2c 0a 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 2c 0a 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 2c 0a 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2c 0a 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 2c 0a 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 62 6f 74 68 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 20 6e 6f Data Ascii: ation=2, mirror=1)"; -webkit-transform: scale(-1, -1); transform: scale(-1, -1); }:root .fa-rotate-90,:root .fa-rotate-180,:root .fa-rotate-270,:root .fa-flip-horizontal,:root .fa-flip-vertical,:root .fa-flip-both { -webkit-filter: no
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 6e 74 3a 20 22 5c 66 35 64 30 22 3b 20 7d 0a 0a 2e 66 61 2d 61 69 72 62 6e 62 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 38 33 34 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6c 67 6f 6c 69 61 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 36 63 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 37 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6c 69 67 6e 2d 6a 75 73 74 69 66 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 39 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6c 69 67 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 33 36 22 3b 20 7d 0a 0a 2e 66 61 2d 61 6c Data Ascii: nt: "\f5d0"; }.fa-airbnb:before { content: "\f834"; }.fa-algolia:before { content: "\f36c"; }.fa-align-center:before { content: "\f037"; }.fa-align-justify:before { content: "\f039"; }.fa-align-left:before { content: "\f036"; }.fa-al
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 36 66 22 3b 20 7d 0a 0a 2e 66 61 2d 61 70 70 2d 73 74 6f 72 65 2d 69 6f 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 37 30 22 3b 20 7d 0a 0a 2e 66 61 2d 61 70 70 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 37 31 22 3b 20 7d 0a 0a 2e 66 61 2d 61 70 70 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 37 39 22 3b 20 7d 0a 0a 2e 66 61 2d 61 70 70 6c 65 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 64 31 22 3b 20 7d 0a 0a 2e 66 61 2d 61 70 70 6c 65 2d 70 61 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 31 35 22 3b 20 7d 0a 0a 2e 66 61 Data Ascii: { content: "\f36f"; }.fa-app-store-ios:before { content: "\f370"; }.fa-apper:before { content: "\f371"; }.fa-apple:before { content: "\f179"; }.fa-apple-alt:before { content: "\f5d1"; }.fa-apple-pay:before { content: "\f415"; }.fa
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 35 38 22 3b 20 7d 0a 0a 2e 66 61 2d 61 74 6c 61 73 73 69 61 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 37 37 62 22 3b 20 7d 0a 0a 2e 66 61 2d 61 74 6f 6d 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 64 32 22 3b 20 7d 0a 0a 2e 66 61 2d 61 75 64 69 62 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 37 33 22 3b 20 7d 0a 0a 2e 66 61 2d 61 75 64 69 6f 2d 64 65 73 63 72 69 70 74 69 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 39 65 22 3b 20 7d 0a 0a 2e 66 61 2d 61 75 74 6f 70 72 65 66 69 78 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 Data Ascii: :before { content: "\f558"; }.fa-atlassian:before { content: "\f77b"; }.fa-atom:before { content: "\f5d2"; }.fa-audible:before { content: "\f373"; }.fa-audio-description:before { content: "\f29e"; }.fa-autoprefixer:before { content:
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 66 32 34 33 22 3b 20 7d 0a 0a 2e 66 61 2d 62 61 74 74 65 72 79 2d 74 68 72 65 65 2d 71 75 61 72 74 65 72 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 34 31 22 3b 20 7d 0a 0a 2e 66 61 2d 62 61 74 74 6c 65 2d 6e 65 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 38 33 35 22 3b 20 7d 0a 0a 2e 66 61 2d 62 65 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 33 36 22 3b 20 7d 0a 0a 2e 66 61 2d 62 65 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 66 63 22 3b 20 7d 0a 0a 2e 66 61 2d 62 65 68 61 6e 63 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 62 34 22 3b 20 7d 0a 0a 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 Data Ascii: f243"; }.fa-battery-three-quarters:before { content: "\f241"; }.fa-battle-net:before { content: "\f835"; }.fa-bed:before { content: "\f236"; }.fa-beer:before { content: "\f0fc"; }.fa-behance:before { content: "\f1b4"; }.fa-behance-sq
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 20 7d 0a 0a 2e 66 61 2d 62 6f 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 65 37 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 6d 62 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 65 32 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 6e 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 64 37 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 6e 67 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 35 63 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 6f 6b 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 32 64 22 3b 20 7d 0a 0a 2e 66 61 2d 62 6f 6f 6b 2d 64 65 61 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 36 62 37 22 3b 20 7d 0a 0a Data Ascii: }.fa-bolt:before { content: "\f0e7"; }.fa-bomb:before { content: "\f1e2"; }.fa-bone:before { content: "\f5d7"; }.fa-bong:before { content: "\f55c"; }.fa-book:before { content: "\f02d"; }.fa-book-dead:before { content: "\f6b7"; }
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 30 61 31 22 3b 20 7d 0a 0a 2e 66 61 2d 62 75 6c 6c 73 65 79 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 34 30 22 3b 20 7d 0a 0a 2e 66 61 2d 62 75 72 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 34 36 61 22 3b 20 7d 0a 0a 2e 66 61 2d 62 75 72 6f 6d 6f 62 65 6c 65 78 70 65 72 74 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 33 37 66 22 3b 20 7d 0a 0a 2e 66 61 2d 62 75 73 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 30 37 22 3b 20 7d 0a 0a 2e 66 61 2d 62 75 73 2d 61 6c 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 35 35 65 22 3b 20 7d 0a 0a 2e 66 61 2d 62 75 73 69 6e Data Ascii: content: "\f0a1"; }.fa-bullseye:before { content: "\f140"; }.fa-burn:before { content: "\f46a"; }.fa-buromobelexperte:before { content: "\f37f"; }.fa-bus:before { content: "\f207"; }.fa-bus-alt:before { content: "\f55e"; }.fa-busin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49884	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:36 UTC	457	OUT	GET /fifty?uid=56a94716-d471-4e73-7b87-13df68a214a1&gdpr=0&gdpr_pd=0 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:37 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:37 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49879	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:37 UTC	1363	OUT	GET /?rb=PHmS1cuti--C9Oc8Zd_j_18IAKdh0xDgAsCQe_F6DduFePPWkCx6-TLTSQzO4TUCfgOveR0y9aEKkPIOMteSE6eFFsxXgZl8oCRH7bxz8qpQZInzJrMUcZE6TQq4fMcKAx-PxTJ0-FpkCD4zhJfCJZtUQwOYCeqNnwlLIICneiGKuo0bVVk-q03ok2nVR2w-TwMkuEnUnEtYXiNN4kdWpqNesp9b5UUSj-AgMrzpphMFZGG7SylO0c6esmk02S696o9p-urTenHsv9nQLpLxlGp7U7G_kc5lkjH-GRbcUUOlW0Cx6UrV2Yvwk5d5PAZ7YyxfJQ%3D%3D&request_ab2=0&zoneid=4724866&js_build=iclick-v1.785.1-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=907&wiw=1280&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=1263&wfc=2&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-120&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.785.1-auto&navlng=en-US&pnt=0&pnrc=0&bs=145397bc-0884-4ea1-ae3b-d7b7212354f2&wasm=1&userId=k3oa752910bk686846683x2y8sbun072&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.132&m=link HTTP/1.1 Host: eephaush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156356
2024-04-26 18:32:37 UTC	1182	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:37 GMT Content-Type: application/json Content-Length: 4356 Connection: close X-Trace-Id: ec36e64a8f14a398ee3083ae958fa61c Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:37 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156357; expires=Sat, 26 Apr 2025 18:32:37 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Fri, 03 May 2024 18:32:37 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:37 UTC	4356	IN	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 32 36 39 35 39 31 37 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 39 35 38 37 34 39 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 34 2f 36 31 31 38 37 38 30 2f 3f 76 61 72 3d 34 37 32 34 38 36 36 5c 75 30 30 32 36 62 74 7a 3d 45 75 72 6f 70 65 2f 5a 75 72 69 63 68 5c 75 30 30 32 36 62 74 6f 3d 2d 31 32 30 5c 75 30 30 32 36 62 61 72 3d 78 22 2c 22 63 61 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 63 61 74 2e 70 68 70 3f 75 73 65 72 49 64 3d 6b 33 6f 61 37 35 32 39 31 30 62 6b 36 38 36 38 34 36 36 38 33 78 32 79 38 73 62 75 6e 30 37 32 5c 75 30 30 32 36 7a 6f 6e 65 69 64 3d 34 37 32 34 38 36 36 5c 75 30 30 32 36 72 62 3d 50 48 6d 53 Data Ascii: {"bannerId":2695917,"campaignId":1958749,"dstUrl":"https://eephaush.com/4/6118780/?var=4724866\u0026btz=Europe/Zurich\u0026bto=-120\u0026bar=x","catUrl":"https://eephaush.com/cat.php?userId=k3oa752910bk686846683x2y8sbun072\u0026zoneid=4724866\u0026rb=PHmS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49880	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:37 UTC	973	OUT	GET /500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072
2024-04-26 18:32:37 UTC	815	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 26 Apr 2024 18:32:37 GMT Connection: close X-Trace-Id: 55fe2502976f946160412ada180ca033 Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Pragma: no-cache Timing-Allow-Origin: * Expires: Tue, 11 Jan 1994 10:00:00 GMT Vary: Origin Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:37 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49887	192.178.50.68	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:37 UTC	671	OUT	GET /recaptcha/api.js?render=6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:37 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 26 Apr 2024 18:32:37 GMT Date: Fri, 26 Apr 2024 18:32:37 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:32:37 UTC	727	IN	Data Raw: 34 65 38 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4e8/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-26 18:32:37 UTC	536	IN	Data Raw: 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 Data Ascii: R5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.i
2024-04-26 18:32:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49890	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:37 UTC	930	OUT	GET /xxrz/1200x600/793/40/31/4031ee4fad85314df43b8f30d191dad9/4031ee4fad85314df43b8f30d191dad9.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:37 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:37 GMT Content-Type: image/jpeg Content-Length: 418738 Connection: close Last-Modified: Mon, 25 Mar 2024 20:16:12 GMT Vary: Accept-Encoding ETag: W/"6601db8c-6a939" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6950 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gY%2B9cTwDYGK2DfAxLHF2hm9o7Vv0TMQ4C5VNbWtdfp9dD58ZV4BvW85sNT3BLOKkL9xEox2qz6F5PhGG%2Bd%2BA8SGW4XqMZeIJynb2Ahf9j8X8NFUSEaqCbt7tqyWEEltIZYxI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a813295bb3cd-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:37 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 02 03 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 02 b5 77 00 ed d2 1d a0 8e 4c 1d ca 38 62 8a e2 b4 c6 c3 82 29 29 d2 29 15 b3 8f 83 89 e0 35 72 85 91 86 27 bf dc 31 0c 3a f4 94 09 69 ba 4c b2 f9 11 91 c7 ba c2 f5 26 d9 83 59 3f c5 90 cb b9 31 b6 0a a5 ac 55 cf 16 63 94 2a 9b c8 6a c2 d9 2d 07 bc 06 4d ab 25 41 1c 58 b7 78 fa 84 64 d1 f3 b6 9f 24 1f bd 12 6a f2 c2 29 29 eb 5a c7 9b c8 d3 4f 63 70 79 22 e3 5b 7a 92 9d a0 a7 55 63 6b 2a 54 da 52 b7 dc d2 aa 0d 59 6f 1b 5f 5e 60 88 ac 09 e6 c5 aa a6 7a ba dc 0c 61 55 51 47 58 3b 59 54 bb 44 08 d7 8d 92 b4 aa df b4 27 b1 fc a9 2d ff 00 6f e3 e8 dd 0c dd 5d 24 5d 90 c0 c9 47 ad 80 80 69 1b 97 ab 5d 86 7e 46 b5 b0 00 6c 1f 58 c6 c9 5d 12 e1 e2 9e 56 48 1e 4e 87 36 14 35 f7 ec 82 47 ce 3e 44 61 ac e7 51 52 5e 61 e8 24 be 48 73 d3 0b 93 24 66 73 ca 76 25 86 53 Data Ascii: wL8b)))5r'1:iL&Y?1Ucj-M%AXxd$j))ZOcpy"[zUckTRYo_^`zaUQGX;YTD'-o]$]Gi]~FlX]VHN65G>DaQR^a$Hs$fsv%S
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 58 f5 93 a1 6a cb ad 23 e6 bd 6c 84 ad 23 96 8d 82 3a 75 82 7d 14 3a 1d 23 07 5c 88 ce 25 54 a2 ae 5b 86 15 a5 5c 33 19 41 ab 90 9c 45 0c 5d 3a 77 5d 76 06 83 d7 42 de a0 1d f5 d0 a1 b0 37 17 43 b7 7e 8c 05 bd b5 ce fc 5a 16 b4 9f d2 1d 0d 03 2b b7 7d 41 68 3a 92 42 8d d0 aa 41 3e 39 55 ea 49 b3 5e 34 8d b0 b7 72 df 2b 09 55 2d d5 27 f5 6b 06 82 06 b1 86 f9 78 33 90 54 aa f6 5c d1 70 77 16 c2 19 cc 07 5c fb 7a 55 b9 fa 0b 85 44 e6 d2 cd 74 76 a7 da 57 6a fd f8 91 63 64 6b d2 32 ac 4a e2 59 91 80 8c 0b 4f 22 47 c8 65 3b f4 25 14 66 a5 49 47 f8 ca 99 6a cc 42 5f ce 94 7f ee 6b 88 c4 80 ed 75 be 39 5d 7a da b2 bb 74 cb 4e 8a 05 88 24 f1 cc 72 b1 f7 61 95 0f 93 52 99 87 61 99 74 bf 34 f7 68 f3 b4 2a d3 36 c4 ec 3d ca b4 0d f4 3e 96 a2 59 6d b9 11 6a 62 05 ff Data Ascii: Xj#l#:u}:#\%T[\3AE]:w]vB7C~Z+}Ah:BA>9UI^4r+U-'kx3T\pw\zUDtvWjcdk2JYO"Ge;%fIGjB_ku9]ztN$raRat4h*6=>Ymjb
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 5d ee fc d7 c4 3d d6 cf 58 3e 8a ec 92 bc 4b 09 e9 f2 c6 17 1d a1 2d 39 ec c1 7b cf f5 e7 2a ff 00 6b 3d 73 2f de cd 80 84 5c bd 24 5c eb 9c cc dd 32 5e 19 db 18 e2 64 8b 1a 5a b7 86 ec a4 49 ba a4 d5 16 25 60 e6 58 13 84 4e 17 5a 9a 93 65 46 ca 8a ab 59 62 fd 8a 48 cf 7e 57 96 e4 05 9d 3d b6 a8 db c4 d5 aa da d2 ac 34 13 a5 f7 8b 45 f6 1f 33 5b 64 f8 49 8f 3b 6e ff 00 f2 57 d5 2f 16 34 7c db 36 f2 6a 3e dd ef 63 58 b7 76 af ed a2 44 d7 fa df 60 96 7c 6f b4 18 e9 10 ae 6b ed 36 dd 6f b4 b7 5b 5e eb 5d f5 a6 99 06 ad 2c 5e 54 f5 0e ae 4e 06 3d 8c e0 f9 f8 41 a5 a3 a3 0f 5f 13 36 89 45 97 ed 2c fb 4d 51 ac 66 79 f5 ea df e1 3f 13 ea d3 6e 5d 7f bb d9 0a 78 1b 86 87 96 6f 24 26 a5 09 4b 4b ad 6a 6e e2 7d 66 85 c2 9f 32 db ef 83 06 56 42 1e a5 b9 68 f7 05 49 Data Ascii: ]=X>K-9{*k=s/\$\2^dZI%`XNZeFYbH~W=4E3[dI;nW/4\|6j>cXvD`\|ok6o[^],^TN=A_6E,MQfy?n]xo$&KKjn}f2VBhI
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 5f 04 8e 2f 94 70 70 f3 9c a9 89 b2 a3 32 b2 a2 ad 9a 9c e2 8e 9d b0 e0 0d fb 37 d7 56 a2 87 b5 6b b7 5a f7 27 47 25 a5 56 5b 5e 7f 67 53 7d 1a f3 43 7c 51 10 2a dd 7a 90 f2 9b bb 30 ef 42 6c 67 d0 bc ef 95 76 bd 43 67 6d 22 f1 8a 40 5c f6 0e 61 81 30 65 93 41 df 34 3b e0 a5 a5 7c 01 ec bc 4b 70 86 35 7b 53 b4 c8 33 2e 3d 84 f4 57 1b b7 90 f5 1f 95 f8 56 f5 3d f4 0f 23 1f af de cc 03 ef 5f 9d 62 bf 04 17 13 7e 90 40 41 3e ec d2 61 c9 ee 8d 97 07 ce eb 46 cc d6 cb 44 7d bf ed 5a 4f bb 7e 4f d7 86 36 31 7b 33 57 d0 2f 52 a9 6b 87 d5 f8 8c df 70 fd bd 72 f9 17 eb 87 9b 4a b3 e3 db 34 80 4a 6a 9c 96 1b 2e ce 39 6c a3 23 44 94 61 4d e8 02 cb 94 18 f5 25 7f e7 4c 7d cb 35 ab fd 78 26 2c fb fb 5f f6 d3 2f 4a a6 76 8b 71 24 f8 76 cb 5e 8d cc 6e 3a a5 86 35 62 eb Data Ascii: _/pp27VkZ'G%V[^gS}C\|Q*z0BlgvCgm"@\a0eA4;\|Kp5{S3.=WV=#_b~@A>aFD}ZO~O61{3W/RkprJ4Jj.9l#DaM%L}5x&,_/Jvq$v^n:5b
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 9f 03 ba 5e c0 6b cf da 4f ed 93 28 c9 58 3a 45 e9 a6 0d 76 c6 d8 b5 9c 3a ad 79 cd eb 2b 5e eb fd 37 bd f4 bc 90 a9 9e fb c5 92 f9 17 e4 f4 a8 79 31 74 c7 fb 87 95 99 91 be 64 9a d6 7a f3 7c 6b 33 20 69 f5 27 c7 0d d8 cd f4 5b 25 b1 9a 6f 7a f9 ef 7d b1 75 cd c3 a9 f9 28 56 6f 9a 49 bb 3b 5e 65 7b d1 4f 39 fd 18 f1 fb 35 4e ef 68 d6 de eb 67 f9 4c b0 c2 f9 b4 18 f5 d5 f9 af 0b 5d bd 79 8d 6a e5 94 00 9f 4d 6c a5 a8 0c e8 e5 88 64 06 96 30 b2 ad 34 a6 74 3a 65 1d 35 16 f6 46 f2 88 04 eb 16 98 a9 64 16 84 ea bb 16 95 d0 48 85 63 66 52 ba 69 6c 6d 11 7b 46 f2 db 95 f5 c4 de 4b 07 4d 95 ca 0c 2d 9c e1 4c f5 a3 19 5b d6 fb 51 06 ef cd 76 8f f3 f7 7d 74 a3 43 1f d0 75 d7 7a af 63 1e 2d c5 4c 58 7a b9 b6 aa 8b 6a b6 3e 85 5b 2a 5d 51 9f ac dd 0b 25 71 97 a1 00 Data Ascii: ^kO(X:Ev:y+^7y1tdz\|k3 i'[%oz}u(VoI;^e{O95NhgL]yjMld04t:e5FdHcfRilm{FKM-L[Qv}tCuzc-LXzj>[*]Q%q
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 1f 52 c2 60 cc 5d 2e 5a c0 c4 a3 77 c5 d5 ab 5b 90 32 36 39 a6 18 32 a4 6e fa 6a db b5 16 17 8e d7 ae 28 b5 de 34 9d 44 79 5b db 54 a1 47 70 9d 49 75 f3 1b 33 2f 6a e9 e9 7b 7c cd 0f a7 5d df 5b b6 27 52 b3 b4 19 0f 25 7d 59 aa fd aa b6 b1 5d cf b6 f5 47 63 75 7b dd f9 57 e6 64 67 77 53 b0 ad 9a 65 f3 35 ac 38 d9 d7 70 f5 a8 16 25 49 09 69 91 ac ae bd 5c 55 bb 0f 35 59 0a ac 5b 12 28 11 57 1e cd af eb 23 1d ea 62 ba 0c 65 a5 73 33 61 e9 46 77 87 67 34 e7 7a be 79 e8 f4 08 23 f9 db 82 d6 cf 66 50 b8 ac f9 68 af 30 7f dc fe 69 8a 3e 48 85 a6 08 59 e1 94 18 57 b8 df 78 f4 97 6b 75 4a ce f2 3e b2 ea 48 79 46 0b 45 46 04 b3 0e af 82 0d 89 4f fe 8f cb fc fb 1f 22 e7 7e 6c a7 48 67 6b 36 6c 76 ab fa 6e ab 9e 12 75 91 1f db f8 9e 76 e9 90 94 f8 be c6 0a 60 79 80 Data Ascii: R`].Zw[2692nj(4Dy[TGpIu3/j{\|]['R%}Y]Gcu{WdgwSe58p%Ii\U5Y[(W#bes3aFwg4zy#fPh0i>HYWxkuJ>HyFEFO"~lHgk6lvnuv`y
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 4f 37 f3 f4 11 99 43 e9 be 1f 20 a9 d1 0d 5e a3 25 7c e8 c7 b3 fa bd b0 eb 9b d2 65 e6 9c 5e 5b d2 d0 fb f5 af 1b 37 9c e7 d7 0c 6f 42 2a d4 06 19 f6 aa 53 7a a8 33 8a ef 1a bc e2 ea 5a f2 8b b1 7a f9 63 79 85 a4 de 9d f9 95 e8 3c fe 09 e0 8c ea 66 48 c3 9b 1d f8 60 46 75 ab 53 39 b0 06 a3 a7 f5 eb da 3a 28 d2 70 bb a1 e6 8f 97 bb df 3e 58 36 2e 26 e5 46 c1 68 d6 68 90 3f 94 75 ca 8b 4b e2 cf 1b 23 0b e7 9c 2f 7f aa 5d 73 b6 3d e8 d7 c4 b4 bc 7d 01 ec 40 c8 8f 28 7d c5 a6 2e c5 59 60 6f 59 b2 97 a5 3d e4 86 fb e8 03 8b 7a 8d a6 1b bf a5 8a 31 e2 de 0c dd 3d 87 9c 23 d3 e6 0e e2 3f 30 fd af 10 f7 17 c3 4f 76 31 35 3d 0c f3 6b 7c f2 e0 6a 69 75 3b e8 10 f1 9b 49 e9 5f 45 85 bb 5d 5a aa f7 88 6d 2f e6 94 7f 4a 55 19 a7 9d 7b 3b 7d 77 28 b5 d3 15 fb 9e dd 5d Data Ascii: O7C ^%\|e^[7oB*Sz3Zzcy<fH`FuS9:(p>X6.&Fhh?uK#/]s=}@(}.Y`oY=z1=#?0Ov15=k\|jiu;I_E]Zm/JU{;}w(]
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 0d 8b 8b 58 ac 93 e6 a8 08 9b c0 36 60 ec bd 12 ac c1 f2 5a 1b 12 18 f1 0a d4 1b 71 33 59 7a 71 46 c7 3a cd 05 62 0a 5a 93 60 c8 8f 95 b0 b2 4a 8b 96 e3 9b f6 18 c6 17 52 92 18 ce e6 4a 95 7d df 1b 00 3f 2e 39 68 b5 b8 54 8c 2c e3 8a 9d 16 60 b8 39 f0 24 c2 4a 5f 02 63 86 76 e3 5b b2 8b 17 9f d4 81 ab 1b 1f ae 3a 19 af d4 fd cb af 9e 8b 2f bf 78 1d fd 06 4f 50 66 c0 f7 03 b7 a9 cb 0c 46 79 22 ac 54 77 b3 5a 2b b6 f4 98 64 0d 27 16 36 a0 e3 d5 f3 6a 0c 87 68 5f cb d2 39 ed 52 67 4f 42 eb 65 bb ba 61 8b 27 aa 6c 1e 38 cd 02 12 f1 75 a2 53 27 78 6e b6 ed 2d 06 e9 55 e8 67 39 74 14 dd 31 5a 56 8f b3 0c 1a 57 04 98 ae ab e8 0e e8 f9 fb bf 5e 53 d5 12 6d 4f 76 cf d0 da 0e 99 86 ae 31 91 b1 41 3c 77 c3 25 7c a2 b6 e6 d0 76 59 03 4b 27 ec 3e b1 ae 6b e7 cf 1d f8 Data Ascii: X6`Zq3YzqF:bZ`JRJ}?.9hT,`9$J_cv[:/xOPfFy"TwZ+d'6jh_9RgOBea'l8uS'xn-Ug9t1ZVW^SmOv1A<w%\|vYK'>k
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 46 e2 91 2a f0 bc c6 f4 c3 cc 47 03 36 80 ba 69 d8 ef 3c fa 77 c7 eb 7c cf 69 70 a7 44 c8 26 20 85 78 44 42 03 ef 1d c8 8d 9d 5e 9d df 1f 79 ee 9d 3b e0 af 7e d0 6c 9a fe c5 f2 fb 42 7b e0 31 14 e1 4c 32 2e 3c 5a cb b3 9a e4 23 7e 64 e6 6e 0e 8c ea a9 eb 5e b5 6c ae ba f9 ad ab a3 4f 76 9f 5c 86 e2 ee cd d2 7b 56 ab d6 35 d1 46 5d c7 0c f8 e6 53 48 a8 6f 3e 7d 08 d1 9d 9c b8 33 88 d4 ba d9 d5 98 7e e3 ee 2c 73 a1 fc eb dc f5 15 bd 57 8e f7 3d cb a8 e5 04 5d aa ed 4d b5 06 ef f0 46 8f 8b b3 1f 57 25 dd 98 da 71 aa c3 38 30 18 e3 98 06 09 95 6a 30 30 0d 8d 68 81 5d 9f 1b a4 01 c6 a1 5a f2 34 bd af f8 ce 91 07 65 09 d4 7d 9a ae fb a9 8e d2 6a 33 62 f3 40 e0 b2 5d 17 3d b2 d2 82 e9 e6 7d 23 31 5f 99 10 6b 5c eb d7 a5 3d cc 68 ea ec 01 fd 16 30 e2 30 09 16 b3 Data Ascii: F*G6i<w\|ipD& xDB^y;~lB{1L2.<Z#~dn^lOv\{V5F]SHo>}3~,sW=]MFW%q80j00h]Z4e}j3b@]=}#1_k\=h00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49891	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:37 UTC	929	OUT	GET /xxrz/250x400/793/3e/db/3edb97e60d9d7d5a63efc6b02be95a6b/3edb97e60d9d7d5a63efc6b02be95a6b.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:37 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:37 GMT Content-Type: image/jpeg Content-Length: 40537 Connection: close Last-Modified: Mon, 25 Mar 2024 20:15:40 GMT Vary: Accept-Encoding ETag: W/"6601db6c-5be7" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6950 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gMUMnrMblOWf8hOrsunYq0Ah9wQKcNp1Fa1unKJdfK5AHyXOz6tdt7tZ7CjkHOulRTjOYpb%2BjxMRwZP9vSjQ0J6ZCsiymdD5sbXl8l8bzVRBKbtnxoBL3mzp4eAd%2BMRVpgMV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8132f345c69-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:37 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 6e 25 2a 8b 35 53 28 33 6d 52 32 20 52 90 40 b4 00 1f 5f 9e 71 7a 3d e5 0f cd fe a9 c9 99 a3 bd 47 ac 8b 75 59 7b ed 4e ae 5d 83 fa 07 34 de e6 7c b7 bd b9 1d 19 3d 0f 4b d5 93 5d a5 2c a9 34 6d a8 db 48 d7 4c 53 88 bb d9 d5 f3 1c be 25 a9 8f dc 75 a3 c3 5a 13 61 63 71 68 9f b1 d8 e3 f4 7d aa 9a 41 9b 0b a4 96 90 09 52 40 05 24 3e ac 7c b0 f4 1b cd 6f 98 7d 7e b4 f4 f7 ce 5f 43 df cf 62 b0 3a aa a4 7d 68 cf 33 d9 dc 67 2f 6a 2a 8e e5 e8 15 6f a1 6d 0e 89 86 67 5f 47 56 97 65 55 7a d4 bc 2a c0 86 f4 3c e4 12 bf b3 ab dd 5c 6b 9e 7f ca fd c3 05 e8 26 67 f8 ff 00 96 46 98 5f e3 8c 56 da a4 9b 2b 84 a9 20 b4 90 00 00 0f 70 39 aa db e6 af 9a fd 86 cf ec ce 2d ed 8a e5 e8 16 78 bc b3 5b 9b 8c 52 57 94 2d 7b e8 16 eb 3e b1 cf d6 85 d5 13 9a 7a a6 20 35 b4 aa b8 Data Ascii: n%5S(3mR2 R@_qz=GuY{N]4\|=K],4mHLS%uZacqh}AR@$>\|o}~_Cb:}h3g/jomg_GVeUz*<\k&gF_V+ p9-x[RW-{>z 5
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 04 a8 80 d2 12 07 ee 7f 86 16 fa 8d 7d 71 3c 79 89 08 c9 7b d7 2d 88 34 2a fc bc 9c a4 f0 c9 9f d1 f5 86 df 01 6f 5e 8f 62 f2 ef 96 bc b3 4e cf d3 b6 87 85 be f3 c7 2e 11 07 b1 bc f5 51 9e c6 94 f8 7f 38 72 9f 40 bc 91 a3 19 f6 f1 02 80 7e 93 22 30 49 98 05 25 44 09 00 01 a5 4a 04 03 20 92 4a 6b 35 e7 74 1e e0 f3 27 3a dd d8 1d 17 3d c1 df 19 3d dd c0 93 26 11 c0 8d 6c 6c 66 a7 a9 b9 41 a7 d4 af 7a 92 22 1c cb 52 14 5a 38 46 12 bf 7c 42 94 00 81 80 48 22 00 14 00 05 00 24 64 00 90 66 00 04 02 82 4c 14 83 50 24 cc 02 02 c8 12 46 60 08 10 28 d0 03 22 42 83 19 ac 02 41 18 11 80 06 69 50 02 32 04 05 24 14 a0 00 24 00 06 00 20 00 0a 00 00 00 02 4c 00 30 00 00 00 24 c0 00 60 00 48 00 00 00 a2 00 00 00 08 00 1f ff c4 00 2f 10 00 00 06 02 00 06 01 03 04 03 01 01 Data Ascii: }q<y{-4*o^bN.Q8r@~"0I%DJ Jk5t':==&llfAz"RZ8F\|BH"$dfLP$F`("BAiP2$$ L0$`H/
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 96 e7 d3 31 f1 35 ef 59 09 02 6c 81 29 e0 fb a4 61 47 7c 9e fb 48 fb 98 c4 ca 38 79 29 85 ed c0 f8 59 fd 47 ce 85 0a e7 fb b3 a4 78 cc 9b 52 1c 94 a5 10 e1 f3 c6 8d 9b 0a bf e2 33 2e 99 0a a2 9a f2 50 99 b2 08 4e 91 d2 32 32 44 c9 02 43 b6 1c 57 be 4e fe 2f fd f9 25 ff 00 91 0d f1 21 43 ff 00 6c 58 b1 7c ab 9c 9d 1b 2a 97 1a c2 b9 05 df da b2 f9 57 b8 73 c3 97 31 72 31 64 49 4a 95 f4 cb 58 c9 3c 42 74 81 90 91 47 90 90 25 3b 66 ea fd a8 fd f2 74 bd 4a 3f 74 0c 61 5d 35 c4 7c c4 95 f9 d7 33 d4 a0 fc 5c b6 97 10 9e 8b 81 8e c8 82 5d a3 c7 ac ad c7 0a a7 b9 ef 22 ef 48 9f 22 86 41 f2 31 31 ef 4f ac 38 60 f9 b8 5e a5 1d bb d3 e8 cb de 11 42 4a c3 a7 d4 aa f0 af 0a 12 9f 5a 23 cf 59 28 cd 64 41 97 e8 e2 bf 46 e4 cb 4c f7 c6 49 ff 00 59 07 bd cf 76 c4 a7 2c 3c Data Ascii: 15Yl)aG\|H8y)YGxR3.PN22DCWN/%!ClX\|*Ws1r1dIJX<BtG%;ftJ?ta]5\|3\]"H"A11O8`^BJZ#Y(dAFLIYv,<
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 3d c1 22 11 36 99 91 94 b5 66 5c 8b 0d 19 6c d7 7d cf 0b f0 a1 16 33 b3 65 6a f8 08 ba d6 25 05 41 c6 c9 d4 f1 d7 33 ad e2 1b c4 49 c7 e5 70 eb 6a 8c d9 ea 35 31 44 f3 61 e8 bd 69 90 c2 01 b4 6a 0f 32 96 81 a5 04 19 8d d6 71 e0 10 4c 46 da 27 10 57 92 26 9a 19 5c ea a4 0d dd 4a c6 ba 2b ce f9 70 9f 10 ac 86 fc a6 cf a9 a3 fa 3a 3a 4f 8c 7c 3a ca 6f cb c6 c0 67 17 86 79 34 69 63 a8 dd fa 52 eb 36 4f 34 6a 0f 45 06 d9 da 99 35 12 21 10 62 2a 52 4d 33 ef b3 67 36 7a 5b 7e 4e 98 f4 d2 de b8 a3 83 d7 44 a9 52 67 49 f2 be 57 cb 42 d3 31 d8 dd 42 2b 8d 3a 49 6a 82 89 63 72 c7 65 33 38 26 22 f6 e3 c9 47 b3 49 90 34 1f 52 99 52 83 cc 03 8a b3 3f 8d f5 1a 11 6a bb 8e ca dc 12 72 b8 cc 73 b0 f0 99 9c c1 1a f0 98 08 3c 5b e3 01 65 dc 33 33 3f e8 be 7f a7 0e 23 94 f8 Data Ascii: ="6f\l}3ej%A3Ipj51Daij2qLF'W&\J+p::O\|:ogy4icR6O4jE5!b*RM3g6z[~NDRgIWB1B+:Ijcre38&"GI4RR?jrs<[e33?#
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: f6 f6 6d 71 dc f4 89 b8 94 0f 2e a3 dd ec ed ad 5a dd f1 90 34 c5 2c ba 9c 72 29 ab 3c 85 49 68 89 67 c4 24 b9 8f fb d4 13 41 1c 71 92 40 55 17 42 19 d9 b1 cf 5b e2 35 c8 e6 18 8d c0 a7 e1 16 ad c7 1e 2e f3 f0 c7 8d ee 2d 49 27 33 09 e2 90 5b c3 ab 39 d5 1d c2 98 e4 c6 e3 b1 93 95 58 f0 b5 bc b4 bc 73 b5 c9 8a 57 b0 1d aa 2e a3 68 04 d7 03 b3 2d da 48 64 84 3a 43 a5 48 ed 05 5d 25 a7 09 b9 5b 47 b1 8a f5 96 0b 69 2e 24 9e 49 d7 5c 97 16 f1 ce 44 1d 84 b1 2a 47 1f 69 a1 58 ac 8c e5 4b 31 c3 69 0f c3 ac df 8b da 5b 76 1f c0 93 83 25 db 47 da 3e f3 1e 0c 6f 0b 67 39 1f de 30 d8 18 1b 63 91 22 b8 cd a4 36 d7 51 c7 6e 9a 16 4b 1e 19 39 19 2d fc 5b 9e 1f 6b 71 29 df 27 bd 2c ae 71 c8 67 03 6d aa 4e 1b 6f 69 0f 0b 71 0a 5c 76 d7 2b c3 b8 88 79 fb 41 15 d9 74 97 Data Ascii: mq.Z4,r)<Ihg$Aq@UB[5.-I'3[9XsW.h-Hd:CH]%[Gi.$I\D*GiXK1i[v%G>og90c"6QnK9-[kq)',qgmNoiq\v+yAt
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 0d cd ba 08 67 1e 91 18 0a 10 b1 ef 20 5c 7f aa ac 78 bf 07 4b e9 6f 0a 03 2d cd 92 c6 43 77 15 26 19 d7 af 96 ee 3b 33 9d fd 9a bd 96 c8 c1 15 c4 53 c0 81 d2 31 a1 24 4d 98 85 ce da bd f5 ae 02 ba 9e e2 20 73 a8 38 91 76 3e 7a 85 4b 77 60 03 96 bf 4d 4d fe 6d 7f fc 8a 87 8e f0 eb 28 e4 54 8a 4b c7 6f e7 01 23 df de f9 23 fd 3b d5 e7 ed 1f 11 ba 05 15 fd 1a 1f 08 e1 27 61 d3 51 ef 7f b5 12 49 24 92 49 39 24 92 49 3f f6 8f ff c4 00 3d 11 00 02 01 02 04 01 09 04 08 05 05 01 00 00 00 00 01 02 11 00 03 04 12 21 31 41 13 20 22 32 51 61 71 81 91 05 a1 b1 f0 10 14 23 42 52 c1 d1 e1 30 62 72 82 f1 24 33 34 50 92 b2 ff da 00 08 01 02 01 01 3f 01 30 38 d1 31 4e 7a 35 73 68 f9 e1 56 cc 4f 95 5a d4 01 58 5b 87 45 9a b0 73 86 56 d4 15 8f 5a 74 36 dc a9 dd 49 1f 0d 69 Data Ascii: g \xKo-Cw&;3S1$M s8v>zKw`MMm(TKo##;'aQI$I9$I?=!1A "2Qaq#BR0br$34P?081Nz5shVOZX[EsVZt6Ii
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 3f 3a 55 b3 72 e6 c2 07 7e 95 6d 23 73 98 d6 6f a1 4c cf 3b db 58 26 51 88 b8 92 d9 ee 2d ed 35 86 40 a3 df 1b d5 8b f2 3e 77 14 d5 0c 74 55 2c 7b 81 ab 76 2f 98 cd 0a 3b f7 f4 ab 56 52 d8 07 ac c7 89 ae 97 75 28 3a f0 a5 ac c1 6a db 89 81 ce 70 08 32 01 1d 86 b1 b8 0c 33 2f 29 c9 85 20 ea 2d ac 66 9d 35 81 c2 ad 61 2d 2d b5 d1 58 46 8d a9 9d 01 de 6b 92 8d 82 aa ff 00 28 88 f4 a2 00 e1 4a bc 7e 82 62 8d d8 ee a5 6a c3 a4 8c c7 6e 1c db f7 0a 2f f5 1d 7b 80 e3 59 d4 f1 ac 4c fd 5e ee 50 cc d9 09 54 48 0c c4 70 13 3a d2 e8 96 c4 65 e8 2e 9d 86 04 8f a0 ad 6b 45 c0 12 6b 30 e3 a5 2a 93 ab 10 83 81 3c 7c aa c6 18 46 66 0c 3f 0e 6d c8 ed 8e 1c ec 60 7e 44 b5 b1 99 d2 1b 2f 68 fb c3 d2 86 3a db 68 a1 f3 f1 b7 94 c8 3e 3d 5f 7d 72 dd 10 e4 c0 68 8f 13 c2 af 5e Data Ascii: ?:Ur~m#soL;X&Q-5@>wtU,{v/;VRu(:jp23/) -f5a--XFk(J~bjn/{YL^PTHp:e.kEk0*<\|Ff?m`~D/h:h>=_}rh^
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: 7c 9e 9a 71 c2 ab 89 27 1a 7e 41 08 c4 a5 63 c3 21 34 ca 2d 85 b6 80 b8 26 f1 5d 01 d0 68 6d 4e fb d8 03 c5 99 a8 a4 39 a9 0b a9 bd 6e 7a 8e 96 ae b6 a4 1e bf 5e df 84 7d 77 7c a0 c2 7b cf a1 3a 1e 97 8c f3 cf f5 82 92 bb e4 30 e9 40 55 e3 61 95 b9 69 75 97 31 28 b7 8a b4 36 c8 d1 34 4f 19 26 b7 a7 0a 7d 6a d5 22 14 dc b3 7b 86 12 a2 4b aa 34 5a ba 0a 28 96 db 19 d9 7b c3 c3 45 22 17 e7 5e 5a 95 5b f1 58 28 d4 a4 12 a2 ae 97 ed 6b 95 23 81 b7 bc e6 4b 71 6a c3 d2 b7 17 be 7e e8 f3 af a4 8c c0 09 60 e1 c3 ad 56 8a 9f 6f 5a 18 e3 4a 96 46 4a 52 28 3b c1 4e ed 76 ea 81 d2 b7 8a 62 c2 6b 91 56 47 9d 17 45 a3 da 23 71 32 2f da 17 ae b5 34 3f c5 a8 eb 15 07 e6 7d 9d f4 83 43 5d 7b be cf 6c 1f b3 ca 9d 81 75 e3 92 67 6e cb 35 c6 7c fe cb de b0 fe 04 a7 87 8e 5e Data Ascii: \|q'~Ac!4-&]hmN9nz^}w\|{:0@Uaiu1(64O&}j"{K4Z({E"^Z[X(k#Kqj~`VoZJFJR(;NvbkVGE#q2/4?}C]{lugn5\|^
2024-04-26 18:32:37 UTC	1369	IN	Data Raw: af 5d 07 74 5c 50 f3 8f 6f d7 bf ec 3d 60 c6 c9 65 74 dc ed 3f bc ec 87 ab 70 46 d2 96 76 59 b1 4c bf ed 2a 60 de a9 04 02 52 40 a4 4c 34 73 69 f5 a3 fd ab 23 4b 7b 2d ca 0f a4 2d 05 76 b1 56 f6 b5 6f fd 21 46 99 aa b7 d4 6b dd 14 c3 52 30 90 3c 44 60 0a a1 e4 2a 28 74 ec df 3f 61 c2 ad 23 01 01 40 8e d5 06 7d 09 ad 8e 74 1a 58 0a 64 ac 02 a2 e7 43 9d ea 12 e0 71 19 fe 64 d6 dc 2b ad a1 c4 ee 49 f5 71 ad 1b a2 52 45 93 64 b8 92 12 4d 7f 11 35 ba ca 71 a9 50 a4 a5 9a e1 aa 6a 9b e7 a5 45 e8 3a 42 31 21 48 02 84 1c 27 99 e6 39 88 41 dd 8e 0f 5b d5 fe 2c c0 cb 15 7a c5 3f 30 d7 9d f9 c1 4f 22 ab e8 39 56 0f 3a 9f 64 1e e8 3f b9 2d 3b 2e ac 0f c9 cc 33 34 c2 bf 2b cc 38 97 5b 57 5a 2d 20 d2 26 1f 64 00 cc e2 59 9d 66 85 4a ab 73 4d 21 c0 ba a8 03 45 d7 10 ce Data Ascii: ]t\Po=`et?pFvYL`R@L4si#K{--vVo!FkR0<D`(t?a#@}tXdCqd+IqREdM5qPjE:B1!H'9A[,z?0O"9V:d?-;.34+8[WZ- &dYfJsM!E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49892	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:38 UTC	511	OUT	GET /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=e19fad2c-4229-4a11-ae30-2275b60012af HTTP/1.1 Host: eephaush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156356
2024-04-26 18:32:39 UTC	446	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 26 Apr 2024 18:32:38 GMT Content-Type: application/json; charset=utf-8 Content-Length: 25 Connection: close Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-04-26 18:32:39 UTC	25	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 22 3a 31 30 30 31 7d Data Ascii: {"status":0,"error":1001}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49889	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:38 UTC	1324	OUT	POST /?z=6118780&syncedCookie=false&rhd=false HTTP/1.1 Host: eephaush.com Connection: keep-alive Content-Length: 862 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 Origin: https://eephaush.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://eephaush.com/afu.php?zoneid=6118780&var=6118780&rid=33-IJ2mCiw9DGbmF2LWarg%3D%3D&rhd=false&ab2r=0&sf=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.132 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156356
2024-04-26 18:32:38 UTC	862	OUT	Data Raw: 7a 6f 6e 65 3d 36 31 31 38 37 38 30 26 72 62 3d 6b 58 33 6c 31 6c 32 77 41 6e 38 4d 6a 52 4f 72 36 32 6a 5a 6b 58 57 7a 38 74 55 45 4d 38 75 2d 2d 33 55 6c 6c 67 7a 61 4d 45 54 79 64 5a 51 79 73 63 58 4c 53 51 79 6a 4e 61 7a 68 66 51 77 7a 37 4b 36 74 47 42 69 32 57 51 55 72 52 55 7a 47 78 30 56 59 34 46 5a 36 5a 4e 50 51 51 74 6a 70 58 64 4c 57 75 6d 53 77 4e 75 54 50 68 39 41 6c 62 63 6a 73 72 64 30 50 41 65 6a 51 48 37 2d 2d 70 31 74 35 48 2d 50 54 66 6d 4f 32 32 72 65 41 39 47 4f 44 4b 38 35 78 43 42 30 68 44 4b 65 33 42 45 4b 76 52 6e 47 30 66 45 54 32 41 6b 4d 62 79 51 79 63 77 4f 5a 7a 55 42 65 38 5f 69 70 75 58 6a 43 6b 46 64 54 74 42 53 5a 78 66 74 6d 6f 78 43 59 6e 61 70 38 39 6a 66 36 44 6f 66 6d 38 74 30 71 59 54 63 46 69 4b 57 36 4d 7a 4a 6d Data Ascii: zone=6118780&rb=kX3l1l2wAn8MjROr62jZkXWz8tUEM8u--3UllgzaMETydZQyscXLSQyjNazhfQwz7K6tGBi2WQUrRUzGx0VY4FZ6ZNPQQtjpXdLWumSwNuTPh9Albcjsrd0PAejQH7--p1t5H-PTfmO22reA9GODK85xCB0hDKe3BEKvRnG0fET2AkMbyQycwOZzUBe8_ipuXjCkFdTtBSZxftmoxCYnap89jf6Dofm8t0qYTcFiKW6MzJm
2024-04-26 18:32:39 UTC	1330	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 26 Apr 2024 18:32:39 GMT Content-Length: 0 Connection: close X-Trace-Id: 17f1c298dadc3c47634674b72dc8060f Link: <https://bitpanda.pxf.io>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Referrer-Policy: no-referrer Location: https://bitpanda.pxf.io/c/4484296/1834392/15871 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://eephaush.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:39 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156356; expires=Sat, 26 Apr 2025 18:32:39 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49893	37.48.68.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:38 UTC	431	OUT	GET /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=145397bc-0884-4ea1-ae3b-d7b7212354f2 HTTP/1.1 Host: datatechonert.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:39 UTC	454	IN	HTTP/1.1 400 Bad Request Server: nginx/1.19.10 Date: Fri, 26 Apr 2024 18:32:38 GMT Content-Type: application/json; charset=utf-8 Content-Length: 25 Connection: close Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-04-26 18:32:39 UTC	25	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 22 3a 31 30 30 31 7d Data Ascii: {"status":0,"error":1001}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49897	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:39 UTC	930	OUT	GET /xxrz/1200x600/793/82/56/8256aff80a99d898f6a5cab994ba5e0b/8256aff80a99d898f6a5cab994ba5e0b.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:39 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:39 GMT Content-Type: image/jpeg Content-Length: 405569 Connection: close Last-Modified: Fri, 19 Apr 2024 08:21:21 GMT Vary: Accept-Encoding ETag: W/"66222981-378f2" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6952 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yp7OSQXUti%2F0PfAll%2Bixb9756ibECmR2WQL%2BnjQmaA5lGr5Y8HvgzuiRrFMu0nHAJVPIxAa1dk5fWwCY1uqvg9rHv2PBfARl%2BXDyysBNYsBokV%2FcvK2luHd5FEjoby67oJib"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8214fa20a1a-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:39 UTC	643	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 9b c8 de 17 13 7d 8e 03 36 32 14 01 23 09 7a 43 cc e9 7b 81 26 73 e2 05 28 b3 60 62 2e 63 c0 62 61 2b 31 50 2d cb 65 c0 23 b1 72 85 60 b4 d4 3c 4d 07 56 07 30 dc 41 2f 8a 03 85 83 a5 ea e0 e5 e9 67 20 c7 70 94 4c 5f 70 4c b8 d0 78 97 c3 e7 dc d0 21 34 5e 37 ac 13 9f c2 ae c0 b0 de 9f a2 80 ce 13 5b aa 65 c8 65 9e 19 92 be 2a 08 a2 23 af db 91 83 16 fc ea 78 31 9c c3 2f 28 e1 70 f0 38 c1 fc 94 19 1c de b6 02 45 0d a4 c8 65 58 a8 f3 e8 94 cc f5 89 85 d3 97 74 59 16 1d de de f2 f3 25 57 e8 69 b4 3a 1d 1f 37 92 fa e3 8a 3e c7 56 57 b6 22 7e b2 93 68 a2 dd f0 bd d1 6a 26 db 1e 7e a8 ff 00 06 44 90 6a 9b 4e ab 3d ad 95 dc 15 a2 fd 51 7d a6 05 dd a5 e1 67 0c e6 b5 93 12 ec 06 33 19 18 36 15 ac 03 24 cf e6 73 a8 fd cb d0 e6 3e 30 26 a5 17 8d b5 af 2e 76 31 b6 f5 Data Ascii: }62#zC{&s(`b.cba+1P-e#r`<MV0A/g pL_pLx!4^7[ee*#x1/(p8EeXtY%Wi:7>VW"~hj&~DjN=Q}g36$s>0&.v1
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 03 65 57 da da 94 4d 13 d9 5e cb 1d af 8f c4 88 d9 da 08 7d 29 45 92 b0 4f 62 ce 22 13 fc 74 69 a9 9d 3e 30 40 7c 54 03 c3 c1 2e 1c c1 e0 ce 19 30 a2 98 21 3c d7 cb 8f 12 e3 71 23 8f cc b2 fb a7 2c a5 2b a0 1f 0f 9a 38 22 0a c0 59 27 83 e3 07 9e 5f 13 04 34 76 2f 60 92 b5 2a 11 2c 7c 9e 68 2f 7e cf ee 95 7e 1f 0a d8 27 a5 67 0c fb df 7d 5f 46 74 33 07 7d f6 78 08 fb 84 7e 98 9a 42 c2 61 47 84 5e 70 30 3f 1b 24 f3 5f 53 30 5c e5 aa 37 46 bb b4 8e 14 d6 97 c5 fa d6 54 d9 97 df c4 8e 41 02 84 f0 0c 72 61 3c 4a ef 2c b1 33 7e 90 d1 ba 2e 3c f1 26 ce 54 e2 c4 1b 28 5f 55 40 a5 7c e9 86 78 cb 38 f0 d1 cc e5 90 1b 2c 62 55 9b 9e b0 a5 a3 55 fc 99 ec 9e 29 f2 5f 5e 7d fb 91 fc e7 7e 87 7c e3 d7 74 9d 9f 56 75 26 cf 92 fc c7 c7 f4 a3 42 7a 5c 9e 11 48 45 43 5a e5 Data Ascii: eWM^})EOb"ti>0@\|T.0!<q#,+8"Y'_4v/`*,\|h/~~'g}_Ft3}x~BaG^p0?$_S0\7FTAra<J,3~.<&T(_U@\|x8,bUU)_^}~\|tVu&Bz\HECZ
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 16 ea c3 3b 0a ce d5 6c 41 9f a1 b9 ab 7a b6 ab d0 06 d8 e6 17 8d b3 fa fc 0f e6 57 41 7c ff 00 e8 3f ae 7c a3 a8 77 24 e4 6b 0d 5e fe 6f a0 fc 9e d1 68 d0 dd bd 9d 63 5f 7e 8d 6b 8b be e7 8a 37 93 fa 73 47 ac 7f 36 cc ee 2e 59 a5 eb 77 52 ab d7 1f 40 71 a3 03 92 7a c0 6d 75 07 7a 79 6f 4f ae 9e d7 ac a3 47 7f fe 89 fe 5a 75 47 8c fa 87 eb 22 6d 53 b5 7d 27 ca e3 e7 cd ed a0 31 76 79 03 59 de a9 11 ac a5 75 b0 0d cf 37 ad f1 61 64 eb 50 69 1b a6 b2 2b fd 8a 74 85 fa 9f 96 e0 67 ac 21 50 3e 85 b3 91 93 02 4c 3a e2 2f 66 24 85 70 36 6b 02 d4 43 93 e0 31 7a f7 70 09 81 ec f9 74 89 89 93 09 0d 9b 58 3a 22 3c 2f 0a 19 10 b3 1e e2 4e 02 69 99 57 f8 68 39 43 46 31 43 24 2a 09 c0 e7 29 69 0a 74 f9 ac 52 2e b9 85 45 29 56 99 9d 85 b9 33 51 72 72 f0 32 56 4a 38 38 Data Ascii: ;lAzWA\|?\|w$k^ohc_~k7sG6.YwR@qzmuzyoOGZuG"mS}'1vyYu7adPi+tg!P>L:/f$p6kC1zptX:"</NiWh9CF1C$*)itR.E)V3Qrr2VJ88
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 23 17 0f e9 be 04 ce c0 39 61 24 63 11 13 1e 42 48 e1 64 7c fd 17 96 6b 74 ed ea e8 53 d0 9a bf 9e cd f2 07 e2 87 4e 18 86 15 8f 68 91 f5 ff 00 35 2b 30 08 bd 86 e0 a5 cc 6e e6 b4 64 98 bb 14 9e 34 aa 62 68 d8 a3 a1 21 ac 51 51 8d 78 be 59 6a 50 b5 3c b9 f9 a9 fb d1 f9 25 8b f5 12 a8 97 eb be 2f b3 e4 1b de e7 e5 0f 69 f2 fe 94 53 cb 9b 5b 3f 4a df 5f df 35 7c 7d 7e 5a 73 61 27 73 34 66 3e 1e 9e b9 ec 6a e8 78 b7 f9 da 94 e1 1f d0 71 96 c9 1c 16 f2 b6 25 97 4b be cd d4 da 3f a3 7f 90 9b db 13 67 66 ea fa 25 b1 d9 da 9e 1d b9 b6 c5 1c 87 e7 7a f2 13 d7 45 78 20 3b 15 fa 47 a1 f8 db 73 78 ff 00 61 fa 19 7d e3 6f d1 ef 3d 9f ac 4e a8 1d 9f 94 6d 3e e3 4c 2b 83 7b 8e cd ce f4 1a 60 16 ea af b2 be ba d5 b2 ea 6a eb 6d 5b be 34 25 7b 14 5a fb 9a 2e e6 6e d0 ae Data Ascii: #9a$cBHd\|ktSNh5+0nd4bh!QQxYjP<%/iS[?J_5\|}~Zsa's4f>jxq%K?gf%zEx ;Gsxa}o=Nm>L+{`jm[4%{Z.n
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 28 cb c7 9b 66 a2 08 3b 23 5a c3 99 85 85 0d ec 34 b0 44 99 6f 33 28 1a 09 89 03 53 85 b8 b4 11 3f 31 8b ea 9b 65 ba cf 5f 98 58 33 93 c6 5a 6d 7c c0 28 d4 7f 41 e8 2b b1 88 b2 8b 0e 84 c0 59 0d 83 98 06 47 22 7f 70 c3 94 b3 28 15 2e eb 25 72 0b 27 f4 32 c4 43 2c 98 4c 50 94 78 f3 e2 c9 80 86 0f 34 90 56 31 50 eb 35 6e ce 74 67 77 59 b6 ce 75 9d ea b5 c7 9c 9a 9c 14 a3 ad 8a 9b 6f b7 73 2a 4e 65 c5 d5 12 02 e5 70 bd c5 91 2d bc e9 16 cd 89 47 9d 59 af bd ac 22 fe bb d9 43 e2 ad 3f cb 6e a3 dd af 97 e8 3f 2f f5 df 55 d1 e9 7a 6d 27 5b b6 28 d4 a8 b7 f4 9c 9c 53 91 d8 bc 65 ce a9 6a 76 ea 7f ca 80 43 77 d6 cf d2 4d ba be ee d0 bb 97 94 69 ec 77 f6 eb fc 9e eb 55 2b 60 f1 dd e9 4d 9b 7c 85 1d fb 4c 7a 9f 3f f1 a8 9a e8 52 98 e0 18 53 b6 15 2f 35 f7 29 34 7c Data Ascii: (f;#Z4Do3(S?1e_X3Zm\|(A+YG"p(.%r'2C,LPx4V1P5ntgwYuos*Nep-GY"C?n?/Uzm'[(SejvCwMiwU+`M\|Lz?RS/5)4\|
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 5b f1 bc a1 f0 19 2c f0 82 08 99 b3 1f ee 9f be ce 2e 3f 3d f8 6e e9 a3 ce 6e e0 30 35 7f 4c 5e 4b f7 1e 20 95 87 4c 10 13 97 3a 20 cd 8b a7 0c 72 c2 1d e6 7e e4 b6 e7 e7 d9 03 b3 92 2f 79 fe 4d 87 a0 ec c9 c4 78 74 e6 85 3c 31 c9 6b 8a 0e c7 e8 82 e2 64 28 b8 83 b3 4f 92 08 b2 4c 23 1a 7c 19 72 33 12 04 d6 65 56 b1 51 09 f8 3c fb 2d b6 9e ef ab e5 64 5a 31 d6 67 54 60 8c 2c 48 cc 17 6b b2 43 38 06 ad 6d e2 2b 15 50 6a 3d f2 cf e6 97 9b d6 55 ad 83 45 e7 80 8a 11 6c a5 d3 f5 4f 4e 9b 52 07 d8 03 9e 2e c8 d0 bb aa ee 1d cf 5f ec ea 15 65 eb 85 4c ad 28 d6 63 b7 e9 ff 00 94 f5 34 ee fa 22 b8 0c 7a 91 3a 2a f7 fa 5a 78 b6 1b c2 5b 02 fc 53 ff 00 cc ee d1 fc 91 5f b4 d3 ba ba d5 af 75 f5 89 2b 7a b1 b1 99 cd 00 6f 5a 23 2a d0 9f 0f 23 c2 fd 6c a4 dc 30 b4 f7 Data Ascii: [,.?=nn05L^K L: r~/yMxt<1kd(OL#\|r3eVQ<-dZ1gT`,HkC8m+Pj=UElONR._eL(c4"z:Zx[S_u+zoZ##l0
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 63 f5 bd 26 fd f4 4f 27 44 2e c1 26 df 90 9d 11 37 9a 8f 96 c0 22 5c 3d 9b 72 7b 3a 14 f7 95 2b ad 71 cb 68 19 b5 3b 11 b1 af 55 36 b9 5b 7a 6e 4b be 96 d0 b9 ba b5 6a 3b 57 67 fb 3d 4e a9 77 2b f5 f2 10 bc bb e1 99 e6 ba 2e e7 25 a2 f7 a1 c0 3e 91 d0 31 50 95 d1 9b 20 18 c8 4a 44 24 40 0b 24 f9 77 09 81 98 f1 2e 1d 80 b0 c5 98 1e 34 59 16 4f 21 86 4c 2f a0 c3 a4 0a 3c c1 d2 48 1c b0 ff 00 64 8b 18 b0 41 23 18 2f 98 88 4c 06 45 ae aa 2c 0a 6d 9a ee cb a0 50 de b5 fb c6 4c 31 8d ce 18 32 15 a1 d6 6b 7e f6 49 59 dd 95 2d 57 44 e6 52 2c a7 b0 a4 a5 da 6b da 38 53 d2 22 ec 79 32 a4 c9 5c 6d d5 0b 1a 2c ed cd 40 75 4e 91 79 54 6a af 4f 2c 67 81 6c 6c bd aa d6 f6 7b bd b1 fc f3 11 b6 4b 5d bf 07 f9 9d c7 dd 47 f9 fa 7e 8d c5 05 ae dd f6 78 39 74 4f e7 ed da 6b Data Ascii: c&O'D.&7"\=r{:+qh;U6[znKj;Wg=Nw+.%>1P JD$@$w.4YO!L/<HdA#/LE,mPL12k~IY-WDR,k8S"y2\m,@uNyTjO,gll{K]G~x9tOk
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 4b b1 e5 b0 06 a9 a5 c2 c7 4a 14 74 6e ce b7 6a ad 85 c5 c5 61 e7 22 a4 a1 7a da bb 43 65 f3 25 8d 8e 2f 99 3a ef 9d 15 73 49 02 de bb bd 8b 6d a7 2b 5e 35 4c c8 33 74 31 a4 f5 83 35 35 05 c3 d3 6b 5e b0 f4 4b 7a b5 5e b7 75 ef e5 27 e9 f7 cb fe d9 dd 5e 72 bf 0e e6 b7 a1 39 e3 5d 57 af ec d8 69 90 1f ed be 55 5e d8 ba 6b 6a 75 1a 1e c4 ab 94 4c b3 a3 5b 2d 46 b2 54 68 aa b9 57 68 b9 36 9e 1b b4 10 4a f5 58 e3 5d ed 73 b1 75 af 2e fe b8 7c bb db 29 fc c8 eb 0e 16 a5 e8 56 c6 0a 7f b1 fc 9d e3 3a fd d6 ad e4 b5 cb 05 56 c5 36 ed 2b 4e 19 c4 94 b1 21 ab f4 da 4f 9c 5d f3 a2 b6 5f f4 2d c2 a3 c1 08 91 aa 99 8b 99 c9 04 d0 2f 1d d7 d8 ca 0d 29 11 31 0e b2 1a 12 09 da d7 4b 89 bc 9b 55 2c d3 5c ab 5e e8 75 f4 62 68 ba 21 b9 22 63 54 43 a5 3a b8 ca 4c f5 be c6 Data Ascii: KJtnja"zCe%/:sIm+^5L3t155k^Kz^u'^r9]WiU^kjuL[-FThWh6JX]su.\|)V:V6+N!O]_-/)1KU,\^ubh!"cTC:L
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 35 c7 54 b1 e3 21 cd 5d a6 4a 8b 59 5a fa d9 c0 fb 3b d2 26 97 2b 5b 6a 5f 37 56 96 dc 18 f9 d7 be 78 e8 8e 03 af dd f5 b2 ff 00 37 ba 1b 17 6a f5 c1 7d 60 4f a3 f1 7a 56 c5 b4 dd ac 39 6a db af f5 1e a3 4f e7 bb 06 b9 dd a3 6a bf e9 b3 b0 fd 15 fb 42 d7 e6 f5 ff 00 3c c0 4b 0e cb 6e 96 22 59 aa b8 1e 9e 84 62 5c 7d 77 ce 44 67 06 1c 56 43 55 56 52 2e 75 6e c6 a7 df c9 46 0b 9f 2e e6 ab 6c 38 a1 3b 2c b4 87 67 68 90 f9 41 35 ec 44 c1 95 4e a5 a7 d3 4b 57 ee 2b e6 95 62 06 33 7d 14 c9 30 42 ec 0b 39 ab b2 8d bb 9f 90 a5 a5 a7 61 bb d0 7a 87 0f 73 9b 65 b2 d4 74 b1 14 ae 28 5d 7c 97 90 e3 25 73 aa 84 d1 f6 82 29 4c e5 62 c4 c5 13 e1 2b 58 62 36 e6 e7 5c bd 9f b6 6e 96 b2 69 e4 d9 eb 4e 50 2a 5b 2f cd c3 fb b8 73 c2 6d 3f 34 4c 83 65 3c 69 eb e5 1e 69 24 5e Data Ascii: 5T!]JYZ;&+[j_7Vx7j}`OzV9jOjB<Kn"Yb\}wDgVCUVR.unF.l8;,ghA5DNKW+b3}0B9azset(]\|%s)Lb+Xb6\niNP*[/sm?4Le<ii$^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49895	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:39 UTC	805	OUT	HEAD /home HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:40 UTC	840	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B4niLvcL3757%2FY%2FK6R4K8h4tQmvrZ%2FMkAc2Eh49K5MAD54pI7lfW9xUu9goIzs2%2FErxiij9FZVgZ8FgISLrnrcOLOYrpaAbrNTiufn0VbW%2BOL0zDmOOjryiBsrWdGE8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8213b5d5c83-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49900	104.17.25.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:39 UTC	552	OUT	GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:39 UTC	960	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:39 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-15851" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 21226 Expires: Wed, 16 Apr 2025 18:32:39 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=auOkodlB64XsK%2BsGNEpzf0MFwMfOCIUB%2B7SMFRDvrrTf3Xvfx6LWaMeV9InHgF27WMW4OSTl4m8YsbOkFvX5qCRvzpNuNBc4RkuQjoqvcGXu%2BVh26X3RICf3FKLi%2Fs58C4mVNupg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a8a8214bf467da-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:39 UTC	409	IN	Data Raw: 37 62 65 61 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bea/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 63 6f 6e 63 61 74 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 70 65 Data Ascii: ect.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b Data Ascii: th,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 Data Ascii: n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){va
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 Data Ascii: w RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 Data Ascii: s.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 Data Ascii: ntNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 Data Ascii: onunload",oe)),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getEle
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f Data Ascii: nction(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><optio
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 67 45 78 70 28 76 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 73 3d 73 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 73 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 74 3d 4b 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4b 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d Data Ascii: gExp(v.join("\|")),s=s.length&&new RegExp(s.join("\|")),t=K.test(a.compareDocumentPosition),y=t\|\|K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49896	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:39 UTC	929	OUT	GET /xxrz/250x400/793/f8/a1/f8a16dbbb585ff763b323c908ceccf38/f8a16dbbb585ff763b323c908ceccf38.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:39 UTC	721	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:39 GMT Content-Type: image/jpeg Content-Length: 84228 Connection: close Last-Modified: Fri, 19 Apr 2024 08:20:50 GMT Vary: Accept-Encoding ETag: W/"66222962-13a8e" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6952 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iEXlCpsflrrltGNtU1qXvgilknn%2FbILp0mmYjU6n80meRsmI8b1JZZD5FRxmdxjWHOzH%2Fdqo3ErZZE4uuJMg1gk%2BsanrubtwdMmecxzvlereyeSPeAPcFXhmKqOlSxM7bTEE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a821492331f0-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:39 UTC	648	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: dd 51 93 21 5e 73 b8 95 2c c3 8e 30 9e b9 91 07 b4 81 5b a5 10 02 f2 ac fa 4e 72 a1 f1 fa 53 96 9f 57 d2 80 bb b5 46 ae 13 04 7f 38 c6 96 f6 fa d5 ee 8b 90 a6 8f bf f2 eb b2 1b db 49 04 3d 3c ec 3c 5d 26 85 c1 75 b5 a8 ad d2 29 1d bd bc a0 2b 7c 55 9a 62 a2 f7 7e 2d cd aa b3 7f 29 90 47 0b a4 25 4f 1b 16 1b c3 a4 95 c2 5d 8e 99 da 73 d0 8d 63 2a 8d a9 5f 0a b1 7c 1d a0 44 53 7c e9 b5 69 b8 63 4a 8d b2 75 93 85 ad 00 d1 6c 7a 31 50 6d e3 5e 77 9b 97 45 fd 87 7d a2 29 2a 2e 3a ad a1 f5 f8 ac ce d2 24 61 2a c6 1a 52 6d 10 91 c1 f6 a0 94 cb 8a 88 8a cb 46 6e 6c 72 be 6a 83 7c a4 0f 93 26 72 76 82 1f 57 7b 1d 81 8c 31 90 dd ca d6 6b 78 7e 44 04 87 44 65 3d 41 4c ef 53 94 79 2b b2 5c 7a 44 97 3c c7 c4 19 73 b3 85 9c a9 96 b1 e0 f1 a0 cd 63 b6 52 4c 6f 24 8e 9c Data Ascii: Q!^s,0[NrSWF8I=<<]&u)+\|Ub~-)G%O]sc_\|DS\|icJulz1Pm^wE}).:$a*RmFnlrj\|&rvW{1kx~DDe=ALSy+\zD<scRLo$
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 89 7c 25 ae 15 b4 db 5a 41 3a 79 81 c3 d9 e2 4d a2 89 fa ca f1 7c f2 ec c7 2d d5 a9 ce be 73 b5 08 f0 05 77 b2 51 cf d2 39 54 12 f0 5b b2 ff 00 3d 8c a4 d7 8d 9a 33 d4 d0 d4 2e ce 28 08 75 e4 fb 9b 38 69 5a 91 ab e6 5f ab cb 99 1d 7a 4d 77 0e bf 93 33 e4 5c f6 a4 5b a8 18 54 d8 48 41 f7 b1 a8 d2 cd 6a 79 43 18 d5 36 4c 55 ea 7e c6 5d f0 d3 71 ec 3d d5 3f 9a 7d 92 c2 53 0a bb 5f 52 b5 37 0e 1e db d9 70 86 c0 0f 4d b3 96 27 90 e2 5b e0 f8 58 25 d1 9e 6d d5 0d cc 38 63 a8 43 d6 73 68 5e c6 72 7f 45 5b ce 1e 96 73 f9 a7 37 21 5c 4a 17 7f 56 e8 5a 3d 2c 53 3a 21 b0 5c e0 17 8e 9c 36 50 1b 83 3b dc 8e 2b 8d 8e 87 25 74 31 3c a3 8e 8f 49 25 db 0a 71 aa e3 4d 42 ac 08 17 39 74 5c 0e e7 a8 87 2a 3c d6 9d 92 77 a6 b6 ef 1a 99 bd cd 29 aa 1e 24 98 ad 60 85 b2 b6 16 Data Ascii: \|%ZA:yM\|-swQ9T[=3.(u8iZ_zMw3\[THAjyC6LU~]q=?}S_R7pM'[X%m8cCsh^rE[s7!\JVZ=,S:!\6P;+%t1<I%qMB9t\*<w)$`
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 5b 3a 1b c5 5a fc fd 6e cb c8 bf fa 65 7f 09 5a 35 1a 6e db 24 12 de 51 37 c2 bb 53 db e2 88 c5 ac d6 7c a7 a8 59 ee 55 db 66 a5 65 a8 59 c4 e4 52 26 a3 47 72 07 88 99 1d be 83 87 d4 56 3a 1a 3f 0d 0d 39 95 19 98 a0 77 28 2f b7 05 e8 aa cc 70 79 c8 43 eb 81 10 a3 0e 57 b8 e6 d6 22 22 9f c7 a7 89 5b b5 7f 27 a0 ef e3 7d ba 82 b3 50 ba da 28 67 5c 37 6e d6 33 f9 06 b0 72 c1 bd a0 16 d9 fc bb 53 6a 7f 2e d5 d5 b4 7b 84 2b 5d 94 7b 3e b9 1d 45 b5 ea dd 75 3d a3 5a 83 11 36 ad 61 73 cc 12 a1 db 6c f0 42 d7 cf 2b 54 c4 ea f6 e5 74 96 91 a1 93 f1 9c 1b f8 ce 64 eb b9 1e d8 92 3d ee 50 b3 96 31 30 91 da 4c 74 7e 31 5a 8d c8 50 54 89 3e 5f a1 a7 12 b7 35 18 87 29 7c 75 19 ad dc 67 40 1c 98 77 15 c6 ad b1 d3 e9 ff 00 09 ab 6d 14 51 2e b6 87 8d 1a 38 b2 e1 4f 66 f5 Data Ascii: [:ZneZ5n$Q7S\|YUfeYR&GrV:?9w(/pyCW""['}P(g\7n3rSj.{+]{>Eu=Z6aslB+Ttd=P10Lt~1ZPT>_5)\|ug@wmQ.8Of
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 6b d5 bc a0 d0 a9 93 63 5a 1e 3c 7d 6b 63 8c 1d 5e aa 55 5d 5b 5a d6 e4 0b 5a d9 24 81 30 13 e3 8b 96 e2 c8 e1 3f c8 0a 1b 29 86 d5 76 59 35 ce a6 db 63 de df 79 4f c8 16 ce 0d dd f4 85 2b 51 c8 20 81 2c 87 1a cc fa 6c ad 6f 6f 97 35 b6 f7 d2 af f5 f9 d5 20 7c 98 92 83 36 17 89 b4 97 c6 b0 f2 0d 48 e6 d3 c6 8e e7 cb f2 45 f4 32 69 33 36 b9 56 74 f4 62 51 66 91 e4 2b 4a c5 a2 b4 af bc ad 96 8c f8 e7 84 5f 73 63 76 54 8c ad 45 10 fb 7e a2 47 c8 04 66 ec 7b 3c 99 56 15 e1 03 e7 48 be b0 87 66 02 24 88 92 17 85 90 3f 93 1e e7 c4 5b 37 be c2 d0 c9 65 32 7c 59 42 30 98 8b 0c 6b 14 d2 ee 62 b1 0c d9 33 49 17 e5 47 ca fd b6 ea 2b ac 6f 64 cf 7d 78 ac 63 c9 d4 36 08 d6 50 ee 63 fc da fb 2d 56 da 4b fc a3 b2 4b 0d b8 87 da 76 e3 a8 59 6a d1 35 2a 19 97 60 d0 2c 1f Data Ascii: kcZ<}kc^U][ZZ$0?)vY5cyO+Q ,loo5 \|6HE2i36VtbQf+J_scvTE~Gf{<VHf$?[7e2\|YB0kb3IG+od}xc6Pc-VKKvYj5*`,
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 58 90 ea e9 c9 15 49 53 65 0e d6 20 cd 2c 60 f5 bf f2 0f 33 20 0f a4 e3 21 3b ff 00 e2 bd a7 21 10 ed 62 ae 0d bc 92 39 05 1c b5 67 79 e6 5b d3 91 cb 25 ea 52 c0 ad ee 33 d7 7e 3d 2a b6 4b ab bb 99 65 6a b6 63 ea a9 41 b9 f9 0a 56 c8 ed 6f c7 96 d7 ee d6 e9 2b 75 c8 72 2c 87 5f 57 b9 db 12 6c df 18 69 ad db b6 1d 9b 49 ad ac 9d 63 5c 58 a5 84 56 b3 22 bc 13 75 f9 52 7a bb 55 87 0e 1d 6b 9e 92 86 e0 1f da e7 7e 50 ed 6b 0e a3 8c 3c 1b d5 85 8e 33 24 b1 0a 54 84 4f 5b 11 18 cc 1f a9 5a 67 35 71 96 e6 88 49 97 12 ec d4 7d 04 ef cb c6 aa 66 d7 b4 da ed 67 ac dc f4 9d 66 3d f7 92 e8 a1 c3 87 1f 65 df ad 75 cf 1f 56 d1 e0 81 c6 44 5e 53 ca 5b a5 74 6a 72 c9 2c e3 ea 95 23 d2 f5 7d f6 82 35 fc 99 f2 63 95 90 99 fd 96 a7 05 46 98 c0 9a ca 61 e0 c6 83 5f 32 33 3e Data Ascii: XISe ,`3 !;!b9gy[%R3~=*KejcAVo+ur,_WliIc\XV"uRzUk~Pk<3$TO[Zg5qI}fgf=euVD^S[tjr,#}5cFa_23>
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 6b 27 ec 5b 84 bf 40 5e 49 72 6e 2c 21 88 23 10 9e 26 2a f3 f2 0a 8c 7c 97 91 7b b1 b8 c4 ea e5 6a b1 23 85 3e 62 39 7e 58 38 6a 89 bf bb 88 9e c4 44 32 b8 8e ee 21 21 a3 ac 5f 88 6f db bb bf ae 4a 4a 71 a3 96 53 9e 01 bd a2 70 ff 00 b1 a2 f6 74 a6 b1 85 41 4a b6 73 5c ba 44 5f 8a 39 37 82 7a 1a 79 25 be fb 62 68 32 b6 a2 20 61 5f d9 44 3b db d3 23 c4 49 0f 90 c6 67 5f a5 2f 18 d6 fe a9 dc 6e ed dc 8f fd 33 95 f7 95 8d 69 5c e7 28 24 31 a4 c8 dd 91 b6 12 5a 8f 2c 94 62 58 cc 57 e1 ff 00 ad e4 eb 8a 4f d7 95 42 94 4f 86 f0 f6 54 0f 29 10 64 57 23 7d 9d 5e 76 42 01 3d cb 61 b4 c9 5a c1 b6 58 e3 e5 cd f5 8d d4 b2 af 7c 14 57 20 b9 5e 3d 23 72 c8 8a 8f 4f c7 b8 20 71 3f 75 13 79 20 9d 1a 37 a0 9e 86 2b 95 cd 88 73 09 83 4e 14 45 ec 3e 48 c0 80 f2 1c ae fd 98 Data Ascii: k'[@^Irn,!#&*\|{j#>b9~X8jD2!!_oJJqSptAJs\D_97zy%bh2 a_D;#Ig_/n3i\($1Z,bXWOBOT)dW#}^vB=aZX\|W ^=#rO q?uy 7+sNE>H
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 64 62 2a 11 bc 4c fd f1 73 b5 00 35 1d f6 ce 4d f6 74 76 8e 58 65 3b e9 3b 3c 76 84 9e d0 cc 66 12 36 43 fd 39 8f de a2 1c 13 98 bd 00 36 cb 7c 0c 49 37 d8 f7 c9 c7 a1 b3 d1 67 ce 41 0c a0 f7 8d 10 ed 06 ce 22 ba a9 d0 ff 00 72 32 9a 9c 73 e3 35 e2 20 5f d9 f5 ec 19 20 63 da 02 51 98 48 f3 c5 1d 0c 94 d2 e8 cb fb 08 2a 06 90 a5 8c fa ce dc 2d d7 53 97 fb 22 73 39 85 94 48 b1 9c dc 1e c8 f1 bc ff 00 79 95 69 1c 4d a8 2e a2 18 26 93 ab 90 07 84 12 76 93 23 f6 56 11 12 ce 73 20 91 95 67 a5 9c 8a 2b 3f b4 fb a3 cc 40 57 f7 49 ac 65 21 fb 3d 9b a8 63 5c cb 4f a4 9b 22 73 0e d9 6c ae e5 93 dd 53 9a 39 b5 d6 41 44 ee d6 da 88 be d9 19 05 cf 66 57 b3 cb 1c 84 72 d6 5c b9 62 c6 3a 15 77 47 9b fe 58 8b 25 9e 9b 2e f9 bc ba 09 22 8b c4 74 b0 32 69 ba 2c 13 aa 83 cd Data Ascii: dbLs5MtvXe;;<vf6C96\|I7gA"r2s5 _ cQH-S"s9HyiM.&v#Vs g+?@WIe!=c\O"slS9ADfWr\b:wGX%."t2i,
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 28 6b 02 94 b7 14 2e b6 f5 e4 e2 27 ca e6 4a 18 aa 29 4b 1f ba 3e 28 09 d3 7a 09 66 0d cf c5 e2 b3 d0 61 b3 21 1a 92 16 33 69 65 6e e8 78 4d 6c 08 76 d8 51 17 e1 04 ef c6 32 d9 b9 fd a2 3f 69 1b 59 52 b2 80 c0 6a e3 7a bd ff 00 9e 3b 57 27 17 79 97 cd a5 91 30 f7 4e fd db 20 40 00 35 74 47 17 66 c1 c6 4f 3f 9c d4 aa 18 13 e1 00 15 07 51 14 07 cc ec 3e a0 79 62 5c cc ef a7 bf 8d ac 58 17 7e 62 fa e3 2f 95 92 4f 77 dd 52 2c f1 e1 d8 d0 c4 d2 c8 47 70 0f 81 58 ef e9 b7 38 99 2b af f9 b6 0c 37 19 20 f1 bf 1e 5f 9f e1 85 0c 22 6b dd 49 b1 e4 0f 17 5e 7c 6f 88 75 a9 86 45 34 e8 c0 ad 79 82 0f 3f cc 75 c2 bb e7 33 1f 7a c7 c8 fe f1 3e 43 a7 c8 7f 5c 26 50 c6 47 74 4d 1d c1 e8 78 b4 6f f3 9c 77 f0 c2 40 9d 8c 52 79 48 0a 8a f2 04 8d 27 e8 6b 1d a5 09 ef d8 85 3a Data Ascii: (k.'J)K>(zfa!3ienxMlvQ2?iYRjz;W'y0N @5tGfO?Q>yb\X~b/OwR,GpX8+7 _"kI^\|ouE4y?u3z>C\&PGtMxow@RyH'k:
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 2e 7c c5 6d f9 61 63 6e d0 ce 47 97 d2 4a bb f4 e9 12 90 7c 81 c0 ec 8e c8 c9 64 ff 00 e2 df 68 33 2b 95 cb e5 c2 a6 5b 29 b7 b4 e6 5b 4d a8 82 3b d4 d7 40 03 e1 51 b9 76 0a 2f 1d be c7 37 d8 91 67 24 8a 3c 93 66 8e ae cf c8 29 bc c7 b0 46 0e 9c cc f4 14 33 4b b9 f0 28 5d 2b f7 6a c2 dd b2 3a 7b d8 b5 a0 70 4d 48 b7 e1 7a aa 63 e4 68 d7 ad 61 82 8d 45 7a f4 f3 f4 bf c3 03 40 f7 99 87 50 3d d1 bd 7a 8f af 9f 3b 63 33 af 33 34 93 05 0a 09 02 be 80 59 aa 04 9e bb 63 b5 e7 68 e3 55 cb b1 4d 2a aa cd a6 e4 77 20 12 12 8d 91 d0 7c bd 71 1e 5d f3 19 43 23 46 c9 99 81 cf 7b ab 96 46 23 4b 7a 2f 46 07 7b df d3 11 c9 34 52 b4 d0 13 e0 60 35 f8 80 71 c1 41 b0 60 a4 78 76 f9 8d f0 fd a2 73 52 06 cc c2 35 e8 d3 a9 7e 22 0f 84 90 7a 00 68 f9 ed d7 1a 59 a4 f0 ad 6f 7b Data Ascii: .\|macnGJ\|dh3+[)[M;@Qv/7g$<f)F3K(]+j:{pMHzchaEz@P=z;c334YchUM*w \|q]C#F{F#Kz/F{4R`5qA`xvsR5~"zhYo{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49898	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:39 UTC	929	OUT	GET /xxrz/250x400/793/c0/82/c082c3f3a6f1ca4252c6a30db3b88a63/c082c3f3a6f1ca4252c6a30db3b88a63.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:39 UTC	730	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:39 GMT Content-Type: image/jpeg Content-Length: 66436 Connection: close Last-Modified: Thu, 04 Jan 2024 15:26:28 GMT Vary: Accept-Encoding ETag: W/"6596ce24-c07b" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6952 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nLVq9694QZdwn5IaRhsKwlbpP%2FzkGj0J%2F%2FD%2BBOpxZr4XUwZfmKekCxSLqpwBQwDM5TCujaROy%2BUAy%2BT0gpfI7td1mYzsAUf2lqPa1%2F76XfeFGv%2BrKPeX9S354i52wv21NBMZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8214da9746b-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:39 UTC	639	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 4b 5a 56 f1 ad 50 65 4b 13 54 b9 29 fa d4 1d 34 cd 96 f7 52 8f 37 be 20 2c 7b 13 6b 75 83 68 b9 bb bf 6d 85 2d cb 79 33 d0 8c c0 4a d0 67 8a f8 bc f7 57 82 94 52 d0 49 2a 72 94 07 0e 46 dc e2 86 41 1a db 1d 90 92 23 02 37 a6 f3 82 44 de e8 9a 61 58 d8 a5 8d 56 20 47 82 e0 51 a0 37 9c b5 54 c2 a0 6c 90 a4 26 b2 24 86 5e dd 75 a9 c2 d8 e5 4c 76 fa bd 81 b4 3a d5 b3 5c e9 de 16 23 a3 5b 87 28 ef 43 09 9e d1 a5 89 c1 ec 4d 33 ef 6f 08 db f8 dc c3 5c 99 35 c4 75 4a 56 54 ce 4c c9 28 7c 15 d2 78 01 13 c5 3c f4 72 c1 2c 3a 5e 65 52 de d3 09 5d 19 59 5f 53 8d 11 4d e6 6b 40 26 a5 42 17 36 27 86 35 14 ae 1b 75 d6 f6 76 b3 dc 50 da 51 d7 28 3d 8e bd 66 ee 26 88 6f 6f 82 f5 a3 79 f0 a8 bf 81 ed 9b 88 33 c9 f1 4b 0a d1 e5 9d ab e9 57 3c 59 38 d7 5b 36 ac c9 91 0b 93 Data Ascii: KZVPeKT)4R7 ,{kuhm-y3JgWRI*rFA#7DaXV GQ7Tl&$^uLv:\#[(CM3o\5uJVTL(\|x<r,:^eR]Y_SMk@&B6'5uvPQ(=f&ooy3KW<Y8[6
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 14 f1 f5 3b 68 d0 6b f6 bb 75 d0 f8 be 8c 5c 90 b2 82 d9 18 14 70 c1 b7 e1 56 9d 96 e1 77 77 66 f9 e3 6e 78 a7 b4 ee 9f b5 be e8 e6 2b 09 73 5a 98 4e a1 5b 7f 64 cc fd 22 f2 ef 10 71 78 45 fb 18 ca 30 83 04 92 43 0d 4d 84 0f 0c a4 8c 1a 73 30 8e 8b 49 8e 91 ba f1 ce 7e d0 37 5a d7 d1 74 99 db 80 2c 9c 67 b9 f7 43 9e f3 ab 97 9b 1d 0c a7 ea cd 87 49 6a 44 b6 02 de 1b 2d 49 4c bc 53 a1 e6 37 0b 2a 1e 36 db 67 d5 81 f2 2f 3d 9f 74 cf f0 7e b4 f2 7a 7c 0f c9 60 05 e1 88 dc 63 cc 42 2c 19 89 07 3e 03 d6 02 7e 31 82 8c 2f 2f ca 8c 91 ec a1 e4 8c b1 6b c5 27 be 50 b1 09 e7 85 41 d8 fd 76 9a 3e 5f db cf fa a7 5c 6c ae 4b 53 dd 1e 79 d2 b6 d5 d5 a5 9b 39 c9 1e 8e f2 e1 1c 49 a0 01 d3 80 67 df 55 f8 80 44 98 16 a2 44 32 f0 84 8d 47 a0 45 60 58 c2 00 0c 48 92 a3 13 Data Ascii: ;hku\pVwwfnx+sZN[d"qxE0CMs0I~7Zt,gCIjD-ILS7*6g/=t~z\|`cB,>~1//k'PAv>_\lKSy9IgUDD2GE`XH
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: b1 7a 56 fe 18 99 cb 6b ad 7b 0d af 9d 51 6f e9 b7 96 c8 66 7b 2e 2b 40 c8 c8 18 31 c8 f4 67 a0 7f b1 19 28 82 83 88 d8 e2 14 5a 1b 32 3d 0e 3b 0a 64 1b 67 bf 8f a3 e8 2b e9 5d 85 27 b5 a0 c2 90 ad d5 ec 8e b8 24 ba 47 ad 0e 3d 38 c9 07 2d a0 c7 b8 a7 bc 66 d0 d4 41 49 06 9d 99 a4 11 6c 1a 76 66 91 c4 29 bd 85 b7 b0 6d 18 24 e8 6b 40 d1 b0 65 c8 d4 9d 03 2d 05 7e a1 67 da 94 64 16 14 92 51 d7 a0 8c eb c8 f8 a0 24 81 0e 87 f0 69 13 b1 ea ab 14 4a c6 9a 76 55 75 d6 df 34 e8 71 06 43 43 43 81 05 a0 71 0a 6f 61 4d 83 6c 70 1c 08 c2 d9 d8 71 1d 2c 19 83 2d 87 11 da d2 7b 15 fb e5 5f d0 22 05 ed 4d 83 47 65 bd 12 41 c7 6d c2 7e 64 ea d3 85 32 1d 9c 65 20 68 c1 83 0a 2d 85 20 18 e0 0d 04 16 90 64 a2 05 fb 07 9b d0 5a 08 39 a0 b3 33 0a 59 e9 5f 7a 22 15 ea d1 d7 Data Ascii: zVk{Qof{.+@1g(Z2=;dg+]'$G=8-fAIlvf)m$k@e-~gdQ$iJvUu4qCCCqoaMlpq,-{_"MGeAm~d2e h- dZ93Y_z"
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 55 4f 13 27 f1 2b 92 24 e1 c0 c7 fc 84 b2 af 8f 85 51 4c b1 65 cc 52 75 74 ec 78 8f d6 45 86 d4 5e d5 66 bf f9 33 17 8e 4a 4a 52 58 9d ab 10 6c 2e 24 5a b7 0e 75 e4 18 6c 2d 86 da 85 75 66 da 20 64 13 98 24 df c4 34 91 f4 14 42 5c 46 66 c7 57 8c b1 c2 b5 ae a8 ac a8 63 2d f1 9e 35 9a 23 18 a4 cb 71 54 a9 27 ab 6c 7d 6a cc 2a a9 ff 00 ba 73 1f f9 17 39 04 a3 37 39 3b e3 7c 2a 36 1b 84 53 48 a1 c7 44 db 18 90 a0 66 39 3d 97 93 32 b7 ea dc c4 e6 f8 57 27 97 8e 51 46 b7 a8 9f 1a d7 32 c4 ea e6 56 5e 55 dd 46 f8 91 29 ac 9f c3 78 7d e2 a8 b1 97 31 b6 9c 55 5a d5 7f 8c 4a 88 11 10 e3 26 b2 14 e7 24 43 88 cf e0 7e 06 c2 48 b5 fe a3 ec 1f a7 a3 47 96 d2 22 a2 32 22 49 39 2e 5b 7f 57 6d ac aa f2 1c bb cc 71 32 b1 5f 1e 5f 5c 4c bc 51 b3 6b 06 b3 09 c3 ac 8e ae 87 Data Ascii: UO'+$QLeRutxE^f3JJRXl.$Zul-uf d$4B\FfWc-5#qT'l}js979;\|6SHDf9=2W'QF2V^UF)x}1UZJ&$C~HG"2"I9.[Wmq2__\LQk
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: b0 5d 03 30 4a 42 d4 65 a1 c7 80 df 66 34 0c 27 d6 c8 7f 1d 6d 5f 30 25 ec 68 72 f5 a1 de cf 89 07 02 41 84 19 8f 95 43 e4 48 23 06 63 f8 ec 7f 0a e4 3f 7e 2a ec 28 8c d3 f4 5d ef fd 88 c8 88 74 08 6b bd 10 51 7e a4 69 50 51 6c b6 69 33 51 19 10 35 03 fa 51 05 10 2e bd 7f 25 ef e5 2d fd 8d 0d 8d f4 af 5f 5e b4 5e 89 41 5a 1f 43 63 a4 84 ab 61 de 92 93 ff 00 1e f6 3e 8c 68 72 0b 3d 85 18 2e 8b 7e 8f a1 b2 1f ff c4 00 3d 11 00 02 01 02 04 03 04 06 08 05 04 03 00 00 00 00 01 02 03 00 11 04 12 21 31 05 41 51 13 22 61 71 06 32 42 81 91 f0 07 10 14 23 52 a1 c1 d1 15 20 30 33 e1 16 24 72 b1 26 43 82 ff da 00 08 01 03 01 01 3f 01 fb 3d ad 91 6d d7 f2 a1 84 25 af f3 ca 9b 0c 00 f1 1f 95 36 44 d0 54 9a df 5a 65 0c 2c 6a 48 15 4d c6 f5 88 85 6f 98 ef 53 38 4b 83 b7 Data Ascii: ]0JBef4'm_0%hrACH#c?~*(]tkQ~iPQli3Q5Q.%-_^^AZCca>hr=.~=!1AQ"aq2B#R 03$r&C?=m%6DTZe,jHMoS8K
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 1e ea 2a a6 97 63 72 75 36 da b8 9e 06 71 fe fb 13 1f 61 04 a8 53 0a 21 89 6c 52 2b 24 4c d9 40 50 a7 67 93 72 dd ef 0a 96 05 48 e2 71 22 96 91 4b 18 d6 e4 c6 2f 61 9f 95 ce a6 c2 fa 53 82 06 9f 51 17 ac a7 7e 54 92 48 bb 12 40 d6 c6 bb b2 30 1c ed a7 31 e5 7d 36 e7 e7 53 29 5b 68 4d 4a 0b 03 a9 af 44 45 b8 3a 8e 5c 89 df 70 2b 4a d3 ad ab 01 88 8b 08 f2 99 23 bc ae a1 63 7b f7 53 5e f1 6e 76 e7 a7 4f 1a e2 d8 85 9f 10 a1 1b 34 71 a6 50 c3 62 4e ae 40 da d7 a5 9a 5c 36 22 1c 44 7a 76 4c 1e e5 6e 08 d2 ea 47 42 2f 7f 0a fe 3d c4 71 f0 14 7c 4b 1c 29 ce 82 30 05 82 89 58 85 04 ae 60 a3 4b a8 3e f3 44 5a 98 5e d4 fa 1b 7d 44 0b 6b ae c6 de 20 d2 23 22 17 51 9a fb e5 b3 59 79 df 5d 0d 10 7b 3b f4 20 ec 05 8d 96 e3 fc d7 ac a0 b0 b9 d8 f4 b8 e8 68 e1 d1 f4 b7 Data Ascii: *cru6qaS!lR+$L@PgrHq"K/aSQ~TH@01}6S)[hMJDE:\p+J#c{S^nvO4qPbN@\6"DzvLnGB/=q\|K)0X`K>DZ^}Dk #"QYy]{; h
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: f6 4b 5c db a5 89 3c aa 08 b0 6c 20 ec 71 86 48 51 8b b8 59 15 64 32 b6 91 d9 1b 5e ee da 8a 97 ec 03 0e 19 3b 41 8a 3e b1 95 89 cd a8 d1 6c 34 27 e1 a6 f4 b0 e1 e5 b2 39 ca c4 03 65 d6 c0 f4 21 b7 1a 72 e7 53 2c b8 79 72 8f 51 d3 ee c8 61 99 97 43 97 2f b1 a8 d4 10 09 a3 29 d2 c4 eb bd fd d5 e8 97 a2 e9 3f 04 38 cc 46 3b ec 7d b3 5e 38 c2 e7 32 be 51 90 85 07 d5 66 21 43 36 5d 73 10 18 0a c7 7a 37 c6 38 6c 21 e4 81 7b 1b 1c d2 42 c0 b9 bd 8f de 6d 6d c6 80 95 f0 ac 36 10 4d 99 70 f8 79 b1 4e 81 7b 56 ef 25 99 ba 0c c9 a5 ee 01 37 bd af a6 df d0 2a 1b 70 0f 98 bd 62 b8 64 53 9e d2 2f f6 f8 90 73 2c f1 28 cc 0f 8a fa ac 3c fd d5 86 fb 4b c3 93 18 81 66 53 97 b4 8c f7 24 b5 88 91 35 25 41 1b ae 9d eb d3 29 8f 5c ec d7 d0 5f 70 7a 8a 18 77 c4 76 51 89 95 67 Data Ascii: K\<l qHQYd2^;A>l4'9e!rS,yrQaC/)?8F;}^82Qf!C6]sz78l!{Bmm6MpyN{V%7*pbdS/s,(<KfS$5%A)\_pzwvQg
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 4b 66 3d ed ad b5 b7 fa d7 13 c2 f0 e9 38 63 e3 72 29 96 28 c4 92 2b 4e 56 fd 83 88 f1 8a 10 30 6c ca ad 86 95 2c 2d 97 10 c0 1e e5 4f 33 f6 87 28 b0 be c2 e6 c2 f7 03 53 7a 7c 2e 1e 65 37 50 af fa 97 fc 73 15 88 e1 ef 02 76 88 7b 58 ff 00 9b 93 27 ff 00 53 cb c6 fe ab 46 79 91 e5 4a 42 b1 1d 6d f7 f5 ad 8d f7 a0 e2 af 7b 52 3e 43 bd 2c ad e7 51 b7 5e 55 13 9d fa 57 6e 72 da e3 e5 e5 5f 88 af ac da 6f 7f ff 00 35 c7 77 6d fd ed 87 c0 54 8a a4 f7 94 1f a7 4a 47 0f e1 45 d8 79 1d 08 22 e0 8a c4 40 a5 cb 42 b6 be eb 7e 7f d3 fb 0a 3a 68 6e 08 d0 82 08 20 d0 bb 5c 6e 74 b5 03 20 fb f2 fb f9 fa bb 6d 6d 5b 8a 85 ac 75 a8 46 9d 36 a8 e2 6f 3f 87 95 48 7b a4 d7 e2 0b 37 7f c8 fd fd 2b 8b 00 f9 f3 15 52 01 d4 ff 00 31 d0 e5 f3 37 e7 a7 53 52 2a e6 da f7 fd 23 6d Data Ascii: Kf=8cr)(+NV0l,-O3(Sz\|.e7Psv{X'SFyJBm{R>C,Q^UWnr_o5wmTJGEy"@B~:hn \nt mm[uF6o?H{7+R17SR*#m
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 7e 93 fb 1d 88 f1 a6 d7 46 16 af c4 21 04 69 36 93 2e 45 79 3d a2 30 1f 50 86 d1 ca b9 d6 ea 3d e0 ed a6 84 5e b8 e7 a5 3e cd 21 59 e3 2d 92 c4 c9 03 66 ef 5f 50 41 f2 d3 29 61 be b5 0f a6 dc 3a 51 f9 ae f0 c8 3d e5 92 dc ce 96 6d 8e 82 e6 db 5e bf b5 6a 0d c1 20 8d 88 de 8c d3 36 8f 23 38 d0 58 9d 2c 3c ab f8 94 aa e3 06 d1 4a 51 89 08 ee 03 c4 08 17 be 60 d7 8c 9f 1b 79 69 5c 27 10 e3 11 d9 8f fd 45 e7 ee 82 36 3b 7b c2 fa 1b 8e 7b d6 3a f2 96 94 32 98 30 f2 8c 38 17 d5 a4 29 99 c8 1d 01 d3 eb 58 fc 74 5c 38 70 fc 1f 68 cb 89 e2 73 88 d5 c0 b8 56 60 a7 5e 7d 9c 60 67 63 fa 8e b6 b5 65 ec af 1b 4d da 98 ee 0c 85 b3 67 20 db 36 6f e6 0d b8 35 83 84 cd 2a b9 12 36 1c 30 ed 5d 51 8a d8 58 b2 df f7 e8 09 b5 71 ec 6a 4d 3e 1b 0c 17 3c 78 78 0e 5c a2 d9 03 db Data Ascii: ~F!i6.Ey=0P=^>!Y-f_PA)a:Q=m^j 6#8X,<JQ`yi\'E6;{{:208)Xt\8phsV`^}`gceMg 6o5*60]QXqjM><xx\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49901	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:39 UTC	929	OUT	GET /xxrz/250x400/793/f0/0a/f00a5135e76348df78f89978c48dd7fa/f00a5135e76348df78f89978c48dd7fa.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:39 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:39 GMT Content-Type: image/jpeg Content-Length: 71614 Connection: close Last-Modified: Mon, 27 Nov 2023 04:01:53 GMT Vary: Accept-Encoding ETag: W/"656414b1-fd1d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6952 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cGU%2Fb26qQxYJjid2vB8hPhDjpOa4H5nZWruT4NmaqspeK8e2jUG3ysZbq1ZjM2r9%2FjzdZyIAjy0RLXXWMO1kFsSSIdH0acjreAbU3fmTpovl%2FkiEM7y5IhdIe2r9%2F3p22x45"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8214bbf0a3e-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:39 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 96 64 69 f1 81 44 74 22 33 80 46 1f 14 29 5c d8 e3 d3 16 00 60 e0 d2 b9 00 24 4a b5 bf 84 c9 ae 40 c4 92 c8 97 6b bd fd e5 7f 5b c1 c3 e0 f7 ff 00 39 a7 f4 ab b3 39 ea 75 45 71 b1 da f2 cc d0 14 ad 76 fb e7 a8 f3 a2 60 ad 94 ab 02 48 7a cb 2e 88 b0 4f 23 cb 1b 9f 1b 8c 09 9c 08 11 b8 03 74 46 f1 d0 49 b0 f0 12 65 48 41 21 4f 45 24 7c 63 92 26 e1 0d 54 fa b3 9d 56 99 d6 22 91 f1 be 3c 96 9b 69 8a 0e 36 ef 1c b1 5b 21 ab 6c d2 8d 47 d0 ff 00 30 b0 71 8e 3a 48 9a 19 5a b0 87 4f 04 0f 12 1e 32 0d 50 ad 52 37 10 0a d4 4a 01 63 5b e2 10 0a 09 09 49 1c d1 28 48 93 c7 14 cf 21 11 64 0a a5 86 1c 58 7a 29 4c 5a b0 6f 51 e1 20 02 84 bc 30 a3 3c 02 cc 5c 98 22 e3 f4 20 61 46 18 01 5e 8d 70 1b e9 c5 81 6f 0c 67 83 c7 ad ee 20 ac 05 cb 9a eb 0a 6b 22 16 da bd 63 77 84 Data Ascii: diDt"3F)\`$J@k[99uEqv`Hz.O#tFIeHA!OE$\|c&TV"<i6[!lG0q:HZO2PR7Jc[I(H!dXz)LZoQ 0<\" aF^pog k"cw
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 10 a7 78 02 5d 67 b4 a9 9b 6b 5c 2d 9f d2 3c bb 12 00 9b dc ff 00 84 38 a2 50 85 3b 9b 7f 42 b6 37 5d 94 30 ae ff 00 1d 49 da 9e 61 a3 18 53 ae 76 3e 87 f3 a7 bc 5c 30 d7 d6 35 5a f5 44 ea cb b7 1e d5 c0 76 6b cf 3d 4c 16 bb 65 b3 9c d0 d0 b3 2d 87 64 4f 35 56 d4 9a c1 23 cc 66 51 48 6b 05 cd 06 ef 69 96 ac 32 6e 3c fd ee 3a 91 1e ab 2a fe 5a 75 87 12 9c 60 3a 27 f4 83 81 32 75 e9 94 27 f0 85 3d 37 4f a1 1c 2b dc bc a5 af 49 97 45 94 e7 1f 98 f3 17 a1 51 09 8d 70 c1 7b 9c 6b 75 55 b4 bb 3b a6 16 8e 33 d1 77 12 6b a2 32 ac e6 a7 74 e6 3a 4d 61 d3 de ec ce a4 0f 46 ae b3 ed 2c ac aa bd 53 c5 3c 11 41 5a 55 a1 5a 67 42 0d f1 37 05 4d a2 07 41 2a 42 0e 0e 29 91 98 06 62 83 01 11 67 14 b3 ba 65 a7 7a f3 3b 70 ad 23 4e 1e 75 8f 9d 77 0d 6b b5 a9 65 b1 ab 95 92 Data Ascii: x]gk\-<8P;B7]0IaSv>\05ZDvk=Le-dO5V#fQHki2n<:Zu`:'2u'=7O+IEQp{kuU;3wk2t:MaF,S<AZUZgB7MAB)bgez;p#Nuwke
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 9e 2e a1 42 e0 fd 5a 5f 8c e0 9c 83 d5 34 b2 8e b2 c5 dd da cf 5f 77 6c 0b ce 3f c3 01 f1 18 1d a4 e1 58 2b 00 7a 17 08 87 3a 10 d1 c2 ac b1 c0 f1 5c 94 86 ae bd 25 c9 d3 83 18 4e 62 ea 5a db 35 b9 a4 ab d5 cc 2c ac b1 90 5b 8e bc fa dc a1 c6 27 d6 c7 81 1f 5c 0a cc 13 e1 97 e5 40 95 04 c5 9a 61 f2 53 08 e3 3b 67 1d b1 80 4c 12 0c 8f f6 1c 24 60 f6 39 18 fd 21 f5 bd b9 03 ae 0e 42 7f 76 03 06 8a ec a2 38 eb 8e 70 cb cc 4a 8a d8 f2 27 49 1f f6 00 2e 01 de 27 ee 31 47 63 17 e8 7d 7f e4 75 60 07 3c 13 d7 39 f9 ce 78 27 0f 3c 27 7e 4f 5e 42 2f ae af 5c fd fd 6d 2b 97 45 0f 1e b5 9a 19 b9 8d 98 c2 23 8e 21 22 e1 2b 0e 2f 13 4c 63 74 c6 4e 5d 78 c1 23 77 5e ac 80 72 e0 7c 75 61 91 28 97 19 22 e2 37 53 34 71 48 e3 d6 df 71 f6 1d 8e 2c 63 07 72 0f 0d 83 9c 46 1c Data Ascii: .BZ_4_wl?X+z:\%NbZ5,['\@aS;gL$`9!Bv8pJ'I.'1Gc}u`<9x'<'~O^B/\m+E#!"+/LctN]x#w^r\|ua("7S4qHq,crF
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 9f 9b 3e 40 9b 0b 46 bf 89 c5 0d 6f e2 9f 69 5e 5f 1a f6 1b 3e 24 f0 c5 36 ad e1 cf 5f 52 f1 f6 56 4e a7 2b 2f 53 3c 1e a5 a1 14 13 64 b0 05 74 4f 52 c3 5a 79 60 f0 2f 08 b9 be da ae ba 75 5a 8b ee 97 98 62 9b eb 33 7a 3c 36 97 54 96 2a 66 59 25 a9 1c 79 f4 fe 8b 4f e4 be 39 4e 45 8b 6a 7d 6c 6b 2c 83 65 a6 82 73 e4 be 21 6b 47 66 95 ea f2 2c 7a 7d 44 8c 95 e0 a8 37 d1 cd b4 d7 c1 a7 8a 2a d0 78 da cd 36 cf 46 a4 6c f4 6b ce c7 52 23 c9 22 31 e4 b0 77 2d 59 bb fa 9d 1a e3 37 ae 39 5a 26 af 39 92 6b ff 00 a6 78 8d 3a 96 77 50 d5 35 33 9b 87 22 89 e0 3e ee 1f ea e2 1b 5e 2d 16 b3 de 9f 87 7a 13 0e be e5 91 f4 cb 5b 1c 57 34 71 88 21 d9 73 2c ca c5 70 c4 64 cb 75 92 5c de fd 34 5b 0c da 1f 26 a1 26 b3 4d b5 b2 f4 fc 6a 38 c1 a7 14 19 3b a3 2e c6 79 0e 5b 01 Data Ascii: >@Foi^_>$6_RVN+/S<dtORZy`/uZb3z<6TfY%yO9NEj}lk,es!kGf,z}D7x6FlkR#"1w-Y79Z&9kx:wP53">^-z[W4q!s,pdu\4[&&Mj8;.y[
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: de 1f 0f a3 7a a4 df 4b e7 d4 d9 a7 56 05 8e e5 1b 11 65 55 77 1b 7d a5 5d 42 ef 7e a5 88 f2 ee ef 65 b2 70 eb cf 74 c0 cd 8c 80 9e 3a e3 1e 4f 1f a8 5e d8 57 8f b7 1c 8f a3 9b d4 86 d9 43 cf 07 80 ae b9 bb d2 c7 be d3 5c a9 3d 2b 39 a1 61 f9 3a 3b 31 f5 a7 63 88 e0 b4 a8 d5 76 7d 8a 6c 97 d7 33 2c ae 67 9e 06 d9 6c 55 17 67 e7 da ea 0d b4 fa ab b3 90 dc d9 5e d8 cd d4 64 a0 29 e4 82 9f b0 5f 80 a4 72 e7 9c e4 31 ed f6 24 0c 63 c9 4e 46 55 b1 2d 49 e1 fa bd b6 58 bd a1 31 2c 0e ac d1 f5 fa d5 e3 2b 5b 60 c3 83 4e 7f c6 b5 5a dc 9a eb 1a ad ec 0d 5e 9e fa 06 7a 5b ba ce d5 b7 2a 86 3d b8 ed 3e d1 78 f2 4f 26 1a f9 af dc 6b 7b 07 99 b0 c9 9e c7 7c 11 8c 6e 79 1f 19 c3 1c e4 28 67 e7 14 71 9f 18 5f e5 be 49 19 f2 4b 2f cf 66 cf 67 04 39 38 e7 37 da 78 37 da Data Ascii: zKVeUw}]B~ept:O^WC\=+9a:;1cv}l3,glUg^d)_r1$cNFU-IX1,+[`NZ^z[*=>xO&k{\|ny(gq_IK/fg987x7
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: bb 2c 8d 1b 26 a4 2d a1 ea 6a 25 0e b2 cd b9 b1 10 47 dd 55 dc 96 97 50 07 41 c7 f8 87 a9 c9 ea 38 ec 7e ce 21 eb a2 cb 69 61 ce a5 46 bc 6d 58 97 ec 56 d6 16 96 3a 4e c4 49 ff 00 10 77 07 f7 60 90 41 1b 10 6e 08 e6 08 dc 11 e7 7c 7a 2f e2 fc b3 89 b2 f1 4b c5 35 a3 34 cf 32 e8 1a 92 9b 2f cc 44 65 2a e9 2d 68 e4 8c c8 7b 3a 99 74 7d 9d 49 70 65 d2 aa 48 22 ef 8e 35 93 28 97 89 33 26 c9 29 a1 a6 a3 13 ba e8 a6 da 99 a6 0c 7b 56 a6 5e 49 00 63 d9 c6 ab dd ee 16 00 06 b6 3d 15 fa 2d ca b8 9e 5a a5 e2 8f da 34 73 88 a0 9f 2f a6 5b 41 15 44 33 2e a4 96 43 a7 b5 64 36 b0 08 cb 61 cf 98 c7 a5 dc 8b 84 78 4a 4a 29 72 3a a5 a0 e2 28 8c 31 8a 0c ba 51 f6 4b 0a 85 f5 8a 90 a4 98 3d 91 6d 44 49 23 b5 ed 6b 91 51 51 3d 5c f2 d4 d4 cb 24 f5 13 c8 d2 cd 34 ac 5e 49 24 Data Ascii: ,&-j%GUPA8~!iaFmXV:NIw`An\|z/K542/De*-h{:t}IpeH"5(3&){V^Ic=-Z4s/[AD3.Cd6axJJ)r:(1QK=mDI#kQQ=\$4^I$
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 3c 2b 43 07 0f 50 68 b6 99 3d 47 6a aa 8b ee 19 a7 aa ed 49 61 ed 2a a9 eb 8a 0c ff 00 27 6e 1c 8b 24 ce 69 2b ea 7d 43 36 a8 cd 68 96 8a 68 20 8e a1 aa e9 69 a9 a6 a6 ab 9a 45 79 21 8f fe 99 24 ed 20 89 dd 81 64 1a 0d 9f 15 5e 92 2a 7d 57 87 e3 c9 32 ca 7c 9e a7 26 be b7 a7 50 69 99 52 b5 ea e1 82 18 08 25 51 fe c0 57 4b 34 92 d4 56 b5 3c 5d ac 96 53 ab 85 e5 cc 07 af 71 7e 62 94 e9 94 f0 e2 1a ac b3 2e a5 8d 20 a1 ab e2 2a 90 57 2b 8f d5 e3 b2 ce f0 48 4d 74 f2 cc 65 98 47 0d 99 ec 6d 8c cb 88 b8 87 36 13 2d 65 56 98 ea 64 69 aa e3 a5 a7 a5 a0 8e ae 67 6d 4d 35 5a 50 c3 4e b5 72 96 ef 6b a8 ed 1b 56 f7 c4 19 d6 73 97 65 b5 79 4d 2d 6c d0 65 d5 d2 2c d5 50 44 42 89 5d 50 c7 bc 9a 7b 55 0c 8c 52 44 47 55 95 3b b2 07 00 0c 43 9e 66 d4 f4 0f 95 c1 5f 53 0e Data Ascii: <+CPh=GjIa'n$i+}C6hh iEy!$ d^}W2\|&PiR%QWK4V<]Sq~b. *W+HMteGm6-eVdigmM5ZPNrkVseyM-le,PDB]P{URDGU;Cf_S
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: f8 d9 8c 94 01 c3 37 dc 91 15 96 ff 00 f2 1b 7c f0 d5 8e 16 fe a7 38 1f 89 54 91 ff 00 25 be 32 fc c2 26 70 a8 74 49 c9 e2 6b 86 df 9d c1 03 12 29 04 69 1b 30 bd bc ed 7d b0 c1 98 d8 5c 90 7a 5b f5 c0 e5 bf 4f e9 6c 54 54 47 12 1d 4c 2d e1 e1 8e 22 ce d2 a0 9a 6a 76 b8 d5 f6 8c bc 87 2d af cb df f4 e5 f5 1a 3b 48 4d c8 71 a9 7f dc 36 ff 00 eb 88 ba fc 31 1c 41 d4 ff 00 ee 0b db af 86 24 2e 5d 83 9b b0 24 7b ad 8a 12 b2 46 62 6f b8 da d7 dc 6d fc 8d fe 78 86 59 23 50 b1 b3 23 a9 0d a9 58 83 ce dd 3c 71 97 66 75 36 8e 39 ac e0 7f ea 3e fb 5f 6d fe 38 8e 64 68 97 78 94 5b 72 d6 b1 f7 e2 ba 86 29 53 b6 8b 4a 4d 1f 79 25 4e 77 db 6b a8 dd 4f 99 38 a5 a8 92 68 be d5 34 ba f7 4d c7 3b 75 1c b6 c1 71 c8 0d ba 9e b8 cc 33 9a 2c ba 3b d4 4c a0 db bb 1d c7 6a c7 a0 Data Ascii: 7\|8T%2&ptIk)i0}\z[OlTTGL-"jv-;HMq61A$.]${FbomxY#P#X<qfu69>_m8dhx[r)SJMy%NwkO8h4M;uq3,;Lj
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: c9 4d 05 33 3c 35 0c 7e 97 2d 89 08 a9 62 ab d7 df 7d cf 4c b6 eb 8e c2 a5 4a 70 73 ce d2 16 a8 76 a5 04 6b cb 36 ce 7c d4 cb 9a de 87 ea 1c 0b 9d f1 7f a8 76 38 de e2 df 3d 71 c7 b8 65 47 0f 9f 99 c3 e3 34 f4 b3 37 31 e6 87 35 e3 93 4c ca 72 ea 8b 7d 52 da 79 e3 85 0a c1 c3 e9 c5 64 8f 2c b9 2e 0c 9f c4 50 6d 90 48 77 2f 6d 49 3e 23 1d a1 ed 25 47 0e 54 1c 38 c1 2a 5c a4 f2 9e fb a3 a9 b1 00 5f 28 23 4d 6d d3 1d 99 ac e2 7c 53 9a 95 91 f3 e8 5f 39 69 a7 5d cb 1b e5 4f e7 d7 e4 07 4c 47 1a 44 8b 14 4a 12 34 01 51 17 45 55 1d 00 d8 7b 5b 7f 5f 61 d7 ea b1 b0 f9 7e 37 c2 e1 a3 46 1a a8 f9 69 f1 18 b6 70 54 ec 45 bc 37 d3 0b d9 de 18 0f fd 2c 4c 09 bf 7c b4 80 b6 e4 d9 d8 8d ce ba 6b 88 e3 48 94 22 28 55 51 60 14 00 00 1b 00 06 df 51 97 5d fd 84 fd 56 36 17 Data Ascii: M3<5~-b}LJpsvk6\|v8=qeG4715Lr}Ryd,.PmHw/mI>#%GT8*\_(#Mm\|S_9i]OLGDJ4QEU{[_a~7FipTE7,L\|kH"(UQ`Q]V6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49899	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:39 UTC	929	OUT	GET /xxrz/250x400/793/4c/da/4cdad402503a9f291521cdf4de162cf0/4cdad402503a9f291521cdf4de162cf0.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:39 UTC	727	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:39 GMT Content-Type: image/jpeg Content-Length: 57064 Connection: close Last-Modified: Wed, 06 Dec 2023 14:37:38 GMT Vary: Accept-Encoding ETag: W/"65708732-1da2d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6952 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t5rpdUth%2F6F2Rptfb%2Fw6Sy0msZE8d2mzafeeRuL56OmjKMHt02hVfvXpbASE0t7piRcXfZ4vyCkI0ltJQieKnjtM2gDgnXroX%2BWuRVNMs4rsU5YvEmH%2Fks5oDH%2Fa2mb%2BmCdJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8215db8b3c2-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:39 UTC	642	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 71 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCq"
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: ed 9e cf 05 2f 87 f6 4f 41 74 48 f2 3c cb ae bb 42 45 cb ce 28 2f 55 29 97 ab 79 bc 5b 6b 54 69 a8 24 c2 66 e6 4c ed 56 94 ff 00 4e f2 5d a4 21 3f 70 76 af 97 de 83 79 89 ad 83 a3 77 ce 85 b5 53 7a b1 70 cc 98 af 9e 38 60 9f 45 ac 8c 60 a7 8c 19 6e 38 7b 40 f4 23 ad 3a 27 1d 66 9f 64 a1 f9 cb 9f 27 df 5e 6e 73 cd 2c f3 ad 70 31 18 f4 94 64 72 c1 61 b1 5a df 6e d3 89 8d 77 b5 3f 8d 72 d2 ee c9 d6 fb 92 2e dc 5a b9 2e 5b 92 8d 4f 1a b9 e7 76 f7 ab 5e 31 76 16 07 55 eb 35 5d 85 e8 18 de 0b eb 9f 36 36 84 86 fc c6 c6 ac 1e ad 8b 19 31 f7 f5 49 35 97 b3 12 93 b8 b9 59 56 a7 fc a6 a3 73 56 f3 16 78 2d bf 1c 86 06 50 73 ac 38 43 b8 b2 41 75 a1 24 6e 44 66 49 2b 36 11 c5 3f 10 db 23 51 65 c3 93 a9 d5 c2 93 9e 19 3d 85 b7 78 b1 33 8c 35 df da 0b 4e cb 58 66 96 4a Data Ascii: /OAtH<BE(/U)y[kTi$fLVN]!?pvywSzp8`E`n8{@#:'fd'^ns,p1draZnw?r.Z.[Ov^1vU5]661I5YVsVx-Ps8CAu$nDfI+6?#Qe=x35NXfJ
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: de 19 80 f6 85 11 a4 14 90 96 43 c2 7c 59 30 ad 1d 47 6e b6 2c 01 17 27 0b 66 17 7f 5f da 20 ad 56 e1 8b bc d2 65 e9 cd 41 77 65 13 c7 a6 0b 6b 54 8d 8e 91 b1 52 ac 55 ee ca f4 8e 8c e8 c1 8f e0 36 24 5a 61 0a 49 0e a0 e5 b3 87 37 21 29 0f 6a 86 23 4b 21 20 d2 35 21 69 02 34 75 28 b1 92 4b 5e 35 47 30 3c f7 68 66 a1 a3 3b 6b 70 9a 08 d8 88 81 35 b6 5b 35 26 44 7d dd a7 4b a1 b6 50 82 02 ec 00 00 90 70 dd c3 9a b2 34 4a d2 24 8e 77 20 49 2e 2c 62 34 ec ed f2 63 e2 25 24 d7 72 5a 2a db 9e 9d cd 8f cc db 08 83 92 75 a8 3a cb 99 88 d2 82 34 19 41 e9 00 46 80 03 88 00 38 80 01 a8 00 12 0e 9a b9 91 a5 8c 26 4e 19 02 63 d4 40 24 00 34 88 c8 73 80 11 2e 9b d6 21 2c b2 90 e4 ee ca 6c ed 45 76 e3 e9 09 b0 d7 9d 19 10 11 a0 00 62 00 04 80 01 20 00 48 3a 6a e2 46 e2 Data Ascii: C\|Y0Gn,'f_ VeAwekTRU6$ZaI7!)j#K! 5!i4u(K^5G0<hf;kp5[5&D}KPp4J$w I.,b4c%$rZ*u:4AF8&Nc@$4s.!,lEvb H:jF
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 4c 95 b1 5f 9e db f6 04 46 67 a7 1a 4b 22 d1 55 b5 ad 57 47 e7 25 a1 d7 10 d2 73 bd 41 b5 9a e4 99 6e ba a3 33 f9 b7 dc b8 a4 c2 1c 53 6a f3 09 4a 78 ed e5 c9 04 ae dc 34 9b 09 62 53 b1 23 b7 19 89 77 cf 35 33 7d d1 7c d4 43 85 94 bf 58 b9 6a e9 83 4b 63 a6 40 d3 f3 ec 12 5d f6 04 90 84 6c 65 cd b0 c3 f1 b7 b2 6b 9c 6f 1f 62 1b 36 76 4d d6 46 c7 24 35 76 ec 97 7a 4d 6a 3e 50 b9 12 df 93 ce ae 71 cc 63 98 c6 e7 f2 ec 08 86 c1 29 1c 9b 84 36 19 68 cd 04 83 da b6 ae 7d b3 fa 77 84 f9 15 2b ab 36 da cf b2 db d8 a3 13 84 aa ba 1c eb 29 b0 a6 ad b7 bf 9b 66 f7 39 98 51 03 22 1b 7c 84 43 60 44 09 20 88 25 21 29 09 21 5e 8e 73 f0 8f 90 c4 30 98 b4 31 18 42 50 59 07 59 c6 72 99 d2 11 6f 3f 59 27 2e 6e 53 99 dc e5 92 37 33 f4 9f 12 2d c1 8d 8c 36 8e 70 b4 ec 7c 48 Data Ascii: L_FgK"UWG%sAn3SjJx4bS#w53}\|CXjKc@]lekob6vMF$5vzMj>Pqc)6h}w+6)f9Q"\|C`D %!)!^s01BPYYro?Y'.nS73-6p\|H
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 53 61 49 ae 99 06 0c bb 39 97 54 37 18 ec b1 5f 5d 36 da 67 e9 6e a1 09 71 24 c0 94 db 6b 75 cf d2 dd 42 16 d4 f6 74 53 4b ee c3 19 be a9 80 dd 15 ab b5 49 e6 30 cc 43 11 d9 92 a7 22 e3 d7 0f 2e a7 19 3a 69 36 d9 0c 2a a8 19 1e 53 3a d1 69 b2 9e 94 fa 08 10 42 8d 07 a7 72 22 5c c6 cd 73 0d 41 52 87 e1 cb f7 c6 a1 fe fb d3 2f e4 0f c4 3f ef e1 a4 7f c8 da bd 96 6a 05 3e 67 21 f7 a5 48 a7 ff 00 2f ae 59 16 65 45 36 e6 c6 d2 d6 c8 4a c7 63 e5 fa 5d 5e d2 d8 d1 24 17 74 ab 95 35 cf 93 53 20 12 4e 25 de 53 1d 53 b2 0c 80 ee 1f 53 dd fd 24 0b 87 e1 c6 c6 5a e4 6a 36 a8 e4 97 8d 8f c3 97 ef 9d 43 fd f7 a6 5f c8 1f 88 7f df c3 49 3f 91 b5 73 55 72 ac 5b 27 14 df e5 f5 9f 51 b2 2c 16 5d 8c f9 16 b6 01 dc ab f2 a5 ae aa d3 46 a9 c1 13 d8 6c 7c 88 59 b4 a9 ba aa cc Data Ascii: SaI9T7_]6gnq$kuBtSKI0C".:i6*S:iBr"\sAR/?j>g!H/YeE6Jc]^$t5S N%SSS$Zj6C_I?sUr['Q,]Fl\|Y
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 23 20 00 b2 ba 3b 74 d1 24 0a ea d1 6b 18 12 70 22 84 55 09 55 1a 2c 8a 69 62 93 3b 97 bb df 3a 02 50 e5 56 16 d3 86 d7 b6 99 89 5c a7 0b 5e 81 c3 9a 2a 66 19 8b 6e ca f0 5d a6 86 62 05 85 c2 8d db 46 8a 49 0b 1c a5 0e 65 16 65 af 8d 62 68 bd 4a 9c e6 8a 38 cc 85 6f 25 d1 98 99 55 c8 25 65 91 4e 47 23 4b 2a 90 a3 5b d4 54 ac e0 05 a7 86 1e 36 73 ba 50 2f 99 50 65 1a 5c 20 71 23 aa dc 85 de e4 1c 28 80 24 8c 84 10 71 4b 37 ae c4 62 99 75 00 e5 71 cc 1e 9c c9 fd 75 c5 45 3b c2 c5 58 78 7f 8e 08 c8 11 83 06 b8 b9 1d 87 4b 8e fe cb ff 00 db 12 24 4f 66 4b c6 49 e2 4f 79 7a 58 af 5e 77 fb b1 51 56 64 eb 6e c0 34 03 96 19 af e9 11 b3 0b db 4e d3 a7 f9 f9 61 61 04 85 05 a4 63 f0 a0 eb d9 a8 d7 e5 85 d9 12 58 19 1a 18 bb 9e 53 9b fe 44 71 f7 fc b0 76 62 7f bf 86 Data Ascii: # ;t$kp"UU,ib;:PV\^fn]bFIeebhJ8o%U%eNG#K[T6sP/Pe\ q#($qK7buquE;XxK$OfKIOyzX^wQVdn4NaacXSDqvb
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 66 06 2e 0c 9a dd c3 15 5b f9 66 26 f7 d4 76 e2 a0 76 76 e1 ac 0e b7 38 57 54 20 d8 fe bb f1 bc 53 26 6c da 37 3f 97 68 c4 52 46 92 01 f0 dc 71 6b 8a c9 1c 50 a5 28 50 22 36 a8 52 00 bb e6 24 66 62 2f a8 d4 0e cb 9b eb 6b 58 73 ec fc 71 9b 29 38 5d 79 ae 23 8c 66 1a f9 61 72 a0 2c 79 01 85 53 3d 54 0f bc 46 8b 3a 12 9a 10 a0 10 58 15 27 8b 41 a5 fe ec 4a db 99 a6 17 01 37 84 46 55 15 58 80 79 9b 22 f7 5c db 5e 9a 62 96 ac cb 22 8b ee e5 e1 eb 65 a8 b0 2a d1 f4 0a cc 0d d3 e1 cf e3 86 47 a5 aa 40 46 5e 2b c6 d6 37 ca 4f ba 6e 4d 88 b7 53 71 d7 a5 aa 11 48 88 e5 1e e7 11 1d 6c 6f fe 5f 66 d8 9c 68 70 f6 1a fa 39 62 fa 62 88 9a bd 9b 51 00 6b cd 4d 1c 8e 8b cd dd 0d 9b 28 d2 e7 dd 21 57 a7 20 40 6b 62 ae 33 4f 39 8a f9 86 54 75 6f de 59 10 30 23 a7 5b 78 83 Data Ascii: f.[f&vvv8WT S&l7?hRFqkP(P"6R$fb/kXsq)8]y#far,yS=TF:X'AJ7FUXy"\^b"e*G@F^+7OnMSqHlo_fhp9bbQkM(!W @kb3O9TuoY0#[x
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: 58 0d 7b 4e 29 fd 6e 0a a8 ab 23 68 d6 a2 29 d6 a2 37 cf 4f 65 9a 39 04 aa d9 4b 64 b0 75 cc 14 8c 84 5b 42 a7 5d af b6 76 ae d7 08 fb 49 a9 5c 89 4c 85 e1 a5 d9 f4 f3 3c 92 8e 26 99 a9 22 8e 59 4f 6e f7 36 52 4f 22 da d2 7d 20 da 5b 2a 96 58 68 a5 80 43 57 b9 35 11 cf 49 4b 57 1c a6 0b 98 89 4a a8 65 03 21 91 88 b7 5d 7a 0b 4f 34 95 13 4b 3c 99 77 93 c8 d2 be 44 48 93 3b b1 63 92 38 d5 63 8d 6e 78 51 15 51 46 8a 00 b6 21 db db 66 f5 b2 a5 40 cd b5 28 d6 8e b7 d9 47 96 6a 71 12 44 aa 16 d9 15 96 34 0a 24 40 1c 5d ac 6e c6 ea 2a 4e 99 c2 f8 28 fc c6 2a 9f 85 61 cc cc c2 ed 2b 5f ae 99 57 f9 47 11 ef 6f b3 e8 6f ac 94 8f 13 80 ed 4e d9 c8 80 02 ec 78 e7 df 44 8f 71 1b 01 91 e2 66 0d cb 44 60 72 b2 b6 16 32 d6 b5 35 19 cc ca e2 ed 6f eb 70 3b aa 5c a5 b7 71 Data Ascii: X{N)n#h)7Oe9Kdu[B]vI\L<&"YOn6RO"} [XhCW5IKWJe!]zO4K<wDH;c8cnxQQF!f@(GjqD4$@]nN(*a+_WGooNxDqfD`r25op;\q
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: a1 1e 18 25 96 15 e2 6a 5a 99 23 e2 e9 85 59 61 ba 34 c5 10 c4 59 2d a5 cf 13 43 84 8e 51 99 d7 30 76 19 45 4f d1 98 4f 0d 98 a3 b2 98 b8 95 22 32 62 e1 34 b0 32 b4 2a bc 5e 15 44 9a 0c 75 1c 39 15 f1 2e 61 5a 43 ff 00 c1 64 95 44 e2 21 bc 9a 9a 3b d2 ab cd a5 e9 47 2a 99 aa 34 80 cd c4 5a 52 e1 84 73 23 63 37 c8 e9 9e 36 9a 9e 3f 57 9e da 83 20 68 94 9d 9a cf ca ca 37 dc f2 2b 79 59 b7 c5 35 4b 35 e3 97 69 23 3a 1f 7b f3 0e ff 00 23 d7 fa 6e 03 2a bd 8d ec 41 0c a5 49 04 11 d0 ec 47 4e d8 c9 f3 79 4c a2 8e b6 4d 7a bf 31 3b d8 39 3f a2 90 8b 07 3f 51 ec 18 9b 2b 6b 66 0d e8 96 7a aa da 86 48 8f 1a a6 67 25 de dc 91 6a eb b8 1d 16 db 5c 93 f3 62 49 ca 32 34 a7 50 4f 3c 86 c5 a4 6e a7 fd bc 87 41 88 62 58 96 ca 2d fc 7d 0d 72 a4 29 0a d6 3a 58 8d 40 1e c7 Data Ascii: %jZ#Ya4Y-CQ0vEOO"2b42^Du9.aZCdD!;G4ZRs#c76?W h7+yY5K5i#:{#n*AIGNyLMz1;9??Q+kfzHg%j\bI24PO<nAbX-}r):X@
2024-04-26 18:32:39 UTC	1369	IN	Data Raw: c8 35 73 cf 6f 65 a4 03 a0 ea 42 76 eb a8 9b 5a 14 35 d5 eb 4e 54 18 61 56 76 8d ef a6 6b 69 22 c0 04 dc 12 39 8b 15 f8 1d f1 4f 93 66 15 2f 1f 15 16 9e 03 cd 2e a3 a9 b4 1f f2 c2 ab 6c c7 a6 fc a1 48 26 fb a6 22 a3 86 04 58 e1 55 8d 54 58 05 45 03 ee 16 18 02 c3 fb ff 00 7f 49 71 7b 75 38 79 74 0b 91 b7 7d f0 ac 1c 5c 7a 09 c3 3d b1 23 9c 33 77 c5 76 66 b4 73 90 45 f5 00 7f 7f cf e3 8b 19 9b 40 24 2f 42 56 d7 d2 36 b0 3e ee a6 53 7e bc aa 2c 39 8d 84 cb 47 9a 42 63 b8 54 11 c5 23 5f db 77 3b 21 3b 76 b1 23 ed b7 43 88 2a b5 5b cb 6c 2c 81 bd 2e fa 14 9f bb e7 86 9f 87 cc 77 27 a0 f8 f7 27 e5 8c db c4 95 d4 d7 e1 f0 f6 22 d7 5b 83 cd d3 af f0 c6 47 99 a6 63 4c 93 af 23 13 c2 9e 3f d1 ca 00 3b 1f aa 43 29 1f 02 3b 83 82 70 c7 0c 7b e1 db 12 36 3c 41 25 eb Data Ascii: 5soeBvZ5NTaVvki"9Of/.lH&"XUTXEIq{u8yt}\z=#3wvfsE@$/BV6>S~,9GBcT#_w;!;v#C*[l,.w''"[GcL#?;C);p{6<A%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49902	172.67.195.52	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:39 UTC	733	OUT	GET /embed/news?theme=dark&source=1movieshd.cc HTTP/1.1 Host: valueclick.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49903	35.201.76.231	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:39 UTC	693	OUT	GET /c/4484296/1834392/15871 HTTP/1.1 Host: bitpanda.pxf.io Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:40 UTC	618	IN	HTTP/1.1 302 Found Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Fri, 26 Apr 2024 18:32:40 GMT P3P: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT" Timing-Allow-Origin: * Location: https://www.ojrq.net/p/?return=https%3A%2F%2Fbitpanda.pxf.io%2Fc%2F4484296%2F1834392%2F15871%3Flevel%3D1&cid=15871&tpsync=yes&auth=572fbe6261419ff5 Content-Type: text/html; charset=utf-8 Content-Length: 185 Date: Fri, 26 Apr 2024 18:32:40 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:32:40 UTC	185	IN	Data Raw: 54 68 65 20 55 52 4c 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 6a 72 71 2e 6e 65 74 2f 70 2f 3f 72 65 74 75 72 6e 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 62 69 74 70 61 6e 64 61 2e 70 78 66 2e 69 6f 25 32 46 63 25 32 46 34 34 38 34 32 39 36 25 32 46 31 38 33 34 33 39 32 25 32 46 31 35 38 37 31 25 33 46 6c 65 76 65 6c 25 33 44 31 26 63 69 64 3d 31 35 38 37 31 26 74 70 73 79 6e 63 3d 79 65 73 26 61 75 74 68 3d 35 37 32 66 62 65 36 32 36 31 34 31 39 66 66 35 22 3e 68 65 72 65 3c 2f 61 3e 0a Data Ascii: The URL has moved <a href="https://www.ojrq.net/p/?return=https%3A%2F%2Fbitpanda.pxf.io%2Fc%2F4484296%2F1834392%2F15871%3Flevel%3D1&cid=15871&tpsync=yes&auth=572fbe6261419ff5">here</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49894	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	640	OUT	GET /5/4724866/?oo=1&aab=1 HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156357
2024-04-26 18:32:40 UTC	1297	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: application/json Content-Length: 2884 Connection: close X-Trace-Id: 47d77e6ecbe5d074cde009212d4238b1 Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:40 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156357; expires=Sat, 26 Apr 2025 18:32:40 GMT; path=/; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-04-26 18:32:40 UTC	2884	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 3f 72 62 3d 4a 56 6d 35 58 76 66 53 64 30 33 55 65 34 65 5a 35 5a 50 55 4f 4e 44 35 73 51 45 78 67 56 70 6e 53 51 78 6d 30 69 68 31 53 67 41 62 4d 4f 4c 43 78 58 6b 50 6e 4f 4d 75 32 4b 5f 78 71 4c 73 73 6f 42 69 78 2d 4f 4d 47 6b 47 64 31 72 5f 62 76 4f 38 30 67 4c 4c 5a 7a 36 62 71 70 57 6e 46 69 46 47 4b 69 43 77 43 65 4e 6b 5a 6a 4d 6f 4d 6f 33 38 74 4c 63 50 36 31 2d 39 59 38 59 6c 47 4b 79 7a 71 73 38 6a 4c 52 66 70 6a 31 77 41 52 6a 4b 4b 43 68 7a 76 47 71 31 71 7a 42 47 31 75 64 2d 64 4a 4e 64 6a 32 4b 49 57 30 76 72 37 5a 6b 4a 34 42 38 71 65 38 61 61 4b 68 58 67 6d 79 50 6f 37 5f 68 63 70 35 4d 37 50 61 33 54 54 55 78 68 52 6a 61 6c 4e 37 42 4a 4c 54 44 39 31 54 78 77 41 70 51 Data Ascii: {"url":"//eephaush.com/?rb=JVm5XvfSd03Ue4eZ5ZPUOND5sQExgVpnSQxm0ih1SgAbMOLCxXkPnOMu2K_xqLssoBix-OMGkGd1r_bvO80gLLZz6bqpWnFiFGKiCwCeNkZjMoMo38tLcP61-9Y8YlGKyzqs8jLRfpj1wARjKKChzvGq1qzBG1ud-dJNdj2KIW0vr7ZkJ4B8qe8aaKhXgmyPo7_hcp5M7Pa3TTUxhRjalN7BJLTD91TxwApQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49906	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	698	OUT	GET /xxrz/250x400/793/3e/db/3edb97e60d9d7d5a63efc6b02be95a6b/3edb97e60d9d7d5a63efc6b02be95a6b.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:40 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: image/jpeg Content-Length: 40537 Connection: close Last-Modified: Mon, 25 Mar 2024 20:15:40 GMT Vary: Accept-Encoding ETag: W/"6601db6c-5be7" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6953 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G9EPOgmpZnek9vfdSgLCNL3Dgr52hFhi%2B%2Bc6tUvJZrjNI96IaNbxDgxfAoxrU0khtbxGzb1fp%2BnHzWPwhbJgfZ%2BXAWYMwet9OXIXjCnpaKBElJXPyaj2m%2BieCow0wVyV%2FcL5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a823a908a570-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:40 UTC	643	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: c8 69 b6 2d 24 8e 5b ec 6e 25 2a 8b 35 53 28 33 6d 52 32 20 52 90 40 b4 00 1f 5f 9e 71 7a 3d e5 0f cd fe a9 c9 99 a3 bd 47 ac 8b 75 59 7b ed 4e ae 5d 83 fa 07 34 de e6 7c b7 bd b9 1d 19 3d 0f 4b d5 93 5d a5 2c a9 34 6d a8 db 48 d7 4c 53 88 bb d9 d5 f3 1c be 25 a9 8f dc 75 a3 c3 5a 13 61 63 71 68 9f b1 d8 e3 f4 7d aa 9a 41 9b 0b a4 96 90 09 52 40 05 24 3e ac 7c b0 f4 1b cd 6f 98 7d 7e b4 f4 f7 ce 5f 43 df cf 62 b0 3a aa a4 7d 68 cf 33 d9 dc 67 2f 6a 2a 8e e5 e8 15 6f a1 6d 0e 89 86 67 5f 47 56 97 65 55 7a d4 bc 2a c0 86 f4 3c e4 12 bf b3 ab dd 5c 6b 9e 7f ca fd c3 05 e8 26 67 f8 ff 00 96 46 98 5f e3 8c 56 da a4 9b 2b 84 a9 20 b4 90 00 00 0f 70 39 aa db e6 af 9a fd 86 cf ec ce 2d ed 8a e5 e8 16 78 bc b3 5b 9b 8c 52 57 94 2d 7b e8 16 eb 3e b1 cf d6 85 d5 13 Data Ascii: i-$[n%5S(3mR2 R@_qz=GuY{N]4\|=K],4mHLS%uZacqh}AR@$>\|o}~_Cb:}h3g/jomg_GVeUz*<\k&gF_V+ p9-x[RW-{>
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: d0 01 fa c1 18 04 05 18 04 a8 80 d2 12 07 ee 7f 86 16 fa 8d 7d 71 3c 79 89 08 c9 7b d7 2d 88 34 2a fc bc 9c a4 f0 c9 9f d1 f5 86 df 01 6f 5e 8f 62 f2 ef 96 bc b3 4e cf d3 b6 87 85 be f3 c7 2e 11 07 b1 bc f5 51 9e c6 94 f8 7f 38 72 9f 40 bc 91 a3 19 f6 f1 02 80 7e 93 22 30 49 98 05 25 44 09 00 01 a5 4a 04 03 20 92 4a 6b 35 e7 74 1e e0 f3 27 3a dd d8 1d 17 3d c1 df 19 3d dd c0 93 26 11 c0 8d 6c 6c 66 a7 a9 b9 41 a7 d4 af 7a 92 22 1c cb 52 14 5a 38 46 12 bf 7c 42 94 00 81 80 48 22 00 14 00 05 00 24 64 00 90 66 00 04 02 82 4c 14 83 50 24 cc 02 02 c8 12 46 60 08 10 28 d0 03 22 42 83 19 ac 02 41 18 11 80 06 69 50 02 32 04 05 24 14 a0 00 24 00 06 00 20 00 0a 00 00 00 02 4c 00 30 00 00 00 24 c0 00 60 00 48 00 00 00 a2 00 00 00 08 00 1f ff c4 00 2f 10 00 00 06 02 Data Ascii: }q<y{-4*o^bN.Q8r@~"0I%DJ Jk5t':==&llfAz"RZ8F\|BH"$dfLP$F`("BAiP2$$ L0$`H/
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 63 96 4b 6e a8 9c 33 48 96 e7 d3 31 f1 35 ef 59 09 02 6c 81 29 e0 fb a4 61 47 7c 9e fb 48 fb 98 c4 ca 38 79 29 85 ed c0 f8 59 fd 47 ce 85 0a e7 fb b3 a4 78 cc 9b 52 1c 94 a5 10 e1 f3 c6 8d 9b 0a bf e2 33 2e 99 0a a2 9a f2 50 99 b2 08 4e 91 d2 32 32 44 c9 02 43 b6 1c 57 be 4e fe 2f fd f9 25 ff 00 91 0d f1 21 43 ff 00 6c 58 b1 7c ab 9c 9d 1b 2a 97 1a c2 b9 05 df da b2 f9 57 b8 73 c3 97 31 72 31 64 49 4a 95 f4 cb 58 c9 3c 42 74 81 90 91 47 90 90 25 3b 66 ea fd a8 fd f2 74 bd 4a 3f 74 0c 61 5d 35 c4 7c c4 95 f9 d7 33 d4 a0 fc 5c b6 97 10 9e 8b 81 8e c8 82 5d a3 c7 ac ad c7 0a a7 b9 ef 22 ef 48 9f 22 86 41 f2 31 31 ef 4f ac 38 60 f9 b8 5e a5 1d bb d3 e8 cb de 11 42 4a c3 a7 d4 aa f0 af 0a 12 9f 5a 23 cf 59 28 cd 64 41 97 e8 e2 bf 46 e4 cb 4c f7 c6 49 ff 00 59 Data Ascii: cKn3H15Yl)aG\|H8y)YGxR3.PN22DCWN/%!ClX\|*Ws1r1dIJX<BtG%;ftJ?ta]5\|3\]"H"A11O8`^BJZ#Y(dAFLIY
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 74 10 4b 7e 8a 37 50 56 3d c1 22 11 36 99 91 94 b5 66 5c 8b 0d 19 6c d7 7d cf 0b f0 a1 16 33 b3 65 6a f8 08 ba d6 25 05 41 c6 c9 d4 f1 d7 33 ad e2 1b c4 49 c7 e5 70 eb 6a 8c d9 ea 35 31 44 f3 61 e8 bd 69 90 c2 01 b4 6a 0f 32 96 81 a5 04 19 8d d6 71 e0 10 4c 46 da 27 10 57 92 26 9a 19 5c ea a4 0d dd 4a c6 ba 2b ce f9 70 9f 10 ac 86 fc a6 cf a9 a3 fa 3a 3a 4f 8c 7c 3a ca 6f cb c6 c0 67 17 86 79 34 69 63 a8 dd fa 52 eb 36 4f 34 6a 0f 45 06 d9 da 99 35 12 21 10 62 2a 52 4d 33 ef b3 67 36 7a 5b 7e 4e 98 f4 d2 de b8 a3 83 d7 44 a9 52 67 49 f2 be 57 cb 42 d3 31 d8 dd 42 2b 8d 3a 49 6a 82 89 63 72 c7 65 33 38 26 22 f6 e3 c9 47 b3 49 90 34 1f 52 99 52 83 cc 03 8a b3 3f 8d f5 1a 11 6a bb 8e ca dc 12 72 b8 cc 73 b0 f0 99 9c c1 1a f0 98 08 3c 5b e3 01 65 dc 33 33 3f Data Ascii: tK~7PV="6f\l}3ej%A3Ipj51Daij2qLF'W&\J+p::O\|:ogy4icR6O4jE5!b*RM3g6z[~NDRgIWB1B+:Ijcre38&"GI4RR?jrs<[e33?
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 97 e7 ff 00 15 63 6d 64 f6 f6 6d 71 dc f4 89 b8 94 0f 2e a3 dd ec ed ad 5a dd f1 90 34 c5 2c ba 9c 72 29 ab 3c 85 49 68 89 67 c4 24 b9 8f fb d4 13 41 1c 71 92 40 55 17 42 19 d9 b1 cf 5b e2 35 c8 e6 18 8d c0 a7 e1 16 ad c7 1e 2e f3 f0 c7 8d ee 2d 49 27 33 09 e2 90 5b c3 ab 39 d5 1d c2 98 e4 c6 e3 b1 93 95 58 f0 b5 bc b4 bc 73 b5 c9 8a 57 b0 1d aa 2e a3 68 04 d7 03 b3 2d da 48 64 84 3a 43 a5 48 ed 05 5d 25 a7 09 b9 5b 47 b1 8a f5 96 0b 69 2e 24 9e 49 d7 5c 97 16 f1 ce 44 1d 84 b1 2a 47 1f 69 a1 58 ac 8c e5 4b 31 c3 69 0f c3 ac df 8b da 5b 76 1f c0 93 83 25 db 47 da 3e f3 1e 0c 6f 0b 67 39 1f de 30 d8 18 1b 63 91 22 b8 cd a4 36 d7 51 c7 6e 9a 16 4b 1e 19 39 19 2d fc 5b 9e 1f 6b 71 29 df 27 bd 2c ae 71 c8 67 03 6d aa 4e 1b 6f 69 0f 0b 71 0a 5c 76 d7 2b c3 b8 Data Ascii: cmdmq.Z4,r)<Ihg$Aq@UB[5.-I'3[9XsW.h-Hd:CH]%[Gi.$I\D*GiXK1i[v%G>og90c"6QnK9-[kq)',qgmNoiq\v+
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: f2 8f cc e3 fe 85 9f ed 0d cd ba 08 67 1e 91 18 0a 10 b1 ef 20 5c 7f aa ac 78 bf 07 4b e9 6f 0a 03 2d cd 92 c6 43 77 15 26 19 d7 af 96 ee 3b 33 9d fd 9a bd 96 c8 c1 15 c4 53 c0 81 d2 31 a1 24 4d 98 85 ce da bd f5 ae 02 ba 9e e2 20 73 a8 38 91 76 3e 7a 85 4b 77 60 03 96 bf 4d 4d fe 6d 7f fc 8a 87 8e f0 eb 28 e4 54 8a 4b c7 6f e7 01 23 df de f9 23 fd 3b d5 e7 ed 1f 11 ba 05 15 fd 1a 1f 08 e1 27 61 d3 51 ef 7f b5 12 49 24 92 49 39 24 92 49 3f f6 8f ff c4 00 3d 11 00 02 01 02 04 01 09 04 08 05 05 01 00 00 00 00 01 02 11 00 03 04 12 21 31 41 13 20 22 32 51 61 71 81 91 05 a1 b1 f0 10 14 23 42 52 c1 d1 e1 30 62 72 82 f1 24 33 34 50 92 b2 ff da 00 08 01 02 01 01 3f 01 30 38 d1 31 4e 7a 35 73 68 f9 e1 56 cc 4f 95 5a d4 01 58 5b 87 45 9a b0 73 86 56 d4 15 8f 5a 74 Data Ascii: g \xKo-Cw&;3S1$M s8v>zKw`MMm(TKo##;'aQI$I9$I?=!1A "2Qaq#BR0br$34P?081Nz5shVOZX[EsVZt
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 8f ef 43 11 a5 7d 60 f0 3f 3a 55 b3 72 e6 c2 07 7e 95 6d 23 73 98 d6 6f a1 4c cf 3b db 58 26 51 88 b8 92 d9 ee 2d ed 35 86 40 a3 df 1b d5 8b f2 3e 77 14 d5 0c 74 55 2c 7b 81 ab 76 2f 98 cd 0a 3b f7 f4 ab 56 52 d8 07 ac c7 89 ae 97 75 28 3a f0 a5 ac c1 6a db 89 81 ce 70 08 32 01 1d 86 b1 b8 0c 33 2f 29 c9 85 20 ea 2d ac 66 9d 35 81 c2 ad 61 2d 2d b5 d1 58 46 8d a9 9d 01 de 6b 92 8d 82 aa ff 00 28 88 f4 a2 00 e1 4a bc 7e 82 62 8d d8 ee a5 6a c3 a4 8c c7 6e 1c db f7 0a 2f f5 1d 7b 80 e3 59 d4 f1 ac 4c fd 5e ee 50 cc d9 09 54 48 0c c4 70 13 3a d2 e8 96 c4 65 e8 2e 9d 86 04 8f a0 ad 6b 45 c0 12 6b 30 e3 a5 2a 93 ab 10 83 81 3c 7c aa c6 18 46 66 0c 3f 0e 6d c8 ed 8e 1c ec 60 7e 44 b5 b1 99 d2 1b 2f 68 fb c3 d2 86 3a db 68 a1 f3 f1 b7 94 c8 3e 3d 5f 7d 72 dd 10 Data Ascii: C}`?:Ur~m#soL;X&Q-5@>wtU,{v/;VRu(:jp23/) -f5a--XFk(J~bjn/{YL^PTHp:e.kEk0*<\|Ff?m`~D/h:h>=_}r
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: e4 e4 f2 b1 29 fd 90 26 7c 9e 9a 71 c2 ab 89 27 1a 7e 41 08 c4 a5 63 c3 21 34 ca 2d 85 b6 80 b8 26 f1 5d 01 d0 68 6d 4e fb d8 03 c5 99 a8 a4 39 a9 0b a9 bd 6e 7a 8e 96 ae b6 a4 1e bf 5e df 84 7d 77 7c a0 c2 7b cf a1 3a 1e 97 8c f3 cf f5 82 92 bb e4 30 e9 40 55 e3 61 95 b9 69 75 97 31 28 b7 8a b4 36 c8 d1 34 4f 19 26 b7 a7 0a 7d 6a d5 22 14 dc b3 7b 86 12 a2 4b aa 34 5a ba 0a 28 96 db 19 d9 7b c3 c3 45 22 17 e7 5e 5a 95 5b f1 58 28 d4 a4 12 a2 ae 97 ed 6b 95 23 81 b7 bc e6 4b 71 6a c3 d2 b7 17 be 7e e8 f3 af a4 8c c0 09 60 e1 c3 ad 56 8a 9f 6f 5a 18 e3 4a 96 46 4a 52 28 3b c1 4e ed 76 ea 81 d2 b7 8a 62 c2 6b 91 56 47 9d 17 45 a3 da 23 71 32 2f da 17 ae b5 34 3f c5 a8 eb 15 07 e6 7d 9d f4 83 43 5d 7b be cf 6c 1f b3 ca 9d 81 75 e3 92 67 6e cb 35 c6 7c fe cb Data Ascii: )&\|q'~Ac!4-&]hmN9nz^}w\|{:0@Uaiu1(64O&}j"{K4Z({E"^Z[X(k#Kqj~`VoZJFJR(;NvbkVGE#q2/4?}C]{lugn5\|
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: fd b1 42 2f c3 d7 db 0a af 5d 07 74 5c 50 f3 8f 6f d7 bf ec 3d 60 c6 c9 65 74 dc ed 3f bc ec 87 ab 70 46 d2 96 76 59 b1 4c bf ed 2a 60 de a9 04 02 52 40 a4 4c 34 73 69 f5 a3 fd ab 23 4b 7b 2d ca 0f a4 2d 05 76 b1 56 f6 b5 6f fd 21 46 99 aa b7 d4 6b dd 14 c3 52 30 90 3c 44 60 0a a1 e4 2a 28 74 ec df 3f 61 c2 ad 23 01 01 40 8e d5 06 7d 09 ad 8e 74 1a 58 0a 64 ac 02 a2 e7 43 9d ea 12 e0 71 19 fe 64 d6 dc 2b ad a1 c4 ee 49 f5 71 ad 1b a2 52 45 93 64 b8 92 12 4d 7f 11 35 ba ca 71 a9 50 a4 a5 9a e1 aa 6a 9b e7 a5 45 e8 3a 42 31 21 48 02 84 1c 27 99 e6 39 88 41 dd 8e 0f 5b d5 fe 2c c0 cb 15 7a c5 3f 30 d7 9d f9 c1 4f 22 ab e8 39 56 0f 3a 9f 64 1e e8 3f b9 2d 3b 2e ac 0f c9 cc 33 34 c2 bf 2b cc 38 97 5b 57 5a 2d 20 d2 26 1f 64 00 cc e2 59 9d 66 85 4a ab 73 4d 21 Data Ascii: B/]t\Po=`et?pFvYL`R@L4si#K{--vVo!FkR0<D`(t?a#@}tXdCqd+IqREdM5qPjE:B1!H'9A[,z?0O"9V:d?-;.34+8[WZ- &dYfJsM!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49905	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	699	OUT	GET /xxrz/1200x600/793/40/31/4031ee4fad85314df43b8f30d191dad9/4031ee4fad85314df43b8f30d191dad9.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:40 UTC	720	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: image/jpeg Content-Length: 418738 Connection: close Last-Modified: Mon, 25 Mar 2024 20:16:12 GMT Vary: Accept-Encoding ETag: W/"6601db8c-6a939" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6953 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gkj5XzhMVfKBpFDtMenK8yKTINbBFcHgtUfxf4QOdNDyUouTqMia%2Bbr3nBwkJHI4XJx5ElQnxtruafav5Dpl0HgaE8%2BJhg4wEeVHFkVLQuu5SY8M3jjQzcqVuNvekT6l6f4W"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a823aa048dfd-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:40 UTC	649	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 02 03 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 77 00 ed d2 1d a0 8e 4c 1d ca 38 62 8a e2 b4 c6 c3 82 29 29 d2 29 15 b3 8f 83 89 e0 35 72 85 91 86 27 bf dc 31 0c 3a f4 94 09 69 ba 4c b2 f9 11 91 c7 ba c2 f5 26 d9 83 59 3f c5 90 cb b9 31 b6 0a a5 ac 55 cf 16 63 94 2a 9b c8 6a c2 d9 2d 07 bc 06 4d ab 25 41 1c 58 b7 78 fa 84 64 d1 f3 b6 9f 24 1f bd 12 6a f2 c2 29 29 eb 5a c7 9b c8 d3 4f 63 70 79 22 e3 5b 7a 92 9d a0 a7 55 63 6b 2a 54 da 52 b7 dc d2 aa 0d 59 6f 1b 5f 5e 60 88 ac 09 e6 c5 aa a6 7a ba dc 0c 61 55 51 47 58 3b 59 54 bb 44 08 d7 8d 92 b4 aa df b4 27 b1 fc a9 2d ff 00 6f e3 e8 dd 0c dd 5d 24 5d 90 c0 c9 47 ad 80 80 69 1b 97 ab 5d 86 7e 46 b5 b0 00 6c 1f 58 c6 c9 5d 12 e1 e2 9e 56 48 1e 4e 87 36 14 35 f7 ec 82 47 ce 3e 44 61 ac e7 51 52 5e 61 e8 24 be 48 73 d3 0b 93 24 66 73 ca 76 25 86 53 20 cc Data Ascii: wL8b)))5r'1:iL&Y?1Ucj-M%AXxd$j))ZOcpy"[zUckTRYo_^`zaUQGX;YTD'-o]$]Gi]~FlX]VHN65G>DaQR^a$Hs$fsv%S
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 93 a1 6a cb ad 23 e6 bd 6c 84 ad 23 96 8d 82 3a 75 82 7d 14 3a 1d 23 07 5c 88 ce 25 54 a2 ae 5b 86 15 a5 5c 33 19 41 ab 90 9c 45 0c 5d 3a 77 5d 76 06 83 d7 42 de a0 1d f5 d0 a1 b0 37 17 43 b7 7e 8c 05 bd b5 ce fc 5a 16 b4 9f d2 1d 0d 03 2b b7 7d 41 68 3a 92 42 8d d0 aa 41 3e 39 55 ea 49 b3 5e 34 8d b0 b7 72 df 2b 09 55 2d d5 27 f5 6b 06 82 06 b1 86 f9 78 33 90 54 aa f6 5c d1 70 77 16 c2 19 cc 07 5c fb 7a 55 b9 fa 0b 85 44 e6 d2 cd 74 76 a7 da 57 6a fd f8 91 63 64 6b d2 32 ac 4a e2 59 91 80 8c 0b 4f 22 47 c8 65 3b f4 25 14 66 a5 49 47 f8 ca 99 6a cc 42 5f ce 94 7f ee 6b 88 c4 80 ed 75 be 39 5d 7a da b2 bb 74 cb 4e 8a 05 88 24 f1 cc 72 b1 f7 61 95 0f 93 52 99 87 61 99 74 bf 34 f7 68 f3 b4 2a d3 36 c4 ec 3d ca b4 0d f4 3e 96 a2 59 6d b9 11 6a 62 05 ff 00 90 Data Ascii: j#l#:u}:#\%T[\3AE]:w]vB7C~Z+}Ah:BA>9UI^4r+U-'kx3T\pw\zUDtvWjcdk2JYO"Ge;%fIGjB_ku9]ztN$raRat4h*6=>Ymjb
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: fc d7 c4 3d d6 cf 58 3e 8a ec 92 bc 4b 09 e9 f2 c6 17 1d a1 2d 39 ec c1 7b cf f5 e7 2a ff 00 6b 3d 73 2f de cd 80 84 5c bd 24 5c eb 9c cc dd 32 5e 19 db 18 e2 64 8b 1a 5a b7 86 ec a4 49 ba a4 d5 16 25 60 e6 58 13 84 4e 17 5a 9a 93 65 46 ca 8a ab 59 62 fd 8a 48 cf 7e 57 96 e4 05 9d 3d b6 a8 db c4 d5 aa da d2 ac 34 13 a5 f7 8b 45 f6 1f 33 5b 64 f8 49 8f 3b 6e ff 00 f2 57 d5 2f 16 34 7c db 36 f2 6a 3e dd ef 63 58 b7 76 af ed a2 44 d7 fa df 60 96 7c 6f b4 18 e9 10 ae 6b ed 36 dd 6f b4 b7 5b 5e eb 5d f5 a6 99 06 ad 2c 5e 54 f5 0e ae 4e 06 3d 8c e0 f9 f8 41 a5 a3 a3 0f 5f 13 36 89 45 97 ed 2c fb 4d 51 ac 66 79 f5 ea df e1 3f 13 ea d3 6e 5d 7f bb d9 0a 78 1b 86 87 96 6f 24 26 a5 09 4b 4b ad 6a 6e e2 7d 66 85 c2 9f 32 db ef 83 06 56 42 1e a5 b9 68 f7 05 49 c0 39 Data Ascii: =X>K-9{*k=s/\$\2^dZI%`XNZeFYbH~W=4E3[dI;nW/4\|6j>cXvD`\|ok6o[^],^TN=A_6E,MQfy?n]xo$&KKjn}f2VBhI9
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 8e 2f 94 70 70 f3 9c a9 89 b2 a3 32 b2 a2 ad 9a 9c e2 8e 9d b0 e0 0d fb 37 d7 56 a2 87 b5 6b b7 5a f7 27 47 25 a5 56 5b 5e 7f 67 53 7d 1a f3 43 7c 51 10 2a dd 7a 90 f2 9b bb 30 ef 42 6c 67 d0 bc ef 95 76 bd 43 67 6d 22 f1 8a 40 5c f6 0e 61 81 30 65 93 41 df 34 3b e0 a5 a5 7c 01 ec bc 4b 70 86 35 7b 53 b4 c8 33 2e 3d 84 f4 57 1b b7 90 f5 1f 95 f8 56 f5 3d f4 0f 23 1f af de cc 03 ef 5f 9d 62 bf 04 17 13 7e 90 40 41 3e ec d2 61 c9 ee 8d 97 07 ce eb 46 cc d6 cb 44 7d bf ed 5a 4f bb 7e 4f d7 86 36 31 7b 33 57 d0 2f 52 a9 6b 87 d5 f8 8c df 70 fd bd 72 f9 17 eb 87 9b 4a b3 e3 db 34 80 4a 6a 9c 96 1b 2e ce 39 6c a3 23 44 94 61 4d e8 02 cb 94 18 f5 25 7f e7 4c 7d cb 35 ab fd 78 26 2c fb fb 5f f6 d3 2f 4a a6 76 8b 71 24 f8 76 cb 5e 8d cc 6e 3a a5 86 35 62 eb ee ef Data Ascii: /pp27VkZ'G%V[^gS}C\|Q*z0BlgvCgm"@\a0eA4;\|Kp5{S3.=WV=#_b~@A>aFD}ZO~O61{3W/RkprJ4Jj.9l#DaM%L}5x&,_/Jvq$v^n:5b
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: ba 5e c0 6b cf da 4f ed 93 28 c9 58 3a 45 e9 a6 0d 76 c6 d8 b5 9c 3a ad 79 cd eb 2b 5e eb fd 37 bd f4 bc 90 a9 9e fb c5 92 f9 17 e4 f4 a8 79 31 74 c7 fb 87 95 99 91 be 64 9a d6 7a f3 7c 6b 33 20 69 f5 27 c7 0d d8 cd f4 5b 25 b1 9a 6f 7a f9 ef 7d b1 75 cd c3 a9 f9 28 56 6f 9a 49 bb 3b 5e 65 7b d1 4f 39 fd 18 f1 fb 35 4e ef 68 d6 de eb 67 f9 4c b0 c2 f9 b4 18 f5 d5 f9 af 0b 5d bd 79 8d 6a e5 94 00 9f 4d 6c a5 a8 0c e8 e5 88 64 06 96 30 b2 ad 34 a6 74 3a 65 1d 35 16 f6 46 f2 88 04 eb 16 98 a9 64 16 84 ea bb 16 95 d0 48 85 63 66 52 ba 69 6c 6d 11 7b 46 f2 db 95 f5 c4 de 4b 07 4d 95 ca 0c 2d 9c e1 4c f5 a3 19 5b d6 fb 51 06 ef cd 76 8f f3 f7 7d 74 a3 43 1f d0 75 d7 7a af 63 1e 2d c5 4c 58 7a b9 b6 aa 8b 6a b6 3e 85 5b 2a 5d 51 9f ac dd 0b 25 71 97 a1 00 ed 60 Data Ascii: ^kO(X:Ev:y+^7y1tdz\|k3 i'[%oz}u(VoI;^e{O95NhgL]yjMld04t:e5FdHcfRilm{FKM-L[Qv}tCuzc-LXzj>[*]Q%q`
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: c2 60 cc 5d 2e 5a c0 c4 a3 77 c5 d5 ab 5b 90 32 36 39 a6 18 32 a4 6e fa 6a db b5 16 17 8e d7 ae 28 b5 de 34 9d 44 79 5b db 54 a1 47 70 9d 49 75 f3 1b 33 2f 6a e9 e9 7b 7c cd 0f a7 5d df 5b b6 27 52 b3 b4 19 0f 25 7d 59 aa fd aa b6 b1 5d cf b6 f5 47 63 75 7b dd f9 57 e6 64 67 77 53 b0 ad 9a 65 f3 35 ac 38 d9 d7 70 f5 a8 16 25 49 09 69 91 ac ae bd 5c 55 bb 0f 35 59 0a ac 5b 12 28 11 57 1e cd af eb 23 1d ea 62 ba 0c 65 a5 73 33 61 e9 46 77 87 67 34 e7 7a be 79 e8 f4 08 23 f9 db 82 d6 cf 66 50 b8 ac f9 68 af 30 7f dc fe 69 8a 3e 48 85 a6 08 59 e1 94 18 57 b8 df 78 f4 97 6b 75 4a ce f2 3e b2 ea 48 79 46 0b 45 46 04 b3 0e af 82 0d 89 4f fe 8f cb fc fb 1f 22 e7 7e 6c a7 48 67 6b 36 6c 76 ab fa 6e ab 9e 12 75 91 1f db f8 9e 76 e9 90 94 f8 be c6 0a 60 79 80 d3 fa Data Ascii: `].Zw[2692nj(4Dy[TGpIu3/j{\|]['R%}Y]Gcu{WdgwSe58p%Ii\U5Y[(W#bes3aFwg4zy#fPh0i>HYWxkuJ>HyFEFO"~lHgk6lvnuv`y
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: f3 f4 11 99 43 e9 be 1f 20 a9 d1 0d 5e a3 25 7c e8 c7 b3 fa bd b0 eb 9b d2 65 e6 9c 5e 5b d2 d0 fb f5 af 1b 37 9c e7 d7 0c 6f 42 2a d4 06 19 f6 aa 53 7a a8 33 8a ef 1a bc e2 ea 5a f2 8b b1 7a f9 63 79 85 a4 de 9d f9 95 e8 3c fe 09 e0 8c ea 66 48 c3 9b 1d f8 60 46 75 ab 53 39 b0 06 a3 a7 f5 eb da 3a 28 d2 70 bb a1 e6 8f 97 bb df 3e 58 36 2e 26 e5 46 c1 68 d6 68 90 3f 94 75 ca 8b 4b e2 cf 1b 23 0b e7 9c 2f 7f aa 5d 73 b6 3d e8 d7 c4 b4 bc 7d 01 ec 40 c8 8f 28 7d c5 a6 2e c5 59 60 6f 59 b2 97 a5 3d e4 86 fb e8 03 8b 7a 8d a6 1b bf a5 8a 31 e2 de 0c dd 3d 87 9c 23 d3 e6 0e e2 3f 30 fd af 10 f7 17 c3 4f 76 31 35 3d 0c f3 6b 7c f2 e0 6a 69 75 3b e8 10 f1 9b 49 e9 5f 45 85 bb 5d 5a aa f7 88 6d 2f e6 94 7f 4a 55 19 a7 9d 7b 3b 7d 77 28 b5 d3 15 fb 9e dd 5d bf 18 Data Ascii: C ^%\|e^[7oB*Sz3Zzcy<fH`FuS9:(p>X6.&Fhh?uK#/]s=}@(}.Y`oY=z1=#?0Ov15=k\|jiu;I_E]Zm/JU{;}w(]
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 8b 58 ac 93 e6 a8 08 9b c0 36 60 ec bd 12 ac c1 f2 5a 1b 12 18 f1 0a d4 1b 71 33 59 7a 71 46 c7 3a cd 05 62 0a 5a 93 60 c8 8f 95 b0 b2 4a 8b 96 e3 9b f6 18 c6 17 52 92 18 ce e6 4a 95 7d df 1b 00 3f 2e 39 68 b5 b8 54 8c 2c e3 8a 9d 16 60 b8 39 f0 24 c2 4a 5f 02 63 86 76 e3 5b b2 8b 17 9f d4 81 ab 1b 1f ae 3a 19 af d4 fd cb af 9e 8b 2f bf 78 1d fd 06 4f 50 66 c0 f7 03 b7 a9 cb 0c 46 79 22 ac 54 77 b3 5a 2b b6 f4 98 64 0d 27 16 36 a0 e3 d5 f3 6a 0c 87 68 5f cb d2 39 ed 52 67 4f 42 eb 65 bb ba 61 8b 27 aa 6c 1e 38 cd 02 12 f1 75 a2 53 27 78 6e b6 ed 2d 06 e9 55 e8 67 39 74 14 dd 31 5a 56 8f b3 0c 1a 57 04 98 ae ab e8 0e e8 f9 fb bf 5e 53 d5 12 6d 4f 76 cf d0 da 0e 99 86 ae 31 91 b1 41 3c 77 c3 25 7c a2 b6 e6 d0 76 59 03 4b 27 ec 3e b1 ae 6b e7 cf 1d f8 d0 6d Data Ascii: X6`Zq3YzqF:bZ`JRJ}?.9hT,`9$J_cv[:/xOPfFy"TwZ+d'6jh_9RgOBea'l8uS'xn-Ug9t1ZVW^SmOv1A<w%\|vYK'>km
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 91 2a f0 bc c6 f4 c3 cc 47 03 36 80 ba 69 d8 ef 3c fa 77 c7 eb 7c cf 69 70 a7 44 c8 26 20 85 78 44 42 03 ef 1d c8 8d 9d 5e 9d df 1f 79 ee 9d 3b e0 af 7e d0 6c 9a fe c5 f2 fb 42 7b e0 31 14 e1 4c 32 2e 3c 5a cb b3 9a e4 23 7e 64 e6 6e 0e 8c ea a9 eb 5e b5 6c ae ba f9 ad ab a3 4f 76 9f 5c 86 e2 ee cd d2 7b 56 ab d6 35 d1 46 5d c7 0c f8 e6 53 48 a8 6f 3e 7d 08 d1 9d 9c b8 33 88 d4 ba d9 d5 98 7e e3 ee 2c 73 a1 fc eb dc f5 15 bd 57 8e f7 3d cb a8 e5 04 5d aa ed 4d b5 06 ef f0 46 8f 8b b3 1f 57 25 dd 98 da 71 aa c3 38 30 18 e3 98 06 09 95 6a 30 30 0d 8d 68 81 5d 9f 1b a4 01 c6 a1 5a f2 34 bd af f8 ce 91 07 65 09 d4 7d 9a ae fb a9 8e d2 6a 33 62 f3 40 e0 b2 5d 17 3d b2 d2 82 e9 e6 7d 23 31 5f 99 10 6b 5c eb d7 a5 3d cc 68 ea ec 01 fd 16 30 e2 30 09 16 b3 a1 e4 Data Ascii: *G6i<w\|ipD& xDB^y;~lB{1L2.<Z#~dn^lOv\{V5F]SHo>}3~,sW=]MFW%q80j00h]Z4e}j3b@]=}#1_k\=h00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49907	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	698	OUT	GET /xxrz/250x400/793/4c/da/4cdad402503a9f291521cdf4de162cf0/4cdad402503a9f291521cdf4de162cf0.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:40 UTC	719	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: image/jpeg Content-Length: 57064 Connection: close Last-Modified: Wed, 06 Dec 2023 14:37:38 GMT Vary: Accept-Encoding ETag: W/"65708732-1da2d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6953 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MWnBUNZ06rpqf2nCnk6h6v4P80Y7vZlaOKWUOpKpjSH%2BBBNSO%2F0hNYY2PuNK5DpZoGF0Yn5ij92iqbRSAoYjSEwTp1ULfp2aEqNpxenA3AU3KkD6TuJB320GKWZOD9Gn5nzy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8250ed66db6-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:40 UTC	650	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 71 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCq"
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 41 74 48 f2 3c cb ae bb 42 45 cb ce 28 2f 55 29 97 ab 79 bc 5b 6b 54 69 a8 24 c2 66 e6 4c ed 56 94 ff 00 4e f2 5d a4 21 3f 70 76 af 97 de 83 79 89 ad 83 a3 77 ce 85 b5 53 7a b1 70 cc 98 af 9e 38 60 9f 45 ac 8c 60 a7 8c 19 6e 38 7b 40 f4 23 ad 3a 27 1d 66 9f 64 a1 f9 cb 9f 27 df 5e 6e 73 cd 2c f3 ad 70 31 18 f4 94 64 72 c1 61 b1 5a df 6e d3 89 8d 77 b5 3f 8d 72 d2 ee c9 d6 fb 92 2e dc 5a b9 2e 5b 92 8d 4f 1a b9 e7 76 f7 ab 5e 31 76 16 07 55 eb 35 5d 85 e8 18 de 0b eb 9f 36 36 84 86 fc c6 c6 ac 1e ad 8b 19 31 f7 f5 49 35 97 b3 12 93 b8 b9 59 56 a7 fc a6 a3 73 56 f3 16 78 2d bf 1c 86 06 50 73 ac 38 43 b8 b2 41 75 a1 24 6e 44 66 49 2b 36 11 c5 3f 10 db 23 51 65 c3 93 a9 d5 c2 93 9e 19 3d 85 b7 78 b1 33 8c 35 df da 0b 4e cb 58 66 96 4a f6 96 b8 37 51 7a e9 ad Data Ascii: AtH<BE(/U)y[kTi$fLVN]!?pvywSzp8`E`n8{@#:'fd'^ns,p1draZnw?r.Z.[Ov^1vU5]661I5YVsVx-Ps8CAu$nDfI+6?#Qe=x35NXfJ7Qz
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 90 96 43 c2 7c 59 30 ad 1d 47 6e b6 2c 01 17 27 0b 66 17 7f 5f da 20 ad 56 e1 8b bc d2 65 e9 cd 41 77 65 13 c7 a6 0b 6b 54 8d 8e 91 b1 52 ac 55 ee ca f4 8e 8c e8 c1 8f e0 36 24 5a 61 0a 49 0e a0 e5 b3 87 37 21 29 0f 6a 86 23 4b 21 20 d2 35 21 69 02 34 75 28 b1 92 4b 5e 35 47 30 3c f7 68 66 a1 a3 3b 6b 70 9a 08 d8 88 81 35 b6 5b 35 26 44 7d dd a7 4b a1 b6 50 82 02 ec 00 00 90 70 dd c3 9a b2 34 4a d2 24 8e 77 20 49 2e 2c 62 34 ec ed f2 63 e2 25 24 d7 72 5a 2a db 9e 9d cd 8f cc db 08 83 92 75 a8 3a cb 99 88 d2 82 34 19 41 e9 00 46 80 03 88 00 38 80 01 a8 00 12 0e 9a b9 91 a5 8c 26 4e 19 02 63 d4 40 24 00 34 88 c8 73 80 11 2e 9b d6 21 2c b2 90 e4 ee ca 6c ed 45 76 e3 e9 09 b0 d7 9d 19 10 11 a0 00 62 00 04 80 01 20 00 48 3a 6a e2 46 e2 cd 85 29 de 9d 57 3c ec Data Ascii: C\|Y0Gn,'f_ VeAwekTRU6$ZaI7!)j#K! 5!i4u(K^5G0<hf;kp5[5&D}KPp4J$w I.,b4c%$rZ*u:4AF8&Nc@$4s.!,lEvb H:jF)W<
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 46 67 a7 1a 4b 22 d1 55 b5 ad 57 47 e7 25 a1 d7 10 d2 73 bd 41 b5 9a e4 99 6e ba a3 33 f9 b7 dc b8 a4 c2 1c 53 6a f3 09 4a 78 ed e5 c9 04 ae dc 34 9b 09 62 53 b1 23 b7 19 89 77 cf 35 33 7d d1 7c d4 43 85 94 bf 58 b9 6a e9 83 4b 63 a6 40 d3 f3 ec 12 5d f6 04 90 84 6c 65 cd b0 c3 f1 b7 b2 6b 9c 6f 1f 62 1b 36 76 4d d6 46 c7 24 35 76 ec 97 7a 4d 6a 3e 50 b9 12 df 93 ce ae 71 cc 63 98 c6 e7 f2 ec 08 86 c1 29 1c 9b 84 36 19 68 cd 04 83 da b6 ae 7d b3 fa 77 84 f9 15 2b ab 36 da cf b2 db d8 a3 13 84 aa ba 1c eb 29 b0 a6 ad b7 bf 9b 66 f7 39 98 51 03 22 1b 7c 84 43 60 44 09 20 88 25 21 29 09 21 5e 8e 73 f0 8f 90 c4 30 98 b4 31 18 42 50 59 07 59 c6 72 99 d2 11 6f 3f 59 27 2e 6e 53 99 dc e5 92 37 33 f4 9f 12 2d c1 8d 8c 36 8e 70 b4 ec 7c 48 81 24 11 02 20 90 90 45 Data Ascii: FgK"UWG%sAn3SjJx4bS#w53}\|CXjKc@]lekob6vMF$5vzMj>Pqc)6h}w+6)f9Q"\|C`D %!)!^s01BPYYro?Y'.nS73-6p\|H$ E
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 39 97 54 37 18 ec b1 5f 5d 36 da 67 e9 6e a1 09 71 24 c0 94 db 6b 75 cf d2 dd 42 16 d4 f6 74 53 4b ee c3 19 be a9 80 dd 15 ab b5 49 e6 30 cc 43 11 d9 92 a7 22 e3 d7 0f 2e a7 19 3a 69 36 d9 0c 2a a8 19 1e 53 3a d1 69 b2 9e 94 fa 08 10 42 8d 07 a7 72 22 5c c6 cd 73 0d 41 52 87 e1 cb f7 c6 a1 fe fb d3 2f e4 0f c4 3f ef e1 a4 7f c8 da bd 96 6a 05 3e 67 21 f7 a5 48 a7 ff 00 2f ae 59 16 65 45 36 e6 c6 d2 d6 c8 4a c7 63 e5 fa 5d 5e d2 d8 d1 24 17 74 ab 95 35 cf 93 53 20 12 4e 25 de 53 1d 53 b2 0c 80 ee 1f 53 dd fd 24 0b 87 e1 c6 c6 5a e4 6a 36 a8 e4 97 8d 8f c3 97 ef 9d 43 fd f7 a6 5f c8 1f 88 7f df c3 49 3f 91 b5 73 55 72 ac 5b 27 14 df e5 f5 9f 51 b2 2c 16 5d 8c f9 16 b6 01 dc ab f2 a5 ae aa d3 46 a9 c1 13 d8 6c 7c 88 59 b4 a9 ba aa cc 7c 5e 55 8c a9 83 9b e1 Data Ascii: 9T7_]6gnq$kuBtSKI0C".:i6*S:iBr"\sAR/?j>g!H/YeE6Jc]^$t5S N%SSS$Zj6C_I?sUr['Q,]Fl\|Y\|^U
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 24 0a ea d1 6b 18 12 70 22 84 55 09 55 1a 2c 8a 69 62 93 3b 97 bb df 3a 02 50 e5 56 16 d3 86 d7 b6 99 89 5c a7 0b 5e 81 c3 9a 2a 66 19 8b 6e ca f0 5d a6 86 62 05 85 c2 8d db 46 8a 49 0b 1c a5 0e 65 16 65 af 8d 62 68 bd 4a 9c e6 8a 38 cc 85 6f 25 d1 98 99 55 c8 25 65 91 4e 47 23 4b 2a 90 a3 5b d4 54 ac e0 05 a7 86 1e 36 73 ba 50 2f 99 50 65 1a 5c 20 71 23 aa dc 85 de e4 1c 28 80 24 8c 84 10 71 4b 37 ae c4 62 99 75 00 e5 71 cc 1e 9c c9 fd 75 c5 45 3b c2 c5 58 78 7f 8e 08 c8 11 83 06 b8 b9 1d 87 4b 8e fe cb ff 00 db 12 24 4f 66 4b c6 49 e2 4f 79 7a 58 af 5e 77 fb b1 51 56 64 eb 6e c0 34 03 96 19 af e9 11 b3 0b db 4e d3 a7 f9 f9 61 61 04 85 05 a4 63 f0 a0 eb d9 a8 d7 e5 85 d9 12 58 19 1a 18 bb 9e 53 9b fe 44 71 f7 fc b0 76 62 7f bf 86 ff 00 66 53 f2 b3 c6 ba Data Ascii: $kp"UU,ib;:PV\^fn]bFIeebhJ8o%U%eNG#K[T6sP/Pe\ q#($qK7buquE;XxK$OfKIOyzX^wQVdn4NaacXSDqvbfS
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 5b f9 66 26 f7 d4 76 e2 a0 76 76 e1 ac 0e b7 38 57 54 20 d8 fe bb f1 bc 53 26 6c da 37 3f 97 68 c4 52 46 92 01 f0 dc 71 6b 8a c9 1c 50 a5 28 50 22 36 a8 52 00 bb e6 24 66 62 2f a8 d4 0e cb 9b eb 6b 58 73 ec fc 71 9b 29 38 5d 79 ae 23 8c 66 1a f9 61 72 a0 2c 79 01 85 53 3d 54 0f bc 46 8b 3a 12 9a 10 a0 10 58 15 27 8b 41 a5 fe ec 4a db 99 a6 17 01 37 84 46 55 15 58 80 79 9b 22 f7 5c db 5e 9a 62 96 ac cb 22 8b ee e5 e1 eb 65 a8 b0 2a d1 f4 0a cc 0d d3 e1 cf e3 86 47 a5 aa 40 46 5e 2b c6 d6 37 ca 4f ba 6e 4d 88 b7 53 71 d7 a5 aa 11 48 88 e5 1e e7 11 1d 6c 6f fe 5f 66 d8 9c 68 70 f6 1a fa 39 62 fa 62 88 9a bd 9b 51 00 6b cd 4d 1c 8e 8b cd dd 0d 9b 28 d2 e7 dd 21 57 a7 20 40 6b 62 ae 33 4f 39 8a f9 86 54 75 6f de 59 10 30 23 a7 5b 78 83 cb 16 bd fb 6f 80 3a 62 Data Ascii: [f&vvv8WT S&l7?hRFqkP(P"6R$fb/kXsq)8]y#far,yS=TF:X'AJ7FUXy"\^b"e*G@F^+7OnMSqHlo_fhp9bbQkM(!W @kb3O9TuoY0#[xo:b
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: a8 ab 23 68 d6 a2 29 d6 a2 37 cf 4f 65 9a 39 04 aa d9 4b 64 b0 75 cc 14 8c 84 5b 42 a7 5d af b6 76 ae d7 08 fb 49 a9 5c 89 4c 85 e1 a5 d9 f4 f3 3c 92 8e 26 99 a9 22 8e 59 4f 6e f7 36 52 4f 22 da d2 7d 20 da 5b 2a 96 58 68 a5 80 43 57 b9 35 11 cf 49 4b 57 1c a6 0b 98 89 4a a8 65 03 21 91 88 b7 5d 7a 0b 4f 34 95 13 4b 3c 99 77 93 c8 d2 be 44 48 93 3b b1 63 92 38 d5 63 8d 6e 78 51 15 51 46 8a 00 b6 21 db db 66 f5 b2 a5 40 cd b5 28 d6 8e b7 d9 47 96 6a 71 12 44 aa 16 d9 15 96 34 0a 24 40 1c 5d ac 6e c6 ea 2a 4e 99 c2 f8 28 fc c6 2a 9f 85 61 cc cc c2 ed 2b 5f ae 99 57 f9 47 11 ef 6f b3 e8 6f ac 94 8f 13 80 ed 4e d9 c8 80 02 ec 78 e7 df 44 8f 71 1b 01 91 e2 66 0d cb 44 60 72 b2 b6 16 32 d6 b5 35 19 cc ca e2 ed 6f eb 70 3b aa 5c a5 b7 71 dc e5 16 f6 32 08 94 b5 Data Ascii: #h)7Oe9Kdu[B]vI\L<&"YOn6RO"} [XhCW5IKWJe!]zO4K<wDH;c8cnxQQF!f@(GjqD4$@]nN(*a+_WGooNxDqfD`r25op;\q2
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 5a 99 23 e2 e9 85 59 61 ba 34 c5 10 c4 59 2d a5 cf 13 43 84 8e 51 99 d7 30 76 19 45 4f d1 98 4f 0d 98 a3 b2 98 b8 95 22 32 62 e1 34 b0 32 b4 2a bc 5e 15 44 9a 0c 75 1c 39 15 f1 2e 61 5a 43 ff 00 c1 64 95 44 e2 21 bc 9a 9a 3b d2 ab cd a5 e9 47 2a 99 aa 34 80 cd c4 5a 52 e1 84 73 23 63 37 c8 e9 9e 36 9a 9e 3f 57 9e da 83 20 68 94 9d 9a cf ca ca 37 dc f2 2b 79 59 b7 c5 35 4b 35 e3 97 69 23 3a 1f 7b f3 0e ff 00 23 d7 fa 6e 03 2a bd 8d ec 41 0c a5 49 04 11 d0 ec 47 4e d8 c9 f3 79 4c a2 8e b6 4d 7a bf 31 3b d8 39 3f a2 90 8b 07 3f 51 ec 18 9b 2b 6b 66 0d e8 96 7a aa da 86 48 8f 1a a6 67 25 de dc 91 6a eb b8 1d 16 db 5c 93 f3 62 49 ca 32 34 a7 50 4f 3c 86 c5 a4 6e a7 fd bc 87 41 88 62 58 96 ca 2d fc 7d 0d 72 a4 29 0a d6 3a 58 8d 40 1e c7 4d c5 ed e5 71 7f 3c 54 Data Ascii: Z#Ya4Y-CQ0vEOO"2b42^Du9.aZCdD!;G4ZRs#c76?W h7+yY5K5i#:{#n*AIGNyLMz1;9??Q+kfzHg%j\bI24PO<nAbX-}r):X@Mq<T
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: a0 ea 42 76 eb a8 9b 5a 14 35 d5 eb 4e 54 18 61 56 76 8d ef a6 6b 69 22 c0 04 dc 12 39 8b 15 f8 1d f1 4f 93 66 15 2f 1f 15 16 9e 03 cd 2e a3 a9 b4 1f f2 c2 ab 6c c7 a6 fc a1 48 26 fb a6 22 a3 86 04 58 e1 55 8d 54 58 05 45 03 ee 16 18 02 c3 fb ff 00 7f 49 71 7b 75 38 79 74 0b 91 b7 7d f0 ac 1c 5c 7a 09 c3 3d b1 23 9c 33 77 c5 76 66 b4 73 90 45 f5 00 7f 7f cf e3 8b 19 9b 40 24 2f 42 56 d7 d2 36 b0 3e ee a6 53 7e bc aa 2c 39 8d 84 cb 47 9a 42 63 b8 54 11 c5 23 5f db 77 3b 21 3b 76 b1 23 ed b7 43 88 2a b5 5b cb 6c 2c 81 bd 2e fa 14 9f bb e7 86 9f 87 cc 77 27 a0 f8 f7 27 e5 8c db c4 95 d4 d7 e1 f0 f6 22 d7 5b 83 cd d3 af f0 c6 47 99 a6 63 4c 93 af 23 13 c2 9e 3f d1 ca 00 3b 1f aa 43 29 1f 02 3b 83 82 70 c7 0c 7b e1 db 12 36 3c 41 25 eb 17 7f f2 cf 98 ef 88 9d Data Ascii: BvZ5NTaVvki"9Of/.lH&"XUTXEIq{u8yt}\z=#3wvfsE@$/BV6>S~,9GBcT#_w;!;v#C*[l,.w''"[GcL#?;C);p{6<A%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49908	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	631	OUT	GET /home HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:40 UTC	947	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AWRCiRInVjMwXJ74ewBOop68P%2BF%2BGwSsmuUo%2BQijQDaRLxrM5Zhf2zG3XhAxcNPOTpAw5MfGa9hFAnUywfG1L7fCShu6QCIX5egPMejhjTUpn97Wj2PfjgxTCCu85jY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a825e8192263-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:40 UTC	422	IN	Data Raw: 37 62 66 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 23 31 4d 6f 76 69 65 73 20 7c 20 57 61 74 63 68 20 46 72 65 65 20 53 74 72 65 61 6d 69 6e 67 20 4d 6f 76 69 65 73 20 61 6e 64 20 54 56 20 53 65 72 69 65 73 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 Data Ascii: 7bff<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/> <meta
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 22 3e 0a 0a 3c 6c 69 6e 6b Data Ascii: ref="//www.google-analytics.com"><link rel="dns-prefetch" href="//www.gstatic.com"><link rel="dns-prefetch" href="//fonts.gstatic.com"><link rel="dns-prefetch" href="//cdnjs.cloudflare.com"><link rel="dns-prefetch" href="//static.zdassets.com"><link
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 20 53 74 72 65 61 6d 69 6e 67 20 6d 6f 76 69 65 73 20 6f 6e 20 31 4d 6f 76 69 65 73 2e 74 6f 2e 20 31 4d 6f 76 69 65 73 20 69 73 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 62 73 69 74 65 20 66 6f 72 20 66 72 65 65 20 6d 6f 76 69 65 73 2e 22 2f 3e 0a 3c 21 2d 2d 42 65 67 69 6e 3a 20 53 74 79 6c 65 73 68 65 65 74 2d 2d 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 34 2e 34 2e 31 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 Data Ascii: Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/>...Begin: Stylesheet--><link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css"><link rel="stylesheet" href="https://cdnjs
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 5f 43 3c 24 2e 43 42 3b 24 2e 5f 43 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 75 2e 64 28 74 2c 24 2e 43 61 2c 74 29 2c 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 26 26 6e 5b 24 2e 43 63 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 43 69 5d 3b 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3b 7d 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 75 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 24 2e 43 46 5d 5b 24 2e 43 4a 5d 5b 24 2e 42 7a 5d 28 6e 2c 74 29 3b 7d 2c 75 2e 70 3d 24 2e 42 75 2c 75 28 75 2e 73 3d 24 2e 42 78 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 66 75 6e 63 74 Data Ascii: _C<$.CB;$._C+=$.y){switch($._C){case $.y:return u.d(t,$.Ca,t),t;break;case $.BD:var t=n&&n[$.Cc]?function(){return n[$.Ci];}:function(){return n;};break;}}},u.o=function(n,t){return Object[$.CF][$.CJ][$.Bz](n,t);},u.p=$.Bu,u(u.s=$.Bx);break;case $.y:funct
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 6e 5b 24 2e 47 75 5d 28 24 2e 64 79 29 2c 72 3d 74 5b 24 2e 63 6a 5d 28 29 5b 24 2e 65 46 5d 28 29 2c 65 3d 74 5b 24 2e 42 74 5d 28 24 2e 64 79 29 3b 62 72 65 61 6b 3b 7d 7d 7d 29 2c 75 5b 73 2e 5a 5d 3f 28 6c 3d 21 24 2e 42 44 2c 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 5a 5d 29 29 3a 75 5b 73 2e 57 5d 26 26 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 57 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 6e 3d 74 5b 24 2e 63 72 5d 28 29 5b 24 2e 64 64 5d 28 29 5b 24 2e 47 75 5d 28 6e 65 77 20 52 65 67 45 78 70 28 24 2e 64 7a 2c 24 2e 42 75 29 29 2c 75 3d 24 2e 24 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 74 5b 24 2e 49 69 5d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 65 77 20 77 69 6e 64 6f 77 5b Data Ascii: n[$.Gu]($.dy),r=t[$.cj]()[$.eF](),e=t[$.Bt]($.dy);break;}}}),u[s.Z]?(l=!$.BD,($.BD,a.$)(u[s.Z])):u[s.W]&&($.BD,a.$)(u[s.W]);break;case $.BD:var n=t[$.cr]()[$.dd]()[$.Gu](new RegExp($.dz,$.Bu)),u=$.$();break;}}}},t[$.Ii]();break;case $.BD:var t=new window[
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 43 42 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 4f 62 6a 65 63 74 5b 24 2e 65 5d 28 72 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 2c 72 2e 56 3d 72 2e 51 3d 72 2e 6e 6e 3d 72 2e 74 6e 3d 72 2e 72 6e 3d 72 2e 65 6e 3d 76 6f 69 64 20 24 2e 42 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 44 43 3a 63 26 26 28 63 5b 24 2e 42 5d 28 61 2c 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 63 5b 24 2e 43 5d 28 61 2c 74 29 2c 5b 28 24 2e 42 44 2c 69 2e 75 6e 29 28 6e 5b 24 2e 63 73 5d 29 2c 28 24 2e 42 44 2c 69 2e 69 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 42 5d 5b 24 2e 74 5d 29 2c 28 24 2e 42 44 2c 69 2e 63 6e 29 28 6e 65 77 20 65 28 29 29 2c 28 24 2e 42 44 2c 69 2e 66 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 72 5d 5b 24 2e 62 78 5d 29 2c 28 Data Ascii: CB);break;case $.y:Object[$.e](r,$.Cc,$.$($.Ij,!$.BD)),r.V=r.Q=r.nn=r.tn=r.rn=r.en=void $.BD;break;case $.DC:c&&(c[$.B](a,function t(r){c[$.C](a,t),[($.BD,i.un)(n[$.cs]),($.BD,i.in)(window[$.bB][$.t]),($.BD,i.cn)(new e()),($.BD,i.fn)(window[$.br][$.bx]),(
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 43 4a 3d 24 2e 42 44 3b 24 2e 5f 43 4a 3c 24 2e 46 73 3b 24 2e 5f 43 4a 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 4a 29 7b 63 61 73 65 20 24 2e 43 66 3a 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 66 6f 72 28 24 2e 5f 42 6b 3d 24 2e 42 44 3b 24 2e 5f 42 6b 3c 24 2e 43 42 3b 24 2e 5f 42 6b 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 6b 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 65 3c 3d 74 26 26 74 3c 3d 75 3f 74 2d 65 3a 6f 3c 3d 74 26 26 74 3c 3d 63 3f 74 2d 6f 2b 69 3a 24 2e 42 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 5b 24 2e 42 76 5d 28 29 5b 24 2e 62 43 5d 28 24 2e 42 44 Data Ascii: :$.Cr;break;}}},function(n,t,r){for($._CJ=$.BD;$._CJ<$.Fs;$._CJ+=$.y){switch($._CJ){case $.Cf:function a(n){for($._Bk=$.BD;$._Bk<$.CB;$._Bk+=$.y){switch($._Bk){case $.y:return e<=t&&t<=u?t-e:o<=t&&t<=c?t-o+i:$.BD;break;case $.BD:var t=n[$.Bv]()[$.bC]($.BD
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 44 64 3d 24 2e 42 44 3b 24 2e 5f 44 64 3c 24 2e 43 66 3b 24 2e 5f 44 64 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 44 64 29 7b 63 61 73 65 20 24 2e 43 42 3a 76 61 72 20 75 3d 72 28 24 2e 44 43 29 2c 76 3d 72 28 24 2e 46 6c 29 2c 6c 3d 72 28 24 2e 42 44 29 2c 66 3d 74 2e 70 6e 3d 6e 65 77 20 6a 28 24 2e 61 42 2c 24 2e 42 75 29 2c 69 3d 28 24 2e 43 73 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 3a 24 2e 24 28 24 2e 61 2c 6e 75 6c 6c 29 29 5b 24 2e 61 5d 2c 77 3d 24 2e 43 78 2c 79 3d 24 2e 43 79 2c 62 Data Ascii: c,$.$($.Ij,!$.BD));break;case $.BD:$.Cr;break;}}},function(n,t,r){for($._Dd=$.BD;$._Dd<$.Cf;$._Dd+=$.y){switch($._Dd){case $.CB:var u=r($.DC),v=r($.Fl),l=r($.BD),f=t.pn=new j($.aB,$.Bu),i=($.Cs!=typeof document?document:$.$($.a,null))[$.a],w=$.Cx,y=$.Cy,b
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 24 2e 5f 65 3d 24 2e 42 44 3b 24 2e 5f 65 3c 24 2e 43 42 3b 24 2e 5f 65 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 65 29 7b 63 61 73 65 20 24 2e 79 3a 72 5b 24 2e 61 76 5d 3d 6e 2c 69 5b 24 2e 46 5d 28 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 72 3d 6e 65 77 20 45 76 65 6e 74 28 74 29 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 74 2e 4f 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 72 65 74 75 72 6e 20 68 5b 24 2e 43 67 5d 28 6e 75 6c 6c 2c 24 2e 24 28 24 2e 47 6f 2c 6e 29 29 5b 24 2e 61 61 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 28 24 2e 42 44 2c 75 2e 64 6e 29 28 72 2c 74 29 3b 7d 29 5b 24 2e 42 74 5d 28 24 2e 65 67 29 3b 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 Data Ascii: $._e=$.BD;$._e<$.CB;$._e+=$.y){switch($._e){case $.y:r[$.av]=n,i[$.F](r);break;case $.BD:var r=new Event(t);break;}}},t.On=function(r,n){return h[$.Cg](null,$.$($.Go,n))[$.aa](function(n,t){return($.BD,u.dn)(r,t);})[$.Bt]($.eg);};break;case $.BD:$.Cr;brea
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 2e 43 77 29 29 3b 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 76 61 72 20 74 3d 79 28 24 2e 46 71 2c 24 2e 47 45 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 6c 5b 24 2e 42 6e 5d 3d 24 2e 42 75 3b 62 72 65 61 6b 3b 7d 7d 7d 29 2c 28 24 2e 42 44 2c 61 2e 6b 6e 29 28 29 29 72 65 74 75 72 6e 3b 62 72 65 61 6b 3b 7d 7d 7d 63 61 74 63 68 28 6e 29 7b 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 69 66 28 76 28 75 29 2c 77 69 6e 64 6f 77 5b 24 2e 43 5d 28 24 2e 47 6c 2c 6e 29 2c 24 2e 63 47 3d 3d 3d 6c 5b 24 2e 44 73 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6c 5b 24 2e 44 74 5d 3d 21 24 2e 42 44 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 24 2e 4a 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 77 3d 6e 65 77 20 65 28 29 3b 62 72 65 61 Data Ascii: .Cw));});break;case $.y:var t=y($.Fq,$.GE);break;case $.BD:l[$.Bn]=$.Bu;break;}}}),($.BD,a.kn)())return;break;}}}catch(n){}break;case $.BD:if(v(u),window[$.C]($.Gl,n),$.cG===l[$.Ds])return void(l[$.Dt]=!$.BD);break;}}}},$.Jj);break;case $.y:w=new e();brea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49910	104.17.25.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	560	OUT	GET /ajax/libs/popper.js/1.15.0/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:40 UTC	944	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-52aa" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 16 Apr 2025 18:32:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HJSNKVmu4ZOyYy6An2lEDqe%2BiSW5x311CAZxLGaGj55t6behg0ftw3QOiDFuU7mH00ck5BM4Eo61lJZDGhdzV61saDdQzdIvCMnk%2FhFd5ItfEwxBdQRCzMvn9yl00TIPfhv1IWSQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a8a825edd767e7-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:40 UTC	425	IN	Data Raw: 35 32 61 61 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 39 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 52aa/* Copyright (C) Federico Zivolo 2019 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 72 6e 5b 5d 3b 76 61 72 20 6f 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2c 6e 3d 6f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6e 5b 74 5d 3a 6e 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 Data Ascii: rn[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.bod
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 27 74 6f 70 27 2c 6f 3d 27 74 6f 70 27 3d 3d 3d 74 3f 27 73 63 72 6f 6c 6c 54 6f 70 27 3a 27 73 63 72 6f 6c 6c 4c 65 66 74 27 2c 6e 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3b 69 66 28 27 42 4f 44 59 27 3d 3d 3d 6e 7c 7c 27 48 54 4d 4c 27 3d 3d 3d 6e 29 7b 76 61 72 20 69 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 72 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 7c 7c 69 3b 72 65 74 75 72 6e 20 72 5b 6f 5d 7d 72 65 74 75 72 6e 20 65 5b 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 Data Ascii: guments[1]?arguments[1]:'top',o='top'===t?'scrollTop':'scrollLeft',n=e.nodeName;if('BODY'===n\|\|'HTML'===n){var i=e.ownerDocument.documentElement,r=e.ownerDocument.scrollingElement\|\|i;return r[o]}return e[o]}function f(e,t){var o=2<arguments.length&&void 0
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 57 69 64 74 68 2d 64 2c 68 3d 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2d 61 3b 69 66 28 66 7c 7c 68 29 7b 76 61 72 20 75 3d 74 28 65 29 3b 66 2d 3d 6d 28 75 2c 27 78 27 29 2c 68 2d 3d 6d 28 75 2c 27 79 27 29 2c 70 2e 77 69 64 74 68 2d 3d 66 2c 70 2e 68 65 69 67 68 74 2d 3d 68 7d 72 65 74 75 72 6e 20 67 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 6f 29 7b 76 61 72 20 69 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 70 3d 72 28 31 30 29 2c 73 3d 27 48 54 4d 4c 27 3d 3d 3d 6f 2e 6e 6f 64 65 4e 61 6d 65 2c 64 3d 75 28 65 29 2c 61 3d 75 28 6f 29 2c 6c 3d 6e 28 65 29 2c 6d 3d 74 28 6f 29 2c 68 3d 70 61 72 73 65 46 6c 6f 61 74 28 Data Ascii: Width-d,h=e.offsetHeight-a;if(f\|\|h){var u=t(e);f-=m(u,'x'),h-=m(u,'y'),p.width-=f,p.height-=h}return g(p)}function b(e,o){var i=2<arguments.length&&void 0!==arguments[2]&&arguments[2],p=r(10),s='HTML'===o.nodeName,d=u(e),a=u(o),l=n(e),m=t(o),h=parseFloat(
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 34 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 34 5d 2c 73 3d 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 2c 64 3d 70 3f 45 28 65 29 3a 61 28 65 2c 74 29 3b 69 66 28 27 76 69 65 77 70 6f 72 74 27 3d 3d 3d 72 29 73 3d 77 28 64 2c 70 29 3b 65 6c 73 65 7b 76 61 72 20 6c 3b 27 73 63 72 6f 6c 6c 50 61 72 65 6e 74 27 3d 3d 3d 72 3f 28 6c 3d 6e 28 6f 28 74 29 29 2c 27 42 4f 44 59 27 3d 3d 3d 6c 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 29 3a 27 77 69 6e 64 6f 77 27 3d 3d 3d 72 3f 6c 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 6c 3d 72 3b 76 61 72 20 66 3d 62 28 6c 2c 64 2c 70 29 Data Ascii: 0!==arguments[4]&&arguments[4],s={top:0,left:0},d=p?E(e):a(e,t);if('viewport'===r)s=w(d,p);else{var l;'scrollParent'===r?(l=n(o(t)),'BODY'===l.nodeName&&(l=e.ownerDocument.documentElement)):'window'===r?l=e.ownerDocument.documentElement:l=r;var f=b(l,d,p)
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 69 65 77 2c 6f 3d 74 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 29 2c 6e 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 54 6f 70 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 7c 7c 30 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 4c 65 66 74 7c 7c 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 6d 61 72 67 69 6e 52 69 67 68 74 7c 7c 30 29 2c 72 3d 7b 77 69 64 74 68 3a 65 2e 6f 66 66 73 65 74 57 69 64 74 68 2b 69 2c 68 65 69 67 68 74 3a 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2b 6e 7d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 76 61 72 20 74 3d 7b 6c 65 66 74 3a 27 72 69 67 68 74 27 2c 72 69 67 68 74 3a 27 6c 65 66 74 27 2c 62 6f 74 Data Ascii: iew,o=t.getComputedStyle(e),n=parseFloat(o.marginTop\|\|0)+parseFloat(o.marginBottom\|\|0),i=parseFloat(o.marginLeft\|\|0)+parseFloat(o.marginRight\|\|0),r={width:e.offsetWidth+i,height:e.offsetHeight+n};return r}function T(e){var t={left:'right',right:'left',bot
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 70 6f 70 70 65 72 2c 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 6f 64 69 66 69 65 72 73 2e 66 6c 69 70 2e 70 61 64 64 69 6e 67 29 2c 65 2e 6f 72 69 67 69 6e 61 6c 50 6c 61 63 65 6d 65 6e 74 3d 65 2e 70 6c 61 63 65 6d 65 6e 74 2c 65 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 6f 73 69 74 69 6f 6e 46 69 78 65 64 2c 65 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 43 28 74 68 69 73 2e 70 6f 70 70 65 72 Data Ascii: s.options.placement,e.offsets.reference,this.popper,this.reference,this.options.modifiers.flip.boundariesElement,this.options.modifiers.flip.padding),e.originalPlacement=e.placement,e.positionFixed=this.options.positionFixed,e.offsets.popper=C(this.popper
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 4d 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c 69 29 2c 69 2e 70 75 73 68 28 70 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6f 2c 69 29 7b 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 3d 69 2c 41 28 65 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 72 65 73 69 7a 65 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 6e 28 65 29 3b 72 65 74 75 72 6e 20 4d 28 72 2c 27 73 63 72 6f 6c 6c 27 2c 6f 2e 75 70 64 61 74 65 42 6f 75 6e 64 2c 6f 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 29 2c 6f 2e 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 72 2c 6f 2e 65 76 65 6e 74 73 45 6e 61 62 6c 65 64 3d 21 30 2c Data Ascii: ener(t,o,{passive:!0}),r\|\|M(n(p.parentNode),t,o,i),i.push(p)}function F(e,t,o,i){o.updateBound=i,A(e).addEventListener('resize',o.updateBound,{passive:!0});var r=n(e);return M(r,'scroll',o.updateBound,o.scrollParents),o.scrollElement=r,o.eventsEnabled=!0,
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 2e 62 6f 74 74 6f 6d 29 2c 72 69 67 68 74 3a 66 28 6e 2e 72 69 67 68 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 2c 74 2c 6f 29 7b 76 61 72 20 6e 3d 44 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 65 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 69 3d 21 21 6e 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 6e 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 69 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 Data Ascii: .bottom),right:f(n.right)}}function K(e,t,o){var n=D(e,function(e){var o=e.name;return o===t}),i=!!n&&e.some(function(e){return e.name===o&&e.enabled&&e.order<n.order});if(!i){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 69 3d 28 31 3d 3d 3d 6e 3f 21 72 3a 72 29 3f 27 68 65 69 67 68 74 27 3a 27 77 69 64 74 68 27 2c 70 3d 21 31 3b 72 65 74 75 72 6e 20 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5f 28 65 2c 69 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e Data Ascii: ction(e,n){var i=(1===n?!r:r)?'height':'width',p=!1;return e.reduce(function(e,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return _(e,i,t,o)})}),a.forEach(fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49909	104.17.25.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	569	OUT	GET /ajax/libs/twitter-bootstrap/4.3.1/js/bootstrap.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:40 UTC	962	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb04010-e2d8" Last-Modified: Mon, 04 May 2020 16:17:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 7184 Expires: Wed, 16 Apr 2025 18:32:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W%2BzL1YdtzHKGcaqOhGdxAm58%2BHKBhrA8Fh5b3zEUQ0JhbIr%2BmW98HXjLyYy5dwAvme7AuN33hgFR5Alm9%2BC2oqqGbJmuB7rS9Kqp18Ek%2BOStn6U0vvu7%2FDKY8iHemBgd5FfuIAIy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a8a825ea75a539-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:40 UTC	407	IN	Data Raw: 37 62 66 30 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bf0/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 67 2c 75 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 Data Ascii: (["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Objec
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 46 72 6f 6d 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 65 3d 67 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 29 2c 6e 3d 67 28 74 29 2e 63 73 73 28 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 22 29 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2c 6f 3d 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 3b 72 65 74 75 72 6e 20 69 7c 7c 6f 3f 28 65 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 65 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e Data Ascii: itionDurationFromElement:function(t){if(!t)return 0;var e=g(t).css("transition-duration"),n=g(t).css("transition-delay"),i=parseFloat(e),o=parseFloat(n);return i\|\|o?(e=e.split(",")[0],n=n.split(",")[0],1e3*(parseFloat(e)+parseFloat(n))):0},reflow:function
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3b 74 26 26 28 65 3d 74 68 69 73 2e 5f 67 65 74 52 6f 6f 74 45 6c 65 6d 65 6e 74 28 74 29 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 6f 73 65 45 76 65 6e 74 28 65 29 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 74 68 69 73 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 28 65 29 7d 2c 74 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 72 Data Ascii: tion(){function i(t){this._element=t}var t=i.prototype;return t.close=function(t){var e=this._element;t&&(e=this._getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()\|\|this._removeElement(e)},t.dispose=function(){g.removeData(this._element,r
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 5b 76 5d 2c 53 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 22 66 6f 63 75 73 22 2c 44 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 77 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 75 74 74 6f 6e 73 22 5d 27 2c 41 3d 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 2c 4e 3d 22 2e 61 63 74 69 76 65 22 2c 4f 3d 22 2e 62 74 6e 22 2c 6b 3d 7b 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 45 2b 43 2c 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 3a 22 66 6f 63 75 73 22 2b 45 2b 43 2b 22 20 62 6c 75 72 22 2b 45 2b 43 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e Data Ascii: [v],S="active",b="btn",I="focus",D='[data-toggle^="button"]',w='[data-toggle="buttons"]',A='input:not([type="hidden"])',N=".active",O=".btn",k={CLICK_DATA_API:"click"+E+C,FOCUS_BLUR_DATA_API:"focus"+E+C+" blur"+E+C},P=function(){function n(t){this._elemen
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 73 74 28 4f 29 5b 30 5d 3b 67 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 49 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 67 2e 66 6e 5b 76 5d 3d 50 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 67 2e 66 6e 5b 76 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 50 2c 67 2e 66 6e 5b 76 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 66 6e 5b 76 5d 3d 54 2c 50 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 4c 3d 22 63 61 72 6f 75 73 65 6c 22 2c 6a 3d 22 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 48 3d 22 2e 22 2b 6a 2c 52 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 78 3d 67 2e 66 6e 5b 4c 5d 2c 46 3d 7b 69 6e 74 65 72 76 61 6c 3a 35 65 33 Data Ascii: st(O)[0];g(e).toggleClass(I,/^focus(in)?$/.test(t.type))}),g.fn[v]=P._jQueryInterface,g.fn[v].Constructor=P,g.fn[v].noConflict=function(){return g.fn[v]=T,P._jQueryInterface};var L="carousel",j="bs.carousel",H="."+j,R=".data-api",x=g.fn[L],F={interval:5e3
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 69 73 2e 5f 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 65 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6f 74 29 2c 74 68 69 73 2e 5f 74 6f 75 63 68 53 75 70 70 6f 72 74 65 64 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 30 3c 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3d 42 6f 6f 6c 65 61 6e 28 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 4d 53 50 6f 69 6e 74 Data Ascii: is._config=this._getConfig(e),this._element=t,this._indicatorsElement=this._element.querySelector(ot),this._touchSupported="ontouchstart"in document.documentElement\|\|0<navigator.maxTouchPoints,this._pointerEvent=Boolean(window.PointerEvent\|\|window.MSPoint
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 66 66 28 48 29 2c 67 2e 72 65 6d 6f 76 65 44 61 74 61 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 6a 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 74 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d Data Ascii: his._element).off(H),g.removeData(this._element,j),this._items=null,this._config=null,this._element=null,this._interval=null,this._isPaused=null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},t._getConfig=function(t){return t=
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 51 2e 44 52 41 47 5f 53 54 41 52 54 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 7d 29 2c 74 68 69 73 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 3f 28 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 50 4f 49 4e 54 45 52 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 29 2c 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 50 4f 49 4e 54 45 52 55 50 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 74 29 7d 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 4a 29 29 3a 28 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 54 4f 55 43 48 53 54 41 52 Data Ascii: Q.DRAG_START,function(t){return t.preventDefault()}),this._pointerEvent?(g(this._element).on(Q.POINTERDOWN,function(t){return e(t)}),g(this._element).on(Q.POINTERUP,function(t){return i(t)}),this._element.classList.add(J)):(g(this._element).on(Q.TOUCHSTAR
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 5a 29 29 3b 67 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 67 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 6f 2c 72 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c Data Ascii: s._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll(Z));g(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&g(n).addClass(V)}},t._slide=function(t,e){var n,i,o,r=this,s=this._element.querySel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49911	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	698	OUT	GET /xxrz/250x400/793/f8/a1/f8a16dbbb585ff763b323c908ceccf38/f8a16dbbb585ff763b323c908ceccf38.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:40 UTC	733	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: image/jpeg Content-Length: 84228 Connection: close Last-Modified: Fri, 19 Apr 2024 08:20:50 GMT Vary: Accept-Encoding ETag: W/"66222962-13a8e" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6953 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NygNmEJlgRd4gr%2BlXtqYf1SeK%2B7SIanUOvf9TOYeZiih8NgmK%2FV72rJH6V%2FcUAIGW5%2Fq7boOpHQFyII%2BGv6gZzRzpQbmXbW%2FRtS997E%2F%2FLszn08BAiNLpR76hBsBsGCgwq0b"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a825ea707434-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:40 UTC	636	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: ef 6d 01 65 fc ed 4e 21 99 11 02 00 dd 51 93 21 5e 73 b8 95 2c c3 8e 30 9e b9 91 07 b4 81 5b a5 10 02 f2 ac fa 4e 72 a1 f1 fa 53 96 9f 57 d2 80 bb b5 46 ae 13 04 7f 38 c6 96 f6 fa d5 ee 8b 90 a6 8f bf f2 eb b2 1b db 49 04 3d 3c ec 3c 5d 26 85 c1 75 b5 a8 ad d2 29 1d bd bc a0 2b 7c 55 9a 62 a2 f7 7e 2d cd aa b3 7f 29 90 47 0b a4 25 4f 1b 16 1b c3 a4 95 c2 5d 8e 99 da 73 d0 8d 63 2a 8d a9 5f 0a b1 7c 1d a0 44 53 7c e9 b5 69 b8 63 4a 8d b2 75 93 85 ad 00 d1 6c 7a 31 50 6d e3 5e 77 9b 97 45 fd 87 7d a2 29 2a 2e 3a ad a1 f5 f8 ac ce d2 24 61 2a c6 1a 52 6d 10 91 c1 f6 a0 94 cb 8a 88 8a cb 46 6e 6c 72 be 6a 83 7c a4 0f 93 26 72 76 82 1f 57 7b 1d 81 8c 31 90 dd ca d6 6b 78 7e 44 04 87 44 65 3d 41 4c ef 53 94 79 2b b2 5c 7a 44 97 3c c7 c4 19 73 b3 85 9c a9 96 b1 Data Ascii: meN!Q!^s,0[NrSWF8I=<<]&u)+\|Ub~-)G%O]sc_\|DS\|icJulz1Pm^wE}).:$a*RmFnlrj\|&rvW{1kx~DDe=ALSy+\zD<s
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: a4 65 97 69 c7 30 79 f8 19 3c 57 32 89 7c 25 ae 15 b4 db 5a 41 3a 79 81 c3 d9 e2 4d a2 89 fa ca f1 7c f2 ec c7 2d d5 a9 ce be 73 b5 08 f0 05 77 b2 51 cf d2 39 54 12 f0 5b b2 ff 00 3d 8c a4 d7 8d 9a 33 d4 d0 d4 2e ce 28 08 75 e4 fb 9b 38 69 5a 91 ab e6 5f ab cb 99 1d 7a 4d 77 0e bf 93 33 e4 5c f6 a4 5b a8 18 54 d8 48 41 f7 b1 a8 d2 cd 6a 79 43 18 d5 36 4c 55 ea 7e c6 5d f0 d3 71 ec 3d d5 3f 9a 7d 92 c2 53 0a bb 5f 52 b5 37 0e 1e db d9 70 86 c0 0f 4d b3 96 27 90 e2 5b e0 f8 58 25 d1 9e 6d d5 0d cc 38 63 a8 43 d6 73 68 5e c6 72 7f 45 5b ce 1e 96 73 f9 a7 37 21 5c 4a 17 7f 56 e8 5a 3d 2c 53 3a 21 b0 5c e0 17 8e 9c 36 50 1b 83 3b dc 8e 2b 8d 8e 87 25 74 31 3c a3 8e 8f 49 25 db 0a 71 aa e3 4d 42 ac 08 17 39 74 5c 0e e7 a8 87 2a 3c d6 9d 92 77 a6 b6 ef 1a 99 bd Data Ascii: ei0y<W2\|%ZA:yM\|-swQ9T[=3.(u8iZ_zMw3\[THAjyC6LU~]q=?}S_R7pM'[X%m8cCsh^rE[s7!\JVZ=,S:!\6P;+%t1<I%qMB9t\*<w
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 5e ba 2e c5 21 a9 b2 3a 57 0b 27 c3 5b 3a 1b c5 5a fc fd 6e cb c8 bf fa 65 7f 09 5a 35 1a 6e db 24 12 de 51 37 c2 bb 53 db e2 88 c5 ac d6 7c a7 a8 59 ee 55 db 66 a5 65 a8 59 c4 e4 52 26 a3 47 72 07 88 99 1d be 83 87 d4 56 3a 1a 3f 0d 0d 39 95 19 98 a0 77 28 2f b7 05 e8 aa cc 70 79 c8 43 eb 81 10 a3 0e 57 b8 e6 d6 22 22 9f c7 a7 89 5b b5 7f 27 a0 ef e3 7d ba 82 b3 50 ba da 28 67 5c 37 6e d6 33 f9 06 b0 72 c1 bd a0 16 d9 fc bb 53 6a 7f 2e d5 d5 b4 7b 84 2b 5d 94 7b 3e b9 1d 45 b5 ea dd 75 3d a3 5a 83 11 36 ad 61 73 cc 12 a1 db 6c f0 42 d7 cf 2b 54 c4 ea f6 e5 74 96 91 a1 93 f1 9c 1b f8 ce 64 eb b9 1e d8 92 3d ee 50 b3 96 31 30 91 da 4c 74 7e 31 5a 8d c8 50 54 89 3e 5f a1 a7 12 b7 35 18 87 29 7c 75 19 ad dc 67 40 1c 98 77 15 c6 ad b1 d3 e9 ff 00 09 ab 6d 14 Data Ascii: ^.!:W'[:ZneZ5n$Q7S\|YUfeYR&GrV:?9w(/pyCW""['}P(g\7n3rSj.{+]{>Eu=Z6aslB+Ttd=P10Lt~1ZPT>_5)\|ug@wm
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: b0 eb 34 6f 84 bd ed 22 b8 b1 1f ed 6b d5 bc a0 d0 a9 93 63 5a 1e 3c 7d 6b 63 8c 1d 5e aa 55 5d 5b 5a d6 e4 0b 5a d9 24 81 30 13 e3 8b 96 e2 c8 e1 3f c8 0a 1b 29 86 d5 76 59 35 ce a6 db 63 de df 79 4f c8 16 ce 0d dd f4 85 2b 51 c8 20 81 2c 87 1a cc fa 6c ad 6f 6f 97 35 b6 f7 d2 af f5 f9 d5 20 7c 98 92 83 36 17 89 b4 97 c6 b0 f2 0d 48 e6 d3 c6 8e e7 cb f2 45 f4 32 69 33 36 b9 56 74 f4 62 51 66 91 e4 2b 4a c5 a2 b4 af bc ad 96 8c f8 e7 84 5f 73 63 76 54 8c ad 45 10 fb 7e a2 47 c8 04 66 ec 7b 3c 99 56 15 e1 03 e7 48 be b0 87 66 02 24 88 92 17 85 90 3f 93 1e e7 c4 5b 37 be c2 d0 c9 65 32 7c 59 42 30 98 8b 0c 6b 14 d2 ee 62 b1 0c d9 33 49 17 e5 47 ca fd b6 ea 2b ac 6f 64 cf 7d 78 ac 63 c9 d4 36 08 d6 50 ee 63 fc da fb 2d 56 da 4b fc a3 b2 4b 0d b8 87 da 76 e3 Data Ascii: 4o"kcZ<}kc^U][ZZ$0?)vY5cyO+Q ,loo5 \|6HE2i36VtbQf+J_scvTE~Gf{<VHf$?[7e2\|YB0kb3IG+od}xc6Pc-VKKv
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 03 ed 24 a2 b6 96 4b d5 64 57 db ca 58 90 ea e9 c9 15 49 53 65 0e d6 20 cd 2c 60 f5 bf f2 0f 33 20 0f a4 e3 21 3b ff 00 e2 bd a7 21 10 ed 62 ae 0d bc 92 39 05 1c b5 67 79 e6 5b d3 91 cb 25 ea 52 c0 ad ee 33 d7 7e 3d 2a b6 4b ab bb 99 65 6a b6 63 ea a9 41 b9 f9 0a 56 c8 ed 6f c7 96 d7 ee d6 e9 2b 75 c8 72 2c 87 5f 57 b9 db 12 6c df 18 69 ad db b6 1d 9b 49 ad ac 9d 63 5c 58 a5 84 56 b3 22 bc 13 75 f9 52 7a bb 55 87 0e 1d 6b 9e 92 86 e0 1f da e7 7e 50 ed 6b 0e a3 8c 3c 1b d5 85 8e 33 24 b1 0a 54 84 4f 5b 11 18 cc 1f a9 5a 67 35 71 96 e6 88 49 97 12 ec d4 7d 04 ef cb c6 aa 66 d7 b4 da ed 67 ac dc f4 9d 66 3d f7 92 e8 a1 c3 87 1f 65 df ad 75 cf 1f 56 d1 e0 81 c6 44 5e 53 ca 5b a5 74 6a 72 c9 2c e3 ea 95 23 d2 f5 7d f6 82 35 fc 99 f2 63 95 90 99 fd 96 a7 05 46 Data Ascii: $KdWXISe ,`3 !;!b9gy[%R3~=*KejcAVo+ur,_WliIc\XV"uRzUk~Pk<3$TO[Zg5qI}fgf=euVD^S[tjr,#}5cF
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 10 53 6d 7f a8 6c 91 70 31 0e f6 01 6b 27 ec 5b 84 bf 40 5e 49 72 6e 2c 21 88 23 10 9e 26 2a f3 f2 0a 8c 7c 97 91 7b b1 b8 c4 ea e5 6a b1 23 85 3e 62 39 7e 58 38 6a 89 bf bb 88 9e c4 44 32 b8 8e ee 21 21 a3 ac 5f 88 6f db bb bf ae 4a 4a 71 a3 96 53 9e 01 bd a2 70 ff 00 b1 a2 f6 74 a6 b1 85 41 4a b6 73 5c ba 44 5f 8a 39 37 82 7a 1a 79 25 be fb 62 68 32 b6 a2 20 61 5f d9 44 3b db d3 23 c4 49 0f 90 c6 67 5f a5 2f 18 d6 fe a9 dc 6e ed dc 8f fd 33 95 f7 95 8d 69 5c e7 28 24 31 a4 c8 dd 91 b6 12 5a 8f 2c 94 62 58 cc 57 e1 ff 00 ad e4 eb 8a 4f d7 95 42 94 4f 86 f0 f6 54 0f 29 10 64 57 23 7d 9d 5e 76 42 01 3d cb 61 b4 c9 5a c1 b6 58 e3 e5 cd f5 8d d4 b2 af 7c 14 57 20 b9 5e 3d 23 72 c8 8a 8f 4f c7 b8 20 71 3f 75 13 79 20 9d 1a 37 a0 9e 86 2b 95 cd 88 73 09 83 4e Data Ascii: Smlp1k'[@^Irn,!#&*\|{j#>b9~X8jD2!!_oJJqSptAJs\D_97zy%bh2 a_D;#Ig_/n3i\($1Z,bXWOBOT)dW#}^vB=aZX\|W ^=#rO q?uy 7+sN
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 99 4c ff 00 fa e9 35 a6 a6 87 65 80 64 62 2a 11 bc 4c fd f1 73 b5 00 35 1d f6 ce 4d f6 74 76 8e 58 65 3b e9 3b 3c 76 84 9e d0 cc 66 12 36 43 fd 39 8f de a2 1c 13 98 bd 00 36 cb 7c 0c 49 37 d8 f7 c9 c7 a1 b3 d1 67 ce 41 0c a0 f7 8d 10 ed 06 ce 22 ba a9 d0 ff 00 72 32 9a 9c 73 e3 35 e2 20 5f d9 f5 ec 19 20 63 da 02 51 98 48 f3 c5 1d 0c 94 d2 e8 cb fb 08 2a 06 90 a5 8c fa ce dc 2d d7 53 97 fb 22 73 39 85 94 48 b1 9c dc 1e c8 f1 bc ff 00 79 95 69 1c 4d a8 2e a2 18 26 93 ab 90 07 84 12 76 93 23 f6 56 11 12 ce 73 20 91 95 67 a5 9c 8a 2b 3f b4 fb a3 cc 40 57 f7 49 ac 65 21 fb 3d 9b a8 63 5c cb 4f a4 9b 22 73 0e d9 6c ae e5 93 dd 53 9a 39 b5 d6 41 44 ee d6 da 88 be d9 19 05 cf 66 57 b3 cb 1c 84 72 d6 5c b9 62 c6 3a 15 77 47 9b fe 58 8b 25 9e 9b 2e f9 bc ba 09 22 Data Ascii: L5edbLs5MtvXe;;<vf6C96\|I7gA"r2s5 _ cQH-S"s9HyiM.&v#Vs g+?@WIe!=c\O"slS9ADfWr\b:wGX%."
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 77 e7 e7 7e 78 9b 32 99 72 9a e3 d6 28 6b 02 94 b7 14 2e b6 f5 e4 e2 27 ca e6 4a 18 aa 29 4b 1f ba 3e 28 09 d3 7a 09 66 0d cf c5 e2 b3 d0 61 b3 21 1a 92 16 33 69 65 6e e8 78 4d 6c 08 76 d8 51 17 e1 04 ef c6 32 d9 b9 fd a2 3f 69 1b 59 52 b2 80 c0 6a e3 7a bd ff 00 9e 3b 57 27 17 79 97 cd a5 91 30 f7 4e fd db 20 40 00 35 74 47 17 66 c1 c6 4f 3f 9c d4 aa 18 13 e1 00 15 07 51 14 07 cc ec 3e a0 79 62 5c cc ef a7 bf 8d ac 58 17 7e 62 fa e3 2f 95 92 4f 77 dd 52 2c f1 e1 d8 d0 c4 d2 c8 47 70 0f 81 58 ef e9 b7 38 99 2b af f9 b6 0c 37 19 20 f1 bf 1e 5f 9f e1 85 0c 22 6b dd 49 b1 e4 0f 17 5e 7c 6f 88 75 a9 86 45 34 e8 c0 ad 79 82 0f 3f cc 75 c2 bb e7 33 1f 7a c7 c8 fe f1 3e 43 a7 c8 7f 5c 26 50 c6 47 74 4d 1d c1 e8 78 b4 6f f3 9c 77 f0 c2 40 9d 8c 52 79 48 0a 8a f2 Data Ascii: w~x2r(k.'J)K>(zfa!3ienxMlvQ2?iYRjz;W'y0N @5tGfO?Q>yb\X~b/OwR,GpX8+7 _"kI^\|ouE4y?u3z>C\&PGtMxow@RyH
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: fa 62 3c bb a3 6b 9a 86 9d ee c9 bf 2e 7c c5 6d f9 61 63 6e d0 ce 47 97 d2 4a bb f4 e9 12 90 7c 81 c0 ec 8e c8 c9 64 ff 00 e2 df 68 33 2b 95 cb e5 c2 a6 5b 29 b7 b4 e6 5b 4d a8 82 3b d4 d7 40 03 e1 51 b9 76 0a 2f 1d be c7 37 d8 91 67 24 8a 3c 93 66 8e ae cf c8 29 bc c7 b0 46 0e 9c cc f4 14 33 4b b9 f0 28 5d 2b f7 6a c2 dd b2 3a 7b d8 b5 a0 70 4d 48 b7 e1 7a aa 63 e4 68 d7 ad 61 82 8d 45 7a f4 f3 f4 bf c3 03 40 f7 99 87 50 3d d1 bd 7a 8f af 9f 3b 63 33 af 33 34 93 05 0a 09 02 be 80 59 aa 04 9e bb 63 b5 e7 68 e3 55 cb b1 4d 2a aa cd a6 e4 77 20 12 12 8d 91 d0 7c bd 71 1e 5d f3 19 43 23 46 c9 99 81 cf 7b ab 96 46 23 4b 7a 2f 46 07 7b df d3 11 c9 34 52 b4 d0 13 e0 60 35 f8 80 71 c1 41 b0 60 a4 78 76 f9 8d f0 fd a2 73 52 06 cc c2 35 e8 d3 a9 7e 22 0f 84 90 7a Data Ascii: b<k.\|macnGJ\|dh3+[)[M;@Qv/7g$<f)F3K(]+j:{pMHzchaEz@P=z;c334YchUM*w \|q]C#F{F#Kz/F{4R`5qA`xvsR5~"z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49912	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	698	OUT	GET /xxrz/250x400/793/f0/0a/f00a5135e76348df78f89978c48dd7fa/f00a5135e76348df78f89978c48dd7fa.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:40 UTC	728	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: image/jpeg Content-Length: 71614 Connection: close Last-Modified: Mon, 27 Nov 2023 04:01:53 GMT Vary: Accept-Encoding ETag: W/"656414b1-fd1d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6953 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=prsQLBBOqBMk6%2FRhMXbEjm9rh%2FVpLZB8SCcBzwNkarHbvT3V%2Bu%2BuUttxsx%2BueeJfRYkhIL0U8EJoqID%2Bv7mlKRMueq%2FiXMfwPl3V59XmawHD4aAh46oL2kpsaNaLRLTCTl49"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a825ebc98dc1-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:40 UTC	641	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 56 03 01 4f 0c 6d 96 64 69 f1 81 44 74 22 33 80 46 1f 14 29 5c d8 e3 d3 16 00 60 e0 d2 b9 00 24 4a b5 bf 84 c9 ae 40 c4 92 c8 97 6b bd fd e5 7f 5b c1 c3 e0 f7 ff 00 39 a7 f4 ab b3 39 ea 75 45 71 b1 da f2 cc d0 14 ad 76 fb e7 a8 f3 a2 60 ad 94 ab 02 48 7a cb 2e 88 b0 4f 23 cb 1b 9f 1b 8c 09 9c 08 11 b8 03 74 46 f1 d0 49 b0 f0 12 65 48 41 21 4f 45 24 7c 63 92 26 e1 0d 54 fa b3 9d 56 99 d6 22 91 f1 be 3c 96 9b 69 8a 0e 36 ef 1c b1 5b 21 ab 6c d2 8d 47 d0 ff 00 30 b0 71 8e 3a 48 9a 19 5a b0 87 4f 04 0f 12 1e 32 0d 50 ad 52 37 10 0a d4 4a 01 63 5b e2 10 0a 09 09 49 1c d1 28 48 93 c7 14 cf 21 11 64 0a a5 86 1c 58 7a 29 4c 5a b0 6f 51 e1 20 02 84 bc 30 a3 3c 02 cc 5c 98 22 e3 f4 20 61 46 18 01 5e 8d 70 1b e9 c5 81 6f 0c 67 83 c7 ad ee 20 ac 05 cb 9a eb 0a 6b 22 Data Ascii: VOmdiDt"3F)\`$J@k[99uEqv`Hz.O#tFIeHA!OE$\|c&TV"<i6[!lG0q:HZO2PR7Jc[I(H!dXz)LZoQ 0<\" aF^pog k"
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 61 92 ec 9d b0 a2 10 a7 78 02 5d 67 b4 a9 9b 6b 5c 2d 9f d2 3c bb 12 00 9b dc ff 00 84 38 a2 50 85 3b 9b 7f 42 b6 37 5d 94 30 ae ff 00 1d 49 da 9e 61 a3 18 53 ae 76 3e 87 f3 a7 bc 5c 30 d7 d6 35 5a f5 44 ea cb b7 1e d5 c0 76 6b cf 3d 4c 16 bb 65 b3 9c d0 d0 b3 2d 87 64 4f 35 56 d4 9a c1 23 cc 66 51 48 6b 05 cd 06 ef 69 96 ac 32 6e 3c fd ee 3a 91 1e ab 2a fe 5a 75 87 12 9c 60 3a 27 f4 83 81 32 75 e9 94 27 f0 85 3d 37 4f a1 1c 2b dc bc a5 af 49 97 45 94 e7 1f 98 f3 17 a1 51 09 8d 70 c1 7b 9c 6b 75 55 b4 bb 3b a6 16 8e 33 d1 77 12 6b a2 32 ac e6 a7 74 e6 3a 4d 61 d3 de ec ce a4 0f 46 ae b3 ed 2c ac aa bd 53 c5 3c 11 41 5a 55 a1 5a 67 42 0d f1 37 05 4d a2 07 41 2a 42 0e 0e 29 91 98 06 62 83 01 11 67 14 b3 ba 65 a7 7a f3 3b 70 ad 23 4e 1e 75 8f 9d 77 0d 6b b5 Data Ascii: ax]gk\-<8P;B7]0IaSv>\05ZDvk=Le-dO5V#fQHki2n<:Zu`:'2u'=7O+IEQp{kuU;3wk2t:MaF,S<AZUZgB7MAB)bgez;p#Nuwk
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 52 0e a8 13 f5 16 9e 2e a1 42 e0 fd 5a 5f 8c e0 9c 83 d5 34 b2 8e b2 c5 dd da cf 5f 77 6c 0b ce 3f c3 01 f1 18 1d a4 e1 58 2b 00 7a 17 08 87 3a 10 d1 c2 ac b1 c0 f1 5c 94 86 ae bd 25 c9 d3 83 18 4e 62 ea 5a db 35 b9 a4 ab d5 cc 2c ac b1 90 5b 8e bc fa dc a1 c6 27 d6 c7 81 1f 5c 0a cc 13 e1 97 e5 40 95 04 c5 9a 61 f2 53 08 e3 3b 67 1d b1 80 4c 12 0c 8f f6 1c 24 60 f6 39 18 fd 21 f5 bd b9 03 ae 0e 42 7f 76 03 06 8a ec a2 38 eb 8e 70 cb cc 4a 8a d8 f2 27 49 1f f6 00 2e 01 de 27 ee 31 47 63 17 e8 7d 7f e4 75 60 07 3c 13 d7 39 f9 ce 78 27 0f 3c 27 7e 4f 5e 42 2f ae af 5c fd fd 6d 2b 97 45 0f 1e b5 9a 19 b9 8d 98 c2 23 8e 21 22 e1 2b 0e 2f 13 4c 63 74 c6 4e 5d 78 c1 23 77 5e ac 80 72 e0 7c 75 61 91 28 97 19 22 e2 37 53 34 71 48 e3 d6 df 71 f6 1d 8e 2c 63 07 72 Data Ascii: R.BZ_4_wl?X+z:\%NbZ5,['\@aS;gL$`9!Bv8pJ'I.'1Gc}u`<9x'<'~O^B/\m+E#!"+/LctN]x#w^r\|ua("7S4qHq,cr
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 7f 21 0f e3 5a a9 9f 9b 3e 40 9b 0b 46 bf 89 c5 0d 6f e2 9f 69 5e 5f 1a f6 1b 3e 24 f0 c5 36 ad e1 cf 5f 52 f1 f6 56 4e a7 2b 2f 53 3c 1e a5 a1 14 13 64 b0 05 74 4f 52 c3 5a 79 60 f0 2f 08 b9 be da ae ba 75 5a 8b ee 97 98 62 9b eb 33 7a 3c 36 97 54 96 2a 66 59 25 a9 1c 79 f4 fe 8b 4f e4 be 39 4e 45 8b 6a 7d 6c 6b 2c 83 65 a6 82 73 e4 be 21 6b 47 66 95 ea f2 2c 7a 7d 44 8c 95 e0 a8 37 d1 cd b4 d7 c1 a7 8a 2a d0 78 da cd 36 cf 46 a4 6c f4 6b ce c7 52 23 c9 22 31 e4 b0 77 2d 59 bb fa 9d 1a e3 37 ae 39 5a 26 af 39 92 6b ff 00 a6 78 8d 3a 96 77 50 d5 35 33 9b 87 22 89 e0 3e ee 1f ea e2 1b 5e 2d 16 b3 de 9f 87 7a 13 0e be e5 91 f4 cb 5b 1c 57 34 71 88 21 d9 73 2c ca c5 70 c4 64 cb 75 92 5c de fd 34 5b 0c da 1f 26 a1 26 b3 4d b5 b2 f4 fc 6a 38 c1 a7 14 19 3b a3 Data Ascii: !Z>@Foi^_>$6_RVN+/S<dtORZy`/uZb3z<6TfY%yO9NEj}lk,es!kGf,z}D7x6FlkR#"1w-Y79Z&9kx:wP53">^-z[W4q!s,pdu\4[&&Mj8;
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 96 78 ae 7d 26 35 de 1f 0f a3 7a a4 df 4b e7 d4 d9 a7 56 05 8e e5 1b 11 65 55 77 1b 7d a5 5d 42 ef 7e a5 88 f2 ee ef 65 b2 70 eb cf 74 c0 cd 8c 80 9e 3a e3 1e 4f 1f a8 5e d8 57 8f b7 1c 8f a3 9b d4 86 d9 43 cf 07 80 ae b9 bb d2 c7 be d3 5c a9 3d 2b 39 a1 61 f9 3a 3b 31 f5 a7 63 88 e0 b4 a8 d5 76 7d 8a 6c 97 d7 33 2c ae 67 9e 06 d9 6c 55 17 67 e7 da ea 0d b4 fa ab b3 90 dc d9 5e d8 cd d4 64 a0 29 e4 82 9f b0 5f 80 a4 72 e7 9c e4 31 ed f6 24 0c 63 c9 4e 46 55 b1 2d 49 e1 fa bd b6 58 bd a1 31 2c 0e ac d1 f5 fa d5 e3 2b 5b 60 c3 83 4e 7f c6 b5 5a dc 9a eb 1a ad ec 0d 5e 9e fa 06 7a 5b ba ce d5 b7 2a 86 3d b8 ed 3e d1 78 f2 4f 26 1a f9 af dc 6b 7b 07 99 b0 c9 9e c7 7c 11 8c 6e 79 1f 19 c3 1c e4 28 67 e7 14 71 9f 18 5f e5 be 49 19 f2 4b 2f cf 66 cf 67 04 39 38 Data Ascii: x}&5zKVeUw}]B~ept:O^WC\=+9a:;1cv}l3,glUg^d)_r1$cNFU-IX1,+[`NZ^z[*=>xO&k{\|ny(gq_IK/fg98
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: f3 3c cf 36 8e 8e bb 2c 8d 1b 26 a4 2d a1 ea 6a 25 0e b2 cd b9 b1 10 47 dd 55 dc 96 97 50 07 41 c7 f8 87 a9 c9 ea 38 ec 7e ce 21 eb a2 cb 69 61 ce a5 46 bc 6d 58 97 ec 56 d6 16 96 3a 4e c4 49 ff 00 10 77 07 f7 60 90 41 1b 10 6e 08 e6 08 dc 11 e7 7c 7a 2f e2 fc b3 89 b2 f1 4b c5 35 a3 34 cf 32 e8 1a 92 9b 2f cc 44 65 2a e9 2d 68 e4 8c c8 7b 3a 99 74 7d 9d 49 70 65 d2 aa 48 22 ef 8e 35 93 28 97 89 33 26 c9 29 a1 a6 a3 13 ba e8 a6 da 99 a6 0c 7b 56 a6 5e 49 00 63 d9 c6 ab dd ee 16 00 06 b6 3d 15 fa 2d ca b8 9e 5a a5 e2 8f da 34 73 88 a0 9f 2f a6 5b 41 15 44 33 2e a4 96 43 a7 b5 64 36 b0 08 cb 61 cf 98 c7 a5 dc 8b 84 78 4a 4a 29 72 3a a5 a0 e2 28 8c 31 8a 0c ba 51 f6 4b 0a 85 f5 8a 90 a4 98 3d 91 6d 44 49 23 b5 ed 6b 91 51 51 3d 5c f2 d4 d4 cb 24 f5 13 c8 d2 Data Ascii: <6,&-j%GUPA8~!iaFmXV:NIw`An\|z/K542/De*-h{:t}IpeH"5(3&){V^Ic=-Z4s/[AD3.Cd6axJJ)r:(1QK=mDI#kQQ=\$
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: e3 ca 72 c9 0b e5 3c 2b 43 07 0f 50 68 b6 99 3d 47 6a aa 8b ee 19 a7 aa ed 49 61 ed 2a a9 eb 8a 0c ff 00 27 6e 1c 8b 24 ce 69 2b ea 7d 43 36 a8 cd 68 96 8a 68 20 8e a1 aa e9 69 a9 a6 a6 ab 9a 45 79 21 8f fe 99 24 ed 20 89 dd 81 64 1a 0d 9f 15 5e 92 2a 7d 57 87 e3 c9 32 ca 7c 9e a7 26 be b7 a7 50 69 99 52 b5 ea e1 82 18 08 25 51 fe c0 57 4b 34 92 d4 56 b5 3c 5d ac 96 53 ab 85 e5 cc 07 af 71 7e 62 94 e9 94 f0 e2 1a ac b3 2e a5 8d 20 a1 ab e2 2a 90 57 2b 8f d5 e3 b2 ce f0 48 4d 74 f2 cc 65 98 47 0d 99 ec 6d 8c cb 88 b8 87 36 13 2d 65 56 98 ea 64 69 aa e3 a5 a7 a5 a0 8e ae 67 6d 4d 35 5a 50 c3 4e b5 72 96 ef 6b a8 ed 1b 56 f7 c4 19 d6 73 97 65 b5 79 4d 2d 6c d0 65 d5 d2 2c d5 50 44 42 89 5d 50 c7 bc 9a 7b 55 0c 8c 52 44 47 55 95 3b b2 07 00 0c 43 9e 66 d4 f4 Data Ascii: r<+CPh=GjIa'n$i+}C6hh iEy!$ d^}W2\|&PiR%QWK4V<]Sq~b. *W+HMteGm6-eVdigmM5ZPNrkVseyM-le,PDB]P{URDGU;Cf
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: c8 f9 7e 78 4a 9a f8 d9 8c 94 01 c3 37 dc 91 15 96 ff 00 f2 1b 7c f0 d5 8e 16 fe a7 38 1f 89 54 91 ff 00 25 be 32 fc c2 26 70 a8 74 49 c9 e2 6b 86 df 9d c1 03 12 29 04 69 1b 30 bd bc ed 7d b0 c1 98 d8 5c 90 7a 5b f5 c0 e5 bf 4f e9 6c 54 54 47 12 1d 4c 2d e1 e1 8e 22 ce d2 a0 9a 6a 76 b8 d5 f6 8c bc 87 2d af cb df f4 e5 f5 1a 3b 48 4d c8 71 a9 7f dc 36 ff 00 eb 88 ba fc 31 1c 41 d4 ff 00 ee 0b db af 86 24 2e 5d 83 9b b0 24 7b ad 8a 12 b2 46 62 6f b8 da d7 dc 6d fc 8d fe 78 86 59 23 50 b1 b3 23 a9 0d a9 58 83 ce dd 3c 71 97 66 75 36 8e 39 ac e0 7f ea 3e fb 5f 6d fe 38 8e 64 68 97 78 94 5b 72 d6 b1 f7 e2 ba 86 29 53 b6 8b 4a 4d 1f 79 25 4e 77 db 6b a8 dd 4f 99 38 a5 a8 92 68 be d5 34 ba f7 4d c7 3b 75 1c b6 c1 71 c8 0d ba 9e b8 cc 33 9a 2c ba 3b d4 4c a0 db Data Ascii: ~xJ7\|8T%2&ptIk)i0}\z[OlTTGL-"jv-;HMq61A$.]${FbomxY#P#X<qfu69>_m8dhx[r)SJMy%NwkO8h4M;uq3,;L
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: c7 6d 6a ea 63 e1 c9 4d 05 33 3c 35 0c 7e 97 2d 89 08 a9 62 ab d7 df 7d cf 4c b6 eb 8e c2 a5 4a 70 73 ce d2 16 a8 76 a5 04 6b cb 36 ce 7c d4 cb 9a de 87 ea 1c 0b 9d f1 7f a8 76 38 de e2 df 3d 71 c7 b8 65 47 0f 9f 99 c3 e3 34 f4 b3 37 31 e6 87 35 e3 93 4c ca 72 ea 8b 7d 52 da 79 e3 85 0a c1 c3 e9 c5 64 8f 2c b9 2e 0c 9f c4 50 6d 90 48 77 2f 6d 49 3e 23 1d a1 ed 25 47 0e 54 1c 38 c1 2a 5c a4 f2 9e fb a3 a9 b1 00 5f 28 23 4d 6d d3 1d 99 ac e2 7c 53 9a 95 91 f3 e8 5f 39 69 a7 5d cb 1b e5 4f e7 d7 e4 07 4c 47 1a 44 8b 14 4a 12 34 01 51 17 45 55 1d 00 d8 7b 5b 7f 5f 61 d7 ea b1 b0 f9 7e 37 c2 e1 a3 46 1a a8 f9 69 f1 18 b6 70 54 ec 45 bc 37 d3 0b d9 de 18 0f fd 2c 4c 09 bf 7c b4 80 b6 e4 d9 d8 8d ce ba 6b 88 e3 48 94 22 28 55 51 60 14 00 00 1b 00 06 df 51 97 5d Data Ascii: mjcM3<5~-b}LJpsvk6\|v8=qeG4715Lr}Ryd,.PmHw/mI>#%GT8*\_(#Mm\|S_9i]OLGDJ4QEU{[_a~7FipTE7,L\|kH"(UQ`Q]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49913	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	698	OUT	GET /xxrz/250x400/793/c0/82/c082c3f3a6f1ca4252c6a30db3b88a63/c082c3f3a6f1ca4252c6a30db3b88a63.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:40 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: image/jpeg Content-Length: 66436 Connection: close Last-Modified: Thu, 04 Jan 2024 15:26:28 GMT Vary: Accept-Encoding ETag: W/"6596ce24-c07b" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6953 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=105tefyr2IVsy%2B%2F2EZn%2BJB%2BH%2B2BQ2aZNO1YVpRChJKQQJIcGzPsI3G8saIa5OOkNTyv8gcKFLFJ6BPk7jzCpjCvSMlQsE0MXMhoQ6OBO6c3GqlSoH4KwmePvmRZBDeGwurOP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a825ebb55c7b-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:40 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 65 4b 13 54 b9 29 fa d4 1d 34 cd 96 f7 52 8f 37 be 20 2c 7b 13 6b 75 83 68 b9 bb bf 6d 85 2d cb 79 33 d0 8c c0 4a d0 67 8a f8 bc f7 57 82 94 52 d0 49 2a 72 94 07 0e 46 dc e2 86 41 1a db 1d 90 92 23 02 37 a6 f3 82 44 de e8 9a 61 58 d8 a5 8d 56 20 47 82 e0 51 a0 37 9c b5 54 c2 a0 6c 90 a4 26 b2 24 86 5e dd 75 a9 c2 d8 e5 4c 76 fa bd 81 b4 3a d5 b3 5c e9 de 16 23 a3 5b 87 28 ef 43 09 9e d1 a5 89 c1 ec 4d 33 ef 6f 08 db f8 dc c3 5c 99 35 c4 75 4a 56 54 ce 4c c9 28 7c 15 d2 78 01 13 c5 3c f4 72 c1 2c 3a 5e 65 52 de d3 09 5d 19 59 5f 53 8d 11 4d e6 6b 40 26 a5 42 17 36 27 86 35 14 ae 1b 75 d6 f6 76 b3 dc 50 da 51 d7 28 3d 8e bd 66 ee 26 88 6f 6f 82 f5 a3 79 f0 a8 bf 81 ed 9b 88 33 c9 f1 4b 0a d1 e5 9d ab e9 57 3c 59 38 d7 5b 36 ac c9 91 0b 93 82 f4 a9 57 91 23 Data Ascii: eKT)4R7 ,{kuhm-y3JgWRI*rFA#7DaXV GQ7Tl&$^uLv:\#[(CM3o\5uJVTL(\|x<r,:^eR]Y_SMk@&B6'5uvPQ(=f&ooy3KW<Y8[6W#
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 6b f6 bb 75 d0 f8 be 8c 5c 90 b2 82 d9 18 14 70 c1 b7 e1 56 9d 96 e1 77 77 66 f9 e3 6e 78 a7 b4 ee 9f b5 be e8 e6 2b 09 73 5a 98 4e a1 5b 7f 64 cc fd 22 f2 ef 10 71 78 45 fb 18 ca 30 83 04 92 43 0d 4d 84 0f 0c a4 8c 1a 73 30 8e 8b 49 8e 91 ba f1 ce 7e d0 37 5a d7 d1 74 99 db 80 2c 9c 67 b9 f7 43 9e f3 ab 97 9b 1d 0c a7 ea cd 87 49 6a 44 b6 02 de 1b 2d 49 4c bc 53 a1 e6 37 0b 2a 1e 36 db 67 d5 81 f2 2f 3d 9f 74 cf f0 7e b4 f2 7a 7c 0f c9 60 05 e1 88 dc 63 cc 42 2c 19 89 07 3e 03 d6 02 7e 31 82 8c 2f 2f ca 8c 91 ec a1 e4 8c b1 6b c5 27 be 50 b1 09 e7 85 41 d8 fd 76 9a 3e 5f db cf fa a7 5c 6c ae 4b 53 dd 1e 79 d2 b6 d5 d5 a5 9b 39 c9 1e 8e f2 e1 1c 49 a0 01 d3 80 67 df 55 f8 80 44 98 16 a2 44 32 f0 84 8d 47 a0 45 60 58 c2 00 0c 48 92 a3 13 8d 21 84 c1 39 11 Data Ascii: ku\pVwwfnx+sZN[d"qxE0CMs0I~7Zt,gCIjD-ILS7*6g/=t~z\|`cB,>~1//k'PAv>_\lKSy9IgUDD2GE`XH!9
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: cb 6b ad 7b 0d af 9d 51 6f e9 b7 96 c8 66 7b 2e 2b 40 c8 c8 18 31 c8 f4 67 a0 7f b1 19 28 82 83 88 d8 e2 14 5a 1b 32 3d 0e 3b 0a 64 1b 67 bf 8f a3 e8 2b e9 5d 85 27 b5 a0 c2 90 ad d5 ec 8e b8 24 ba 47 ad 0e 3d 38 c9 07 2d a0 c7 b8 a7 bc 66 d0 d4 41 49 06 9d 99 a4 11 6c 1a 76 66 91 c4 29 bd 85 b7 b0 6d 18 24 e8 6b 40 d1 b0 65 c8 d4 9d 03 2d 05 7e a1 67 da 94 64 16 14 92 51 d7 a0 8c eb c8 f8 a0 24 81 0e 87 f0 69 13 b1 ea ab 14 4a c6 9a 76 55 75 d6 df 34 e8 71 06 43 43 43 81 05 a0 71 0a 6f 61 4d 83 6c 70 1c 08 c2 d9 d8 71 1d 2c 19 83 2d 87 11 da d2 7b 15 fb e5 5f d0 22 05 ed 4d 83 47 65 bd 12 41 c7 6d c2 7e 64 ea d3 85 32 1d 9c 65 20 68 c1 83 0a 2d 85 20 18 e0 0d 04 16 90 64 a2 05 fb 07 9b d0 5a 08 39 a0 b3 33 0a 59 e9 5f 7a 22 15 ea d1 d7 7d 17 d1 71 e2 3b Data Ascii: k{Qof{.+@1g(Z2=;dg+]'$G=8-fAIlvf)m$k@e-~gdQ$iJvUu4qCCCqoaMlpq,-{_"MGeAm~d2e h- dZ93Y_z"}q;
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 92 24 e1 c0 c7 fc 84 b2 af 8f 85 51 4c b1 65 cc 52 75 74 ec 78 8f d6 45 86 d4 5e d5 66 bf f9 33 17 8e 4a 4a 52 58 9d ab 10 6c 2e 24 5a b7 0e 75 e4 18 6c 2d 86 da 85 75 66 da 20 64 13 98 24 df c4 34 91 f4 14 42 5c 46 66 c7 57 8c b1 c2 b5 ae a8 ac a8 63 2d f1 9e 35 9a 23 18 a4 cb 71 54 a9 27 ab 6c 7d 6a cc 2a a9 ff 00 ba 73 1f f9 17 39 04 a3 37 39 3b e3 7c 2a 36 1b 84 53 48 a1 c7 44 db 18 90 a0 66 39 3d 97 93 32 b7 ea dc c4 e6 f8 57 27 97 8e 51 46 b7 a8 9f 1a d7 32 c4 ea e6 56 5e 55 dd 46 f8 91 29 ac 9f c3 78 7d e2 a8 b1 97 31 b6 9c 55 5a d5 7f 8c 4a 88 11 10 e3 26 b2 14 e7 24 43 88 cf e0 7e 06 c2 48 b5 fe a3 ec 1f a7 a3 47 96 d2 22 a2 32 22 49 39 2e 5b 7f 57 6d ac aa f2 1c bb cc 71 32 b1 5f 1e 5f 5c 4c bc 51 b3 6b 06 b3 09 c3 ac 8e ae 87 2a b8 91 67 62 f5 Data Ascii: $QLeRutxE^f3JJRXl.$Zul-uf d$4B\FfWc-5#qT'l}js979;\|6SHDf9=2W'QF2V^UF)x}1UZJ&$C~HG"2"I9.[Wmq2__\LQk*gb
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: d4 65 a1 c7 80 df 66 34 0c 27 d6 c8 7f 1d 6d 5f 30 25 ec 68 72 f5 a1 de cf 89 07 02 41 84 19 8f 95 43 e4 48 23 06 63 f8 ec 7f 0a e4 3f 7e 2a ec 28 8c d3 f4 5d ef fd 88 c8 88 74 08 6b bd 10 51 7e a4 69 50 51 6c b6 69 33 51 19 10 35 03 fa 51 05 10 2e bd 7f 25 ef e5 2d fd 8d 0d 8d f4 af 5f 5e b4 5e 89 41 5a 1f 43 63 a4 84 ab 61 de 92 93 ff 00 1e f6 3e 8c 68 72 0b 3d 85 18 2e 8b 7e 8f a1 b2 1f ff c4 00 3d 11 00 02 01 02 04 03 04 06 08 05 04 03 00 00 00 00 01 02 03 00 11 04 12 21 31 05 41 51 13 22 61 71 06 32 42 81 91 f0 07 10 14 23 52 a1 c1 d1 15 20 30 33 e1 16 24 72 b1 26 43 82 ff da 00 08 01 03 01 01 3f 01 fb 3d ad 91 6d d7 f2 a1 84 25 af f3 ca 9b 0c 00 f1 1f 95 36 44 d0 54 9a df 5a 65 0c 2c 6a 48 15 4d c6 f5 88 85 6f 98 ef 53 38 4b 83 b7 5f 85 62 a4 cc 84 Data Ascii: ef4'm_0%hrACH#c?~*(]tkQ~iPQli3Q5Q.%-_^^AZCca>hr=.~=!1AQ"aq2B#R 03$r&C?=m%6DTZe,jHMoS8K_b
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 72 75 36 da b8 9e 06 71 fe fb 13 1f 61 04 a8 53 0a 21 89 6c 52 2b 24 4c d9 40 50 a7 67 93 72 dd ef 0a 96 05 48 e2 71 22 96 91 4b 18 d6 e4 c6 2f 61 9f 95 ce a6 c2 fa 53 82 06 9f 51 17 ac a7 7e 54 92 48 bb 12 40 d6 c6 bb b2 30 1c ed a7 31 e5 7d 36 e7 e7 53 29 5b 68 4d 4a 0b 03 a9 af 44 45 b8 3a 8e 5c 89 df 70 2b 4a d3 ad ab 01 88 8b 08 f2 99 23 bc ae a1 63 7b f7 53 5e f1 6e 76 e7 a7 4f 1a e2 d8 85 9f 10 a1 1b 34 71 a6 50 c3 62 4e ae 40 da d7 a5 9a 5c 36 22 1c 44 7a 76 4c 1e e5 6e 08 d2 ea 47 42 2f 7f 0a fe 3d c4 71 f0 14 7c 4b 1c 29 ce 82 30 05 82 89 58 85 04 ae 60 a3 4b a8 3e f3 44 5a 98 5e d4 fa 1b 7d 44 0b 6b ae c6 de 20 d2 23 22 17 51 9a fb e5 b3 59 79 df 5d 0d 10 7b 3b f4 20 ec 05 8d 96 e3 fc d7 ac a0 b0 b9 d8 f4 b8 e8 68 e1 d1 f4 b7 cf c8 af 47 06 4e Data Ascii: ru6qaS!lR+$L@PgrHq"K/aSQ~TH@01}6S)[hMJDE:\p+J#c{S^nvO4qPbN@\6"DzvLnGB/=q\|K)0X`K>DZ^}Dk #"QYy]{; hGN
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 3c aa 08 b0 6c 20 ec 71 86 48 51 8b b8 59 15 64 32 b6 91 d9 1b 5e ee da 8a 97 ec 03 0e 19 3b 41 8a 3e b1 95 89 cd a8 d1 6c 34 27 e1 a6 f4 b0 e1 e5 b2 39 ca c4 03 65 d6 c0 f4 21 b7 1a 72 e7 53 2c b8 79 72 8f 51 d3 ee c8 61 99 97 43 97 2f b1 a8 d4 10 09 a3 29 d2 c4 eb bd fd d5 e8 97 a2 e9 3f 04 38 cc 46 3b ec 7d b3 5e 38 c2 e7 32 be 51 90 85 07 d5 66 21 43 36 5d 73 10 18 0a c7 7a 37 c6 38 6c 21 e4 81 7b 1b 1c d2 42 c0 b9 bd 8f de 6d 6d c6 80 95 f0 ac 36 10 4d 99 70 f8 79 b1 4e 81 7b 56 ef 25 99 ba 0c c9 a5 ee 01 37 bd af a6 df d0 2a 1b 70 0f 98 bd 62 b8 64 53 9e d2 2f f6 f8 90 73 2c f1 28 cc 0f 8a fa ac 3c fd d5 86 fb 4b c3 93 18 81 66 53 97 b4 8c f7 24 b5 88 91 35 25 41 1b ae 9d eb d3 29 8f 5c ec d7 d0 5f 70 7a 8a 18 77 c4 76 51 89 95 67 64 ed 08 90 64 61 Data Ascii: <l qHQYd2^;A>l4'9e!rS,yrQaC/)?8F;}^82Qf!C6]sz78l!{Bmm6MpyN{V%7*pbdS/s,(<KfS$5%A)\_pzwvQgdda
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: b7 fa d7 13 c2 f0 e9 38 63 e3 72 29 96 28 c4 92 2b 4e 56 fd 83 88 f1 8a 10 30 6c ca ad 86 95 2c 2d 97 10 c0 1e e5 4f 33 f6 87 28 b0 be c2 e6 c2 f7 03 53 7a 7c 2e 1e 65 37 50 af fa 97 fc 73 15 88 e1 ef 02 76 88 7b 58 ff 00 9b 93 27 ff 00 53 cb c6 fe ab 46 79 91 e5 4a 42 b1 1d 6d f7 f5 ad 8d f7 a0 e2 af 7b 52 3e 43 bd 2c ad e7 51 b7 5e 55 13 9d fa 57 6e 72 da e3 e5 e5 5f 88 af ac da 6f 7f ff 00 35 c7 77 6d fd ed 87 c0 54 8a a4 f7 94 1f a7 4a 47 0f e1 45 d8 79 1d 08 22 e0 8a c4 40 a5 cb 42 b6 be eb 7e 7f d3 fb 0a 3a 68 6e 08 d0 82 08 20 d0 bb 5c 6e 74 b5 03 20 fb f2 fb f9 fa bb 6d 6d 5b 8a 85 ac 75 a8 46 9d 36 a8 e2 6f 3f 87 95 48 7b a4 d7 e2 0b 37 7f c8 fd fd 2b 8b 00 f9 f3 15 52 01 d4 ff 00 31 d0 e5 f3 37 e7 a7 53 52 2a e6 da f7 fd 23 6d b7 a1 29 1c be b5 Data Ascii: 8cr)(+NV0l,-O3(Sz\|.e7Psv{X'SFyJBm{R>C,Q^UWnr_o5wmTJGEy"@B~:hn \nt mm[uF6o?H{7+R17SR*#m)
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: a6 d7 46 16 af c4 21 04 69 36 93 2e 45 79 3d a2 30 1f 50 86 d1 ca b9 d6 ea 3d e0 ed a6 84 5e b8 e7 a5 3e cd 21 59 e3 2d 92 c4 c9 03 66 ef 5f 50 41 f2 d3 29 61 be b5 0f a6 dc 3a 51 f9 ae f0 c8 3d e5 92 dc ce 96 6d 8e 82 e6 db 5e bf b5 6a 0d c1 20 8d 88 de 8c d3 36 8f 23 38 d0 58 9d 2c 3c ab f8 94 aa e3 06 d1 4a 51 89 08 ee 03 c4 08 17 be 60 d7 8c 9f 1b 79 69 5c 27 10 e3 11 d9 8f fd 45 e7 ee 82 36 3b 7b c2 fa 1b 8e 7b d6 3a f2 96 94 32 98 30 f2 8c 38 17 d5 a4 29 99 c8 1d 01 d3 eb 58 fc 74 5c 38 70 fc 1f 68 cb 89 e2 73 88 d5 c0 b8 56 60 a7 5e 7d 9c 60 67 63 fa 8e b6 b5 65 ec af 1b 4d da 98 ee 0c 85 b3 67 20 db 36 6f e6 0d b8 35 83 84 cd 2a b9 12 36 1c 30 ed 5d 51 8a d8 58 b2 df f7 e8 09 b5 71 ec 6a 4d 3e 1b 0c 17 3c 78 78 0e 5c a2 d9 03 db f9 ba de d6 eb ad Data Ascii: F!i6.Ey=0P=^>!Y-f_PA)a:Q=m^j 6#8X,<JQ`yi\'E6;{{:208)Xt\8phsV`^}`gceMg 6o5*60]QXqjM><xx\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49915	104.17.25.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	560	OUT	GET /ajax/libs/postscribe/2.0.8/postscribe.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:41 UTC	950	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03faa-45f4" Last-Modified: Mon, 04 May 2020 16:15:38 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 16 Apr 2025 18:32:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nTjorfl1xj1%2BL%2FzqVRCrJjKurv%2BhaPNtmoO0N3oi9fXVCvwnaXGGEEs9ThBwyffuUvfMqXUgwV8%2Bb69F6NXo9N%2B2oZxTNzIpjyupMw7ci1bN7e3iU8WWHb01CdtYffhmUuwQPg3Y"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a8a8273e5c21d3-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:41 UTC	419	IN	Data Raw: 34 35 66 34 0d 0a 2f 2a 2a 0a 20 2a 20 40 66 69 6c 65 20 70 6f 73 74 73 63 72 69 62 65 0a 20 2a 20 40 64 65 73 63 72 69 70 74 69 6f 6e 20 41 73 79 6e 63 68 72 6f 6e 6f 75 73 6c 79 20 77 72 69 74 65 20 6a 61 76 61 73 63 72 69 70 74 2c 20 65 76 65 6e 20 77 69 74 68 20 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 2e 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 32 2e 30 2e 38 0a 20 2a 20 40 73 65 65 20 7b 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 6b 72 75 78 2e 67 69 74 68 75 62 2e 69 6f 2f 70 6f 73 74 73 63 72 69 62 65 7d 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 65 72 65 6b 20 42 72 61 6e 73 0a 20 2a 20 40 63 6f 70 79 72 69 67 68 74 20 32 30 31 36 20 4b 72 75 78 20 44 69 67 69 74 61 6c 2c 20 49 6e 63 0a 20 2a 2f 0a 21 Data Ascii: 45f4/** * @file postscribe * @description Asynchronously write javascript, even with document.write. * @version v2.0.8 * @see {@link https://krux.github.io/postscribe} * @license MIT * @author Derek Brans * @copyright 2016 Krux Digital, Inc */!
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 74 73 5b 22 70 6f 73 74 73 63 72 69 62 65 22 5d 3d 65 28 29 3a 74 5b 22 70 6f 73 74 73 63 72 69 62 65 22 5d 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 69 66 28 72 5b 6e 5d 29 72 65 74 75 72 6e 20 72 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 72 5b 6e 5d 3d 7b 22 65 78 70 6f 72 74 73 22 3a 7b 7d 2c 22 69 64 22 3a 6e 2c 22 6c 6f 61 64 65 64 22 3a 21 31 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 65 29 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 2e 6d 3d 74 2c 65 2e 63 3d 72 Data Ascii: ts["postscribe"]=e():t["postscribe"]=e()}(this,function(){return function(t){function e(n){if(r[n])return r[n].exports;var o=r[n]={"exports":{},"id":n,"loaded":!1};return t[n].call(o.exports,o,o.exports,e),o.loaded=!0,o.exports}var r={};return e.m=t,e.c=r
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 2c 6e 5d 29 7d 2c 67 2e 77 72 69 74 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 28 6f 2c 73 29 2c 67 2e 77 69 6e 2e 6f 6e 65 72 72 6f 72 3d 6c 2c 72 2e 64 6f 6e 65 28 29 2c 67 3d 6e 75 6c 6c 2c 61 28 29 7d 29 2c 67 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 2c 72 29 7b 69 66 28 68 2e 69 73 46 75 6e 63 74 69 6f 6e 28 72 29 29 72 3d 7b 22 64 6f 6e 65 22 3a 72 7d 3b 65 6c 73 65 20 69 66 28 22 63 6c 65 61 72 22 3d 3d 3d 72 29 72 65 74 75 72 6e 20 6d 3d 5b 5d 2c 67 3d 6e 75 6c 6c 2c 76 6f 69 64 28 79 3d 30 29 3b 72 3d 68 2e 64 65 66 61 75 6c 74 73 28 72 2c 64 29 2c 74 3d 2f 5e 23 2f 2e 74 65 73 74 28 74 29 3f 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2e 73 75 62 73 74 72 28 31 29 29 3a 74 2e 6a 71 75 Data Ascii: ,n])},g.write(e,function(){c(o,s),g.win.onerror=l,r.done(),g=null,a()}),g}function u(t,e,r){if(h.isFunction(r))r={"done":r};else if("clear"===r)return m=[],g=null,void(y=0);r=h.defaults(r,d),t=/^#/.test(t)?window.document.getElementById(t.substr(1)):t.jqu
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 6e 75 6c 6c 2c 6e 3d 64 2b 65 3b 66 2e 65 78 69 73 74 79 28 72 29 26 26 22 22 21 3d 3d 72 3f 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 72 29 3a 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 6e 29 7d 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 3b 76 61 72 20 75 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 Data Ascii: }function s(t,e){var r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:null,n=d+e;f.existy(r)&&""!==r?t.setAttribute(n,r):t.removeAttribute(n)}e.__esModule=!0;var u=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var r=arguments[e];f
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 73 53 74 79 6c 65 28 65 29 29 3b 29 65 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 62 65 66 6f 72 65 57 72 69 74 65 54 6f 6b 65 6e 28 65 29 2c 65 26 26 6f 2e 70 75 73 68 28 65 29 3b 6f 2e 6c 65 6e 67 74 68 3e 30 26 26 74 68 69 73 2e 5f 77 72 69 74 65 53 74 61 74 69 63 54 6f 6b 65 6e 73 28 6f 29 2c 72 26 26 74 68 69 73 2e 5f 68 61 6e 64 6c 65 53 63 72 69 70 74 54 6f 6b 65 6e 28 65 29 2c 6e 26 26 74 68 69 73 2e 5f 68 61 6e 64 6c 65 53 74 79 6c 65 54 6f 6b 65 6e 28 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 77 72 69 74 65 53 74 61 74 69 63 54 6f 6b 65 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 62 75 69 6c 64 43 68 75 6e 6b 28 74 29 3b 72 65 74 75 72 6e 20 65 2e 61 63 74 75 61 6c 3f 28 65 2e 68 74 6d 6c 3d 74 68 69 Data Ascii: sStyle(e));)e=this.options.beforeWriteToken(e),e&&o.push(e);o.length>0&&this._writeStaticTokens(o),r&&this._handleScriptToken(e),n&&this._handleStyleToken(e)},t.prototype._writeStaticTokens=function(t){var e=this._buildChunk(t);return e.actual?(e.html=thi
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 73 72 63 7c 7c 74 2e 61 74 74 72 73 2e 53 52 43 2c 74 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 62 65 66 6f 72 65 57 72 69 74 65 54 6f 6b 65 6e 28 74 29 2c 74 26 26 28 74 2e 73 72 63 26 26 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 64 65 66 65 72 72 65 64 52 65 6d 6f 74 65 3d 74 3a 74 68 69 73 2e 5f 6f 6e 53 63 72 69 70 74 53 74 61 72 74 28 74 29 2c 74 68 69 73 2e 5f 77 72 69 74 65 53 63 72 69 70 74 54 6f 6b 65 6e 28 74 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 6f 6e 53 63 72 69 70 74 44 6f 6e 65 28 74 29 7d 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 68 61 6e 64 6c 65 53 74 79 6c 65 54 6f 6b 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 70 61 72 73 65 72 2e 63 6c 65 61 Data Ascii: src\|\|t.attrs.SRC,t=this.options.beforeWriteToken(t),t&&(t.src&&this.scriptStack.length?this.deferredRemote=t:this._onScriptStart(t),this._writeScriptToken(t,function(){e._onScriptDone(t)}))},t.prototype._handleStyleToken=function(t){var e=this.parser.clea
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 66 65 72 72 65 64 52 65 6d 6f 74 65 3d 6e 75 6c 6c 29 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 77 72 69 74 65 53 63 72 69 70 74 54 6f 6b 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 62 75 69 6c 64 53 63 72 69 70 74 28 74 29 2c 6e 3d 74 68 69 73 2e 5f 73 68 6f 75 6c 64 52 65 6c 65 61 73 65 28 72 29 2c 6f 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 66 74 65 72 41 73 79 6e 63 3b 74 2e 73 72 63 26 26 28 72 2e 73 72 63 3d 74 2e 73 72 63 2c 74 68 69 73 2e 5f 73 63 72 69 70 74 4c 6f 61 64 48 61 6e 64 6c 65 72 28 72 2c 6e 3f 6f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 29 2c 6f 28 29 7d 29 29 3b 74 72 79 7b 74 68 69 73 2e 5f 69 6e 73 65 72 74 43 75 72 73 6f 72 28 72 2c 6d 29 2c 72 2e 73 72 63 26 26 21 6e 7c 7c Data Ascii: ferredRemote=null)))},t.prototype._writeScriptToken=function(t,e){var r=this._buildScript(t),n=this._shouldRelease(r),o=this.options.afterAsync;t.src&&(r.src=t.src,this._scriptLoadHandler(r,n?o:function(){e(),o()}));try{this._insertCursor(r,m),r.src&&!n\|\|
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 7d 2c 74 7d 28 29 3b 65 5b 22 64 65 66 61 75 6c 74 22 5d 3d 67 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 74 2e 65 78 70 6f 72 74 73 3d 72 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 69 66 28 72 5b 6e 5d 29 72 65 74 75 72 6e 20 72 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 72 5b 6e 5d 3d 7b 22 65 78 70 6f 72 74 73 22 3a 7b 7d 2c 22 69 64 22 3a 6e 2c 22 6c 6f 61 64 65 64 22 3a 21 31 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 65 29 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d Data Ascii: },t}();e["default"]=g},function(t,e,r){!function(e,r){t.exports=r()}(this,function(){return function(t){function e(n){if(r[n])return r[n].exports;var o=r[n]={"exports":{},"id":n,"loaded":!1};return t[n].call(o.exports,o,o.exports,e),o.loaded=!0,o.exports}
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 65 2e 5f 70 65 65 6b 54 6f 6b 65 6e 49 6d 70 6c 28 29 7d 29 29 3a 28 74 68 69 73 2e 5f 72 65 61 64 54 6f 6b 65 6e 3d 74 68 69 73 2e 5f 72 65 61 64 54 6f 6b 65 6e 49 6d 70 6c 2c 74 68 69 73 2e 5f 70 65 65 6b 54 6f 6b 65 6e 3d 74 68 69 73 2e 5f 70 65 65 6b 54 6f 6b 65 6e 49 6d 70 6c 29 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 73 74 72 65 61 6d 2b 3d 74 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 65 70 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 73 74 72 65 61 6d 3d 74 2b 74 68 69 73 2e 73 74 72 65 61 6d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 72 65 61 64 54 6f 6b 65 6e 49 6d 70 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 Data Ascii: eturn e._peekTokenImpl()})):(this._readToken=this._readTokenImpl,this._peekToken=this._peekTokenImpl)}return t.prototype.append=function(t){this.stream+=t},t.prototype.prepend=function(t){this.stream=t+this.stream},t.prototype._readTokenImpl=function(){va
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 54 4d 4c 21 3d 3d 69 7d 63 61 74 63 68 28 74 29 7b 65 2e 74 61 67 53 6f 75 70 3d 72 3d 21 31 7d 74 72 79 7b 6f 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 50 3e 3c 69 3e 3c 50 3e 3c 2f 50 3e 3c 2f 69 3e 3c 2f 50 3e 22 2c 65 2e 73 65 6c 66 43 6c 6f 73 65 3d 6e 3d 32 3d 3d 3d 6f 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 7d 63 61 74 63 68 28 74 29 7b 65 2e 73 65 6c 66 43 6c 6f 73 65 3d 6e 3d 21 31 7d 6f 3d 6e 75 6c 6c 2c 65 2e 74 61 67 53 6f 75 70 3d 72 2c 65 2e 73 65 6c 66 43 6c 6f 73 65 3d 6e 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 69 6e 64 65 78 4f 66 28 22 2d 2d 3e 22 29 3b 69 66 28 65 3e 3d 30 29 72 65 74 75 72 6e 20 6e 65 77 20 Data Ascii: TML!==i}catch(t){e.tagSoup=r=!1}try{o.innerHTML="<P><i><P></P></i></P>",e.selfClose=n=2===o.childNodes.length}catch(t){e.selfClose=n=!1}o=null,e.tagSoup=r,e.selfClose=n},function(t,e,r){"use strict";function n(t){var e=t.indexOf("-->");if(e>=0)return new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49917	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	699	OUT	GET /xxrz/1200x600/793/82/56/8256aff80a99d898f6a5cab994ba5e0b/8256aff80a99d898f6a5cab994ba5e0b.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:40 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: image/jpeg Content-Length: 405569 Connection: close Last-Modified: Fri, 19 Apr 2024 08:21:21 GMT Vary: Accept-Encoding ETag: W/"66222981-378f2" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6953 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dLGQdmN2HGYL0EzM%2BCHDnH3OPcwvu4Y1lHTjTlXvHWuRDlQDSbWvBghbfADCLb570VA6AtMD%2BGVAuuFFaHRNPqO5sDaeUqff8W1oYEV%2B8ztBt0e7ioGrKT6Oc5O6AgOI4PkC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a827498a25af-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:40 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 13 7d 8e 03 36 32 14 01 23 09 7a 43 cc e9 7b 81 26 73 e2 05 28 b3 60 62 2e 63 c0 62 61 2b 31 50 2d cb 65 c0 23 b1 72 85 60 b4 d4 3c 4d 07 56 07 30 dc 41 2f 8a 03 85 83 a5 ea e0 e5 e9 67 20 c7 70 94 4c 5f 70 4c b8 d0 78 97 c3 e7 dc d0 21 34 5e 37 ac 13 9f c2 ae c0 b0 de 9f a2 80 ce 13 5b aa 65 c8 65 9e 19 92 be 2a 08 a2 23 af db 91 83 16 fc ea 78 31 9c c3 2f 28 e1 70 f0 38 c1 fc 94 19 1c de b6 02 45 0d a4 c8 65 58 a8 f3 e8 94 cc f5 89 85 d3 97 74 59 16 1d de de f2 f3 25 57 e8 69 b4 3a 1d 1f 37 92 fa e3 8a 3e c7 56 57 b6 22 7e b2 93 68 a2 dd f0 bd d1 6a 26 db 1e 7e a8 ff 00 06 44 90 6a 9b 4e ab 3d ad 95 dc 15 a2 fd 51 7d a6 05 dd a5 e1 67 0c e6 b5 93 12 ec 06 33 19 18 36 15 ac 03 24 cf e6 73 a8 fd cb d0 e6 3e 30 26 a5 17 8d b5 af 2e 76 31 b6 f5 2d 35 48 ea Data Ascii: }62#zC{&s(`b.cba+1P-e#r`<MV0A/g pL_pLx!4^7[ee*#x1/(p8EeXtY%Wi:7>VW"~hj&~DjN=Q}g36$s>0&.v1-5H
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: da 94 4d 13 d9 5e cb 1d af 8f c4 88 d9 da 08 7d 29 45 92 b0 4f 62 ce 22 13 fc 74 69 a9 9d 3e 30 40 7c 54 03 c3 c1 2e 1c c1 e0 ce 19 30 a2 98 21 3c d7 cb 8f 12 e3 71 23 8f cc b2 fb a7 2c a5 2b a0 1f 0f 9a 38 22 0a c0 59 27 83 e3 07 9e 5f 13 04 34 76 2f 60 92 b5 2a 11 2c 7c 9e 68 2f 7e cf ee 95 7e 1f 0a d8 27 a5 67 0c fb df 7d 5f 46 74 33 07 7d f6 78 08 fb 84 7e 98 9a 42 c2 61 47 84 5e 70 30 3f 1b 24 f3 5f 53 30 5c e5 aa 37 46 bb b4 8e 14 d6 97 c5 fa d6 54 d9 97 df c4 8e 41 02 84 f0 0c 72 61 3c 4a ef 2c b1 33 7e 90 d1 ba 2e 3c f1 26 ce 54 e2 c4 1b 28 5f 55 40 a5 7c e9 86 78 cb 38 f0 d1 cc e5 90 1b 2c 62 55 9b 9e b0 a5 a3 55 fc 99 ec 9e 29 f2 5f 5e 7d fb 91 fc e7 7e 87 7c e3 d7 74 9d 9f 56 75 26 cf 92 fc c7 c7 f4 a3 42 7a 5c 9e 11 48 45 43 5a e5 9f b0 bf 39 Data Ascii: M^})EOb"ti>0@\|T.0!<q#,+8"Y'_4v/`*,\|h/~~'g}_Ft3}x~BaG^p0?$_S0\7FTAra<J,3~.<&T(_U@\|x8,bUU)_^}~\|tVu&Bz\HECZ9
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 0a ce d5 6c 41 9f a1 b9 ab 7a b6 ab d0 06 d8 e6 17 8d b3 fa fc 0f e6 57 41 7c ff 00 e8 3f ae 7c a3 a8 77 24 e4 6b 0d 5e fe 6f a0 fc 9e d1 68 d0 dd bd 9d 63 5f 7e 8d 6b 8b be e7 8a 37 93 fa 73 47 ac 7f 36 cc ee 2e 59 a5 eb 77 52 ab d7 1f 40 71 a3 03 92 7a c0 6d 75 07 7a 79 6f 4f ae 9e d7 ac a3 47 7f fe 89 fe 5a 75 47 8c fa 87 eb 22 6d 53 b5 7d 27 ca e3 e7 cd ed a0 31 76 79 03 59 de a9 11 ac a5 75 b0 0d cf 37 ad f1 61 64 eb 50 69 1b a6 b2 2b fd 8a 74 85 fa 9f 96 e0 67 ac 21 50 3e 85 b3 91 93 02 4c 3a e2 2f 66 24 85 70 36 6b 02 d4 43 93 e0 31 7a f7 70 09 81 ec f9 74 89 89 93 09 0d 9b 58 3a 22 3c 2f 0a 19 10 b3 1e e2 4e 02 69 99 57 f8 68 39 43 46 31 43 24 2a 09 c0 e7 29 69 0a 74 f9 ac 52 2e b9 85 45 29 56 99 9d 85 b9 33 51 72 72 f0 32 56 4a 38 38 35 92 a3 af Data Ascii: lAzWA\|?\|w$k^ohc_~k7sG6.YwR@qzmuzyoOGZuG"mS}'1vyYu7adPi+tg!P>L:/f$p6kC1zptX:"</NiWh9CF1C$*)itR.E)V3Qrr2VJ885
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: be 04 ce c0 39 61 24 63 11 13 1e 42 48 e1 64 7c fd 17 96 6b 74 ed ea e8 53 d0 9a bf 9e cd f2 07 e2 87 4e 18 86 15 8f 68 91 f5 ff 00 35 2b 30 08 bd 86 e0 a5 cc 6e e6 b4 64 98 bb 14 9e 34 aa 62 68 d8 a3 a1 21 ac 51 51 8d 78 be 59 6a 50 b5 3c b9 f9 a9 fb d1 f9 25 8b f5 12 a8 97 eb be 2f b3 e4 1b de e7 e5 0f 69 f2 fe 94 53 cb 9b 5b 3f 4a df 5f df 35 7c 7d 7e 5a 73 61 27 73 34 66 3e 1e 9e b9 ec 6a e8 78 b7 f9 da 94 e1 1f d0 71 96 c9 1c 16 f2 b6 25 97 4b be cd d4 da 3f a3 7f 90 9b db 13 67 66 ea fa 25 b1 d9 da 9e 1d b9 b6 c5 1c 87 e7 7a f2 13 d7 45 78 20 3b 15 fa 47 a1 f8 db 73 78 ff 00 61 fa 19 7d e3 6f d1 ef 3d 9f ac 4e a8 1d 9f 94 6d 3e e3 4c 2b 83 7b 8e cd ce f4 1a 60 16 ea af b2 be ba d5 b2 ea 6a eb 6d 5b be 34 25 7b 14 5a fb 9a 2e e6 6e d0 ae 56 fd 0b 5f Data Ascii: 9a$cBHd\|ktSNh5+0nd4bh!QQxYjP<%/iS[?J_5\|}~Zsa's4f>jxq%K?gf%zEx ;Gsxa}o=Nm>L+{`jm[4%{Z.nV_
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 66 a2 08 3b 23 5a c3 99 85 85 0d ec 34 b0 44 99 6f 33 28 1a 09 89 03 53 85 b8 b4 11 3f 31 8b ea 9b 65 ba cf 5f 98 58 33 93 c6 5a 6d 7c c0 28 d4 7f 41 e8 2b b1 88 b2 8b 0e 84 c0 59 0d 83 98 06 47 22 7f 70 c3 94 b3 28 15 2e eb 25 72 0b 27 f4 32 c4 43 2c 98 4c 50 94 78 f3 e2 c9 80 86 0f 34 90 56 31 50 eb 35 6e ce 74 67 77 59 b6 ce 75 9d ea b5 c7 9c 9a 9c 14 a3 ad 8a 9b 6f b7 73 2a 4e 65 c5 d5 12 02 e5 70 bd c5 91 2d bc e9 16 cd 89 47 9d 59 af bd ac 22 fe bb d9 43 e2 ad 3f cb 6e a3 dd af 97 e8 3f 2f f5 df 55 d1 e9 7a 6d 27 5b b6 28 d4 a8 b7 f4 9c 9c 53 91 d8 bc 65 ce a9 6a 76 ea 7f ca 80 43 77 d6 cf d2 4d ba be ee d0 bb 97 94 69 ec 77 f6 eb fc 9e eb 55 2b 60 f1 dd e9 4d 9b 7c 85 1d fb 4c 7a 9f 3f f1 a8 9a e8 52 98 e0 18 53 b6 15 2f 35 f7 29 34 7c 99 88 be d8 Data Ascii: f;#Z4Do3(S?1e_X3Zm\|(A+YG"p(.%r'2C,LPx4V1P5ntgwYuos*Nep-GY"C?n?/Uzm'[(SejvCwMiwU+`M\|Lz?RS/5)4\|
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: f0 19 2c f0 82 08 99 b3 1f ee 9f be ce 2e 3f 3d f8 6e e9 a3 ce 6e e0 30 35 7f 4c 5e 4b f7 1e 20 95 87 4c 10 13 97 3a 20 cd 8b a7 0c 72 c2 1d e6 7e e4 b6 e7 e7 d9 03 b3 92 2f 79 fe 4d 87 a0 ec c9 c4 78 74 e6 85 3c 31 c9 6b 8a 0e c7 e8 82 e2 64 28 b8 83 b3 4f 92 08 b2 4c 23 1a 7c 19 72 33 12 04 d6 65 56 b1 51 09 f8 3c fb 2d b6 9e ef ab e5 64 5a 31 d6 67 54 60 8c 2c 48 cc 17 6b b2 43 38 06 ad 6d e2 2b 15 50 6a 3d f2 cf e6 97 9b d6 55 ad 83 45 e7 80 8a 11 6c a5 d3 f5 4f 4e 9b 52 07 d8 03 9e 2e c8 d0 bb aa ee 1d cf 5f ec ea 15 65 eb 85 4c ad 28 d6 63 b7 e9 ff 00 94 f5 34 ee fa 22 b8 0c 7a 91 3a 2a f7 fa 5a 78 b6 1b c2 5b 02 fc 53 ff 00 cc ee d1 fc 91 5f b4 d3 ba ba d5 af 75 f5 89 2b 7a b1 b1 99 cd 00 6f 5a 23 2a d0 9f 0f 23 c2 fd 6c a4 dc 30 b4 f7 ef 21 f5 a7 Data Ascii: ,.?=nn05L^K L: r~/yMxt<1kd(OL#\|r3eVQ<-dZ1gT`,HkC8m+Pj=UElONR._eL(c4"z:Zx[S_u+zoZ##l0!
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: fd f4 4f 27 44 2e c1 26 df 90 9d 11 37 9a 8f 96 c0 22 5c 3d 9b 72 7b 3a 14 f7 95 2b ad 71 cb 68 19 b5 3b 11 b1 af 55 36 b9 5b 7a 6e 4b be 96 d0 b9 ba b5 6a 3b 57 67 fb 3d 4e a9 77 2b f5 f2 10 bc bb e1 99 e6 ba 2e e7 25 a2 f7 a1 c0 3e 91 d0 31 50 95 d1 9b 20 18 c8 4a 44 24 40 0b 24 f9 77 09 81 98 f1 2e 1d 80 b0 c5 98 1e 34 59 16 4f 21 86 4c 2f a0 c3 a4 0a 3c c1 d2 48 1c b0 ff 00 64 8b 18 b0 41 23 18 2f 98 88 4c 06 45 ae aa 2c 0a 6d 9a ee cb a0 50 de b5 fb c6 4c 31 8d ce 18 32 15 a1 d6 6b 7e f6 49 59 dd 95 2d 57 44 e6 52 2c a7 b0 a4 a5 da 6b da 38 53 d2 22 ec 79 32 a4 c9 5c 6d d5 0b 1a 2c ed cd 40 75 4e 91 79 54 6a af 4f 2c 67 81 6c 6c bd aa d6 f6 7b bd b1 fc f3 11 b6 4b 5d bf 07 f9 9d c7 dd 47 f9 fa 7e 8d c5 05 ae dd f6 78 39 74 4f e7 ed da 6b fe 8d 70 8f Data Ascii: O'D.&7"\=r{:+qh;U6[znKj;Wg=Nw+.%>1P JD$@$w.4YO!L/<HdA#/LE,mPL12k~IY-WDR,k8S"y2\m,@uNyTjO,gll{K]G~x9tOkp
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 06 a9 a5 c2 c7 4a 14 74 6e ce b7 6a ad 85 c5 c5 61 e7 22 a4 a1 7a da bb 43 65 f3 25 8d 8e 2f 99 3a ef 9d 15 73 49 02 de bb bd 8b 6d a7 2b 5e 35 4c c8 33 74 31 a4 f5 83 35 35 05 c3 d3 6b 5e b0 f4 4b 7a b5 5e b7 75 ef e5 27 e9 f7 cb fe d9 dd 5e 72 bf 0e e6 b7 a1 39 e3 5d 57 af ec d8 69 90 1f ed be 55 5e d8 ba 6b 6a 75 1a 1e c4 ab 94 4c b3 a3 5b 2d 46 b2 54 68 aa b9 57 68 b9 36 9e 1b b4 10 4a f5 58 e3 5d ed 73 b1 75 af 2e fe b8 7c bb db 29 fc c8 eb 0e 16 a5 e8 56 c6 0a 7f b1 fc 9d e3 3a fd d6 ad e4 b5 cb 05 56 c5 36 ed 2b 4e 19 c4 94 b1 21 ab f4 da 4f 9c 5d f3 a2 b6 5f f4 2d c2 a3 c1 08 91 aa 99 8b 99 c9 04 d0 2f 1d d7 d8 ca 0d 29 11 31 0e b2 1a 12 09 da d7 4b 89 bc 9b 55 2c d3 5c ab 5e e8 75 f4 62 68 ba 21 b9 22 63 54 43 a5 3a b8 ca 4c f5 be c6 16 40 1d 8f Data Ascii: Jtnja"zCe%/:sIm+^5L3t155k^Kz^u'^r9]WiU^kjuL[-FThWh6JX]su.\|)V:V6+N!O]_-/)1KU,\^ubh!"cTC:L@
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: e3 21 cd 5d a6 4a 8b 59 5a fa d9 c0 fb 3b d2 26 97 2b 5b 6a 5f 37 56 96 dc 18 f9 d7 be 78 e8 8e 03 af dd f5 b2 ff 00 37 ba 1b 17 6a f5 c1 7d 60 4f a3 f1 7a 56 c5 b4 dd ac 39 6a db af f5 1e a3 4f e7 bb 06 b9 dd a3 6a bf e9 b3 b0 fd 15 fb 42 d7 e6 f5 ff 00 3c c0 4b 0e cb 6e 96 22 59 aa b8 1e 9e 84 62 5c 7d 77 ce 44 67 06 1c 56 43 55 56 52 2e 75 6e c6 a7 df c9 46 0b 9f 2e e6 ab 6c 38 a1 3b 2c b4 87 67 68 90 f9 41 35 ec 44 c1 95 4e a5 a7 d3 4b 57 ee 2b e6 95 62 06 33 7d 14 c9 30 42 ec 0b 39 ab b2 8d bb 9f 90 a5 a5 a7 61 bb d0 7a 87 0f 73 9b 65 b2 d4 74 b1 14 ae 28 5d 7c 97 90 e3 25 73 aa 84 d1 f6 82 29 4c e5 62 c4 c5 13 e1 2b 58 62 36 e6 e7 5c bd 9f b6 6e 96 b2 69 e4 d9 eb 4e 50 2a 5b 2f cd c3 fb b8 73 c2 6d 3f 34 4c 83 65 3c 69 eb e5 1e 69 24 5e c0 98 48 65 Data Ascii: !]JYZ;&+[j_7Vx7j}`OzV9jOjB<Kn"Yb\}wDgVCUVR.unF.l8;,ghA5DNKW+b3}0B9azset(]\|%s)Lb+Xb6\niNP*[/sm?4Le<ii$^He

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49916	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	930	OUT	GET /xxrz/1200x600/793/b5/57/b557aee04772d0a3a66a29064bf8dd3e/b557aee04772d0a3a66a29064bf8dd3e.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:40 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: image/jpeg Content-Length: 303058 Connection: close Last-Modified: Sat, 24 Feb 2024 16:18:45 GMT Vary: Accept-Encoding ETag: W/"65da16e5-75399" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6953 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b%2BKcHCPfnF%2F3nJFSBgH%2BM7mR95Mknz6V2mYDsQphxFrKfMph3uTr5Wvkyvhw8HkqTRIxkLHhto%2FzUHNbsxQDVXfkhDrtu3CcrcOI4bqoqp6v85TUtfkzZSjAFFdwM9ddeiz3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8274a2b6da7-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:40 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 01 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 32 f9 4c 98 b3 0a 74 94 bb 0b 21 c6 5d 8e 3a c9 5c cc 90 e2 08 89 23 a5 8a 7a 4a 4c 5a 4b 67 1e d5 0e 93 60 29 d9 90 49 c2 b2 46 9d 60 93 91 17 4e 7c e4 82 c9 67 9c 98 01 38 f3 15 1c 69 33 26 04 70 a5 4d 96 1a 40 93 3a 40 29 0e 45 84 a0 ad 59 26 d8 c3 05 61 ec 4c 31 57 12 cc 81 1d 42 5d b6 9d 48 97 6c a5 a8 87 78 de 26 7e 3e 8c 32 6c dc 6d 34 7b 9f 31 0f 51 18 cd 65 20 eb 61 30 d6 42 bf 61 01 c7 31 d5 bb 4a d7 9a c7 40 d7 56 be c6 5a 36 82 bd e6 2a 01 6a 16 ad 54 2b 00 9e d0 db 2d 84 2c 56 48 65 ee 04 28 e6 5a d7 a5 e0 4d 23 26 c3 47 f4 d8 0d 33 66 e1 61 99 d6 0b 0c 3b 58 6d 23 67 82 39 03 bf 47 61 99 7e 03 0c 32 70 d1 7a dc 21 14 64 e1 8c ac 9e 12 11 b7 b0 da 64 99 1b 0c ce 96 35 e9 6e 0c 3b 08 93 df 11 11 0b f7 6f cb 5c f4 2d 18 73 d4 83 63 9f c5 a3 0d Data Ascii: 2Lt!]:\#zJLZKg`)IF`N\|g8i3&pM@:@)EY&aL1WB]Hlx&~>2lm4{1Qe a0Ba1J@VZ6*jT+-,VHe(ZM#&G3fa;Xm#g9Ga~2pz!dd5n;o\-sc
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 65 00 f6 8e 23 8c 96 0b 0a cb 4a 31 fd 6b 8f 9c d8 bb 58 e4 92 04 46 17 5c 43 30 ad 76 08 c2 bf 47 61 83 79 10 c8 c2 58 68 a9 d3 cc 27 49 07 ce 58 e6 39 56 25 9c ee ad d9 c4 1f 10 51 a5 c5 b4 7c 3b 21 85 fb d7 e6 42 11 a4 0b 64 3b 4c 07 9c 54 28 1d 53 b0 c0 74 a7 69 40 db 88 86 03 4f 90 29 01 65 e6 61 57 68 f2 03 20 07 29 c5 21 73 9e 40 4e 02 96 64 79 40 24 99 71 e5 2b 12 64 8a 4a bd 22 64 79 8a 88 f3 e3 4e 54 32 2c a2 58 22 29 56 b0 ad 52 5e 6d bc 0b ac b5 67 dc 42 bb ca 4a 4d e4 2b ac a5 24 da 0a cd 5c e2 cf 65 8a e8 3e 67 4a aa 5d 29 65 d9 54 ba 76 a7 67 27 bd 12 6f a5 fd eb c0 45 b7 e2 7d c3 c7 2b 91 da 8b a9 18 46 e8 8b dd 3d dd dd 1d dd dd d3 dd dd d0 8e 6b ba 7b bb bb 92 b6 cf 97 bf 96 e5 bd c3 19 f1 9f 4b e3 b4 de 99 9a f8 77 ae c6 82 fe bf ca eb Data Ascii: e#J1kXF\C0vGayXh'IX9V%Q\|;!Bd;LT(Sti@O)eaWh )!s@Ndy@$q+dJ"dyNT2,X")VR^mgBJM+$\e>gJ])eTvg'oE}+F=k{Kw
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 4f 79 97 9f 71 6d 5d 69 96 8d 85 9d 7d a8 33 ac ef 29 ee 57 cc b6 b8 aa bd 36 4d ff 00 a1 63 bd 63 e9 de 2f d1 ac 87 2b f5 7f cb f9 ea fd 85 9a ae e2 c3 53 bb b9 1c d5 ee e4 e5 ee 4e 54 e8 ee e5 ee 47 b5 fd 2d f9 d7 e8 cf c4 ec 3f 4b f2 ff 00 c6 3e 27 53 8d ef bd 13 ec 9f 8c fe c2 c0 f6 5f d1 97 b8 7e 6a fe 94 fa 9f 89 3d 3b bd 5f 97 1f 2a 74 74 49 83 09 31 18 fd ee 33 e1 1e ab 2d 53 7d 4b f1 cf 4b 47 4d 79 4f e4 f7 73 f4 9a 1a 3c dd fc b6 6f 51 9c 6f d2 e6 b3 da 7c ee a7 a9 cc 52 68 e9 35 76 68 ab ed 60 3e d5 70 a5 01 82 42 8f 3a 31 6d 14 47 1d ee 21 94 64 b0 84 76 4d 82 c2 b2 d7 03 4c 2b 5c 40 38 6d 78 c2 92 0b 90 22 30 4b 2c 19 18 4b 8c 65 6f 5d a8 f4 82 37 8a 94 b2 2a be b7 6a aa d2 58 33 8e a4 0b 08 39 8f 8a 0b cf fb 67 c5 d4 c2 38 9b 24 90 c9 59 c5 Data Ascii: Oyqm]i}3)W6Mcc/+SNTG-?K>'S_~j=;_ttI13-S}KKGMyOs<oQo\|Rh5vh`>pB:1mG!dvML+\@8mx"0K,Keo]7jX39g8$Y
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: af 9e a4 58 cf 81 3f 38 33 e7 40 96 90 ad 6c e9 2c 11 0e 86 d7 3f 66 82 fa 2b 3c e4 f4 95 d4 5c 65 2e 51 4b 57 77 95 bc cf cc d2 5c 67 6f 13 cb d3 ed 70 9a f6 bc ef ae fb 07 88 7b 07 e9 1f 96 6d 08 12 7e 82 f1 6f 56 a9 6a a9 e6 9f 19 f8 1f 57 ed ff 00 8c 46 f8 c7 c4 7e 84 f3 62 3a 93 dd f9 cf e8 b3 f4 bb f9 d2 fd c8 f3 7e 4b dc df 5d 63 f5 9f 91 77 22 12 bf 9b bf 90 7f 46 fc 35 f9 fb f6 55 df 89 6d 7c a7 db 62 c3 da f9 bd 8f a5 f9 9d 8e a7 cb f7 eb 6c fd 4b ea 3f 0c 7d d3 f2 7f ae fe a5 7d eb f8 fb fa 7f 95 f0 9f 5d e5 4f d3 df 1c e4 51 d3 b3 98 ed 26 43 e1 9e a3 3d 9f b6 ce fc 2f d7 40 a7 9f 51 e5 7d 0d 6d 35 9d 28 76 e9 aa 6c ea 5a dc a8 a2 ba a3 73 72 96 9a e6 99 ed 5a ba eb 2a e7 5d af 01 a3 b2 c4 18 e5 82 c9 1b 58 4a b7 4e 91 63 c6 70 b6 2f af e8 eb Data Ascii: X?83@l,?f+<\e.QKWw\gop{m~oVjWF~b:~K]cw"F5Um\|blK?}}]OQ&C=/@Q}m5(vlZsrZ*]XJNcp/
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: c6 37 0b a5 bd 2b 09 06 bb d0 7a 60 00 71 f5 d9 cc b3 1b 9b f4 e5 bf cc d6 c3 dd 58 f0 aa 21 eb 23 73 4b 5e 27 52 b5 ea db 1e 80 b7 85 6a da 5b e7 44 bb 36 b0 61 ad ab 61 a7 c6 90 2c ec e1 d4 95 46 ed 9d 5d 0a b7 bd 7e 6d f6 8d 13 b3 a7 a1 34 86 cf 3c 2c 69 09 9a 96 33 5d a4 27 82 f6 02 81 0a d5 b1 93 4b d6 8d 00 f3 f1 a6 34 b1 29 47 71 fc bb 65 02 47 d3 be 0b 68 58 07 57 4a 74 9a c7 81 bb 83 d2 18 0d db 75 51 28 4b 69 54 d2 c0 dd b1 2b 0a 06 ec 99 5c 91 d6 6f aa 5e 8b a2 51 9a b7 ba ea e2 84 c7 19 25 45 ab 9f 38 9d d0 a7 47 93 42 5a cf 80 54 74 1d 53 a2 a9 b5 42 41 b0 c3 b1 b2 cf cb 5d 8d 7d ae 42 eb 2d dd 65 fe 32 66 55 bd 36 ff 00 cd 34 f8 00 f5 0d af 96 6f 3c be 76 da d7 2d 79 81 9b 22 eb 0d 66 2a ee a7 61 aa 14 5b e8 5f 5f f9 bf d3 16 f2 3f 51 79 3d Data Ascii: 7+z`qX!#sK^'Rj[D6aa,F]~m4<,i3]'K4)GqeGhXWJtuQ(KiT+\o^Q%E8GBZTtSBA]}B-e2fU64o<v-y"f*a[__?Qy=
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 4c f2 9f af 6a eb ad f3 3e 83 da ad 58 b5 5d 36 b2 16 38 be 5e f6 fd 17 ad e8 53 e1 6b 8f d2 0f 13 a8 bc 2a 45 87 c6 be 9a de 7f 65 e3 9e ab f6 cf 8d c6 cc de d8 76 87 9e db 52 d9 69 79 da da a9 35 ee 79 fb 5b 28 96 8a eb 6b 7f 40 3f 3a 7e c3 f9 cf d2 3e 36 a1 fa bf e4 cf 67 f3 fe 09 63 ea 67 ed ef fc a2 c9 1d bf a9 bd b7 f3 c7 45 e6 3d 3f d7 de 3c 4f bd f3 63 e7 2f 28 fd 48 ce f8 4f 6d f8 dd 5d f7 77 cd 7f 44 53 ce fd 37 13 5b a6 87 db 7e c7 f9 b9 f4 ef cd 3d 38 65 7a c7 86 2d e9 a5 67 ed ed b4 43 e3 7a 3c cc 1f 4b 91 f5 67 9a ce ef 23 ad 53 07 db 66 84 1f 37 49 b7 89 e8 47 47 0a ea 63 4a 60 a8 37 fe 7f b3 85 19 d3 29 34 72 74 94 b6 ba 55 98 cd d2 7a 86 03 a9 9e 7c b8 9a 59 4f 38 d4 66 6c 88 44 8b 48 71 ad d6 7a aa 6e 8e f3 33 6b 33 ac 95 9d ce d4 d8 f7 Data Ascii: Lj>X]68^Sk*EevRiy5y[(k@?:~>6gcgE=?<Oc/(HOm]wDS7[~=8ez-gCz<Kg#Sf7IGGcJ`7)4rtUz\|YO8flDHqzn3k3
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: d8 0a 12 cd 24 c3 6b 08 07 8d 38 80 71 c7 d4 21 1c 36 f5 f8 b1 df d0 41 b5 3a 39 e2 6c d4 9c 26 cd 64 23 05 d2 66 0c 57 09 96 3a d8 66 41 37 a0 cb 2f d3 11 7b ca 34 3e d8 b8 9e a3 27 a6 ce 52 25 b1 a8 a2 a4 86 da df 33 cc 92 4f ac 7e 49 01 65 48 0b 71 25 4c 78 1c 84 db 66 d0 95 0b 6e 5e 9a 35 bd 35 49 43 22 c7 a0 b0 68 b5 b9 82 ad 42 d9 6d d2 c1 12 f2 f4 bc 9c 4a 19 4c c2 0d 97 90 0e 0b 06 46 af 14 c7 88 7a b1 a0 94 2b dc 7f 56 db ba 79 68 6f 59 c5 94 15 34 87 32 2c d8 2a cb 2c 25 f4 0b 69 65 1d 57 8d 2a 16 b5 2d 2a 1c 8e e7 cb 74 71 6b 81 51 5d ea 7c 15 8c 51 c6 67 32 20 66 01 cc 9a df 42 a7 d0 a1 b3 87 b0 a9 d9 b0 ab 30 da 3c e4 82 4c 98 96 26 a7 a0 ea a9 9f e3 be b8 4f 4a c0 7a 66 3f a0 f9 46 63 25 fb cf 8c ef 7d 3e 46 1b c2 fd 37 cc a3 30 fe c7 c1 fa Data Ascii: $k8q!6A:9l&d#fW:fA7/{4>'R%3O~IeHq%Lxfn^55IC"hBmJLFz+VyhoY42,,%ieW-*tqkQ]\|Qg2 fB0<L&OJzf?Fc%}>F70
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: e5 fe 85 b5 aa c2 f4 b3 a1 d2 d5 01 eb da 8a 5a dd 3c 8b 6a ba a8 1a 58 36 70 aa e1 e8 62 da c1 ac 84 ee 34 f8 71 1c de 59 24 a4 aa 18 86 aa ac ac d9 8d 6c 3a b2 0d 06 40 34 e4 ca 04 85 df 92 7a f8 42 67 cb 4d 21 7d 77 c4 23 29 12 68 a6 03 22 f3 df 4e 1e 8b c1 d2 ba 6b 6c ca ee b7 4f 1c 6e 98 3b 58 ee ee 52 3e a4 95 32 b6 c9 6d 22 2a 10 6d 30 52 dd 5b d5 b2 d5 b7 15 61 66 2d a1 87 6b c6 db 9f c5 13 2d 79 e7 81 ca d2 5a 1c 4e 54 49 b6 94 0d 0a 27 df 10 2e d3 ca bb 92 ae a5 41 ec 48 ae 9d 44 bb d9 01 35 66 95 9a 2c dd 98 96 51 e5 67 6b d7 92 f4 80 3f 8c 79 5f b1 f9 c7 b9 f9 87 af 12 ca 7f 95 f7 3f 3d d3 ef 33 1e db e7 55 ba ea 2f 6c 51 aa ca bf 5b ab f2 bf 42 cc 6c bc ff 00 3e c6 57 b3 e1 7c ea 23 6b e9 e0 67 eb b6 30 6d 22 40 03 f8 b2 84 35 2a af 78 9b dc Data Ascii: Z<jX6pb4qY$l:@4zBgM!}w#)h"NklOn;XR>2m"m0R[af-k-yZNTI'.AHD5f,Qgk?y_?=3U/lQ[Bl>W\|#kg0m"@5x
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 58 e3 a8 17 ac 7e 17 56 e7 58 c9 6e 92 b1 fa 24 ef 8d d1 79 2a 17 45 8e 80 6c 5a 4b 80 e8 bc 97 43 24 12 57 45 2d 49 21 c2 5a 94 e4 8c 5a 94 dc e9 01 64 ed 8f 16 a4 98 30 cd 9a 11 6c 6e d2 d8 83 74 28 59 db 37 91 32 f5 06 5f 51 55 9c 1e 86 2d b8 2b 95 9c f9 ec 80 b3 49 7d 1d 96 ac c1 c6 8d 23 97 1a 1c 76 33 a5 0c 2e 22 92 1f 1d 22 e7 e0 27 71 da 15 ea 95 83 8f 61 9e 27 0c a9 22 2b c8 14 33 16 97 2f 0d 22 d2 09 1d 68 52 c6 e6 5c 68 12 21 95 6b da 48 e7 1d aa 26 49 c3 6d 48 51 70 2d 16 0a c6 d5 7e 62 88 81 64 72 b4 8a c7 e3 30 83 47 31 b3 57 b5 16 79 79 e5 8b 03 a6 a5 6f 0f a5 0e 62 3a bd b6 84 57 37 bb 9e af a9 1e 71 cd 13 2e 31 6d 13 d6 8b 72 47 a3 bd 26 5d 2c 35 de d6 c7 ca ac db 40 dc e5 61 94 d1 d5 d3 47 7b 1a ce 1d 78 9a c9 96 c0 71 56 32 c7 77 41 d1 Data Ascii: X~VXn$y*ElZKC$WE-I!ZZd0lnt(Y72_QU-+I}#v3.""'qa'"+3/"hR\h!kH&ImHQp-~bdr0G1Wyyob:W7q.1mrG&],5@aG{xqV2wA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49918	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	929	OUT	GET /xxrz/250x400/793/1b/2e/1b2e7f907e0eabd02ddca00c9a3ca2a4/1b2e7f907e0eabd02ddca00c9a3ca2a4.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:40 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:40 GMT Content-Type: image/jpeg Content-Length: 74920 Connection: close Last-Modified: Sat, 24 Feb 2024 16:17:40 GMT Vary: Accept-Encoding ETag: W/"65da16a4-c539" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6953 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1szIGBefXwHt8dyafu18nXGiW1oUUmz8HLgw4hJSQn1ZxphDfiqGwf1f0vaPWrua1YCvEveja%2BMGezQII2kAaZw6KBQcvTTrJBDJAzwtc%2FYrmJqp1oWnI%2B%2Fag%2B8tgxy4VuNp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8275fe2a57c-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:40 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 7c 55 ea 1a cc 6e 0e 73 8a a3 f5 15 27 de b9 5f 11 7a 68 3c 64 58 1f 1d 47 95 ad a9 57 2b 2d ee 16 5d 63 14 49 be d2 84 ae 5a 46 07 f1 c1 24 f8 66 29 f6 6a d9 1b d4 f3 81 bf 99 ba f5 14 87 7a 40 32 56 b4 8e db 96 76 d6 f6 f8 ed 1a ce a4 f3 47 bc dc 62 e8 be 56 93 58 e0 33 59 21 57 49 2d 5f 29 3b 0d 57 ad c0 df d0 17 2d 3a 78 da 21 96 97 5d 4e 62 d5 06 1c e7 6d 56 40 fa 05 ca 71 eb 1f 25 23 d4 d7 e5 c2 90 98 86 5c a6 78 2e 80 1a 20 af 0b c1 a2 bb 0e 28 b3 5b d6 78 31 e8 75 70 53 70 2d 0e e9 89 00 fa b4 ee a5 6f 15 f6 6b 77 d7 24 69 ee a9 5b 5c 85 9e ef 52 d4 a2 18 c1 23 1d 3f 47 cf cb c6 97 92 ce aa f9 1a f4 61 d7 1b ad cc 4b 31 cf 26 0d 47 4a a2 63 8d 88 27 73 1b a9 5c ac 1a 90 a2 d6 7c 6a f7 d4 aa 38 a7 9c d8 b1 79 3b 0d 35 96 7b 9b 92 0d c4 ca 63 e6 e5 Data Ascii: \|Uns'_zh<dXGW+-]cIZF$f)jz@2VvGbVX3Y!WI-_);W-:x!]NbmV@q%#\x. ([x1upSp-okw$i[\R#?GaK1&GJc's\\|j8y;5{c
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 0e 89 f5 0a 97 e3 e8 d8 32 20 2e c4 70 fd 33 77 8c 29 14 23 31 36 fa 94 0a c0 ac 0f f8 d3 b5 c6 2e 29 f6 23 90 e6 e7 d8 a3 98 05 0d 8e 18 cd 90 f9 27 63 c6 c9 86 cd 27 62 6b 5d e1 90 4f 65 e9 e0 7b 90 75 cd 89 78 56 63 d5 56 e4 e1 a2 19 f1 3d dd e2 0b b6 cd c3 8d 0f 6b b5 d8 14 a5 3b cb 4e b7 4c 5a 2c 0d 68 37 ce 57 50 9b 63 a6 1e c0 98 30 de 0e 44 ec 6a ca da 9e 65 dc 54 5f a8 36 d6 43 8c 15 8a 04 ba dc f0 9a b3 6f fa 3f 27 50 ab 6d ca a1 a4 a8 d6 f6 79 71 78 f4 02 37 4c 81 ae ee 94 b1 d6 17 d4 59 cb 63 b5 a4 3b 35 65 52 d9 6c 2a 55 d7 e1 32 55 4c 0b 21 8d 1f d2 fd 46 dd ee 0c 52 14 8e a2 a2 d1 22 a4 2a 68 1a 07 3b b5 f1 e8 c4 ab 60 a2 d8 33 12 8b 54 0c 4b 1f 4c a8 81 ea d2 83 a4 51 cb 05 8d 79 b7 75 2d f2 05 aa 7d 8d ad 95 9c f4 2f ac dc 66 eb 98 24 7c Data Ascii: 2 .p3w)#16.)#'c'bk]Oe{uxVcV=k;NLZ,h7WPc0DjeT_6Co?'Pmyqx7LYc;5eRlU2UL!FR"h;`3TKLQyu-}/f$\|
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 99 2e 14 f1 c5 11 75 38 88 38 de 65 41 f4 f3 fc b6 dd 74 d7 dd 6b d3 fd 52 c6 33 66 50 0d 67 ea 6e 5c eb 46 c4 fa da 23 af 0a 9d cf 70 29 a4 1f 34 89 f7 5a 6c cd 2f 68 b7 b6 a7 3b 39 c9 00 c9 31 91 72 4c 5c 9c 0e 52 74 1e 1c ad e3 1e df c4 68 ef 39 21 d7 8e 20 93 f4 cf 27 72 b9 aa b8 c1 2e 08 3f 4c 88 b9 3a 8e 35 b4 0d 93 4e b3 d6 ce 18 5e 7d 6e aa 0c b6 4c d9 75 3b 7a 5b 3d 2f 55 96 7d 0e 83 57 e9 cd 35 a3 45 4b 5d 11 13 95 eb ba 3d f7 72 10 8d 34 0a 39 85 6d 45 5b 43 91 02 e7 1a a1 ad fe 36 64 4c 30 f9 49 03 c9 42 c9 c1 c9 61 fb 91 17 bb 1c c7 26 76 e4 28 83 84 3e ee 31 dc 93 1a ce 31 83 44 46 0d 17 00 1e 71 a2 68 85 45 dd 2e 9f ae 0d 91 12 86 96 dd a6 ac 64 d1 09 80 b2 99 b1 53 41 ba 6e bf a9 6a 97 d1 ad 27 bc 2e 0b 9a dc eb 98 f8 d8 a4 52 ca ef aa 63 Data Ascii: .u88eAtkR3fPgn\F#p)4Zl/h;91rL\Rth9! 'r.?L:5N^}nLu;z[=/U}W5EK]=r49mE[C6dL0IBa&v(>11DFqhE.dSAnj'.Rc
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 89 0c 10 f5 ed f8 3a d4 8a dd f2 be b0 32 7a 93 b6 dd 91 75 bb 42 b6 d2 31 14 32 e3 65 54 4f 66 49 35 4b 32 c9 d9 64 23 18 ef f3 a6 ba 5d 7a bf 6b ba a1 d5 af af b6 8b 70 1a 92 aa 38 ea 72 5c d2 73 51 71 0e b5 8c bf 1b c7 6a 40 14 92 0e 8f 24 87 bb b0 b9 f7 9b 14 a7 42 a1 a5 9c db 3a 9e dc ea 14 8f 5b 53 83 54 f2 c6 ac a4 af f6 35 dd 13 51 7d 7e db d3 9a fa bc 15 67 39 b0 47 88 5a 6b 08 cf 87 38 26 41 28 2d 0a 99 59 75 2a 21 ac ec 03 b2 c5 93 19 9c d6 de 12 29 f4 8e af 6c 50 6d 7a 8f a8 44 b9 8e 54 19 22 d9 f8 2d c3 5d 6b 5c 19 8e f5 ad a6 49 73 21 46 99 b9 d1 d5 3f f9 0a dc cb 06 f9 32 ba 5b 77 e8 b6 05 0f 6a b4 88 f4 71 02 e5 cf 5d 73 69 17 9f 5c e9 95 8f 96 b3 3a 8c d5 2c 05 8b c8 a4 39 c6 bf d6 af 20 c6 1d b3 59 31 ae 93 06 1b 37 2d ae 7c b9 24 7e 22 Data Ascii: :2zuB12eTOfI5K2d#]zkp8r\sQqj@$B:[ST5Q}~g9GZk8&A(-Yu*!)lPmzDT"-]k\Is!F?2[wjq]si\:,9 Y17-\|$~"
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 44 ee 70 de 3f b5 34 64 5c 24 64 4c 2c 76 3d 1b 1c 63 67 c7 46 62 b2 33 93 10 4a 98 12 a2 aa 9d 9c c3 32 62 17 25 94 ca 07 eb 83 15 b2 c9 e5 95 d1 2c ae a5 9f a6 fb c3 9b 7f 4b 75 ae 4a 79 17 17 f6 c5 7f ac 90 a0 58 dc 30 63 f2 e5 65 04 fb 24 00 53 b5 38 73 3d 44 76 48 84 99 1b a4 7b ec e8 f2 eb 2c a8 a7 6a 1b 43 b5 fb a8 16 b0 2f 6b e0 9d 4c c5 6f 38 fa 4b 17 36 6d 44 c8 6c 46 2f 2d 6e 18 46 4c f3 97 bd 87 22 3b 20 af 39 ff 00 08 a4 4e 09 c3 90 a2 6a e1 d3 8c 91 9a 84 c3 ec 54 4f e5 1c c6 f6 64 97 a2 b7 a5 c8 ef 1c 64 62 37 a7 dd 89 10 93 c2 35 75 a3 58 81 b8 45 ce 9f fa a2 cb 03 c9 b6 98 6f 2e dd d3 c8 75 c5 7a f4 d0 f6 14 36 31 ea 4a f6 56 d5 4a 0b 07 aa 1c cd 99 a9 49 03 e5 54 90 4c 59 40 63 e3 b5 8f cb 1a 76 9b 09 1f d7 5f 61 32 15 ab 04 e2 5c 89 58 Data Ascii: Dp?4d\$dL,v=cgFb3J2b%,KuJyX0ce$S8s=DvH{,jC/kLo8K6mDlF/-nFL"; 9NjTOddb75uXEo.uz61JVJITLY@cv_a2\X
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 29 51 f8 d7 67 9d 79 59 1c bc 4f e1 de de 79 b3 cc b9 e6 cf 32 e7 97 3c d9 e6 5c f3 bb 3c b9 e6 5c f2 e7 99 73 cb 9e 45 5c f3 2e 29 95 73 cb ce 79 33 ce b9 e6 5c f3 3b 3c cb 9e 75 cf 3a e7 9d 73 ce b9 ec 2e 7b 0b 9e c2 e7 b0 b9 e7 5c f3 bb 3f ff c4 00 41 11 00 02 01 02 04 04 02 06 08 04 05 03 05 00 00 00 01 02 03 04 11 00 05 12 21 06 13 22 31 41 51 14 32 42 61 71 81 07 15 23 52 91 a1 c1 f0 16 33 62 b1 10 53 72 d1 e1 24 82 f1 63 73 92 c2 d2 ff da 00 08 01 03 01 01 3f 01 92 01 a0 fb b1 53 12 9b 83 ef fd 3f df f2 c4 94 41 8d 80 f9 62 7a 43 1f 4d b7 f1 fc b0 f0 f5 79 63 96 30 9e b0 c2 e0 0b 7f 84 fd 8f cb 12 ad cd fc bf 5f fc 62 75 2a 46 d6 bd fe 7d b1 2b 5b b1 fd 9b 63 9c a0 0e ad 2d e7 df 50 f1 04 1f df 7c 25 62 88 d1 55 6c c3 d6 b5 88 f0 b6 c4 1b 78 f6 c1 Data Ascii: )QgyYOy2<\<\sE\.)sy3\;<u:s.{\?A!"1AQ2Baq#R3bSr$cs?S?AbzCMyc0_bu*F}+[c-P\|%bUlx
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 16 d4 a8 74 a4 c8 03 e8 74 d1 a7 58 46 f5 b1 c4 b6 cc 72 58 68 79 71 a2 37 2a b5 5e ea 3d 1d a6 97 99 29 78 dc aa a0 4b b1 5d 6e 03 1d ae 3b e3 2a cf d2 8f 36 92 95 e5 a7 a9 a3 92 14 51 58 93 73 6a 63 a9 5e a2 d3 83 a7 54 4f 19 b6 a8 43 85 71 d5 d2 0b 0e 35 aa 44 c8 67 99 9a 33 cb 9e 8a 48 90 b5 bd 25 96 ae 13 c9 8d b6 21 e5 5d 4a 2d 7b 77 b1 b6 38 57 21 ca f2 79 eb aa a8 12 75 fa c3 96 26 59 dd 58 a1 4b bd 94 2d f6 d5 21 b9 bf 51 5b d9 7b 62 a7 26 6a 5a 8a cc cd 33 1a 96 79 22 90 d3 a4 cb 03 25 23 e8 37 68 96 34 82 69 a3 51 b9 86 49 1c 00 01 16 3b e3 2b 35 54 6d c8 23 9b 37 2c 4d 3c 88 02 25 4b 6a fb 59 55 6e cc 93 4b 7e 7e 91 23 02 5c 8d ad 73 4f 30 60 b6 ba fb 98 69 38 66 e9 3f bf 1c 55 d3 24 ba 8d bb 62 b7 27 56 96 ea a1 4e f7 b0 ef b8 b7 f7 c4 d0 d9 Data Ascii: ttXFrXhyq7^=)xK]n;6QXsjc^TOCq5Dg3H%!]J-{w8W!yu&YXK-!Q[{b&jZ3y"%#7h4iQI;+5Tm#7,M<%KjYUnK~~#\sO0`i8f?U$b'VN
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 35 1f f0 a9 c8 28 ea 2e e6 31 ab ce ff 00 a7 6f c2 d8 39 29 88 32 95 e8 22 d6 5d f6 f1 ef 7f 76 33 ae 28 fe 14 8e ae 09 5c e6 35 08 eb c8 a5 a7 b2 f2 84 f7 61 e9 66 e7 43 68 1e 01 ae 37 0a 2f 8a 2e 34 e2 41 ca 92 38 bd 1e 9b 9d cf 34 c9 af 7d 6e 19 94 3c b4 a2 32 af 63 d1 e9 1d c9 37 c6 67 5e 95 f9 25 06 6b 47 31 a5 e6 4f ca 6d 74 af 55 3c 32 c9 13 af 2c 40 9d e5 59 82 6e 41 4d 17 f3 d9 b2 b6 9a a9 1e 66 33 44 d0 a7 35 f4 e8 33 34 89 fc d7 44 fe 52 ef b2 ec 12 c4 1f 3c 66 54 13 56 d6 e5 34 71 31 30 65 f4 32 41 0b 30 bf fd 50 a9 53 11 6b 8b 1b 41 04 07 5d be 43 19 1f 13 56 7d 1f e7 59 a0 aa cb da ba 96 b1 45 48 a4 8a 40 b0 40 f2 e8 2c f1 99 86 93 21 0a c9 2d 97 d6 25 81 bd b1 f5 c5 5e 73 4f 9b 66 92 c2 c0 35 7a cb 4f 4d af 9a b4 d0 ac 8c d1 c1 1b f8 a6 db Data Ascii: 5(.1o9)2"]v3(\5afCh7/.4A84}n<2c7g^%kG1OmtU<2,@YnAMf3D534DR<fTV4q10e2A0PSkA]CV}YEH@@,!-%^sOf5zOM
2024-04-26 18:32:40 UTC	1369	IN	Data Raw: 23 45 14 33 54 d4 cb 60 f4 82 03 12 c7 a0 fa cf 50 4b 2d ed e2 82 f6 de db db 0f 9b 88 26 a7 ae a1 a5 e7 4d 2b 72 aa 4b c5 2c 51 c6 1f 49 2c d2 08 18 3e 8d 95 43 90 37 24 5e f6 19 86 65 04 94 32 4b 2c 47 c5 24 45 60 cc 09 40 c3 c0 6a d8 ee 36 c7 14 52 45 99 4d cc 86 6e 57 2a 0b 41 12 53 b4 46 69 43 73 1a 19 54 dc 82 ea 3f 98 9b 5d 40 60 2e 31 f4 59 4b 4d 59 c3 13 51 d6 41 49 22 53 e6 55 32 54 d1 54 20 4e 87 58 d9 64 37 2a 19 93 4b 68 94 ee 9a 42 d8 8b 63 25 a0 cb e0 8a 6a 59 23 bd 22 49 50 29 41 b8 65 82 47 62 80 32 d8 b2 e9 6b 15 6b 8c 65 1c fd c4 ae 39 7a 15 91 74 ee b6 d2 37 37 dc 1b 6c 3c 30 6f 7d 80 3f 1c 67 b9 12 66 d0 da 39 4d 35 52 8f b3 98 0b ae c3 d5 94 77 2a 4d b7 1b a9 df dd 8c fa 5c f6 b2 9a 2c 8f 33 a7 d3 51 97 4a fa a6 b9 3e 94 8d 65 8a 51 Data Ascii: #E3T`PK-&M+rK,QI,>C7$^e2K,G$E`@j6REMnWASFiCsT?]@`.1YKMYQAI"SU2TT NXd7KhBc%jY#"IP)AeGb2kke9zt77l<0o}?gf9M5Rw*M\,3QJ>eQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49919	151.101.129.229	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	552	OUT	GET /npm/js-cookie@beta/dist/js.cookie.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:40 UTC	762	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1502 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.0.0-beta.4 X-JSD-Version-Type: version ETag: W/"5de-umxYiZHe1aDZ+J/AVp+cMSpsIxY" Accept-Ranges: bytes Age: 20771 Date: Fri, 26 Apr 2024 18:32:40 GMT X-Served-By: cache-fra-eddf8230107-FRA, cache-pdk-kpdk1780143-PDK X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-04-26 18:32:40 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 73 2d 63 6f 6f 6b 69 65 20 76 33 2e 30 2e 30 2d 62 65 74 61 2e 34 20 7c 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 65 7c 7c 73 65 6c 66 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 65 2e 43 6f 6f 6b 69 65 73 2c 6e 3d 65 2e 43 6f 6f 6b 69 65 73 3d 74 28 29 3b 6e 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: /! js-cookie v3.0.0-beta.4 \| MIT /!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e=e\|\|self,function(){var r=e.Cookies,n=e.Cookies=t();n.noConflict=function(){retur
2024-04-26 18:32:40 UTC	124	IN	Data Raw: 63 6f 6e 76 65 72 74 65 72 2c 74 29 2c 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 29 7d 7d 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 7b 76 61 6c 75 65 3a 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 69 29 7d 2c 63 6f 6e 76 65 72 74 65 72 3a 7b 76 61 6c 75 65 3a 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 29 7d 7d 29 7d 28 74 2c 7b 70 61 74 68 3a 22 2f 22 7d 29 7d 29 3b 0a Data Ascii: converter,t),this.attributes)}},{attributes:{value:Object.freeze(i)},converter:{value:Object.freeze(n)}})}(t,{path:"/"})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49920	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:40 UTC	930	OUT	GET /xxrz/1200x600/793/55/5b/555b64c17d8909e2376acd8438a583e5/555b64c17d8909e2376acd8438a583e5.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:41 UTC	730	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:41 GMT Content-Type: image/jpeg Content-Length: 423976 Connection: close Last-Modified: Fri, 16 Feb 2024 08:37:08 GMT Vary: Accept-Encoding ETag: W/"65cf1eb4-3966d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6954 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rw7%2FMvna%2Ba0Hk0gFVtFmvehAnzVSSajHjm%2Fxt%2FfeMckDmjDco4%2B%2FFm4T8dEerceGITh8VtvQmLeitlVbMyTURrF2wzLBGznpTNsUs5vgDA%2FooOEdBchJAW1ozzkiqlk9gRuS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8299c6cda87-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:41 UTC	639	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 00 03 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 4a 0d b9 68 a1 7b ee 26 c3 6b 89 2b f7 cc 23 cf 71 df 9f 43 3f af 0a 7b e7 31 6d 2c d1 63 c6 f5 29 e9 45 5a f7 d7 a9 59 fe 77 d7 3b b8 ed a7 7d d2 c4 ae 47 87 6f 0c df d7 44 a9 f6 a7 8f 7d cb fb 4a 4d 0e 56 28 ec 90 76 21 2b 4e 8f 30 8f 27 87 dd 86 da d9 b0 a8 4b ae 97 d3 82 44 f4 5d 28 48 02 29 3f 67 69 8d 78 c1 19 b7 38 7f a5 cc 1d 02 4e 08 fa a0 4b 0f 6f 5f 95 44 9d 0a fa 4a 14 37 49 1e 06 68 77 37 2d b8 2d e9 f5 51 56 20 19 e0 61 18 10 ab 6c ce c9 85 da 35 3a 90 7d 03 e8 a7 cc 4f b1 3f 35 68 3d a7 14 06 6c dc c9 a9 f1 3a 31 a5 b6 ce cb 16 30 fc 5b ae 1b c2 01 ef 5c c0 cf 0b fa 75 17 a2 14 56 64 c8 76 6f d1 58 fd 79 e2 8a d6 de bb e9 5b ce bc 76 bd ed 76 ae 39 c8 78 5b d7 35 37 9d fb 69 3d cb 40 cc 36 63 08 b3 11 85 13 a3 91 9e d6 5c e7 b8 18 f4 96 af Data Ascii: Jh{&k+#qC?{1m,c)EZYw;}GoD}JMV(v!+N0'KD](H)?gix8NKo_DJ7Ihw7--QV al5:}O?5h=l:10[\uVdvoXy[vv9x[57i=@6c\
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 38 f3 74 6d bb 51 98 42 e4 c1 4f 5a 1d 69 68 65 cb b0 3e 96 41 6c 0a 5e 62 f4 5b bf e5 df db 2f 8e 06 f3 fc ea 29 60 0c d9 79 8d 72 da 61 b4 17 33 97 8c b2 1e 37 f5 83 e8 84 55 13 f1 e9 ae f6 5e 1d ed 1d aa 2b 90 4b c5 97 54 6a da 9f 35 31 93 f1 e6 80 2d 9c c1 ea dd 0c a9 b7 f1 e1 8d 4d 1e df 16 1b 89 f8 1e 96 6c dc 43 12 77 24 ba d1 22 dc a6 c0 ef 52 e1 20 ff 00 db 44 e6 fe 64 fc a3 a2 91 7b 2c b1 e2 1c b8 6d c5 ef d3 c6 1d c8 7a 24 82 70 d8 93 b5 81 2c 3a da 49 36 66 ce 75 df 39 cc eb d7 3d f3 cd 05 9a 58 7c a5 05 a2 e2 04 58 78 96 bd 85 e8 4f 45 3c 47 24 77 5a f4 a5 bc e9 f3 62 e8 ba 5a 41 f9 08 b1 69 34 c5 73 5d eb 08 ba 0c c2 de 4e 38 83 99 27 08 9a 85 a6 d8 16 0e 62 fa 0b 92 f7 8c 04 39 a2 f3 9d 96 4d af 22 4c ee b2 0d 21 91 08 93 4c ed b1 33 17 40 Data Ascii: 8tmQBOZihe>Al^b[/)`yra37U^+KTj51-MlCw$"R Dd{,mz$p,:I6fu9=X\|XxOE<G$wZbZAi4s]N8'b9M"L!L3@
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: be 79 df 17 bb 2b 87 93 6c 98 ff 00 2d 64 d1 49 2f 8a 02 f4 15 ed 0d e6 78 7d 87 25 3e a9 49 6a f7 7b c0 22 8c d9 59 5f 6e c5 a2 f6 cd 35 a3 f2 59 16 f3 66 93 e8 63 ac ba 85 69 75 1f 47 af 8f 9e 9b b2 c2 0c 96 6c b6 2b 29 b9 4a 36 e6 ce 2d e3 17 45 7c d8 fb 9b f2 3c 94 b9 f5 f4 f0 70 9e 77 bc be 70 68 ea 6f 4b b9 b0 87 d9 0f 8e a6 ac 7e 0e 68 13 23 29 e7 ca 28 ba 3c ab a0 f3 d3 57 56 f7 10 fe c0 a6 bc 5c 7a ec 13 ad b6 cc 70 bb 39 42 8b 3b ee d4 29 ba 4b fd e4 fa 0b 44 57 d9 54 58 0b e9 06 21 20 b1 d3 7d ad 9b af 29 0d 6e cc 1f d4 9a e2 8d 1a 1d 68 d7 5a 60 1a ef 7d e5 2b ba 5c ca fb 8d 6e 73 de 8e c0 0d 9c 30 fd 4b 9a 7e 99 87 47 a7 3e 47 fd 08 f9 87 1f 42 de 7f cd f9 12 ae af d6 16 4e f0 30 e6 fe 7b db 34 65 f0 2d 0c e1 62 d1 e8 1e 43 4d 0c 04 b6 c8 e5 Data Ascii: y+l-dI/x}%>Ij{"Y_n5YfciuGl+)J6-E\|<pwphoK~h#)(<WV\zp9B;)KDWTX! })nhZ`}+\ns0K~G>GBN0{4e-bCM
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: ad bc 13 c6 fa c3 0c 45 9d 83 29 eb 54 2b 5f e7 ed d7 74 5f 6b 45 f4 93 e6 be e8 f9 9a 67 df fb 1f e6 b6 c9 a5 b2 2a ad b4 8e 26 95 1a 9f 0d 7a c6 64 17 3a 3f 32 bb 69 f7 d5 10 43 04 4b e8 83 da c2 74 13 c8 47 fd 47 c6 d0 db 5a f3 c0 36 37 dd 68 1a 3d 51 9d 0f 93 28 b4 97 a9 15 30 f2 8d 06 cd 46 44 32 78 4a e8 f5 37 19 c9 a2 bb f4 d7 b4 b0 51 d2 8b 36 42 ca f7 32 58 d3 d1 a1 a5 bc 8f 6a b9 9b c5 63 65 7e df b6 ea b6 88 3b 60 82 4f db a5 c7 22 13 b5 dc 96 1b c3 91 2b 49 b3 a7 f3 8e 84 a2 14 0d bd 48 bc 55 01 74 d1 e1 e8 c9 21 7b f6 c9 96 60 0d 83 52 b6 62 49 91 31 24 18 c7 48 b9 47 23 eb be 98 62 f8 36 f3 2c 98 c4 cc 06 57 89 26 d2 c7 1d 65 9c 09 74 9c 7a 3d 18 96 6c 9e 36 6c a5 63 9d 03 c9 6c 1c 47 47 27 1e 25 80 e2 23 2a ce 67 9f 3b f4 57 e7 31 bb 2e 06 Data Ascii: E)T+_t_kEg&zd:?2iCKtGGZ67h=Q(0FD2xJ7Q6B2Xjce~;`O"+IHUt!{`RbI1$HG#b6,W&etz=l6lclGG'%#g;W1.
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: cf 15 1d d5 2e ea 2a 92 4a 4e 72 96 25 58 c8 ae 36 e6 bc 58 c2 3d c3 d4 f2 aa 3b 65 32 b2 ab 57 d2 a2 88 9a 2a 24 e7 74 78 0d 66 b2 48 15 84 c6 07 94 e2 04 47 b0 c8 77 16 eb cb d8 d7 8a 7b ee 49 d7 8f 48 ab 4d 44 4a 36 52 f6 55 79 ab 59 a2 90 ce d3 21 02 b4 44 92 50 79 a9 6d ec 9f 9a 97 11 a0 53 a3 7f 5d 3e 57 9a 84 23 b5 9b f4 75 f8 9c c7 15 9c 8c f0 0f 39 2d 7d 8f 9c f3 76 e6 4e fa 15 95 43 a5 17 fa 05 f3 6a e1 a5 de fd 25 76 4f a7 9b 3b f3 cb 15 f4 77 34 d8 f8 ab ff 00 a3 d9 37 70 d2 6a e1 98 d2 d6 f0 d0 26 2e cd 02 14 ab e3 e0 c7 d1 44 f6 fe 63 f3 82 e8 cc 8e 67 67 b7 66 33 dc 5f 3a 39 e4 00 52 15 b0 c7 a0 f6 3f cd 1d 93 47 a0 bd 2c 9a 4c c7 33 ba b5 6a 62 a5 f9 f8 37 c6 c2 a5 67 b8 49 e5 ad 6b 06 df 36 33 d3 f5 f0 cb 4e e8 39 6d 1a 18 a6 4d 22 47 e1 Data Ascii: .JNr%X6X=;e2W$txfHGw{IHMDJ6RUyY!DPymS]>W#u9-}vNCj%vO;w47pj&.Dcggf3_:9R?G,L3jb7gIk63N9mM"G
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 87 76 14 4a eb 51 7d 01 1a cd 8e c8 c4 f7 a9 d9 9c f6 76 3a 7b 73 94 19 a9 be 93 fc c4 1a 56 6c 2c 6a 94 4b 71 d6 44 ad 5c c0 79 18 ee c6 ed 2f ab 7e 63 9f 51 ea 3e b1 99 7c be 29 a8 d3 7d 1f 8f c0 0d 06 5d 77 94 68 da e6 d6 86 50 fe aa d8 16 d9 cc ee 1d 60 d6 24 05 c6 49 17 6d 9d db f3 e5 4f d1 af 99 a5 16 c7 c7 fb 53 0e 02 ca ae 8e b2 18 05 41 d2 27 89 3d 6f 35 c6 52 22 8d 37 ea 65 8b f3 d2 eb af d3 19 56 61 73 17 f9 d1 1f a5 f4 d6 3b 2c 3a 74 11 3f 15 97 66 f1 b1 13 81 d2 28 83 44 c9 5b 06 bc fe 96 74 38 69 c5 b3 13 6d 5c f6 8a cd e5 5f b3 f6 0d 3c 8d d6 de a4 2c 2e 72 ec ac 23 da 40 cb 47 4a f1 d1 1e 5a 1c d1 27 64 18 c6 f1 0c 87 c9 20 14 e2 92 5c 8f 26 78 af b4 17 65 d3 92 11 ab 49 96 15 e3 f9 78 15 14 c4 64 fc c1 69 aa e7 ad 85 df 05 01 3e 9b 9f 19 Data Ascii: vJQ}v:{sVl,jKqD\y/~cQ>\|)}]whP`$ImOSA'=o5R"7eVas;,:t?f(D[t8im\_<,.r#@GJZ'd \&xeIxdi>
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 28 4a 74 ca 6b 35 5c 37 4e 1d 33 51 41 2f 26 b2 49 69 2a d5 da 77 b9 d9 c5 c9 41 41 88 3d 97 3e 72 0a d0 07 60 c9 32 ec 22 2d 0e 25 5d cb 56 ba e6 31 74 c6 45 41 e5 dc 42 cd 92 7c 43 59 4c 44 d3 68 7d dd f2 74 a6 a3 7f f5 8b 15 a5 aa 2b f6 d8 e2 aa dd 39 e6 66 6b 18 3c d2 35 8d e7 96 13 d1 77 05 35 22 9d e1 c4 33 84 37 51 51 fe b9 ce 1f 45 97 f3 a6 20 e3 a4 c3 7c bc ec 13 c1 5b b8 94 8e 26 64 ef 0c 5b 4c b2 c2 33 4b 67 76 d2 a9 22 18 fd 04 c5 12 b2 da b9 bd 52 75 07 d3 e4 32 ee c5 a0 9b 91 d4 19 ca 88 fa 31 28 38 aa ca a8 ca d6 9a d5 ec 2a 46 3d 90 fb 79 60 e5 23 28 99 a1 30 cc 35 d8 98 5f 55 96 96 0b 1b 6d 1c 87 6b e7 a2 d6 b8 65 d1 1a d4 50 03 48 05 0a d2 c6 d4 f4 59 4e 4e f2 fa 91 19 30 a6 bb 55 15 9a b2 6b 17 b5 c6 70 99 17 e8 16 15 12 10 be ad ad 9d Data Ascii: (Jtk5\7N3QA/&IiwAA=>r`2"-%]V1tEAB\|CYLDh}t+9fk<5w5"37QQE \|[&d[L3Kgv"Ru21(8F=y`#(05_UmkePHYNN0Ukp
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 54 98 e6 a3 a7 8b 4e 0e 47 3b a2 b8 3f 3d 9f 69 b0 e6 58 54 9f 49 28 2d 99 1e c7 12 d4 9b 7b 38 21 82 64 34 04 bb e1 e0 a9 6b 32 3c 80 bb 71 ce a5 c8 05 8e d4 a4 42 e3 49 e1 e3 8e 21 b9 c4 e4 30 47 2e 04 b0 25 8f 93 e7 62 bd f1 bb 61 47 2b b6 aa af a8 d1 2e 6f 77 86 79 e3 3d e9 79 d3 3f 6b 8a c8 d1 33 cd 98 ce 77 63 e7 f1 12 fd 47 c2 de 48 40 48 d6 d4 9b 51 b6 dd 33 9f 8d e3 27 16 7a 06 a7 4a 65 cb 1b 1f 21 29 ce 2f 52 81 c8 22 a1 74 d0 96 a9 aa 6b 87 92 30 6c 98 4e 7f 57 11 d7 e9 e4 dd 32 f3 12 e4 92 2d b5 8b ca 09 10 9c 19 e3 be 77 0b d1 e2 97 55 36 c0 24 9a 42 80 42 31 19 34 ec e6 bc cf 35 e1 f3 31 ee 9d 5e e1 c3 49 1e 3c d8 4c b6 df 9a 9f 2c fb 70 80 f0 7e ba eb df 2f 3d f9 f5 ce f5 e5 4f 1c 4f 1d 7b f3 dd d7 85 3c f3 7c f3 9c e6 f7 ce fc f7 75 d3 92 Data Ascii: TNG;?=iXTI(-{8!d4k2<qBI!0G.%baG+.owy=y?k3wcGH@HQ3'zJe!)/R"tk0lNW2-wU6$BB1451^I<L,p~/=OO{<\|u
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 45 6c 85 9f 9e 27 64 d3 2b 17 ac 28 a5 75 32 d0 f8 0d f4 cb bb 67 eb 9a 53 0e e6 3d 49 18 d1 db 17 45 6b ed a2 85 ad 7a ee 2d 6e 29 12 71 7e 5b 2a 6b c4 73 b4 7f a4 64 e5 5a 40 c6 76 18 7f 32 1e 7a 2d 99 23 f7 eb c2 88 37 d2 10 9c 43 4d c8 b2 81 69 4d 2d 68 81 e6 4b 0d 6e 68 c1 92 85 1d f1 2e 1b 66 8a 24 f8 9e b9 d7 87 31 e1 20 8b e1 9a c2 0e 83 22 56 c1 4b 12 c4 f1 a6 ae 2c e5 70 57 ed 7e a6 6c 5f ce f5 ed 4b ea 7b a3 22 6c 4d 0a 1b cf 8f 14 67 d2 fc 4d 77 e4 75 f9 b3 f0 32 e7 36 a0 ed 59 3d 02 e3 d2 11 35 73 db ac 49 be 75 8e 59 65 b5 ae 7d b8 60 6d 32 a0 bb cb e7 85 a8 0b fd 23 81 fe 93 66 50 6a 04 28 c2 af 4e cd 10 c7 81 5c 4c 96 dd 64 22 16 ea ce d0 99 6b 40 32 65 41 12 b8 a8 ca ee 79 80 db 48 3b c1 9b dc f4 08 0d 8f e8 f7 c4 20 ab 4b b3 f1 40 ad b0 Data Ascii: El'd+(u2gS=IEkz-n)q~[*ksdZ@v2z-#7CMiM-hKnh.f$1 "VK,pW~l_K{"lMgMwu26Y=5sIuYe}`m2#fPj(N\Ld"k@2eAyH; K@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49914	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:41 UTC	442	OUT	GET /5/4724866/?oo=1&aab=1 HTTP/1.1 Host: eephaush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156357
2024-04-26 18:32:41 UTC	1278	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:41 GMT Content-Type: application/json Content-Length: 2853 Connection: close X-Trace-Id: 3fba6500618e955e04f2f84e1b4697d9 Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:41 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156357; expires=Sat, 26 Apr 2025 18:32:41 GMT; path=/; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-04-26 18:32:41 UTC	2853	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 3f 72 62 3d 45 47 48 67 6a 78 2d 6f 42 70 49 6d 36 6b 41 75 35 39 59 4a 4d 75 36 34 4b 4e 64 61 59 58 62 64 6c 66 48 4e 48 6d 4a 42 47 4d 65 49 42 41 52 72 6d 6f 34 36 6b 44 4d 4e 37 59 47 78 51 69 45 53 53 39 4e 79 41 54 43 6a 4d 73 74 6a 54 7a 43 5f 2d 7a 52 76 67 75 2d 77 42 76 38 6c 6a 32 48 4b 69 5f 66 56 53 55 43 46 47 4e 65 51 48 58 4d 42 74 49 43 6f 71 30 38 4d 30 63 54 75 31 55 30 59 59 6c 58 49 5f 57 42 54 72 35 65 4c 72 38 30 47 61 4f 38 49 6f 4f 66 76 55 5a 5f 46 4b 7a 67 54 44 50 68 35 54 67 61 72 5a 69 49 68 58 59 54 76 68 6c 45 37 44 6f 65 34 75 54 45 30 32 7a 53 5f 47 6c 58 66 54 47 59 48 4f 57 5a 6e 71 66 33 44 78 30 66 71 38 43 65 73 39 69 4a 6c 71 46 66 44 6e 4b 6c 6d Data Ascii: {"url":"//eephaush.com/?rb=EGHgjx-oBpIm6kAu59YJMu64KNdaYXbdlfHNHmJBGMeIBARrmo46kDMN7YGxQiESS9NyATCjMstjTzC_-zRvgu-wBv8lj2HKi_fVSUCFGNeQHXMBtICoq08M0cTu1U0YYlXI_WBTr5eLr80GaO8IoOfvUZ_FKzgTDPh5TgarZiIhXYTvhlE7Doe4uTE02zS_GlXfTGYHOWZnqf3Dx0fq8Ces9iJlqFfDnKlm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49922	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:41 UTC	929	OUT	GET /xxrz/250x400/793/a3/6b/a36b0afe5302a53132f7f522d9a94553/a36b0afe5302a53132f7f522d9a94553.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:41 UTC	731	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:41 GMT Content-Type: image/jpeg Content-Length: 92501 Connection: close Last-Modified: Mon, 29 Jan 2024 02:32:11 GMT Vary: Accept-Encoding ETag: W/"65b70e2b-1effe" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6954 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D%2F%2FieDDH4m%2FrKaXxQ55g3YM9z%2B6mMOEF1eN0VQ8hVD75ltZkKjspIlsGW8EjaWudOD%2BMy1tQEJMRzgr0a0UkF1AWH1WF9c8IpGtrARmMB%2F%2FMduTEglVSEGkvMs2tHT%2BPClW1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a82a7d7b02e0-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:41 UTC	638	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 35 76 ef 9c 5d 19 e7 5d 7a 65 51 60 b9 c3 4f 29 81 82 9c 14 9a ef 93 59 8b a0 bd a4 da 07 b1 9c 6a 49 a4 1e c8 be 60 b9 41 20 b4 95 03 94 3d a5 bb 0c c9 56 83 79 5a e5 a5 df 4d 69 55 ac e6 60 3e 9a d3 7c d4 7e 93 37 f2 f1 5a c4 fd 4f 41 b8 38 cb 20 0c 36 56 ae f9 f2 bb a0 27 0e 8c 23 de ad 37 67 6b 94 0d fd a2 43 51 79 68 55 a9 57 85 aa 43 0f 93 03 95 8f 9c 75 8f fd 04 45 98 0b 0d b4 14 10 ce b3 08 5b e7 92 da 73 ce ab f5 2e 83 9e ba 37 e0 03 45 aa 94 fa 3f b0 9c a2 26 bc 47 83 97 61 a2 e9 7a 4c d7 f0 2f 9a b7 f2 4a 80 13 5b 0d 2e ca 5a b0 5f b5 1e 1a bb 07 4b 66 d9 b5 01 e1 68 4d fa 53 62 d6 12 4e ca 0b 1f 7c 00 4a 39 9a 8b 69 5e 1d 35 8b 27 13 92 ee 84 4f 7e 74 0b 19 be a4 56 2a d6 cd c0 9a d2 da 46 bc e1 5c c0 6e 7b 11 38 51 83 0b 8a b8 fa ca 9f c5 9e Data Ascii: 5v]]zeQ`O)YjI`A =VyZMiU`>\|~7ZOA8 6V'#7gkCQyhUWCuE[s.7E?&GazL/J[.Z_KfhMSbN\|J9i^5'O~tV*F\n{8Q
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 94 92 0c b1 ef 3c a5 bb 42 9f 69 ad 0b 70 0b 89 82 ab 03 68 d4 f9 aa 47 fa 3e 90 81 63 69 eb 66 43 de 85 60 4e 84 0b 48 9c ca 61 02 cf 0a 7f 1d a2 ef b0 44 1e cc 9c 11 28 cb f7 15 9b 15 12 de 05 04 21 a5 a5 bc 56 a9 8d 3e ae 41 82 ab 69 10 12 88 41 84 c9 b6 ba ae f0 d8 0f ed 68 87 57 46 14 9c 69 4f a4 ac 1d 5e 92 af 43 da 4d 98 b1 53 9c b2 23 62 42 6a 79 7b b9 52 97 92 10 5a 20 3d 33 c8 7d 33 21 72 d6 40 b4 24 b7 65 f4 ca 0e 68 5b 4a 98 30 dc 24 84 7a 64 31 24 3f 0e 01 b1 3b a3 1e eb fb 77 7f e9 62 b4 f5 4e fe c3 43 ad 02 df a4 82 fa 63 50 73 58 2e 24 58 10 d8 f5 dc c0 b4 ca 3d 0f ca d9 59 a8 14 f0 ff 00 c6 db fa e8 6b 42 af c4 ed 68 cb 6c 95 e5 63 3f 7b bb d1 22 00 d6 0c 9f b1 15 dd f9 c7 5b 03 72 81 78 be cf 7c 3a 6b 50 8c fe 62 60 38 ae 8c 4f 15 ac 35 Data Ascii: <BiphG>cifC`NHaD(!V>AiAhWFiO^CMS#bBjy{RZ =3}3!r@$eh[J0$zd1$?;wbNCcPsX.$X=YkBhlc?{"[rx\|:kPb`8O5
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 32 f5 4b 16 45 89 11 b1 2f dd 64 bc 2c 3f 7d 61 b5 b3 5b d6 ea 45 cb ce c8 ba 05 b5 c9 ef ac 6b f9 81 04 f2 a3 a6 fd 39 40 c2 13 31 5c 86 63 2f 8e 55 e3 39 88 c1 01 c5 24 a3 b4 50 d8 d5 02 a8 d9 2d 9d 97 3a fb 36 d4 f6 dd bc a7 f9 6b 18 cb 0b 4a 59 94 91 cc e5 17 a3 91 b7 32 4f 1c 96 73 9c fe 38 c2 53 b1 b4 f9 d3 e8 5b 3e 4d 69 ae 75 fd d9 41 b3 ef f5 c6 d7 b6 a5 f2 c5 6c b6 95 d4 0d bd 7f fe cc 4f 19 cf 94 a3 9a af 64 23 d7 18 cd 52 db 16 e3 8f c8 2d b1 05 88 eb 9a fe 2d dc ec 67 e1 56 ec 66 26 d8 b1 26 7c fe 85 57 35 d8 cd c8 cb 56 20 56 4e c8 1a d1 3b 0b 57 57 ec 11 cb 07 39 49 62 40 63 73 62 77 3a 51 31 29 cc 63 c4 b2 36 c0 a2 cf cb 38 2e 73 cd 5e a5 3b 2b 34 6b 69 ad fb 3b 69 44 3b 0d 55 3b ff 00 a6 9c d9 35 c3 d0 34 e6 e7 9d a6 9f 5a d9 7f 4c 1a c0 Data Ascii: 2KE/d,?}a[Ek9@1\c/U9$P-:6kJY2Os8S[>MiuAlOd#R--gVf&&\|W5V VN;WW9Ib@csbw:Q1)c68.s^;+4ki;iD;U;54ZL
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 95 1a 49 54 d7 ed ae 4e 38 db e3 3d b7 43 eb a5 ce bd d6 f5 51 1a 2d ae c6 31 1b 9a 4d 9e 63 2a bb 4f 28 c1 bc cb 36 35 84 24 84 ce c2 be 6b eb ac 9f 22 4b e1 30 36 6f 8e 6d 36 f0 4c 2c 39 2b 7b 8d 3d 7f 5b ea 0e 4d 1f 78 7f 1a 6e 83 a5 2f 89 5b d1 db c8 e8 ec 3b 40 eb af 24 6a ab 90 01 3a a6 36 1d d7 62 fc e3 0b 44 3a 25 39 2c 59 99 34 ad 97 1a fb 7b a6 ab 8a 2b 1e b9 b6 7b 10 57 1f a2 77 08 5d 6d 35 36 b5 57 fb 1b 62 dc 2d d3 54 3a 36 ee 14 36 f1 50 62 92 c3 b6 29 d1 71 1b d1 03 39 a8 26 44 61 5d cd 1b 0a 0b 50 b7 9a b4 51 7e 00 d5 ea fc 63 41 5e bc ad a6 b0 63 6d b1 ac 06 76 9d 88 f7 2d d2 81 71 c4 15 c9 57 e8 9a 7e bf 5f 0b bd ef 64 3e d3 b2 ea cf 84 05 ad d8 18 59 63 6f d6 d6 05 d5 9e 8c 6b b6 5d 85 4a e5 75 9a d5 64 3d 96 ed bd 92 cf 20 26 32 2e 69 Data Ascii: ITN8=CQ-1Mc*O(65$k"K06om6L,9+{=[Mxn/[;@$j:6bD:%9,Y4{+{Ww]m56Wb-T:66Pb)q9&Da]PQ~cA^cmv-qW~_d>Ycok]Jud= &2.i
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: ea 1e de 12 8b f6 a4 69 3b fa fb 6a c6 24 bd 63 b0 0b 2c e0 95 b6 57 a7 c5 8d 28 ea ac f2 6c e9 fb 32 f8 02 2f d6 62 14 1b 01 89 9d 53 6d 01 e0 7c 2b 55 0c 11 96 ed 4b 08 1e 8e 81 db 83 5c 95 39 d4 33 54 75 25 a4 f5 95 8d a8 ae b7 dd 9e df 3a ed fd f8 80 a6 c2 a4 6c ef 99 f6 5b 5b b9 92 4f 39 21 61 f8 c6 73 cb 7e af 5e d5 3b 5a 27 aa e4 29 cc 05 a9 cd 68 c9 b5 b5 14 eb ea 9f f7 ac de c0 64 4a e2 95 77 8a ec 55 c9 d7 4f 27 1e d3 55 78 97 d2 3b d8 8b b5 74 46 1b 48 cf b1 5f 93 2c 76 7d dc ac af f6 db 7d c6 2c 76 f6 ce c3 f9 dc ad 19 73 62 9a f0 3d 46 22 9a d5 c2 91 a5 ee 16 b5 58 94 d0 8a ba bd 3e 5f 1a bb 14 7d 77 b4 74 37 e5 d9 ea 29 e8 f4 f5 eb d8 54 19 91 49 2a dd 7d eb 6c d5 75 a2 74 89 cf 71 d1 3c f5 8d ee d6 81 9a 5d c3 4a ec 60 6e 3d 42 fd 64 07 86 Data Ascii: i;j$c,W(l2/bSm\|+UK\93Tu%:l[[O9!as~^;Z')hdJwUO'Ux;tFH_,v}},vsb=F"X>_}wt7)TI*}lutq<]J`n=Bd
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 5b 13 e7 1f 6c 9f 1f 92 66 3c fc 83 65 9d bd ad 86 18 85 83 dc 93 6d 13 23 60 bf 8c c5 cd a6 31 f5 ca c5 57 e2 ec a7 c8 6b b7 3f 34 f4 42 5d b6 69 b0 1e 0d 44 7e 43 0a fc cb 0a c3 1c 70 6a 40 79 db 2c 21 50 3b 8b 10 a3 d6 e8 26 d5 7f 61 d7 09 0b 9d 7b 54 a2 85 47 b1 a7 b6 ca 0d 6a 99 b7 ac f4 3d 74 f9 d6 34 7a 2c d8 d9 f5 7e a6 ab b6 ba 55 6e 5b 61 8b 5a 16 bf 2c 49 e1 58 25 30 e5 41 66 53 15 7c 72 54 d0 f9 52 8a 19 cd ed 04 1b bb 26 bb 73 8c 66 ae ca 1c 60 06 05 44 52 6a 51 25 ab b8 09 4a 63 c0 48 b3 e4 18 0c 26 04 81 30 fb a5 0c e6 0f c8 61 1c cd 9c e0 12 c1 3f a7 22 e4 b2 c7 5b 35 38 17 b3 16 f7 a4 aa d2 af 47 29 fa 37 dd 43 e7 39 dd ed 76 44 af 7a ce ee fa 5b cf 74 db d8 d5 4f 5a ba be b9 d7 f6 a6 e6 47 85 88 96 50 80 b2 12 0a 62 94 e2 f0 a3 ee cc f2 Data Ascii: [lf<em#`1Wk?4B]iD~Cpj@y,!P;&a{TGj=t4z,~Un[aZ,IX%0AfS\|rTR&sf`DRjQ%JcH&0a?"[58G)7C9vDz[tOZGPb
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 34 ea b1 b5 ff 00 0f 4c 78 97 30 8a 25 76 81 00 56 1b 2d c1 21 ba 6a 6b 74 d5 d2 d7 f5 c6 65 2d 45 44 fc 4d 65 79 ae 2d d8 82 37 b7 d3 1e 17 cc 46 67 95 d1 7d a1 12 4f 4b 2d 1c e8 b6 5b d4 c7 11 a9 84 fc 4d b8 86 a0 0b 5b 77 03 61 8a ca 41 0c b5 2a c2 d6 91 fa fa b1 23 ae f8 ab 6e 33 b0 5f 75 18 05 fa 75 38 8d 40 01 7e a7 e7 87 d2 36 ea 4f 6c 08 59 88 36 b0 bd bf 00 4f f0 c3 21 52 c0 fc 26 df 31 84 8f 9c 29 d8 8f a7 6c 38 2a ea dd ee 0d fd 46 28 04 73 c6 ae 2c 4f 71 de fd c5 b1 90 d3 1a 6c be b2 70 cd 17 b5 49 15 2a 05 db 57 1d 84 6f 7d 40 8b a4 3c 79 7b 1b 25 ef 61 8f 1a 66 12 66 59 ca ac 26 d1 53 a7 2d b9 0b 31 b6 fb 1e c0 00 08 3f 2c 64 f9 9c b0 22 ac a0 ec 2c 35 79 f6 37 ef f5 c5 2d 66 5c f0 a6 b6 d0 c1 46 ae 96 24 ee 4f 7f 9e 1e 17 9e 26 12 df 98 32 Data Ascii: 4Lx0%vV-!jkte-EDMey-7Fg}OK-[M[waA#n3_uu8@~6OlY6O!R&1)l8F(s,OqlpI*Wo}@<y{%affY&S-1?,d",5y7-f\F$O&2
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 40 26 32 9f 86 ff 00 5e 87 13 40 7d e4 f4 c4 d3 32 54 b4 13 2c 91 89 02 98 e5 02 e0 e9 ed 6d fd e1 d3 15 0b c4 45 46 04 6b 3e ef 56 03 6b 16 f2 27 cb b5 f0 94 de cd 4e e4 f5 60 aa 3f ce 55 7f 43 8f 11 4d a1 60 5d ce d6 1e 5b 0d ce 17 76 d4 de ee a1 ab ca d8 90 c7 50 b4 99 75 24 68 af 2c 8b ad d4 0b 90 c6 ca 19 ad 7d bd e3 bf 6c 53 f8 66 8e 56 d0 cd 2a b0 3a 49 d4 0e af 5b 5b 6f 41 88 32 89 61 af fe af 5b cd a2 a0 2c 6c bd 59 18 2b a8 f9 ae ab 1c 64 39 7d 2e 4f 4a 62 96 78 29 a4 24 2c d3 c9 4b 1d 59 79 d4 06 7a 64 49 19 74 8a 60 eb c5 90 5e f3 48 60 36 78 24 c4 6f 07 88 72 e9 a9 e6 b2 d4 98 92 39 b5 1f 79 a3 1a 29 aa c7 de 41 fd de 62 3d ea 76 89 d8 da 94 5e ae 2a ca 0c d9 60 85 6e d4 f0 14 52 ae 08 e5 91 8b 17 b8 fd ef 78 5a e2 c3 7e f8 aa 19 84 91 03 24 Data Ascii: @&2^@}2T,mEFk>Vk'N`?UCM`][vPu$h,}lSfV:I[[oA2a[,lY+d9}.OJbx)$,KYyzdIt`^H`6x$or9y)Ab=v^`nRxZ~$
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 55 b2 90 24 8c f6 2a 5a f6 ff 00 21 e5 3e 83 14 92 f0 98 39 03 99 01 e5 3b 92 2d b5 9b 6b df d7 14 4f c6 45 24 80 40 e6 e9 70 47 9d bc bb e2 aa b6 2a 44 6e 6b c8 e0 05 51 72 45 ec ba 88 5b 9e f7 02 d7 3d 3b e3 3a 98 35 26 ad 0d be c9 aa e0 8b 0b 7b a7 7e a4 9d ec 71 94 53 7b 3d 0a 5c 73 cd f6 af e7 cd 6d 20 fc 96 df 9e 38 42 e6 fd fa e3 30 90 d7 55 70 22 17 8e 1e 51 6e ef dd be a7 95 7d 01 3d f1 4f 3d 55 1c f1 54 53 34 d0 cf 04 97 52 b6 f7 81 b6 90 bf 10 36 b1 53 7d 5d 19 6c 71 35 6a 57 d6 51 45 35 38 a5 99 84 62 be 3a 54 b1 e2 ca 88 cf 12 20 be 9b 39 b1 b5 ca d8 85 17 c6 66 69 69 12 90 44 92 41 f6 66 2b 53 42 af ca 84 10 1b 50 3d 35 13 e6 4b 12 6f 86 8c d4 47 ae 9e dc 11 a4 b5 d9 14 ea dc 73 07 61 71 6e 97 5f a0 c5 38 cc a9 33 67 ac a5 28 2c 66 8c c4 49 Data Ascii: U$Z!>9;-kOE$@pGDnkQrE[=;:5&{~qS{=\sm 8B0Up"Qn}=O=UTS4R6S}]lq5jWQE58b:T 9fiiDAf+SBP=5KoGsaqn_83g(,fI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49923	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:41 UTC	930	OUT	GET /xxrz/1200x600/793/8b/69/8b69d6e6025464cd449ad0097791c41b/8b69d6e6025464cd449ad0097791c41b.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:41 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:41 GMT Content-Type: image/jpeg Content-Length: 503754 Connection: close Last-Modified: Sun, 04 Feb 2024 15:34:27 GMT Vary: Accept-Encoding ETag: W/"65bfae83-690f7" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6954 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CCms9mCynDOuH0rUgbP8B3%2BdH9BPmdbSDEcBjF4CEXf%2BgG3VM8ItZVtfxGP6B%2B%2BwlZhAy5ghjABLpGesDF76SKyKf6Uq2mK9zowX5ZKWJTXceVvEdQZd0EzQ1omXn4wbPAz%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a82a7c609ab7-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:41 UTC	643	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 16 96 9e 3e ca 91 ce 20 32 9e 45 99 ec 30 1a 91 0a 71 00 ea 30 6d 74 c6 d8 dd d4 39 df a4 d4 2d ec 78 d6 82 9a 95 34 e5 b4 c4 2b 02 09 b4 8b 2a e0 2b a2 8e af 0f ed e4 c7 8d 18 56 0e 04 aa 38 0e f9 da 23 98 b0 51 94 d9 70 6b 1b 6e 35 a8 77 0b 7c 47 30 4f b5 b2 30 92 63 e8 ec 4b 30 0b c8 42 67 79 51 cb 56 6b 4f 15 40 aa 1f c6 d9 a0 11 ab b5 ab 61 66 9b 78 64 6d 74 a6 34 77 b5 dc d1 cf 35 30 6c 39 21 f0 70 a3 b8 47 53 10 c4 d5 f4 62 3a 91 fd c4 54 1d 96 11 b2 a7 f1 8c ae 73 d3 13 fc 4d 75 71 f5 5e 43 dd 6b 38 45 e0 d0 65 61 78 41 0b 65 ca d2 75 b5 e3 88 d7 22 87 22 3d 6c 6a 58 9a ed 9a bd a6 77 c4 3a 94 6d 34 67 2a e8 2d 02 26 d8 b0 a1 d6 d2 5a c4 61 28 d8 17 59 41 83 76 ec d7 8b 24 0d 07 0e 4c 66 cd 67 b7 d5 f2 a0 eb 0f 02 e9 4b 7b 59 6a 30 b4 b6 34 19 db Data Ascii: > 2E0q0mt9-x4++V8#Qpkn5w\|G0O0cK0BgyQVkO@afxdmt4w50l9!pGSb:TsMuq^Ck8EeaxAeu""=ljXw:m4g-&Za(YAv$LfgK{Yj04
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 2e 8d f8 b0 d9 70 c7 be 48 91 07 04 7b ec d0 4e 07 20 c1 20 4d 84 d2 88 82 7d 24 47 23 26 69 90 e8 0f e8 e2 6f 65 af 4f c2 a1 38 af cc e4 5c 88 5a 0f 1d 3c 84 c3 bb ac 25 0f 22 3a aa 7b 99 07 9e c8 b8 de 50 7c c1 72 dd 75 ab af d9 f6 f5 17 27 77 ed 70 b2 5a 38 de 13 51 27 91 ab c9 b4 bb 1a fb 6b 39 f4 b0 ce f6 9a 81 e8 e2 10 f1 8c 4a 0d b2 32 dc 17 1a a8 d3 5c fb 2e 7d 5e d4 d4 09 d6 d6 dc 9b 9c fa f8 d7 86 d1 d8 2a f4 6b 6d a7 7c 33 89 b2 f1 1d c6 66 76 d6 50 7c fb 62 28 ec 45 11 1b 25 94 3d 99 96 1b 3d df 5b cc 14 33 aa b3 9c e3 dd f3 a5 b0 ef 67 c7 3b a3 bd a5 b1 2d 6f 87 63 4f bd 0b 75 f7 2c 49 b1 ad 51 b8 11 05 1c e8 24 5b 16 e1 ac 11 b2 bc a0 81 ad 43 33 b0 26 2c 40 ea ed 2c 42 34 a4 8d c5 d2 49 87 5b 41 d4 df 8b 78 be 33 e9 46 74 8e e4 6a b7 05 d6 Data Ascii: .pH{N M}$G#&ioeO8\Z<%":{P\|ru'wpZ8Q'k9J2\.}^*km\|3fvP\|b(E%==[3g;-ocOu,IQ$[C3&,@,B4I[Ax3Ftj
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 9a 6f e5 7d e2 78 97 22 6b 23 5f be 17 23 63 5a 6f 46 d6 08 ce 55 4c 12 43 96 93 ab 2e 33 fa 3b e4 eb 95 92 4a 5b 28 25 c7 d9 dd 56 9b 90 23 98 2e 3e f9 df 4c b1 ca 71 c3 62 3e 4a 49 86 1c 2e b3 e3 ea 66 8f c6 36 89 96 07 8d f5 24 3d 24 36 3b cc 02 92 1a 07 dc 95 cb 6d 99 ea 15 10 bb 79 d6 b3 3a c8 4c 09 15 e1 2a 37 0c 7e 94 f8 c3 23 13 58 63 77 82 16 9d 8d a6 6b b6 4e 1c 2c 6f 8f 77 d6 6d c6 b3 55 b7 cc c9 d4 cd eb 1d 33 63 60 fb 45 15 e8 35 d8 a7 43 01 ea 75 52 ba 8a 00 ea 65 c4 65 dc d9 2c 83 17 d9 c3 6d 85 8d fc 8e 97 db 5d d0 bd dd db b4 46 7b d2 24 78 34 d0 b6 80 64 c5 6d 38 3f 0f a3 a1 4b 33 6f e6 72 bf 36 6b b4 b1 06 61 6e e7 7a 1d 48 af 3d 53 ab da 46 55 53 7d b7 b4 1c cb ce b6 bc a7 15 22 32 ca 44 65 4d bf 2f b1 15 11 78 c5 b5 89 62 a7 8b 6f bf Data Ascii: o}x"k#_#cZoFULC.3;J[(%V#.>Lqb>JI.f6$=$6;my:L*7~#XcwkN,owmU3c`E5CuRee,m]F{$x4dm8?K3or6kanzH=SFUS}"2DeM/xbo
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 50 4c c6 bb 6e 0a 0e 06 f2 d1 3c ca 95 1e d6 53 35 86 ad e6 a7 76 3f 1a d5 64 2b 17 24 a8 3c 25 1b b3 14 17 a9 c8 90 ac 7c 15 ef b7 13 74 9c 68 26 0c 91 1c 5c e8 20 e7 6f 18 d3 de 67 a1 4f 9c cb 53 e8 15 e3 e3 77 40 6a d7 eb 16 ee 62 b9 bb 2a 73 81 1d 52 e5 75 f7 21 0c 21 f1 70 cf 81 90 98 0f b0 0a 8f ae 95 64 72 43 d8 e6 0e 98 73 06 c0 e6 5b 75 f2 87 64 1a 58 82 ae 9c 78 f3 ac 8f 46 56 18 e9 db 5e 7e ab f9 b1 b9 9c e3 3e 7f 5f 6d 84 2f 57 4b 60 36 1c 38 9a ff 00 6d b0 ec 85 11 3f d8 42 bd 9c 7b 69 50 b6 f6 a2 77 de df 57 22 1d 9d 4a f9 6f 11 fa 12 38 ee 47 cf 37 67 5c 68 d5 d1 e7 ad 88 62 76 c3 72 37 a8 5c 73 1c 66 44 6c f4 6c db 69 31 4e 7d 9d 6b 15 b1 7d 3b e3 2f 56 32 9d cc 29 fa ab 4a f5 3b d4 9a e0 65 33 5b 5c 09 5a 9c 55 06 fb 98 06 a6 9e 9f 67 a1 Data Ascii: PLn<S5v?d+$<%\|th&\ ogOSw@jb*sRu!!pdrCs[udXxFV^~>_m/WK`68m?B{iPwW"Jo8G7g\hbvr7\sfDlli1N}k};/V2)J;e3[\ZUg
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 02 40 ad ad 65 55 b0 6d e4 a9 13 14 2f 7b da 19 33 d4 27 5a 1a f6 e0 97 0c 96 1e ec 19 88 49 58 94 69 a8 d6 07 18 44 82 e7 5c 38 2d e5 f3 b9 36 db 8e fd c7 ab 15 f3 0d d0 da 23 db 79 26 f8 f3 4f 2d bd 3b 25 0e f7 c4 31 20 49 37 3b 1c 8f d7 a6 9a 87 e3 a9 4e 2d 84 89 54 3a bb 1e c4 3b ae fa ec 63 00 ed 9d 92 a5 45 36 bc 80 2b ac 0e cd f3 53 a8 71 f3 d6 7e 1b 4d 93 ea 97 ce 30 ca 36 62 3e 89 95 95 09 29 c2 a3 d8 fb 03 11 55 e5 28 f9 3c 57 04 9a e9 bf 7c f9 37 a5 45 0e 0d 57 22 d2 38 91 9b 68 2d a7 31 45 90 8e 6d 78 ed 24 f7 1b ad fc d5 f4 ab c1 b4 55 9c db 91 85 5f b7 68 d6 ec e3 97 ae 57 43 3f 7a c8 67 68 ad d3 10 61 bb 2b fa c6 d4 9e 81 56 6c 75 d8 b3 ed bc e3 6f 5c 11 57 9f cf 08 bc 1b f6 f1 28 82 d2 3b 0b 19 67 b7 4a 27 64 26 a6 55 e9 be 7a dc 48 bd fb Data Ascii: @eUm/{3'ZIXiD\8-6#y&O-;%1 I7;N-T:;cE6+Sq~M06b>)U(<W\|7EW"8h-1Emx$U_hWC?zgha+Vluo\W(;gJ'd&UzH
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 49 70 dc 85 5d 9a 3a 24 90 e7 2a a1 3f 5d ec 3c f5 cf 8b 21 5b b2 ce 2f 78 15 d5 1e 77 23 a0 81 3d b9 e3 a9 2d 97 44 3f 09 25 61 e7 ea 4e f5 6f 93 01 26 e2 a4 d0 09 c0 2a 39 52 fc ff 00 77 e9 7d d2 c2 35 ba d4 f2 6f a6 55 ec 0e 9a bb 33 d6 1b c5 61 2e 00 70 44 7a 8d 0d cb 7f 39 d3 d3 2a 1c 99 46 66 8d b8 22 11 4f 16 4a 79 12 cb 8d a0 ae c2 e4 be b4 57 3b 91 49 d2 36 6c 9f 8b 07 9f 6d 2d 23 c3 f1 1c 9e b6 61 bc e0 5b 57 8f 24 98 71 5d 11 c7 0f a4 c8 97 2c 37 db 10 1d ca bf 7e a9 c3 b1 d1 39 4b 86 5d 4e 86 89 5e 7e d8 e6 54 18 c2 88 f5 1b 8e 37 c4 86 ec 57 ce a7 d1 4c 52 64 67 cc 15 87 30 bd 7a c4 a1 e6 9a e3 65 f1 d0 11 ec b5 dc 86 bc 71 b1 cf d7 ee 6d b6 74 38 30 2a 6f 04 93 b8 e7 12 a4 24 c7 4a 32 49 d0 75 12 1d 40 8b cd c3 ce 87 d0 6e ef 70 57 bf 70 a6 Data Ascii: Ip]:$?]<![/xw#=-D?%aNo&9Rw}5oU3a.pDz9Ff"OJyW;I6lm-#a[W$q],7~9K]N^~T7WLRdg0zeqmt80o$J2Iu@npWp
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 46 9b 9e ad 37 1d e8 12 ae db 32 16 4a b9 53 ee 13 22 0a e9 76 01 a8 64 37 40 76 b5 6d df ac a7 b0 ae b8 4d 68 93 49 d1 dd ef b3 53 65 0e d8 c8 b2 31 0d a7 2e 1e 1c 15 c4 9a d9 21 ca 2c a9 44 81 18 1c a4 bc 9c 88 d2 32 78 5d 24 74 5d 12 9d 72 27 25 3b df 11 75 e4 75 8b ac af 78 0b ff 00 4e 97 29 1d c4 8c 93 19 c3 5b 24 a0 ce 91 4b b0 3a 5e fc 5f 1b a6 4e b5 d2 3b 76 71 cb 4a 35 18 1e b1 52 4b 18 d5 7c e8 32 ad 29 bd f6 ec 4d 70 98 1e 48 8f c4 20 11 2a b8 87 98 f1 d3 90 70 ed 0c b4 83 bb 09 38 59 d4 de 91 16 37 d2 05 8a 53 44 a4 e8 19 d7 72 23 1a 5d 15 5d 10 52 2a dd 09 e8 4f 37 a2 ac 8b a8 d2 76 cd 1b cf f2 0e a8 83 52 cb 5b 36 32 00 96 c8 66 56 77 b5 55 c9 5b f7 a4 fc c7 e8 30 c8 b2 c8 aa ad 5f 77 e6 82 47 65 2d 80 e4 3e 45 71 1b ac 99 d8 1d d6 8d 84 0f Data Ascii: F72JS"vd7@vmMhISe1.!,D2x]$t]r'%;uuxN)[$K:^_N;vqJ5RK\|2)MpH p8Y7SDr#]]RO7vR[62fVwU[0_wGe->Eq
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 75 1c d0 ae 0b 56 7a d9 dd da 40 d8 ad 19 cf 62 7d 19 9c 65 7d b2 d9 cb b8 2c 1f 12 da 2c b4 59 a3 86 74 10 b5 6e 45 76 42 dc 91 39 47 d3 35 20 31 06 08 c6 a6 4a 21 e4 96 a1 e2 f1 f2 10 e7 2a fa 8d cb c4 98 cc 91 99 42 03 65 64 d4 2e 87 73 c6 d3 46 09 da d6 75 d9 2b 52 23 a6 3e 30 72 26 69 7e 30 7a b6 ae b5 2c c5 d2 2f 7b f3 7a 04 ab 14 87 d5 28 c6 66 83 d8 e9 fc 69 e2 07 c8 62 6b ef 07 9c eb ce 8e 21 73 3d e0 07 d2 56 17 e3 59 c0 92 6d a8 a9 11 51 93 64 82 12 c2 60 4e b6 10 1e ad b8 72 5c 2f 78 de 41 93 60 b6 da 8c b5 6d 39 c1 ce b7 db b7 b1 b4 ef 49 35 7a 73 2f 1b e2 80 b0 70 2e 89 f2 c8 9e d8 f0 f3 be af 84 fa ca 35 60 fb 3f 07 6e 70 4f 55 ea 64 a7 dd 0c c7 32 4c 49 ce b8 a4 58 2a 3d 12 5e d4 a5 73 ed a2 a9 6e 8b c7 2a a8 54 f0 2b 6b 06 58 8a a4 81 9f Data Ascii: uVz@b}e},,YtnEvB9G5 1J!Bed.sFu+R#>0r&i~0z,/{z(fibk!s=VYmQd`Nr\/xA`m9I5zs/p.5`?npOUd2LIX=^sn*T+kX
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 68 97 63 4e 91 7a 73 45 e6 bc c7 58 82 a8 fd e5 a1 fa 56 6e ae 65 3c 79 78 76 a3 b1 b4 8e 2f 64 c6 ea 72 6f 7c fa ec 6f 12 ee 0c 5d 87 b0 3f 3b bd f8 e5 fc 05 93 9c 67 17 8b dd 33 b4 45 50 1e 85 47 47 ce 76 ea c0 92 27 c6 5d 7c cb 32 d0 d5 c3 a3 e8 b4 54 fe 54 8b 2e 74 a0 b5 14 38 17 24 08 dc db da 28 b8 eb 1b e4 f6 56 a4 96 ef 94 c2 06 71 e9 31 76 db db b8 9d 62 49 76 2e 6a 5c a6 aa e5 95 2a b4 4c cb 98 81 27 b9 0d ee de f9 c7 5b 85 2e 7d 1c ba f1 b2 2e 18 d9 a2 58 62 e5 d1 db 65 9b 70 1a e5 37 c0 12 20 af 2f 47 2e 12 c5 75 34 0e 83 c5 4b cd fe 96 22 39 31 c5 56 25 e9 a6 fa 0e 6a 8e ec 63 85 2c bb 7c f7 69 2f 87 f7 d8 e3 6e 9f 55 f9 12 9d 2b bc 65 fb 36 41 7e d2 9e b1 56 3f f4 15 40 5f 69 38 ec f4 59 ac 92 50 d8 96 c8 3b 8e 36 7e ba 03 7e 72 ad b6 05 e8 Data Ascii: hcNzsEXVne<yxv/dro\|o]?;g3EPGGv']\|2TT.t8$(Vq1vbIv.j\*L'[.}.Xbep7 /G.u4K"91V%jc,\|i/nU+e6A~V?@_i8YP;6~~r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49924	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:41 UTC	929	OUT	GET /xxrz/250x400/793/c3/69/c3697f53f903ddeb948f34cd439edbc9/c3697f53f903ddeb948f34cd439edbc9.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:41 UTC	729	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:41 GMT Content-Type: image/jpeg Content-Length: 95345 Connection: close Last-Modified: Sun, 04 Feb 2024 15:33:44 GMT Vary: Accept-Encoding ETag: W/"65bfae58-15492" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6954 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1D5kLjBypFWMEm%2FJN7yuqLq6MLKqhlTKSXk64A1%2BsDH3J%2Foiy%2FrFoKOnLwGS7VFw9aFXhE5rLcjJZ8I16qazV5Nld9A7muXzq%2BUFdAvUMpS7HYT5P%2F%2F1cc1SuyTVaJuT3ALj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a82a780d4c15-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:41 UTC	640	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 38 2e 7b e9 d3 da 9a c3 c8 4b ce af f7 f5 8a 3b 76 87 eb e3 e9 e4 29 01 fd a0 5f f8 8a d7 3b c0 95 c1 14 d9 8a 9f d2 2e 44 39 47 45 b0 6c 62 de 73 1b 8c 69 55 26 6a 83 0a 37 ca e5 a7 a2 3c f3 ec fa c7 60 7d 7b 03 dc 41 e6 49 c1 89 21 d7 b4 29 52 02 66 38 63 b5 ff 00 7e 65 fd 40 be 2b ac bc 36 54 62 35 0f 56 b8 76 e1 2c 57 a1 21 32 3b ed 52 90 6e 43 7d 70 91 a4 68 2f 24 f6 fe 6d f4 2a 9b bb 92 17 f9 01 6d a8 a9 e7 00 3b 76 85 05 47 9d ac 32 1a cf 5d 32 ed a4 fa f0 74 af d3 34 c0 c5 d7 c6 a1 d6 60 bf 4d 96 cb 8e 21 3f e6 c7 f4 71 58 be ab 8f e7 dd 98 52 8a 37 08 3d 7e 89 f1 9c 5d 66 92 a5 45 a6 98 b7 85 9e c1 0c 0e ea 4f 53 ec 80 e7 49 21 73 7c af 92 25 0c 4a 1f 34 c8 ed 5b 5f 58 b5 92 ba 23 ea 83 d2 8c f4 aa 81 e9 05 26 ec 54 44 e2 43 fa 56 a3 21 34 3b 0f Data Ascii: 8.{K;v)_;.D9GElbsiU&j7<`}{AI!)Rf8c~e@+6Tb5Vv,W!2;RnC}ph/$m*m;vG2]2t4`M!?qXR7=~]fEOSI!s\|%J4[_X#&TDCV!4;
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 3b 09 65 e1 47 aa 9b b6 2a a5 c5 57 db aa ec a5 30 a9 b8 9a 23 24 98 5b a9 c3 36 3b b5 a4 cb 30 80 cd 04 ff 00 c1 b3 d5 4a ec 96 20 9e 34 90 bb cf f6 21 5a d6 92 9a 6b 6b 4c c3 58 5e 4e d0 7b 75 94 cc a2 d8 9f 87 21 6a 5b e8 ac 4d 33 73 1e a4 ad 8c 80 93 bd a2 0e 92 7c a6 47 4a 21 2d 25 b0 a3 5e b1 5c 39 b4 10 d4 0d 17 59 b8 f5 df 3e 0d 85 0c 7d 2d e4 7d f3 52 43 56 67 ca 53 1f 1b 76 85 d9 68 34 2d 97 51 55 59 41 09 45 5b 25 4e f0 79 50 5a 44 73 8d 72 b8 8a 85 9d 3d 40 a6 01 35 a1 ed 67 2e 7b 9f fd 0b 62 b1 c3 e3 9e 06 d8 dd c0 15 ee ae 11 5a 35 e2 e7 4e fe ab 52 cd 5d 90 4a 42 6d 65 3c b7 53 77 05 9d 37 5a 9a 2b ec 5f 38 aa 39 33 d1 5d 52 68 ba 2c 0a 98 27 c7 51 18 51 c6 d7 ae 53 8d 13 11 b2 6a c4 80 1a df 9a 3b 58 e0 d5 bf 50 0d c1 39 d4 72 5d e8 86 1d Data Ascii: ;eG*W0#$[6;0J 4!ZkkLX^N{u!j[M3s\|GJ!-%^\9Y>}-}RCVgSvh4-QUYAE[%NyPZDsr=@5g.{bZ5NR]JBme<Sw7Z+_893]Rh,'QQSj;XP9r]
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 17 d6 87 bf a0 80 03 98 ff 00 17 e6 ab 96 06 e9 6b dc 4c 12 2b 5c ee 22 c5 ae df 69 a2 73 75 1a 31 c2 f5 b4 fb ca 5a a6 41 c8 d9 01 87 ac b9 a3 b8 52 40 47 37 e0 cb 46 4f 3f e3 a3 16 e1 64 72 cb 9f af 49 8d b8 07 e7 83 2f e8 82 8c fb 07 47 04 71 c2 78 4e ad 22 1e ca b4 00 28 41 69 2b ff 00 ea 3d 8e f6 7c 71 9d d5 a8 5f 4f 37 30 17 c6 11 ad ee fd 60 7d e4 c5 27 63 1e be d8 f7 81 2b b3 e2 0e f3 09 8e 36 46 3a b5 ae 88 f1 1c 09 58 0a 45 e3 5e 2c cd d5 a4 03 ea a0 fa 75 55 76 6b 59 af 22 1c ae f5 96 12 50 6a b0 69 9c 8b eb 95 f7 95 08 f8 9d 41 06 c7 26 50 65 04 65 50 68 18 0c eb 42 17 c5 3b 28 1f ad 15 8e f3 d4 86 84 0d 4e 0f cf 39 ff 00 94 34 56 14 12 c3 2a 4d 1e 66 b5 23 ba 0c 62 ba 44 44 47 7f 88 b8 22 24 6a 51 e2 1e ba 95 ee 61 37 6a ef 48 20 8b 0d a4 7f Data Ascii: kL+\"isu1ZAR@G7FO?drI/GqxN"(Ai+=\|q_O70`}'c+6F:XE^,uUvkY"PjiA&PeePhB;(N94V*Mf#bDDG"$jQa7jH
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 42 d7 e8 0d 9f 4b c3 39 b1 43 c8 f3 2d f2 ba 94 33 6c 29 ec 1e 44 d6 05 f1 73 ea 7e 39 5a 9b 62 22 1a cc 7a c9 ea 6d 4c 4e 8c e5 fd 59 70 8b 78 20 b0 97 4c fb 12 f0 54 83 d6 f2 4f cd f5 c7 6c 32 5b 97 4e 15 97 af e3 fa 65 b6 a7 9a f3 3e 21 09 34 16 46 ad 91 11 a2 77 a2 3d 4f 0b 49 62 9e df 07 fb 3d c1 b7 a1 da d9 11 55 5e a5 d9 cf 35 3c 6e ec f9 db eb 93 33 76 76 7d c3 68 98 64 90 30 8b cb aa 80 a1 a6 a4 e6 82 bd 12 35 9e 6f a7 8f e5 5b 55 5c 17 49 24 16 d0 9c c7 c8 e8 1b 5e 53 9e 23 64 f2 6d 15 59 a7 f5 92 06 1a 38 72 c2 ab 6f 6d 4b 6c 23 53 db 3e 62 29 93 b2 e9 6b c7 1e 6a b8 1a 5b f9 76 a8 9c cd ab 5c ac 71 0d 48 ba a4 36 40 8c 96 67 91 2f ff 00 9f ae eb 0b 52 05 96 73 ea 18 fa 98 d7 c5 ae fd e1 86 27 43 d5 81 cc 0a bf 85 ab 21 3f 65 34 88 d8 b9 ce 7f Data Ascii: BK9C-3l)Ds~9Zb"zmLNYpx LTOl2[Ne>!4Fw=OIb=U^5<n3vv}hd05o[U\I$^S#dmY8romKl#S>b)kj[v\qH6@g/Rs'C!?e4
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: ae c1 be 3d d5 22 ea bb 45 73 50 39 a5 92 71 5e 0d 54 ac d5 e8 29 07 fe 23 ed 91 5d c8 db 55 5a cd 0d bd 2b 3f 88 9b 36 75 fc 4c dd 22 89 aa d1 54 9a ee 4c dd a3 9d c9 9b 9e 9d c9 7b 9e a6 91 f2 c8 bf e8 de 9b d2 37 f0 8b d3 53 bf 5f 8e 9a ff 00 24 45 eb cf f0 c7 35 15 25 6f 6f 35 45 6b 91 11 ce ea 9e ac fb c3 73 5c 37 55 70 2e 9f 8a 1d 54 8a e4 45 47 be 34 57 fe 1a ab df cb c9 7c bb 2c b2 f9 2b 9d e3 d7 b3 bf 4f 5e dd 2c 89 d9 ee ee 8f 5f d9 cb fe 8e 16 48 df 5a 02 15 37 db 0e ec 44 6b 1b d8 e9 db d0 5c 6a 1d 85 71 7c 48 38 dd 7f 0b ba 07 85 87 32 22 38 58 71 a1 fe 12 79 a8 3c 27 09 2f 6f 02 41 e2 bc 28 cf 2d 2d 24 78 a8 38 d7 f9 95 5c 90 17 a1 6b 38 f2 1d a8 50 f0 24 13 c6 6f 04 8e 34 6b c3 8d 67 41 f0 c4 04 2c bc 1d 04 4c 93 8a d3 bc 3c 4f 0c d3 2f 0b Data Ascii: ="EsP9q^T)#]UZ+?6uL"TL{7S_$E5%oo5Eks\7Up.TEG4W\|,+O^,_HZ7Dk\jq\|H82"8Xqy<'/oA(--$x8\k8P$o4kgA,L<O/
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 76 55 1a 91 16 95 8c fd d5 cb 34 79 80 7d 8f b4 09 41 3b c9 be 4a be 2b 2f 9f b7 30 17 c9 93 ab d0 be 9e 6d 60 ea 59 8d 8d 21 4d 38 5d a1 ee a8 b5 40 a0 21 c4 54 f5 36 1c 8b 45 13 ad 78 fa 66 c1 d4 17 61 64 44 bf d9 fd 55 f1 ef b4 3b 2b ab 5e 32 e6 fa 20 5f ab 0b 41 2e 33 7b 77 5d 3d 31 ca 13 b9 2a 66 85 a0 c5 7c b8 74 db ab 87 68 f5 2e 81 93 b0 f8 54 62 f3 c1 7c f3 3a d3 05 f1 67 1d 1e e9 c6 0d 80 c1 7e 17 b4 2e a3 8a c5 ec d2 57 ab 0b ac 15 2b 85 ed e0 ed 08 1f 2c 1c b8 3e b8 3b 7b 3a 2a 28 ca 8e a6 a9 ee b6 6f e5 b2 b7 bc 58 e7 43 7d 47 c7 b4 32 0d 90 e4 7b 3f a8 90 1d 64 1b 3b 42 f1 4b 19 1c 7f 1e a6 ad dc b8 04 06 28 b6 e5 4e 20 e6 49 ac 03 95 02 78 82 a1 9f 66 e1 2a 87 68 b0 f6 58 d3 52 0f 94 74 20 fc 10 bc 5a ae b5 13 ea 22 66 01 57 4d fd d1 c8 89 Data Ascii: vU4y}A;J+/0m`Y!M8]@!T6ExfadDU;+^2 _A.3{w]=1f\|th.Tb\|:g~.W+,>;{:(oXC}G2{?d;BK(N Ixf*hXRt Z"fWM
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 00 ed b8 f7 e5 8b 12 44 63 cf fd 56 df f8 60 c4 5a da 7a 62 4b e8 0d d5 bf c4 f6 e5 ec dc fd b1 4e bd f5 55 04 97 7d 1a 40 b9 3a 8a 8d 80 e6 71 d8 6c 87 2a cf 20 af a7 cf a8 f3 ac ca ae 8a a6 8e 93 2d a5 8a a5 e9 a9 a9 a2 ad 12 89 a7 6d 54 f5 0c 24 69 a3 a7 45 4d 29 16 a7 40 4d ca 63 b4 b9 94 d9 b6 7b 9a d6 4f 04 54 d2 24 fc 18 a9 e2 37 48 52 8d 12 8e 28 44 84 29 94 ac 50 21 79 4a a9 95 c3 48 cb 77 c7 d7 7e bf fa 62 4f 95 4f f9 82 ed ea 3f ab e3 b2 d9 47 c1 65 f0 ea 5b 4f 53 a6 aa 7f 10 a4 03 04 67 d1 3b e7 cd b1 2d 2a 34 31 b5 c2 9d 6a 09 3b 6c c4 0c 54 d3 00 aa 14 5b 4d bc f7 16 fd 71 da fc ab e0 73 15 ad 8d 34 c3 5e 0c 82 dc 92 a1 6c 26 4f 73 df 1e b8 97 e5 1f be 03 37 ae dd df 6f e3 88 06 e1 7e 96 d9 bf 9f a8 38 94 5d bd 08 03 c8 0b 0b 61 7f c3 2d d5 Data Ascii: DcV`ZzbKNU}@:ql* -mT$iEM)@Mc{OT$7HR(D)P!yJHw~bOO?Ge[OSg;-*41j;lT[Mqs4^l&Os7o~8]a-
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 13 f2 fb 8e 78 5d e5 d2 7f 1c 77 64 e6 c1 74 ec b7 fb 9b 69 1e db e1 98 d9 7f af 0c 7c a5 40 f5 fc 6d fa 63 29 ca ea b3 8a f8 e8 e9 62 32 bb b0 2d d1 52 35 65 d6 cc c7 65 16 bf be 24 ec e5 44 99 f5 05 2d 44 0f 04 31 c6 64 9b 56 f6 a7 a7 7d bb eb b1 0f 60 a9 6f ab 14 93 19 a2 8e c8 bd c6 55 07 55 c8 0b c8 74 b1 02 d8 fe d1 f2 fa 2c f2 68 16 3b 49 5f 41 4d a4 48 18 14 ef 90 ed 07 51 7e 5b 9e 4d 61 b6 26 ec 74 d9 96 69 4b 46 8a 61 a8 92 ad 21 3a 85 8a eb 70 35 1f dd 55 bb 1f 4c 76 73 b0 f9 1e 53 96 41 4d 4b 4c a9 c0 8d 01 96 ca c6 49 00 17 92 5d fb ce cd de de fe 02 c0 63 fb 55 ec 1e 5d 98 e5 15 79 b6 5f 14 71 e6 b9 5c 42 a2 56 8d 56 2f 8a 89 08 e3 2b c6 39 9e 1d d9 5b 99 29 e6 6d d9 2a a6 c8 73 44 cc e3 81 64 7e 19 42 8d 61 dd 62 a1 f7 1b f4 1c b1 90 54 ad Data Ascii: x]wdti\|@mc)b2-R5ee$D-D1dV}`oUUt,h;I_AMHQ~[Ma&tiKFa!:p5ULvsSAMKLI]cU]y_q\BVV/+9[)m*sDd~BabT
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 76 81 78 d2 09 24 2d 08 62 58 22 a0 eb b7 75 40 c7 fd f3 cf 58 10 64 a7 b7 95 38 fe 78 5e d7 67 17 be b8 3f fb 23 f9 9f 0c 66 59 dd 76 71 4f 1d 35 6f 05 e3 49 0c 88 56 2d 2e 84 ec 42 b5 f9 1f 0c 7c 14 24 05 b1 d8 df f1 b6 3f 67 d3 f8 37 e3 8f 6c 41 4b 2d 6d 4c 54 b0 8b c9 3b aa 2f 80 b9 e6 7c 94 6e 7c b1 da 0c 86 8a 2c ae 93 31 ca 5b 8d 05 35 e8 ab 5c 03 76 96 37 28 67 23 98 1c 5d 48 7a 69 31 9f 2c 76 37 2e 86 a3 30 a8 4a fa 34 95 3f 67 35 44 49 53 15 d4 de 48 f4 48 a1 86 e0 f8 8d 8e e3 19 3d 74 59 a6 63 16 5f 53 90 e5 b3 41 51 27 0e 46 a5 a4 e0 4d 02 ef f6 c2 44 6e ee 8b 5c ea db a6 29 bb 3b 96 65 f2 76 83 35 aa fe fb 97 64 d2 b4 54 90 6a ee d4 4e 42 95 8e 66 1f 32 a3 ca 91 30 07 73 7f 0c 0c f2 bc 4d 13 cf 45 4b 25 25 41 0d 1d 07 c0 40 94 f3 42 5b 46 88 Data Ascii: vx$-bX"u@Xd8x^g?#fYvqO5oIV-.B\|$?g7lAK-mLT;/\|n\|,1[5\v7(g#]Hzi1,v7.0J4?g5DISHH=tYc_SAQ'FMDn\);ev5dTjNBf20sMEK%%A@B[F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49921	34.95.127.121	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:41 UTC	793	OUT	GET /p/?return=https%3A%2F%2Fbitpanda.pxf.io%2Fc%2F4484296%2F1834392%2F15871%3Flevel%3D1&cid=15871&tpsync=yes&auth=572fbe6261419ff5 HTTP/1.1 Host: www.ojrq.net Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:41 UTC	741	IN	HTTP/1.1 302 Found Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Fri, 26 Apr 2024 18:32:41 GMT P3P: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT" Timing-Allow-Origin: * Set-Cookie: brwsr=5da1bd65-03fb-11ef-b9be-d714cca5c7b2; Domain=.ojrq.net; Path=/; Secure; Max-Age=62208000; Expires=Thu, 16 Apr 2026 18:32:41 GMT; HttpOnly; SameSite=None Location: https://bitpanda.pxf.io/c/4484296/1834392/15871?level=1&brwsr=5da1bd65-03fb-11ef-b9be-d714cca5c7b2&brwsrsig=Tq8VRj1EoTh%3AWggV4L00Kw8oxhzW5K Content-Length: 0 Date: Fri, 26 Apr 2024 18:32:41 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49925	104.17.25.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:41 UTC	558	OUT	GET /ajax/libs/lazysizes/5.1.1/lazysizes.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:41 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:41 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ed0-1b91" Last-Modified: Mon, 04 May 2020 16:12:00 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 16 Apr 2025 18:32:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wSuluusZKw6omy%2Fm1hizqxpXcsbtUn91WJWXC0SkgjvA%2BZuYZgmnbgtuWBwdFPxkfFNQ%2BliNTNt99Yc%2FrMemA73L0YxK1oDWWurhpETIHddiYaVyE99ISC1IyNbGEUjbj%2FF%2BT5mQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a8a82b3f43dad5-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:41 UTC	417	IN	Data Raw: 31 62 39 31 0d 0a 2f 2a 21 20 6c 61 7a 79 73 69 7a 65 73 20 2d 20 76 35 2e 31 2e 31 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 28 61 2c 61 2e 64 6f 63 75 6d 65 6e 74 29 3b 61 2e 6c 61 7a 79 53 69 7a 65 73 3d 63 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 26 26 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 63 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 2c 64 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 2c 63 3d 7b 6c 61 7a 79 43 6c 61 73 73 3a 22 6c 61 7a 79 6c Data Ascii: 1b91/! lazysizes - v5.1.1 /!function(a,b){var c=b(a,a.document);a.lazySizes=c,"object"==typeof module&&module.exports&&(module.exports=c)}("undefined"!=typeof window?window:{},function(a,b){"use strict";var c,d;if(function(){var b,c={lazyClass:"lazyl
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 74 41 74 74 72 3a 22 64 61 74 61 2d 73 72 63 73 65 74 22 2c 73 69 7a 65 73 41 74 74 72 3a 22 64 61 74 61 2d 73 69 7a 65 73 22 2c 6d 69 6e 53 69 7a 65 3a 34 30 2c 63 75 73 74 6f 6d 4d 65 64 69 61 3a 7b 7d 2c 69 6e 69 74 3a 21 30 2c 65 78 70 46 61 63 74 6f 72 3a 31 2e 35 2c 68 46 61 63 3a 2e 38 2c 6c 6f 61 64 4d 6f 64 65 3a 32 2c 6c 6f 61 64 48 69 64 64 65 6e 3a 21 30 2c 72 69 63 54 69 6d 65 6f 75 74 3a 30 2c 74 68 72 6f 74 74 6c 65 44 65 6c 61 79 3a 31 32 35 7d 3b 64 3d 61 2e 6c 61 7a 79 53 69 7a 65 73 43 6f 6e 66 69 67 7c 7c 61 2e 6c 61 7a 79 73 69 7a 65 73 43 6f 6e 66 69 67 7c 7c 7b 7d 3b 66 6f 72 28 62 20 69 6e 20 63 29 62 20 69 6e 20 64 7c 7c 28 64 5b 62 5d 3d 63 5b 62 5d 29 7d 28 29 2c 21 62 7c 7c 21 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c Data Ascii: tAttr:"data-srcset",sizesAttr:"data-sizes",minSize:40,customMedia:{},init:!0,expFactor:1.5,hFac:.8,loadMode:2,loadHidden:!0,ricTimeout:0,throttleDelay:125};d=a.lazySizesConfig\|\|a.lazysizesConfig\|\|{};for(b in c)b in d\|\|(d[b]=c[b])}(),!b\|\|!b.getElementsByCl
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 61 7a 79 73 69 7a 65 73 57 69 64 74 68 3b 29 63 3d 62 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 63 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 63 2c 64 3d 5b 5d 2c 65 3d 5b 5d 2c 66 3d 64 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 66 3b 66 6f 72 28 66 3d 64 2e 6c 65 6e 67 74 68 3f 65 3a 64 2c 61 3d 21 30 2c 63 3d 21 31 3b 62 2e 6c 65 6e 67 74 68 3b 29 62 2e 73 68 69 66 74 28 29 28 29 3b 61 3d 21 31 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 61 26 26 21 65 3f 64 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 66 2e 70 75 73 68 28 64 29 2c 63 7c 7c 28 63 3d 21 30 2c 28 62 2e 68 69 64 64 65 6e 3f 6b 3a 6c 29 28 67 29 29 29 7d Data Ascii: azysizesWidth;)c=b.offsetWidth,b=b.parentNode;return c},z=function(){var a,c,d=[],e=[],f=d,g=function(){var b=f;for(f=d.length?e:d,a=!0,c=!1;b.length;)b.shift()();a=!1},h=function(d,e){a&&!e?d.apply(this,arguments):(f.push(d),c\|\|(c=!0,(b.hidden?k:l)(g)))}
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 3c 64 2e 62 6f 74 74 6f 6d 2b 31 29 3b 72 65 74 75 72 6e 20 67 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 66 2c 68 2c 6a 2c 6b 2c 6d 2c 6e 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 63 2e 65 6c 65 6d 65 6e 74 73 3b 69 66 28 28 6f 3d 64 2e 6c 6f 61 64 4d 6f 64 65 29 26 26 50 3c 38 26 26 28 61 3d 75 2e 6c 65 6e 67 74 68 29 29 7b 66 6f 72 28 66 3d 30 2c 51 2b 2b 3b 66 3c 61 3b 66 2b 2b 29 69 66 28 75 5b 66 5d 26 26 21 75 5b 66 5d 2e 5f 6c 61 7a 79 52 61 63 65 29 69 66 28 21 4d 7c 7c 63 2e 70 72 65 6d 61 74 75 72 65 55 6e 76 65 69 6c 26 26 63 2e 70 72 65 6d 61 74 75 72 65 55 6e 76 65 69 6c 28 75 5b 66 5d 29 29 61 61 28 75 5b 66 5d 29 3b 65 6c 73 65 20 69 66 28 28 70 3d 75 5b 66 5d 5b 69 5d 28 22 64 61 74 61 2d 65 78 70 61 6e 64 22 29 29 26 26 Data Ascii: <d.bottom+1);return g},U=function(){var a,f,h,j,k,m,n,p,q,r,s,t,u=c.elements;if((o=d.loadMode)&&P<8&&(a=u.length)){for(f=0,Q++;f<a;f++)if(u[f]&&!u[f]._lazyRace)if(!M\|\|c.prematureUnveil&&c.prematureUnveil(u[f]))aa(u[f]);else if((p=u[f][i]("data-expand"))&&
2024-04-26 18:32:41 UTC	1369	IN	Data Raw: 63 3f 73 28 61 2c 64 2e 61 75 74 6f 73 69 7a 65 73 43 6c 61 73 73 29 3a 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 69 7a 65 73 22 2c 65 29 29 2c 68 3d 61 5b 69 5d 28 64 2e 73 72 63 73 65 74 41 74 74 72 29 2c 67 3d 61 5b 69 5d 28 64 2e 73 72 63 41 74 74 72 29 2c 66 26 26 28 6a 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 6c 3d 6a 26 26 6e 2e 74 65 73 74 28 6a 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 22 29 29 2c 70 3d 62 2e 66 69 72 65 73 4c 6f 61 64 7c 7c 22 73 72 63 22 69 6e 20 61 26 26 28 68 7c 7c 67 7c 7c 6c 29 2c 6f 3d 7b 74 61 72 67 65 74 3a 61 7d 2c 73 28 61 2c 64 2e 6c 6f 61 64 69 6e 67 43 6c 61 73 73 29 2c 70 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6d 29 2c 6d 3d 6b 28 52 2c 32 35 30 30 29 2c 75 28 61 2c 59 2c 21 30 29 29 2c 6c 26 26 71 2e Data Ascii: c?s(a,d.autosizesClass):a.setAttribute("sizes",e)),h=a[i](d.srcsetAttr),g=a[i](d.srcAttr),f&&(j=a.parentNode,l=j&&n.test(j.nodeName\|\|"")),p=b.firesLoad\|\|"src"in a&&(h\|\|g\|\|l),o={target:a},s(a,d.loadingClass),p&&(clearTimeout(m),m=k(R,2500),u(a,Y,!0)),l&&q.
2024-04-26 18:32:41 UTC	1172	IN	Data Raw: 74 72 69 62 75 74 65 73 3a 21 30 7d 29 3a 28 65 5b 68 5d 28 22 44 4f 4d 4e 6f 64 65 49 6e 73 65 72 74 65 64 22 2c 56 2c 21 30 29 2c 65 5b 68 5d 28 22 44 4f 4d 41 74 74 72 4d 6f 64 69 66 69 65 64 22 2c 56 2c 21 30 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 56 2c 39 39 39 29 29 2c 6a 28 22 68 61 73 68 63 68 61 6e 67 65 22 2c 56 2c 21 30 29 2c 5b 22 66 6f 63 75 73 22 2c 22 6d 6f 75 73 65 6f 76 65 72 22 2c 22 63 6c 69 63 6b 22 2c 22 6c 6f 61 64 22 2c 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 22 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 5b 68 5d 28 61 2c 56 2c 21 30 29 7d 29 2c 2f 64 24 7c 5e 63 2f 2e 74 65 73 74 28 62 2e 72 65 61 64 79 53 74 61 74 65 29 3f 64 61 28 29 3a 28 6a 28 22 6c 6f Data Ascii: tributes:!0}):(e[h]("DOMNodeInserted",V,!0),e[h]("DOMAttrModified",V,!0),setInterval(V,999)),j("hashchange",V,!0),["focus","mouseover","click","load","transitionend","animationend"].forEach(function(a){b[h](a,V,!0)}),/d$\|^c/.test(b.readyState)?da():(j("lo
2024-04-26 18:32:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49927	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:41 UTC	901	OUT	GET /ajax/login-state HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"d8-R6JFTYCzz9JLwYU4VIqVMGUySyY"
2024-04-26 18:32:41 UTC	912	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:32:41 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"d8-R6JFTYCzz9JLwYU4VIqVMGUySyY" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B5aN6QK4Sm0EIJJPjOmpeO36L4PXk4a3Tl9hqpGR0%2FPg76%2FgS10HUon5rfl%2Fy6IMZ9ixf2161FWFBE1c0%2FBV8CULJ3hmc5mcY6sHyc2uDDSWL9ZqqYwz3yHVRo1TSNQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a82bbd19748e-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49926	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:41 UTC	915	OUT	GET /ajax/verify?domain=1movieshd.cc HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"f-NQVRlQfKHCoInEbhALgECMonhCE"
2024-04-26 18:32:41 UTC	911	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:32:41 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"f-NQVRlQfKHCoInEbhALgECMonhCE" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZO1m32fHaw3xeic%2BJabEgejcWXW%2FVkpZUkBpijzke8PIh%2BibTBUfZ7cpM%2BcH%2B6WpXPaNIS7OOaHS0CvlozEeaNADxlOMMSYbHKf7BO9F0jkxXZsDU4xjl6qsoC3Hszo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a82bbc485c6a-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49928	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:42 UTC	698	OUT	GET /xxrz/250x400/793/1b/2e/1b2e7f907e0eabd02ddca00c9a3ca2a4/1b2e7f907e0eabd02ddca00c9a3ca2a4.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:42 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:42 GMT Content-Type: image/jpeg Content-Length: 74920 Connection: close Last-Modified: Sat, 24 Feb 2024 16:17:40 GMT Vary: Accept-Encoding ETag: W/"65da16a4-c539" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6955 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ie3QuwRwVO3hbYkAIHJ68XMCTfOXPGsyX%2BtI5fyxku54SkSEKd%2BO593C20%2BH%2FFh2qm4Xxkf1wYwXuSydn2tAgIPPYqIZVOw%2Br8iHvjqvSYnSy8p3Ou7kfM%2BjzIV3HOLqNVCO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8314fe93715-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:42 UTC	643	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 95 70 7c 55 ea 1a cc 6e 0e 73 8a a3 f5 15 27 de b9 5f 11 7a 68 3c 64 58 1f 1d 47 95 ad a9 57 2b 2d ee 16 5d 63 14 49 be d2 84 ae 5a 46 07 f1 c1 24 f8 66 29 f6 6a d9 1b d4 f3 81 bf 99 ba f5 14 87 7a 40 32 56 b4 8e db 96 76 d6 f6 f8 ed 1a ce a4 f3 47 bc dc 62 e8 be 56 93 58 e0 33 59 21 57 49 2d 5f 29 3b 0d 57 ad c0 df d0 17 2d 3a 78 da 21 96 97 5d 4e 62 d5 06 1c e7 6d 56 40 fa 05 ca 71 eb 1f 25 23 d4 d7 e5 c2 90 98 86 5c a6 78 2e 80 1a 20 af 0b c1 a2 bb 0e 28 b3 5b d6 78 31 e8 75 70 53 70 2d 0e e9 89 00 fa b4 ee a5 6f 15 f6 6b 77 d7 24 69 ee a9 5b 5c 85 9e ef 52 d4 a2 18 c1 23 1d 3f 47 cf cb c6 97 92 ce aa f9 1a f4 61 d7 1b ad cc 4b 31 cf 26 0d 47 4a a2 63 8d 88 27 73 1b a9 5c ac 1a 90 a2 d6 7c 6a f7 d4 aa 38 a7 9c d8 b1 79 3b 0d 35 96 7b 9b 92 0d c4 ca 63 Data Ascii: p\|Uns'_zh<dXGW+-]cIZF$f)jz@2VvGbVX3Y!WI-_);W-:x!]NbmV@q%#\x. ([x1upSp-okw$i[\R#?GaK1&GJc's\\|j8y;5{c
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: de 5e 0e 89 f5 0a 97 e3 e8 d8 32 20 2e c4 70 fd 33 77 8c 29 14 23 31 36 fa 94 0a c0 ac 0f f8 d3 b5 c6 2e 29 f6 23 90 e6 e7 d8 a3 98 05 0d 8e 18 cd 90 f9 27 63 c6 c9 86 cd 27 62 6b 5d e1 90 4f 65 e9 e0 7b 90 75 cd 89 78 56 63 d5 56 e4 e1 a2 19 f1 3d dd e2 0b b6 cd c3 8d 0f 6b b5 d8 14 a5 3b cb 4e b7 4c 5a 2c 0d 68 37 ce 57 50 9b 63 a6 1e c0 98 30 de 0e 44 ec 6a ca da 9e 65 dc 54 5f a8 36 d6 43 8c 15 8a 04 ba dc f0 9a b3 6f fa 3f 27 50 ab 6d ca a1 a4 a8 d6 f6 79 71 78 f4 02 37 4c 81 ae ee 94 b1 d6 17 d4 59 cb 63 b5 a4 3b 35 65 52 d9 6c 2a 55 d7 e1 32 55 4c 0b 21 8d 1f d2 fd 46 dd ee 0c 52 14 8e a2 a2 d1 22 a4 2a 68 1a 07 3b b5 f1 e8 c4 ab 60 a2 d8 33 12 8b 54 0c 4b 1f 4c a8 81 ea d2 83 a4 51 cb 05 8d 79 b7 75 2d f2 05 aa 7d 8d ad 95 9c f4 2f ac dc 66 eb 98 Data Ascii: ^2 .p3w)#16.)#'c'bk]Oe{uxVcV=k;NLZ,h7WPc0DjeT_6Co?'Pmyqx7LYc;5eRlU2UL!FR"h;`3TKLQyu-}/f
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 7c d1 99 2e 14 f1 c5 11 75 38 88 38 de 65 41 f4 f3 fc b6 dd 74 d7 dd 6b d3 fd 52 c6 33 66 50 0d 67 ea 6e 5c eb 46 c4 fa da 23 af 0a 9d cf 70 29 a4 1f 34 89 f7 5a 6c cd 2f 68 b7 b6 a7 3b 39 c9 00 c9 31 91 72 4c 5c 9c 0e 52 74 1e 1c ad e3 1e df c4 68 ef 39 21 d7 8e 20 93 f4 cf 27 72 b9 aa b8 c1 2e 08 3f 4c 88 b9 3a 8e 35 b4 0d 93 4e b3 d6 ce 18 5e 7d 6e aa 0c b6 4c d9 75 3b 7a 5b 3d 2f 55 96 7d 0e 83 57 e9 cd 35 a3 45 4b 5d 11 13 95 eb ba 3d f7 72 10 8d 34 0a 39 85 6d 45 5b 43 91 02 e7 1a a1 ad fe 36 64 4c 30 f9 49 03 c9 42 c9 c1 c9 61 fb 91 17 bb 1c c7 26 76 e4 28 83 84 3e ee 31 dc 93 1a ce 31 83 44 46 0d 17 00 1e 71 a2 68 85 45 dd 2e 9f ae 0d 91 12 86 96 dd a6 ac 64 d1 09 80 b2 99 b1 53 41 ba 6e bf a9 6a 97 d1 ad 27 bc 2e 0b 9a dc eb 98 f8 d8 a4 52 ca ef Data Ascii: \|.u88eAtkR3fPgn\F#p)4Zl/h;91rL\Rth9! 'r.?L:5N^}nLu;z[=/U}W5EK]=r49mE[C6dL0IBa&v(>11DFqhE.dSAnj'.R
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: bd 46 89 0c 10 f5 ed f8 3a d4 8a dd f2 be b0 32 7a 93 b6 dd 91 75 bb 42 b6 d2 31 14 32 e3 65 54 4f 66 49 35 4b 32 c9 d9 64 23 18 ef f3 a6 ba 5d 7a bf 6b ba a1 d5 af af b6 8b 70 1a 92 aa 38 ea 72 5c d2 73 51 71 0e b5 8c bf 1b c7 6a 40 14 92 0e 8f 24 87 bb b0 b9 f7 9b 14 a7 42 a1 a5 9c db 3a 9e dc ea 14 8f 5b 53 83 54 f2 c6 ac a4 af f6 35 dd 13 51 7d 7e db d3 9a fa bc 15 67 39 b0 47 88 5a 6b 08 cf 87 38 26 41 28 2d 0a 99 59 75 2a 21 ac ec 03 b2 c5 93 19 9c d6 de 12 29 f4 8e af 6c 50 6d 7a 8f a8 44 b9 8e 54 19 22 d9 f8 2d c3 5d 6b 5c 19 8e f5 ad a6 49 73 21 46 99 b9 d1 d5 3f f9 0a dc cb 06 f9 32 ba 5b 77 e8 b6 05 0f 6a b4 88 f4 71 02 e5 cf 5d 73 69 17 9f 5c e9 95 8f 96 b3 3a 8c d5 2c 05 8b c8 a4 39 c6 bf d6 af 20 c6 1d b3 59 31 ae 93 06 1b 37 2d ae 7c b9 24 Data Ascii: F:2zuB12eTOfI5K2d#]zkp8r\sQqj@$B:[ST5Q}~g9GZk8&A(-Yu*!)lPmzDT"-]k\Is!F?2[wjq]si\:,9 Y17-\|$
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 85 b6 44 ee 70 de 3f b5 34 64 5c 24 64 4c 2c 76 3d 1b 1c 63 67 c7 46 62 b2 33 93 10 4a 98 12 a2 aa 9d 9c c3 32 62 17 25 94 ca 07 eb 83 15 b2 c9 e5 95 d1 2c ae a5 9f a6 fb c3 9b 7f 4b 75 ae 4a 79 17 17 f6 c5 7f ac 90 a0 58 dc 30 63 f2 e5 65 04 fb 24 00 53 b5 38 73 3d 44 76 48 84 99 1b a4 7b ec e8 f2 eb 2c a8 a7 6a 1b 43 b5 fb a8 16 b0 2f 6b e0 9d 4c c5 6f 38 fa 4b 17 36 6d 44 c8 6c 46 2f 2d 6e 18 46 4c f3 97 bd 87 22 3b 20 af 39 ff 00 08 a4 4e 09 c3 90 a2 6a e1 d3 8c 91 9a 84 c3 ec 54 4f e5 1c c6 f6 64 97 a2 b7 a5 c8 ef 1c 64 62 37 a7 dd 89 10 93 c2 35 75 a3 58 81 b8 45 ce 9f fa a2 cb 03 c9 b6 98 6f 2e dd d3 c8 75 c5 7a f4 d0 f6 14 36 31 ea 4a f6 56 d5 4a 0b 07 aa 1c cd 99 a9 49 03 e5 54 90 4c 59 40 63 e3 b5 8f cb 1a 76 9b 09 1f d7 5f 61 32 15 ab 04 e2 5c Data Ascii: Dp?4d\$dL,v=cgFb3J2b%,KuJyX0ce$S8s=DvH{,jC/kLo8K6mDlF/-nFL"; 9NjTOddb75uXEo.uz61JVJITLY@cv_a2\
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 9c 47 29 51 f8 d7 67 9d 79 59 1c bc 4f e1 de de 79 b3 cc b9 e6 cf 32 e7 97 3c d9 e6 5c f3 bb 3c b9 e6 5c f2 e7 99 73 cb 9e 45 5c f3 2e 29 95 73 cb ce 79 33 ce b9 e6 5c f3 3b 3c cb 9e 75 cf 3a e7 9d 73 ce b9 ec 2e 7b 0b 9e c2 e7 b0 b9 e7 5c f3 bb 3f ff c4 00 41 11 00 02 01 02 04 04 02 06 08 04 05 03 05 00 00 00 01 02 03 04 11 00 05 12 21 06 13 22 31 41 51 14 32 42 61 71 81 07 15 23 52 91 a1 c1 f0 16 33 62 b1 10 53 72 d1 e1 24 82 f1 63 73 92 c2 d2 ff da 00 08 01 03 01 01 3f 01 92 01 a0 fb b1 53 12 9b 83 ef fd 3f df f2 c4 94 41 8d 80 f9 62 7a 43 1f 4d b7 f1 fc b0 f0 f5 79 63 96 30 9e b0 c2 e0 0b 7f 84 fd 8f cb 12 ad cd fc bf 5f fc 62 75 2a 46 d6 bd fe 7d b1 2b 5b b1 fd 9b 63 9c a0 0e ad 2d e7 df 50 f1 04 1f df 7c 25 62 88 d1 55 6c c3 d6 b5 88 f0 b6 c4 1b 78 Data Ascii: G)QgyYOy2<\<\sE\.)sy3\;<u:s.{\?A!"1AQ2Baq#R3bSr$cs?S?AbzCMyc0_bu*F}+[c-P\|%bUlx
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 54 62 16 d4 a8 74 a4 c8 03 e8 74 d1 a7 58 46 f5 b1 c4 b6 cc 72 58 68 79 71 a2 37 2a b5 5e ea 3d 1d a6 97 99 29 78 dc aa a0 4b b1 5d 6e 03 1d ae 3b e3 2a cf d2 8f 36 92 95 e5 a7 a9 a3 92 14 51 58 93 73 6a 63 a9 5e a2 d3 83 a7 54 4f 19 b6 a8 43 85 71 d5 d2 0b 0e 35 aa 44 c8 67 99 9a 33 cb 9e 8a 48 90 b5 bd 25 96 ae 13 c9 8d b6 21 e5 5d 4a 2d 7b 77 b1 b6 38 57 21 ca f2 79 eb aa a8 12 75 fa c3 96 26 59 dd 58 a1 4b bd 94 2d f6 d5 21 b9 bf 51 5b d9 7b 62 a7 26 6a 5a 8a cc cd 33 1a 96 79 22 90 d3 a4 cb 03 25 23 e8 37 68 96 34 82 69 a3 51 b9 86 49 1c 00 01 16 3b e3 2b 35 54 6d c8 23 9b 37 2c 4d 3c 88 02 25 4b 6a fb 59 55 6e cc 93 4b 7e 7e 91 23 02 5c 8d ad 73 4f 30 60 b6 ba fb 98 69 38 66 e9 3f bf 1c 55 d3 24 ba 8d bb 62 b7 27 56 96 ea a1 4e f7 b0 ef b8 b7 f7 c4 Data Ascii: TbttXFrXhyq7^=)xK]n;6QXsjc^TOCq5Dg3H%!]J-{w8W!yu&YXK-!Q[{b&jZ3y"%#7h4iQI;+5Tm#7,M<%KjYUnK~~#\sO0`i8f?U$b'VN
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 64 2a 35 1f f0 a9 c8 28 ea 2e e6 31 ab ce ff 00 a7 6f c2 d8 39 29 88 32 95 e8 22 d6 5d f6 f1 ef 7f 76 33 ae 28 fe 14 8e ae 09 5c e6 35 08 eb c8 a5 a7 b2 f2 84 f7 61 e9 66 e7 43 68 1e 01 ae 37 0a 2f 8a 2e 34 e2 41 ca 92 38 bd 1e 9b 9d cf 34 c9 af 7d 6e 19 94 3c b4 a2 32 af 63 d1 e9 1d c9 37 c6 67 5e 95 f9 25 06 6b 47 31 a5 e6 4f ca 6d 74 af 55 3c 32 c9 13 af 2c 40 9d e5 59 82 6e 41 4d 17 f3 d9 b2 b6 9a a9 1e 66 33 44 d0 a7 35 f4 e8 33 34 89 fc d7 44 fe 52 ef b2 ec 12 c4 1f 3c 66 54 13 56 d6 e5 34 71 31 30 65 f4 32 41 0b 30 bf fd 50 a9 53 11 6b 8b 1b 41 04 07 5d be 43 19 1f 13 56 7d 1f e7 59 a0 aa cb da ba 96 b1 45 48 a4 8a 40 b0 40 f2 e8 2c f1 99 86 93 21 0a c9 2d 97 d6 25 81 bd b1 f5 c5 5e 73 4f 9b 66 92 c2 c0 35 7a cb 4f 4d af 9a b4 d0 ac 8c d1 c1 1b f8 Data Ascii: d*5(.1o9)2"]v3(\5afCh7/.4A84}n<2c7g^%kG1OmtU<2,@YnAMf3D534DR<fTV4q10e2A0PSkA]CV}YEH@@,!-%^sOf5zOM
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 22 d3 23 45 14 33 54 d4 cb 60 f4 82 03 12 c7 a0 fa cf 50 4b 2d ed e2 82 f6 de db db 0f 9b 88 26 a7 ae a1 a5 e7 4d 2b 72 aa 4b c5 2c 51 c6 1f 49 2c d2 08 18 3e 8d 95 43 90 37 24 5e f6 19 86 65 04 94 32 4b 2c 47 c5 24 45 60 cc 09 40 c3 c0 6a d8 ee 36 c7 14 52 45 99 4d cc 86 6e 57 2a 0b 41 12 53 b4 46 69 43 73 1a 19 54 dc 82 ea 3f 98 9b 5d 40 60 2e 31 f4 59 4b 4d 59 c3 13 51 d6 41 49 22 53 e6 55 32 54 d1 54 20 4e 87 58 d9 64 37 2a 19 93 4b 68 94 ee 9a 42 d8 8b 63 25 a0 cb e0 8a 6a 59 23 bd 22 49 50 29 41 b8 65 82 47 62 80 32 d8 b2 e9 6b 15 6b 8c 65 1c fd c4 ae 39 7a 15 91 74 ee b6 d2 37 37 dc 1b 6c 3c 30 6f 7d 80 3f 1c 67 b9 12 66 d0 da 39 4d 35 52 8f b3 98 0b ae c3 d5 94 77 2a 4d b7 1b a9 df dd 8c fa 5c f6 b2 9a 2c 8f 33 a7 d3 51 97 4a fa a6 b9 3e 94 8d 65 Data Ascii: "#E3T`PK-&M+rK,QI,>C7$^e2K,G$E`@j6REMnWASFiCsT?]@`.1YKMYQAI"SU2TT NXd7KhBc%jY#"IP)AeGb2kke9zt77l<0o}?gf9M5Rw*M\,3QJ>e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49930	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:42 UTC	699	OUT	GET /xxrz/1200x600/793/b5/57/b557aee04772d0a3a66a29064bf8dd3e/b557aee04772d0a3a66a29064bf8dd3e.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:42 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:42 GMT Content-Type: image/jpeg Content-Length: 303058 Connection: close Last-Modified: Sat, 24 Feb 2024 16:18:45 GMT Vary: Accept-Encoding ETag: W/"65da16e5-75399" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6955 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PXphz7bZr2JLUmGwPsW1MMX7qG%2BrZFAW0vIb1h%2FZt8rgPvoJo07AnLSobXscL1RACxXbKUrrByagEtcZYwFlmWtSKJBNoy0P%2F2p4QqekxVkF6TCHUBTkNpfVkxQSzGaTiWoV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8314955a521-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:42 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 01 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 4c 98 b3 0a 74 94 bb 0b 21 c6 5d 8e 3a c9 5c cc 90 e2 08 89 23 a5 8a 7a 4a 4c 5a 4b 67 1e d5 0e 93 60 29 d9 90 49 c2 b2 46 9d 60 93 91 17 4e 7c e4 82 c9 67 9c 98 01 38 f3 15 1c 69 33 26 04 70 a5 4d 96 1a 40 93 3a 40 29 0e 45 84 a0 ad 59 26 d8 c3 05 61 ec 4c 31 57 12 cc 81 1d 42 5d b6 9d 48 97 6c a5 a8 87 78 de 26 7e 3e 8c 32 6c dc 6d 34 7b 9f 31 0f 51 18 cd 65 20 eb 61 30 d6 42 bf 61 01 c7 31 d5 bb 4a d7 9a c7 40 d7 56 be c6 5a 36 82 bd e6 2a 01 6a 16 ad 54 2b 00 9e d0 db 2d 84 2c 56 48 65 ee 04 28 e6 5a d7 a5 e0 4d 23 26 c3 47 f4 d8 0d 33 66 e1 61 99 d6 0b 0c 3b 58 6d 23 67 82 39 03 bf 47 61 99 7e 03 0c 32 70 d1 7a dc 21 14 64 e1 8c ac 9e 12 11 b7 b0 da 64 99 1b 0c ce 96 35 e9 6e 0c 3b 08 93 df 11 11 0b f7 6f cb 5c f4 2d 18 73 d4 83 63 9f c5 a3 0d 32 90 Data Ascii: Lt!]:\#zJLZKg`)IF`N\|g8i3&pM@:@)EY&aL1WB]Hlx&~>2lm4{1Qe a0Ba1J@VZ6*jT+-,VHe(ZM#&G3fa;Xm#g9Ga~2pz!dd5n;o\-sc2
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: f6 8e 23 8c 96 0b 0a cb 4a 31 fd 6b 8f 9c d8 bb 58 e4 92 04 46 17 5c 43 30 ad 76 08 c2 bf 47 61 83 79 10 c8 c2 58 68 a9 d3 cc 27 49 07 ce 58 e6 39 56 25 9c ee ad d9 c4 1f 10 51 a5 c5 b4 7c 3b 21 85 fb d7 e6 42 11 a4 0b 64 3b 4c 07 9c 54 28 1d 53 b0 c0 74 a7 69 40 db 88 86 03 4f 90 29 01 65 e6 61 57 68 f2 03 20 07 29 c5 21 73 9e 40 4e 02 96 64 79 40 24 99 71 e5 2b 12 64 8a 4a bd 22 64 79 8a 88 f3 e3 4e 54 32 2c a2 58 22 29 56 b0 ad 52 5e 6d bc 0b ac b5 67 dc 42 bb ca 4a 4d e4 2b ac a5 24 da 0a cd 5c e2 cf 65 8a e8 3e 67 4a aa 5d 29 65 d9 54 ba 76 a7 67 27 bd 12 6f a5 fd eb c0 45 b7 e2 7d c3 c7 2b 91 da 8b a9 18 46 e8 8b dd 3d dd dd 1d dd dd d3 dd dd d0 8e 6b ba 7b bb bb 92 b6 cf 97 bf 96 e5 bd c3 19 f1 9f 4b e3 b4 de 99 9a f8 77 ae c6 82 fe bf ca eb 55 46 Data Ascii: #J1kXF\C0vGayXh'IX9V%Q\|;!Bd;LT(Sti@O)eaWh )!s@Ndy@$q+dJ"dyNT2,X")VR^mgBJM+$\e>gJ])eTvg'oE}+F=k{KwUF
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 97 9f 71 6d 5d 69 96 8d 85 9d 7d a8 33 ac ef 29 ee 57 cc b6 b8 aa bd 36 4d ff 00 a1 63 bd 63 e9 de 2f d1 ac 87 2b f5 7f cb f9 ea fd 85 9a ae e2 c3 53 bb b9 1c d5 ee e4 e5 ee 4e 54 e8 ee e5 ee 47 b5 fd 2d f9 d7 e8 cf c4 ec 3f 4b f2 ff 00 c6 3e 27 53 8d ef bd 13 ec 9f 8c fe c2 c0 f6 5f d1 97 b8 7e 6a fe 94 fa 9f 89 3d 3b bd 5f 97 1f 2a 74 74 49 83 09 31 18 fd ee 33 e1 1e ab 2d 53 7d 4b f1 cf 4b 47 4d 79 4f e4 f7 73 f4 9a 1a 3c dd fc b6 6f 51 9c 6f d2 e6 b3 da 7c ee a7 a9 cc 52 68 e9 35 76 68 ab ed 60 3e d5 70 a5 01 82 42 8f 3a 31 6d 14 47 1d ee 21 94 64 b0 84 76 4d 82 c2 b2 d7 03 4c 2b 5c 40 38 6d 78 c2 92 0b 90 22 30 4b 2c 19 18 4b 8c 65 6f 5d a8 f4 82 37 8a 94 b2 2a be b7 6a aa d2 58 33 8e a4 0b 08 39 8f 8a 0b cf fb 67 c5 d4 c2 38 9b 24 90 c9 59 c5 90 32 Data Ascii: qm]i}3)W6Mcc/+SNTG-?K>'S_~j=;_ttI13-S}KKGMyOs<oQo\|Rh5vh`>pB:1mG!dvML+\@8mx"0K,Keo]7jX39g8$Y2
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: a4 58 cf 81 3f 38 33 e7 40 96 90 ad 6c e9 2c 11 0e 86 d7 3f 66 82 fa 2b 3c e4 f4 95 d4 5c 65 2e 51 4b 57 77 95 bc cf cc d2 5c 67 6f 13 cb d3 ed 70 9a f6 bc ef ae fb 07 88 7b 07 e9 1f 96 6d 08 12 7e 82 f1 6f 56 a9 6a a9 e6 9f 19 f8 1f 57 ed ff 00 8c 46 f8 c7 c4 7e 84 f3 62 3a 93 dd f9 cf e8 b3 f4 bb f9 d2 fd c8 f3 7e 4b dc df 5d 63 f5 9f 91 77 22 12 bf 9b bf 90 7f 46 fc 35 f9 fb f6 55 df 89 6d 7c a7 db 62 c3 da f9 bd 8f a5 f9 9d 8e a7 cb f7 eb 6c fd 4b ea 3f 0c 7d d3 f2 7f ae fe a5 7d eb f8 fb fa 7f 95 f0 9f 5d e5 4f d3 df 1c e4 51 d3 b3 98 ed 26 43 e1 9e a3 3d 9f b6 ce fc 2f d7 40 a7 9f 51 e5 7d 0d 6d 35 9d 28 76 e9 aa 6c ea 5a dc a8 a2 ba a3 73 72 96 9a e6 99 ed 5a ba eb 2a e7 5d af 01 a3 b2 c4 18 e5 82 c9 1b 58 4a b7 4e 91 63 c6 70 b6 2f af e8 eb a2 d1 Data Ascii: X?83@l,?f+<\e.QKWw\gop{m~oVjWF~b:~K]cw"F5Um\|blK?}}]OQ&C=/@Q}m5(vlZsrZ*]XJNcp/
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 0b a5 bd 2b 09 06 bb d0 7a 60 00 71 f5 d9 cc b3 1b 9b f4 e5 bf cc d6 c3 dd 58 f0 aa 21 eb 23 73 4b 5e 27 52 b5 ea db 1e 80 b7 85 6a da 5b e7 44 bb 36 b0 61 ad ab 61 a7 c6 90 2c ec e1 d4 95 46 ed 9d 5d 0a b7 bd 7e 6d f6 8d 13 b3 a7 a1 34 86 cf 3c 2c 69 09 9a 96 33 5d a4 27 82 f6 02 81 0a d5 b1 93 4b d6 8d 00 f3 f1 a6 34 b1 29 47 71 fc bb 65 02 47 d3 be 0b 68 58 07 57 4a 74 9a c7 81 bb 83 d2 18 0d db 75 51 28 4b 69 54 d2 c0 dd b1 2b 0a 06 ec 99 5c 91 d6 6f aa 5e 8b a2 51 9a b7 ba ea e2 84 c7 19 25 45 ab 9f 38 9d d0 a7 47 93 42 5a cf 80 54 74 1d 53 a2 a9 b5 42 41 b0 c3 b1 b2 cf cb 5d 8d 7d ae 42 eb 2d dd 65 fe 32 66 55 bd 36 ff 00 cd 34 f8 00 f5 0d af 96 6f 3c be 76 da d7 2d 79 81 9b 22 eb 0d 66 2a ee a7 61 aa 14 5b e8 5f 5f f9 bf d3 16 f2 3f 51 79 3d 7f cb Data Ascii: +z`qX!#sK^'Rj[D6aa,F]~m4<,i3]'K4)GqeGhXWJtuQ(KiT+\o^Q%E8GBZTtSBA]}B-e2fU64o<v-y"f*a[__?Qy=
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 9f af 6a eb ad f3 3e 83 da ad 58 b5 5d 36 b2 16 38 be 5e f6 fd 17 ad e8 53 e1 6b 8f d2 0f 13 a8 bc 2a 45 87 c6 be 9a de 7f 65 e3 9e ab f6 cf 8d c6 cc de d8 76 87 9e db 52 d9 69 79 da da a9 35 ee 79 fb 5b 28 96 8a eb 6b 7f 40 3f 3a 7e c3 f9 cf d2 3e 36 a1 fa bf e4 cf 67 f3 fe 09 63 ea 67 ed ef fc a2 c9 1d bf a9 bd b7 f3 c7 45 e6 3d 3f d7 de 3c 4f bd f3 63 e7 2f 28 fd 48 ce f8 4f 6d f8 dd 5d f7 77 cd 7f 44 53 ce fd 37 13 5b a6 87 db 7e c7 f9 b9 f4 ef cd 3d 38 65 7a c7 86 2d e9 a5 67 ed ed b4 43 e3 7a 3c cc 1f 4b 91 f5 67 9a ce ef 23 ad 53 07 db 66 84 1f 37 49 b7 89 e8 47 47 0a ea 63 4a 60 a8 37 fe 7f b3 85 19 d3 29 34 72 74 94 b6 ba 55 98 cd d2 7a 86 03 a9 9e 7c b8 9a 59 4f 38 d4 66 6c 88 44 8b 48 71 ad d6 7a aa 6e 8e f3 33 6b 33 ac 95 9d ce d4 d8 f7 9b c7 Data Ascii: j>X]68^Sk*EevRiy5y[(k@?:~>6gcgE=?<Oc/(HOm]wDS7[~=8ez-gCz<Kg#Sf7IGGcJ`7)4rtUz\|YO8flDHqzn3k3
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 12 cd 24 c3 6b 08 07 8d 38 80 71 c7 d4 21 1c 36 f5 f8 b1 df d0 41 b5 3a 39 e2 6c d4 9c 26 cd 64 23 05 d2 66 0c 57 09 96 3a d8 66 41 37 a0 cb 2f d3 11 7b ca 34 3e d8 b8 9e a3 27 a6 ce 52 25 b1 a8 a2 a4 86 da df 33 cc 92 4f ac 7e 49 01 65 48 0b 71 25 4c 78 1c 84 db 66 d0 95 0b 6e 5e 9a 35 bd 35 49 43 22 c7 a0 b0 68 b5 b9 82 ad 42 d9 6d d2 c1 12 f2 f4 bc 9c 4a 19 4c c2 0d 97 90 0e 0b 06 46 af 14 c7 88 7a b1 a0 94 2b dc 7f 56 db ba 79 68 6f 59 c5 94 15 34 87 32 2c d8 2a cb 2c 25 f4 0b 69 65 1d 57 8d 2a 16 b5 2d 2a 1c 8e e7 cb 74 71 6b 81 51 5d ea 7c 15 8c 51 c6 67 32 20 66 01 cc 9a df 42 a7 d0 a1 b3 87 b0 a9 d9 b0 ab 30 da 3c e4 82 4c 98 96 26 a7 a0 ea a9 9f e3 be b8 4f 4a c0 7a 66 3f a0 f9 46 63 25 fb cf 8c ef 7d 3e 46 1b c2 fd 37 cc a3 30 fe c7 c1 fa d7 bd Data Ascii: $k8q!6A:9l&d#fW:fA7/{4>'R%3O~IeHq%Lxfn^55IC"hBmJLFz+VyhoY42,,%ieW-*tqkQ]\|Qg2 fB0<L&OJzf?Fc%}>F70
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 85 b5 aa c2 f4 b3 a1 d2 d5 01 eb da 8a 5a dd 3c 8b 6a ba a8 1a 58 36 70 aa e1 e8 62 da c1 ac 84 ee 34 f8 71 1c de 59 24 a4 aa 18 86 aa ac ac d9 8d 6c 3a b2 0d 06 40 34 e4 ca 04 85 df 92 7a f8 42 67 cb 4d 21 7d 77 c4 23 29 12 68 a6 03 22 f3 df 4e 1e 8b c1 d2 ba 6b 6c ca ee b7 4f 1c 6e 98 3b 58 ee ee 52 3e a4 95 32 b6 c9 6d 22 2a 10 6d 30 52 dd 5b d5 b2 d5 b7 15 61 66 2d a1 87 6b c6 db 9f c5 13 2d 79 e7 81 ca d2 5a 1c 4e 54 49 b6 94 0d 0a 27 df 10 2e d3 ca bb 92 ae a5 41 ec 48 ae 9d 44 bb d9 01 35 66 95 9a 2c dd 98 96 51 e5 67 6b d7 92 f4 80 3f 8c 79 5f b1 f9 c7 b9 f9 87 af 12 ca 7f 95 f7 3f 3d d3 ef 33 1e db e7 55 ba ea 2f 6c 51 aa ca bf 5b ab f2 bf 42 cc 6c bc ff 00 3e c6 57 b3 e1 7c ea 23 6b e9 e0 67 eb b6 30 6d 22 40 03 f8 b2 84 35 2a af 78 9b dc 44 46 Data Ascii: Z<jX6pb4qY$l:@4zBgM!}w#)h"NklOn;XR>2m"m0R[af-k-yZNTI'.AHD5f,Qgk?y_?=3U/lQ[Bl>W\|#kg0m"@5xDF
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: a8 17 ac 7e 17 56 e7 58 c9 6e 92 b1 fa 24 ef 8d d1 79 2a 17 45 8e 80 6c 5a 4b 80 e8 bc 97 43 24 12 57 45 2d 49 21 c2 5a 94 e4 8c 5a 94 dc e9 01 64 ed 8f 16 a4 98 30 cd 9a 11 6c 6e d2 d8 83 74 28 59 db 37 91 32 f5 06 5f 51 55 9c 1e 86 2d b8 2b 95 9c f9 ec 80 b3 49 7d 1d 96 ac c1 c6 8d 23 97 1a 1c 76 33 a5 0c 2e 22 92 1f 1d 22 e7 e0 27 71 da 15 ea 95 83 8f 61 9e 27 0c a9 22 2b c8 14 33 16 97 2f 0d 22 d2 09 1d 68 52 c6 e6 5c 68 12 21 95 6b da 48 e7 1d aa 26 49 c3 6d 48 51 70 2d 16 0a c6 d5 7e 62 88 81 64 72 b4 8a c7 e3 30 83 47 31 b3 57 b5 16 79 79 e5 8b 03 a6 a5 6f 0f a5 0e 62 3a bd b6 84 57 37 bb 9e af a9 1e 71 cd 13 2e 31 6d 13 d6 8b 72 47 a3 bd 26 5d 2c 35 de d6 c7 ca ac db 40 dc e5 61 94 d1 d5 d3 47 7b 1a ce 1d 78 9a c9 96 c0 71 56 32 c7 77 41 d1 9d 1c Data Ascii: ~VXn$y*ElZKC$WE-I!ZZd0lnt(Y72_QU-+I}#v3.""'qa'"+3/"hR\h!kH&ImHQp-~bdr0G1Wyyob:W7q.1mrG&],5@aG{xqV2wA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49929	172.67.195.52	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:42 UTC	733	OUT	GET /embed/news?theme=dark&source=1movieshd.cc HTTP/1.1 Host: valueclick.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:21 UTC	745	IN	HTTP/1.1 522 Date: Fri, 26 Apr 2024 18:33:21 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 15 Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MbhG3w0om2cV4tpq6UHYeVVDAW%2B6dyG2IfWMy3X%2BAw%2BWYW%2BYPYl%2B%2Fhl4834bcbD1ZoECmkVd%2Bxfbv1nySA2yIQpgpeJK%2BHuUptP0yjwQ5BA%2FZpdUdKK665anMFqkNGR%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:01 GMT Server: cloudflare CF-RAY: 87a8a8314be7334f-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:21 UTC	15	IN	Data Raw: 65 72 72 6f 72 20 63 6f 64 65 3a 20 35 32 32 Data Ascii: error code: 522

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49934	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:42 UTC	805	OUT	HEAD /home HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	836	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DbjR6WbqoUDocQcQEYJAJOPnwHjsJ%2Fd%2BFvzQYCa3OdNMRkBeX9hG7fqwpTT9K6PeMtRFVsOb5eyU74EPRqZaxmR3MoeaLxEmbKYXPI%2Bq%2Fq0veDoa7t15Y2LaU0YoUvA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8342a871277-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49935	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:42 UTC	930	OUT	GET /xxrz/1200x600/793/8c/c0/8cc04d9bb6609db3bf10b294153239fa/8cc04d9bb6609db3bf10b294153239fa.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:42 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:42 GMT Content-Type: image/jpeg Content-Length: 332406 Connection: close Last-Modified: Thu, 09 Nov 2023 03:08:24 GMT Vary: Accept-Encoding ETag: W/"654c4d28-6015f" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6955 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ND8hYJ3UlBnibzPuyHTaJ5cMT6PlMyqtKXxEwRdORxw60V2BrGMRckNgOVbG7rFZb%2FNESE%2F%2BTvR4hJemrf81CFkNaSMPrQxFCIJ%2BlYHAQTHfi%2FRRINftdW2udEuspV9KbLu4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a834285db3c7-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:42 UTC	643	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 09 d2 61 42 c5 20 05 c2 e3 95 d9 1a c6 23 14 66 05 83 83 18 d3 18 2b 60 d3 2a 14 bd 95 3c 9f 36 2f c9 55 4c b6 22 32 79 a3 cb e6 ce ae 87 b0 d9 e9 7b 5b 7f 9a d2 31 fb 17 5e f9 ae 87 05 74 6c 91 cd 4c b2 c7 f1 9b e3 92 d2 36 c1 d3 be b6 30 cb a4 f4 56 92 05 97 ad 94 51 59 93 70 aa 92 b5 27 0f 16 2e 19 cb 1d 49 ae fe 80 cc 73 9c c5 e9 55 5d 28 64 70 8c 9c a4 c7 c5 a1 63 28 d6 0c 6d b0 86 10 cd a9 88 3b a5 ed 3c 1c 3c 94 10 97 33 ed 1b b6 99 91 8a 48 ce d2 5c b0 b6 28 ea 6a c4 ea d7 49 2e 8e a3 7a ad 6f 33 7b b4 23 a8 ec 46 91 6a d4 bc 15 4d f6 66 6a 72 9c 44 b0 c6 ba b2 aa 89 49 26 c0 96 f6 25 74 6a a7 8d 6d 33 9a b9 6b d8 96 6b 5a 2b 2c 1f 02 0e 93 59 04 e2 02 1a 26 7e 08 5a a8 f9 58 ad ab 35 5e bd 12 31 10 f5 b6 16 27 21 3b b4 9e 3e 6c 61 62 12 46 20 df Data Ascii: aB #f+`*<6/UL"2y{[1^tlL60VQYp'.IsU](dpc(m;<<3H\(jI.zo3{#FjMfjrDI&%tjm3kkZ+,Y&~ZX5^1'!;>labF
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 53 87 4d 65 75 51 34 6d 69 ac de 3d 65 d1 9e b2 6e c1 b5 31 ef bd e7 93 f1 64 76 c8 52 ec 1e 67 ac 6d bd 79 9b da 55 18 4a c7 e5 74 51 b2 31 af 2b 67 e9 ed ad a0 fa 0f d3 fc 9f 97 cf 66 4f 42 7d 7d b5 a2 31 92 42 b4 77 33 5a 4c 15 b6 c7 30 ea 9b 2e e0 d7 13 27 e5 a7 34 1e d7 d7 41 dc 6b 79 da 4c ce 77 da 77 62 ac db 66 bd 41 a6 cb 7e 29 ac b7 d6 fa d0 3d 74 b6 7c 63 b8 5c f4 f9 5f 35 72 ad 03 b3 37 5e 58 af 2c 75 67 b3 9c 67 25 af 39 ef 3e 82 d8 f9 9f 44 e4 5e 7a ea de 7e 0f da f5 76 c3 8d af 15 5b ad 61 76 2c 46 a7 2b 1c 77 29 e3 b5 d6 52 d8 ad 80 95 af 63 fa 1b 9d 69 2e 51 a5 da 2b f0 e8 e8 1a ee eb 4a 96 bd a6 0b 88 04 3a c8 1c 20 54 41 72 05 41 18 ce 45 98 cf 41 bb a6 51 08 c5 17 78 94 78 f4 6e 35 73 29 d0 41 74 1d 58 8a 6b a9 0d 4e 1a 38 2f 02 c9 67 Data Ascii: SMeuQ4mi=en1dvRgmyUJtQ1+gfOB}}1Bw3ZL0.'4AkyLwwbfA~)=t\|c\_5r7^X,ugg%9>D^z~v[av,F+w)Rci.Q+J: TArAEAQxxn5s)AtXkN8/g
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 01 87 6f 28 de 7a f6 46 57 13 02 65 30 ac a1 b9 23 82 bc 48 f0 f1 a4 83 cc d2 6f 34 b0 c6 66 61 80 26 21 0c 03 9b 08 b9 40 45 08 84 eb 01 22 61 95 f0 a1 4d 9c ba 53 c5 15 85 d0 3c 0c 17 2a 94 1b 52 1d 27 00 17 6a e5 f0 41 8c 0b 8c 2e 40 0b 85 06 2b 1c 00 1c e0 38 cb f8 b9 d3 5a e4 6c e4 c7 b7 62 60 e5 ef 32 a1 4d 2b 5f 26 e9 95 88 e0 e9 1e 17 b8 74 d1 f5 db b2 a9 dd 5e b4 bb 3e 81 b2 6d eb 67 2d 0e 3d 03 d3 62 39 63 b1 fa 67 45 77 cd 38 af 4a 7a 13 cc da 7b 2d 17 ad 76 2d 41 9b 48 65 6d 12 64 3a 91 b0 e1 b6 61 d4 4a de 5b d8 8d f3 ab 87 4c 69 9e ee f2 2b ff 00 9f 6d 07 dd 9e 7d 78 c7 d2 18 8f 95 8b f3 7b d7 2c 33 79 18 ab 67 54 27 df 54 5e 81 3d c8 3e b0 f2 a0 26 f8 ed 7c dd 1c e3 67 9e af f6 87 11 f6 86 3f e8 0f 40 3b 3b 93 fd 24 c9 62 f5 ef 93 3d 17 e7 Data Ascii: o(zFWe0#Ho4fa&!@E"aMS<*R'jA.@+8Zlb`2M+_&t^>mg-=b9cgEw8Jz{-v-AHemd:aJ[Li+m}x{,3ygT'T^=>&\|g?@;;$b=
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 25 7e 2e e9 8a a0 2f b9 a1 97 52 29 d4 a4 4f 58 e8 56 ab c1 36 4a 7a f4 d7 35 7b 08 52 26 a5 8a c1 7d d5 13 e7 89 b8 63 1b 2d 71 9c 6b 60 aa ee 59 e3 a3 fa 41 e5 c6 eb 80 1e eb d6 ed 74 95 7f 9b ed f9 1d 7b 03 79 9b e8 b9 9d 4d b2 b3 5b 9e a5 b8 69 ab 1f 84 7b 45 9f 7d d1 b6 9e 1b 61 24 e6 ce d7 31 a0 d2 3e 45 fb b1 0f b7 c2 f8 28 fb dd af 90 3d 84 7d 25 35 a1 b7 46 0b db 7b 55 4e 75 9a f3 bd 8f 0c 52 36 fd f8 c5 ea ef a3 ba ab 60 66 68 b4 ef 16 fa 11 a5 7e 7c f4 6d f9 c7 9d ab c0 c4 c3 d7 7e 5f 7a 63 e7 8f 6d fc d7 e9 8e 0f ee bd 57 a2 d9 36 bf 25 3f b9 c6 f5 c6 f8 f3 7f 60 e7 8b ab f4 0d 0b a3 f9 dd e7 b8 b9 1b b2 6a 72 f2 70 f6 65 36 58 6e 6e e3 9e f3 e5 2d 27 aa f1 ee df e5 3d e1 4a 76 c5 2c 56 d5 98 ca 8e e9 e1 27 bf 47 61 28 9c f7 ed 1f 9c 5f 42 e4 Data Ascii: %~./R)OXV6Jz5{R&}c-qk`YAt{yM[i{E}a$1>E(=}%5F{UNuR6`fh~\|m~_zcmW6%?`jrpe6Xnn-'=Jv,V'Ga(_B
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 6d fa 07 c8 ea fa 3b cc 3f 5f 7c 96 f5 dc ab ed b9 a6 6b 86 cd ac 3d 7b d4 1c 07 e0 bb bf 43 b5 03 7b 37 89 7b 7f 45 f1 7f a2 ad f7 e3 f9 c5 a8 7a 5b c9 da 3d 06 c1 52 1e e7 e2 1e e7 0c ab 2b 94 77 b0 75 5d af ce 66 65 76 fa 71 c8 c5 a8 94 46 3e 51 c2 db 37 7f 34 56 f5 f8 6e c8 f4 17 c9 ae 9b f6 4f 17 27 9d de 8a 79 6d a0 c4 f5 df 6f f9 35 ec 8f 93 e9 b5 4e b9 d7 9b 58 78 d0 da 5a 92 03 d0 b4 fd 67 46 e3 0b cf b8 7b 67 7a 76 5f 99 1d f7 4f f3 de b4 d6 3b a7 41 f9 a0 d6 08 c3 6c 9f 5b cf 73 b5 c6 6f 7b 59 fa 9e 8c 8e 82 4f 2a 6c b4 6d ff 00 45 53 dd 6a f8 8e 86 a6 81 dd 2c fa ee c0 63 6e 5a c2 e5 be ea 44 f3 9d 8e e7 a7 65 77 fa b6 bf 61 aa d5 ce ce b3 3f 4f 8c 14 60 dc c4 85 96 98 5a b2 81 15 33 31 a4 2b 98 92 01 87 05 51 b2 48 36 b5 cb 74 8b d0 f2 9e 11 Data Ascii: m;?_\|k={C{7{Ez[=R+wu]fevqF>Q74VnO'ymo5NXxZgF{gzv_O;Al[so{YO*lmESj,cnZDewa?O`Z31+QH6t
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: d3 e4 9f 5f d8 98 ee ea df 4f f5 1a b3 d2 35 7f 71 b3 e2 f4 6c 6a fa ce 45 a7 b1 1e 28 7a 0d 4d 55 db fa 86 e3 a8 fe 53 db cf de b4 c6 eb 8c fe 4d d0 1d 97 cb 58 6f 70 e7 2d 69 b1 f5 af 9b 7b 5d 6a a3 62 ad 0b 5f 0f 4b 96 a6 5d e1 11 b0 c0 de 0e c1 86 13 0c e5 a4 ae b5 73 03 73 56 c2 28 44 17 4c dd aa a8 be 99 22 19 27 d7 9d 9b d6 f2 08 c9 20 91 d4 ae 9b d9 6a 65 0f 8c 24 5e d6 3c 33 40 60 4e c8 d5 52 c4 46 20 cd ab a0 0e 5b 3c 19 92 2a 60 fe 93 4f 95 5d 1c f6 46 26 e0 0e 9b 85 31 2f 71 93 60 ce 27 83 e1 af c9 8a b9 0d c2 a1 5b 48 96 b5 56 57 bb 1d 59 58 29 d9 99 0d 72 ae 5d 08 8a 19 d4 6b f9 ba ab 49 76 e4 26 ea 67 31 b9 e2 e5 71 78 e3 26 ff 00 36 a1 b4 51 da 66 57 a0 8b bc 90 90 61 29 29 d6 d6 55 d9 7b 1a d4 6d 71 b4 67 2c db bc bb 3d cc 6d cf 9f 1e fb Data Ascii: _O5qljE(zMUSMXop-i{]jb_K]ssV(DL"' je$^<3@`NRF [<*`O]F&1/q`'[HVWYX)r]kIv&g1qx&6QfWa))U{mqg,=m
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: bf 55 99 64 d6 f4 fc d1 d4 0a 9b 1e 14 00 e8 d2 4d 74 a3 72 60 a9 c1 22 d8 6c 39 d7 04 4c 71 18 c7 4a 44 be 5b a9 c4 e5 c3 65 2c 39 25 6c a4 b9 b9 86 da 13 94 bb 1a 1e ed 54 93 2d 89 12 19 32 4a b3 d8 f5 f4 f6 b1 6c 6b 06 bd b1 fb 3b 6f 32 95 39 cb be 58 ec d4 d9 ba 28 f6 7e d0 d1 fb 37 1c 16 db cd 8d 1c 58 fb 77 a2 f9 ab 75 f9 55 b6 d8 ba 6b eb bf 96 17 b0 26 62 5f e2 6d 0d e6 1f a5 5c 49 a6 e7 37 6b 1e d6 ab 53 6b b8 da 9b b2 b7 ef a9 79 6f 56 ee 4d 79 ae 3e 6c f6 37 1e 34 fa 69 a1 69 b7 3c b1 e8 7f 22 f4 91 76 17 1f 46 f4 d3 5d c7 96 ee bd 17 bc 39 ac 21 3c f5 f3 e3 b7 f8 f6 c6 fb 99 ec 91 53 ba 5c 1c 99 8a e2 e0 5a 85 4a e5 4d 10 95 2d 34 e9 bb 0b 7f 57 3d 6a f1 af db 0c c5 83 0d cc 75 33 61 f8 05 e5 57 d0 b7 cf 76 aa 0a c7 44 e8 2b 61 d5 5f 47 7a ce Data Ascii: UdMtr`"l9LqJD[e,9%lT-2Jlk;o29X(~7XwuUk&b_m\I7kSkyoVMy>l74ii<"vF]9!<S\ZJM-4W=ju3aWvD+a_Gz
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 3b 52 7e 50 ed ea 0f eb 2b 8b 38 89 7e 43 df d8 6a 6b 9f 63 ea 17 bd 7f 25 3f 47 d8 9d 77 5a d3 af b1 35 34 de 46 eb 79 c8 bf 39 f6 0f 42 fa cb 9f 77 d6 f7 cb 9b 39 95 75 7f 9d 8a 7a fc b0 31 47 2d a0 22 4a f3 63 6f 33 8c d6 f6 c7 3a 70 f6 a6 cf fa 07 52 68 1a 53 dc d7 a5 74 b5 57 5c 97 17 ed 35 ab 71 25 0e a4 bc e9 4b 1d 4c 0d 46 a7 a9 d9 6a 5b 1f 12 63 1e b3 6b 5c 6b 52 2a 0d cd b6 2b 84 27 a8 45 9b 86 52 d1 e5 2c a6 fa 1c 14 11 e2 61 b2 ad e6 84 b8 c1 64 83 2b 36 52 4e 61 30 38 8c 0a 12 ce 01 39 d3 e4 a6 7a 06 ce 24 8c 60 e4 73 0a e5 ba cd 73 f2 14 ba ca 85 4e 83 92 78 ab a4 01 b1 39 cb 72 3d 28 82 65 8d c6 4b 29 c6 f5 72 8e 4f 72 c5 2b 9b 16 a0 65 53 7a ca 47 55 3d bb 94 9c c2 d8 d5 0a 4a d9 9c 65 13 33 8b aa d5 57 c6 ba 8d 8c f5 67 85 0f ae 44 82 51 Data Ascii: ;R~P+8~Cjkc%?GwZ54Fy9Bw9uz1G-"Jco3:pRhStW\5q%KLFj[ck\kR*+'ER,ad+6RNa089z$`ssNx9r=(eK)rOr+eSzGU=Je3WgDQ
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 6e 6b 0d 95 85 8a a4 5d 53 ec 26 fa 80 d7 f0 c4 79 9d e9 ef 8e 27 5f 73 75 1d 5a fc 13 34 82 75 09 8f 2d 26 c8 b3 ab 95 74 9b 27 0b e4 1c c4 3b 99 b2 c1 a2 e4 b4 37 5f 04 36 25 07 ac c8 23 d6 7d fb e6 27 a4 7e 5b ef 9c 91 de 7a e6 db 33 3b bf 62 70 7f 67 5a e0 74 16 b2 5e a1 f6 ef c6 d3 88 42 32 b0 c7 0e 2c eb 4e 4d f1 cf 4c e7 79 5a c4 7f 8c 7d 1a fe 23 06 71 66 ae b5 60 11 d3 af a9 ce 46 b4 dc f5 83 d4 f2 fe b4 d2 b1 96 7a 2f 22 5d 16 04 2a a9 e2 09 95 0e a1 12 4d d0 28 96 13 6d 76 51 09 c6 31 53 c9 5d c0 01 7a 8d 8c 63 bd 30 2e 12 50 24 39 c5 42 63 bd 50 10 75 1c 14 71 18 19 67 71 b9 0f 88 fb 83 00 f4 1d 34 75 d4 98 c1 6c 80 54 26 6e a3 e7 07 9a 32 1c 61 fc 59 44 0f 63 c3 99 25 2d dc 64 cc 9f 24 c9 70 4a 96 9f 18 10 b0 c1 3c b1 a6 28 1c ee 40 cc bd c6 Data Ascii: nk]S&y'_suZ4u-&t';7_6%#}'~[z3;bpgZt^B2,NMLyZ}#qf`Fz/"]*M(mvQ1S]zc0.P$9BcPuqgq4ulT&n2aYDc%-d$pJ<(@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49938	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:42 UTC	900	OUT	GET /ajax/banner/vpn HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"10-UiecVLFvCojUPVe0y7mBPqPMOas"
2024-04-26 18:32:43 UTC	916	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:32:43 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"10-UiecVLFvCojUPVe0y7mBPqPMOas" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V1D1Awyy5%2BkL732SjNx%2FBn%2BLPzzOFr%2Frq3HGJv2FSqjxJy7qVzR5UKqkHa%2BYluQWeUKekwUrUDcBiSX3FP68r6CA7K2p4SGO%2FGDGoG2KGIW%2Btze60YtO0bY8wzU5VZA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8343e073dd7-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49931	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:42 UTC	856	OUT	GET /ajax/banners?page=home HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: application/json; charset=utf-8 Content-Length: 60 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"3c-DFz73KHXVYZHM3DcVRSxkH+OTqg" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GB9zQ03KAzEoRJ9RDFJa%2Fn4QxKsT%2F5GXB5aFCwAX2SSwx1otQ8r87C0hH3UgZ%2BHR2WChbpbtFKl735CCbG32Kb4fAt3HZMw%2BKw4myubp3HGd0Nu1CD3Q37GvNSzaME4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8342e7a21eb-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 62 61 6e 6e 65 72 73 22 3a 7b 22 74 6f 70 22 3a 22 22 2c 22 6d 69 64 64 6c 65 22 3a 22 22 2c 22 62 6f 74 74 6f 6d 22 3a 22 22 7d 7d Data Ascii: {"status":true,"banners":{"top":"","middle":"","bottom":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49936	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:42 UTC	929	OUT	GET /xxrz/250x400/793/36/81/368175f08c3494fbab5bca96d16a83c5/368175f08c3494fbab5bca96d16a83c5.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:42 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:42 GMT Content-Type: image/jpeg Content-Length: 90397 Connection: close Last-Modified: Thu, 09 Nov 2023 03:08:24 GMT Vary: Accept-Encoding ETag: W/"654c4d28-10e362" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6955 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OfLXzipSB3BDvJvRF2n7HY7QCEPJJ4dhycJ9c%2FbfGXsUGSS11%2BR15WCDDwzk1p9GdVajs89S0GKF175k47K5DFBt1ru747OWhk87nR7g%2FZyLW7WMh3nlU6jlLT52VmerpZ9K"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8343d0e7475-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:42 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 93 50 01 6c f2 af ad b1 52 e5 35 4a ac 92 41 7e 0b d6 d5 b6 47 8b 59 79 0a 91 45 e1 0b 02 aa 39 38 27 cb d9 2d b4 12 58 ab 69 e7 67 8f 08 47 79 0c 2c 12 c1 1a 9d 25 47 32 b8 c4 0e 13 78 6e e7 a7 d9 0b 84 f3 34 f0 f0 7c 8e cc 7d 26 21 35 16 54 d6 82 b9 6b 54 dc b3 58 f5 0f 13 b1 44 84 02 db 98 a0 a3 84 25 50 ac 9a 11 0e 53 c0 4b 82 85 57 b4 b8 23 6c a9 57 5d b2 99 06 f5 30 09 6e e7 6a 85 af d4 68 c5 30 30 ec 9a 13 da ea 76 49 2a 29 e2 60 d6 16 c4 0e 19 90 78 7a 06 89 35 16 9b 2b b8 dc ba 1a 72 25 b7 cd 37 08 55 fc 57 96 f7 f7 2c 80 e2 fc dd a8 b6 da 88 7a bc cd 54 57 0e ea 71 8c 8b 62 dc 79 57 dd bc b4 6f 61 3b 25 2c 6c 91 ab 8c 32 72 b3 ad 3a 1f 59 9c 7e 25 8e 76 61 d3 6a 52 b0 e2 d7 a2 c4 fb 5e 6e 11 43 d2 4c 68 e7 3e ac b1 58 5c 79 7c 8f 2a c6 aa 9b 19 Data Ascii: PlR5JA~GYyE98'-XigGy,%G2xn4\|}&!5TkTXD%PSKW#lW]0njh00vI)`xz5+r%7UW,zTWqbyWoa;%,l2r:Y~%vajR^nCLh>X\y\|
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: ce 9e 15 2d d3 86 36 de 00 ae 7f 92 63 16 ad 7e 94 f9 f7 67 3e 0d d5 0c 45 54 77 90 5b 35 c5 c2 0c 29 d1 80 b8 2c 64 0c d3 dc a2 86 b0 65 2f 8f e3 51 6c 9f 95 14 a7 ca f4 c7 99 9a 3a cf 57 f5 c0 b6 c2 d1 01 8d 5f 52 ac b8 78 04 77 86 cd 1b 1e 44 f4 7d 7e a7 4e 7d a6 56 61 1b 86 61 ac 6e 09 0f 17 ac 7e 0e 8a 98 c0 e4 97 a4 ec e3 d5 58 fe 7e c7 c6 d0 31 d3 d1 a5 07 c3 6c f3 7b 07 89 42 c3 4f 66 13 d8 a7 25 b1 04 66 31 51 04 f6 53 10 88 cf 4b 6f 68 24 39 12 d5 4a 25 12 5a 84 91 33 9c f2 20 79 20 1d 52 1a f2 50 06 55 9a a3 38 5d d0 61 a2 ba f1 6a 5a 2a 14 7f 38 a5 d0 94 68 99 c9 34 7d e8 45 f8 16 5a c1 46 7f 55 4c 82 a7 c1 51 0b 17 dd f9 8c fd 21 ee 9a cb 6c c9 31 61 d4 28 fa 3d 9a 8c 89 64 22 8e 93 28 7b 73 53 15 94 6d e9 c1 d2 36 82 24 08 7e 69 e1 83 55 fe Data Ascii: -6c~g>ETw[5),de/Ql:W_RxwD}~N}Vaan~X~1l{BOf%f1QSKoh$9J%Z3 y RPU8]ajZ*8h4}EZFULQ!l1a(=d"({sSm6$~iU
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 51 35 d4 eb c7 1b 2c 4c 6c f3 fe 4b 41 af 7a d3 45 ad 71 19 a0 d4 a8 27 72 a4 3f 6d 6d 66 af 36 e2 d6 46 c1 af 68 70 37 ad c9 db 4d 94 3d 6b 6a 9e 29 7a 6e d1 af c3 e3 fe 4a 1c 14 d9 2f e7 d1 58 ec 57 76 97 8e 98 07 37 27 0f c8 95 b1 fc 1b 15 81 cb 53 b2 79 05 59 da 7e 3d b8 95 ae c8 f1 09 dd 28 00 69 17 ab 52 a8 ef 12 e3 43 f6 31 39 32 2c 27 48 24 ed 72 c2 ae 6e 96 08 9a dc 43 d8 12 73 f6 4e 40 fe 4a ad 20 dd 63 c5 36 03 91 12 ba 93 bc a3 af 48 89 b9 83 e6 03 68 8f 17 4b d4 36 7d be fa da 55 79 8a eb 1e 3c e4 2a db 30 d9 72 25 26 c0 7b e1 7e 06 f3 5e 9a 5d c7 5c b8 ab f8 0a b5 33 ac 56 25 5b 14 d5 f5 17 33 a6 ef 5a 44 ea 07 82 3a f7 12 b4 8f 70 f4 39 e4 64 72 99 f8 28 a9 92 d3 d4 f8 7f 22 4c 48 75 c7 22 12 1a 8d 43 17 22 83 fb 27 aa fa b2 da c6 39 64 5c Data Ascii: Q5,LlKAzEq'r?mmf6Fhp7M=kj)znJ/XWv7'SyY~=(iRC192,'H$rnCsN@J c6HhK6}Uy<*0r%&{~^]\3V%[3ZD:p9dr("LHu"C"'9d\
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 0d ec aa d8 39 46 ca 18 cd e4 4d 96 44 9c d5 47 a7 ed 9a a6 9f 5f 4f a9 6e fb 95 53 01 86 05 68 41 ac df 6a 77 91 b6 79 ad 42 5b c0 ff 00 6c a8 ad 61 e5 77 e3 65 a7 6c 41 a3 91 11 44 92 fb f6 e4 68 4f 55 8f 55 25 ad 18 fd 6b 57 3c 83 69 f5 47 dc 87 8a 52 cf 5e da a0 72 b6 bb 0c b7 7b e4 48 da f5 ef 20 6d 53 cd bf 58 6f 1e da bb 66 54 4a dd 36 8d ae fd 78 bf 52 b3 9a ed ee b2 b8 fa dd ce ed 3e 74 cd be fe 74 19 05 9f 2a c2 d8 7e 02 ae ac 8d 0e e2 74 72 71 ec 69 7a 4c ba 7b 2d 87 65 8a 21 c0 ae af a9 ba db f6 5a 7d 1b 47 24 e9 9f 3c 77 40 22 36 46 9a 1a f0 48 9b a7 d6 a5 9d d9 4d 0c ef 5c 31 33 b5 ca a2 35 ca e9 72 48 c6 c1 32 64 28 a8 34 64 d2 47 34 3b 5a fd 92 3e ed ad dd 50 64 9d eb 62 b2 89 c7 b6 9f 06 f5 cb fc d2 c2 82 8e 14 ab 7d cf 5e d2 4b a1 f0 dc Data Ascii: 9FMDG_OnShAjwyB[lawelADhOUU%kW<iGR^r{H mSXofTJ6xR>tt*~trqizL{-e!Z}G$<w@"6FHM\135rH2d(4dG4;Z>Pdb}^K
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 9f 3e 59 57 c9 dd e3 46 e6 64 d1 b6 6f 1f 34 4d 6e 35 88 89 e0 a9 94 da e5 f5 f6 0f 8e b7 94 70 f5 3d 9f e6 54 4d 90 29 b1 e1 db 06 6f f1 ad 97 cd e5 99 57 3c 33 e4 e4 a1 fb 4b 57 4c 69 ae 1c 3e dd ea f4 3a 0e b9 b2 a8 ab 23 5a 0e 5d b3 e6 38 e2 b2 9d 2a a2 75 66 d2 58 b2 2a 36 78 44 b0 59 55 26 4d 7a ce ce ba 54 28 cd 55 72 22 cd 27 fb 06 be 31 a5 4a 7b 9e 57 79 3b 23 ff 00 b0 34 92 dd 27 5c 58 8e 54 1c 75 c7 c4 8c 26 50 f2 1e dd a2 c6 e6 7e 47 dc b5 2a 1e 02 b3 95 b2 ee 35 1f a7 fe 4a 84 96 a3 eb f5 0d 2a 0f 3a 7e 4b 74 5b 68 db 5f 09 8c 13 77 8d eb 87 de 92 74 9e 39 aa d4 aa f5 fa f1 0e 9b 60 ae 0b e8 77 5d a6 f7 59 d4 0d 73 77 6d c7 3c b6 38 96 94 3b 3c b9 3c 51 c4 fb c4 4e 4c 90 6b 28 7c a3 1b 6e da cf a9 47 fd 40 ec d2 74 dd 86 cb 71 d2 57 5b 81 e8 Data Ascii: >YWFdo4Mn5p=TM)oW<3KWLi>:#Z]8ufX6xDYU&MzT(Ur"'1J{Wy;#4'\XTu&P~G5J:~Kt[h_wt9`w]Yswm<8;<<QNLk(\|nG@tqW[
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: 89 95 b2 e1 ab dc f8 c4 61 36 a5 af 8e 7d 90 8f c7 d9 b6 40 a3 d8 2b b0 56 ce 63 03 66 a5 50 5c 49 84 b3 77 42 4c a0 27 c9 8e b0 e6 3f 34 9d c2 54 4a 79 db 54 97 ab b6 f9 c4 43 dd cc 92 d2 4b 2a ab c8 5c 8e 56 89 ab b3 8b e2 4d b1 52 3b c5 c7 cb 16 49 f8 e9 d0 dc f9 0e 76 79 aa e7 78 09 0f 03 86 d7 3d 14 88 dc 67 8a e3 ba 2e 41 3b 46 e9 16 3e ac 53 fb 9e 57 89 5c 23 a3 5a e3 fd 8e 42 ae 0e 4e 47 94 f7 ba 69 7a 86 e4 8e e1 ac 57 09 6b 25 92 33 9d 2b 3d cb 8d 9a dc 2c 9e d0 d6 26 66 16 67 68 cf 90 e5 60 25 ae 10 e4 ec 31 5e 77 cb 84 10 63 dc ce fb ce ff 00 60 98 83 7b a2 a9 51 be d1 61 4a 7f 16 48 23 51 cb e4 bd 67 8f 58 8c 5c 46 26 09 8c c1 b7 c7 00 36 2b a4 4f fb 14 d7 39 eb 31 a8 ef 93 f4 22 13 b4 7a b9 3d 66 72 bc 04 62 b9 48 8d 37 f6 54 8e 31 35 21 bd Data Ascii: a6}@+VcfP\IwBL'?4TJyTCK*\VMR;Ivyx=g.A;F>SW\#ZBNGizWk%3+=,&fgh`%1^wc`{QaJH#QgX\F&6+O91"z=frbH7T15!
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: fc 08 65 20 33 c9 f1 6e 3b b1 f9 7d 09 f3 c4 9a bd 16 0e 56 a1 2e a2 e6 e6 d6 f4 f5 f3 f2 f9 71 59 cd 52 36 bb 4f a5 2c 55 2f d6 cd d9 a3 86 43 16 1d 27 78 c3 c8 ca b1 87 76 8d d5 51 64 12 64 a0 90 57 66 d0 f9 72 2d 6c a0 d4 29 0d 49 ea c5 32 c0 55 55 a2 78 8c 73 c4 b2 77 1c 4c 2c 15 f2 d8 fc 27 8d 17 49 30 46 01 1e 40 3e 49 00 58 6e 0f 8b 7e bf 53 c6 b5 a7 d3 cf a0 54 24 cd 94 33 f4 26 86 48 71 90 37 b2 ba d7 97 43 dd 1b 63 0d 34 92 2f c5 72 06 17 72 97 71 cb 9a 8d 57 de 0d 15 4d 3d 41 8e 28 d6 27 9d de 9e a1 a1 b6 0f 27 ba 5e 94 cd 6d d8 48 8e d6 5b 80 cc d6 fb 3f d4 a4 a3 5a 89 1e 46 91 21 7e a7 fd 00 2b dc 9b 6c 40 38 1b f9 01 6e c4 8b 91 cf 1c eb d7 d3 6b e8 a3 93 6a 94 64 c4 1f df 6b b7 ea 77 66 3f e7 7e 39 7f 9e 65 d2 39 29 74 64 3e f6 a2 49 f0 b8 Data Ascii: e 3n;}V.qYR6O,U/C'xvQddWfr-l)I2UUxswL,'I0F@>IXn~ST$3&Hq7Cc4/rrqWM=A(''^mH[?ZF!~+l@8nkjdkwf?~9e9)td>I
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: cd 1c 65 2c 61 96 20 c4 48 f1 a0 fb 44 2b 4d 52 29 c1 9a 49 42 fb c9 cc 8e 49 f3 da 37 60 4f cd 57 15 00 0f 5b e5 56 e5 a4 b0 56 db 72 42 33 ee 7e 7d 9e 78 99 2a b4 d6 5a 9e af 48 b4 9d 38 f2 2a 0d 40 c3 ba 23 92 89 02 04 4b e3 6e e0 0d c0 1b 9e 5f e7 3d 11 24 a7 1c c3 4d 53 68 a9 f0 14 74 6d 4a d4 d2 55 89 50 13 1b e1 4e 0f b4 ac d0 cf 94 d9 1a 78 ae 86 47 58 c0 1f 67 ff 00 6b 7c 9d cc 54 d0 c1 a5 55 b5 13 ab cd 49 3e 9d a8 54 41 2d 4a c9 0c 77 67 5c 72 49 00 60 dd 4c 1f bb 02 43 fc 24 fd b7 f3 ba 51 69 92 c7 41 50 1a 5a 97 14 b1 35 2d 89 0f 3b 88 13 13 90 b3 33 3d ae 1a ca b9 39 b0 5b f1 cb fc 81 16 ba b2 55 4a 56 b2 b8 ff 00 88 ab 62 c4 22 a4 ee ca 9b b1 59 8c 8f d3 66 56 53 98 4c 43 d9 4a 0e 17 ec ef 4b a3 02 39 68 95 24 21 40 66 52 76 b2 9b f7 5e f7 Data Ascii: e,a HD+MR)IBI7`OW[VVrB3~}xZH8@#Kn_=$MShtmJUPNxGXgk\|TUI>TA-Jwg\rI`LC$QiAPZ5-;3=9[UJVb"YfVSLCJK9h$!@fRv^
2024-04-26 18:32:42 UTC	1369	IN	Data Raw: dc 6b 7f 68 54 5a 76 94 d0 0d 4c 47 4b a6 e3 4f 52 90 8c a4 3d ed 0d 3c 18 38 ce 45 c6 35 f7 89 60 e0 e3 28 60 09 3c f3 f6 e9 cd 55 91 8a 5d 29 fd 92 3a 9b 28 32 a2 cb 68 8d 86 f0 0b ac f2 c9 db 8b 4e 92 b4 5b 84 3d d6 1c a2 fc c3 ab 69 32 54 f3 14 f1 ea 4b 5a ab 14 92 6a 55 06 9e 78 16 c1 96 55 ce 17 45 48 55 43 b2 2b ad 94 27 50 02 36 e5 ba 58 79 5b 53 d2 24 86 6f 69 15 1e d2 81 d2 41 34 53 cd 94 7d 1c 3b 88 12 46 1b 6c 7d da ab 30 5f 0d c7 35 57 ea 6d 84 73 cd 0c 74 91 cf 56 e1 73 70 f1 27 5a 59 44 b2 af 45 95 54 b2 bc 81 3a ce cf 0a 64 25 07 71 cd fc d5 47 a3 f2 53 a2 54 a4 4d 35 27 bb 68 a6 91 ee 92 66 eb b3 28 31 5b 33 8a 29 60 32 c1 b1 c4 e5 5f 5b 53 a8 ea 95 15 51 8e bb 99 5d 72 f7 77 40 2f da 52 ec d1 1b fa 32 a9 16 f0 38 d1 de aa 45 4c 82 c5 65 Data Ascii: khTZvLGKOR=<8E5`(`<U]):(2hN[=i2TKZjUxUEHUC+'P6Xy[S$oiA4S};Fl}0_5WmstVsp'ZYDET:d%qGSTM5'hf(1[3)`2_[SQ]rw@/R28ELe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49933	3.16.63.45	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:42 UTC	1574	OUT	GET /pview?event=pview&hostname=1movieshd.cc&location=%2Fhome&product=inline-share-buttons&url=https%3A%2F%2F1movieshd.cc%2Fhome&source=platform&fcmp=false&fcmpv2=false&has_segmentio=false&title=%231Movies%20%7C%20Watch%20Free%20Streaming%20Movies%20and%20TV%20Series%20Online&cms=unknown&publisher=6433be364f61b7001240a339&sop=true&version=st_sop.js&lang=en&fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA&description=1Movies%20Watch%20Movies%20online%20for%20free%2C%20Streaming%20movies%20on%201Movies.to.%201Movies%20is%20the%20biggest%20website%20for%20free%20movies.&ua=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&ua_mobile=false&ua_platform=Windows&ua_full_version_list=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&ua_platform_version=10.0.0&uuid=8ece4e5a-532b-417d-9652-9a207998f147 HTTP/1.1 Host: l.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:43 UTC	512	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Expose-Headers: stid Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain; charset=utf-8 Date: Fri, 26 Apr 2024 18:32:42 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 67 Connection: Close
2024-04-26 18:32:43 UTC	67	IN	Data Raw: 7b 22 6c 6f 74 61 6d 65 22 3a 22 74 72 75 65 22 2c 22 73 74 61 74 75 73 22 3a 22 74 72 75 65 22 2c 22 73 74 69 64 22 3a 22 5a 47 6b 41 43 57 59 72 38 7a 4d 41 41 41 41 49 41 39 38 59 41 77 3d 3d 22 7d Data Ascii: {"lotame":"true","status":"true","stid":"ZGkACWYr8zMAAAAIA98YAw=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49937	35.201.76.231	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:42 UTC	786	OUT	GET /c/4484296/1834392/15871?level=1&brwsr=5da1bd65-03fb-11ef-b9be-d714cca5c7b2&brwsrsig=Tq8VRj1EoTh%3AWggV4L00Kw8oxhzW5K HTTP/1.1 Host: bitpanda.pxf.io Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:43 UTC	1052	IN	HTTP/1.1 301 Moved Permanently Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Fri, 26 Apr 2024 18:32:43 GMT P3P: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT" Timing-Allow-Origin: * Set-Cookie: brwsr=5da1bd65-03fb-11ef-b9be-d714cca5c7b2; Domain=.pxf.io; Path=/; Secure; Max-Age=62208000; Expires=Thu, 16 Apr 2026 18:32:43 GMT; HttpOnly; SameSite=None Set-Cookie: irld=LxDUQzURbHR2J0py2yySx8z8I0DlQniz14xEc2g80SP0Nc2eN; Path=/; Secure; Max-Age=15552000; Expires=Wed, 23 Oct 2024 18:32:43 GMT; HttpOnly; SameSite=None Location: https://www.bitpanda.com/de/preise/bitcoin-btc?irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0&utm_source=Impact&utm_medium=Affiliates&utm_campaign=4484296&utm_content=Copy%20of%20Bitcoin%20Price%20Page_CH_2&utm_term=e2&ref=615250356669422741&tag=affiliates&subid1=&irgwc=1 Content-Length: 0 Date: Fri, 26 Apr 2024 18:32:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49939	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	708	OUT	GET /ajax/verify?domain=1movieshd.cc HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"f-NQVRlQfKHCoInEbhALgECMonhCE"
2024-04-26 18:32:43 UTC	909	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:32:43 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"f-NQVRlQfKHCoInEbhALgECMonhCE" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RV8%2ByELz5mKj4VkzYbqvmCaWWYnV2K1fOYgY2%2BeMD04IJW4hHBoqz%2BI1HjfB9Y0nX2vgBf4bktTbChJ57owamhZsNC8b6M575FjzNzlssMIfDIsnl16C0m%2BNibh1W38%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a836e8a48dde-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49941	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	698	OUT	GET /xxrz/250x400/793/c3/69/c3697f53f903ddeb948f34cd439edbc9/c3697f53f903ddeb948f34cd439edbc9.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	727	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: image/jpeg Content-Length: 95345 Connection: close Last-Modified: Sun, 04 Feb 2024 15:33:44 GMT Vary: Accept-Encoding ETag: W/"65bfae58-15492" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z5LNz7f8wlfAg04M%2FfOkV1payTj5FJTtw7wWSg5O087gen887GMwPKbekTEUSsQ57zpiJn7VeTdIrGSqw5pkk%2BMgtgJTplsJKl9Z%2Blr%2BOHjoYk%2FdWX%2BhNc7TDNUT0aFP6Qkg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a836ef8fa533-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	642	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 7b e9 d3 da 9a c3 c8 4b ce af f7 f5 8a 3b 76 87 eb e3 e9 e4 29 01 fd a0 5f f8 8a d7 3b c0 95 c1 14 d9 8a 9f d2 2e 44 39 47 45 b0 6c 62 de 73 1b 8c 69 55 26 6a 83 0a 37 ca e5 a7 a2 3c f3 ec fa c7 60 7d 7b 03 dc 41 e6 49 c1 89 21 d7 b4 29 52 02 66 38 63 b5 ff 00 7e 65 fd 40 be 2b ac bc 36 54 62 35 0f 56 b8 76 e1 2c 57 a1 21 32 3b ed 52 90 6e 43 7d 70 91 a4 68 2f 24 f6 fe 6d f4 2a 9b bb 92 17 f9 01 6d a8 a9 e7 00 3b 76 85 05 47 9d ac 32 1a cf 5d 32 ed a4 fa f0 74 af d3 34 c0 c5 d7 c6 a1 d6 60 bf 4d 96 cb 8e 21 3f e6 c7 f4 71 58 be ab 8f e7 dd 98 52 8a 37 08 3d 7e 89 f1 9c 5d 66 92 a5 45 a6 98 b7 85 9e c1 0c 0e ea 4f 53 ec 80 e7 49 21 73 7c af 92 25 0c 4a 1f 34 c8 ed 5b 5f 58 b5 92 ba 23 ea 83 d2 8c f4 aa 81 e9 05 26 ec 54 44 e2 43 fa 56 a3 21 34 3b 0f 93 a0 Data Ascii: {K;v)_;.D9GElbsiU&j7<`}{AI!)Rf8c~e@+6Tb5Vv,W!2;RnC}ph/$m*m;vG2]2t4`M!?qXR7=~]fEOSI!s\|%J4[_X#&TDCV!4;
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 65 e1 47 aa 9b b6 2a a5 c5 57 db aa ec a5 30 a9 b8 9a 23 24 98 5b a9 c3 36 3b b5 a4 cb 30 80 cd 04 ff 00 c1 b3 d5 4a ec 96 20 9e 34 90 bb cf f6 21 5a d6 92 9a 6b 6b 4c c3 58 5e 4e d0 7b 75 94 cc a2 d8 9f 87 21 6a 5b e8 ac 4d 33 73 1e a4 ad 8c 80 93 bd a2 0e 92 7c a6 47 4a 21 2d 25 b0 a3 5e b1 5c 39 b4 10 d4 0d 17 59 b8 f5 df 3e 0d 85 0c 7d 2d e4 7d f3 52 43 56 67 ca 53 1f 1b 76 85 d9 68 34 2d 97 51 55 59 41 09 45 5b 25 4e f0 79 50 5a 44 73 8d 72 b8 8a 85 9d 3d 40 a6 01 35 a1 ed 67 2e 7b 9f fd 0b 62 b1 c3 e3 9e 06 d8 dd c0 15 ee ae 11 5a 35 e2 e7 4e fe ab 52 cd 5d 90 4a 42 6d 65 3c b7 53 77 05 9d 37 5a 9a 2b ec 5f 38 aa 39 33 d1 5d 52 68 ba 2c 0a 98 27 c7 51 18 51 c6 d7 ae 53 8d 13 11 b2 6a c4 80 1a df 9a 3b 58 e0 d5 bf 50 0d c1 39 d4 72 5d e8 86 1d 32 18 Data Ascii: eG*W0#$[6;0J 4!ZkkLX^N{u!j[M3s\|GJ!-%^\9Y>}-}RCVgSvh4-QUYAE[%NyPZDsr=@5g.{bZ5NR]JBme<Sw7Z+_893]Rh,'QQSj;XP9r]2
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 87 bf a0 80 03 98 ff 00 17 e6 ab 96 06 e9 6b dc 4c 12 2b 5c ee 22 c5 ae df 69 a2 73 75 1a 31 c2 f5 b4 fb ca 5a a6 41 c8 d9 01 87 ac b9 a3 b8 52 40 47 37 e0 cb 46 4f 3f e3 a3 16 e1 64 72 cb 9f af 49 8d b8 07 e7 83 2f e8 82 8c fb 07 47 04 71 c2 78 4e ad 22 1e ca b4 00 28 41 69 2b ff 00 ea 3d 8e f6 7c 71 9d d5 a8 5f 4f 37 30 17 c6 11 ad ee fd 60 7d e4 c5 27 63 1e be d8 f7 81 2b b3 e2 0e f3 09 8e 36 46 3a b5 ae 88 f1 1c 09 58 0a 45 e3 5e 2c cd d5 a4 03 ea a0 fa 75 55 76 6b 59 af 22 1c ae f5 96 12 50 6a b0 69 9c 8b eb 95 f7 95 08 f8 9d 41 06 c7 26 50 65 04 65 50 68 18 0c eb 42 17 c5 3b 28 1f ad 15 8e f3 d4 86 84 0d 4e 0f cf 39 ff 00 94 34 56 14 12 c3 2a 4d 1e 66 b5 23 ba 0c 62 ba 44 44 47 7f 88 b8 22 24 6a 51 e2 1e ba 95 ee 61 37 6a ef 48 20 8b 0d a4 7f df 2f Data Ascii: kL+\"isu1ZAR@G7FO?drI/GqxN"(Ai+=\|q_O70`}'c+6F:XE^,uUvkY"PjiA&PeePhB;(N94V*Mf#bDDG"$jQa7jH /
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: e8 0d 9f 4b c3 39 b1 43 c8 f3 2d f2 ba 94 33 6c 29 ec 1e 44 d6 05 f1 73 ea 7e 39 5a 9b 62 22 1a cc 7a c9 ea 6d 4c 4e 8c e5 fd 59 70 8b 78 20 b0 97 4c fb 12 f0 54 83 d6 f2 4f cd f5 c7 6c 32 5b 97 4e 15 97 af e3 fa 65 b6 a7 9a f3 3e 21 09 34 16 46 ad 91 11 a2 77 a2 3d 4f 0b 49 62 9e df 07 fb 3d c1 b7 a1 da d9 11 55 5e a5 d9 cf 35 3c 6e ec f9 db eb 93 33 76 76 7d c3 68 98 64 90 30 8b cb aa 80 a1 a6 a4 e6 82 bd 12 35 9e 6f a7 8f e5 5b 55 5c 17 49 24 16 d0 9c c7 c8 e8 1b 5e 53 9e 23 64 f2 6d 15 59 a7 f5 92 06 1a 38 72 c2 ab 6f 6d 4b 6c 23 53 db 3e 62 29 93 b2 e9 6b c7 1e 6a b8 1a 5b f9 76 a8 9c cd ab 5c ac 71 0d 48 ba a4 36 40 8c 96 67 91 2f ff 00 9f ae eb 0b 52 05 96 73 ea 18 fa 98 d7 c5 ae fd e1 86 27 43 d5 81 cc 0a bf 85 ab 21 3f 65 34 88 d8 b9 ce 7f 2b 08 Data Ascii: K9C-3l)Ds~9Zb"zmLNYpx LTOl2[Ne>!4Fw=OIb=U^5<n3vv}hd05o[U\I$^S#dmY8romKl#S>b)kj[v\qH6@g/Rs'C!?e4+
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: be 3d d5 22 ea bb 45 73 50 39 a5 92 71 5e 0d 54 ac d5 e8 29 07 fe 23 ed 91 5d c8 db 55 5a cd 0d bd 2b 3f 88 9b 36 75 fc 4c dd 22 89 aa d1 54 9a ee 4c dd a3 9d c9 9b 9e 9d c9 7b 9e a6 91 f2 c8 bf e8 de 9b d2 37 f0 8b d3 53 bf 5f 8e 9a ff 00 24 45 eb cf f0 c7 35 15 25 6f 6f 35 45 6b 91 11 ce ea 9e ac fb c3 73 5c 37 55 70 2e 9f 8a 1d 54 8a e4 45 47 be 34 57 fe 1a ab df cb c9 7c bb 2c b2 f9 2b 9d e3 d7 b3 bf 4f 5e dd 2c 89 d9 ee ee 8f 5f d9 cb fe 8e 16 48 df 5a 02 15 37 db 0e ec 44 6b 1b d8 e9 db d0 5c 6a 1d 85 71 7c 48 38 dd 7f 0b ba 07 85 87 32 22 38 58 71 a1 fe 12 79 a8 3c 27 09 2f 6f 02 41 e2 bc 28 cf 2d 2d 24 78 a8 38 d7 f9 95 5c 90 17 a1 6b 38 f2 1d a8 50 f0 24 13 c6 6f 04 8e 34 6b c3 8d 67 41 f0 c4 04 2c bc 1d 04 4c 93 8a d3 bc 3c 4f 0c d3 2f 0b 43 ee Data Ascii: ="EsP9q^T)#]UZ+?6uL"TL{7S_$E5%oo5Eks\7Up.TEG4W\|,+O^,_HZ7Dk\jq\|H82"8Xqy<'/oA(--$x8\k8P$o4kgA,L<O/C
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 1a 91 16 95 8c fd d5 cb 34 79 80 7d 8f b4 09 41 3b c9 be 4a be 2b 2f 9f b7 30 17 c9 93 ab d0 be 9e 6d 60 ea 59 8d 8d 21 4d 38 5d a1 ee a8 b5 40 a0 21 c4 54 f5 36 1c 8b 45 13 ad 78 fa 66 c1 d4 17 61 64 44 bf d9 fd 55 f1 ef b4 3b 2b ab 5e 32 e6 fa 20 5f ab 0b 41 2e 33 7b 77 5d 3d 31 ca 13 b9 2a 66 85 a0 c5 7c b8 74 db ab 87 68 f5 2e 81 93 b0 f8 54 62 f3 c1 7c f3 3a d3 05 f1 67 1d 1e e9 c6 0d 80 c1 7e 17 b4 2e a3 8a c5 ec d2 57 ab 0b ac 15 2b 85 ed e0 ed 08 1f 2c 1c b8 3e b8 3b 7b 3a 2a 28 ca 8e a6 a9 ee b6 6f e5 b2 b7 bc 58 e7 43 7d 47 c7 b4 32 0d 90 e4 7b 3f a8 90 1d 64 1b 3b 42 f1 4b 19 1c 7f 1e a6 ad dc b8 04 06 28 b6 e5 4e 20 e6 49 ac 03 95 02 78 82 a1 9f 66 e1 2a 87 68 b0 f6 58 d3 52 0f 94 74 20 fc 10 bc 5a ae b5 13 ea 22 66 01 57 4d fd d1 c8 89 d3 a9 Data Ascii: 4y}A;J+/0m`Y!M8]@!T6ExfadDU;+^2 _A.3{w]=1f\|th.Tb\|:g~.W+,>;{:(oXC}G2{?d;BK(N Ixf*hXRt Z"fWM
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: b8 f7 e5 8b 12 44 63 cf fd 56 df f8 60 c4 5a da 7a 62 4b e8 0d d5 bf c4 f6 e5 ec dc fd b1 4e bd f5 55 04 97 7d 1a 40 b9 3a 8a 8d 80 e6 71 d8 6c 87 2a cf 20 af a7 cf a8 f3 ac ca ae 8a a6 8e 93 2d a5 8a a5 e9 a9 a9 a2 ad 12 89 a7 6d 54 f5 0c 24 69 a3 a7 45 4d 29 16 a7 40 4d ca 63 b4 b9 94 d9 b6 7b 9a d6 4f 04 54 d2 24 fc 18 a9 e2 37 48 52 8d 12 8e 28 44 84 29 94 ac 50 21 79 4a a9 95 c3 48 cb 77 c7 d7 7e bf fa 62 4f 95 4f f9 82 ed ea 3f ab e3 b2 d9 47 c1 65 f0 ea 5b 4f 53 a6 aa 7f 10 a4 03 04 67 d1 3b e7 cd b1 2d 2a 34 31 b5 c2 9d 6a 09 3b 6c c4 0c 54 d3 00 aa 14 5b 4d bc f7 16 fd 71 da fc ab e0 73 15 ad 8d 34 c3 5e 0c 82 dc 92 a1 6c 26 4f 73 df 1e b8 97 e5 1f be 03 37 ae dd df 6f e3 88 06 e1 7e 96 d9 bf 9f a8 38 94 5d bd 08 03 c8 0b 0b 61 7f c3 2d d5 36 5f Data Ascii: DcV`ZzbKNU}@:ql* -mT$iEM)@Mc{OT$7HR(D)P!yJHw~bOO?Ge[OSg;-*41j;lT[Mqs4^l&Os7o~8]a-6_
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: fb 8e 78 5d e5 d2 7f 1c 77 64 e6 c1 74 ec b7 fb 9b 69 1e db e1 98 d9 7f af 0c 7c a5 40 f5 fc 6d fa 63 29 ca ea b3 8a f8 e8 e9 62 32 bb b0 2d d1 52 35 65 d6 cc c7 65 16 bf be 24 ec e5 44 99 f5 05 2d 44 0f 04 31 c6 64 9b 56 f6 a7 a7 7d bb eb b1 0f 60 a9 6f ab 14 93 19 a2 8e c8 bd c6 55 07 55 c8 0b c8 74 b1 02 d8 fe d1 f2 fa 2c f2 68 16 3b 49 5f 41 4d a4 48 18 14 ef 90 ed 07 51 7e 5b 9e 4d 61 b6 26 ec 74 d9 96 69 4b 46 8a 61 a8 92 ad 21 3a 85 8a eb 70 35 1f dd 55 bb 1f 4c 76 73 b0 f9 1e 53 96 41 4d 4b 4c a9 c0 8d 01 96 ca c6 49 00 17 92 5d fb ce cd de de fe 02 c0 63 fb 55 ec 1e 5d 98 e5 15 79 b6 5f 14 71 e6 b9 5c 42 a2 56 8d 56 2f 8a 89 08 e3 2b c6 39 9e 1d d9 5b 99 29 e6 6d d9 2a a6 c8 73 44 cc e3 81 64 7e 19 42 8d 61 dd 62 a1 f7 1b f4 1c b1 90 54 ad 7c 11 Data Ascii: x]wdti\|@mc)b2-R5ee$D-D1dV}`oUUt,h;I_AMHQ~[Ma&tiKFa!:p5ULvsSAMKLI]cU]y_q\BVV/+9[)m*sDd~BabT\|
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 78 d2 09 24 2d 08 62 58 22 a0 eb b7 75 40 c7 fd f3 cf 58 10 64 a7 b7 95 38 fe 78 5e d7 67 17 be b8 3f fb 23 f9 9f 0c 66 59 dd 76 71 4f 1d 35 6f 05 e3 49 0c 88 56 2d 2e 84 ec 42 b5 f9 1f 0c 7c 14 24 05 b1 d8 df f1 b6 3f 67 d3 f8 37 e3 8f 6c 41 4b 2d 6d 4c 54 b0 8b c9 3b aa 2f 80 b9 e6 7c 94 6e 7c b1 da 0c 86 8a 2c ae 93 31 ca 5b 8d 05 35 e8 ab 5c 03 76 96 37 28 67 23 98 1c 5d 48 7a 69 31 9f 2c 76 37 2e 86 a3 30 a8 4a fa 34 95 3f 67 35 44 49 53 15 d4 de 48 f4 48 a1 86 e0 f8 8d 8e e3 19 3d 74 59 a6 63 16 5f 53 90 e5 b3 41 51 27 0e 46 a5 a4 e0 4d 02 ef f6 c2 44 6e ee 8b 5c ea db a6 29 bb 3b 96 65 f2 76 83 35 aa fe fb 97 64 d2 b4 54 90 6a ee d4 4e 42 95 8e 66 1f 32 a3 ca 91 30 07 73 7f 0c 0c f2 bc 4d 13 cf 45 4b 25 25 41 0d 1d 07 c0 40 94 f3 42 5b 46 88 4a c5 Data Ascii: x$-bX"u@Xd8x^g?#fYvqO5oIV-.B\|$?g7lAK-mLT;/\|n\|,1[5\v7(g#]Hzi1,v7.0J4?g5DISHH=tYc_SAQ'FMDn\);ev5dTjNBf20sMEK%%A@B[FJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49943	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	698	OUT	GET /xxrz/250x400/793/a3/6b/a36b0afe5302a53132f7f522d9a94553/a36b0afe5302a53132f7f522d9a94553.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	723	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: image/jpeg Content-Length: 92501 Connection: close Last-Modified: Mon, 29 Jan 2024 02:32:11 GMT Vary: Accept-Encoding ETag: W/"65b70e2b-1effe" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kGHYu3x0nVwnNkJV3PizNnOogHs%2F6XN%2F3z5aT7ezS7anGijJTEQ%2FeLMKRO9a9dfoQDOdee3iIr5xskF6kGRIqBuRseSvydLISG2Lx6diQ2Ua1L1LIcXU5QB%2F8i3aps4H63VH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a836e869a65f-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	646	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 7a 65 51 60 b9 c3 4f 29 81 82 9c 14 9a ef 93 59 8b a0 bd a4 da 07 b1 9c 6a 49 a4 1e c8 be 60 b9 41 20 b4 95 03 94 3d a5 bb 0c c9 56 83 79 5a e5 a5 df 4d 69 55 ac e6 60 3e 9a d3 7c d4 7e 93 37 f2 f1 5a c4 fd 4f 41 b8 38 cb 20 0c 36 56 ae f9 f2 bb a0 27 0e 8c 23 de ad 37 67 6b 94 0d fd a2 43 51 79 68 55 a9 57 85 aa 43 0f 93 03 95 8f 9c 75 8f fd 04 45 98 0b 0d b4 14 10 ce b3 08 5b e7 92 da 73 ce ab f5 2e 83 9e ba 37 e0 03 45 aa 94 fa 3f b0 9c a2 26 bc 47 83 97 61 a2 e9 7a 4c d7 f0 2f 9a b7 f2 4a 80 13 5b 0d 2e ca 5a b0 5f b5 1e 1a bb 07 4b 66 d9 b5 01 e1 68 4d fa 53 62 d6 12 4e ca 0b 1f 7c 00 4a 39 9a 8b 69 5e 1d 35 8b 27 13 92 ee 84 4f 7e 74 0b 19 be a4 56 2a d6 cd c0 9a d2 da 46 bc e1 5c c0 6e 7b 11 38 51 83 0b 8a b8 fa ca 9f c5 9e cb f1 61 80 30 7d 1e e7 Data Ascii: zeQ`O)YjI`A =VyZMiU`>\|~7ZOA8 6V'#7gkCQyhUWCuE[s.7E?&GazL/J[.Z_KfhMSbN\|J9i^5'O~tV*F\n{8Qa0}
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 42 9f 69 ad 0b 70 0b 89 82 ab 03 68 d4 f9 aa 47 fa 3e 90 81 63 69 eb 66 43 de 85 60 4e 84 0b 48 9c ca 61 02 cf 0a 7f 1d a2 ef b0 44 1e cc 9c 11 28 cb f7 15 9b 15 12 de 05 04 21 a5 a5 bc 56 a9 8d 3e ae 41 82 ab 69 10 12 88 41 84 c9 b6 ba ae f0 d8 0f ed 68 87 57 46 14 9c 69 4f a4 ac 1d 5e 92 af 43 da 4d 98 b1 53 9c b2 23 62 42 6a 79 7b b9 52 97 92 10 5a 20 3d 33 c8 7d 33 21 72 d6 40 b4 24 b7 65 f4 ca 0e 68 5b 4a 98 30 dc 24 84 7a 64 31 24 3f 0e 01 b1 3b a3 1e eb fb 77 7f e9 62 b4 f5 4e fe c3 43 ad 02 df a4 82 fa 63 50 73 58 2e 24 58 10 d8 f5 dc c0 b4 ca 3d 0f ca d9 59 a8 14 f0 ff 00 c6 db fa e8 6b 42 af c4 ed 68 cb 6c 95 e5 63 3f 7b bb d1 22 00 d6 0c 9f b1 15 dd f9 c7 5b 03 72 81 78 be cf 7c 3a 6b 50 8c fe 62 60 38 ae 8c 4f 15 ac 35 1b 08 e5 04 fe fb c9 e9 Data Ascii: BiphG>cifC`NHaD(!V>AiAhWFiO^CMS#bBjy{RZ =3}3!r@$eh[J0$zd1$?;wbNCcPsX.$X=YkBhlc?{"[rx\|:kPb`8O5
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 2f dd 64 bc 2c 3f 7d 61 b5 b3 5b d6 ea 45 cb ce c8 ba 05 b5 c9 ef ac 6b f9 81 04 f2 a3 a6 fd 39 40 c2 13 31 5c 86 63 2f 8e 55 e3 39 88 c1 01 c5 24 a3 b4 50 d8 d5 02 a8 d9 2d 9d 97 3a fb 36 d4 f6 dd bc a7 f9 6b 18 cb 0b 4a 59 94 91 cc e5 17 a3 91 b7 32 4f 1c 96 73 9c fe 38 c2 53 b1 b4 f9 d3 e8 5b 3e 4d 69 ae 75 fd d9 41 b3 ef f5 c6 d7 b6 a5 f2 c5 6c b6 95 d4 0d bd 7f fe cc 4f 19 cf 94 a3 9a af 64 23 d7 18 cd 52 db 16 e3 8f c8 2d b1 05 88 eb 9a fe 2d dc ec 67 e1 56 ec 66 26 d8 b1 26 7c fe 85 57 35 d8 cd c8 cb 56 20 56 4e c8 1a d1 3b 0b 57 57 ec 11 cb 07 39 49 62 40 63 73 62 77 3a 51 31 29 cc 63 c4 b2 36 c0 a2 cf cb 38 2e 73 cd 5e a5 3b 2b 34 6b 69 ad fb 3b 69 44 3b 0d 55 3b ff 00 a6 9c d9 35 c3 d0 34 e6 e7 9d a6 9f 5a d9 7f 4c 1a c0 f1 f1 ad fd a3 2c c7 32 Data Ascii: /d,?}a[Ek9@1\c/U9$P-:6kJY2Os8S[>MiuAlOd#R--gVf&&\|W5V VN;WW9Ib@csbw:Q1)c68.s^;+4ki;iD;U;54ZL,2
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 38 db e3 3d b7 43 eb a5 ce bd d6 f5 51 1a 2d ae c6 31 1b 9a 4d 9e 63 2a bb 4f 28 c1 bc cb 36 35 84 24 84 ce c2 be 6b eb ac 9f 22 4b e1 30 36 6f 8e 6d 36 f0 4c 2c 39 2b 7b 8d 3d 7f 5b ea 0e 4d 1f 78 7f 1a 6e 83 a5 2f 89 5b d1 db c8 e8 ec 3b 40 eb af 24 6a ab 90 01 3a a6 36 1d d7 62 fc e3 0b 44 3a 25 39 2c 59 99 34 ad 97 1a fb 7b a6 ab 8a 2b 1e b9 b6 7b 10 57 1f a2 77 08 5d 6d 35 36 b5 57 fb 1b 62 dc 2d d3 54 3a 36 ee 14 36 f1 50 62 92 c3 b6 29 d1 71 1b d1 03 39 a8 26 44 61 5d cd 1b 0a 0b 50 b7 9a b4 51 7e 00 d5 ea fc 63 41 5e bc ad a6 b0 63 6d b1 ac 06 76 9d 88 f7 2d d2 81 71 c4 15 c9 57 e8 9a 7e bf 5f 0b bd ef 64 3e d3 b2 ea cf 84 05 ad d8 18 59 63 6f d6 d6 05 d5 9e 8c 6b b6 5d 85 4a e5 75 9a d5 64 3d 96 ed bd 92 cf 20 26 32 2e 69 56 15 b7 b5 8b 52 5a 6b Data Ascii: 8=CQ-1Mc*O(65$k"K06om6L,9+{=[Mxn/[;@$j:6bD:%9,Y4{+{Ww]m56Wb-T:66Pb)q9&Da]PQ~cA^cmv-qW~_d>Ycok]Jud= &2.iVRZk
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 3b fa fb 6a c6 24 bd 63 b0 0b 2c e0 95 b6 57 a7 c5 8d 28 ea ac f2 6c e9 fb 32 f8 02 2f d6 62 14 1b 01 89 9d 53 6d 01 e0 7c 2b 55 0c 11 96 ed 4b 08 1e 8e 81 db 83 5c 95 39 d4 33 54 75 25 a4 f5 95 8d a8 ae b7 dd 9e df 3a ed fd f8 80 a6 c2 a4 6c ef 99 f6 5b 5b b9 92 4f 39 21 61 f8 c6 73 cb 7e af 5e d5 3b 5a 27 aa e4 29 cc 05 a9 cd 68 c9 b5 b5 14 eb ea 9f f7 ac de c0 64 4a e2 95 77 8a ec 55 c9 d7 4f 27 1e d3 55 78 97 d2 3b d8 8b b5 74 46 1b 48 cf b1 5f 93 2c 76 7d dc ac af f6 db 7d c6 2c 76 f6 ce c3 f9 dc ad 19 73 62 9a f0 3d 46 22 9a d5 c2 91 a5 ee 16 b5 58 94 d0 8a ba bd 3e 5f 1a bb 14 7d 77 b4 74 37 e5 d9 ea 29 e8 f4 f5 eb d8 54 19 91 49 2a dd 7d eb 6c d5 75 a2 74 89 cf 71 d1 3c f5 8d ee d6 81 9a 5d c3 4a ec 60 6e 3d 42 fd 64 07 86 c2 3c 6c ec 34 a6 8f 69 Data Ascii: ;j$c,W(l2/bSm\|+UK\93Tu%:l[[O9!as~^;Z')hdJwUO'Ux;tFH_,v}},vsb=F"X>_}wt7)TI*}lutq<]J`n=Bd<l4i
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 66 3c fc 83 65 9d bd ad 86 18 85 83 dc 93 6d 13 23 60 bf 8c c5 cd a6 31 f5 ca c5 57 e2 ec a7 c8 6b b7 3f 34 f4 42 5d b6 69 b0 1e 0d 44 7e 43 0a fc cb 0a c3 1c 70 6a 40 79 db 2c 21 50 3b 8b 10 a3 d6 e8 26 d5 7f 61 d7 09 0b 9d 7b 54 a2 85 47 b1 a7 b6 ca 0d 6a 99 b7 ac f4 3d 74 f9 d6 34 7a 2c d8 d9 f5 7e a6 ab b6 ba 55 6e 5b 61 8b 5a 16 bf 2c 49 e1 58 25 30 e5 41 66 53 15 7c 72 54 d0 f9 52 8a 19 cd ed 04 1b bb 26 bb 73 8c 66 ae ca 1c 60 06 05 44 52 6a 51 25 ab b8 09 4a 63 c0 48 b3 e4 18 0c 26 04 81 30 fb a5 0c e6 0f c8 61 1c cd 9c e0 12 c1 3f a7 22 e4 b2 c7 5b 35 38 17 b3 16 f7 a4 aa d2 af 47 29 fa 37 dd 43 e7 39 dd ed 76 44 af 7a ce ee fa 5b cf 74 db d8 d5 4f 5a ba be b9 d7 f6 a6 e6 47 85 88 96 50 80 b2 12 0a 62 94 e2 f0 a3 ee cc f2 d4 97 19 25 08 30 42 a4 Data Ascii: f<em#`1Wk?4B]iD~Cpj@y,!P;&a{TGj=t4z,~Un[aZ,IX%0AfS\|rTR&sf`DRjQ%JcH&0a?"[58G)7C9vDz[tOZGPb%0B
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 78 97 30 8a 25 76 81 00 56 1b 2d c1 21 ba 6a 6b 74 d5 d2 d7 f5 c6 65 2d 45 44 fc 4d 65 79 ae 2d d8 82 37 b7 d3 1e 17 cc 46 67 95 d1 7d a1 12 4f 4b 2d 1c e8 b6 5b d4 c7 11 a9 84 fc 4d b8 86 a0 0b 5b 77 03 61 8a ca 41 0c b5 2a c2 d6 91 fa fa b1 23 ae f8 ab 6e 33 b0 5f 75 18 05 fa 75 38 8d 40 01 7e a7 e7 87 d2 36 ea 4f 6c 08 59 88 36 b0 bd bf 00 4f f0 c3 21 52 c0 fc 26 df 31 84 8f 9c 29 d8 8f a7 6c 38 2a ea dd ee 0d fd 46 28 04 73 c6 ae 2c 4f 71 de fd c5 b1 90 d3 1a 6c be b2 70 cd 17 b5 49 15 2a 05 db 57 1d 84 6f 7d 40 8b a4 3c 79 7b 1b 25 ef 61 8f 1a 66 12 66 59 ca ac 26 d1 53 a7 2d b9 0b 31 b6 fb 1e c0 00 08 3f 2c 64 f9 9c b0 22 ac a0 ec 2c 35 79 f6 37 ef f5 c5 2d 66 5c f0 a6 b6 d0 c1 46 ae 96 24 ee 4f 7f 9e 1e 17 9e 26 12 df 98 32 f3 6c 6f 6e 53 f8 e2 a6 Data Ascii: x0%vV-!jkte-EDMey-7Fg}OK-[M[waA#n3_uu8@~6OlY6O!R&1)l8F(s,OqlpI*Wo}@<y{%affY&S-1?,d",5y7-f\F$O&2lonS
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 87 13 40 7d e4 f4 c4 d3 32 54 b4 13 2c 91 89 02 98 e5 02 e0 e9 ed 6d fd e1 d3 15 0b c4 45 46 04 6b 3e ef 56 03 6b 16 f2 27 cb b5 f0 94 de cd 4e e4 f5 60 aa 3f ce 55 7f 43 8f 11 4d a1 60 5d ce d6 1e 5b 0d ce 17 76 d4 de ee a1 ab ca d8 90 c7 50 b4 99 75 24 68 af 2c 8b ad d4 0b 90 c6 ca 19 ad 7d bd e3 bf 6c 53 f8 66 8e 56 d0 cd 2a b0 3a 49 d4 0e af 5b 5b 6f 41 88 32 89 61 af fe af 5b cd a2 a0 2c 6c bd 59 18 2b a8 f9 ae ab 1c 64 39 7d 2e 4f 4a 62 96 78 29 a4 24 2c d3 c9 4b 1d 59 79 d4 06 7a 64 49 19 74 8a 60 eb c5 90 5e f3 48 60 36 78 24 c4 6f 07 88 72 e9 a9 e6 b2 d4 98 92 39 b5 1f 79 a3 1a 29 aa c7 de 41 fd de 62 3d ea 76 89 d8 da 94 5e ae 2a ca 0c d9 60 85 6e d4 f0 14 52 ae 08 e5 91 8b 17 b8 fd ef 78 5a e2 c3 7e f8 aa 19 84 91 03 24 90 7b 49 b3 2a 7d a0 88 Data Ascii: @}2T,mEFk>Vk'N`?UCM`][vPu$h,}lSfV:I[[oA2a[,lY+d9}.OJbx)$,KYyzdIt`^H`6x$or9y)Ab=v^`nRxZ~${I*}
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: f6 ff 00 21 e5 3e 83 14 92 f0 98 39 03 99 01 e5 3b 92 2d b5 9b 6b df d7 14 4f c6 45 24 80 40 e6 e9 70 47 9d bc bb e2 aa b6 2a 44 6e 6b c8 e0 05 51 72 45 ec ba 88 5b 9e f7 02 d7 3d 3b e3 3a 98 35 26 ad 0d be c9 aa e0 8b 0b 7b a7 7e a4 9d ec 71 94 53 7b 3d 0a 5c 73 cd f6 af e7 cd 6d 20 fc 96 df 9e 38 42 e6 fd fa e3 30 90 d7 55 70 22 17 8e 1e 51 6e ef dd be a7 95 7d 01 3d f1 4f 3d 55 1c f1 54 53 34 d0 cf 04 97 52 b6 f7 81 b6 90 bf 10 36 b1 53 7d 5d 19 6c 71 35 6a 57 d6 51 45 35 38 a5 99 84 62 be 3a 54 b1 e2 ca 88 cf 12 20 be 9b 39 b1 b5 ca d8 85 17 c6 66 69 69 12 90 44 92 41 f6 66 2b 53 42 af ca 84 10 1b 50 3d 35 13 e6 4b 12 6f 86 8c d4 47 ae 9e dc 11 a4 b5 d9 14 ea dc 73 07 61 71 6e 97 5f a0 c5 38 cc a9 33 67 ac a5 28 2c 66 8c c4 49 8c bd c3 47 78 8a 8b 23 Data Ascii: !>9;-kOE$@pG*DnkQrE[=;:5&{~qS{=\sm 8B0Up"Qn}=O=UTS4R6S}]lq5jWQE58b:T 9fiiDAf+SBP=5KoGsaqn_83g(,fIGx#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49942	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	699	OUT	GET /xxrz/1200x600/793/55/5b/555b64c17d8909e2376acd8438a583e5/555b64c17d8909e2376acd8438a583e5.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	728	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: image/jpeg Content-Length: 423976 Connection: close Last-Modified: Fri, 16 Feb 2024 08:37:08 GMT Vary: Accept-Encoding ETag: W/"65cf1eb4-3966d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P1H5VJkYStb3thaZLRtfwcsb%2BLhRPnfCeoZuNvCDJ8WFpjEmcB2BkcVa5QpfW%2FD4B%2F6xr%2FJlRD7I%2FsjRXTaHuzH4xFvKffbxAvV%2F4cWjJ1asIexuWFwEUINbyjbmpfGef8QU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a836edd66da7-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	641	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 00 03 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: b9 68 a1 7b ee 26 c3 6b 89 2b f7 cc 23 cf 71 df 9f 43 3f af 0a 7b e7 31 6d 2c d1 63 c6 f5 29 e9 45 5a f7 d7 a9 59 fe 77 d7 3b b8 ed a7 7d d2 c4 ae 47 87 6f 0c df d7 44 a9 f6 a7 8f 7d cb fb 4a 4d 0e 56 28 ec 90 76 21 2b 4e 8f 30 8f 27 87 dd 86 da d9 b0 a8 4b ae 97 d3 82 44 f4 5d 28 48 02 29 3f 67 69 8d 78 c1 19 b7 38 7f a5 cc 1d 02 4e 08 fa a0 4b 0f 6f 5f 95 44 9d 0a fa 4a 14 37 49 1e 06 68 77 37 2d b8 2d e9 f5 51 56 20 19 e0 61 18 10 ab 6c ce c9 85 da 35 3a 90 7d 03 e8 a7 cc 4f b1 3f 35 68 3d a7 14 06 6c dc c9 a9 f1 3a 31 a5 b6 ce cb 16 30 fc 5b ae 1b c2 01 ef 5c c0 cf 0b fa 75 17 a2 14 56 64 c8 76 6f d1 58 fd 79 e2 8a d6 de bb e9 5b ce bc 76 bd ed 76 ae 39 c8 78 5b d7 35 37 9d fb 69 3d cb 40 cc 36 63 08 b3 11 85 13 a3 91 9e d6 5c e7 b8 18 f4 96 af 82 c3 Data Ascii: h{&k+#qC?{1m,c)EZYw;}GoD}JMV(v!+N0'KD](H)?gix8NKo_DJ7Ihw7--QV al5:}O?5h=l:10[\uVdvoXy[vv9x[57i=@6c\
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 74 6d bb 51 98 42 e4 c1 4f 5a 1d 69 68 65 cb b0 3e 96 41 6c 0a 5e 62 f4 5b bf e5 df db 2f 8e 06 f3 fc ea 29 60 0c d9 79 8d 72 da 61 b4 17 33 97 8c b2 1e 37 f5 83 e8 84 55 13 f1 e9 ae f6 5e 1d ed 1d aa 2b 90 4b c5 97 54 6a da 9f 35 31 93 f1 e6 80 2d 9c c1 ea dd 0c a9 b7 f1 e1 8d 4d 1e df 16 1b 89 f8 1e 96 6c dc 43 12 77 24 ba d1 22 dc a6 c0 ef 52 e1 20 ff 00 db 44 e6 fe 64 fc a3 a2 91 7b 2c b1 e2 1c b8 6d c5 ef d3 c6 1d c8 7a 24 82 70 d8 93 b5 81 2c 3a da 49 36 66 ce 75 df 39 cc eb d7 3d f3 cd 05 9a 58 7c a5 05 a2 e2 04 58 78 96 bd 85 e8 4f 45 3c 47 24 77 5a f4 a5 bc e9 f3 62 e8 ba 5a 41 f9 08 b1 69 34 c5 73 5d eb 08 ba 0c c2 de 4e 38 83 99 27 08 9a 85 a6 d8 16 0e 62 fa 0b 92 f7 8c 04 39 a2 f3 9d 96 4d af 22 4c ee b2 0d 21 91 08 93 4c ed b1 33 17 40 88 7c Data Ascii: tmQBOZihe>Al^b[/)`yra37U^+KTj51-MlCw$"R Dd{,mz$p,:I6fu9=X\|XxOE<G$wZbZAi4s]N8'b9M"L!L3@\|
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: df 17 bb 2b 87 93 6c 98 ff 00 2d 64 d1 49 2f 8a 02 f4 15 ed 0d e6 78 7d 87 25 3e a9 49 6a f7 7b c0 22 8c d9 59 5f 6e c5 a2 f6 cd 35 a3 f2 59 16 f3 66 93 e8 63 ac ba 85 69 75 1f 47 af 8f 9e 9b b2 c2 0c 96 6c b6 2b 29 b9 4a 36 e6 ce 2d e3 17 45 7c d8 fb 9b f2 3c 94 b9 f5 f4 f0 70 9e 77 bc be 70 68 ea 6f 4b b9 b0 87 d9 0f 8e a6 ac 7e 0e 68 13 23 29 e7 ca 28 ba 3c ab a0 f3 d3 57 56 f7 10 fe c0 a6 bc 5c 7a ec 13 ad b6 cc 70 bb 39 42 8b 3b ee d4 29 ba 4b fd e4 fa 0b 44 57 d9 54 58 0b e9 06 21 20 b1 d3 7d ad 9b af 29 0d 6e cc 1f d4 9a e2 8d 1a 1d 68 d7 5a 60 1a ef 7d e5 2b ba 5c ca fb 8d 6e 73 de 8e c0 0d 9c 30 fd 4b 9a 7e 99 87 47 a7 3e 47 fd 08 f9 87 1f 42 de 7f cd f9 12 ae af d6 16 4e f0 30 e6 fe 7b db 34 65 f0 2d 0c e1 62 d1 e8 1e 43 4d 0c 04 b6 c8 e5 2e b0 Data Ascii: +l-dI/x}%>Ij{"Y_n5YfciuGl+)J6-E\|<pwphoK~h#)(<WV\zp9B;)KDWTX! })nhZ`}+\ns0K~G>GBN0{4e-bCM.
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 13 c6 fa c3 0c 45 9d 83 29 eb 54 2b 5f e7 ed d7 74 5f 6b 45 f4 93 e6 be e8 f9 9a 67 df fb 1f e6 b6 c9 a5 b2 2a ad b4 8e 26 95 1a 9f 0d 7a c6 64 17 3a 3f 32 bb 69 f7 d5 10 43 04 4b e8 83 da c2 74 13 c8 47 fd 47 c6 d0 db 5a f3 c0 36 37 dd 68 1a 3d 51 9d 0f 93 28 b4 97 a9 15 30 f2 8d 06 cd 46 44 32 78 4a e8 f5 37 19 c9 a2 bb f4 d7 b4 b0 51 d2 8b 36 42 ca f7 32 58 d3 d1 a1 a5 bc 8f 6a b9 9b c5 63 65 7e df b6 ea b6 88 3b 60 82 4f db a5 c7 22 13 b5 dc 96 1b c3 91 2b 49 b3 a7 f3 8e 84 a2 14 0d bd 48 bc 55 01 74 d1 e1 e8 c9 21 7b f6 c9 96 60 0d 83 52 b6 62 49 91 31 24 18 c7 48 b9 47 23 eb be 98 62 f8 36 f3 2c 98 c4 cc 06 57 89 26 d2 c7 1d 65 9c 09 74 9c 7a 3d 18 96 6c 9e 36 6c a5 63 9d 03 c9 6c 1c 47 47 27 1e 25 80 e2 23 2a ce 67 9f 3b f4 57 e7 31 bb 2e 06 c7 37 Data Ascii: E)T+_t_kEg&zd:?2iCKtGGZ67h=Q(0FD2xJ7Q6B2Xjce~;`O"+IHUt!{`RbI1$HG#b6,W&etz=l6lclGG'%#g;W1.7
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 1d d5 2e ea 2a 92 4a 4e 72 96 25 58 c8 ae 36 e6 bc 58 c2 3d c3 d4 f2 aa 3b 65 32 b2 ab 57 d2 a2 88 9a 2a 24 e7 74 78 0d 66 b2 48 15 84 c6 07 94 e2 04 47 b0 c8 77 16 eb cb d8 d7 8a 7b ee 49 d7 8f 48 ab 4d 44 4a 36 52 f6 55 79 ab 59 a2 90 ce d3 21 02 b4 44 92 50 79 a9 6d ec 9f 9a 97 11 a0 53 a3 7f 5d 3e 57 9a 84 23 b5 9b f4 75 f8 9c c7 15 9c 8c f0 0f 39 2d 7d 8f 9c f3 76 e6 4e fa 15 95 43 a5 17 fa 05 f3 6a e1 a5 de fd 25 76 4f a7 9b 3b f3 cb 15 f4 77 34 d8 f8 ab ff 00 a3 d9 37 70 d2 6a e1 98 d2 d6 f0 d0 26 2e cd 02 14 ab e3 e0 c7 d1 44 f6 fe 63 f3 82 e8 cc 8e 67 67 b7 66 33 dc 5f 3a 39 e4 00 52 15 b0 c7 a0 f6 3f cd 1d 93 47 a0 bd 2c 9a 4c c7 33 ba b5 6a 62 a5 f9 f8 37 c6 c2 a5 67 b8 49 e5 ad 6b 06 df 36 33 d3 f5 f0 cb 4e e8 39 6d 1a 18 a6 4d 22 47 e1 80 94 Data Ascii: .JNr%X6X=;e2W$txfHGw{IHMDJ6RUyY!DPymS]>W#u9-}vNCj%vO;w47pj&.Dcggf3_:9R?G,L3jb7gIk63N9mM"G
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 14 4a eb 51 7d 01 1a cd 8e c8 c4 f7 a9 d9 9c f6 76 3a 7b 73 94 19 a9 be 93 fc c4 1a 56 6c 2c 6a 94 4b 71 d6 44 ad 5c c0 79 18 ee c6 ed 2f ab 7e 63 9f 51 ea 3e b1 99 7c be 29 a8 d3 7d 1f 8f c0 0d 06 5d 77 94 68 da e6 d6 86 50 fe aa d8 16 d9 cc ee 1d 60 d6 24 05 c6 49 17 6d 9d db f3 e5 4f d1 af 99 a5 16 c7 c7 fb 53 0e 02 ca ae 8e b2 18 05 41 d2 27 89 3d 6f 35 c6 52 22 8d 37 ea 65 8b f3 d2 eb af d3 19 56 61 73 17 f9 d1 1f a5 f4 d6 3b 2c 3a 74 11 3f 15 97 66 f1 b1 13 81 d2 28 83 44 c9 5b 06 bc fe 96 74 38 69 c5 b3 13 6d 5c f6 8a cd e5 5f b3 f6 0d 3c 8d d6 de a4 2c 2e 72 ec ac 23 da 40 cb 47 4a f1 d1 1e 5a 1c d1 27 64 18 c6 f1 0c 87 c9 20 14 e2 92 5c 8f 26 78 af b4 17 65 d3 92 11 ab 49 96 15 e3 f9 78 15 14 c4 64 fc c1 69 aa e7 ad 85 df 05 01 3e 9b 9f 19 3a 46 Data Ascii: JQ}v:{sVl,jKqD\y/~cQ>\|)}]whP`$ImOSA'=o5R"7eVas;,:t?f(D[t8im\_<,.r#@GJZ'd \&xeIxdi>:F
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 74 ca 6b 35 5c 37 4e 1d 33 51 41 2f 26 b2 49 69 2a d5 da 77 b9 d9 c5 c9 41 41 88 3d 97 3e 72 0a d0 07 60 c9 32 ec 22 2d 0e 25 5d cb 56 ba e6 31 74 c6 45 41 e5 dc 42 cd 92 7c 43 59 4c 44 d3 68 7d dd f2 74 a6 a3 7f f5 8b 15 a5 aa 2b f6 d8 e2 aa dd 39 e6 66 6b 18 3c d2 35 8d e7 96 13 d1 77 05 35 22 9d e1 c4 33 84 37 51 51 fe b9 ce 1f 45 97 f3 a6 20 e3 a4 c3 7c bc ec 13 c1 5b b8 94 8e 26 64 ef 0c 5b 4c b2 c2 33 4b 67 76 d2 a9 22 18 fd 04 c5 12 b2 da b9 bd 52 75 07 d3 e4 32 ee c5 a0 9b 91 d4 19 ca 88 fa 31 28 38 aa ca a8 ca d6 9a d5 ec 2a 46 3d 90 fb 79 60 e5 23 28 99 a1 30 cc 35 d8 98 5f 55 96 96 0b 1b 6d 1c 87 6b e7 a2 d6 b8 65 d1 1a d4 50 03 48 05 0a d2 c6 d4 f4 59 4e 4e f2 fa 91 19 30 a6 bb 55 15 9a b2 6b 17 b5 c6 70 99 17 e8 16 15 12 10 be ad ad 9d 17 58 Data Ascii: tk5\7N3QA/&IiwAA=>r`2"-%]V1tEAB\|CYLDh}t+9fk<5w5"37QQE \|[&d[L3Kgv"Ru21(8F=y`#(05_UmkePHYNN0UkpX
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: e6 a3 a7 8b 4e 0e 47 3b a2 b8 3f 3d 9f 69 b0 e6 58 54 9f 49 28 2d 99 1e c7 12 d4 9b 7b 38 21 82 64 34 04 bb e1 e0 a9 6b 32 3c 80 bb 71 ce a5 c8 05 8e d4 a4 42 e3 49 e1 e3 8e 21 b9 c4 e4 30 47 2e 04 b0 25 8f 93 e7 62 bd f1 bb 61 47 2b b6 aa af a8 d1 2e 6f 77 86 79 e3 3d e9 79 d3 3f 6b 8a c8 d1 33 cd 98 ce 77 63 e7 f1 12 fd 47 c2 de 48 40 48 d6 d4 9b 51 b6 dd 33 9f 8d e3 27 16 7a 06 a7 4a 65 cb 1b 1f 21 29 ce 2f 52 81 c8 22 a1 74 d0 96 a9 aa 6b 87 92 30 6c 98 4e 7f 57 11 d7 e9 e4 dd 32 f3 12 e4 92 2d b5 8b ca 09 10 9c 19 e3 be 77 0b d1 e2 97 55 36 c0 24 9a 42 80 42 31 19 34 ec e6 bc cf 35 e1 f3 31 ee 9d 5e e1 c3 49 1e 3c d8 4c b6 df 9a 9f 2c fb 70 80 f0 7e ba eb df 2f 3d f9 f5 ce f5 e5 4f 1c 4f 1d 7b f3 dd d7 85 3c f3 7c f3 9c e6 f7 ce fc f7 75 d3 92 95 47 Data Ascii: NG;?=iXTI(-{8!d4k2<qBI!0G.%baG+.owy=y?k3wcGH@HQ3'zJe!)/R"tk0lNW2-wU6$BB1451^I<L,p~/=OO{<\|uG
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 85 9f 9e 27 64 d3 2b 17 ac 28 a5 75 32 d0 f8 0d f4 cb bb 67 eb 9a 53 0e e6 3d 49 18 d1 db 17 45 6b ed a2 85 ad 7a ee 2d 6e 29 12 71 7e 5b 2a 6b c4 73 b4 7f a4 64 e5 5a 40 c6 76 18 7f 32 1e 7a 2d 99 23 f7 eb c2 88 37 d2 10 9c 43 4d c8 b2 81 69 4d 2d 68 81 e6 4b 0d 6e 68 c1 92 85 1d f1 2e 1b 66 8a 24 f8 9e b9 d7 87 31 e1 20 8b e1 9a c2 0e 83 22 56 c1 4b 12 c4 f1 a6 ae 2c e5 70 57 ed 7e a6 6c 5f ce f5 ed 4b ea 7b a3 22 6c 4d 0a 1b cf 8f 14 67 d2 fc 4d 77 e4 75 f9 b3 f0 32 e7 36 a0 ed 59 3d 02 e3 d2 11 35 73 db ac 49 be 75 8e 59 65 b5 ae 7d b8 60 6d 32 a0 bb cb e7 85 a8 0b fd 23 81 fe 93 66 50 6a 04 28 c2 af 4e cd 10 c7 81 5c 4c 96 dd 64 22 16 ea ce d0 99 6b 40 32 65 41 12 b8 a8 ca ee 79 80 db 48 3b c1 9b dc f4 08 0d 8f e8 f7 c4 20 ab 4b b3 f1 40 ad b0 03 ad Data Ascii: 'd+(u2gS=IEkz-n)q~[*ksdZ@v2z-#7CMiM-hKnh.f$1 "VK,pW~l_K{"lMgMwu26Y=5sIuYe}`m2#fPj(N\Ld"k@2eAyH; K@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49940	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	694	OUT	GET /ajax/login-state HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"d8-R6JFTYCzz9JLwYU4VIqVMGUySyY"
2024-04-26 18:32:43 UTC	908	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:32:43 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"d8-R6JFTYCzz9JLwYU4VIqVMGUySyY" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e2e58bh1w%2BPNoTdx5yqyRvb5bCBiV857Tu27N2jUKuDhPDQJ5jK0Kbyzv9lgESQkf9dgeGe62aJbTZn1euvA6JboHfc5ljrJXNpnteV%2Fk4lrftYPSRK6uLxCro%2Fi7Yw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a836fb7e2293-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49944	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	699	OUT	GET /xxrz/1200x600/793/8b/69/8b69d6e6025464cd449ad0097791c41b/8b69d6e6025464cd449ad0097791c41b.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	720	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: image/jpeg Content-Length: 503754 Connection: close Last-Modified: Sun, 04 Feb 2024 15:34:27 GMT Vary: Accept-Encoding ETag: W/"65bfae83-690f7" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SRbA1hpClB7hgfVIMCreULKsjCk95gsn9Yw7GhcODWVVBOxKB%2FLp6GDf3EV6szPuZqLBbMJFoiGl2ZWu6KhyH0MtSjQZlJ5PFABF2t9l9icthjtK83Bz7Svk9boh%2FROJ8Y7B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8370afa8759-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	649	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: ce 20 32 9e 45 99 ec 30 1a 91 0a 71 00 ea 30 6d 74 c6 d8 dd d4 39 df a4 d4 2d ec 78 d6 82 9a 95 34 e5 b4 c4 2b 02 09 b4 8b 2a e0 2b a2 8e af 0f ed e4 c7 8d 18 56 0e 04 aa 38 0e f9 da 23 98 b0 51 94 d9 70 6b 1b 6e 35 a8 77 0b 7c 47 30 4f b5 b2 30 92 63 e8 ec 4b 30 0b c8 42 67 79 51 cb 56 6b 4f 15 40 aa 1f c6 d9 a0 11 ab b5 ab 61 66 9b 78 64 6d 74 a6 34 77 b5 dc d1 cf 35 30 6c 39 21 f0 70 a3 b8 47 53 10 c4 d5 f4 62 3a 91 fd c4 54 1d 96 11 b2 a7 f1 8c ae 73 d3 13 fc 4d 75 71 f5 5e 43 dd 6b 38 45 e0 d0 65 61 78 41 0b 65 ca d2 75 b5 e3 88 d7 22 87 22 3d 6c 6a 58 9a ed 9a bd a6 77 c4 3a 94 6d 34 67 2a e8 2d 02 26 d8 b0 a1 d6 d2 5a c4 61 28 d8 17 59 41 83 76 ec d7 8b 24 0d 07 0e 4c 66 cd 67 b7 d5 f2 a0 eb 0f 02 e9 4b 7b 59 6a 30 b4 b6 34 19 db 6c df 1a 30 75 21 Data Ascii: 2E0q0mt9-x4++V8#Qpkn5w\|G0O0cK0BgyQVkO@afxdmt4w50l9!pGSb:TsMuq^Ck8EeaxAeu""=ljXw:m4g-&Za(YAv$LfgK{Yj04l0u!
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: c7 be 48 91 07 04 7b ec d0 4e 07 20 c1 20 4d 84 d2 88 82 7d 24 47 23 26 69 90 e8 0f e8 e2 6f 65 af 4f c2 a1 38 af cc e4 5c 88 5a 0f 1d 3c 84 c3 bb ac 25 0f 22 3a aa 7b 99 07 9e c8 b8 de 50 7c c1 72 dd 75 ab af d9 f6 f5 17 27 77 ed 70 b2 5a 38 de 13 51 27 91 ab c9 b4 bb 1a fb 6b 39 f4 b0 ce f6 9a 81 e8 e2 10 f1 8c 4a 0d b2 32 dc 17 1a a8 d3 5c fb 2e 7d 5e d4 d4 09 d6 d6 dc 9b 9c fa f8 d7 86 d1 d8 2a f4 6b 6d a7 7c 33 89 b2 f1 1d c6 66 76 d6 50 7c fb 62 28 ec 45 11 1b 25 94 3d 99 96 1b 3d df 5b cc 14 33 aa b3 9c e3 dd f3 a5 b0 ef 67 c7 3b a3 bd a5 b1 2d 6f 87 63 4f bd 0b 75 f7 2c 49 b1 ad 51 b8 11 05 1c e8 24 5b 16 e1 ac 11 b2 bc a0 81 ad 43 33 b0 26 2c 40 ea ed 2c 42 34 a4 8d c5 d2 49 87 5b 41 d4 df 8b 78 be 33 e9 46 74 8e e4 6a b7 05 d6 d6 37 f6 6e eb f6 Data Ascii: H{N M}$G#&ioeO8\Z<%":{P\|ru'wpZ8Q'k9J2\.}^*km\|3fvP\|b(E%==[3g;-ocOu,IQ$[C3&,@,B4I[Ax3Ftj7n
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 97 22 6b 23 5f be 17 23 63 5a 6f 46 d6 08 ce 55 4c 12 43 96 93 ab 2e 33 fa 3b e4 eb 95 92 4a 5b 28 25 c7 d9 dd 56 9b 90 23 98 2e 3e f9 df 4c b1 ca 71 c3 62 3e 4a 49 86 1c 2e b3 e3 ea 66 8f c6 36 89 96 07 8d f5 24 3d 24 36 3b cc 02 92 1a 07 dc 95 cb 6d 99 ea 15 10 bb 79 d6 b3 3a c8 4c 09 15 e1 2a 37 0c 7e 94 f8 c3 23 13 58 63 77 82 16 9d 8d a6 6b b6 4e 1c 2c 6f 8f 77 d6 6d c6 b3 55 b7 cc c9 d4 cd eb 1d 33 63 60 fb 45 15 e8 35 d8 a7 43 01 ea 75 52 ba 8a 00 ea 65 c4 65 dc d9 2c 83 17 d9 c3 6d 85 8d fc 8e 97 db 5d d0 bd dd db b4 46 7b d2 24 78 34 d0 b6 80 64 c5 6d 38 3f 0f a3 a1 4b 33 6f e6 72 bf 36 6b b4 b1 06 61 6e e7 7a 1d 48 af 3d 53 ab da 46 55 53 7d b7 b4 1c cb ce b6 bc a7 15 22 32 ca 44 65 4d bf 2f b1 15 11 78 c5 b5 89 62 a7 8b 6f bf d3 9b 25 4e 19 34 Data Ascii: "k#_#cZoFULC.3;J[(%V#.>Lqb>JI.f6$=$6;my:L*7~#XcwkN,owmU3c`E5CuRee,m]F{$x4dm8?K3or6kanzH=SFUS}"2DeM/xbo%N4
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 0e 06 f2 d1 3c ca 95 1e d6 53 35 86 ad e6 a7 76 3f 1a d5 64 2b 17 24 a8 3c 25 1b b3 14 17 a9 c8 90 ac 7c 15 ef b7 13 74 9c 68 26 0c 91 1c 5c e8 20 e7 6f 18 d3 de 67 a1 4f 9c cb 53 e8 15 e3 e3 77 40 6a d7 eb 16 ee 62 b9 bb 2a 73 81 1d 52 e5 75 f7 21 0c 21 f1 70 cf 81 90 98 0f b0 0a 8f ae 95 64 72 43 d8 e6 0e 98 73 06 c0 e6 5b 75 f2 87 64 1a 58 82 ae 9c 78 f3 ac 8f 46 56 18 e9 db 5e 7e ab f9 b1 b9 9c e3 3e 7f 5f 6d 84 2f 57 4b 60 36 1c 38 9a ff 00 6d b0 ec 85 11 3f d8 42 bd 9c 7b 69 50 b6 f6 a2 77 de df 57 22 1d 9d 4a f9 6f 11 fa 12 38 ee 47 cf 37 67 5c 68 d5 d1 e7 ad 88 62 76 c3 72 37 a8 5c 73 1c 66 44 6c f4 6c db 69 31 4e 7d 9d 6b 15 b1 7d 3b e3 2f 56 32 9d cc 29 fa ab 4a f5 3b d4 9a e0 65 33 5b 5c 09 5a 9c 55 06 fb 98 06 a6 9e 9f 67 a1 39 ba a5 c5 7b 97 Data Ascii: <S5v?d+$<%\|th&\ ogOSw@jb*sRu!!pdrCs[udXxFV^~>_m/WK`68m?B{iPwW"Jo8G7g\hbvr7\sfDlli1N}k};/V2)J;e3[\ZUg9{
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: b0 6d e4 a9 13 14 2f 7b da 19 33 d4 27 5a 1a f6 e0 97 0c 96 1e ec 19 88 49 58 94 69 a8 d6 07 18 44 82 e7 5c 38 2d e5 f3 b9 36 db 8e fd c7 ab 15 f3 0d d0 da 23 db 79 26 f8 f3 4f 2d bd 3b 25 0e f7 c4 31 20 49 37 3b 1c 8f d7 a6 9a 87 e3 a9 4e 2d 84 89 54 3a bb 1e c4 3b ae fa ec 63 00 ed 9d 92 a5 45 36 bc 80 2b ac 0e cd f3 53 a8 71 f3 d6 7e 1b 4d 93 ea 97 ce 30 ca 36 62 3e 89 95 95 09 29 c2 a3 d8 fb 03 11 55 e5 28 f9 3c 57 04 9a e9 bf 7c f9 37 a5 45 0e 0d 57 22 d2 38 91 9b 68 2d a7 31 45 90 8e 6d 78 ed 24 f7 1b ad fc d5 f4 ab c1 b4 55 9c db 91 85 5f b7 68 d6 ec e3 97 ae 57 43 3f 7a c8 67 68 ad d3 10 61 bb 2b fa c6 d4 9e 81 56 6c 75 d8 b3 ed bc e3 6f 5c 11 57 9f cf 08 bc 1b f6 f1 28 82 d2 3b 0b 19 67 b7 4a 27 64 26 a6 55 e9 be 7a dc 48 bd fb 4c bc 47 52 84 70 Data Ascii: m/{3'ZIXiD\8-6#y&O-;%1 I7;N-T:;cE6+Sq~M06b>)U(<W\|7EW"8h-1Emx$U_hWC?zgha+Vluo\W(;gJ'd&UzHLGRp
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 3a 24 90 e7 2a a1 3f 5d ec 3c f5 cf 8b 21 5b b2 ce 2f 78 15 d5 1e 77 23 a0 81 3d b9 e3 a9 2d 97 44 3f 09 25 61 e7 ea 4e f5 6f 93 01 26 e2 a4 d0 09 c0 2a 39 52 fc ff 00 77 e9 7d d2 c2 35 ba d4 f2 6f a6 55 ec 0e 9a bb 33 d6 1b c5 61 2e 00 70 44 7a 8d 0d cb 7f 39 d3 d3 2a 1c 99 46 66 8d b8 22 11 4f 16 4a 79 12 cb 8d a0 ae c2 e4 be b4 57 3b 91 49 d2 36 6c 9f 8b 07 9f 6d 2d 23 c3 f1 1c 9e b6 61 bc e0 5b 57 8f 24 98 71 5d 11 c7 0f a4 c8 97 2c 37 db 10 1d ca bf 7e a9 c3 b1 d1 39 4b 86 5d 4e 86 89 5e 7e d8 e6 54 18 c2 88 f5 1b 8e 37 c4 86 ec 57 ce a7 d1 4c 52 64 67 cc 15 87 30 bd 7a c4 a1 e6 9a e3 65 f1 d0 11 ec b5 dc 86 bc 71 b1 cf d7 ee 6d b6 74 38 30 2a 6f 04 93 b8 e7 12 a4 24 c7 4a 32 49 d0 75 12 1d 40 8b cd c3 ce 87 d0 6e ef 70 57 bf 70 a6 d7 09 4d 4d 56 ad Data Ascii: :$?]<![/xw#=-D?%aNo&9Rw}5oU3a.pDz9Ff"OJyW;I6lm-#a[W$q],7~9K]N^~T7WLRdg0zeqmt80o$J2Iu@npWpMMV
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: e8 12 ae db 32 16 4a b9 53 ee 13 22 0a e9 76 01 a8 64 37 40 76 b5 6d df ac a7 b0 ae b8 4d 68 93 49 d1 dd ef b3 53 65 0e d8 c8 b2 31 0d a7 2e 1e 1c 15 c4 9a d9 21 ca 2c a9 44 81 18 1c a4 bc 9c 88 d2 32 78 5d 24 74 5d 12 9d 72 27 25 3b df 11 75 e4 75 8b ac af 78 0b ff 00 4e 97 29 1d c4 8c 93 19 c3 5b 24 a0 ce 91 4b b0 3a 5e fc 5f 1b a6 4e b5 d2 3b 76 71 cb 4a 35 18 1e b1 52 4b 18 d5 7c e8 32 ad 29 bd f6 ec 4d 70 98 1e 48 8f c4 20 11 2a b8 87 98 f1 d3 90 70 ed 0c b4 83 bb 09 38 59 d4 de 91 16 37 d2 05 8a 53 44 a4 e8 19 d7 72 23 1a 5d 15 5d 10 52 2a dd 09 e8 4f 37 a2 ac 8b a8 d2 76 cd 1b cf f2 0e a8 83 52 cb 5b 36 32 00 96 c8 66 56 77 b5 55 c9 5b f7 a4 fc c7 e8 30 c8 b2 c8 aa ad 5f 77 e6 82 47 65 2d 80 e4 3e 45 71 1b ac 99 d8 1d d6 8d 84 0f 7e a4 4f 6a 23 bc Data Ascii: 2JS"vd7@vmMhISe1.!,D2x]$t]r'%;uuxN)[$K:^_N;vqJ5RK\|2)MpH p8Y7SDr#]]RO7vR[62fVwU[0_wGe->Eq~Oj#
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 7a d9 dd da 40 d8 ad 19 cf 62 7d 19 9c 65 7d b2 d9 cb b8 2c 1f 12 da 2c b4 59 a3 86 74 10 b5 6e 45 76 42 dc 91 39 47 d3 35 20 31 06 08 c6 a6 4a 21 e4 96 a1 e2 f1 f2 10 e7 2a fa 8d cb c4 98 cc 91 99 42 03 65 64 d4 2e 87 73 c6 d3 46 09 da d6 75 d9 2b 52 23 a6 3e 30 72 26 69 7e 30 7a b6 ae b5 2c c5 d2 2f 7b f3 7a 04 ab 14 87 d5 28 c6 66 83 d8 e9 fc 69 e2 07 c8 62 6b ef 07 9c eb ce 8e 21 73 3d e0 07 d2 56 17 e3 59 c0 92 6d a8 a9 11 51 93 64 82 12 c2 60 4e b6 10 1e ad b8 72 5c 2f 78 de 41 93 60 b6 da 8c b5 6d 39 c1 ce b7 db b7 b1 b4 ef 49 35 7a 73 2f 1b e2 80 b0 70 2e 89 f2 c8 9e d8 f0 f3 be af 84 fa ca 35 60 fb 3f 07 6e 70 4f 55 ea 64 a7 dd 0c c7 32 4c 49 ce b8 a4 58 2a 3d 12 5e d4 a5 73 ed a2 a9 6e 8b c7 2a a8 54 f0 2b 6b 06 58 8a a4 81 9f 97 21 1b b0 0c ea Data Ascii: z@b}e},,YtnEvB9G5 1J!Bed.sFu+R#>0r&i~0z,/{z(fibk!s=VYmQd`Nr\/xA`m9I5zs/p.5`?npOUd2LIX=^sn*T+kX!
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 73 45 e6 bc c7 58 82 a8 fd e5 a1 fa 56 6e ae 65 3c 79 78 76 a3 b1 b4 8e 2f 64 c6 ea 72 6f 7c fa ec 6f 12 ee 0c 5d 87 b0 3f 3b bd f8 e5 fc 05 93 9c 67 17 8b dd 33 b4 45 50 1e 85 47 47 ce 76 ea c0 92 27 c6 5d 7c cb 32 d0 d5 c3 a3 e8 b4 54 fe 54 8b 2e 74 a0 b5 14 38 17 24 08 dc db da 28 b8 eb 1b e4 f6 56 a4 96 ef 94 c2 06 71 e9 31 76 db db b8 9d 62 49 76 2e 6a 5c a6 aa e5 95 2a b4 4c cb 98 81 27 b9 0d ee de f9 c7 5b 85 2e 7d 1c ba f1 b2 2e 18 d9 a2 58 62 e5 d1 db 65 9b 70 1a e5 37 c0 12 20 af 2f 47 2e 12 c5 75 34 0e 83 c5 4b cd fe 96 22 39 31 c5 56 25 e9 a6 fa 0e 6a 8e ec 63 85 2c bb 7c f7 69 2f 87 f7 d8 e3 6e 9f 55 f9 12 9d 2b bc 65 fb 36 41 7e d2 9e b1 56 3f f4 15 40 5f 69 38 ec f4 59 ac 92 50 d8 96 c8 3b 8e 36 7e ba 03 7e 72 ad b6 05 e8 f9 c1 d2 c2 79 2c Data Ascii: sEXVne<yxv/dro\|o]?;g3EPGGv']\|2TT.t8$(Vq1vbIv.j\*L'[.}.Xbep7 /G.u4K"91V%jc,\|i/nU+e6A~V?@_i8YP;6~~ry,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49945	51.222.241.100	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	767	OUT	GET /pull?pid=2583191d-9d1a-483f-97ec-86ebd89e7576&tr=1&g=1&return-unstable=true&gdpr=0&gdpr_consent=&redirect=https%3A%2F%2Fsync.sharethis.com%2Froqad%3Fuid%3D%24BROWSER_ID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: ws.rqtrk.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:43 UTC	554	IN	HTTP/1.1 302 Found server: istio-envoy date: Fri, 26 Apr 2024 18:32:43 GMT content-length: 0 p3p: CP="NOI DSP COR DEVa PSAa PSDa OUR BUS UNI COM NAV STA" cache-control: no-cache,private pragma: no-cache expires: Fri, 26 Apr 2024 18:32:42 GMT set-cookie: browser_id=1:8b2f262a-441f-4f69-9075-2d2b920e1fd5; Expires=Fri, 03 May 2024 18:32:43 GMT; Domain=.rqtrk.eu; Secure; SameSite=None location: https://sync.sharethis.com/roqad?uid=8b2f262a-441f-4f69-9075-2d2b920e1fd5&gdpr=0&gdpr_consent= x-envoy-upstream-service-time: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49948	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	930	OUT	GET /xxrz/1200x600/793/86/11/86112a473c75bb3e179e7892bdda6b84/86112a473c75bb3e179e7892bdda6b84.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	721	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: image/jpeg Content-Length: 591922 Connection: close Last-Modified: Thu, 21 Dec 2023 07:52:48 GMT Vary: Accept-Encoding ETag: W/"6583eed0-16b64d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7jzkbcwdELBnXrN4wrY6TRc8empKD%2FOgbhB714ikQ8928J9D70hOm6swNnIXpZbM5O8b9twYckP%2B40xZDfvo9rW7UX7qjNrD8446nBBD0FquZEWSzxqy0pAgEou8QlPclbiP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a838de867431-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	648	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 01 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 22 7f 29 80 6f b2 52 37 06 a3 16 88 ea d3 af d8 b3 89 48 5b fc ab ad 7c e1 16 d2 06 a4 86 30 f7 7d 2f 40 42 e4 56 6a 4c 04 a8 f5 84 78 36 52 1c 39 3a cd 15 89 10 62 19 64 86 bb 9a 27 c4 98 12 64 b7 9e 0f 58 d2 e9 5b ae 64 29 c0 7c 28 20 81 60 c9 c6 76 24 90 24 fd 84 27 26 4a 3f 64 e8 a0 bf 37 24 2a 52 09 be 12 5b 53 be 36 36 94 45 37 71 f5 ee 8c 3f 3a 69 c4 06 fe 63 db 02 5a 97 54 11 7d 1a a7 f8 aa f0 4c cc ba 25 02 31 d0 09 2c 0f cf 5d 8a d4 e2 38 f3 b7 73 6b 1d 9c 10 92 fb 72 83 0d c8 a4 92 b8 75 32 07 36 c8 fe fd cf d1 f6 b3 5e 7e 2c 93 4f ca c6 7a 12 40 12 18 04 ef bf 89 89 f1 85 10 78 0e 3b 13 20 fd 07 c6 40 c9 db 2e 91 a2 c4 5a e0 2e 5a 19 6d 88 84 82 96 07 34 50 88 9a 1c 68 5f 62 b3 38 81 05 86 0e 71 b3 80 d5 fa f9 31 84 ae b8 74 3d ea 7f c3 ca b2 Data Ascii: ")oR7H[\|0}/@BVjLx6R9:bd'dX[d)\|( `v$$'&J?d7$*R[S66E7q?:icZT}L%1,]8skru26^~,Oz@x; @.Z.Zm4Ph_b8q1t=
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: ec f5 a4 54 0c 5f 42 d3 ed 52 d5 31 9b bc 2d 99 65 06 60 61 cb 32 7b 06 eb c7 f6 fd 6b a3 4a ea 39 85 36 75 06 68 a5 45 2c 79 cf 24 52 9a 94 c4 13 ca 63 b0 80 64 50 e6 e0 e3 06 7e 5c d4 c0 8f cb 25 ac ea 1d 10 c2 2b 7e 67 6b 6a 40 15 df 44 f3 22 e9 61 80 ff 00 3e 44 49 f9 e9 3e 37 dd cf 28 f1 b6 dd 7c 17 d4 64 fd 18 b3 71 ca 9b 00 3e 1c 24 d0 0b 3a 0c b1 76 19 c1 20 f3 c2 6b d1 f7 ec 64 03 a2 92 d2 76 f6 78 c3 3d 15 09 cd 7a 01 3d fa 9e be 6c 0c ec db 5d 9e d7 39 88 ba 73 b7 ba 2b 1c d8 a8 ac 7a 61 eb f5 fa 47 99 e3 52 12 2c c8 d0 d2 d0 49 0c f1 9d 7a a9 01 37 93 47 da be 05 8a f1 f3 ea e7 71 a5 fe 92 80 a4 8e c7 24 c1 9e 2d 89 2a e4 93 6d 41 94 b4 da 76 72 56 0e 54 91 4a 0f 91 7f a4 9f 64 60 66 aa 8b 67 91 75 8e 4c e2 3d c3 5a 32 28 17 b5 71 59 37 9e 5b Data Ascii: T_BR1-e`a2{kJ96uhE,y$RcdP~\%+~gkj@D"a>DI>7(\|dq>$:v kdvx=z=l]9s+zaGR,Iz7Gq$-*mAvrVTJd`fguL=Z2(qY7[
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 33 c1 79 14 6e 2f 6c ab ad b9 70 6e c9 2a 09 cc f2 36 3f aa f9 9e d8 1d 58 7c 28 6b 1e c8 ac 8b 12 0d cb 54 14 91 af 36 92 a9 35 94 5a 76 f9 92 fc f8 98 ef ae 03 11 09 1c 6a 8b ba ab e7 e1 5d 19 76 f7 3a 61 e6 9b 8d e6 1d 2e ce 95 c4 ce 28 eb e5 85 0b 47 25 21 7c 4a 2c 6e 2d 53 b4 ea 8c a2 4b 4a f9 83 d4 f8 4f ee 94 0f 50 be 1c d1 d1 fc 07 7b e6 f1 9d 71 1b 9c f5 9e 5b d7 95 3e a7 79 dd d4 d4 46 ed 88 39 76 37 92 db 4f 0f 6f b4 20 a0 92 a8 89 59 90 10 2e 66 bd 61 8d b9 30 d2 06 b9 df 0d ec ff 00 2d ea af a3 ab 53 36 5f 00 e8 d6 68 95 2b f6 1f 7a 65 7a f9 49 a6 c1 79 bc 21 b8 16 c0 22 30 d8 0f 70 62 55 9f 6e ff 00 40 fc 9c f4 af bf 71 99 c0 82 83 bb 15 01 9c 98 0b 9f 99 2c d9 70 9a eb 37 31 54 cc d7 e6 24 e0 db 33 3e 82 be 26 15 8a 12 34 76 86 87 8c aa 9a Data Ascii: 3yn/lpn*6?X\|(kT65Zvj]v:a.(G%!\|J,n-SKJOP{q[>yF9v7Oo Y.fa0-S6_h+zezIy!"0pbUn@q,p71T$3>&4v
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 7a 37 1f d5 95 51 a9 10 00 d4 22 f6 d5 2d 2f db 3e 81 54 b9 89 b0 8c 24 30 60 a2 b7 87 42 d7 b1 db cd 1c d1 0d 0f 51 db 96 3a f6 d2 ba 6b e9 c7 a5 b8 61 d7 ea 99 64 98 00 2b 0a 33 24 51 72 df 39 30 75 06 12 34 3b 5a ab f4 97 a6 8b e1 42 dd b9 60 b4 35 55 60 a1 03 1a c2 10 1c fd 76 d7 42 35 b8 db ef 9a 7d fd a7 7a b9 49 92 f4 65 a3 01 69 5a 97 c4 a0 c4 8e 48 56 08 54 24 f2 ab 12 2f cc 33 c3 22 d6 0c 36 b8 d2 12 9c b5 15 8d 59 59 8f d6 6e 82 3d c5 80 3b 41 e1 5f 6c 38 9a e2 e0 69 49 22 89 1d 85 6a 48 48 8d 43 02 97 8f f8 f8 c5 a0 c7 92 a3 91 0f 6e e0 80 c5 34 20 ca 03 07 37 51 b0 c5 49 5d 36 eb 33 11 55 e3 3d c6 77 2d 8d a7 30 e4 23 b2 88 c6 99 68 41 25 e7 d4 94 90 34 fe c3 5e 18 71 e3 37 75 d6 1f 57 6a c4 46 04 64 6c cb 09 9c c8 67 45 2b 90 c7 cb bc 91 48 Data Ascii: z7Q"-/>T$0`BQ:kad+3$Qr90u4;ZB`5U`vB5}zIeiZHVT$/3"6YYn=;A_l8iI"jHHCn4 7QI]63U=w-0#hA%4^q7uWjFdlgE+H
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 8c cd 07 c9 ec 06 17 1d a9 ad 1a 3f 6d 09 43 da b8 ea 22 65 6e d0 22 ce 27 6f 91 78 c4 66 e2 c9 32 86 4f 8b f6 e2 4d 1a 95 60 58 91 5d bb 44 a3 a5 5d 7d 5b e3 44 e5 48 87 ed 8a 72 35 04 de 6b ac 39 74 ed d8 82 a3 2a 89 cc f9 fe e8 5e 4e e2 f6 e4 f5 87 12 68 dc da af 64 86 8b 93 d6 53 22 ad b2 16 e2 cd 91 f4 1e 66 b5 b5 ab 13 0d 2b 23 4a 47 9e 74 74 c8 c9 e2 6b a5 6c 0a 61 1a 7b 59 95 0e 6c 6a 3d dc b7 b3 4c a8 71 59 ca 2d f8 02 d7 10 83 13 e7 5a 4d 04 c7 9b a3 05 d2 7b 77 a0 51 fb 1a ac b1 72 5a f9 61 ae ee ec a7 36 57 12 4a 1d 91 ac f5 b1 4a bb 81 9f 6d a7 c8 19 84 42 6e f1 19 30 7c 9d b9 6b 76 bf 79 8b 9a 3d 4d ce 37 d3 b1 42 9a 7a 33 59 b5 e4 b9 c5 a7 56 27 32 4f 15 58 65 65 ca c0 36 62 f5 b6 15 b7 a3 59 a7 3d 80 5d 97 89 6c 10 2a 6c 55 e6 58 be 33 9d Data Ascii: ?mC"en"'oxf2OM`X]D]}[DHr5k9t^NhdS"f+#JGttkla{Ylj=LqY-ZM{wQrZa6WJJmBn0\|kvy=M7Bz3YV'2OXee6bY=]llUX3
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: d8 53 53 e2 52 ee 97 3c df 30 3e b3 26 f4 4d 87 47 79 db a6 32 3a fa c2 1c d3 b6 6d 79 66 52 7a 56 40 f1 2f d5 ff 00 0f 4e 7f 27 b5 69 7b 0c 4e 87 24 15 1b 05 57 68 df 47 84 cd 2b be d8 35 5e ad cf ca 24 dd 04 68 5d 07 ea 2f 1f 55 bb 7f 15 6c 89 e8 15 6e 09 f4 37 26 f3 4e c3 e7 44 c9 3f 7d 68 be 93 1d e4 1f b9 f8 c9 e5 03 c5 79 5d 75 06 af 5c fd 06 a5 72 d9 83 51 5a 3a ab 11 da d6 7a 8f b7 56 27 81 d5 ed 93 9d ff 00 48 e8 79 21 bf 7e 5d 62 45 26 91 9b 5d 39 f7 4e 5c c6 50 fa ce d9 ac 1a 2c 12 3f 9a 0a c2 9e ee 8a 84 3b 23 36 e1 dc b7 72 a8 86 46 d3 75 55 76 cb 4a d7 d2 09 3f 36 eb 39 2e 71 76 41 53 58 2a e4 a5 35 b0 92 ba b1 29 0d 5b 30 80 25 dd 95 b8 d5 62 bc db 16 2d 86 af 8b d3 db 14 60 0d 8b 18 a1 b4 b3 3a a8 26 e6 1f 0f 08 50 72 d0 a8 d8 c6 96 e5 da Data Ascii: SSR<0>&MGy2:myfRzV@/N'i{N$WhG+5^$h]/Uln7&ND?}hy]u\rQZ:zV'Hy!~]bE&]9N\P,?;#6rFuUvJ?69.qvASX*5)[0%b-`:&Pr
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 3c bf 68 81 cf a8 d3 4f 46 e6 b9 49 21 d2 06 1f 26 a5 e4 55 16 98 fa 88 24 53 a6 ef d9 90 c0 5b 6f 21 58 c1 b9 7c 74 f5 8e 38 e5 1f 98 16 04 4e ee 80 df b7 f6 71 bf ec b5 18 94 7d 70 3d 0d 2c 7e 57 0e b9 79 f5 c3 3b c8 5e 51 40 9f 63 64 9b 02 de 19 ec d2 02 81 96 8a 22 0b b0 7e b1 ac 78 ec 4a dd fb 20 eb 9b 4d 79 be ad ec 0a da c8 44 c1 72 91 39 41 b1 f1 d4 6e 11 5e 6f 77 4a a9 95 93 1b 2b e4 d4 45 3c e2 78 94 37 56 64 21 a4 a4 30 ec 22 e3 64 51 fd 98 26 8f c5 a1 24 fa ad 1c 7a 13 9e 3b 7a 83 79 20 38 ec 39 69 c4 7e bb 36 c5 0a 51 78 f7 53 43 26 66 11 79 20 90 8c 66 37 11 1d e9 8b 02 23 9b 4b 2a b5 cc 53 3b 1d 1e fc 78 66 7e c7 fe 96 3c e9 78 59 fc 2c 9c 0c 6b cc 00 bb 29 18 77 1f d6 90 f8 a3 15 d8 7f 37 cd 97 5a 16 73 a7 b1 53 4e 10 75 58 5b 55 02 73 df Data Ascii: <hOFI!&U$S[o!X\|t8Nq}p=,~Wy;^Q@cd"~xJ MyDr9An^owJ+E<x7Vd!0"dQ&$z;zy 89i~6QxSC&fy f7#K*S;xf~<xY,k)w7ZsSNuX[Us
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 6d 4e 7c 8c 85 d0 cd 77 31 63 51 86 83 82 e6 ac 61 ac 31 31 81 89 75 29 12 2f 8d 55 f4 b7 22 7e b3 1e 66 84 97 d6 dc cd 12 a8 a3 f3 31 28 9a 3f 63 d3 bf c9 7d 8e 3e fe 21 f2 08 dd 28 c5 7d e1 74 40 57 d2 07 2a ab 55 f6 08 8a e3 cb 4c 23 99 a4 0c 91 4b cb 18 8d 12 30 53 e2 86 0e 03 75 95 96 9b 0b 5a ba 37 77 f6 a5 8d 69 73 32 15 68 49 61 ca eb 39 9d 82 a8 79 e0 d5 08 02 c4 95 d2 f5 fa 4b 8e af 03 01 b9 aa d7 fc 15 4f 6d 4b 4e a3 7f 8a 69 3c 17 be 6d 1c e6 9d 83 67 8d b9 c9 ee db 06 65 47 ca de ac b6 63 51 a2 ab 19 fe 05 26 89 16 b3 2d 56 3a bf 22 f4 8e 31 00 73 68 d1 2e 74 d4 d4 f8 7b ea aa ec f6 0c d3 f3 69 94 49 f3 76 7e f4 18 5c 54 13 76 75 7b be 23 36 a1 6c 70 d4 de c6 cb 7f f9 fb b4 66 5b 2c f2 3f d7 ff 00 16 22 3f d7 72 0b 54 ad 2b 7e 76 5a da 86 0f Data Ascii: mN\|w1cQa11u)/U"~f1(?c}>!(}t@W*UL#K0SuZ7wis2hIa9yKOmKNi<mgeGcQ&-V:"1sh.t{iIv~\Tvu{#6lpf[,?"?rT+~vZ
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 0d c2 2b 7c 7e d2 cd d3 4e 65 d4 ae a9 ad 23 3a de 3b 2d 48 e4 8c 50 63 56 1e 8b a4 5d 79 8b 70 78 af ee 67 8f b5 ce eb 9f 25 27 6a ee 81 cb ec d1 35 ab 00 ec 9a 92 47 8f ef 1a 9d be 2d 44 ea 6c de a9 a6 3d b0 a3 37 25 7e d1 e8 25 11 6f d4 f7 0a 70 8d 7f 51 5f c4 8e 62 c5 89 4e 3e 1f ec 56 5e f5 63 2a 7e 6d 16 b1 c2 b2 84 93 d7 b3 60 9a c9 05 90 8d 27 b0 58 51 47 42 d2 bd c0 ee 65 a2 bd 07 c8 b2 8e bd 38 7c b1 fc de 40 c3 3a b1 d1 39 47 0d e5 81 c4 12 c3 9a db eb d9 7a 72 0e 1f 46 b2 75 bc 72 14 62 5d 7d ec cb fe 79 eb 2e 95 53 1f 5a d8 d5 bf 69 52 0c 9d bd f6 aa 45 0d 2f 4a ab e5 f7 a9 d4 c7 35 da 7c 7d be 81 80 dc 35 75 b2 b5 c5 52 36 c4 ad 75 d0 d1 c7 e8 6c e4 6b 95 8d 0f 20 6a fa ff 00 fc 9c 8c a2 c3 52 fc 5e c3 2e 1a b5 6a 50 09 05 69 d5 57 e0 9b c1 Data Ascii: +\|~Ne#:;-HPcV]ypxg%'j5G-Dl=7%~%opQ_bN>V^c*~m`'XQGBe8\|@:9GzrFurb]}y.SZiRE/J5\|}5uR6ulk jR^.jPiW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49947	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	929	OUT	GET /xxrz/250x400/793/72/a2/72a241dad98940029994fbe42b5a85ae/72a241dad98940029994fbe42b5a85ae.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	725	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: image/jpeg Content-Length: 80528 Connection: close Last-Modified: Thu, 21 Dec 2023 07:52:22 GMT Vary: Accept-Encoding ETag: W/"6583eeb6-11c1c" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LYyWh3UZUcizzj0vfPwerRb%2F38hRd9QmV29cKPZ5m%2BfXHxAwS0uKbPfy0MzqmsnpL%2FLc6QdtJUhiYNqc2hOfk%2BD0j0W93SrGHLZbaPia8WKRfC8BVUpaEM0FHznei%2BuWk5wL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a838d92a0985-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	644	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: c2 a5 65 36 86 12 82 9e d5 61 ba 67 38 8e f5 4e c1 f5 fe 0c dc 85 0e ee 85 ce 72 9f 43 1f d4 32 95 f9 a5 22 46 ba 93 3d 6f 11 9c d6 61 08 29 e3 77 5c 75 56 8d 6e b7 24 ae 44 c7 3e 9d 77 7e 13 3a 45 6a d1 5e 89 5b 27 d9 9d 60 0d f5 53 98 75 ab ce 52 f3 30 0c f7 3b b4 63 d3 39 2c 61 b2 69 0a b4 6e 42 02 ec b5 62 e5 fd 7b a8 52 7a 7d 37 03 61 08 be fc a2 eb f6 cb 97 c5 e3 46 e1 67 4a e5 31 3d 0e c8 fe 5e b5 ed 89 62 f6 0b 65 cc 12 14 8e 9f a5 0b 5f 73 1a ae 3f 28 dd a3 63 90 76 79 69 9b 12 15 c9 21 ea 59 0a 06 41 e3 70 41 ba 59 20 d5 da 61 cd fa cb b5 ab ad 36 77 1d bd 85 4e 42 66 2e 91 ca 9e b9 54 52 a2 1c ef 79 70 e9 4c c0 c1 94 d7 55 ed 47 8a e9 b0 cc 3e f6 13 9d 9d 56 6a 8e 50 c7 3d 97 ea b2 75 55 8a d4 b4 88 c2 9a 4e ec d4 eb 33 a7 af 24 22 6a 1c b6 95 Data Ascii: e6ag8NrC2"F=oa)w\uVn$D>w~:Ej^['`SuR0;c9,ainBb{Rz}7aFgJ1=^be_s?(cvyi!YApAY a6wNBf.TRypLUG>VjP=uUN3$"j
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 66 d2 6c 5f 0f 55 88 9a b8 fb 11 f0 7a 4c 5a 44 ed d2 10 bf e5 53 4c a1 0d f2 87 e7 8c 99 5b 89 7d 67 82 d8 32 1d 39 6e 30 7e 96 3e 50 9d 54 5d d8 56 3e 20 43 42 65 fa 1d 90 7e 79 56 95 0f d2 40 b7 85 66 9a ed b0 f0 b8 09 25 53 9a 94 59 b7 f1 34 ee f7 ed a8 0e c0 31 28 3c ab a8 aa 4b e9 bb 88 56 d5 69 96 57 c6 4b 04 2c ba c6 26 f9 0a 71 98 3b d8 1a d1 68 11 b3 97 44 e7 ab 00 60 35 d0 71 74 af ef e6 4d ec 82 ed da 7f 38 d6 f8 ad d1 73 15 a5 0c d1 d0 b8 1d 12 a5 9a ad 42 ea 7e d4 37 c2 eb 2c 66 c6 44 94 2c 3c 68 a4 ca 48 88 b1 09 25 18 bf 45 c3 27 97 48 2d a0 81 0e 96 08 ed b1 88 47 27 24 a0 17 61 4b 36 ca 80 c4 50 cc b1 93 e0 d9 86 a9 49 15 28 78 12 f5 aa f3 52 3d cd a8 5e 1c e9 27 f3 23 11 d7 8f 75 e2 5a 15 64 be 35 69 78 4b b3 e5 25 1b 71 cf 8e bb 87 6d Data Ascii: fl_UzLZDSL[}g29n0~>PT]V> CBe~yV@f%SY41(<KViWK,&q;hD`5qtM8sB~7,fD,<hH%E'H-G'$aK6PI(xR=^'#uZd5ixK%qm
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 47 63 99 93 1a 59 85 65 41 95 f5 ba f9 94 69 50 5c 3d f3 cc 8e 23 b8 4e 15 a2 fb 25 24 31 36 8c dd 93 23 91 e3 c8 72 c1 d6 2f 42 3a 0c 2e 1a 91 06 b9 2d ad 8e 43 99 1e e7 11 ad c2 3b 9c 6f d6 79 4e 54 a9 36 4d ec 79 1a 2e c8 18 33 93 d6 f8 1b bc 28 f4 de 69 b4 13 80 51 7f fa 55 5e d1 7f ac 53 31 aa 43 46 2a 77 ea e6 ca 1b 5a b3 dc dc 8b 66 57 35 b6 a6 ea 89 fd f3 ce 0f ab d6 b6 b9 24 4a 1c 41 a8 25 41 56 ab 98 e6 a4 49 3f f2 53 98 4a ed ef cb 44 d5 65 50 ee 5b bc 88 86 93 f2 86 80 e7 08 01 39 92 a2 2a 38 5d c6 fd fc d3 a5 5b 40 2b 5b 23 5b f1 f6 b7 69 59 aa 6a 30 6f f4 fb d8 a4 a8 f2 6b 1c 6b 71 12 a2 5b 44 bd 06 f2 17 d6 ef 71 5c 91 1c e5 21 c8 f6 b8 7d dd 9e 8f 91 83 82 f6 35 15 38 47 22 a3 13 1a ce 32 9a 40 40 f8 f2 c5 2a 3b e4 22 e4 94 f6 20 62 b5 af Data Ascii: GcYeAiP\=#N%$16#r/B:.-C;oyNT6My.3(iQU^S1CFwZfW5$JA%AVI?SJDeP[98][@+[#[iYj0okkq[Dq\!}58G"2@@*;" b
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: a4 b1 87 51 a6 da d4 98 4b 09 08 44 bb 6d 60 ed 26 12 c2 15 7d 3d d3 cb 2f 6b bb 89 89 b6 da 5d ae b7 42 5a ac 3f bb 24 2a b7 1e ae 72 f0 ec 23 7a 11 70 92 1c 8e 0c a1 33 1f bb 7e 89 93 bc ab 6c 56 9f 68 bf b1 76 d5 b0 c7 ac cf 24 fe ca 1e de a6 e8 78 37 36 b7 10 24 eb d6 d1 49 a5 ea 27 95 33 cc d1 18 1d 8e 18 d8 47 6b f6 f6 9a b4 8d 83 74 a2 93 4d 25 cf a7 b9 f0 46 c0 e8 d4 be 44 bd a8 b0 a5 d3 a3 45 b3 91 5d 51 15 22 f9 1a c6 16 d0 9a d6 cd 71 6f 7e d1 74 56 8f 95 74 62 87 18 fe 31 84 47 ac b8 3c e3 f8 1b 7e b2 4d 7f ac 6e ea 8e 7b 15 31 5e ae 14 e3 a9 80 84 f7 3c 52 38 36 cf 7a fd a6 f7 6a b4 7c c7 55 d6 24 b2 53 6b 0c 1e 58 de 38 51 74 5f 8f 36 eb 67 b0 3c dd 9e d9 b1 9d 59 02 64 b1 0e 28 f5 cd 96 3c ed 3a 8a c3 4a a6 16 97 ef 82 2f 1b ad 78 62 45 89 Data Ascii: QKDm`&}=/k]BZ?$*r#zp3~lVhv$x76$I'3GktM%FDE]Q"qo~tVtb1G<~Mn{1^<R86zj\|U$SkX8Qt_6g<Yd(<:J/xbE
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: c3 e4 ab ba 9d 72 ba 8e 39 36 26 54 96 75 49 f4 eb 24 9f 49 e6 cb e0 d3 eb 35 cf 83 2a ef 70 d3 89 0e 38 60 11 cc 00 88 35 d3 61 9a 6d f4 0b 26 91 ec 90 fe e2 b3 9c 99 4b 6f 61 26 41 ef 95 a4 2d f4 c5 57 59 4d 7e 7b 88 83 0b 39 0f 4c f4 e4 b2 8a 01 51 5b 3c 54 94 34 a6 97 67 e2 23 95 f3 7c 5d 2e 86 3c 2b 02 a4 61 df ad 5c 8d 76 fb f6 23 ba d5 a1 5e be 76 d7 4d 49 af 6b fb 2d 26 bb 55 1a 0e c5 e4 1d 90 b7 14 d4 05 d7 a0 46 ba 5f 08 47 b7 ae ab f3 b6 d5 1a f7 62 24 69 d0 56 fd b4 76 14 f5 60 07 c9 99 0e 24 19 1a ac ff 00 d5 d5 8a 7d 89 6b e8 e5 9e 4b 7e 7c 38 83 a3 9f 02 41 2c d9 eb 98 e5 c4 7b 3a c5 43 11 5a bf 5f 85 94 b6 62 7d 6d 95 60 ea 64 5f 8a 5e b3 b0 70 1b 69 b1 26 32 38 29 a0 cd 81 43 1e d9 90 d9 af 50 c4 f2 85 a4 d9 da 7f 8b 6b bd c6 ae d6 27 3e Data Ascii: r96&TuI$I5*p8`5am&Koa&A-WYM~{9LQ[<T4g#\|].<+a\v#^vMIk-&UF_Gb$iVv`$}kK~\|8A,{:CZ_b}m`d_^pi&28)CPk'>
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 6e 7c 86 e7 c8 66 7c 86 e7 bd 32 31 a2 7c 9d 83 72 a9 bb b3 db 37 ea fd 92 0e ed b9 43 d8 9b aa 6c 4b ad dd eb bb 70 e9 22 46 df 2a 97 3c 65 b2 26 c5 5f e4 7b d8 94 9e 57 3e d4 16 cc ab db 23 57 6e db d4 ea fd 46 3e cd bc 83 64 a8 81 ba b6 05 d9 fc 83 01 fb 07 fa ea a0 ec 89 bd c6 1d d8 f7 b0 44 9f 6b bc 45 9e d0 6c ef 4c 65 d4 e9 2b 49 f2 85 26 3e df ae a0 d6 d7 5e 98 84 93 08 2b fb 80 e2 aa e3 e3 c8 18 7e ff 00 f9 e5 7f 3c fe 39 ca 5b 89 94 56 7b ce c8 cd b7 6d 7a b5 11 0c f6 ae dd b4 9f 64 9d df 3d 98 86 c4 36 21 71 85 e1 3e 4f d8 e6 39 16 3c de 31 93 91 53 da c7 20 c8 66 ac 2d 8e e2 2e 7f b0 9f 89 ca e1 14 7e be 71 1d 9c e7 6c e7 39 ce 73 b6 73 f9 46 e2 0f e9 df f7 ff 00 c7 de 76 5c ee a9 8d 3e 7b b1 af 4c 69 78 c6 49 54 c6 cc c1 4e e3 19 31 1f 9f 29 Data Ascii: n\|f\|21\|r7ClKp"F*<e&_{W>#WnF>dDkElLe+I&>^+~<9[V{mzd=6!q>O9<1S f-.~ql9ssFv\>{LixITN1)
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: eb 7e 83 6d cf 5a f9 e3 3d 02 23 e9 31 97 b0 b4 f4 6b a0 df f6 70 d1 e9 66 a0 6b a7 9e 3f e9 8b f0 f0 d9 8c be 6a a5 96 69 8a fb 39 72 ad ca e4 16 57 8d 6d 49 f1 ab a3 d1 e8 50 63 e9 24 90 41 90 cc 99 a8 13 97 e5 12 75 69 16 9e 14 1b 92 1b 5d 75 17 bf 53 58 e1 d9 78 e4 27 6d 4a 4d 6d f1 db 19 3e 19 90 e1 f1 a5 af 8e 47 0e c8 a1 56 46 14 29 0b f5 54 52 7e 1a b0 9c 22 1e 21 1c 66 3c ac d0 b5 36 b9 1b 68 db a6 d4 7e ea 9e b7 d0 59 c6 77 2d 9c e1 ec d0 6a fa 90 4e 9a b2 a3 51 ad 3d 3d e3 a7 7c 71 37 31 e4 e3 f0 16 2c cc cc 3b 51 a1 bf ce b1 1e 48 66 e5 00 b2 27 9b 39 a0 07 ec 62 1e 10 b7 a3 9a a7 e2 3b 8f 3e d6 0e 38 7f d1 ac a0 f1 e6 4f 37 c9 05 7e 7f a6 d8 83 87 64 a0 fe 04 2a 07 6b df 0d 1b 93 e0 7d 2b d8 56 27 82 66 56 2a bf c3 5b 61 de b1 97 89 e4 95 08 Data Ascii: ~mZ=#1kpfk?ji9rWmIPc$Aui]uSXx'mJMm>GVF)TR~"!f<6h~Yw-jNQ==\|q71,;QHf'9b;>8O7~dk}+V'fV[a
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: f2 c8 28 ab ba 5f 5b d2 a9 7f 3d 94 69 e9 df 1c 2f 87 47 92 8a 0e 28 e9 14 72 2f 3b 32 16 69 92 39 34 c1 0f 38 18 61 61 e2 92 57 00 e8 d4 bc bd a5 2b 22 7d 5b e6 f8 bc 59 c7 59 33 59 4c a4 8a 96 10 a8 95 25 5d 46 db eb d6 41 2b 16 fb 4c e5 b5 9d da ce 33 5c 4a 39 e0 6c ae 46 34 ca 65 dc 01 2f 2c 99 25 97 bd 49 2b f8 b4 93 f6 53 4f 4d f5 6d 5b 47 4a 76 be f8 54 20 6f f2 f8 ec 3f df 1f e7 4d c9 f6 95 81 24 8d 8c 7a 8a cb 5a 19 87 ba c2 8d 15 20 de 1b 8e e4 f9 43 da 75 42 64 b2 be 12 ca 6b 66 1a 80 f4 3d 3b e1 5a 3c d2 6b cb c8 b3 01 4a c5 0d d7 dd 24 75 51 5f d3 1c 2f 2c 90 c4 5c 28 d6 f6 6f bd 6d b0 f2 18 00 e8 f0 03 66 ce e7 61 d3 1c bd 3f 58 e3 5e 9d f4 ae e7 10 e6 52 48 63 bd b9 9a 01 52 3a 6f e2 fc 36 c7 12 e1 f1 8d 4d 02 2e 82 04 8e 81 6d 56 cd 06 f0 Data Ascii: (_[=i/G(r/;2i948aaW+"}[YY3YL%]FA+L3\J9lF4e/,%I+SOMm[GJvT o?M$zZ CuBdkf=;Z<kJ$uQ_/,\(omfa?X^RHcR:o6M.mV
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: fc ab d7 fe 71 c3 a0 39 80 93 4c fc bc bc 7a b9 ac 76 f0 8f 75 56 eb 53 1d e9 46 f4 09 ed 8c d7 14 19 82 89 e2 8b 24 bb 65 a1 ee 08 60 c5 e4 0a 01 2e dd 6c 9e b7 54 36 c3 40 1b 88 08 e3 75 65 7a 90 32 d5 00 48 6a 15 d2 bc b1 a8 c5 36 55 81 2c a4 f2 ce da a8 d6 c7 bd 02 36 f9 60 cc 12 6e 49 1e f0 d4 34 8d 88 c7 11 5c de 67 32 5d 1e 38 e0 1a 61 88 1e a4 ae de 5d 59 af 19 68 99 50 a4 a5 24 65 aa d8 13 d4 60 c3 07 b4 1b 8c 2e de e8 f0 ee 3a 9f 9f e5 88 57 2c aa ba 61 4b d8 7b bb fc f1 c4 88 1c b4 42 3b 93 55 ee ed a7 a7 a9 c6 a7 fb df bd bf db 1c 3f 35 94 55 52 a9 3c 6f e7 13 96 37 7d c3 7e 55 89 26 2c 6e 29 5d c0 50 7c 6a 16 8f 91 d4 7f 31 8c b2 b4 a4 16 e5 0f 55 b1 77 5b 30 b2 08 f9 75 e9 89 18 a5 d7 29 4d ed b7 5a f4 c6 5d e3 26 9e 48 d5 34 92 cc 35 1f 77 Data Ascii: q9LzvuVSF$e`.lT6@uez2Hj6U,6`nI4\g2]8a]YhP$e`.:W,aK{B;U?5UR<o7}~U&,n)]P\|j1Uw[0u)MZ]&H45w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49950	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	631	OUT	GET /home HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:44 UTC	947	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LmPvqlsnh12YYVqYAC5xOrs8PbccCfvH7DZxzLy7R18JZgZBi5juvoDvhYC4wvledUoVf912BldoNXs7rHn9bOwDk%2FkFzjpXtSfSEl%2BXgay7vn9XCnn%2BJF7JsnaraXs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a838ed08333d-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:44 UTC	422	IN	Data Raw: 37 62 66 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 23 31 4d 6f 76 69 65 73 20 7c 20 57 61 74 63 68 20 46 72 65 65 20 53 74 72 65 61 6d 69 6e 67 20 4d 6f 76 69 65 73 20 61 6e 64 20 54 56 20 53 65 72 69 65 73 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 Data Ascii: 7bff<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/> <meta
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 22 3e 0a 0a 3c 6c 69 6e 6b Data Ascii: ref="//www.google-analytics.com"><link rel="dns-prefetch" href="//www.gstatic.com"><link rel="dns-prefetch" href="//fonts.gstatic.com"><link rel="dns-prefetch" href="//cdnjs.cloudflare.com"><link rel="dns-prefetch" href="//static.zdassets.com"><link
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 20 53 74 72 65 61 6d 69 6e 67 20 6d 6f 76 69 65 73 20 6f 6e 20 31 4d 6f 76 69 65 73 2e 74 6f 2e 20 31 4d 6f 76 69 65 73 20 69 73 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 62 73 69 74 65 20 66 6f 72 20 66 72 65 65 20 6d 6f 76 69 65 73 2e 22 2f 3e 0a 3c 21 2d 2d 42 65 67 69 6e 3a 20 53 74 79 6c 65 73 68 65 65 74 2d 2d 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 34 2e 34 2e 31 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 Data Ascii: Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/>...Begin: Stylesheet--><link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css"><link rel="stylesheet" href="https://cdnjs
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 5f 43 3c 24 2e 43 42 3b 24 2e 5f 43 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 75 2e 64 28 74 2c 24 2e 43 61 2c 74 29 2c 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 26 26 6e 5b 24 2e 43 63 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 43 69 5d 3b 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3b 7d 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 75 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 24 2e 43 46 5d 5b 24 2e 43 4a 5d 5b 24 2e 42 7a 5d 28 6e 2c 74 29 3b 7d 2c 75 2e 70 3d 24 2e 42 75 2c 75 28 75 2e 73 3d 24 2e 42 78 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 66 75 6e 63 74 Data Ascii: _C<$.CB;$._C+=$.y){switch($._C){case $.y:return u.d(t,$.Ca,t),t;break;case $.BD:var t=n&&n[$.Cc]?function(){return n[$.Ci];}:function(){return n;};break;}}},u.o=function(n,t){return Object[$.CF][$.CJ][$.Bz](n,t);},u.p=$.Bu,u(u.s=$.Bx);break;case $.y:funct
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 6e 5b 24 2e 47 75 5d 28 24 2e 64 79 29 2c 72 3d 74 5b 24 2e 63 6a 5d 28 29 5b 24 2e 65 46 5d 28 29 2c 65 3d 74 5b 24 2e 42 74 5d 28 24 2e 64 79 29 3b 62 72 65 61 6b 3b 7d 7d 7d 29 2c 75 5b 73 2e 5a 5d 3f 28 6c 3d 21 24 2e 42 44 2c 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 5a 5d 29 29 3a 75 5b 73 2e 57 5d 26 26 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 57 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 6e 3d 74 5b 24 2e 63 72 5d 28 29 5b 24 2e 64 64 5d 28 29 5b 24 2e 47 75 5d 28 6e 65 77 20 52 65 67 45 78 70 28 24 2e 64 7a 2c 24 2e 42 75 29 29 2c 75 3d 24 2e 24 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 74 5b 24 2e 49 69 5d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 65 77 20 77 69 6e 64 6f 77 5b Data Ascii: n[$.Gu]($.dy),r=t[$.cj]()[$.eF](),e=t[$.Bt]($.dy);break;}}}),u[s.Z]?(l=!$.BD,($.BD,a.$)(u[s.Z])):u[s.W]&&($.BD,a.$)(u[s.W]);break;case $.BD:var n=t[$.cr]()[$.dd]()[$.Gu](new RegExp($.dz,$.Bu)),u=$.$();break;}}}},t[$.Ii]();break;case $.BD:var t=new window[
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 43 42 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 4f 62 6a 65 63 74 5b 24 2e 65 5d 28 72 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 2c 72 2e 56 3d 72 2e 51 3d 72 2e 6e 6e 3d 72 2e 74 6e 3d 72 2e 72 6e 3d 72 2e 65 6e 3d 76 6f 69 64 20 24 2e 42 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 44 43 3a 63 26 26 28 63 5b 24 2e 42 5d 28 61 2c 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 63 5b 24 2e 43 5d 28 61 2c 74 29 2c 5b 28 24 2e 42 44 2c 69 2e 75 6e 29 28 6e 5b 24 2e 63 73 5d 29 2c 28 24 2e 42 44 2c 69 2e 69 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 42 5d 5b 24 2e 74 5d 29 2c 28 24 2e 42 44 2c 69 2e 63 6e 29 28 6e 65 77 20 65 28 29 29 2c 28 24 2e 42 44 2c 69 2e 66 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 72 5d 5b 24 2e 62 78 5d 29 2c 28 Data Ascii: CB);break;case $.y:Object[$.e](r,$.Cc,$.$($.Ij,!$.BD)),r.V=r.Q=r.nn=r.tn=r.rn=r.en=void $.BD;break;case $.DC:c&&(c[$.B](a,function t(r){c[$.C](a,t),[($.BD,i.un)(n[$.cs]),($.BD,i.in)(window[$.bB][$.t]),($.BD,i.cn)(new e()),($.BD,i.fn)(window[$.br][$.bx]),(
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 43 4a 3d 24 2e 42 44 3b 24 2e 5f 43 4a 3c 24 2e 46 73 3b 24 2e 5f 43 4a 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 4a 29 7b 63 61 73 65 20 24 2e 43 66 3a 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 66 6f 72 28 24 2e 5f 42 6b 3d 24 2e 42 44 3b 24 2e 5f 42 6b 3c 24 2e 43 42 3b 24 2e 5f 42 6b 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 6b 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 65 3c 3d 74 26 26 74 3c 3d 75 3f 74 2d 65 3a 6f 3c 3d 74 26 26 74 3c 3d 63 3f 74 2d 6f 2b 69 3a 24 2e 42 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 5b 24 2e 42 76 5d 28 29 5b 24 2e 62 43 5d 28 24 2e 42 44 Data Ascii: :$.Cr;break;}}},function(n,t,r){for($._CJ=$.BD;$._CJ<$.Fs;$._CJ+=$.y){switch($._CJ){case $.Cf:function a(n){for($._Bk=$.BD;$._Bk<$.CB;$._Bk+=$.y){switch($._Bk){case $.y:return e<=t&&t<=u?t-e:o<=t&&t<=c?t-o+i:$.BD;break;case $.BD:var t=n[$.Bv]()[$.bC]($.BD
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 44 64 3d 24 2e 42 44 3b 24 2e 5f 44 64 3c 24 2e 43 66 3b 24 2e 5f 44 64 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 44 64 29 7b 63 61 73 65 20 24 2e 43 42 3a 76 61 72 20 75 3d 72 28 24 2e 44 43 29 2c 76 3d 72 28 24 2e 46 6c 29 2c 6c 3d 72 28 24 2e 42 44 29 2c 66 3d 74 2e 70 6e 3d 6e 65 77 20 6a 28 24 2e 61 42 2c 24 2e 42 75 29 2c 69 3d 28 24 2e 43 73 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 3a 24 2e 24 28 24 2e 61 2c 6e 75 6c 6c 29 29 5b 24 2e 61 5d 2c 77 3d 24 2e 43 78 2c 79 3d 24 2e 43 79 2c 62 Data Ascii: c,$.$($.Ij,!$.BD));break;case $.BD:$.Cr;break;}}},function(n,t,r){for($._Dd=$.BD;$._Dd<$.Cf;$._Dd+=$.y){switch($._Dd){case $.CB:var u=r($.DC),v=r($.Fl),l=r($.BD),f=t.pn=new j($.aB,$.Bu),i=($.Cs!=typeof document?document:$.$($.a,null))[$.a],w=$.Cx,y=$.Cy,b
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 24 2e 5f 65 3d 24 2e 42 44 3b 24 2e 5f 65 3c 24 2e 43 42 3b 24 2e 5f 65 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 65 29 7b 63 61 73 65 20 24 2e 79 3a 72 5b 24 2e 61 76 5d 3d 6e 2c 69 5b 24 2e 46 5d 28 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 72 3d 6e 65 77 20 45 76 65 6e 74 28 74 29 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 74 2e 4f 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 72 65 74 75 72 6e 20 68 5b 24 2e 43 67 5d 28 6e 75 6c 6c 2c 24 2e 24 28 24 2e 47 6f 2c 6e 29 29 5b 24 2e 61 61 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 28 24 2e 42 44 2c 75 2e 64 6e 29 28 72 2c 74 29 3b 7d 29 5b 24 2e 42 74 5d 28 24 2e 65 67 29 3b 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 Data Ascii: $._e=$.BD;$._e<$.CB;$._e+=$.y){switch($._e){case $.y:r[$.av]=n,i[$.F](r);break;case $.BD:var r=new Event(t);break;}}},t.On=function(r,n){return h[$.Cg](null,$.$($.Go,n))[$.aa](function(n,t){return($.BD,u.dn)(r,t);})[$.Bt]($.eg);};break;case $.BD:$.Cr;brea
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 2e 43 77 29 29 3b 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 76 61 72 20 74 3d 79 28 24 2e 46 71 2c 24 2e 47 45 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 6c 5b 24 2e 42 6e 5d 3d 24 2e 42 75 3b 62 72 65 61 6b 3b 7d 7d 7d 29 2c 28 24 2e 42 44 2c 61 2e 6b 6e 29 28 29 29 72 65 74 75 72 6e 3b 62 72 65 61 6b 3b 7d 7d 7d 63 61 74 63 68 28 6e 29 7b 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 69 66 28 76 28 75 29 2c 77 69 6e 64 6f 77 5b 24 2e 43 5d 28 24 2e 47 6c 2c 6e 29 2c 24 2e 63 47 3d 3d 3d 6c 5b 24 2e 44 73 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6c 5b 24 2e 44 74 5d 3d 21 24 2e 42 44 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 24 2e 4a 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 77 3d 6e 65 77 20 65 28 29 3b 62 72 65 61 Data Ascii: .Cw));});break;case $.y:var t=y($.Fq,$.GE);break;case $.BD:l[$.Bn]=$.Bu;break;}}}),($.BD,a.kn)())return;break;}}}catch(n){}break;case $.BD:if(v(u),window[$.C]($.Gl,n),$.cG===l[$.Ds])return void(l[$.Dt]=!$.BD);break;}}}},$.Jj);break;case $.y:w=new e();brea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49952	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	649	OUT	GET /ajax/banners?page=home HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:44 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: application/json; charset=utf-8 Content-Length: 60 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"3c-DFz73KHXVYZHM3DcVRSxkH+OTqg" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iEh7KZ1kqo9xFqyQ6UM8zlqMomuHGE0jshDb4rXEVzotBFWKkIjpazu5star8Jg7ffY1XtzFWP8UmW%2FjCc%2FNoGxTjAfnjvTz89cR0NU2RvpnQnUjOCCbwH%2BKPM%2Fn6b8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8390c3aa584-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:44 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 62 61 6e 6e 65 72 73 22 3a 7b 22 74 6f 70 22 3a 22 22 2c 22 6d 69 64 64 6c 65 22 3a 22 22 2c 22 62 6f 74 74 6f 6d 22 3a 22 22 7d 7d Data Ascii: {"status":true,"banners":{"top":"","middle":"","bottom":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49951	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	698	OUT	GET /xxrz/250x400/793/36/81/368175f08c3494fbab5bca96d16a83c5/368175f08c3494fbab5bca96d16a83c5.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: image/jpeg Content-Length: 90397 Connection: close Last-Modified: Thu, 09 Nov 2023 03:08:24 GMT Vary: Accept-Encoding ETag: W/"654c4d28-10e362" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sybUsK0U7l%2BVn3IiK8%2Bor0ZL7yNjDo7pIZsEc9butiq8be9E4VXyqKDdrjspomhrV89%2FcQRqPC%2Bla1YKGy15mVecgCZOtM0Go5IKaj0zXj4ttDOJmXgpQA14guFD7joAbq16"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8390fc9a554-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 77 e9 93 50 01 6c f2 af ad b1 52 e5 35 4a ac 92 41 7e 0b d6 d5 b6 47 8b 59 79 0a 91 45 e1 0b 02 aa 39 38 27 cb d9 2d b4 12 58 ab 69 e7 67 8f 08 47 79 0c 2c 12 c1 1a 9d 25 47 32 b8 c4 0e 13 78 6e e7 a7 d9 0b 84 f3 34 f0 f0 7c 8e cc 7d 26 21 35 16 54 d6 82 b9 6b 54 dc b3 58 f5 0f 13 b1 44 84 02 db 98 a0 a3 84 25 50 ac 9a 11 0e 53 c0 4b 82 85 57 b4 b8 23 6c a9 57 5d b2 99 06 f5 30 09 6e e7 6a 85 af d4 68 c5 30 30 ec 9a 13 da ea 76 49 2a 29 e2 60 d6 16 c4 0e 19 90 78 7a 06 89 35 16 9b 2b b8 dc ba 1a 72 25 b7 cd 37 08 55 fc 57 96 f7 f7 2c 80 e2 fc dd a8 b6 da 88 7a bc cd 54 57 0e ea 71 8c 8b 62 dc 79 57 dd bc b4 6f 61 3b 25 2c 6c 91 ab 8c 32 72 b3 ad 3a 1f 59 9c 7e 25 8e 76 61 d3 6a 52 b0 e2 d7 a2 c4 fb 5e 6e 11 43 d2 4c 68 e7 3e ac b1 58 5c 79 7c 8f 2a c6 aa Data Ascii: wPlR5JA~GYyE98'-XigGy,%G2xn4\|}&!5TkTXD%PSKW#lW]0njh00vI)`xz5+r%7UW,zTWqbyWoa;%,l2r:Y~%vajR^nCLh>X\y\|
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 10 6a ce 9e 15 2d d3 86 36 de 00 ae 7f 92 63 16 ad 7e 94 f9 f7 67 3e 0d d5 0c 45 54 77 90 5b 35 c5 c2 0c 29 d1 80 b8 2c 64 0c d3 dc a2 86 b0 65 2f 8f e3 51 6c 9f 95 14 a7 ca f4 c7 99 9a 3a cf 57 f5 c0 b6 c2 d1 01 8d 5f 52 ac b8 78 04 77 86 cd 1b 1e 44 f4 7d 7e a7 4e 7d a6 56 61 1b 86 61 ac 6e 09 0f 17 ac 7e 0e 8a 98 c0 e4 97 a4 ec e3 d5 58 fe 7e c7 c6 d0 31 d3 d1 a5 07 c3 6c f3 7b 07 89 42 c3 4f 66 13 d8 a7 25 b1 04 66 31 51 04 f6 53 10 88 cf 4b 6f 68 24 39 12 d5 4a 25 12 5a 84 91 33 9c f2 20 79 20 1d 52 1a f2 50 06 55 9a a3 38 5d d0 61 a2 ba f1 6a 5a 2a 14 7f 38 a5 d0 94 68 99 c9 34 7d e8 45 f8 16 5a c1 46 7f 55 4c 82 a7 c1 51 0b 17 dd f9 8c fd 21 ee 9a cb 6c c9 31 61 d4 28 fa 3d 9a 8c 89 64 22 8e 93 28 7b 73 53 15 94 6d e9 c1 d2 36 82 24 08 7e 69 e1 83 Data Ascii: j-6c~g>ETw[5),de/Ql:W_RxwD}~N}Vaan~X~1l{BOf%f1QSKoh$9J%Z3 y RPU8]ajZ*8h4}EZFULQ!l1a(=d"({sSm6$~i
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 6c dc 51 35 d4 eb c7 1b 2c 4c 6c f3 fe 4b 41 af 7a d3 45 ad 71 19 a0 d4 a8 27 72 a4 3f 6d 6d 66 af 36 e2 d6 46 c1 af 68 70 37 ad c9 db 4d 94 3d 6b 6a 9e 29 7a 6e d1 af c3 e3 fe 4a 1c 14 d9 2f e7 d1 58 ec 57 76 97 8e 98 07 37 27 0f c8 95 b1 fc 1b 15 81 cb 53 b2 79 05 59 da 7e 3d b8 95 ae c8 f1 09 dd 28 00 69 17 ab 52 a8 ef 12 e3 43 f6 31 39 32 2c 27 48 24 ed 72 c2 ae 6e 96 08 9a dc 43 d8 12 73 f6 4e 40 fe 4a ad 20 dd 63 c5 36 03 91 12 ba 93 bc a3 af 48 89 b9 83 e6 03 68 8f 17 4b d4 36 7d be fa da 55 79 8a eb 1e 3c e4 2a db 30 d9 72 25 26 c0 7b e1 7e 06 f3 5e 9a 5d c7 5c b8 ab f8 0a b5 33 ac 56 25 5b 14 d5 f5 17 33 a6 ef 5a 44 ea 07 82 3a f7 12 b4 8f 70 f4 39 e4 64 72 99 f8 28 a9 92 d3 d4 f8 7f 22 4c 48 75 c7 22 12 1a 8d 43 17 22 83 fb 27 aa fa b2 da c6 39 Data Ascii: lQ5,LlKAzEq'r?mmf6Fhp7M=kj)znJ/XWv7'SyY~=(iRC192,'H$rnCsN@J c6HhK6}Uy<*0r%&{~^]\3V%[3ZD:p9dr("LHu"C"'9
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: a2 ae 0d ec aa d8 39 46 ca 18 cd e4 4d 96 44 9c d5 47 a7 ed 9a a6 9f 5f 4f a9 6e fb 95 53 01 86 05 68 41 ac df 6a 77 91 b6 79 ad 42 5b c0 ff 00 6c a8 ad 61 e5 77 e3 65 a7 6c 41 a3 91 11 44 92 fb f6 e4 68 4f 55 8f 55 25 ad 18 fd 6b 57 3c 83 69 f5 47 dc 87 8a 52 cf 5e da a0 72 b6 bb 0c b7 7b e4 48 da f5 ef 20 6d 53 cd bf 58 6f 1e da bb 66 54 4a dd 36 8d ae fd 78 bf 52 b3 9a ed ee b2 b8 fa dd ce ed 3e 74 cd be fe 74 19 05 9f 2a c2 d8 7e 02 ae ac 8d 0e e2 74 72 71 ec 69 7a 4c ba 7b 2d 87 65 8a 21 c0 ae af a9 ba db f6 5a 7d 1b 47 24 e9 9f 3c 77 40 22 36 46 9a 1a f0 48 9b a7 d6 a5 9d d9 4d 0c ef 5c 31 33 b5 ca a2 35 ca e9 72 48 c6 c1 32 64 28 a8 34 64 d2 47 34 3b 5a fd 92 3e ed ad dd 50 64 9d eb 62 b2 89 c7 b6 9f 06 f5 cb fc d2 c2 82 8e 14 ab 7d cf 5e d2 4b a1 Data Ascii: 9FMDG_OnShAjwyB[lawelADhOUU%kW<iGR^r{H mSXofTJ6xR>tt*~trqizL{-e!Z}G$<w@"6FHM\135rH2d(4dG4;Z>Pdb}^K
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: da 6c 9f 3e 59 57 c9 dd e3 46 e6 64 d1 b6 6f 1f 34 4d 6e 35 88 89 e0 a9 94 da e5 f5 f6 0f 8e b7 94 70 f5 3d 9f e6 54 4d 90 29 b1 e1 db 06 6f f1 ad 97 cd e5 99 57 3c 33 e4 e4 a1 fb 4b 57 4c 69 ae 1c 3e dd ea f4 3a 0e b9 b2 a8 ab 23 5a 0e 5d b3 e6 38 e2 b2 9d 2a a2 75 66 d2 58 b2 2a 36 78 44 b0 59 55 26 4d 7a ce ce ba 54 28 cd 55 72 22 cd 27 fb 06 be 31 a5 4a 7b 9e 57 79 3b 23 ff 00 b0 34 92 dd 27 5c 58 8e 54 1c 75 c7 c4 8c 26 50 f2 1e dd a2 c6 e6 7e 47 dc b5 2a 1e 02 b3 95 b2 ee 35 1f a7 fe 4a 84 96 a3 eb f5 0d 2a 0f 3a 7e 4b 74 5b 68 db 5f 09 8c 13 77 8d eb 87 de 92 74 9e 39 aa d4 aa f5 fa f1 0e 9b 60 ae 0b e8 77 5d a6 f7 59 d4 0d 73 77 6d c7 3c b6 38 96 94 3b 3c b9 3c 51 c4 fb c4 4e 4c 90 6b 28 7c a3 1b 6e da cf a9 47 fd 40 ec d2 74 dd 86 cb 71 d2 57 5b Data Ascii: l>YWFdo4Mn5p=TM)oW<3KWLi>:#Z]8ufX6xDYU&MzT(Ur"'1J{Wy;#4'\XTu&P~G5J:~Kt[h_wt9`w]Yswm<8;<<QNLk(\|nG@tqW[
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 04 e5 89 95 b2 e1 ab dc f8 c4 61 36 a5 af 8e 7d 90 8f c7 d9 b6 40 a3 d8 2b b0 56 ce 63 03 66 a5 50 5c 49 84 b3 77 42 4c a0 27 c9 8e b0 e6 3f 34 9d c2 54 4a 79 db 54 97 ab b6 f9 c4 43 dd cc 92 d2 4b 2a ab c8 5c 8e 56 89 ab b3 8b e2 4d b1 52 3b c5 c7 cb 16 49 f8 e9 d0 dc f9 0e 76 79 aa e7 78 09 0f 03 86 d7 3d 14 88 dc 67 8a e3 ba 2e 41 3b 46 e9 16 3e ac 53 fb 9e 57 89 5c 23 a3 5a e3 fd 8e 42 ae 0e 4e 47 94 f7 ba 69 7a 86 e4 8e e1 ac 57 09 6b 25 92 33 9d 2b 3d cb 8d 9a dc 2c 9e d0 d6 26 66 16 67 68 cf 90 e5 60 25 ae 10 e4 ec 31 5e 77 cb 84 10 63 dc ce fb ce ff 00 60 98 83 7b a2 a9 51 be d1 61 4a 7f 16 48 23 51 cb e4 bd 67 8f 58 8c 5c 46 26 09 8c c1 b7 c7 00 36 2b a4 4f fb 14 d7 39 eb 31 a8 ef 93 f4 22 13 b4 7a b9 3d 66 72 bc 04 62 b9 48 8d 37 f6 54 8e 31 35 Data Ascii: a6}@+VcfP\IwBL'?4TJyTCK*\VMR;Ivyx=g.A;F>SW\#ZBNGizWk%3+=,&fgh`%1^wc`{QaJH#QgX\F&6+O91"z=frbH7T15
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 2f ee fc 08 65 20 33 c9 f1 6e 3b b1 f9 7d 09 f3 c4 9a bd 16 0e 56 a1 2e a2 e6 e6 d6 f4 f5 f3 f2 f9 71 59 cd 52 36 bb 4f a5 2c 55 2f d6 cd d9 a3 86 43 16 1d 27 78 c3 c8 ca b1 87 76 8d d5 51 64 12 64 a0 90 57 66 d0 f9 72 2d 6c a0 d4 29 0d 49 ea c5 32 c0 55 55 a2 78 8c 73 c4 b2 77 1c 4c 2c 15 f2 d8 fc 27 8d 17 49 30 46 01 1e 40 3e 49 00 58 6e 0f 8b 7e bf 53 c6 b5 a7 d3 cf a0 54 24 cd 94 33 f4 26 86 48 71 90 37 b2 ba d7 97 43 dd 1b 63 0d 34 92 2f c5 72 06 17 72 97 71 cb 9a 8d 57 de 0d 15 4d 3d 41 8e 28 d6 27 9d de 9e a1 a1 b6 0f 27 ba 5e 94 cd 6d d8 48 8e d6 5b 80 cc d6 fb 3f d4 a4 a3 5a 89 1e 46 91 21 7e a7 fd 00 2b dc 9b 6c 40 38 1b f9 01 6e c4 8b 91 cf 1c eb d7 d3 6b e8 a3 93 6a 94 64 c4 1f df 6b b7 ea 77 66 3f e7 7e 39 7f 9e 65 d2 39 29 74 64 3e f6 a2 49 Data Ascii: /e 3n;}V.qYR6O,U/C'xvQddWfr-l)I2UUxswL,'I0F@>IXn~ST$3&Hq7Cc4/rrqWM=A(''^mH[?ZF!~+l@8nkjdkwf?~9e9)td>I
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 72 ca cd 1c 65 2c 61 96 20 c4 48 f1 a0 fb 44 2b 4d 52 29 c1 9a 49 42 fb c9 cc 8e 49 f3 da 37 60 4f cd 57 15 00 0f 5b e5 56 e5 a4 b0 56 db 72 42 33 ee 7e 7d 9e 78 99 2a b4 d6 5a 9e af 48 b4 9d 38 f2 2a 0d 40 c3 ba 23 92 89 02 04 4b e3 6e e0 0d c0 1b 9e 5f e7 3d 11 24 a7 1c c3 4d 53 68 a9 f0 14 74 6d 4a d4 d2 55 89 50 13 1b e1 4e 0f b4 ac d0 cf 94 d9 1a 78 ae 86 47 58 c0 1f 67 ff 00 6b 7c 9d cc 54 d0 c1 a5 55 b5 13 ab cd 49 3e 9d a8 54 41 2d 4a c9 0c 77 67 5c 72 49 00 60 dd 4c 1f bb 02 43 fc 24 fd b7 f3 ba 51 69 92 c7 41 50 1a 5a 97 14 b1 35 2d 89 0f 3b 88 13 13 90 b3 33 3d ae 1a ca b9 39 b0 5b f1 cb fc 81 16 ba b2 55 4a 56 b2 b8 ff 00 88 ab 62 c4 22 a4 ee ca 9b b1 59 8c 8f d3 66 56 53 98 4c 43 d9 4a 0e 17 ec ef 4b a3 02 39 68 95 24 21 40 66 52 76 b2 9b f7 Data Ascii: re,a HD+MR)IBI7`OW[VVrB3~}xZH8@#Kn_=$MShtmJUPNxGXgk\|TUI>TA-Jwg\rI`LC$QiAPZ5-;3=9[UJVb"YfVSLCJK9h$!@fRv
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 66 60 dc 6b 7f 68 54 5a 76 94 d0 0d 4c 47 4b a6 e3 4f 52 90 8c a4 3d ed 0d 3c 18 38 ce 45 c6 35 f7 89 60 e0 e3 28 60 09 3c f3 f6 e9 cd 55 91 8a 5d 29 fd 92 3a 9b 28 32 a2 cb 68 8d 86 f0 0b ac f2 c9 db 8b 4e 92 b4 5b 84 3d d6 1c a2 fc c3 ab 69 32 54 f3 14 f1 ea 4b 5a ab 14 92 6a 55 06 9e 78 16 c1 96 55 ce 17 45 48 55 43 b2 2b ad 94 27 50 02 36 e5 ba 58 79 5b 53 d2 24 86 6f 69 15 1e d2 81 d2 41 34 53 cd 94 7d 1c 3b 88 12 46 1b 6c 7d da ab 30 5f 0d c7 35 57 ea 6d 84 73 cd 0c 74 91 cf 56 e1 73 70 f1 27 5a 59 44 b2 af 45 95 54 b2 bc 81 3a ce cf 0a 64 25 07 71 cd fc d5 47 a3 f2 53 a2 54 a4 4d 35 27 bb 68 a6 91 ee 92 66 eb b3 28 31 5b 33 8a 29 60 32 c1 b1 c4 e5 5f 5b 53 a8 ea 95 15 51 8e bb 99 5d 72 f7 77 40 2f da 52 ec d1 1b fa 32 a9 16 f0 38 d1 de aa 45 4c 82 Data Ascii: f`khTZvLGKOR=<8E5`(`<U]):(2hN[=i2TKZjUxUEHUC+'P6Xy[S$oiA4S};Fl}0_5WmstVsp'ZYDET:d%qGSTM5'hf(1[3)`2_[SQ]rw@/R28EL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49949	3.16.63.45	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	1376	OUT	GET /pview?event=pview&hostname=1movieshd.cc&location=%2Fhome&product=inline-share-buttons&url=https%3A%2F%2F1movieshd.cc%2Fhome&source=platform&fcmp=false&fcmpv2=false&has_segmentio=false&title=%231Movies%20%7C%20Watch%20Free%20Streaming%20Movies%20and%20TV%20Series%20Online&cms=unknown&publisher=6433be364f61b7001240a339&sop=true&version=st_sop.js&lang=en&fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA&description=1Movies%20Watch%20Movies%20online%20for%20free%2C%20Streaming%20movies%20on%201Movies.to.%201Movies%20is%20the%20biggest%20website%20for%20free%20movies.&ua=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&ua_mobile=false&ua_platform=Windows&ua_full_version_list=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&ua_platform_version=10.0.0&uuid=8ece4e5a-532b-417d-9652-9a207998f147 HTTP/1.1 Host: l.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:43 UTC	493	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Access-Control-Expose-Headers: stid Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain; charset=utf-8 Date: Fri, 26 Apr 2024 18:32:43 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 67 Connection: Close
2024-04-26 18:32:43 UTC	67	IN	Data Raw: 7b 22 6c 6f 74 61 6d 65 22 3a 22 74 72 75 65 22 2c 22 73 74 61 74 75 73 22 3a 22 74 72 75 65 22 2c 22 73 74 69 64 22 3a 22 5a 47 6b 41 43 57 59 72 38 7a 4d 41 41 41 41 49 41 39 38 59 41 77 3d 3d 22 7d Data Ascii: {"lotame":"true","status":"true","stid":"ZGkACWYr8zMAAAAIA98YAw=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49946	3.89.179.162	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	577	OUT	GET /s/55128 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:43 UTC	424	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Length: 0 Connection: close Location: /s/55128?_li_chk=true&previous_uuid=33b4c2382b6d4e4dad3bafd3033d027c Set-Cookie: lidid=33b4c238-2b6d-4e4d-ad3b-afd3033d027c; Max-Age=63072000; Expires=Sun, 26 Apr 2026 18:32:43 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49955	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	930	OUT	GET /xxrz/1200x600/793/ab/ad/abadcdcda3c7e85b004fac4398019af1/abadcdcda3c7e85b004fac4398019af1.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	728	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: image/jpeg Content-Length: 369313 Connection: close Last-Modified: Mon, 20 Nov 2023 18:18:15 GMT Vary: Accept-Encoding ETag: W/"655ba2e7-8eeea" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4VbVzRGg%2F7Iuym6WSZU2m%2B5ZtBLVseHJEneOIMpOdMhCKgxeu25pyspmcV%2BZH1wXmKWA%2FpEAS%2Fu0RbrpUAQFr4l6gvr6ek6zGCTl67F0u7WhP1re8WDcCxed%2FSBKlK9QJqQg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a839cdada65f-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	641	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 45 2b 4a b2 c9 6d d4 fa 33 39 52 0a 3d 8f 7a 09 b4 e7 c9 0c 65 cc c9 33 97 13 20 a6 1f c4 c8 8e 65 d0 84 29 d4 b4 b0 ee 32 c9 5b 79 c9 e2 55 e7 1a 1e f3 cb 34 25 4b 5b 6b e0 d6 c9 7a 19 f1 0a 91 19 cf 48 14 64 ef 5c ad d1 82 b8 ee 1d 0f 56 fe d0 a4 ea 09 ad 3e e7 61 6a 2a 8c b7 25 ba b5 6c ba f6 c7 e6 ba 68 88 ed d9 3a 0e e3 a1 76 65 37 d8 bc 72 b8 0c e0 0b 78 2d 15 17 04 f4 69 08 87 bc fe 64 2e 56 16 53 36 45 0a 36 80 1d 4d c3 74 76 1f b0 74 eb d7 c6 7e e6 0e 96 de ed f1 fb be 1a d0 7f 53 b9 af d8 78 ff 00 9f 1a 1f e8 d6 b2 f6 be 13 e6 c5 4b af ab de a1 c5 72 6b 7b 1a 93 d6 ea 61 72 ef 81 ac 8d 2b 91 c8 bc 15 e4 93 3e 7b 05 01 a0 ac 43 1a 25 4f 39 78 1c a1 cb 18 41 49 02 05 07 30 b6 8e ac e1 6d 43 98 ce 42 df 69 a6 8e 41 24 65 db ce 59 52 de db 2e b5 5e Data Ascii: E+Jm39R=ze3 e)2[yU4%K[kzHd\V>aj*%lh:ve7rx-id.VS6E6Mtvt~SxKrk{ar+>{C%O9xAI0mCBiA$eYR.^
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 24 00 3b 87 3d 72 be 2d b0 58 bf af 9a 92 ac cc 6c b5 d7 6a 8c fd 17 9e e9 b4 93 f9 47 9a f5 d2 8c ad bc 89 06 80 91 43 36 3f d7 ef 9d 9d 31 cf f6 7b 6b e5 2f d8 1a 8e b9 dc d5 b8 21 46 d0 f5 df 44 b6 67 2c ed ad 06 c3 e4 6d 03 ed be 9f f4 6f 31 f9 0b 11 3e c7 d2 7f 3d d7 5a 25 8a 7b 34 0b 2b eb 03 4d 7e ef 05 51 e8 b3 57 a5 a9 be d3 74 d5 16 7d 3e cf 73 6f ce 1d f7 37 b6 fa 99 a9 78 56 3e 93 ba 7a 53 9d c4 dc d1 ea ca 86 b7 8f aa de af d6 54 db 46 ab 67 4d 87 94 82 de ea b9 da 02 6d ce ef 95 ad 06 eb 48 be d3 8d be 4c f3 2a 19 a5 94 e7 c9 97 1a 61 6b c7 32 c6 0c 87 71 0a 4b 9b 6d 59 93 1f 05 31 8d 43 ad 90 58 f9 e0 49 da 42 7c fb 66 2d 65 2b 00 75 d6 94 40 a7 46 91 29 0d b7 11 0c c9 71 4f 41 50 32 a5 f0 77 52 e7 95 38 95 3a b6 e2 33 9f 4c b0 ef b3 92 b7 Data Ascii: $;=r-XljGC6?1{k/!FDg,mo1>=Z%{4+M~QWt}>so7xV>zSTFgMmHL*ak2qKmY1CXIB\|f-e+u@F)qOAP2wR8:3L
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: ef df 9a bf 6b 7e 65 f8 bf af f3 85 7b bb b8 77 d7 3c ce bb 83 c4 db d0 8b 39 d6 42 c1 7d 91 a5 2e dc a6 de ad a4 ac 55 fe 8f 53 14 3b e2 b9 8b 3a 29 a5 34 d2 41 41 86 47 25 aa 8f 14 49 26 11 6e 39 d7 7d 59 a2 a0 c7 46 42 31 f3 0d 63 16 bc 59 ae 95 f9 46 b4 32 f0 91 9e 4b 18 55 b2 57 1e 41 41 3e 1d 24 b2 30 da a7 1b c9 6d 63 1a 41 0a 8c 61 c5 3d 8a 68 b1 4b 00 a3 f9 dc 72 db 5c 79 4f 35 18 73 cf d8 43 08 2d 8c c6 1c 41 51 2c a8 cc b1 63 ac 85 14 21 4e 78 b1 1e 5a f2 1a 71 58 74 20 57 d9 09 ce 3d 85 cb 6d 2d 91 2c b9 23 12 38 eb cf b8 e0 19 ac 8c b9 35 19 4b 71 d6 3c 2c 16 7c 84 ad 86 4e c3 ca db ad 95 61 0d 5f b2 e2 b0 50 e2 7d 11 ec b2 eb c5 df 2d fb 0a f1 8d 3c c4 4b 96 04 9d 8a 92 53 d0 f3 76 75 9a 7c 76 fa 4b cc 3d 3e ef cb c5 99 a8 d8 54 69 bb 6e 92 Data Ascii: k~e{w<9B}.US;:)4AAG%I&n9}YFB1cYF2KUWAA>$0mcAa=hKr\yO5sC-AQ,c!NxZqXt W=m-,#85Kq<,\|Na_P}-<KSvu\|vK=>Tin
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 88 15 da a6 3f 46 f3 9e d0 e7 36 c3 d0 36 8d 4d f5 6b 63 2f 3b dd 33 71 c5 35 5e fc 63 12 1e a3 6c 47 31 8c 5b 82 ba c4 13 2d af 35 ae e1 0e 65 82 3a 5d c2 6e 35 97 97 22 d4 98 59 65 64 3a db 86 a2 3c d3 86 95 23 ce 2c 70 29 a8 12 09 c2 f3 24 1a 8c 70 d6 0a 0c 0d 42 4b 2b 61 72 e9 40 90 b3 88 31 0b a3 71 c0 64 98 91 6b 04 63 31 25 8a 6d ea a6 a9 95 ed e8 ae 4e 32 56 ed 68 46 ec 83 8b 2b ad c8 44 6a 6e f9 d5 30 96 33 87 4a 06 c9 59 62 0c e9 b4 12 62 36 f5 aa b1 73 0c b8 a6 e2 1a 72 39 72 b1 64 23 d6 c8 1c 49 e7 53 b4 8b 1e 68 70 98 9c 48 0d 56 c0 cb 70 d7 c0 ae 16 3d 98 11 b2 58 a8 cc 25 3e 4b 94 a5 3a 60 f4 9c 7c a5 aa ce be 93 2c 51 92 b6 57 27 ae 6b 65 61 6d 51 f4 3a 2b 6e 88 da fa 53 9b eb 68 3d a1 c5 f6 be 44 fe df eb 5e b3 e5 3b fd 77 39 6d 0d f7 40 Data Ascii: ?F66Mkc/;3q5^clG1[-5e:]n5"Yed:<#,p)$pBK+ar@1qdkc1%mN2VhF+Djn03JYbb6sr9rd#IShpHVp=X%>K:`\|,QW'keamQ:+nSh=D^;w9m@
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 45 e3 03 64 96 20 73 ec b1 21 96 1d 50 33 11 27 b3 5d c0 30 f6 15 05 8c 61 21 70 62 1f 8e b2 b8 94 48 2c d3 12 93 5a 19 07 cf fa 95 e1 d6 bc cc a3 ca c3 51 8c 2c 30 35 3f 1e b5 36 41 4c 79 f5 c7 1e 49 08 b1 10 92 d4 83 19 89 04 0e 06 47 99 43 73 97 cf 24 c5 e6 44 d9 5c 19 92 8e 1a a2 df 71 4a 98 dc 3f 81 c2 54 42 ac 24 57 9c f3 05 b6 df 6f 31 29 91 1a f5 04 3a 9c 39 0f b2 e1 84 60 b3 20 2e 0e 05 95 01 16 96 f9 b3 d6 eb 41 14 95 5a aa 6b 08 53 01 0e a1 73 29 61 78 4b 19 5a 92 07 e4 b8 da ac a0 03 04 09 4a de f4 c8 c3 c8 a3 09 86 cb 72 6d c7 b3 3b 1e bc 6a 48 52 46 5f 4f 9d 2c 7a d3 01 65 b5 ae 1f 45 6e 5b 1f 97 fa 04 7e b8 da a3 22 5d e8 8e 6b ed ed aa f9 af eb 47 cd 0e f6 e7 3b 7e 87 e1 7d 83 a5 2e 0f 45 17 d3 5f 37 fd 0f e7 6b 37 4d f3 2f 5c f5 df 3f ce Data Ascii: Ed s!P3']0a!pbH,ZQ,05?6ALyIGCs$D\qJ?TB$Wo1):9` .AZkSs)axKZJrm;jHRF_O,zeEn[~"]kG;~}.E_7k7M/\?
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 31 66 8c 59 57 c2 9a 62 bc 43 10 e1 60 01 b7 2e 6e 10 a1 4c 47 de 18 50 e7 c3 14 45 38 7a 00 03 c1 b8 83 01 c2 65 57 90 c6 b8 23 2b 8c 3c a1 26 55 cf 4f d8 b2 c5 3c a2 97 67 10 d9 0e 43 02 cb ac 09 be e0 4f 43 5d cb 4d 03 92 40 6a 5a 58 60 bf 32 a4 77 9d 6c 6b 24 29 77 e8 3a 25 d7 57 5e 19 f1 63 4a 5d 69 c6 31 21 ad a5 20 87 79 92 af 21 dc 79 66 43 29 6a 80 ce 1d 49 8f b0 af 0e 79 d4 1b 76 93 82 48 b0 c9 0c a9 10 8a 5f 52 9f 39 82 2d 21 27 25 5c 8b 91 82 79 63 b9 90 d2 8d 02 0b c3 ba 88 8c b6 f8 ae 60 a3 be ca e1 3e c2 ab 39 2b 7b ce 5e 1c 69 f2 26 32 e6 01 84 23 c4 b3 06 78 c5 14 b5 30 1b ee af 29 34 c5 b5 f1 d3 7c bf b3 39 33 cd 3a b1 22 49 12 a8 d2 45 da 30 6d 2c f5 4e 8d e8 ae bf 51 d1 7b 6b 9c ae 5d 37 3b d5 36 4d 75 76 e7 ea f0 7f 13 fd a7 e3 de 3b Data Ascii: 1fYWbC`.nLGPE8zeW#+<&UO<gCOC]M@jZX`2wlk$)w:%W^cJ]i1! y!yfC)jIyvH_R9-!'%\yc`>9+{^i&2#x0)4\|93:"IE0m,NQ{k]7;6Muv;
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 42 b9 b4 cd 94 24 45 bd c4 de d7 65 6c 3c 63 b5 c8 b7 95 0b 35 49 77 34 a6 68 51 b7 09 fd 7b 35 ec 85 a1 d5 c5 4b 16 18 e6 e5 78 db 0d 4c 2e cd 6b 82 b4 7d 1e 56 d5 a6 6c 74 d5 d2 72 10 ed 89 63 a0 a5 55 ad cd ea 1f 5f a8 74 be bd 5e df 51 d9 f6 35 62 c5 cd ef af 74 dd d1 0e c0 f1 f2 15 39 89 a4 26 32 fe 6c ae 88 e2 ce 99 e8 36 db 0f d6 5c ed 79 fa bb 56 c0 d0 15 41 2d 11 ab 4c 75 7a f5 5b a6 ba f0 b6 16 65 75 16 ed ac 42 e3 8a 94 91 90 a7 01 b3 47 5c 6a e3 2d e9 75 1e 7d 26 71 76 a9 c2 35 38 69 65 75 f9 86 f3 05 91 15 f6 81 65 80 73 00 c7 c3 39 b2 d3 76 23 8a 75 d8 97 58 94 9c 68 f6 22 e7 29 a2 df 1c 31 a0 19 68 46 0c 21 cf 13 63 16 01 f6 cb 03 ad 46 d8 f5 60 38 98 f9 f8 a0 28 e1 26 9d 18 ad 90 8a 6d 38 d8 4c c6 4e aa f3 4b b8 87 b5 55 78 a9 82 dd 91 d2 Data Ascii: B$Eel<c5Iw4hQ{5KxL.k}VltrcU_t^Q5bt9&2l6\yVA-Luz[euBG\j-u}&qv58ieues9v#uXh")1hF!cF`8(&m8LNKUx
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 96 50 b1 b9 a2 53 5a ab 7a b9 5e b3 8e 51 56 6e d8 66 16 b4 6f 73 56 8c 28 03 5d 0a 7d 78 88 69 09 8b 55 63 20 f2 73 ab 0b 22 5b d6 2b c6 cb 0f 20 43 59 e6 9b be ac 4e b6 12 34 87 f5 76 d3 b4 35 b5 8a c8 b3 55 b0 c5 80 46 b1 22 cc 39 3b 53 5f ef ed 90 5d e0 f7 b7 af e6 90 21 ba 0e ad 96 ae 4b e9 1d 4f a5 d8 41 56 b7 69 00 d0 a6 eb 56 67 3f 51 6c 6d 75 7b a2 75 57 e0 9c b5 af bc 55 23 02 0c e8 42 f4 a6 c1 dd 50 ea 5d 31 72 d6 c9 65 b3 9f b6 dd 47 4f b8 e8 39 ed 41 d1 56 92 15 85 b2 36 74 a4 ac 14 eb 17 41 c9 51 07 92 6e 85 98 8a ad f6 3f 92 ea f7 7d 7f 48 74 1e 83 a4 e7 3e f9 e2 0e da e4 7a d9 7f 9c 3f 63 35 f8 2f 9c aa f4 1b bd 7e a2 85 c4 df 40 fb ab 58 df 8a f0 bf 7a 39 14 f7 7a eb e8 b7 13 75 f4 d4 52 73 2f 5f 9e af 4b 48 93 55 e0 43 5b 98 43 be 6f f3 Data Ascii: PSZz^QVnfosV(]}xiUc s"[+ CYN4v5UF"9;S_]!KOAViVg?Qlmu{uWU#BP]1reGO9AV6tAQn?}Ht>z?c5/~@Xz9zuRs/_KHUC[Co
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: dc fb 67 58 57 f6 ba be 84 dd 1c 85 5d 79 7d 0f d7 70 f1 1e 29 ea 3a 3b 60 c3 6e 9e 4f af e9 4d ac 15 9f a7 e4 fc e9 24 ac a2 2a 5b 01 aa 76 68 5c 9d dc 43 a2 df ca 9a 57 d8 6e 5a eb ab 7c b4 ae 7d d2 d9 9c fd af cd cf 5b 7d 82 f8 e9 60 37 7c 3f cc 1e ac da 6b 60 f9 0b a5 79 99 56 7b 17 ef 27 e5 02 4b 13 fa e0 17 e6 4f d0 0e 6a dd c5 90 68 88 6d 8d 7a ee da e9 af 7c 65 fa c7 f9 e3 df ea eb 7b 6b 4f db b7 d5 fe fb 76 1f 21 75 bf 9a ed 65 ce ac 17 49 52 ed 8e ea da e7 9a f0 bb 29 5a f2 5a 56 7c 33 e4 ab 01 8d a5 c4 44 36 db e8 c9 1d 0e a2 5a de 55 e2 cc 79 3e 39 fc 78 93 1e 5f d1 7e 38 69 b1 e4 3e a4 c9 b0 87 12 66 e4 a0 0d 35 d8 a4 6b 72 0c 1b 44 8d 56 45 b9 6a 54 09 b3 16 29 2a a1 b3 96 73 2b 45 10 dd 66 75 d3 d7 eb 6c b6 68 25 ed a9 5a a3 63 87 dd 56 91 Data Ascii: gXW]y}p):;`nOM$[vh\CWnZ\|}[}`7\|?k`yV{'KOjhmz\|e{kOv!ueIR)ZZV\|3D6ZUy>9x_~8i>f5krDVEjT)s+Efulh%ZcV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49956	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	929	OUT	GET /xxrz/250x400/793/25/db/25db3b6e3d98ed5c09090a3ff67a8f50/25db3b6e3d98ed5c09090a3ff67a8f50.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	727	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: image/jpeg Content-Length: 80663 Connection: close Last-Modified: Mon, 20 Nov 2023 18:17:51 GMT Vary: Accept-Encoding ETag: W/"655ba2cf-123f1" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UN7wUQwmYK%2BEvv7QPGk1C6v3Lr4RM%2FgVYHCZupW2gi3YjADRfV6CdzuIlm1sGICTdWK676xSS%2FS4UwYGgPeZ4XLJLZWpReaNh3e9k03%2F0QRq%2BFkKxdUNAtVJf%2FShg73yXlWt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a839cc1f4c1e-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	642	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 00 03 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: f2 26 a9 34 ae 47 4b 89 7b ce 2f ab f5 79 5b 3f 47 df f9 cc 77 8c da 12 7a b8 b3 b6 d6 a2 27 50 6b 78 dd 09 87 75 de 59 8f b2 e8 bd 03 57 69 d5 aa 68 31 6b 4c 18 f0 f3 9a 4d 39 2c df a6 2f b7 b1 ad fb 79 41 e8 b6 3e bc f1 c4 f1 75 f3 af 42 e8 f7 ad b3 96 ce c6 9c 2e 92 dd da b9 0b d2 ba 2c 6f 96 63 c7 f2 76 3a f1 5b 56 cc 32 cc da 51 14 be af cf 76 0b 55 88 c9 ca 6b 97 b3 b6 59 65 4b 90 c0 58 b5 8e 9d ce 56 1e 53 8b 6b 1d 25 99 2d bd e0 5a 14 fc 6a 1a 29 5b c7 2b 45 ad 5f ae 28 6a 9a 15 39 2f 2a c6 62 bb 45 2d 31 1e 43 a2 55 b5 c9 5b 1e c9 11 db cb 32 ab f7 1f 2f 18 b4 ac 93 31 1a 95 4e 47 7a 7b 38 6a ec 7d 9e e7 26 61 2d f8 c7 79 25 45 db 36 9e ce b3 c6 9a 13 db 9c 75 fa 0f 37 81 ee 24 29 1f 47 c8 fa 24 19 8f fa 58 79 1c e9 2d 15 a6 c5 e8 27 b8 87 d0 fc Data Ascii: &4GK{/y[?Gwz'PkxuYWih1kLM9,/yA>uB.,ocv:[V2QvUkYeKXVSk%-Zj)[+E_(j9/*bE-1CU[2/1NGz{8j}&a-y%E6u7$)G$Xy-'
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: a4 be f1 8e da 82 99 0b d1 1a 5f 2d a1 6b 65 de 78 db 6e c9 3c 67 ac 32 2e ad b0 96 65 76 32 54 8e c4 95 cd 56 76 11 f4 11 b0 12 bb 1c 5c 27 c8 52 59 f5 84 74 e5 65 09 85 52 4d 5a 73 e3 2a ec a2 a6 53 96 46 6f b2 79 f0 a5 77 2d f2 d5 fe 3d 8b 66 4e e9 b0 b2 78 7b bc 14 59 44 34 e0 e5 90 f6 86 49 d4 b5 b7 43 83 b5 16 d4 62 af 0f 6c 9c 75 b5 02 e6 57 d5 43 53 cd 27 55 c7 8e b7 ae d7 4e 0f 74 6e c9 08 4a 85 c4 ad 9b 35 0b 3d aa 96 61 dc 2b b4 d0 41 84 bb 76 0a 2e 5e 84 7b 46 8b 39 60 56 26 99 e4 cf 69 82 90 27 65 30 87 6b 13 67 3b a2 22 20 9e fb 0a 84 79 15 67 23 55 fa 2a 99 d0 61 b1 c7 93 ef 24 b2 ba 52 52 aa fa c9 fb 1d 45 69 9c c5 a2 c1 61 40 3b 1b 91 bc d4 24 9c 5b 46 0b 24 c9 56 f5 9d 97 64 3d 2f 5e 4e cb b0 e8 a2 90 ed bb f5 ac 2c c3 09 86 66 67 b1 18 Data Ascii: _-kexn<g2.ev2TVv\'RYteRMZsSFoyw-=fNx{YD4ICbluWCS'UNtnJ5=a+Av.^{F9`V&i'e0kg;" yg#Ua$RREia@;$[F$Vd=/^N,fg
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 49 cb b1 8c e5 3c 69 06 2a 43 84 bf c6 2f 95 04 03 cc 85 02 75 81 1c 22 80 ac fc be 47 90 eb 89 af ea d4 7f cd cd 91 a4 eb a1 89 7b 56 4a 99 e3 62 bb 23 c5 7a ac 09 d3 a0 65 8e d9 62 41 9e 49 88 47 a2 2a b5 d9 ad 6c 8b 56 95 12 e2 5a 96 44 38 92 6c 27 d4 54 ce 3d dc 29 74 d2 cd 65 29 e8 64 73 d5 e3 ca ab 72 41 7c 5b 78 2e c9 d7 f0 22 0d fb 4c a5 7b 59 8c 6e 31 99 a9 ec 49 47 24 5b a6 aa 20 6d 3b 19 76 09 fe 35 05 79 35 8f 23 38 72 27 05 5a 8e 7b 91 53 44 bb 89 59 65 32 f2 90 f0 36 ab 46 d9 dd 52 d4 24 d7 87 5c 32 ab 75 29 04 6d c6 9d 20 0c 9f 5a a2 47 8d e3 ca 78 e1 35 a5 cd 5e b6 7a 0f 1d 94 6c 8b 47 66 18 d9 b4 1a 3b 27 6d 2f 69 a3 fa fb 29 22 39 1a 41 e1 53 8c f7 94 6a 53 15 f9 c3 b1 98 c4 4c 1b 71 8c ed 88 cc d4 75 35 d9 e5 19 66 52 cc d6 37 4a fa 9a Data Ascii: I<iC/u"G{VJb#zebAIGlVZD8l'T=)te)dsrA\|[x."L{Yn1IG$[ m;v5y5#8r'Z{SDYe26FR$\2u)m ZGx5^zlGf;'m/i)"9ASjSLqu5fR7J
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 14 d9 15 1b 8f f2 91 26 44 b1 7b 32 b0 66 94 4b 31 42 d7 c2 0b 88 2e 59 56 4d 39 e5 4d ea b1 6d 95 ac fe 69 c1 30 b7 9d 6d 44 9f a6 34 9e bc 10 4e f6 80 4a 07 d6 dd ce 8b 62 e2 a9 f2 34 95 79 59 08 ed 68 c7 d8 02 04 98 91 d4 b6 0c 96 0b 3d 7a 6c 44 f2 10 f5 a9 3b 6f 9b f7 bd b0 5c 93 db a7 3e aa 45 7f 8d e4 d3 50 d8 2d fa 76 9b b4 a3 2c ff 00 91 6b d5 64 0b 2f 65 75 ad f2 6c 7a 49 51 26 f8 bd f3 25 6b da 7c 3a 18 9b 78 e4 12 c0 aa 5e 3b 11 e3 79 cb 1d ae 0b 58 c7 bd c9 88 82 e1 aa e5 c6 3d 51 3b b9 54 4f 5e 50 8a fc 69 49 da 34 8e 8f 8b d2 5c 40 4f 8a c7 49 b7 70 5a d9 6a 58 f2 10 72 25 58 d2 3d 5d 2b 5f 9a f3 69 9e 1a 25 b1 2c e1 0a ad 29 6f 9d 51 2a 33 5c 42 d8 09 52 4b 1f ce 2a 99 12 e7 fe 4d f0 f6 0d 7e c6 d2 bf 40 db 9d b2 97 64 64 8f 8b b8 b0 e1 35 Data Ascii: &D{2fK1B.YVM9Mmi0mD4NJb4yYh=zlD;o\>EP-v,kd/eulzIQ&%k\|:x^;yX=Q;TO^PiI4\@OIpZjXr%X=]+_i%,)oQ3\BRKM~@dd5
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 15 15 bc a8 64 ab 91 c6 57 0a ae 38 8d 5d 38 88 d9 b0 36 cf 88 c8 43 f7 c1 b8 bf 5a e6 38 4e 71 2c ed c6 f6 eb c5 8e 4b 5b f9 1f c4 d9 55 4d 93 67 79 68 c1 c4 9f a0 d6 c4 bf d8 36 44 88 eb bd ef 5f a5 a6 d4 ab 40 fb 1b 3a 5d b6 37 8c 6c f6 1b 0f f9 35 85 3e b7 53 ff 00 8c 40 ac 26 6e d4 b0 6a ab 49 22 58 b0 16 1f d8 e9 cc 72 94 a6 70 65 19 0c d7 76 72 84 74 f2 62 c9 4a d0 98 4c 00 8a e4 6f 62 bd 06 39 36 67 78 cd 7a 60 c5 8b 37 96 8a 34 28 71 e0 3c f2 a3 4b 95 2a da c6 5c 81 88 6b 37 b3 6b 0f 32 39 7c 90 16 7c cd 18 5e cb cd da 3b c7 b3 78 bf ad 74 73 49 72 48 f2 34 84 36 91 e1 68 31 dd 7e 63 c8 3c a1 9d a9 94 07 71 7c 46 b1 19 9e 4e 31 1d 52 e3 4a 44 87 54 c9 02 51 1c 64 13 e7 49 87 06 1c 5b 39 1b 15 78 2a a7 3e 18 3e 00 21 b9 4c e2 01 4b ec 7a 64 77 14 Data Ascii: dW8]86CZ8Nq,K[UMgyh6D_@:]7l5>S@&njI"XrpevrtbJLob96gxz`74(q<K\k7k29\|\|^;xtsIrH46h1~c<q\|FN1RJDTQdI[9x>>!LKzdw
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 55 1d 2b 50 a5 2a 9e ba 69 88 d6 62 76 1d 4d 31 7c cb e7 4a 79 55 d8 88 9f 9e c7 e5 fa 00 8a df f4 cd 18 3d 6b c4 41 6e 59 f2 cc 05 73 47 b6 09 f9 d5 b3 36 ec 22 e0 73 2a ec bc 3c b0 a0 4a 93 3d 86 9d c9 1b 93 03 ad 78 7b cd 45 9a 7c d9 25 50 73 8e 9b fc e8 91 4b 77 4a 4a 94 61 29 c9 26 99 e2 36 d7 0b d0 87 25 43 60 41 cf 78 ad 42 bc 46 b7 b5 2b cb d4 79 41 48 ea 63 b7 ce 2b 81 aa e8 3a 95 2a 79 d4 88 99 91 11 ab a6 d1 43 61 ed 40 45 05 47 4a 12 3a 57 13 79 d6 ac de 71 91 f5 89 41 d3 56 1e 22 e2 6d 3a f2 ee 4a 7c a6 d5 05 4e 28 24 10 7a 03 03 3d c6 62 b8 67 1f 67 89 61 25 24 e7 2d ab 5a 49 1b 81 14 61 d4 94 ad 20 a4 e0 83 9d ff 00 d2 87 06 b3 f3 3c cf 2f 3b c7 4a 0a 0d a4 25 22 12 30 00 ae 21 c7 19 b2 80 64 af b4 d2 78 cb 7c 45 95 31 21 0b 70 0d 27 a4 c8 Data Ascii: U+PibvM1\|JyU=kAnYsG6"s<J=x{E\|%PsKwJJa)&6%C`AxBF+yAHc+:*yCa@EGJ:WyqAV"m:J\|N($z=bgga%$-ZIa </;J%"0!dx\|E1!p'
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 4a 35 80 48 98 38 d8 e2 3e 47 bd 7e ad 9f b0 6b f5 71 fd 9f ce 29 5c 3a 3a 7e 71 46 c4 a0 48 eb 8f 9f 4a 72 c4 ab 3a 7f 33 4b b2 29 3d 69 76 84 6d 9a fa 31 fc fc a9 d5 38 e9 2a 52 89 51 99 27 d4 cf f1 34 a6 e2 49 57 2e 27 ef ae 0a fa 5b 4f 11 4a 89 4e bb 1d 28 1d d5 e6 b6 77 ae 3e e2 1d bb 78 36 e0 e6 b9 57 5e 50 14 cb 43 d4 9d 67 f9 0e b5 e1 07 fc 95 be d0 79 09 53 81 09 80 72 74 25 66 39 bf 64 e0 fb fa 50 72 e3 fe 61 fc 28 21 6b dd 6a f9 9f ed 5e 50 45 e3 6d 62 0b 4b 52 b3 eb fd a9 36 cd f4 29 33 d4 66 be 8a 89 fc fa 53 cc 21 23 e0 8f 99 3d ab 89 f1 0b 1e 1e 00 ba 72 35 9c 25 23 5a a3 f6 c8 9c 27 d6 9b e3 5c 1d a6 d1 e6 3e 79 c0 88 42 e0 4e 33 82 63 14 6d da b8 09 71 a5 25 68 58 94 a8 19 07 db f3 8d 88 9a 5f 0f 57 61 4a e1 ea 9d bf 0f 6a 53 aa 26 4e e7 Data Ascii: J5H8>G~kq)\::~qFHJr:3K)=ivm18*RQ'4IW.'[OJN(w>x6W^PCgySrt%f9dPra(!kj^PEmbKR6)3fS!#=r5%#Z'\>yBN3cmq%hX_WaJjS&N
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: e3 00 fa 93 88 a6 ae 42 53 e5 92 75 66 07 ee e2 7f a8 f9 d4 17 91 03 af e3 41 87 12 94 62 65 03 63 f0 e4 88 c9 f6 3e 94 14 56 63 af bf b5 21 b5 3c 74 a2 24 15 27 98 84 f3 26 25 39 33 23 73 8f 87 34 94 91 a7 5a 9b 48 53 9e 56 4a b1 d9 58 11 1a 86 93 9e 5e d4 2d 5a 50 95 f9 e3 98 8f 2d 65 0a 4a db 57 70 92 48 91 11 aa 14 93 91 9a f3 d2 cc 36 db 45 44 6c 84 89 24 e3 2a 56 63 ef 34 e3 fa 80 d6 cb 68 59 e9 a4 2f 38 c1 c6 f4 9b cb b7 3c af 32 1c f2 80 0d a8 b6 39 60 82 34 fa 0e 9d 8d 0b c8 f3 10 58 69 41 e8 f3 f9 40 f3 60 85 0f 30 88 98 39 cf ce 9a ca d1 f4 54 06 57 20 27 cb 00 11 91 b1 00 1f c6 ae 1e b8 5b e4 bc 82 b5 cf 34 72 ea 3d d5 03 99 5e bd 68 bf ff 00 4d 43 e7 4f 2f cf 75 85 68 32 d2 d5 d2 67 50 1d a4 8d bb d2 bf e2 7c c4 05 25 2e 04 89 47 32 f5 20 42 Data Ascii: BSufAbec>Vc!<t$'&%93#s4ZHSVJX^-ZP-eJWpH6EDl$*Vc4hY/8<29`4XiA@`09TW '[4r=^hMCO/uh2gP\|%.G2 B
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: a0 6b 8d 09 e3 fe 14 42 8e 57 7d c5 81 cc ce 9e 11 72 ae bb 60 52 58 52 01 38 12 95 14 28 90 25 60 0c 41 df 19 f7 8a 48 05 09 3a 49 3a 79 94 a1 e8 0c 0c fa e7 e5 49 6c b9 b8 d0 35 7c 49 12 a0 30 26 7f ac d3 a9 93 ad d5 29 44 25 28 40 04 44 27 48 cc fc ab c9 04 9e be 91 31 e9 9d bd ab 44 1e dc c3 e7 fe 94 0b 25 28 56 be 68 3c ba 20 80 0e eb 56 c4 c6 66 9e 29 5c 1d c9 50 03 3f 0e 9c fe 34 4a 52 88 04 93 24 fe 7d a6 b4 1a fa 1b 02 e5 bb bd 1f ef 0d 5b b9 6c 87 3a f9 2e b8 cb 8b 4f 7f 8d 94 11 9e f8 34 9b 46 12 fb 97 69 4c 5c bc cb 2c 3a be ed 5b a9 e5 b2 9f fb 55 72 f1 ff 00 ba af 78 53 57 b7 7c 2a f1 6e b8 85 f0 9b 97 ee 5a 42 23 4b aa 7e cd fb 32 97 24 4e 90 87 d4 a1 a4 83 a8 0c c4 8a 71 a6 5d 6b cb 5a 4a 92 a2 0b 89 51 1a 55 04 10 92 06 e9 c4 99 30 a0 74 Data Ascii: kBW}r`RXR8(%`AH:I:yIl5\|I0&)D%(@D'H1D%(Vh< Vf)\P?4JR$}[l:.O4FiL\,:[UrxSW\|*nZB#K~2$Nq]kZJQU0t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49954	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	930	OUT	GET /xxrz/1200x600/793/d4/a5/d4a5ca2896ffd5bf878a6c93110fb09f/d4a5ca2896ffd5bf878a6c93110fb09f.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: image/jpeg Content-Length: 492546 Connection: close Last-Modified: Fri, 08 Dec 2023 02:38:40 GMT Vary: Accept-Encoding ETag: W/"657281b0-df4c7" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iQDVPELahwNmyXI5wS4JjT8X10NLcXE6Cv3JsX6daaKLw7gngFn9stFc%2FF%2FjftLijB0hb2AAV%2FWjeEJUNLnCzr1P53wY5WC186NWwUED8AEuEIxmimIGs%2BgtSE7UTf9DnbN5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a839ce6aa66b-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 03 00 03 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 63 77 ac bd 77 fd 0d 20 d7 08 bc 18 30 c3 0f 1e 11 81 22 47 ef 0c 70 82 4e 1f 53 d7 f7 67 1f a2 fe cf 0f c7 e5 1b 8f 16 27 ce 4f 8e 3a 1f 43 4a 1b f9 d7 f0 0e 8e ce 1f 9c 1f 7e d7 6d 93 86 d9 bf 2e 75 f9 2c 9c 0c fa 25 c9 a9 d3 e7 8d a5 63 70 f4 7d 86 9e c4 7a 92 cb 39 67 a0 a0 0e f4 ce ff 00 a7 b5 35 a7 73 5c 8b aa b3 5a b0 b8 ea bb 5d 4c f9 c4 21 e8 8e b6 56 9b ca 59 cf d1 6f 39 25 d5 f5 5e 5c f4 34 bc 72 9e 66 ed 3b 32 c6 44 8c 5b f9 b1 2a f6 7b a6 57 a1 47 96 46 15 77 6f 8c e2 f3 26 86 e0 b0 d7 14 67 67 5c 82 56 db bd ee 0f 24 37 d3 10 75 42 ab 9d 76 13 af f6 56 6c d4 d1 d3 e6 75 c9 ab a0 12 1f e3 52 57 a0 58 5e c3 74 1c 4a 3c a7 65 06 86 c3 35 f8 35 82 3e 80 8a ed 36 91 85 66 40 72 84 b8 d0 3e 03 b2 2d 2e e4 53 ef e8 a2 61 da e7 78 5a be 77 ec ef 8b Data Ascii: cww 0"GpNSg'O:CJ~m.u,%cp}z9g5s\Z]L!VYo9%^\4rf;2D[*{WGFwo&gg\V$7uBvVluRWX^tJ<e55>6f@r>-.SaxZw
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 1f 89 c1 58 e6 b3 63 37 66 cb 63 e2 f4 4e 6a d3 59 fa 45 76 4e a1 cc fa c0 85 02 07 63 64 d9 b4 34 be d7 d9 49 e5 63 e7 9f ac be 78 59 72 ba d3 bd c2 5d 9f 2a 4a ed 7b 98 d4 99 3b 53 38 6e 3c f7 6a af 09 bb 48 a5 e8 0a c4 4f 77 43 5e 57 00 d8 b9 17 67 f1 f7 35 04 81 a1 e2 97 19 95 37 61 66 0b 17 88 c6 1c d2 f0 0d 07 dc 3e 75 33 af e9 a6 08 d2 6f 7c f2 f7 16 e3 92 d7 70 2f 53 37 7c be 8a d3 f7 13 4a ee 39 fb b2 f0 e9 f8 d5 3f 2e d0 fc 73 ea e7 93 c5 19 14 e8 14 d6 7f 82 ea eb 1d 2c 51 53 2d 72 03 2c 37 1b 51 51 b1 15 bb 0a a1 5b b1 81 f6 9a 83 62 46 59 2b e8 d6 51 ac eb 8c de c7 75 93 06 dd 79 a5 75 88 77 0a 02 99 00 9f 2b c0 cf 82 2f f3 3d bc 3a 8d a8 af 4a 73 59 bf 97 5c c7 34 19 ba 58 e9 05 d7 38 30 df 20 5d dc 72 6f 47 dd bc e4 2e 04 38 a5 91 bf 93 ff Data Ascii: Xc7fcNjYEvNcd4IcxYr]*J{;S8n<jHOwC^Wg57af>u3o\|p/S7\|J9?.s,QS-r,7QQ[bFY+Quyuw+/=:JsY\4X80 ]roG.8
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 9d de 18 28 38 0c 14 c2 3a 85 5d b1 41 7f 60 5b 80 c8 32 74 b5 e1 6c b6 1c 88 35 6d de fa 38 ae 50 be 25 94 79 1a f2 d8 c6 38 12 b8 b2 19 b0 3a d0 85 55 dd d5 f3 ac e6 64 fb 3e 96 97 a3 d1 56 84 34 de 7a 72 c3 12 c6 15 57 b5 68 c7 94 46 d2 ac 00 c4 3f 15 68 5d 99 c7 8a 01 ad b4 03 92 91 45 6b bb 3d 13 8c 87 2d 1e 3b 55 19 52 3a 7a 3b 30 bc 80 81 3a eb af 42 87 14 c5 68 8b 07 87 1b ee ea 8d d8 91 df bc 60 44 e0 d2 f1 c0 f6 24 74 b1 5d 31 b9 5d ed e5 0e 52 86 c1 6d aa 7b 65 52 7d 3c 4b 49 69 ac ed 57 ae 17 e0 af 3e 9f b5 ec 1c 89 a8 e0 19 cd e3 9a 68 27 6b 97 12 a2 63 3a 98 71 e2 a8 41 99 1a e3 46 d3 3e 84 f3 47 af ae 72 ec 92 0b 03 1c d1 45 37 12 9e ef b5 51 fb 2f 3e db 76 aa f9 9b f6 00 b6 b6 3d 30 5f 62 5f 33 40 ee 71 b8 1d 52 e3 71 a7 53 44 f0 cf f7 bf Data Ascii: (8:]A`[2tl5m8P%y8:Ud>V4zrWhF?h]Ek=-;UR:z;0:Bh`D$t]1]Rm{eR}<KIiW>h'kc:qAF>GrE7Q/>v=0_b_3@qRqSD
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 31 e8 3a b5 9a cd 5b cc f0 c6 04 10 55 7d 49 6e 78 a6 55 96 5e 04 1d 04 90 b4 c7 8f 2e 3c 8f a0 24 9f 00 56 75 05 c3 90 99 30 6d 4e 52 83 9e 88 be 89 90 09 36 d7 6c be 44 9b 7f a0 cb 37 d1 a7 de 7e 9a 79 97 e8 6b 9a 8d a9 db 12 71 7b 57 59 2e ae e5 a5 e8 ea db 23 35 58 c9 76 0d 46 be a2 8a aa 91 2d bf 5a 58 a1 c7 64 12 f3 65 b9 41 ef aa e3 3e dc 29 2d 08 14 94 4b 41 de e0 c5 58 81 3b cd df 46 fc bf 99 59 56 f5 67 f9 ea f6 f1 cf ae b0 92 fa 45 15 cf 75 a6 95 69 33 93 71 39 18 c5 58 ff 00 44 de 53 44 55 3b 26 fe 49 69 b8 39 e7 51 ac 35 62 a0 e7 71 94 c6 95 d9 3b f2 7b 71 2d 1b 43 37 68 07 b3 82 9d bf 72 7a b1 c3 31 ea 4a fc a0 1a 27 bf 94 bb 3e 75 d3 a3 33 fd 9e 12 c9 69 7e 77 7e d6 f4 45 04 4b 5e b1 87 6f 8d 4f d4 9e 18 94 3d a1 6b 24 27 bd 02 89 61 2e 3e Data Ascii: 1:[U}InxU^.<$Vu0mNR6lD7~ykq{WY.#5XvF-ZXdeA>)-KAX;FYVgEui3q9XDSDU;&Ii9Q5bq;{q-C7hrz1J'>u3i~w~EK^oO=k$'a.>
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: fa b8 05 2f 38 60 2d 0f 9a 67 8d cd 99 07 72 e2 5b 4e 07 08 26 89 a3 26 56 ad df 6c 7c 1c fe 89 c1 5d 5c a4 7e f4 52 36 42 d3 56 66 22 19 c9 4b 67 db 81 19 19 c6 9e 21 8e 6b a6 4f 3f 36 98 5c e1 db 97 dc 81 da f9 42 9d cd 2e 51 70 af aa 7e 3e 82 3e 6c 59 6c 98 3b 6b d2 6c f2 2b 56 5f e7 e7 22 34 e4 dc 51 e8 5f 96 24 13 e1 c2 8c 2e 93 1e 8a 96 8d 69 74 f6 2c 30 ec e9 4d f4 e5 bb 94 36 6d 83 12 9f 42 bc 25 2f a7 01 cf fc af df 18 97 a7 8c 85 a5 2f 43 99 60 cc ad 71 00 2d fe 25 c6 9c 4f 32 0e cb 87 9a b3 3b 79 85 d5 bf 4b c0 21 1a e8 ed a9 72 8e a3 27 69 f6 bd eb 3c 5a 63 bc ea cc 2f 9f e3 cd 75 72 13 dd 22 53 1c a0 7f 49 48 8c 80 f5 9e 22 d8 d7 c6 97 96 99 9d fa 20 65 c6 64 45 5d 9c b6 2d 0d 35 35 a7 a0 b4 ce 81 95 36 be 9b f7 eb c4 1e a4 06 9a fd 7e ab b0 Data Ascii: /8`-gr[N&&Vl\|]\~R6BVf"Kg!kO?6\B.Qp~>>lYl;kl+V_"4Q_$.it,0M6mB%//C`q-%O2;yK!r'i<Zc/ur"SIH" edE]-556~
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 9a 76 d7 4d 8f 1a bf 82 e2 7d 21 f3 df 86 d4 7a 20 e8 6c e0 39 4b e3 fc c8 cc 83 18 da 12 f4 d1 d6 5c 41 91 9a 0b 20 eb eb 69 5a 57 a1 9b 7d 82 58 4d a9 c3 a2 dc d8 9c 23 e9 1e f7 ba 60 6f d9 3f 9b 9b aa 07 9f c1 66 56 3d 0c 1f e7 97 cf ab d0 0e 58 11 e9 36 3d 81 1e 9c 72 85 a8 34 4b 08 d5 d3 c0 e5 9d 49 72 c7 f4 25 15 45 5d 5c 61 21 f3 7c ad 83 fb 5f cc 91 d7 08 ea ab 2f ba e3 2d 24 9b b3 6d 4e f4 f5 cf 85 ac b3 d1 e4 7b 78 bc 88 67 d7 85 8d b8 18 ab 67 35 d5 dd 48 87 82 aa d8 5a 8e c1 46 97 74 eb 36 98 71 c2 6f 8d 88 af 4e 54 59 96 d9 3b be a8 7f 39 b9 37 fa 1a f2 0c 73 19 77 ac 9c 11 81 2b ef ce ef c9 b9 1e e1 cf b7 6d 35 57 d0 cb c2 36 15 d1 a5 5c 90 5d 1a 92 52 78 be d8 93 24 7a c9 e6 bf ae 5c e2 2e 5f e9 6a 7a 4a 7d 56 df a0 65 8f c5 3b 5f 1a 6d 69 Data Ascii: vM}!z l9K\A iZW}XM#`o?fV=X6=r4KIr%E]\a!\|_/-$mN{xgg5HZFt6qoNTY;97sw+m5W6\]Rx$z\._jzJ}Ve;_mi
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 22 4e 84 cc c7 5d 05 8e f8 0a d1 bd 04 b1 fc b8 ea 09 b0 fa c9 1b cd a9 e2 75 4d dc b3 84 27 c6 bc ec 22 b9 0d f9 8b 66 f7 b8 70 dd a3 c0 fa da 3e 5b 59 94 03 64 af 8e b8 1a 63 2a d3 96 96 75 d4 75 44 18 7a ae c7 96 26 87 b9 b2 f6 6c 9f e3 fd ed 49 64 fe 33 e8 c7 f1 f5 e9 45 d0 36 74 a8 53 85 d4 2f 16 05 de 80 f1 57 75 81 02 de a3 e5 84 a3 ac ea c9 f2 5d 7f b7 7c 20 7a 5d 1a 56 78 ac 02 7e 1f 09 36 10 d8 04 02 75 d7 6e 4b 8e b2 1d 31 b6 9f 6a 45 eb d6 f1 9f 25 84 1c 70 29 d2 39 8f a0 f8 5f 70 e1 e1 64 18 b4 8e 63 22 7e 97 e9 5b 8f 98 ba 26 b9 a2 6c 72 e8 4f f5 6d 18 c9 31 84 c6 cc 22 44 71 38 ae 4a 24 3c 84 57 49 4e 83 3e 1f 08 4e 83 35 9e 48 81 3e 7b 4b a9 93 b4 97 73 36 4c 43 94 fd 60 cd 27 b5 2c bc f0 8f b6 09 2d 30 89 aa 8e 19 c6 4c f4 5d 05 cb db 68 Data Ascii: "N]uM'"fp>[Ydc*uuDz&lId3E6tS/Wu]\| z]Vx~6unK1jE%p)9_pdc"~[&lrOm1"Dq8J$<WIN>N5H>{Ks6LC`',-0L]h
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 68 1b 21 26 08 76 2a 92 f1 cf d9 0e dc c7 b4 f0 03 74 f0 a7 06 bb af c5 75 4e c3 10 74 b0 92 53 04 97 5f 60 5b 95 ad bb 22 29 38 33 7a 67 8c 8d 61 d7 b7 5f ca d5 98 12 ef 5c a0 e9 59 9a 21 e8 12 56 56 52 af ab 44 f2 df 36 48 f6 74 68 1e 76 2d 26 1c a9 c2 08 49 87 2d c1 53 24 c3 98 b8 b2 67 8d 9e a6 c9 cb 81 39 b4 4b ee 8f df f4 3e f9 11 fb 15 06 7c f1 d3 1a 49 3a 12 f2 61 a5 68 f8 bf 64 56 b6 9e 03 fa 44 b2 db 43 37 56 36 dc 97 5f e9 fb 73 6f fc f5 d4 84 aa 19 77 6f 38 d9 10 94 e6 4a 82 d5 31 62 73 6b 63 94 bd 31 89 46 fb c2 4e 62 44 af 16 74 f7 9a 15 ff 00 56 95 af 58 97 51 a6 0e 3e 3e c6 72 22 ca 49 8b 32 45 6c 9f ed 1b b6 22 bd 18 15 cf 9c 20 ab 58 54 8f 08 dc 1e a1 08 48 d7 13 48 59 55 7c e2 e4 6c 7e d1 fc 81 ea 95 2b 6a 7b 79 dc b1 cd 31 f5 20 46 80 Data Ascii: h!&v*tuNtS_`[")83zga_\Y!VVRD6Hthv-&I-S$g9K>\|I:ahdVDC7V6_sowo8J1bskc1FNbDtVXQ>>r"I2El" XTHHYU\|l~+j{y1 F
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 31 63 ef 6c 48 40 63 96 82 f3 9f 42 2a 47 a2 05 ac c5 7f a2 40 3c b0 7a e5 96 31 97 5e 35 15 c3 a4 42 94 8e f1 f2 80 ca 8e 74 b1 01 04 23 38 46 70 b9 91 dd 2f 30 44 e8 1d 23 e5 6f a8 de 53 9d b1 d4 39 77 47 65 bb c1 0b f4 f2 71 ba 3d 2f 70 79 f1 fb 67 03 33 9c ec 02 d5 31 81 d0 75 be 50 d1 d1 8d cf 84 d1 5b d6 8c 5b 8b 62 1a 9a 75 ed 16 ac ba 13 d5 65 a6 71 ee b4 b1 d7 f0 79 0d 91 ee 52 20 eb 4e 50 05 f3 5f d2 38 0a 8c b6 18 3e 5d 9a b6 d8 71 16 c9 c5 e6 07 69 0a 9a c2 63 98 49 56 86 d0 59 a9 52 d8 83 b3 dd f2 22 66 9e c1 53 a4 11 ac 5a 15 98 ca 51 1b 12 9b d3 a1 58 99 ff 00 08 f7 a6 5b 46 97 a2 ac 08 da 17 b5 a6 b2 ee 87 a8 e2 6d 92 d4 8c 2c 66 04 ab fd 2c f3 6b 5d f3 4f 5c a1 fd 96 ac fe 46 9b cb 1d 70 4d fa ce 32 89 ba 71 bf 5a c7 0f 2c 4a 88 46 04 40 Data Ascii: 1clH@cB*G@<z1^5Bt#8Fp/0D#oS9wGeq=/pyg31uP[[bueqyR NP_8>]qicIVYR"fSZQX[Fm,f,k]O\FpM2qZ,JF@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49960	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	699	OUT	GET /xxrz/1200x600/793/8c/c0/8cc04d9bb6609db3bf10b294153239fa/8cc04d9bb6609db3bf10b294153239fa.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: image/jpeg Content-Length: 332406 Connection: close Last-Modified: Thu, 09 Nov 2023 03:08:24 GMT Vary: Accept-Encoding ETag: W/"654c4d28-6015f" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uMaEJTx4WBeeKxoy5r1YLoqPMNAq2q61NJEMIsGLdn1Tp8zqyKJa2%2B0NE5l1wAT6FX5INb%2BzDANeTNbx7q6KxUceS9CzprI%2BmKmIa83d0407OnhkQioexBgqG2cKi9mvLX3G"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a839dbe5742e-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: c5 20 05 c2 e3 95 d9 1a c6 23 14 66 05 83 83 18 d3 18 2b 60 d3 2a 14 bd 95 3c 9f 36 2f c9 55 4c b6 22 32 79 a3 cb e6 ce ae 87 b0 d9 e9 7b 5b 7f 9a d2 31 fb 17 5e f9 ae 87 05 74 6c 91 cd 4c b2 c7 f1 9b e3 92 d2 36 c1 d3 be b6 30 cb a4 f4 56 92 05 97 ad 94 51 59 93 70 aa 92 b5 27 0f 16 2e 19 cb 1d 49 ae fe 80 cc 73 9c c5 e9 55 5d 28 64 70 8c 9c a4 c7 c5 a1 63 28 d6 0c 6d b0 86 10 cd a9 88 3b a5 ed 3c 1c 3c 94 10 97 33 ed 1b b6 99 91 8a 48 ce d2 5c b0 b6 28 ea 6a c4 ea d7 49 2e 8e a3 7a ad 6f 33 7b b4 23 a8 ec 46 91 6a d4 bc 15 4d f6 66 6a 72 9c 44 b0 c6 ba b2 aa 89 49 26 c0 96 f6 25 74 6a a7 8d 6d 33 9a b9 6b d8 96 6b 5a 2b 2c 1f 02 0e 93 59 04 e2 02 1a 26 7e 08 5a a8 f9 58 ad ab 35 5e bd 12 31 10 f5 b6 16 27 21 3b b4 9e 3e 6c 61 62 12 46 20 df c6 44 29 73 Data Ascii: #f+`*<6/UL"2y{[1^tlL60VQYp'.IsU](dpc(m;<<3H\(jI.zo3{#FjMfjrDI&%tjm3kkZ+,Y&~ZX5^1'!;>labF D)s
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 75 51 34 6d 69 ac de 3d 65 d1 9e b2 6e c1 b5 31 ef bd e7 93 f1 64 76 c8 52 ec 1e 67 ac 6d bd 79 9b da 55 18 4a c7 e5 74 51 b2 31 af 2b 67 e9 ed ad a0 fa 0f d3 fc 9f 97 cf 66 4f 42 7d 7d b5 a2 31 92 42 b4 77 33 5a 4c 15 b6 c7 30 ea 9b 2e e0 d7 13 27 e5 a7 34 1e d7 d7 41 dc 6b 79 da 4c ce 77 da 77 62 ac db 66 bd 41 a6 cb 7e 29 ac b7 d6 fa d0 3d 74 b6 7c 63 b8 5c f4 f9 5f 35 72 ad 03 b3 37 5e 58 af 2c 75 67 b3 9c 67 25 af 39 ef 3e 82 d8 f9 9f 44 e4 5e 7a ea de 7e 0f da f5 76 c3 8d af 15 5b ad 61 76 2c 46 a7 2b 1c 77 29 e3 b5 d6 52 d8 ad 80 95 af 63 fa 1b 9d 69 2e 51 a5 da 2b f0 e8 e8 1a ee eb 4a 96 bd a6 0b 88 04 3a c8 1c 20 54 41 72 05 41 18 ce 45 98 cf 41 bb a6 51 08 c5 17 78 94 78 f4 6e 35 73 29 d0 41 74 1d 58 8a 6b a9 0d 4e 1a 38 2f 02 c9 67 db 4d 05 7d Data Ascii: uQ4mi=en1dvRgmyUJtQ1+gfOB}}1Bw3ZL0.'4AkyLwwbfA~)=t\|c\_5r7^X,ugg%9>D^z~v[av,F+w)Rci.Q+J: TArAEAQxxn5s)AtXkN8/gM}
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: de 7a f6 46 57 13 02 65 30 ac a1 b9 23 82 bc 48 f0 f1 a4 83 cc d2 6f 34 b0 c6 66 61 80 26 21 0c 03 9b 08 b9 40 45 08 84 eb 01 22 61 95 f0 a1 4d 9c ba 53 c5 15 85 d0 3c 0c 17 2a 94 1b 52 1d 27 00 17 6a e5 f0 41 8c 0b 8c 2e 40 0b 85 06 2b 1c 00 1c e0 38 cb f8 b9 d3 5a e4 6c e4 c7 b7 62 60 e5 ef 32 a1 4d 2b 5f 26 e9 95 88 e0 e9 1e 17 b8 74 d1 f5 db b2 a9 dd 5e b4 bb 3e 81 b2 6d eb 67 2d 0e 3d 03 d3 62 39 63 b1 fa 67 45 77 cd 38 af 4a 7a 13 cc da 7b 2d 17 ad 76 2d 41 9b 48 65 6d 12 64 3a 91 b0 e1 b6 61 d4 4a de 5b d8 8d f3 ab 87 4c 69 9e ee f2 2b ff 00 9f 6d 07 dd 9e 7d 78 c7 d2 18 8f 95 8b f3 7b d7 2c 33 79 18 ab 67 54 27 df 54 5e 81 3d c8 3e b0 f2 a0 26 f8 ed 7c dd 1c e3 67 9e af f6 87 11 f6 86 3f e8 0f 40 3b 3b 93 fd 24 c9 62 f5 ef 93 3d 17 e7 bf 9a 6a eb Data Ascii: zFWe0#Ho4fa&!@E"aMS<*R'jA.@+8Zlb`2M+_&t^>mg-=b9cgEw8Jz{-v-AHemd:aJ[Li+m}x{,3ygT'T^=>&\|g?@;;$b=j
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 8a a0 2f b9 a1 97 52 29 d4 a4 4f 58 e8 56 ab c1 36 4a 7a f4 d7 35 7b 08 52 26 a5 8a c1 7d d5 13 e7 89 b8 63 1b 2d 71 9c 6b 60 aa ee 59 e3 a3 fa 41 e5 c6 eb 80 1e eb d6 ed 74 95 7f 9b ed f9 1d 7b 03 79 9b e8 b9 9d 4d b2 b3 5b 9e a5 b8 69 ab 1f 84 7b 45 9f 7d d1 b6 9e 1b 61 24 e6 ce d7 31 a0 d2 3e 45 fb b1 0f b7 c2 f8 28 fb dd af 90 3d 84 7d 25 35 a1 b7 46 0b db 7b 55 4e 75 9a f3 bd 8f 0c 52 36 fd f8 c5 ea ef a3 ba ab 60 66 68 b4 ef 16 fa 11 a5 7e 7c f4 6d f9 c7 9d ab c0 c4 c3 d7 7e 5f 7a 63 e7 8f 6d fc d7 e9 8e 0f ee bd 57 a2 d9 36 bf 25 3f b9 c6 f5 c6 f8 f3 7f 60 e7 8b ab f4 0d 0b a3 f9 dd e7 b8 b9 1b b2 6a 72 f2 70 f6 65 36 58 6e 6e e3 9e f3 e5 2d 27 aa f1 ee df e5 3d e1 4a 76 c5 2c 56 d5 98 ca 8e e9 e1 27 bf 47 61 28 9c f7 ed 1f 9c 5f 42 e4 b5 87 a8 7c Data Ascii: /R)OXV6Jz5{R&}c-qk`YAt{yM[i{E}a$1>E(=}%5F{UNuR6`fh~\|m~_zcmW6%?`jrpe6Xnn-'=Jv,V'Ga(_B\|
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: ea fa 3b cc 3f 5f 7c 96 f5 dc ab ed b9 a6 6b 86 cd ac 3d 7b d4 1c 07 e0 bb bf 43 b5 03 7b 37 89 7b 7f 45 f1 7f a2 ad f7 e3 f9 c5 a8 7a 5b c9 da 3d 06 c1 52 1e e7 e2 1e e7 0c ab 2b 94 77 b0 75 5d af ce 66 65 76 fa 71 c8 c5 a8 94 46 3e 51 c2 db 37 7f 34 56 f5 f8 6e c8 f4 17 c9 ae 9b f6 4f 17 27 9d de 8a 79 6d a0 c4 f5 df 6f f9 35 ec 8f 93 e9 b5 4e b9 d7 9b 58 78 d0 da 5a 92 03 d0 b4 fd 67 46 e3 0b cf b8 7b 67 7a 76 5f 99 1d f7 4f f3 de b4 d6 3b a7 41 f9 a0 d6 08 c3 6c 9f 5b cf 73 b5 c6 6f 7b 59 fa 9e 8c 8e 82 4f 2a 6c b4 6d ff 00 45 53 dd 6a f8 8e 86 a6 81 dd 2c fa ee c0 63 6e 5a c2 e5 be ea 44 f3 9d 8e e7 a7 65 77 fa b6 bf 61 aa d5 ce ce b3 3f 4f 8c 14 60 dc c4 85 96 98 5a b2 81 15 33 31 a4 2b 98 92 01 87 05 51 b2 48 36 b5 cb 74 8b d0 f2 9e 11 90 55 12 c2 Data Ascii: ;?_\|k={C{7{Ez[=R+wu]fevqF>Q74VnO'ymo5NXxZgF{gzv_O;Al[so{YO*lmESj,cnZDewa?O`Z31+QH6tU
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: d8 98 ee ea df 4f f5 1a b3 d2 35 7f 71 b3 e2 f4 6c 6a fa ce 45 a7 b1 1e 28 7a 0d 4d 55 db fa 86 e3 a8 fe 53 db cf de b4 c6 eb 8c fe 4d d0 1d 97 cb 58 6f 70 e7 2d 69 b1 f5 af 9b 7b 5d 6a a3 62 ad 0b 5f 0f 4b 96 a6 5d e1 11 b0 c0 de 0e c1 86 13 0c e5 a4 ae b5 73 03 73 56 c2 28 44 17 4c dd aa a8 be 99 22 19 27 d7 9d 9b d6 f2 08 c9 20 91 d4 ae 9b d9 6a 65 0f 8c 24 5e d6 3c 33 40 60 4e c8 d5 52 c4 46 20 cd ab a0 0e 5b 3c 19 92 2a 60 fe 93 4f 95 5d 1c f6 46 26 e0 0e 9b 85 31 2f 71 93 60 ce 27 83 e1 af c9 8a b9 0d c2 a1 5b 48 96 b5 56 57 bb 1d 59 58 29 d9 99 0d 72 ae 5d 08 8a 19 d4 6b f9 ba ab 49 76 e4 26 ea 67 31 b9 e2 e5 71 78 e3 26 ff 00 36 a1 b4 51 da 66 57 a0 8b bc 90 90 61 29 29 d6 d6 55 d9 7b 1a d4 6d 71 b4 67 2c db bc bb 3d cc 6d cf 9f 1e fb 3b b4 cd e0 Data Ascii: O5qljE(zMUSMXop-i{]jb_K]ssV(DL"' je$^<3@`NRF [<*`O]F&1/q`'[HVWYX)r]kIv&g1qx&6QfWa))U{mqg,=m;
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: d6 f4 fc d1 d4 0a 9b 1e 14 00 e8 d2 4d 74 a3 72 60 a9 c1 22 d8 6c 39 d7 04 4c 71 18 c7 4a 44 be 5b a9 c4 e5 c3 65 2c 39 25 6c a4 b9 b9 86 da 13 94 bb 1a 1e ed 54 93 2d 89 12 19 32 4a b3 d8 f5 f4 f6 b1 6c 6b 06 bd b1 fb 3b 6f 32 95 39 cb be 58 ec d4 d9 ba 28 f6 7e d0 d1 fb 37 1c 16 db cd 8d 1c 58 fb 77 a2 f9 ab 75 f9 55 b6 d8 ba 6b eb bf 96 17 b0 26 62 5f e2 6d 0d e6 1f a5 5c 49 a6 e7 37 6b 1e d6 ab 53 6b b8 da 9b b2 b7 ef a9 79 6f 56 ee 4d 79 ae 3e 6c f6 37 1e 34 fa 69 a1 69 b7 3c b1 e8 7f 22 f4 91 76 17 1f 46 f4 d3 5d c7 96 ee bd 17 bc 39 ac 21 3c f5 f3 e3 b7 f8 f6 c6 fb 99 ec 91 53 ba 5c 1c 99 8a e2 e0 5a 85 4a e5 4d 10 95 2d 34 e9 bb 0b 7f 57 3d 6a f1 af db 0c c5 83 0d cc 75 33 61 f8 05 e5 57 d0 b7 cf 76 aa 0a c7 44 e8 2b 61 d5 5f 47 7a ce d5 60 a9 de Data Ascii: Mtr`"l9LqJD[e,9%lT-2Jlk;o29X(~7XwuUk&b_m\I7kSkyoVMy>l74ii<"vF]9!<S\ZJM-4W=ju3aWvD+a_Gz`
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: ed ea 0f eb 2b 8b 38 89 7e 43 df d8 6a 6b 9f 63 ea 17 bd 7f 25 3f 47 d8 9d 77 5a d3 af b1 35 34 de 46 eb 79 c8 bf 39 f6 0f 42 fa cb 9f 77 d6 f7 cb 9b 39 95 75 7f 9d 8a 7a fc b0 31 47 2d a0 22 4a f3 63 6f 33 8c d6 f6 c7 3a 70 f6 a6 cf fa 07 52 68 1a 53 dc d7 a5 74 b5 57 5c 97 17 ed 35 ab 71 25 0e a4 bc e9 4b 1d 4c 0d 46 a7 a9 d9 6a 5b 1f 12 63 1e b3 6b 5c 6b 52 2a 0d cd b6 2b 84 27 a8 45 9b 86 52 d1 e5 2c a6 fa 1c 14 11 e2 61 b2 ad e6 84 b8 c1 64 83 2b 36 52 4e 61 30 38 8c 0a 12 ce 01 39 d3 e4 a6 7a 06 ce 24 8c 60 e4 73 0a e5 ba cd 73 f2 14 ba ca 85 4e 83 92 78 ab a4 01 b1 39 cb 72 3d 28 82 65 8d c6 4b 29 c6 f5 72 8e 4f 72 c5 2b 9b 16 a0 65 53 7a ca 47 55 3d bb 94 9c c2 d8 d5 0a 4a d9 9c 65 13 33 8b aa d5 57 c6 ba 8d 8c f5 67 85 0f ae 44 82 51 a1 80 35 e1 Data Ascii: +8~Cjkc%?GwZ54Fy9Bw9uz1G-"Jco3:pRhStW\5q%KLFj[ck\kR*+'ER,ad+6RNa089z$`ssNx9r=(eK)rOr+eSzGU=Je3WgDQ5
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 85 8a a4 5d 53 ec 26 fa 80 d7 f0 c4 79 9d e9 ef 8e 27 5f 73 75 1d 5a fc 13 34 82 75 09 8f 2d 26 c8 b3 ab 95 74 9b 27 0b e4 1c c4 3b 99 b2 c1 a2 e4 b4 37 5f 04 36 25 07 ac c8 23 d6 7d fb e6 27 a4 7e 5b ef 9c 91 de 7a e6 db 33 3b bf 62 70 7f 67 5a e0 74 16 b2 5e a1 f6 ef c6 d3 88 42 32 b0 c7 0e 2c eb 4e 4d f1 cf 4c e7 79 5a c4 7f 8c 7d 1a fe 23 06 71 66 ae b5 60 11 d3 af a9 ce 46 b4 dc f5 83 d4 f2 fe b4 d2 b1 96 7a 2f 22 5d 16 04 2a a9 e2 09 95 0e a1 12 4d d0 28 96 13 6d 76 51 09 c6 31 53 c9 5d c0 01 7a 8d 8c 63 bd 30 2e 12 50 24 39 c5 42 63 bd 50 10 75 1c 14 71 18 19 67 71 b9 0f 88 fb 83 00 f4 1d 34 75 d4 98 c1 6c 80 54 26 6e a3 e7 07 9a 32 1c 61 fc 59 44 0f 63 c3 99 25 2d dc 64 cc 9f 24 c9 70 4a 96 9f 18 10 b0 c1 3c b1 a6 28 1c ee 40 cc bd c6 33 86 ac 63 Data Ascii: ]S&y'_suZ4u-&t';7_6%#}'~[z3;bpgZt^B2,NMLyZ}#qf`Fz/"]*M(mvQ1S]zc0.P$9BcPuqgq4ulT&n2aYDc%-d$pJ<(@3c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49961	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	693	OUT	GET /ajax/banner/vpn HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"10-UiecVLFvCojUPVe0y7mBPqPMOas"
2024-04-26 18:32:44 UTC	918	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:32:44 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"10-UiecVLFvCojUPVe0y7mBPqPMOas" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KW%2FBo7mQtfj4ap5jASrFklmXTG7fp42YV4GIpfqi0beMVGfMEaBWiHnOVRdiOAbDg2or2gJYNu%2BAa%2BuCvy%2Bg3ImsSXpzhWicUNrTQ6q7%2F1hCbPC%2F4PlVTbWfzMso%2F%2B8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a839dcf94c12-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49953	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	921	OUT	GET /de/preise/bitcoin-btc?irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0&utm_source=Impact&utm_medium=Affiliates&utm_campaign=4484296&utm_content=Copy%20of%20Bitcoin%20Price%20Page_CH_2&utm_term=e2&ref=615250356669422741&tag=affiliates&subid1=&irgwc=1 HTTP/1.1 Host: www.bitpanda.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:43 UTC	862	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: text/html Content-Length: 118841 Connection: close Last-Modified: Wed, 10 Apr 2024 01:40:30 GMT x-amz-version-id: 4rkqt8xZCp_iXK1xRTP1I8MCj029OxmJ Cache-Control: max-age=3600, no-transform, public ETag: "ad1c6186ef267a6cd2a513a3e7c97d42" X-Cache: Hit from cloudfront Via: 1.1 d8c0c4dea019bf6cec02e183c6602614.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P1 X-Amz-Cf-Id: Y9tJMZp1AE11jJNt4MlEhQiORWBZ2ToOVQmuYZ83qnCwGDMqGzY5TQ== Age: 764 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; path=/; domain=.bitpanda.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a839bac2d9b9-MIA
2024-04-26 18:32:43 UTC	507	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 6c 69 67 68 74 20 6c 61 6e 67 3d 64 65 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 6f 70 74 69 6d 69 7a 65 2e 63 6f 6d 2f 6f 70 74 69 6d 69 7a 65 2e 6a 73 3f 69 64 3d 4f 50 54 2d 4e 33 44 36 5a 4e 50 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 69 66 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 22 75 63 5f 70 65 72 66 6f 72 6d 61 6e 63 65 5f 76 31 5f 30 3d 61 63 63 65 70 74 65 64 22 29 3f 2e 6c 65 6e 67 74 68 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 7b 27 65 76 65 6e 74 27 3a 20 27 6f 70 74 69 6d 69 7a Data Ascii: <!DOCTYPE html><html class=light lang=de><head><script src="https://www.googleoptimize.com/optimize.js?id=OPT-N3D6ZNP"></script><script>if(document.cookie.match("uc_performance_v1_0=accepted")?.length){ window.dataLayer.push({'event': 'optimiz
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 69 74 70 61 6e 64 61 2e 63 6f 6d 2f 64 65 2f 70 72 65 69 73 65 2f 62 69 74 63 6f 69 6e 2d 62 74 63 20 70 72 6f 70 65 72 74 79 3d 6f 67 3a 75 72 6c 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 6f 72 69 67 69 6e 20 6e 61 6d 65 3d 72 65 66 65 72 72 65 72 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 69 74 70 61 6e 64 61 2e 63 6f 6d 2f 6d 65 64 69 61 2f 72 65 64 65 73 69 67 6e 2f 66 61 76 69 63 6f 6e 2f 66 61 76 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 20 72 65 6c 3d 69 63 6f 6e 20 73 69 7a 65 73 3d 33 32 78 33 32 20 74 79 70 65 3d 69 6d 61 67 65 2f 70 6e 67 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 69 74 70 61 6e 64 61 2e 63 6f 6d 2f 6d 65 64 69 61 2f 72 65 64 65 73 69 67 6e 2f 66 61 76 69 63 6f Data Ascii: itpanda.com/de/preise/bitcoin-btc property=og:url><meta content=origin name=referrer><link href=https://cdn.bitpanda.com/media/redesign/favicon/favicon-32x32.png rel=icon sizes=32x32 type=image/png><link href=https://cdn.bitpanda.com/media/redesign/favico
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 3e 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 45 75 63 6c 69 64 53 71 75 61 72 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 69 74 70 61 6e 64 61 2e 63 6f 6d 2f 6d 65 64 69 61 2f 66 6f 6e 74 73 2f 45 75 63 6c 69 64 53 71 75 61 72 65 2f 45 75 63 6c 69 64 53 71 75 61 72 65 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 69 74 70 61 6e 64 61 2e 63 6f 6d Data Ascii: }</style><style>@font-face { font-family: EuclidSquare; src: url("https://cdn.bitpanda.com/media/fonts/EuclidSquare/EuclidSquare-Regular.woff2") format("woff2"), url("https://cdn.bitpanda.com
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 7a 74 20 6d 69 74 20 64 65 72 20 62 65 6c 69 65 62 74 65 6e 20 4b 72 79 70 74 6f 77 c3 a4 68 72 75 6e 67 21 22 20 6e 61 6d 65 3d 64 65 73 63 72 69 70 74 69 6f 6e 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 42 69 74 63 6f 69 6e 20 6b 61 75 66 65 6e 20 26 61 6d 70 3b 20 6c 69 76 65 20 42 54 43 20 4b 75 72 73 20 69 6e 20 45 75 72 6f 20 c2 b7 20 42 69 74 70 61 6e 64 61 22 20 6e 61 6d 65 3d 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 74 70 61 6e 64 61 2e 63 6f 6d 2f 64 65 2f 70 72 65 69 73 65 2f 62 69 74 63 6f 69 6e 2d 62 74 63 20 72 65 6c 3d 63 61 6e 6f 6e 69 63 61 6c 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 2f 65 6e 2f 70 72 69 63 65 73 2f 62 69 74 63 6f 69 6e 2d 62 74 63 20 68 72 65 66 6c 61 6e 67 3d 78 2d 64 Data Ascii: zt mit der beliebten Kryptowhrung!" name=description><meta content="Bitcoin kaufen & live BTC Kurs in Euro Bitpanda" name=title><link href=https://www.bitpanda.com/de/preise/bitcoin-btc rel=canonical><link href=/en/prices/bitcoin-btc hreflang=x-d
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 7d 3b 0d 0a 20 20 20 20 76 61 72 20 70 61 72 74 73 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 72 65 70 6c 61 63 65 28 2f 5b 3f 26 5d 2b 28 5b 5e 3d 26 5d 2b 29 3d 28 5b 5e 26 5d 2a 29 2f 67 69 2c 20 66 75 6e 63 74 69 6f 6e 28 6d 2c 6b 65 79 2c 76 61 6c 75 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 73 5b 6b 65 79 5d 20 3d 20 76 61 6c 75 65 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 76 61 72 73 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 72 6c 50 61 72 61 6d 28 70 61 72 61 6d 29 20 7b 0d 0a 20 20 20 20 6c 65 74 20 76 61 6c 75 65 20 3d 20 22 22 3b 0d 0a 20 20 20 20 2f 2f 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 0d 0a 20 20 Data Ascii: }; var parts = window.location.href.replace(/[?&]+([^=&]+)=([^&]*)/gi, function(m,key,value) { vars[key] = value; }); return vars;}function getUrlParam(param) { let value = ""; //console.log(window.location.href);
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 65 43 6f 6f 6b 69 65 28 27 73 5f 69 64 27 29 3b 0d 0a 7d 0d 0a 63 6f 6e 73 74 20 74 61 67 20 3d 20 67 65 74 55 72 6c 50 61 72 61 6d 28 27 74 61 67 27 29 3b 0d 0a 69 66 28 21 21 74 61 67 29 20 7b 0d 0a 20 20 20 20 73 65 74 43 6f 6f 6b 69 65 28 27 74 61 67 27 2c 20 74 61 67 2c 20 33 30 29 3b 0d 0a 20 20 20 20 2f 2f 65 72 61 73 65 43 6f 6f 6b 69 65 28 27 73 5f 69 64 27 29 3b 0d 0a 7d 0d 0a 63 6f 6e 73 74 20 63 6c 69 63 6b 49 64 20 3d 20 67 65 74 55 72 6c 50 61 72 61 6d 28 27 69 72 63 6c 69 63 6b 69 64 27 29 3b 0d 0a 69 66 28 21 21 63 6c 69 63 6b 49 64 29 20 7b 0d 0a 20 20 20 20 73 65 74 43 6f 6f 6b 69 65 28 27 69 72 63 6c 69 63 6b 69 64 27 2c 20 63 6c 69 63 6b 49 64 2c 20 33 30 29 3b 0d 0a 7d 0d 0a 63 6f 6e 73 74 20 75 74 6d 43 61 6d 70 61 69 67 6e 20 3d 20 Data Ascii: eCookie('s_id');}const tag = getUrlParam('tag');if(!!tag) { setCookie('tag', tag, 30); //eraseCookie('s_id');}const clickId = getUrlParam('irclickid');if(!!clickId) { setCookie('irclickid', clickId, 30);}const utmCampaign =
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 6f 6e 4f 62 73 65 72 76 65 72 28 63 61 6c 6c 62 61 63 6b 29 3b 0d 0a 20 20 20 20 20 20 20 20 6f 62 73 65 72 76 65 72 2e 6f 62 73 65 72 76 65 28 74 61 72 67 65 74 4e 6f 64 65 2c 20 63 6f 6e 66 69 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 5f 70 61 71 20 3d 20 77 69 6e 64 6f 77 2e 5f 70 61 71 20 3d 20 77 69 6e 64 6f 77 2e 5f 70 61 71 20 7c 7c 20 5b 5d 3b 0d 0a 20 20 2f 2a 20 74 72 61 63 6b 65 72 20 6d 65 74 68 6f 64 73 20 6c 69 6b 65 20 22 73 65 74 43 75 73 74 6f 6d 44 69 6d 65 6e 73 69 6f 6e 22 20 73 68 6f 75 6c 64 20 62 65 20 63 61 6c 6c 65 64 20 62 65 66 6f 72 65 20 22 74 72 61 63 6b 50 61 67 65 56 69 65 77 22 20 2a 2f 0d 0a 20 20 5f 70 61 71 2e 70 75 73 68 28 5b 27 74 72 61 63 6b 50 61 67 Data Ascii: onObserver(callback); observer.observe(targetNode, config); }});</script><script>var _paq = window._paq = window._paq \|\| []; /* tracker methods like "setCustomDimension" should be called before "trackPageView" */ _paq.push(['trackPag
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 3c 73 63 72 69 70 74 20 73 72 63 3d 2f 2f 67 65 6f 69 70 2d 6a 73 2e 63 6f 6d 2f 6a 73 2f 61 70 69 73 2f 67 65 6f 69 70 32 2f 76 32 2e 31 2f 67 65 6f 69 70 32 2e 6a 73 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 61 64 6a 75 73 74 53 65 74 74 69 6e 67 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 54 6f 6b 65 6e 3a 20 27 37 68 72 6b 6d 71 32 79 62 33 62 34 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 3a 20 27 70 72 6f 64 75 63 74 69 6f 6e 27 0a 20 20 20 20 20 20 20 20 7d 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 69 64 3d 61 73 73 65 74 2d 70 61 67 65 2d 73 63 68 65 6d 61 20 74 79 70 65 3d 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 3e 7b 22 40 63 6f 6e 74 Data Ascii: <script src=//geoip-js.com/js/apis/geoip2/v2.1/geoip2.js></script><script>window.adjustSettings = { appToken: '7hrkmq2yb3b4', environment: 'production' }</script><script id=asset-page-schema type=application/ld+json>{"@cont
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 75 74 69 6c 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 2d 30 3e 3c 61 20 68 72 65 66 3d 2f 64 65 3e 3c 69 6d 67 20 61 6c 74 3d 42 69 74 70 61 6e 64 61 20 63 6c 61 73 73 3d 6c 61 7a 79 6c 6f 61 64 20 64 61 74 61 2d 73 72 63 3d 22 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 69 74 70 61 6e 64 61 2e 63 6f 6d 2f 6d 65 64 69 61 2f 73 70 6f 6e 73 6f 72 73 68 69 70 73 2f 46 43 42 2f 62 70 2d 66 63 62 2d 70 61 72 74 6e 65 72 2d 6c 6f 67 6f 33 2e 67 69 66 20 22 20 68 65 69 67 68 74 3d 34 30 20 77 69 64 74 68 3d 31 33 36 3e 20 3c 2f 61 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 75 74 69 6c 2d 76 69 73 69 62 6c 65 2d 64 65 73 6b 74 6f 70 3e 3c 75 6c 20 63 6c 61 73 73 3d 62 70 2d 6e 61 76 5f 5f 6e 61 76 69 67 61 74 69 6f 6e 3e Data Ascii: <div class=util-flex-shrink-0><a href=/de><img alt=Bitpanda class=lazyload data-src=" https://cdn.bitpanda.com/media/sponsorships/FCB/bp-fcb-partner-logo3.gif " height=40 width=136> </a> </div> <div class=util-visible-desktop><ul class=bp-nav__navigation>
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 69 74 70 61 6e 64 61 2e 63 6f 6d 2f 64 65 2f 69 6e 76 65 73 74 69 65 72 65 6e 2f 62 69 74 70 61 6e 64 61 2d 73 74 6f 63 6b 73 3e 3c 69 6d 67 20 61 6c 74 3d 22 45 54 46 73 2a 20 26 6c 74 3b 73 6d 61 6c 6c 26 67 74 3b 52 75 6e 64 20 75 6d 20 64 69 65 20 55 68 72 20 69 6e 20 45 54 46 73 20 69 6e 76 65 73 74 69 65 72 65 6e 26 6c 74 3b 2f 73 6d 61 6c 6c 26 67 74 3b 22 20 68 65 69 67 68 74 3d 33 36 20 73 72 63 3d 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 62 69 74 70 61 6e 64 61 2e 63 6f 6d 2f 6d 65 64 69 61 2f 4e 65 77 25 32 30 6e 61 76 69 67 61 74 69 6f 6e 5f 52 65 62 72 61 6e 64 25 32 30 33 2e 30 2f 65 74 66 2d 31 2e 73 76 67 20 77 69 64 74 68 3d 33 36 3e 20 3c 64 69 76 3e 20 45 54 46 73 2a 20 3c 73 6d 61 6c 6c 3e 52 75 6e 64 20 75 6d 20 64 69 65 20 55 68 72 20 69 Data Ascii: itpanda.com/de/investieren/bitpanda-stocks><img alt="ETFs* <small>Rund um die Uhr in ETFs investieren</small>" height=36 src=https://cdn.bitpanda.com/media/New%20navigation_Rebrand%203.0/etf-1.svg width=36> <div> ETFs* <small>Rund um die Uhr i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49957	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:43 UTC	929	OUT	GET /xxrz/250x400/793/62/4d/624da3679000613c554103de16f6296e/624da3679000613c554103de16f6296e.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:43 UTC	731	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:43 GMT Content-Type: image/jpeg Content-Length: 99494 Connection: close Last-Modified: Fri, 08 Dec 2023 02:38:20 GMT Vary: Accept-Encoding ETag: W/"6572819c-1492f" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M4sxzUp%2FKwnoIFltIGE9hrSoBQhLeWyliQqVpnSRYO9At%2FpJV1g0uxeHuMkIFwnxvdrJu%2BpgXWBvleKJhEJF1CN58eD3%2BL%2BgC%2BMd6YAy1Gg03b%2FTRq7Z6alr2la2saKO1%2FPf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a839edc74982-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:43 UTC	638	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 53 37 72 eb 44 5e e4 d3 5e 4a ae d1 3a 19 49 32 29 0d cd 75 b2 55 d0 2b e3 83 a2 3c 0d 34 b5 aa 33 b1 fc ba e7 ae 37 9a d1 b4 0d 09 88 4c e6 7d c9 33 1f 19 0d 24 96 4d 5a b9 6b e0 23 a8 27 c0 a5 32 bf 2a b2 74 89 6d 8c 08 44 aa d4 fd 2c 0e 5a db 74 67 a5 54 e7 13 2e 0f 1d 72 c8 1d b9 54 2d c8 a3 57 5c cc 3c 24 d5 32 b4 ef 36 15 0b eb a4 3b e6 76 54 72 07 18 19 09 5b 83 f7 9d 69 9c 26 ec 6f 19 11 fd 35 6f b5 46 94 06 b9 15 e2 e9 25 13 08 42 3a d3 7a 9c 32 7a b6 20 de 17 eb 05 cb 83 ae 99 ef 56 cd 67 c5 79 31 ae 7b 62 c9 7b eb b5 8e 4f b8 32 77 41 8c a9 03 dd 84 0a e5 12 bb 39 25 e3 43 ee d6 c0 39 34 3a 5d 4a fa 4b 5a 73 e6 0b 4c 57 30 7b 43 ad 9e be 6d ad 2d 4d fa d2 70 08 d0 07 a4 b4 e1 87 6f 36 72 4b 5f a7 80 95 af 49 e0 1b 14 58 20 fa 3f 28 54 ce cd 72 Data Ascii: S7rD^^J:I2)uU+<437L}3$MZk#'2*tmD,ZtgT.rT-W\<$26;vTr[i&o5oF%B:z2z Vgy1{b{O2wA9%C94:]JKZsLW0{Cm-Mpo6rK_IX ?(Tr
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 6b b2 e6 18 09 8c 77 4a 34 5b 44 ed d1 06 9f c8 e0 a9 82 66 62 1b 83 ba 45 4f a1 fc 53 8f 56 1d 34 a4 25 ce 79 32 bd 32 57 9c 55 d2 be 95 18 79 1d 14 dd 76 1c 7e 4c e6 2d 3c fe 58 9f 22 f6 a0 34 46 57 07 b5 80 8c f3 04 8b 00 d2 32 1e cd 3c 66 53 32 4d 8e 24 62 5d 1a e8 38 65 12 8b 75 1b b8 e5 b4 56 21 64 73 bb b9 3c ca 2b 7d 4a c2 f6 15 20 cb 43 bb b9 89 fd 48 db 35 4f 42 ca ab fd 46 e5 87 4d d6 7a 0b 59 ba 2d b1 58 c5 f6 1f f2 4c 6c a9 53 3f ce 3e 85 14 8e e1 c5 de c0 27 d1 dd 72 63 75 b9 f7 15 30 df 48 52 b7 a9 c2 a2 eb a6 bd bc f7 ce 81 bb 3a 8c 9c f2 e3 17 99 d1 2a e2 9b b1 5b ea d8 f0 e8 f7 93 fa 73 99 a8 e0 2b 9f 5d 05 49 d9 22 7e 7e 6d e5 43 65 8c f1 e5 c0 45 1f 5e 78 40 20 2c b1 93 a2 34 d4 b6 19 b8 9e 4a 73 56 15 9b a4 dc 5f e8 1e 8a 8f d5 40 d4 Data Ascii: kwJ4[DfbEOSV4%y22WUyv~L-<X"4FW2<fS2M$b]8euV!ds<+}J CH5OBFMzY-XLlS?>'rcu0HR:*[s+]I"~~mCeE^x@ ,4JsV_@
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 75 bb d6 4c cf d3 ec 05 a1 f4 85 31 1e 0a 5c b1 b3 6c 19 d7 c2 b5 ad d4 6c 16 5b 28 e5 b0 07 1a 9f b6 c6 da 8c 13 e2 35 ca ea 47 c7 3f 3c 0b 31 95 81 47 9f b6 28 50 c3 66 64 72 56 5c 6c 47 aa 44 cc 79 57 79 16 d3 3a a5 60 58 32 a8 95 60 b6 66 fa 09 c4 82 51 2e 5d 42 6a 71 93 ec b3 1e d9 1c c6 67 2e 7f 2e 25 11 c9 65 dc 2a a2 c9 c2 95 d1 a4 e5 cb 60 ae c6 04 5d 98 0d fc 30 47 8a dd 85 99 95 b6 70 c6 ea 73 be db 71 e4 5c cd bd a4 85 da bb 27 81 f6 c1 b0 ec b1 c5 9f 68 48 02 21 c9 07 9f be 57 53 9e 52 b6 ff 00 9a 84 af ed 31 ef b3 9f 5f 88 59 1b 06 95 72 81 94 4a a9 d5 3f 2d 37 42 ed 7d 5d 99 9e bb 56 39 85 35 53 9b 83 cc b9 8a a1 0c 4b 18 8f 3e dc 05 20 c2 2b f5 98 e6 f0 0d 88 f7 ec 0a 76 62 cb 51 d8 71 36 bd 79 e0 6e 93 5f e4 a8 93 57 bd a6 b6 af 7d f2 95 Data Ascii: uL1\ll[(5G?<1G(PfdrV\lGDyWy:`X2`fQ.]Bjqg..%e*`]0Gpsq\'hH!WSR1_YrJ?-7B}]V95SK> +vbQq6yn_W}
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: d6 d8 9e d2 1c 78 6c db cc d7 6b 27 6c 4e 0b cf 58 6f db 30 13 fa fd 39 4d 9f 3c aa b9 cb 91 2a f0 88 0d c0 e4 e3 6f db 75 dd 3e cd eb ba 8e 6f c5 5e 8c b2 57 a0 ba 86 4c a8 1d 98 f4 78 63 74 73 6e 4c 97 db 2b 4b cd 7c 45 98 79 9e 59 31 13 53 d8 4c 84 88 5d c9 4f ce 7b 49 71 18 d6 3b 47 59 a7 9f ea f6 b5 55 58 ee 5d 6b 82 d2 1b ca 0b 8c 60 66 85 ab c8 25 c7 33 b0 89 32 cf de de 8e a7 11 d8 2a 04 12 79 dc 8b 96 c5 6e da db 0e 5f 75 8f bf b2 51 45 bf 7e 0f 81 eb b0 52 96 e6 36 0e 29 51 b9 0d 7c ef fd 8e a6 bb 9b 79 de 59 43 91 91 8e 57 7d 0b 2f bc c2 98 98 74 e7 18 8e 76 2e 8b 1b f1 8e 2f 9c ee 90 16 df 5d a4 ca e3 f4 9f b7 c7 0a 1f 31 cd 57 79 a1 6c 39 3c e7 1c f2 63 9a 69 3e b9 fb d2 dd 22 60 30 dd cc 9f 33 b0 fb 19 a0 e2 c1 b7 ae 1f 82 aa 84 e6 06 75 73 Data Ascii: xlk'lNXo09M<ou>o^WLxctsnL+K\|EyY1SL]O{Iq;GYUX]k`f%32yn_uQE~R6)Q\|yYCW}/tv./]1Wyl9<ci>"`03us
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 04 89 02 d4 35 ba ca 97 92 dd 74 ff 00 7c 92 c6 b3 cc d4 20 9b 8b ea 0b 9e 06 96 87 7b 5e d7 2b 3d b8 bd 9d 39 d6 ed be ba 86 0c 30 e2 29 02 d1 4f 6f 33 ca ed b9 1c 82 8d 24 5b 36 ee 68 dc 29 0f 96 24 4c c5 9d 50 06 be 5d 0a 73 c6 02 2f 96 70 a3 5c b7 24 69 7a 91 5c a7 44 d5 02 98 da d2 c0 49 a6 5f 44 64 ea d6 e2 90 f1 ff 00 29 ae 7e 6b 87 d7 d3 4a 57 a8 64 a1 32 96 f9 27 b1 12 a9 78 03 80 83 4a da d8 1b b0 37 d3 b5 ca ca 17 48 49 03 76 81 4c 87 ab 7e 78 ad 81 ba 43 e1 df 4f 76 e5 85 81 e6 55 b8 dd 6e 6c 61 7e 48 a3 62 aa 7a 6b f2 7f 54 9d 4c b1 87 87 ec 5d b1 8c 44 66 ca ba fe 0b a7 12 f2 47 06 e0 ae 59 f5 96 63 7d b9 cc 2e 9f 86 44 63 93 b7 12 e2 5f 14 d8 3c 1e bb b2 68 22 0e b5 9f fb 57 0c 66 41 ae a8 7b 60 ba 3f 75 aa e1 10 d7 68 80 d7 b0 bc ec 5d a2 Data Ascii: 5t\| {^+=90)Oo3$[6h)$LP]s/p\$iz\DI_Dd)~kJWd2'xJ7HIvL~xCOvUnla~HbzkTL]DfGYc}.Dc_<h"WfA{`?uh]
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 58 7b db a1 a1 3e ba 08 84 83 67 af 35 e7 99 90 d7 13 a9 69 7a ff 00 61 5d 9b 2e a9 4d ab 76 12 c2 96 c2 4d f8 fd 06 6c 2c 29 97 58 20 98 90 46 94 51 9f 76 46 e7 6e df b1 74 c3 8a ac a6 cd 53 f3 56 75 ee 07 96 c1 b3 eb 67 20 df 36 0f fa 65 d7 1a 22 b4 1f 79 96 68 5d 44 cc d1 ad da f4 dd 32 9d ae e6 ac 6f eb 7d ec 7d 6c 8d 8b 5f d6 f7 85 e8 75 b0 43 06 37 13 5f 17 7f 6f 31 5f 33 69 a4 ed 82 81 6f 93 d2 07 1d 7e d5 8d 77 f2 d3 bc 14 31 e2 b1 bc a3 24 b2 42 ca fd a1 d8 a0 eb fb 68 8f e4 4f 5e 99 86 48 2c 52 20 7b 70 42 20 7e e0 cb 33 2d 7f 5d 33 63 6c bc 95 41 15 d9 fd 8b 16 63 c6 18 b2 be b4 29 92 fc 87 b5 6c 09 f6 8d 8a 8b f5 6d 90 de d5 a6 cb 29 c3 77 8d 13 f5 cd d4 44 5d 93 5c d1 a8 db 37 56 cf f8 92 1f 52 8d 16 04 d1 b5 68 ed 35 b6 4b 9e ec 2a 2a eb b7 Data Ascii: X{>g5iza].MvMl,)X FQvFntSVug 6e"yh]D2o}}l_uC7_o1_3io~w1$BhO^H,R {pB ~3-]3clAc)lm)wD]\7VRh5K**
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 02 01 03 03 02 03 06 05 02 03 06 07 01 00 01 02 03 04 11 05 12 21 00 06 13 22 31 14 41 51 07 23 32 42 61 71 15 24 33 52 81 91 a1 43 62 b1 16 25 34 72 e1 f0 08 53 63 73 82 92 b2 f1 ff da 00 08 01 03 01 01 3f 01 d2 29 b6 9f 11 aa 67 48 e5 dc c8 f2 4d b4 49 3c 8c aa e5 92 7f 79 21 94 67 2a cb b9 54 0e 70 a0 75 77 b8 65 de b4 e8 2c 06 45 51 e6 b5 34 ea cb bf fe 24 0b e3 c2 39 50 df d4 dc aa 01 38 c9 e0 d2 bd af 5d d7 e4 89 0d 59 e5 8a 39 26 8a 63 1c a9 5a 48 a3 88 05 48 2c 63 72 a4 8c a1 0b 82 33 26 7d 5c 75 db 5a 7d 9b 9a b4 da a6 a9 04 06 b4 93 59 a9 25 49 10 b8 37 65 0c 76 c6 84 38 0b 11 f4 b3 b9 cf cf 93 9e a3 d3 69 45 5d 23 a9 e2 d2 90 4c 9e 75 58 92 31 2b 21 c3 c4 92 1c 03 96 c1 47 19 62 07 1e fc 69 da 1a 69 5a 8d 8b 15 4c d2 c3 61 5c ee 79 16 48 ab bf Data Ascii: !"1AQ#2Baq$3RCb%4rScs?)gHMI<y!g*Tpuwe,EQ4$9P8]Y9&cZHH,cr3&}\uZ}Y%I7ev8iE]#LuX1+!GbiiZLa\yH
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 46 c2 da b2 e0 11 d6 bd de 5a 77 6b f7 3f 6d 76 e2 4a 97 64 9e 66 9f b8 1f ee d9 c1 9a 3f 1d 38 3f b6 27 0d eb 8a 25 18 45 10 8c 6d 38 ea fe 81 5a 75 f2 7a ac e9 97 22 12 0f 17 a6 58 4c 88 b2 47 66 ab 8c 18 a4 00 8d f1 1f 4b 1e 08 e8 f6 e6 b7 04 4c 9a 5d cd 3b 5b aa 4f fe 1b 51 fe 5a ca 0e 3d 12 a9 8a c5 67 2b ce 19 e2 80 fb f5 6b 42 d5 77 10 fd ad a1 d4 76 e3 cf f0 d1 dc 3f fe 02 9d 3f 1f ff 00 b4 f0 83 f3 3d 58 d2 35 b1 2f df ea 12 44 31 b7 62 88 90 aa 0c 7a 6b d4 84 c8 b0 e4 00 3c 93 cf 29 51 f8 42 fc 8c 66 13 b1 e4 2c df 32 4f 3f e4 e3 93 f3 c9 f9 e4 f5 34 d4 60 af fc bc de 38 6b 88 e3 9a 38 1b c7 14 0a 01 93 ca 91 2a 86 f2 3b 10 38 c8 60 4f 07 1d 5d b0 2c 79 ab 5a b4 d5 92 08 8d 9a f6 4c ac 93 18 c1 f4 b7 e4 c1 6f ab 6e 0c 08 1b 46 7a d3 bb ba e1 b7 Data Ascii: FZwk?mvJdf?8?'%Em8Zuz"XLGfKL];[OQZ=g+kBwv??=X5/D1bzk<)QBf,2O?4`8k8*;8`O],yZLonFz
2024-04-26 18:32:43 UTC	1369	IN	Data Raw: 1c 72 a6 e4 cf 90 15 68 c9 cb 26 0a 95 c7 3f 33 8e 95 c1 58 27 24 a1 d8 09 54 e1 5c 6d 5e 31 c6 dc 1f 9e dc fd 3a ee 3a 74 5b 5a ab 3c 2d ba f5 a2 a6 4a de 3c a8 45 50 3e 23 76 dd 80 92 a7 3b c9 c9 e7 ae dd d6 7e 06 a6 a1 a5 d6 fe b4 17 a2 d4 60 68 cf 31 34 d1 35 4b 91 12 3f f9 f0 c8 85 94 ff 00 68 27 1d 5b d4 3c f3 d6 43 03 13 12 66 42 72 4b 6e 3f ed 8f f7 ea 2a fb 85 96 64 93 ef 15 44 47 e4 09 6e 73 fe 83 a1 a1 b6 16 79 0f 8d 33 90 d9 e3 dc 13 9f f6 e9 ae 44 a1 62 54 dc 23 18 de 7d 9b f5 1c 1e 3f cf 56 4b 25 38 11 46 58 ee 70 08 c7 a9 47 03 f6 fa f5 25 29 eb fc 1b 9b b0 bc fb 45 9a 93 d2 7c 49 03 1d a1 91 b3 c1 04 93 b7 f6 6e 07 57 2f 6a 6d 6a 35 9e cb 58 2f e8 03 62 6e 90 e4 2c 61 f0 00 3b 7d 87 e8 7a d0 f4 88 e1 92 cd 57 d3 7c 62 d4 38 96 cc 8e c1 89 Data Ascii: rh&?3X'$T\m^1::t[Z<-J<EP>#v;~`h145K?h'[<CfBrKn?*dDGnsy3DbT#}?VK%8FXpG%)E\|InW/jmj5X/bn,a;}zW\|b8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49959	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	603	OUT	GET /tag.min.js HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156357
2024-04-26 18:32:44 UTC	942	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 89125 Connection: close X-Trace-Id: 0d09b72489eb31c31876541fd91c141f Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Accept-Ranges: bytes Last-Modified: Fri, 26 Apr 2024 13:43:29 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:44 UTC	15442	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 71 77 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 71 77 2e 71 3b 76 61 72 20 65 3d 71 77 2e 56 28 29 2c 74 3d 71 77 2e 53 79 5b 71 77 2e 44 79 5d 28 71 77 2e 76 29 5b 71 77 2e 76 65 5d 28 29 5b 71 77 2e 42 5d 28 71 77 2e 76 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 74 3d 65 5b 71 77 2e 48 5d 3b 74 72 79 7b 65 5b 71 77 2e 75 74 5d 3d 74 5b 71 77 2e 75 74 5d 7d 63 61 74 63 68 28 72 29 7b 76 61 72 20 6e 3d 5b 5d 5b 71 77 2e 56 70 5d 5b 71 77 2e 4e 65 5d 28 74 5b 71 77 2e 59 61 5d 28 71 77 2e 6f 77 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 77 2e 6e 65 3d 3d 3d 65 5b 71 77 2e 63 5d 7d 29 3b 65 5b 71 77 2e 75 74 5d 3d 6e 26 26 6e 5b 71 77 2e 59 79 5d 5b 71 77 2e 75 74 5d 7d 7d 71 77 2e 77 21 3d Data Ascii: (function(qw){!function(){qw.q;var e=qw.V(),t=qw.Sy[qw.Dy](qw.v)[qw.ve]()[qw.B](qw.v);function n(){var t=e[qw.H];try{e[qw.ut]=t[qw.ut]}catch(r){var n=[][qw.Vp][qw.Ne](t[qw.Ya](qw.ow),function(e){return qw.ne===e[qw.c]});e[qw.ut]=n&&n[qw.Yy][qw.ut]}}qw.w!=
2024-04-26 18:32:44 UTC	16384	IN	Data Raw: 77 2e 66 75 5d 7c 7c 65 5b 71 77 2e 61 6f 5d 26 26 65 5b 71 77 2e 70 72 5d 5b 71 77 2e 64 77 5d 26 26 21 61 5b 71 77 2e 64 77 5d 29 26 26 61 5b 71 77 2e 46 65 5d 28 6f 5b 71 77 2e 43 65 5d 29 2c 55 65 28 29 26 26 61 5b 71 77 2e 46 65 5d 28 55 65 28 29 29 3b 74 3b 29 7b 69 66 28 65 74 28 74 2c 69 29 29 72 65 74 75 72 6e 21 71 77 2e 6b 3b 69 66 28 65 74 28 74 2c 61 29 29 72 65 74 75 72 6e 21 71 77 2e 6a 3b 74 3d 74 5b 71 77 2e 67 75 5d 7d 72 65 74 75 72 6e 21 71 77 2e 6b 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3f 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 65 5b 71 77 2e 64 75 5d 3d 3d 3d 74 3f 65 3a 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3f 69 74 28 65 Data Ascii: w.fu]\|\|e[qw.ao]&&e[qw.pr][qw.dw]&&!a[qw.dw])&&a[qw.Fe](o[qw.Ce]),Ue()&&a[qw.Fe](Ue());t;){if(et(t,i))return!qw.k;if(et(t,a))return!qw.j;t=t[qw.gu]}return!qw.k}function it(e,t){return e?e instanceof HTMLElement&&e[qw.du]===t?e:e instanceof HTMLElement?it(e
2024-04-26 18:32:44 UTC	16384	IN	Data Raw: 2e 76 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 5b 71 77 2e 5a 67 5d 5b 71 77 2e 44 79 5d 28 71 77 2e 47 6a 29 5b 71 77 2e 41 74 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 71 77 2e 50 6b 5d 28 29 5b 71 77 2e 44 79 5d 28 71 77 2e 6a 75 29 7d 29 5b 71 77 2e 4b 72 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 71 77 2e 6a 5d 3d 3d 65 7d 29 5b 71 77 2e 6a 5d 3b 69 66 28 74 29 72 65 74 75 72 6e 20 74 5b 71 77 2e 6b 5d 7d 2c 65 5b 71 77 2e 67 72 5d 5b 71 77 2e 62 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 71 77 2e 6a 3d 3d 3d 74 26 26 28 74 3d 21 71 77 2e 6b 29 2c 76 6f 69 64 20 71 77 2e 6a 3d 3d 3d 74 68 69 73 5b 71 77 2e 6c Data Ascii: .vp]=function(e){var t=document[qw.Zg][qw.Dy](qw.Gj)[qw.At](function(e){return e[qw.Pk]()[qw.Dy](qw.ju)})[qw.Kr](function(t){return t[qw.j]==e})[qw.j];if(t)return t[qw.k]},e[qw.gr][qw.bp]=function(e,t){return void qw.j===t&&(t=!qw.k),void qw.j===this[qw.l
2024-04-26 18:32:44 UTC	16384	IN	Data Raw: 2c 64 65 6c 65 74 65 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 63 5d 29 3a 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 5b 63 5d 3d 68 2b 71 77 2e 6b 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 63 5d 3d 68 2b 71 77 2e 6b 29 29 7d 74 68 69 73 5b 71 77 2e 71 64 5d 5b 71 77 2e 59 77 5d 3d 6e 65 77 20 44 61 74 65 28 29 5b 71 77 2e 4f 77 5d 28 29 2c 74 68 69 73 5b 71 77 2e 47 70 5d 28 65 29 2c 6f 5b 71 77 2e 47 5d 5b 71 77 2e 4c 68 5b 71 77 2e 51 77 5d 28 6e 29 5d 3d 21 71 77 2e 6a 7d 2c 65 5b 71 77 2e 67 72 5d 5b 71 77 2e 47 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 65 5b 71 77 2e 57 69 5d 2c 72 3d 65 5b 71 77 2e 7a 65 5d 2c 69 3d 65 5b 71 77 2e 45 61 5d 2c 61 3d 43 6e 5b 71 77 2e 41 74 5d 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ,delete localStorage[c]):(sessionStorage[c]=h+qw.k,localStorage[c]=h+qw.k))}this[qw.qd][qw.Yw]=new Date()[qw.Ow](),this[qw.Gp](e),o[qw.G][qw.Lh[qw.Qw](n)]=!qw.j},e[qw.gr][qw.Gp]=function(e){var t=this,n=e[qw.Wi],r=e[qw.ze],i=e[qw.Ea],a=Cn[qw.At](function(
2024-04-26 18:32:44 UTC	16384	IN	Data Raw: 29 7b 50 65 28 71 77 2e 6e 67 29 2c 6f 5b 71 77 2e 47 5d 5b 71 77 2e 53 5d 28 65 29 7d 29 3a 71 77 2e 6e 67 20 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 6e 61 76 69 67 61 74 6f 72 5b 71 77 2e 6e 67 5d 5b 71 77 2e 4e 6b 5d 26 26 28 50 65 28 71 77 2e 6e 67 29 2c 6f 5b 71 77 2e 47 5d 5b 71 77 2e 53 5d 28 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 71 77 2e 79 68 29 29 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 72 28 65 29 7b 76 61 72 20 74 3d 65 5b 71 77 2e 42 72 5d 2c 6e 3d 65 5b 71 77 2e 4e 72 5d 2c 72 3d 65 5b 71 77 2e 4d 72 5d 2c 6f 3d 65 5b 71 77 2e 48 65 5d 2c 69 3d 65 5b 71 77 2e 71 74 5d 2c 61 3d 65 5b 71 77 2e 77 74 5d 2c 63 3d 65 5b 71 77 2e 65 74 5d 2c 73 3d 65 5b 71 Data Ascii: ){Pe(qw.ng),o[qw.G][qw.S](e)}):qw.ng in navigator&&setInterval(function(){try{navigator[qw.ng][qw.Nk]&&(Pe(qw.ng),o[qw.G][qw.S]())}catch(e){}},qw.yh))}}}}function nr(e){var t=e[qw.Br],n=e[qw.Nr],r=e[qw.Mr],o=e[qw.He],i=e[qw.qt],a=e[qw.wt],c=e[qw.et],s=e[q
2024-04-26 18:32:44 UTC	8147	IN	Data Raw: 66 27 2c 27 6f 78 61 65 71 4f 61 67 7a 66 27 5d 2c 5b 27 6d 66 27 2c 27 62 62 67 50 75 65 6d 6e 78 71 46 64 75 73 73 71 64 27 5d 2c 5b 27 51 66 27 2c 27 5f 5f 42 42 47 5f 42 44 52 32 27 5d 2c 5b 27 57 66 27 2c 27 4d 4d 4e 27 5d 2c 5b 27 45 66 27 2c 27 65 71 66 27 5d 2c 5b 27 52 66 27 2c 27 61 7a 45 77 75 7a 4f 78 75 6f 77 46 64 75 73 73 71 64 27 5d 2c 5b 27 54 66 27 2c 27 47 44 58 27 5d 2c 5b 27 59 66 27 2c 27 69 75 70 73 71 66 41 62 66 75 61 7a 65 27 5d 2c 5b 27 55 66 27 2c 27 66 6d 73 41 62 66 75 61 7a 65 27 5d 2c 5b 27 49 66 27 2c 27 70 71 7a 71 66 65 67 77 2e 6f 61 79 27 5d 2c 5b 27 4f 66 27 2c 27 61 62 66 75 61 7a 65 42 6d 64 65 71 52 6d 75 78 27 5d 2c 5b 27 50 66 27 2c 31 35 5d 2c 5b 27 41 66 27 2c 27 7a 61 20 69 75 7a 70 61 69 27 5d 2c 5b 27 53 66 Data Ascii: f','oxaeqOagzf'],['mf','bbgPuemnxqFdussqd'],['Qf','__BBG_BDR2'],['Wf','MMN'],['Ef','eqf'],['Rf','azEwuzOxuowFdussqd'],['Tf','GDX'],['Yf','iupsqfAbfuaze'],['Uf','fmsAbfuaze'],['If','pqzqfegw.oay'],['Of','abfuazeBmdeqRmux'],['Pf',15],['Af','za iuzpai'],['Sf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49963	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	929	OUT	GET /xxrz/250x400/793/4e/83/4e83cbfdc6263b8fdd928b5e14aaaac1/4e83cbfdc6263b8fdd928b5e14aaaac1.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:44 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: image/jpeg Content-Length: 52216 Connection: close Last-Modified: Tue, 12 Mar 2024 09:09:55 GMT Vary: Accept-Encoding ETag: W/"65f01be3-7142" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6942 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CWCd%2B1GVHppHNICpo5JFC4guCFJjJhDwAdEKjDNRjVUboAtoFtNwouyJTZEkBTBchdg3sdkepdHbNf%2FFxD5ZmcVLFP%2BVjqHS1d0%2BDVLA%2B3ogfT%2BSfturef9Oz6f3VhW1EP69"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a83e6fae0699-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:44 UTC	643	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 68 9a 66 36 6d b4 50 23 22 5e 8e 82 60 42 de 33 82 67 ea 75 00 75 1f b0 60 4a 7b 23 01 75 99 0d 1e 71 1e 64 93 6c 10 ee 45 31 23 ff 00 27 e1 cc 85 a6 b1 b5 4a a4 9c ae 7e 43 a5 fc db 13 de 5d 64 6c 99 3c 6b 1e de 26 21 18 f7 f1 9c d5 37 05 b3 c5 67 33 b0 0d fe a5 da 7b 66 8c 6f 3a c6 f8 78 34 b6 2d a2 a3 dc 80 62 cd c4 11 85 1d bc 47 b9 16 be 79 d5 ca f1 b6 be 9c 79 ed 9d 04 a7 b7 18 d5 73 e9 ae a1 2c e0 04 80 01 25 bc e2 ae 63 71 b3 0b e2 58 d5 1c e5 c5 f6 26 ae 10 de 23 4d 69 5d 43 b6 d6 82 f7 b8 81 33 e5 65 7c c8 bc bb 41 b2 e8 b0 f4 26 61 e6 b4 e2 c0 c8 28 c2 7a 58 d6 b3 ee 2b 5b a4 67 e9 ac fb 72 99 65 03 6d 3d 39 f3 4d f5 db 8f 3d 00 12 dc 00 04 80 01 20 00 48 00 12 00 04 8d 26 34 25 57 0e 95 d9 cc c0 aa b7 67 1b d8 e7 15 73 3c ee c4 49 2d 5b e1 0b Data Ascii: hf6mP#"^`B3guu`J{#uqdlE1#'J~C]dl<k&!7g3{fo:x4-bGyys,%cqX&#Mi]C3e\|A&a(zX+[grem=9M= H&4%Wgs<I-[
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 5d 4f 46 5c 44 fb 2e 31 ef b5 4e 95 b0 5a 74 d7 f0 d5 62 2f 90 90 d0 23 ac 87 6d 2c c7 f1 2a e2 ac c4 a4 bb 9f 55 d5 60 75 99 9e ea 0d b9 d1 07 59 f8 7a 2c 69 92 4c db 71 e7 b2 59 db 4c f9 dc ba 7e 62 eb fd 94 fd 0b 22 56 4c c2 dc 4c 95 d8 54 b4 47 b0 e4 b9 e6 cd 59 d4 69 0e 27 b2 47 ad 87 d5 7b 26 3a 9b 47 fc 44 5e 3d 72 9d af 99 b1 16 09 c5 20 d2 29 f6 6a 35 4c 85 1a 15 9d b6 35 48 2b 26 82 d6 d0 22 58 dd 57 8c cf 84 50 6e 13 d9 f3 e7 38 10 22 c6 05 b8 28 ce 32 96 33 80 92 95 fb 8c 06 f5 05 53 61 75 09 97 a2 3a 24 c6 51 c4 e5 45 55 9c 9d 38 8c c6 10 6c 25 31 9c 55 3a 65 d9 3b ef 1c 3b 5b f1 e7 20 65 9b a9 b5 8f 53 14 dd a5 6f 68 7b 90 ba 14 5e d0 9b f3 f3 fb bf 1b ae df ea 5e d7 82 8b 2b f2 34 3a ed 81 04 42 8e 4e a2 e2 80 d2 c0 05 88 98 ce 02 40 67 09 Data Ascii: ]OF\D.1NZtb/#m,*U`uYz,iLqYL~b"VLLTGYi'G{&:GD^=r )j5L5H+&"XWPn8"(23Sau:$QEU8l%1U:e;;[ eSoh{^^+4:BN@g
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 74 f7 c3 59 4c 65 8b 0e 2b 52 b8 f1 c5 0c 71 18 3e f3 45 02 0d 72 d6 c4 e3 dd 87 cb db 86 af 77 d9 e7 ec 86 64 c1 4b af 6d 0e 97 35 fd ba 61 f0 79 41 ba 65 ce b3 f9 b6 0d 20 52 d2 aa 65 14 60 09 47 e5 29 be 17 51 d9 35 c2 ee 12 36 6a ed 91 5b e7 3e 5e 16 ca 5e 52 45 55 57 b7 85 f4 e7 f2 a7 de 0c a9 03 9a 8a e9 08 8a aa fa 61 e4 ae d8 21 b1 1a da 01 d9 0d 7f e2 52 d6 54 1e 8e 68 76 2e 8f 35 fd a2 55 4b 93 dc 58 9b 3b 1c d9 ac 30 b4 57 2f b5 57 e4 a0 fc 4b 0b a2 5e 3f d1 a8 b2 78 13 81 65 e5 40 2f 94 65 da f6 f7 a6 a4 75 14 70 68 83 90 f0 a7 84 ee 59 5d 65 24 72 09 76 d9 87 da 17 b9 c7 c6 f7 af b1 ee 56 55 fe 59 2b 7b 72 c8 4c 91 8a c7 7f a3 57 68 f1 9c db 04 7b 05 21 f6 b6 b6 53 a3 86 30 36 bd e3 1a e8 1c 31 c8 ec 00 f7 73 67 d9 34 65 c2 d5 90 70 91 ef 82 Data Ascii: tYLe+Rq>ErwdKm5ayAe Re`G)Q56j[>^^REUWa!RThv.5UKX;0W/WK^?xe@/euphY]e$rvVUY+{rLWh{!S061sg4ep
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 18 7c 37 23 13 04 ee 11 ec 53 eb 7b d6 23 9c f5 f1 a6 39 98 c0 8a 21 4a a3 b6 16 15 f8 ce 8c 88 e9 e1 da 1f 24 75 57 08 ae 9a 99 bc a2 45 f1 f4 f4 ff 00 fb ff 00 50 d7 f4 4e 9a ff 00 53 b2 7f 93 6c b6 13 d5 55 51 5b 19 79 76 5c 2c 0e 2b d5 e2 a0 e7 7e 6f 48 66 92 07 ea 7b 1a 8e 65 c8 a2 1c 84 86 8d 75 95 19 62 c1 5d a6 8f 70 1d 16 b0 3b 2d ae 2b 44 5d 9e 69 41 a2 00 bf 19 35 d3 ff 00 3f 46 a2 48 ab b6 a9 d7 f0 fb 9f 99 ea 20 ec 87 dc 27 a7 19 c6 71 9c 67 4f 53 f5 ed d8 12 ec 2b 3a 7c 24 a1 99 7e bc ed 87 57 8d 62 3d 94 35 da ee d4 fb 2a ee cd a3 66 1d e1 47 51 67 60 a5 6a 57 41 09 47 a1 49 68 15 c6 89 5b 57 51 a7 51 d5 ba 9e 37 c4 e4 b0 ee 8a f3 64 fe d1 af a7 15 31 41 e3 b5 b0 8d 1d bd ed 90 4c 4d 4c 8b b3 7e 1d 37 cb fa 5a a9 0d 6e e6 6b 50 22 79 98 b8 Data Ascii: \|7#S{#9!J$uWEPNSlUQ[yv\,+~oHf{eub]p;-+D]iA5?FH 'qgOS+:\|$~Wb=5*fGQg`jWAGIh[WQQ7d1ALML~7ZnkP"y
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 5a dc 6d 73 11 24 05 bc 4e 13 72 61 d1 32 78 f2 44 c8 07 9c a9 46 d1 b6 42 56 97 a5 23 a6 55 42 25 40 db 87 b6 2d 96 80 a0 f8 52 3d be ab f5 c3 c2 24 6f e3 23 93 22 93 23 93 11 c8 b8 d5 6a a4 78 89 f3 1a a6 22 a6 49 db 93 35 30 86 61 8e 44 ca 7d 04 fb 40 c6 ba ae d7 27 03 70 80 9c ae 3e 52 56 df 61 6d 43 af 23 78 95 62 82 eb 3a a8 ab a2 28 8b 9a 32 2b 17 d7 8c e3 38 ce 33 8c 62 fc 23 be 59 26 45 3e 45 37 18 d9 bb b1 24 5c 49 57 86 ca b9 1c bf 3e 64 c7 4a dc 92 56 e1 4e 44 6d 35 01 9b 2d 9e d1 b6 40 08 f2 95 2c 92 0f 60 44 12 52 ec 1f 80 d7 46 5a ec fb 26 eb b4 c2 6a f4 ce c8 28 04 36 ca 21 2f 2a 25 a5 db eb a6 e9 c4 5e 6f af 9c 45 c6 aa e3 1f 91 ce fc 8e 69 72 39 df 8d 9b 19 22 b9 18 e5 5c 6a 39 71 51 dc 2a 71 86 22 2b 6b 0b 34 48 c9 16 75 7a b5 51 6a 38 Data Ascii: Zms$Nra2xDFBV#UB%@-R=$o#"#jx"I50aD}@'p>RVamC#xb:(2+83b#Y&E>E7$\IW>dJVNDm5-@,`DRFZ&j(6!/%^oEir9"\j9qQq"+k4HuzQj8
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 49 7b 58 92 5a 35 f5 1e a4 0f 23 8a 6a c8 2b e2 13 d3 32 9d 6b a8 5a da 58 6d 6b 79 7e ec 66 59 16 57 9a dd 6a a9 d5 27 b6 f2 28 09 25 ed 60 43 28 1f cb 1c 2f 90 7e 4f 66 75 33 17 12 43 3c 2b 1c 2e 40 d4 17 98 ac ca 4d f7 bf 77 7d bd 98 ac 8a 1a d8 1a 09 16 e1 85 87 90 1b 74 18 cb a3 ae cb 73 89 29 c3 48 29 9a 46 ee 9f a9 6f 02 3c fc 71 52 dd df 6f f4 b6 38 82 a3 e8 9e 2d ce b0 47 f2 c3 a9 49 1d 4f 50 6d 81 6d ee 6d b6 de b3 e5 fe c3 86 33 c9 32 da 95 82 47 ff 00 56 90 ed 7f cd bd ef 7b f9 1f 1c 41 5f 05 52 a8 90 a8 3e 0d d0 f8 74 c2 d1 bd 6d 7c b1 24 8d ca cb a8 0d 49 00 d9 5a 79 e4 fa 20 7c c0 48 64 3e d2 3c b7 86 a4 32 00 c3 bc 9b 1d ff 00 b6 2a ca 33 89 42 ae ad fc 3f 67 13 36 b8 ba 5b f0 31 2e 58 6a 5c 6b 5b 8f 2f 6d b1 9c 70 c4 73 44 f2 42 39 73 2a Data Ascii: I{XZ5#j+2kZXmky~fYWj'(%`C(/~Ofu3C<+.@Mw}ts)H)Fo<qRo8-GIOPmmm32GV{A_R>tm\|$IZy \|Hd><23B?g6[1.Xj\k[/mpsDB9s
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 45 27 d3 e3 e6 d2 d6 c6 f4 ef 4c b5 08 c0 4d 1e 89 15 59 ac 41 17 df 19 d7 6c 19 6e 7d db 57 09 66 dc 33 4b 59 99 d1 e5 b1 ae 4f 0c 69 a2 09 f3 29 2a 8c c8 79 22 76 0b 1a ea 99 00 32 b2 ec 09 db a0 e3 2c f7 8b 73 9e dc 78 22 95 72 7a 7c 93 33 a0 86 2f 93 e9 33 2a b1 5b 4f fe b0 6a a5 33 d5 35 17 d5 2c 35 6a 8d 19 ad 6d db cb 33 e1 dc eb b4 4c c3 3c a3 e3 ae 23 a1 a0 ca b8 0b 30 a6 a9 65 c9 f2 fe 5c 52 34 f4 02 79 25 92 7a 99 1e 61 1c 70 be 83 a9 5b 55 f5 6d d3 1c 29 d9 b7 00 57 49 c4 99 cc 9c fc f7 26 ca a7 48 68 97 5b 28 9d 56 96 39 a6 91 b9 62 26 93 bc da 50 77 45 ba df a6 3e 10 39 2e 45 c1 f9 be 4f 27 0e 51 45 4f 4b 59 41 cc aa a5 82 52 eb 14 a9 2b 28 6b 33 b9 52 c9 6d 4b b0 be e3 19 7e 65 0d 6a 0e 53 8b ed 75 63 66 53 eb 1e ec 65 b9 5d 16 6e b5 34 99 Data Ascii: E'LMYAln}Wf3KYOi)y"v2,sx"rz\|3/3[Oj35,5jm3L<#0e\R4y%zap[Um)WI&Hh[(V9b&PwE>9.EO'QEOKYAR+(k3RmK~ejSucfSe]n4
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 6c a7 35 02 96 b2 af 8d a9 d4 41 23 a7 30 19 33 4a fa a8 ce 90 c7 50 b3 c5 72 0f 77 50 bf 96 2b f3 bc b3 2d ed 43 3c 9e bf 30 a4 a4 44 e0 84 89 64 9e a2 18 d4 c9 e9 1a b9 6a 4b ef 29 b0 ee 0b 9c 71 e7 6b dc 39 51 c2 bc 1d 35 1d 6c 79 86 71 97 e7 19 3e 65 5f 97 20 7e 62 ad 04 72 73 c3 c8 50 44 a6 e0 05 dd af 71 8e 2d f8 49 f0 a0 cb f3 a9 78 77 21 cc be 5e cf 32 a1 96 49 5b 5a d1 45 0c 2a 22 9a 38 f5 24 72 ca 5f 90 2a 65 28 14 27 78 83 7d b1 c0 53 93 98 e6 00 f5 96 9f 98 7d 64 4b bf fd d8 db 59 27 c0 5f f9 62 b2 62 f2 9b 78 7c cc b3 27 ae cd e5 e5 d1 c4 5c 02 03 48 76 8d 6f 6e ad f8 be 3e 0e bc 3a 32 7e 11 e2 aa 1a ba e8 61 93 31 9e 25 32 bb 04 48 8b 52 c9 1f d6 66 1a be bd f6 d3 d2 db 63 30 e2 de 1e a0 e2 bc af 9f 9a 53 f2 b2 ec 92 ae 0a 89 e3 26 58 f9 d2 Data Ascii: l5A#03JPrwP+-C<0DdjK)qk9Q5lyq>e_ ~brsPDq-Ixw!^2I[ZE"8$r_e('x}S}dKY'_bbx\|'\Hvon>:2~a1%2HRfc0S&X
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 2b aa 93 2c c9 6a 25 a5 09 cc 91 98 b3 c8 ba ce c8 14 5b 70 36 1d 36 db 15 99 85 4c 3c 31 4a 10 a8 33 13 ad ed df dd cb 12 1a fb 16 2c 6f e7 b7 96 2b aa e5 92 8b 26 a0 b2 2d 3c e9 4b cc 08 81 5d be 8a 21 f5 fa 8f 13 b7 89 27 10 52 a5 2d 1d 3c 14 ef 2c 50 a7 30 aa 06 0e 17 53 02 6d cd 59 08 17 de c0 81 72 71 ff c4 00 48 11 00 02 01 02 04 02 06 06 08 04 03 04 0b 00 00 00 01 02 03 04 11 00 05 12 21 31 41 06 13 22 51 61 71 14 32 81 91 b1 f0 10 20 23 42 a1 c1 d1 e1 07 15 52 72 24 82 c2 25 34 b3 f1 16 33 44 45 62 64 84 92 a2 a3 b2 ff da 00 08 01 02 01 01 3f 01 fa 84 db e8 26 d8 25 c4 ca ec 6c 4c 8d 64 2c 08 65 04 03 61 e3 f8 63 f8 85 93 c9 57 d2 a8 c4 36 1e 97 4f 4d a7 b4 17 70 34 13 da 23 55 8a f0 1b ef b0 38 6a 07 a0 c9 8d 3c 2a dd 64 10 75 b2 6d b3 37 de de Data Ascii: +,j%[p66L<1J3,o+&-<K]!'R-<,P0SmYrqH!1A"Qaq2 #BRr$%43DEbd?&%lLd,eacW6OMp4#U8j<*dum7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49967	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	698	OUT	GET /xxrz/250x400/793/72/a2/72a241dad98940029994fbe42b5a85ae/72a241dad98940029994fbe42b5a85ae.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:44 UTC	731	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: image/jpeg Content-Length: 80528 Connection: close Last-Modified: Thu, 21 Dec 2023 07:52:22 GMT Vary: Accept-Encoding ETag: W/"6583eeb6-11c1c" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6957 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2FW9qTHV%2F75nKf7rJ0RkEu%2F2biHHDujEzcVzEUWSKKalgGUpPohJv8ECq6UwCulwBm6RNE2EuC%2BQlP%2BO2Bfbac8Nt5WKdZH%2B1jnWBajlR71VxCnb52OmbG8E9NZhZt%2Bna%2FeK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a83e7d6b5d10-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:44 UTC	638	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 5b fe 13 11 e3 a9 c2 a5 65 36 86 12 82 9e d5 61 ba 67 38 8e f5 4e c1 f5 fe 0c dc 85 0e ee 85 ce 72 9f 43 1f d4 32 95 f9 a5 22 46 ba 93 3d 6f 11 9c d6 61 08 29 e3 77 5c 75 56 8d 6e b7 24 ae 44 c7 3e 9d 77 7e 13 3a 45 6a d1 5e 89 5b 27 d9 9d 60 0d f5 53 98 75 ab ce 52 f3 30 0c f7 3b b4 63 d3 39 2c 61 b2 69 0a b4 6e 42 02 ec b5 62 e5 fd 7b a8 52 7a 7d 37 03 61 08 be fc a2 eb f6 cb 97 c5 e3 46 e1 67 4a e5 31 3d 0e c8 fe 5e b5 ed 89 62 f6 0b 65 cc 12 14 8e 9f a5 0b 5f 73 1a ae 3f 28 dd a3 63 90 76 79 69 9b 12 15 c9 21 ea 59 0a 06 41 e3 70 41 ba 59 20 d5 da 61 cd fa cb b5 ab ad 36 77 1d bd 85 4e 42 66 2e 91 ca 9e b9 54 52 a2 1c ef 79 70 e9 4c c0 c1 94 d7 55 ed 47 8a e9 b0 cc 3e f6 13 9d 9d 56 6a 8e 50 c7 3d 97 ea b2 75 55 8a d4 b4 88 c2 9a 4e ec d4 eb 33 a7 af Data Ascii: [e6ag8NrC2"F=oa)w\uVn$D>w~:Ej^['`SuR0;c9,ainBb{Rz}7aFgJ1=^be_s?(cvyi!YApAY a6wNBf.TRypLUG>VjP=uUN3
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 6d e6 b1 35 5c 7e 66 d2 6c 5f 0f 55 88 9a b8 fb 11 f0 7a 4c 5a 44 ed d2 10 bf e5 53 4c a1 0d f2 87 e7 8c 99 5b 89 7d 67 82 d8 32 1d 39 6e 30 7e 96 3e 50 9d 54 5d d8 56 3e 20 43 42 65 fa 1d 90 7e 79 56 95 0f d2 40 b7 85 66 9a ed b0 f0 b8 09 25 53 9a 94 59 b7 f1 34 ee f7 ed a8 0e c0 31 28 3c ab a8 aa 4b e9 bb 88 56 d5 69 96 57 c6 4b 04 2c ba c6 26 f9 0a 71 98 3b d8 1a d1 68 11 b3 97 44 e7 ab 00 60 35 d0 71 74 af ef e6 4d ec 82 ed da 7f 38 d6 f8 ad d1 73 15 a5 0c d1 d0 b8 1d 12 a5 9a ad 42 ea 7e d4 37 c2 eb 2c 66 c6 44 94 2c 3c 68 a4 ca 48 88 b1 09 25 18 bf 45 c3 27 97 48 2d a0 81 0e 96 08 ed b1 88 47 27 24 a0 17 61 4b 36 ca 80 c4 50 cc b1 93 e0 d9 86 a9 49 15 28 78 12 f5 aa f3 52 3d cd a8 5e 1c e9 27 f3 23 11 d7 8f 75 e2 5a 15 64 be 35 69 78 4b b3 e5 25 1b Data Ascii: m5\~fl_UzLZDSL[}g29n0~>PT]V> CBe~yV@f%SY41(<KViWK,&q;hD`5qtM8sB~7,fD,<hH%E'H-G'$aK6PI(xR=^'#uZd5ixK%
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: f7 85 ee c3 4a f6 47 63 99 93 1a 59 85 65 41 95 f5 ba f9 94 69 50 5c 3d f3 cc 8e 23 b8 4e 15 a2 fb 25 24 31 36 8c dd 93 23 91 e3 c8 72 c1 d6 2f 42 3a 0c 2e 1a 91 06 b9 2d ad 8e 43 99 1e e7 11 ad c2 3b 9c 6f d6 79 4e 54 a9 36 4d ec 79 1a 2e c8 18 33 93 d6 f8 1b bc 28 f4 de 69 b4 13 80 51 7f fa 55 5e d1 7f ac 53 31 aa 43 46 2a 77 ea e6 ca 1b 5a b3 dc dc 8b 66 57 35 b6 a6 ea 89 fd f3 ce 0f ab d6 b6 b9 24 4a 1c 41 a8 25 41 56 ab 98 e6 a4 49 3f f2 53 98 4a ed ef cb 44 d5 65 50 ee 5b bc 88 86 93 f2 86 80 e7 08 01 39 92 a2 2a 38 5d c6 fd fc d3 a5 5b 40 2b 5b 23 5b f1 f6 b7 69 59 aa 6a 30 6f f4 fb d8 a4 a8 f2 6b 1c 6b 71 12 a2 5b 44 bd 06 f2 17 d6 ef 71 5c 91 1c e5 21 c8 f6 b8 7d dd 9e 8f 91 83 82 f6 35 15 38 47 22 a3 13 1a ce 32 9a 40 40 f8 f2 c5 2a 3b e4 22 e4 Data Ascii: JGcYeAiP\=#N%$16#r/B:.-C;oyNT6My.3(iQU^S1CFwZfW5$JA%AVI?SJDeP[98][@+[#[iYj0okkq[Dq\!}58G"2@@*;"
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 5e 3c a4 2e b9 e4 a4 b1 87 51 a6 da d4 98 4b 09 08 44 bb 6d 60 ed 26 12 c2 15 7d 3d d3 cb 2f 6b bb 89 89 b6 da 5d ae b7 42 5a ac 3f bb 24 2a b7 1e ae 72 f0 ec 23 7a 11 70 92 1c 8e 0c a1 33 1f bb 7e 89 93 bc ab 6c 56 9f 68 bf b1 76 d5 b0 c7 ac cf 24 fe ca 1e de a6 e8 78 37 36 b7 10 24 eb d6 d1 49 a5 ea 27 95 33 cc d1 18 1d 8e 18 d8 47 6b f6 f6 9a b4 8d 83 74 a2 93 4d 25 cf a7 b9 f0 46 c0 e8 d4 be 44 bd a8 b0 a5 d3 a3 45 b3 91 5d 51 15 22 f9 1a c6 16 d0 9a d6 cd 71 6f 7e d1 74 56 8f 95 74 62 87 18 fe 31 84 47 ac b8 3c e3 f8 1b 7e b2 4d 7f ac 6e ea 8e 7b 15 31 5e ae 14 e3 a9 80 84 f7 3c 52 38 36 cf 7a fd a6 f7 6a b4 7c c7 55 d6 24 b2 53 6b 0c 1e 58 de 38 51 74 5f 8f 36 eb 67 b0 3c dd 9e d9 b1 9d 59 02 64 b1 0e 28 f5 cd 96 3c ed 3a 8a c3 4a a6 16 97 ef 82 2f Data Ascii: ^<.QKDm`&}=/k]BZ?$*r#zp3~lVhv$x76$I'3GktM%FDE]Q"qo~tVtb1G<~Mn{1^<R86zj\|U$SkX8Qt_6g<Yd(<:J/
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 84 ef 16 eb a4 0e c3 e4 ab ba 9d 72 ba 8e 39 36 26 54 96 75 49 f4 eb 24 9f 49 e6 cb e0 d3 eb 35 cf 83 2a ef 70 d3 89 0e 38 60 11 cc 00 88 35 d3 61 9a 6d f4 0b 26 91 ec 90 fe e2 b3 9c 99 4b 6f 61 26 41 ef 95 a4 2d f4 c5 57 59 4d 7e 7b 88 83 0b 39 0f 4c f4 e4 b2 8a 01 51 5b 3c 54 94 34 a6 97 67 e2 23 95 f3 7c 5d 2e 86 3c 2b 02 a4 61 df ad 5c 8d 76 fb f6 23 ba d5 a1 5e be 76 d7 4d 49 af 6b fb 2d 26 bb 55 1a 0e c5 e4 1d 90 b7 14 d4 05 d7 a0 46 ba 5f 08 47 b7 ae ab f3 b6 d5 1a f7 62 24 69 d0 56 fd b4 76 14 f5 60 07 c9 99 0e 24 19 1a ac ff 00 d5 d5 8a 7d 89 6b e8 e5 9e 4b 7e 7c 38 83 a3 9f 02 41 2c d9 eb 98 e5 c4 7b 3a c5 43 11 5a bf 5f 85 94 b6 62 7d 6d 95 60 ea 64 5f 8a 5e b3 b0 70 1b 69 b1 26 32 38 29 a0 cd 81 43 1e d9 90 d9 af 50 c4 f2 85 a4 d9 da 7f 8b 6b Data Ascii: r96&TuI$I5*p8`5am&Koa&A-WYM~{9LQ[<T4g#\|].<+a\v#^vMIk-&UF_Gb$iVv`$}kK~\|8A,{:CZ_b}m`d_^pi&28)CPk
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: ae 5c f7 22 67 c8 6e 7c 86 e7 c8 66 7c 86 e7 bd 32 31 a2 7c 9d 83 72 a9 bb b3 db 37 ea fd 92 0e ed b9 43 d8 9b aa 6c 4b ad dd eb bb 70 e9 22 46 df 2a 97 3c 65 b2 26 c5 5f e4 7b d8 94 9e 57 3e d4 16 cc ab db 23 57 6e db d4 ea fd 46 3e cd bc 83 64 a8 81 ba b6 05 d9 fc 83 01 fb 07 fa ea a0 ec 89 bd c6 1d d8 f7 b0 44 9f 6b bc 45 9e d0 6c ef 4c 65 d4 e9 2b 49 f2 85 26 3e df ae a0 d6 d7 5e 98 84 93 08 2b fb 80 e2 aa e3 e3 c8 18 7e ff 00 f9 e5 7f 3c fe 39 ca 5b 89 94 56 7b ce c8 cd b7 6d 7a b5 11 0c f6 ae dd b4 9f 64 9d df 3d 98 86 c4 36 21 71 85 e1 3e 4f d8 e6 39 16 3c de 31 93 91 53 da c7 20 c8 66 ac 2d 8e e2 2e 7f b0 9f 89 ca e1 14 7e be 71 1d 9c e7 6c e7 39 ce 73 b6 73 f9 46 e2 0f e9 df f7 ff 00 c7 de 76 5c ee a9 8d 3e 7b b1 af 4c 69 78 c6 49 54 c6 cc c1 4e Data Ascii: \"gn\|f\|21\|r7ClKp"F*<e&_{W>#WnF>dDkElLe+I&>^+~<9[V{mzd=6!q>O9<1S f-.~ql9ssFv\>{LixITN
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 0c 22 ac de d5 86 eb 7e 83 6d cf 5a f9 e3 3d 02 23 e9 31 97 b0 b4 f4 6b a0 df f6 70 d1 e9 66 a0 6b a7 9e 3f e9 8b f0 f0 d9 8c be 6a a5 96 69 8a fb 39 72 ad ca e4 16 57 8d 6d 49 f1 ab a3 d1 e8 50 63 e9 24 90 41 90 cc 99 a8 13 97 e5 12 75 69 16 9e 14 1b 92 1b 5d 75 17 bf 53 58 e1 d9 78 e4 27 6d 4a 4d 6d f1 db 19 3e 19 90 e1 f1 a5 af 8e 47 0e c8 a1 56 46 14 29 0b f5 54 52 7e 1a b0 9c 22 1e 21 1c 66 3c ac d0 b5 36 b9 1b 68 db a6 d4 7e ea 9e b7 d0 59 c6 77 2d 9c e1 ec d0 6a fa 90 4e 9a b2 a3 51 ad 3d 3d e3 a7 7c 71 37 31 e4 e3 f0 16 2c cc cc 3b 51 a1 bf ce b1 1e 48 66 e5 00 b2 27 9b 39 a0 07 ec 62 1e 10 b7 a3 9a a7 e2 3b 8f 3e d6 0e 38 7f d1 ac a0 f1 e6 4f 37 c9 05 7e 7f a6 d8 83 87 64 a0 fe 04 2a 07 6b df 0d 1b 93 e0 7d 2b d8 56 27 82 66 56 2a bf c3 5b 61 de Data Ascii: "~mZ=#1kpfk?ji9rWmIPc$Aui]uSXx'mJMm>GVF)TR~"!f<6h~Yw-jNQ==\|q71,;QHf'9b;>8O7~dk}+V'fV[a
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 27 1c 5a 35 9d 72 f2 c8 28 ab ba 5f 5b d2 a9 7f 3d 94 69 e9 df 1c 2f 87 47 92 8a 0e 28 e9 14 72 2f 3b 32 16 69 92 39 34 c1 0f 38 18 61 61 e2 92 57 00 e8 d4 bc bd a5 2b 22 7d 5b e6 f8 bc 59 c7 59 33 59 4c a4 8a 96 10 a8 95 25 5d 46 db eb d6 41 2b 16 fb 4c e5 b5 9d da ce 33 5c 4a 39 e0 6c ae 46 34 ca 65 dc 01 2f 2c 99 25 97 bd 49 2b f8 b4 93 f6 53 4f 4d f5 6d 5b 47 4a 76 be f8 54 20 6f f2 f8 ec 3f df 1f e7 4d c9 f6 95 81 24 8d 8c 7a 8a cb 5a 19 87 ba c2 8d 15 20 de 1b 8e e4 f9 43 da 75 42 64 b2 be 12 ca 6b 66 1a 80 f4 3d 3b e1 5a 3c d2 6b cb c8 b3 01 4a c5 0d d7 dd 24 75 51 5f d3 1c 2f 2c 90 c4 5c 28 d6 f6 6f bd 6d b0 f2 18 00 e8 f0 03 66 ce e7 61 d3 1c bd 3f 58 e3 5e 9d f4 ae e7 10 e6 52 48 63 bd b9 9a 01 52 3a 6f e2 fc 36 c7 12 e1 f1 8d 4d 02 2e 82 04 8e Data Ascii: 'Z5r(_[=i/G(r/;2i948aaW+"}[YY3YL%]FA+L3\J9lF4e/,%I+SOMm[GJvT o?M$zZ CuBdkf=;Z<kJ$uQ_/,\(omfa?X^RHcR:o6M.
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 34 b4 f4 3e b2 e8 fc ab d7 fe 71 c3 a0 39 80 93 4c fc bc bc 7a b9 ac 76 f0 8f 75 56 eb 53 1d e9 46 f4 09 ed 8c d7 14 19 82 89 e2 8b 24 bb 65 a1 ee 08 60 c5 e4 0a 01 2e dd 6c 9e b7 54 36 c3 40 1b 88 08 e3 75 65 7a 90 32 d5 00 48 6a 15 d2 bc b1 a8 c5 36 55 81 2c a4 f2 ce da a8 d6 c7 bd 02 36 f9 60 cc 12 6e 49 1e f0 d4 34 8d 88 c7 11 5c de 67 32 5d 1e 38 e0 1a 61 88 1e a4 ae de 5d 59 af 19 68 99 50 a4 a5 24 65 aa d8 13 d4 60 c3 07 b4 1b 8c 2e de e8 f0 ee 3a 9f 9f e5 88 57 2c aa ba 61 4b d8 7b bb fc f1 c4 88 1c b4 42 3b 93 55 ee ed a7 a7 a9 c6 a7 fb df bd bf db 1c 3f 35 94 55 52 a9 3c 6f e7 13 96 37 7d c3 7e 55 89 26 2c 6e 29 5d c0 50 7c 6a 16 8f 91 d4 7f 31 8c b2 b4 a4 16 e5 0f 55 b1 77 5b 30 b2 08 f9 75 e9 89 18 a5 d7 29 4d ed b7 5a f4 c6 5d e3 26 9e 48 d5 Data Ascii: 4>q9LzvuVSF$e`.lT6@uez2Hj6U,6`nI4\g2]8a]YhP$e`.:W,aK{B;U?5UR<o7}~U&,n)]P\|j1Uw[0u)MZ]&H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49969	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	698	OUT	GET /xxrz/250x400/793/25/db/25db3b6e3d98ed5c09090a3ff67a8f50/25db3b6e3d98ed5c09090a3ff67a8f50.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:44 UTC	725	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: image/jpeg Content-Length: 80663 Connection: close Last-Modified: Mon, 20 Nov 2023 18:17:51 GMT Vary: Accept-Encoding ETag: W/"655ba2cf-123f1" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6957 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2FAV2sBd8x77b2mFTNcwp10noE50TwyrI4oWC%2FX8fpEXC%2B0YZT8IIOWjl5bTVbCqYG624KpAFVrdGAF1iPyDpUz04XPCRFJJYVSXiiw%2B%2F6gCpNBaUYNiD9AeIQSYjWk28yq6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a83e7e4da57e-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:44 UTC	644	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 00 03 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: a9 34 ae 47 4b 89 7b ce 2f ab f5 79 5b 3f 47 df f9 cc 77 8c da 12 7a b8 b3 b6 d6 a2 27 50 6b 78 dd 09 87 75 de 59 8f b2 e8 bd 03 57 69 d5 aa 68 31 6b 4c 18 f0 f3 9a 4d 39 2c df a6 2f b7 b1 ad fb 79 41 e8 b6 3e bc f1 c4 f1 75 f3 af 42 e8 f7 ad b3 96 ce c6 9c 2e 92 dd da b9 0b d2 ba 2c 6f 96 63 c7 f2 76 3a f1 5b 56 cc 32 cc da 51 14 be af cf 76 0b 55 88 c9 ca 6b 97 b3 b6 59 65 4b 90 c0 58 b5 8e 9d ce 56 1e 53 8b 6b 1d 25 99 2d bd e0 5a 14 fc 6a 1a 29 5b c7 2b 45 ad 5f ae 28 6a 9a 15 39 2f 2a c6 62 bb 45 2d 31 1e 43 a2 55 b5 c9 5b 1e c9 11 db cb 32 ab f7 1f 2f 18 b4 ac 93 31 1a 95 4e 47 7a 7b 38 6a ec 7d 9e e7 26 61 2d f8 c7 79 25 45 db 36 9e ce b3 c6 9a 13 db 9c 75 fa 0f 37 81 ee 24 29 1f 47 c8 fa 24 19 8f fa 58 79 1c e9 2d 15 a6 c5 e8 27 b8 87 d0 fc 13 5a Data Ascii: 4GK{/y[?Gwz'PkxuYWih1kLM9,/yA>uB.,ocv:[V2QvUkYeKXVSk%-Zj)[+E_(j9/*bE-1CU[2/1NGz{8j}&a-y%E6u7$)G$Xy-'Z
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: f1 8e da 82 99 0b d1 1a 5f 2d a1 6b 65 de 78 db 6e c9 3c 67 ac 32 2e ad b0 96 65 76 32 54 8e c4 95 cd 56 76 11 f4 11 b0 12 bb 1c 5c 27 c8 52 59 f5 84 74 e5 65 09 85 52 4d 5a 73 e3 2a ec a2 a6 53 96 46 6f b2 79 f0 a5 77 2d f2 d5 fe 3d 8b 66 4e e9 b0 b2 78 7b bc 14 59 44 34 e0 e5 90 f6 86 49 d4 b5 b7 43 83 b5 16 d4 62 af 0f 6c 9c 75 b5 02 e6 57 d5 43 53 cd 27 55 c7 8e b7 ae d7 4e 0f 74 6e c9 08 4a 85 c4 ad 9b 35 0b 3d aa 96 61 dc 2b b4 d0 41 84 bb 76 0a 2e 5e 84 7b 46 8b 39 60 56 26 99 e4 cf 69 82 90 27 65 30 87 6b 13 67 3b a2 22 20 9e fb 0a 84 79 15 67 23 55 fa 2a 99 d0 61 b1 c7 93 ef 24 b2 ba 52 52 aa fa c9 fb 1d 45 69 9c c5 a2 c1 61 40 3b 1b 91 bc d4 24 9c 5b 46 0b 24 c9 56 f5 9d 97 64 3d 2f 5e 4e cb b0 e8 a2 90 ed bb f5 ac 2c c3 09 86 66 67 b1 18 c1 bd Data Ascii: _-kexn<g2.ev2TVv\'RYteRMZsSFoyw-=fNx{YD4ICbluWCS'UNtnJ5=a+Av.^{F9`V&i'e0kg;" yg#Ua$RREia@;$[F$Vd=/^N,fg
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: b1 8c e5 3c 69 06 2a 43 84 bf c6 2f 95 04 03 cc 85 02 75 81 1c 22 80 ac fc be 47 90 eb 89 af ea d4 7f cd cd 91 a4 eb a1 89 7b 56 4a 99 e3 62 bb 23 c5 7a ac 09 d3 a0 65 8e d9 62 41 9e 49 88 47 a2 2a b5 d9 ad 6c 8b 56 95 12 e2 5a 96 44 38 92 6c 27 d4 54 ce 3d dc 29 74 d2 cd 65 29 e8 64 73 d5 e3 ca ab 72 41 7c 5b 78 2e c9 d7 f0 22 0d fb 4c a5 7b 59 8c 6e 31 99 a9 ec 49 47 24 5b a6 aa 20 6d 3b 19 76 09 fe 35 05 79 35 8f 23 38 72 27 05 5a 8e 7b 91 53 44 bb 89 59 65 32 f2 90 f0 36 ab 46 d9 dd 52 d4 24 d7 87 5c 32 ab 75 29 04 6d c6 9d 20 0c 9f 5a a2 47 8d e3 ca 78 e1 35 a5 cd 5e b6 7a 0f 1d 94 6c 8b 47 66 18 d9 b4 1a 3b 27 6d 2f 69 a3 fa fb 29 22 39 1a 41 e1 53 8c f7 94 6a 53 15 f9 c3 b1 98 c4 4c 1b 71 8c ed 88 cc d4 75 35 d9 e5 19 66 52 cc d6 37 4a fa 9a 77 72 Data Ascii: <iC/u"G{VJb#zebAIGlVZD8l'T=)te)dsrA\|[x."L{Yn1IG$[ m;v5y5#8r'Z{SDYe26FR$\2u)m ZGx5^zlGf;'m/i)"9ASjSLqu5fR7Jwr
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 15 1b 8f f2 91 26 44 b1 7b 32 b0 66 94 4b 31 42 d7 c2 0b 88 2e 59 56 4d 39 e5 4d ea b1 6d 95 ac fe 69 c1 30 b7 9d 6d 44 9f a6 34 9e bc 10 4e f6 80 4a 07 d6 dd ce 8b 62 e2 a9 f2 34 95 79 59 08 ed 68 c7 d8 02 04 98 91 d4 b6 0c 96 0b 3d 7a 6c 44 f2 10 f5 a9 3b 6f 9b f7 bd b0 5c 93 db a7 3e aa 45 7f 8d e4 d3 50 d8 2d fa 76 9b b4 a3 2c ff 00 91 6b d5 64 0b 2f 65 75 ad f2 6c 7a 49 51 26 f8 bd f3 25 6b da 7c 3a 18 9b 78 e4 12 c0 aa 5e 3b 11 e3 79 cb 1d ae 0b 58 c7 bd c9 88 82 e1 aa e5 c6 3d 51 3b b9 54 4f 5e 50 8a fc 69 49 da 34 8e 8f 8b d2 5c 40 4f 8a c7 49 b7 70 5a d9 6a 58 f2 10 72 25 58 d2 3d 5d 2b 5f 9a f3 69 9e 1a 25 b1 2c e1 0a ad 29 6f 9d 51 2a 33 5c 42 d8 09 52 4b 1f ce 2a 99 12 e7 fe 4d f0 f6 0d 7e c6 d2 bf 40 db 9d b2 97 64 64 8f 8b b8 b0 e1 35 65 3c Data Ascii: &D{2fK1B.YVM9Mmi0mD4NJb4yYh=zlD;o\>EP-v,kd/eulzIQ&%k\|:x^;yX=Q;TO^PiI4\@OIpZjXr%X=]+_i%,)oQ3\BRKM~@dd5e<
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: bc a8 64 ab 91 c6 57 0a ae 38 8d 5d 38 88 d9 b0 36 cf 88 c8 43 f7 c1 b8 bf 5a e6 38 4e 71 2c ed c6 f6 eb c5 8e 4b 5b f9 1f c4 d9 55 4d 93 67 79 68 c1 c4 9f a0 d6 c4 bf d8 36 44 88 eb bd ef 5f a5 a6 d4 ab 40 fb 1b 3a 5d b6 37 8c 6c f6 1b 0f f9 35 85 3e b7 53 ff 00 8c 40 ac 26 6e d4 b0 6a ab 49 22 58 b0 16 1f d8 e9 cc 72 94 a6 70 65 19 0c d7 76 72 84 74 f2 62 c9 4a d0 98 4c 00 8a e4 6f 62 bd 06 39 36 67 78 cd 7a 60 c5 8b 37 96 8a 34 28 71 e0 3c f2 a3 4b 95 2a da c6 5c 81 88 6b 37 b3 6b 0f 32 39 7c 90 16 7c cd 18 5e cb cd da 3b c7 b3 78 bf ad 74 73 49 72 48 f2 34 84 36 91 e1 68 31 dd 7e 63 c8 3c a1 9d a9 94 07 71 7c 46 b1 19 9e 4e 31 1d 52 e3 4a 44 87 54 c9 02 51 1c 64 13 e7 49 87 06 1c 5b 39 1b 15 78 2a a7 3e 18 3e 00 21 b9 4c e2 01 4b ec 7a 64 77 14 ec 2a Data Ascii: dW8]86CZ8Nq,K[UMgyh6D_@:]7l5>S@&njI"XrpevrtbJLob96gxz`74(q<K\k7k29\|\|^;xtsIrH46h1~c<q\|FN1RJDTQdI[9x>>!LKzdw*
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 2b 50 a5 2a 9e ba 69 88 d6 62 76 1d 4d 31 7c cb e7 4a 79 55 d8 88 9f 9e c7 e5 fa 00 8a df f4 cd 18 3d 6b c4 41 6e 59 f2 cc 05 73 47 b6 09 f9 d5 b3 36 ec 22 e0 73 2a ec bc 3c b0 a0 4a 93 3d 86 9d c9 1b 93 03 ad 78 7b cd 45 9a 7c d9 25 50 73 8e 9b fc e8 91 4b 77 4a 4a 94 61 29 c9 26 99 e2 36 d7 0b d0 87 25 43 60 41 cf 78 ad 42 bc 46 b7 b5 2b cb d4 79 41 48 ea 63 b7 ce 2b 81 aa e8 3a 95 2a 79 d4 88 99 91 11 ab a6 d1 43 61 ed 40 45 05 47 4a 12 3a 57 13 79 d6 ac de 71 91 f5 89 41 d3 56 1e 22 e2 6d 3a f2 ee 4a 7c a6 d5 05 4e 28 24 10 7a 03 03 3d c6 62 b8 67 1f 67 89 61 25 24 e7 2d ab 5a 49 1b 81 14 61 d4 94 ad 20 a4 e0 83 9d ff 00 d2 87 06 b3 f3 3c cf 2f 3b c7 4a 0a 0d a4 25 22 12 30 00 ae 21 c7 19 b2 80 64 af b4 d2 78 cb 7c 45 95 31 21 0b 70 0d 27 a4 c8 30 6a Data Ascii: +PibvM1\|JyU=kAnYsG6"s<J=x{E\|%PsKwJJa)&6%C`AxBF+yAHc+:*yCa@EGJ:WyqAV"m:J\|N($z=bgga%$-ZIa </;J%"0!dx\|E1!p'0j
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 80 48 98 38 d8 e2 3e 47 bd 7e ad 9f b0 6b f5 71 fd 9f ce 29 5c 3a 3a 7e 71 46 c4 a0 48 eb 8f 9f 4a 72 c4 ab 3a 7f 33 4b b2 29 3d 69 76 84 6d 9a fa 31 fc fc a9 d5 38 e9 2a 52 89 51 99 27 d4 cf f1 34 a6 e2 49 57 2e 27 ef ae 0a fa 5b 4f 11 4a 89 4e bb 1d 28 1d d5 e6 b6 77 ae 3e e2 1d bb 78 36 e0 e6 b9 57 5e 50 14 cb 43 d4 9d 67 f9 0e b5 e1 07 fc 95 be d0 79 09 53 81 09 80 72 74 25 66 39 bf 64 e0 fb fa 50 72 e3 fe 61 fc 28 21 6b dd 6a f9 9f ed 5e 50 45 e3 6d 62 0b 4b 52 b3 eb fd a9 36 cd f4 29 33 d4 66 be 8a 89 fc fa 53 cc 21 23 e0 8f 99 3d ab 89 f1 0b 1e 1e 00 ba 72 35 9c 25 23 5a a3 f6 c8 9c 27 d6 9b e3 5c 1d a6 d1 e6 3e 79 c0 88 42 e0 4e 33 82 63 14 6d da b8 09 71 a5 25 68 58 94 a8 19 07 db f3 8d 88 9a 5f 0f 57 61 4a e1 ea 9d bf 0f 6a 53 aa 26 4e e7 7a 73 Data Ascii: H8>G~kq)\::~qFHJr:3K)=ivm18*RQ'4IW.'[OJN(w>x6W^PCgySrt%f9dPra(!kj^PEmbKR6)3fS!#=r5%#Z'\>yBN3cmq%hX_WaJjS&Nzs
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: fa 93 88 a6 ae 42 53 e5 92 75 66 07 ee e2 7f a8 f9 d4 17 91 03 af e3 41 87 12 94 62 65 03 63 f0 e4 88 c9 f6 3e 94 14 56 63 af bf b5 21 b5 3c 74 a2 24 15 27 98 84 f3 26 25 39 33 23 73 8f 87 34 94 91 a7 5a 9b 48 53 9e 56 4a b1 d9 58 11 1a 86 93 9e 5e d4 2d 5a 50 95 f9 e3 98 8f 2d 65 0a 4a db 57 70 92 48 91 11 aa 14 93 91 9a f3 d2 cc 36 db 45 44 6c 84 89 24 e3 2a 56 63 ef 34 e3 fa 80 d6 cb 68 59 e9 a4 2f 38 c1 c6 f4 9b cb b7 3c af 32 1c f2 80 0d a8 b6 39 60 82 34 fa 0e 9d 8d 0b c8 f3 10 58 69 41 e8 f3 f9 40 f3 60 85 0f 30 88 98 39 cf ce 9a ca d1 f4 54 06 57 20 27 cb 00 11 91 b1 00 1f c6 ae 1e b8 5b e4 bc 82 b5 cf 34 72 ea 3d d5 03 99 5e bd 68 bf ff 00 4d 43 e7 4f 2f cf 75 85 68 32 d2 d5 d2 67 50 1d a4 8d bb d2 bf e2 7c c4 05 25 2e 04 89 47 32 f5 20 42 b0 91 Data Ascii: BSufAbec>Vc!<t$'&%93#s4ZHSVJX^-ZP-eJWpH6EDl$*Vc4hY/8<29`4XiA@`09TW '[4r=^hMCO/uh2gP\|%.G2 B
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 8d 09 e3 fe 14 42 8e 57 7d c5 81 cc ce 9e 11 72 ae bb 60 52 58 52 01 38 12 95 14 28 90 25 60 0c 41 df 19 f7 8a 48 05 09 3a 49 3a 79 94 a1 e8 0c 0c fa e7 e5 49 6c b9 b8 d0 35 7c 49 12 a0 30 26 7f ac d3 a9 93 ad d5 29 44 25 28 40 04 44 27 48 cc fc ab c9 04 9e be 91 31 e9 9d bd ab 44 1e dc c3 e7 fe 94 0b 25 28 56 be 68 3c ba 20 80 0e eb 56 c4 c6 66 9e 29 5c 1d c9 50 03 3f 0e 9c fe 34 4a 52 88 04 93 24 fe 7d a6 b4 1a fa 1b 02 e5 bb bd 1f ef 0d 5b b9 6c 87 3a f9 2e b8 cb 8b 4f 7f 8d 94 11 9e f8 34 9b 46 12 fb 97 69 4c 5c bc cb 2c 3a be ed 5b a9 e5 b2 9f fb 55 72 f1 ff 00 ba af 78 53 57 b7 7c 2a f1 6e b8 85 f0 9b 97 ee 5a 42 23 4b aa 7e cd fb 32 97 24 4e 90 87 d4 a1 a4 83 a8 0c c4 8a 71 a6 5d 6b cb 5a 4a 92 a2 0b 89 51 1a 55 04 10 92 06 e9 c4 99 30 a0 74 91 a7 Data Ascii: BW}r`RXR8(%`AH:I:yIl5\|I0&)D%(@D'H1D%(Vh< Vf)\P?4JR$}[l:.O4FiL\,:[UrxSW\|*nZB#K~2$Nq]kZJQU0t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49964	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	929	OUT	GET /xxrz/250x400/793/b4/ed/b4ed2bf6911aacc0dc0604cc1828af1f/b4ed2bf6911aacc0dc0604cc1828af1f.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:44 UTC	723	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: image/jpeg Content-Length: 84444 Connection: close Last-Modified: Wed, 24 Apr 2024 14:34:13 GMT Vary: Accept-Encoding ETag: W/"66291865-147d4" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6942 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cudJo7VANSx0HHsbwjJJwoArNqVXAyaPeId8WlmJ16wGaJf0G%2F87w6fnHnhr3n7dN4tEe9KH3mpKMHPAi6UslZxMUXNgLEv%2F2fbUHyYEfu%2BX9%2BPX5XofvRYATuTie31iXml8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a83e8e2209ba-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:44 UTC	646	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 0f d7 2a 60 e9 07 b1 c3 2a e8 3d ae 35 59 2b 15 5a 9e bd 43 57 2d d4 92 23 05 67 9b cb 35 1b c8 86 e3 7a 99 94 22 88 29 18 9d 1e 6f 6b 21 ea be d3 5e 27 d1 2f c8 f2 a2 fd 3c c1 4b d9 f0 46 5c 95 07 de 04 b2 b2 8c b2 98 f3 8a d1 0f 5b ad 44 b6 67 57 cb c8 98 74 78 b6 8e 31 59 1d 51 66 9b 18 31 e4 85 20 13 08 d9 a5 11 9c 15 9e a1 a1 cd 48 6a 51 a0 d8 ad bd fe c7 ea 59 aa 5e 22 2a 70 74 6f bc 03 00 1c fd 5b 51 3a 19 f5 5d a6 76 e5 c5 94 2f a5 fd 82 78 57 57 cb 84 f9 94 87 bd 7c 35 a8 ef ef 40 7d 22 5a bc d5 bc 7a d1 a7 18 82 d7 61 a6 cc 41 1b 17 89 38 fa 73 f7 a8 5f 35 6b 81 7c 74 d4 e5 cc 56 11 45 ce 3b 74 a4 5f 90 d5 27 ab ab 92 a3 5e d6 e8 6c fe a9 3e a4 27 19 47 d2 da aa 41 97 cc 2c 01 64 10 c4 66 c1 01 5c f5 f0 74 32 ce b5 1d 2a 32 5b 78 b4 ab 9a f3 d6 Data Ascii: `=5Y+ZCW-#g5z")ok!^'/<KF\[DgWtx1YQf1 HjQY^"pto[Q:]v/xWW\|5@}"ZzaA8s_5k\|tVE;t_'^l>'GA,df\t22[x
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 2d 05 3c ba 3e 5c fa 32 d7 51 db 99 cb e6 85 44 88 3a ed 7c 70 96 60 94 2c f1 31 5a 10 0f 9a 54 8d 50 a5 fd 15 89 d6 26 15 af 84 10 0b 0e 02 5c 7a 06 83 d3 2d d5 69 5a e4 d5 b4 dc e4 14 ee 50 77 63 86 01 89 e7 ba dc 01 ee 89 0f 66 57 58 4f 2d 69 71 96 95 d1 3e 5c e4 dd 31 e1 c2 e0 19 4b 0c f8 b1 fe 18 76 a7 3d 05 87 05 8e 94 42 2a c5 7a 0c c9 73 e2 df 60 60 71 9b 5d 3c 46 2c e4 7a d2 27 25 46 81 35 1f 7e b4 57 2b e3 1f be 4e 45 88 05 15 57 30 2e 01 4b a0 9b 0b cd 0f bf 28 dc 4d de 5d e3 e7 1b 80 47 d8 e5 f8 91 d7 ce 73 b5 58 9d 4b 4d 96 0f d3 e5 b1 c9 cb 53 27 ce 71 f2 96 c6 2c b8 9d 1c f6 ae 2f aa 5c 92 d7 f1 ea 04 8e 85 b3 62 98 aa 7e e7 bc d8 0c 5e e6 ee 40 d8 c7 97 d7 e4 67 eb 67 16 fc 09 8f 6b c6 30 9e 4a cb 52 ce 13 5f ae f4 59 a2 52 57 98 85 26 ef Data Ascii: -<>\2QD:\|p`,1ZTP&\z-iZPwcfWXO-iq>\1Kv=B*zs``q]<F,z'%F5~W+NEW0.K(M]GsXKMS'q,/\b~^@ggk0JR_YRW&
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 0c d6 1d 78 79 b3 de 9c d9 de 06 2b 6f ed 96 d2 5c 92 f2 86 91 89 ec 2b 83 4e 55 c8 d4 31 1d 91 35 7a 65 c8 5a 9e bc e4 7e 9d ab a8 ec 35 ca 6f 55 ed 30 a3 90 ce 5e 7a 22 e3 46 f5 c5 1b da bd ca 88 47 bd e9 8e ab 96 c8 b4 35 54 53 b2 d3 54 8b 14 b2 aa a6 42 94 60 cd af 33 24 71 80 92 37 62 03 dd 9a 7b dd 10 b5 56 88 98 92 f8 c7 99 c8 d9 76 0e 6b 76 59 c7 57 48 45 51 90 66 76 28 3a aa 1f d1 8b 3f 85 25 e4 84 73 b6 29 8a a1 de a4 a2 c7 dd 4c f6 3b 67 42 b2 da 73 4f 87 ff 00 cf 09 49 6c 14 f9 95 cd c4 b1 86 8a cb 18 0b 81 99 1f 95 95 5e fc 78 b4 e2 2f e2 34 f3 e5 05 6c 2a 7b 3d 97 60 9f b5 56 cd ab f4 11 aa 46 38 13 1c dc ad b5 fa a8 b8 ed 91 6c 3b b4 87 5e 2c e5 ab 52 73 c6 46 49 78 98 c9 33 18 e4 24 ae 52 44 b7 2a af 65 58 5a f5 d5 90 ed 69 2d e8 a5 4a aa Data Ascii: xy+o\+NU15zeZ~5oU0^z"FG5TSTB`3$q7b{VvkvYWHEQfv(:?%s)L;gBsOIl^x/4l{=`VF8l;^,RsFIx3$RDeXZi-J
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 2b ab 22 f2 fa 98 79 63 e3 ba 2b 19 5b 3d ed 36 b2 bb 24 ea ab 7b 7a 0a f7 ec 17 70 35 fa ba c8 9b 65 95 1e b7 54 f2 28 4a bb b5 d2 2c 15 14 87 5c 51 16 19 2b de 93 9a 28 fd 10 d5 23 5c 86 fb fa 39 31 fc b5 bf d7 4a 8d fe a1 b6 50 e7 fc 41 df 95 b7 de 45 db b6 41 92 39 d8 9a 2f 8f fd 02 3d 7f a0 d5 51 55 49 5a c4 68 9c cf a9 49 c3 2d d8 84 49 51 57 9d c3 56 f9 2d d4 37 9b ad 3e c7 54 f2 05 36 d8 27 11 57 14 aa a8 a5 56 e7 90 1f 26 ef 71 b2 85 5e 46 ea 9a 6d 1d 09 b6 ad c6 0e be 0b 09 73 67 12 f6 69 27 93 8c 56 2f 35 f6 ff 00 20 33 69 4e 19 0c 72 49 18 61 b1 c8 ca 7f 66 26 ac 37 b7 f4 30 de a2 d1 c1 d9 34 e8 f9 17 5e 04 9d 96 1c 76 f1 6b 14 4c c8 8d 68 b2 1c b4 6e 7c 9e 72 59 fb 64 e8 de c4 34 35 ee 1a 32 4a 76 fd a3 ac 61 45 93 2e 1a 6b be 5f bb ac 4a cf Data Ascii: +"yc+[=6${zp5eT(J,\Q+(#\91JPAEA9/=QUIZhI-IQWV-7>T6'WV&q^Fmsgi'V/5 3iNrIaf&704^vkLhn\|rYd452JvaE.k_J
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 13 51 af 65 0e bf 21 09 1e 55 1d 22 ca 6b 72 5b bb b9 f2 d6 4b d5 51 b4 b5 0e 58 d0 34 5d ce 25 dc 5b 50 a1 23 4a 8f de 88 f1 93 1d 1f 85 62 7f 71 af 46 e2 bd 1d 84 e3 17 f9 2f 0c ed 13 af 30 9c c6 e2 11 bc 23 d1 11 d2 57 15 ca f4 3f 6c 22 72 88 15 c6 b3 35 f8 c8 37 eb fa f3 ad 62 56 d6 c4 ab 8f e4 f9 8c f6 25 9b eb ed 52 f6 2b 13 da d1 24 82 3c 31 40 e5 45 98 4e b0 e9 a3 2c 88 41 95 2a ae 5d 16 d5 1e 6c 67 01 16 0c c8 8a 32 94 1f 4f 6a 67 0a c7 7a 4c a8 2a 79 c7 56 6a 97 86 5f d2 17 f8 2d 7e 7c 65 65 71 d9 83 61 11 15 1c a8 bf 58 e4 57 63 91 71 63 ae 7a 39 50 d7 3c ae 3d d4 0a 71 f8 c7 da 41 3c cd 1b 7c 91 6e 5b 2d 9f c8 66 58 36 8d b5 98 ad 67 07 5d a7 55 38 35 f0 bd a8 b3 08 9e ca 17 f5 90 55 57 8f 62 92 e1 87 50 dc 63 16 a6 7c 44 7b 65 44 e9 86 1b b9 Data Ascii: Qe!U"kr[KQX4]%[P#JbqF/0#W?l"r57bV%R+$<1@EN,A]lg2OjgzLyVj_-~\|eeqaXWcqcz9P<=qA<\|n[-fX6g]U85UWbPc\|D{eD
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: f0 08 ce 6f 2d ae d9 b0 ed da e6 a7 4f 2e e3 6a ad d9 36 eb 3d db c8 35 71 23 d8 f3 d5 51 dd 70 75 36 6f 19 c1 2e 36 78 e7 70 4b 48 45 5e d9 57 4d b4 d2 25 d5 3e e3 b0 65 76 b7 b4 51 cb 5a dd d8 96 96 94 7b 5d f1 52 2e f0 fa fb 2a 2f 24 d6 d5 d4 68 7b c5 3d db 25 79 b5 72 16 87 b9 c0 bb 59 3e 6d cf db fd c9 2f 7e 4f 9b 97 36 1d 23 7a db 25 ba 07 96 9f 53 03 48 de 6b 69 9b e2 1b a4 74 47 f9 9e 14 3b 1f 17 6c d6 52 69 6b bc b1 af 57 5c 43 f3 05 dd 76 b1 a6 f9 13 4d 7a 6b de 4c 76 c1 fb 7d b9 3a f2 38 7c c3 f8 9b f8 44 ac 9b 64 1f 54 88 23 42 ca fc 96 bb 1f 24 d6 41 33 2c 75 39 11 25 50 5e 2d c4 29 1c ab 64 35 51 c5 73 93 3b ae 0c ca 8a 22 62 13 be 6c da c4 9a f9 cc f6 b5 18 ff 00 a7 61 09 c6 7b 57 3b aa e3 51 78 45 4e c8 ee 7f a1 df fc 06 ec 3b 97 11 dc 63 Data Ascii: o-O.j6=5q#Qpu6o.6xpKHE^WM%>evQZ{]R.*/$h{=%yrY>m/~O6#z%SHkitG;lRikW\CvMzkLv}:8\|DdT#B$A3,u9%P^-)d5Qs;"bla{W;QxEN;c
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 93 87 f0 b0 8a 98 75 06 ce 58 96 61 d6 1b a1 6e 7a 5f 63 a6 96 a8 f8 67 0d 63 18 92 17 79 19 cf 66 e9 1b 67 39 ae 4f 85 ac 05 eb 13 c2 f0 c8 f8 95 8d 19 73 10 10 5f 31 4b 00 d7 bf 2d 35 15 82 e0 b8 29 5a 14 79 94 ba 66 32 a8 04 67 cd 6b 5c ed d4 d3 96 be 15 89 e1 71 c6 e8 30 a8 cc b2 bb a3 16 da 21 9e e1 85 bc 8d af df 58 25 7c 26 1b 2b c6 a7 22 74 89 7f b8 d6 60 08 da ea 47 aa 8a 90 45 12 45 88 ed c7 3a e6 21 91 64 b4 82 c7 29 36 04 ef b9 d6 a5 49 0e 10 e2 46 16 08 e2 b8 b3 5a d2 35 d8 28 b2 dc 8d eb 15 88 c5 64 e8 63 2e 79 30 dc c5 6f 68 0b ee 39 1b 69 eb 5f c2 b1 58 ec 44 8a 92 34 85 2e 73 48 d6 f2 1e ba fb a8 f0 b6 0c 91 b3 10 cd 76 2d a6 50 a2 d7 53 f7 af a5 4b c3 ba 17 54 79 09 2c 06 a0 5c 5c 90 2d 7a 87 80 61 9d 13 f9 93 d3 59 8b ae 5b 8d 7b 16 3f Data Ascii: uXanz_cgcyfg9Os_1K-5)Zyf2gk\q0!X%\|&+"t`GEE:!d)6IFZ5(dc.y0oh9i_XD4.sHv-PSKTy,\\-zaY[{?
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: db c6 9f 17 91 ae 3d f5 0f 10 0d 60 e2 c0 9b 5c 77 d4 78 94 b7 2a c4 ca 64 01 37 07 56 ff 00 8a db e7 fa ee ac 5b 96 63 ca a5 54 92 42 cf b0 ea a8 f2 3a 9f 5f c2 8b ea 6d fa 1c aa 16 6c c8 6f a3 7b ef 6a e1 f3 88 e3 00 02 1d 5b 3a 1b fb 64 f5 95 bd 34 f8 d2 4c b3 46 08 1b f7 f2 ef a9 14 5f df 5d 20 41 ae dc a8 4b 31 19 84 52 15 df 30 5b e9 a5 2b 24 a0 12 41 3e 3a 11 e8 6b 15 88 10 b6 45 b6 d7 3a df 7b 53 4b 23 6e c4 f9 eb 57 34 a7 ac 3c 2a 13 a0 bf e8 54 cf d6 3a ff 00 a7 a7 fd 85 62 a5 ed 93 dd a7 ad 62 db 23 22 2e b9 51 6f dd ad aa 0b b6 62 76 ca df 2a 86 e6 48 80 ff 00 70 7b ba a4 d6 06 30 56 51 6d 3a 50 c0 ff 00 6a fc ed 58 39 7a 37 78 4e df d4 1e ba 1b 56 2b 8b e2 22 9d ff 00 94 cf 87 5b f6 0d 9f 70 01 20 dc 7c 2b 01 c4 c4 82 f0 f0 7c 4c ec 35 2e 72 Data Ascii: =`\wxd7V[cTB:_mlo{j[:d4LF_] AK1R0[+$A>:kE:{SK#nW4<T:bb#".Qobv*Hp{0VQm:PjX9z7xNV+"[p \|+\|L5.r
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 63 7c f7 17 b5 61 67 2a ca a7 96 52 19 89 b0 2a 46 f6 3a e9 71 eb 4d 36 66 56 8e 48 d6 d1 3c 77 66 60 7a f6 d4 59 79 5b 4e ff 00 0a 92 4e b4 65 25 88 94 85 a3 2c 4b 0e b3 84 d7 45 f6 4a 82 2a 57 49 0c 07 3c 4f d1 25 9b a4 67 19 9c 85 04 f5 54 9b 69 46 60 d1 c2 a6 48 58 ab 86 92 f9 80 20 7b 20 65 b9 d0 db 5a 41 08 8b 11 09 9c 65 91 be ac 80 c5 95 40 50 b7 f1 5b 6d 7d 85 09 af 2c 72 49 3c 6a 23 b8 22 36 93 eb 6e 2c 33 29 01 54 73 b6 b4 64 fa c9 64 06 0b bb 82 1b 33 e6 55 b2 a9 19 6d 6d 40 f4 a6 c9 24 99 f3 c7 d9 5c 84 e6 ed 2b 66 b1 16 b5 9b 63 bd b7 a9 d9 1d c1 cf 11 cd 16 e4 b8 31 bf 7a 32 8b fa 6c 7d 2b 89 c5 71 0c c0 86 39 00 66 fb 5b 6a 6b 0d 02 4c 18 be 61 63 61 ca fd f4 a5 6d bd 74 bc 81 b8 e5 fa bd 33 11 7b 1f 3a cc 79 52 48 3d 6b 86 63 3a 44 ca e6 Data Ascii: c\|agRF:qM6fVH<wf`zYy[NNe%,KEJ*WI<O%gTiF`HX { eZAe@P[m},rI<j#"6n,3)Tsdd3Umm@$\+fc1z2l}+q9f[jkLacamt3{:yRH=kc:D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49968	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	698	OUT	GET /xxrz/250x400/793/62/4d/624da3679000613c554103de16f6296e/624da3679000613c554103de16f6296e.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:44 UTC	727	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: image/jpeg Content-Length: 99494 Connection: close Last-Modified: Fri, 08 Dec 2023 02:38:20 GMT Vary: Accept-Encoding ETag: W/"6572819c-1492f" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6957 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FAKMTW1GtqDFqBsRbXcHsMAg2XcCV0A%2Fo8dOKS9ku8aZZ1o%2F4M4SIsJzi%2BU7EJ9kMf1O6ySIN%2Fw66%2BQCLxyB52D573Ux1aYRgnYenikWRle1d4h2vhGgW7A3NoKPunei%2BU94"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a83e8bcb3dd2-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:44 UTC	642	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 44 5e e4 d3 5e 4a ae d1 3a 19 49 32 29 0d cd 75 b2 55 d0 2b e3 83 a2 3c 0d 34 b5 aa 33 b1 fc ba e7 ae 37 9a d1 b4 0d 09 88 4c e6 7d c9 33 1f 19 0d 24 96 4d 5a b9 6b e0 23 a8 27 c0 a5 32 bf 2a b2 74 89 6d 8c 08 44 aa d4 fd 2c 0e 5a db 74 67 a5 54 e7 13 2e 0f 1d 72 c8 1d b9 54 2d c8 a3 57 5c cc 3c 24 d5 32 b4 ef 36 15 0b eb a4 3b e6 76 54 72 07 18 19 09 5b 83 f7 9d 69 9c 26 ec 6f 19 11 fd 35 6f b5 46 94 06 b9 15 e2 e9 25 13 08 42 3a d3 7a 9c 32 7a b6 20 de 17 eb 05 cb 83 ae 99 ef 56 cd 67 c5 79 31 ae 7b 62 c9 7b eb b5 8e 4f b8 32 77 41 8c a9 03 dd 84 0a e5 12 bb 39 25 e3 43 ee d6 c0 39 34 3a 5d 4a fa 4b 5a 73 e6 0b 4c 57 30 7b 43 ad 9e be 6d ad 2d 4d fa d2 70 08 d0 07 a4 b4 e1 87 6f 36 72 4b 5f a7 80 95 af 49 e0 1b 14 58 20 fa 3f 28 54 ce cd 72 71 a5 1d e1 Data Ascii: D^^J:I2)uU+<437L}3$MZk#'2*tmD,ZtgT.rT-W\<$26;vTr[i&o5oF%B:z2z Vgy1{b{O2wA9%C94:]JKZsLW0{Cm-Mpo6rK_IX ?(Trq
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 09 8c 77 4a 34 5b 44 ed d1 06 9f c8 e0 a9 82 66 62 1b 83 ba 45 4f a1 fc 53 8f 56 1d 34 a4 25 ce 79 32 bd 32 57 9c 55 d2 be 95 18 79 1d 14 dd 76 1c 7e 4c e6 2d 3c fe 58 9f 22 f6 a0 34 46 57 07 b5 80 8c f3 04 8b 00 d2 32 1e cd 3c 66 53 32 4d 8e 24 62 5d 1a e8 38 65 12 8b 75 1b b8 e5 b4 56 21 64 73 bb b9 3c ca 2b 7d 4a c2 f6 15 20 cb 43 bb b9 89 fd 48 db 35 4f 42 ca ab fd 46 e5 87 4d d6 7a 0b 59 ba 2d b1 58 c5 f6 1f f2 4c 6c a9 53 3f ce 3e 85 14 8e e1 c5 de c0 27 d1 dd 72 63 75 b9 f7 15 30 df 48 52 b7 a9 c2 a2 eb a6 bd bc f7 ce 81 bb 3a 8c 9c f2 e3 17 99 d1 2a e2 9b b1 5b ea d8 f0 e8 f7 93 fa 73 99 a8 e0 2b 9f 5d 05 49 d9 22 7e 7e 6d e5 43 65 8c f1 e5 c0 45 1f 5e 78 40 20 2c b1 93 a2 34 d4 b6 19 b8 9e 4a 73 56 15 9b a4 dc 5f e8 1e 8a 8f d5 40 d4 b0 57 2d 78 Data Ascii: wJ4[DfbEOSV4%y22WUyv~L-<X"4FW2<fS2M$b]8euV!ds<+}J CH5OBFMzY-XLlS?>'rcu0HR:*[s+]I"~~mCeE^x@ ,4JsV_@W-x
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: cf d3 ec 05 a1 f4 85 31 1e 0a 5c b1 b3 6c 19 d7 c2 b5 ad d4 6c 16 5b 28 e5 b0 07 1a 9f b6 c6 da 8c 13 e2 35 ca ea 47 c7 3f 3c 0b 31 95 81 47 9f b6 28 50 c3 66 64 72 56 5c 6c 47 aa 44 cc 79 57 79 16 d3 3a a5 60 58 32 a8 95 60 b6 66 fa 09 c4 82 51 2e 5d 42 6a 71 93 ec b3 1e d9 1c c6 67 2e 7f 2e 25 11 c9 65 dc 2a a2 c9 c2 95 d1 a4 e5 cb 60 ae c6 04 5d 98 0d fc 30 47 8a dd 85 99 95 b6 70 c6 ea 73 be db 71 e4 5c cd bd a4 85 da bb 27 81 f6 c1 b0 ec b1 c5 9f 68 48 02 21 c9 07 9f be 57 53 9e 52 b6 ff 00 9a 84 af ed 31 ef b3 9f 5f 88 59 1b 06 95 72 81 94 4a a9 d5 3f 2d 37 42 ed 7d 5d 99 9e bb 56 39 85 35 53 9b 83 cc b9 8a a1 0c 4b 18 8f 3e dc 05 20 c2 2b f5 98 e6 f0 0d 88 f7 ec 0a 76 62 cb 51 d8 71 36 bd 79 e0 6e 93 5f e4 a8 93 57 bd a6 b6 af 7d f2 95 e9 b5 be 78 Data Ascii: 1\ll[(5G?<1G(PfdrV\lGDyWy:`X2`fQ.]Bjqg..%e*`]0Gpsq\'hH!WSR1_YrJ?-7B}]V95SK> +vbQq6yn_W}x
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 1c 78 6c db cc d7 6b 27 6c 4e 0b cf 58 6f db 30 13 fa fd 39 4d 9f 3c aa b9 cb 91 2a f0 88 0d c0 e4 e3 6f db 75 dd 3e cd eb ba 8e 6f c5 5e 8c b2 57 a0 ba 86 4c a8 1d 98 f4 78 63 74 73 6e 4c 97 db 2b 4b cd 7c 45 98 79 9e 59 31 13 53 d8 4c 84 88 5d c9 4f ce 7b 49 71 18 d6 3b 47 59 a7 9f ea f6 b5 55 58 ee 5d 6b 82 d2 1b ca 0b 8c 60 66 85 ab c8 25 c7 33 b0 89 32 cf de de 8e a7 11 d8 2a 04 12 79 dc 8b 96 c5 6e da db 0e 5f 75 8f bf b2 51 45 bf 7e 0f 81 eb b0 52 96 e6 36 0e 29 51 b9 0d 7c ef fd 8e a6 bb 9b 79 de 59 43 91 91 8e 57 7d 0b 2f bc c2 98 98 74 e7 18 8e 76 2e 8b 1b f1 8e 2f 9c ee 90 16 df 5d a4 ca e3 f4 9f b7 c7 0a 1f 31 cd 57 79 a1 6c 39 3c e7 1c f2 63 9a 69 3e b9 fb d2 dd 22 60 30 dd cc 9f 33 b0 fb 19 a0 e2 c1 b7 ae 1f 82 aa 84 e6 06 75 73 54 9b 66 ac Data Ascii: xlk'lNXo09M<ou>o^WLxctsnL+K\|EyY1SL]O{Iq;GYUX]k`f%32yn_uQE~R6)Q\|yYCW}/tv./]1Wyl9<ci>"`03usTf
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 35 ba ca 97 92 dd 74 ff 00 7c 92 c6 b3 cc d4 20 9b 8b ea 0b 9e 06 96 87 7b 5e d7 2b 3d b8 bd 9d 39 d6 ed be ba 86 0c 30 e2 29 02 d1 4f 6f 33 ca ed b9 1c 82 8d 24 5b 36 ee 68 dc 29 0f 96 24 4c c5 9d 50 06 be 5d 0a 73 c6 02 2f 96 70 a3 5c b7 24 69 7a 91 5c a7 44 d5 02 98 da d2 c0 49 a6 5f 44 64 ea d6 e2 90 f1 ff 00 29 ae 7e 6b 87 d7 d3 4a 57 a8 64 a1 32 96 f9 27 b1 12 a9 78 03 80 83 4a da d8 1b b0 37 d3 b5 ca ca 17 48 49 03 76 81 4c 87 ab 7e 78 ad 81 ba 43 e1 df 4f 76 e5 85 81 e6 55 b8 dd 6e 6c 61 7e 48 a3 62 aa 7a 6b f2 7f 54 9d 4c b1 87 87 ec 5d b1 8c 44 66 ca ba fe 0b a7 12 f2 47 06 e0 ae 59 f5 96 63 7d b9 cc 2e 9f 86 44 63 93 b7 12 e2 5f 14 d8 3c 1e bb b2 68 22 0e b5 9f fb 57 0c 66 41 ae a8 7b 60 ba 3f 75 aa e1 10 d7 68 80 d7 b0 bc ec 5d a2 bd 77 59 d7 Data Ascii: 5t\| {^+=90)Oo3$[6h)$LP]s/p\$iz\DI_Dd)~kJWd2'xJ7HIvL~xCOvUnla~HbzkTL]DfGYc}.Dc_<h"WfA{`?uh]wY
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: a1 3e ba 08 84 83 67 af 35 e7 99 90 d7 13 a9 69 7a ff 00 61 5d 9b 2e a9 4d ab 76 12 c2 96 c2 4d f8 fd 06 6c 2c 29 97 58 20 98 90 46 94 51 9f 76 46 e7 6e df b1 74 c3 8a ac a6 cd 53 f3 56 75 ee 07 96 c1 b3 eb 67 20 df 36 0f fa 65 d7 1a 22 b4 1f 79 96 68 5d 44 cc d1 ad da f4 dd 32 9d ae e6 ac 6f eb 7d ec 7d 6c 8d 8b 5f d6 f7 85 e8 75 b0 43 06 37 13 5f 17 7f 6f 31 5f 33 69 a4 ed 82 81 6f 93 d2 07 1d 7e d5 8d 77 f2 d3 bc 14 31 e2 b1 bc a3 24 b2 42 ca fd a1 d8 a0 eb fb 68 8f e4 4f 5e 99 86 48 2c 52 20 7b 70 42 20 7e e0 cb 33 2d 7f 5d 33 63 6c bc 95 41 15 d9 fd 8b 16 63 c6 18 b2 be b4 29 92 fc 87 b5 6c 09 f6 8d 8a 8b f5 6d 90 de d5 a6 cb 29 c3 77 8d 13 f5 cd d4 44 5d 93 5c d1 a8 db 37 56 cf f8 92 1f 52 8d 16 04 d1 b5 68 ed 35 b6 4b 9e ec 2a 2a eb b7 11 31 1d e6 Data Ascii: >g5iza].MvMl,)X FQvFntSVug 6e"yh]D2o}}l_uC7_o1_3io~w1$BhO^H,R {pB ~3-]3clAc)lm)wD]\7VRh5K**1
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 02 03 06 05 02 03 06 07 01 00 01 02 03 04 11 05 12 21 00 06 13 22 31 14 41 51 07 23 32 42 61 71 15 24 33 52 81 91 a1 43 62 b1 16 25 34 72 e1 f0 08 53 63 73 82 92 b2 f1 ff da 00 08 01 03 01 01 3f 01 d2 29 b6 9f 11 aa 67 48 e5 dc c8 f2 4d b4 49 3c 8c aa e5 92 7f 79 21 94 67 2a cb b9 54 0e 70 a0 75 77 b8 65 de b4 e8 2c 06 45 51 e6 b5 34 ea cb bf fe 24 0b e3 c2 39 50 df d4 dc aa 01 38 c9 e0 d2 bd af 5d d7 e4 89 0d 59 e5 8a 39 26 8a 63 1c a9 5a 48 a3 88 05 48 2c 63 72 a4 8c a1 0b 82 33 26 7d 5c 75 db 5a 7d 9b 9a b4 da a6 a9 04 06 b4 93 59 a9 25 49 10 b8 37 65 0c 76 c6 84 38 0b 11 f4 b3 b9 cf cf 93 9e a3 d3 69 45 5d 23 a9 e2 d2 90 4c 9e 75 58 92 31 2b 21 c3 c4 92 1c 03 96 c1 47 19 62 07 1e fc 69 da 1a 69 5a 8d 8b 15 4c d2 c3 61 5c ee 79 16 48 ab bf 91 64 95 51 Data Ascii: !"1AQ#2Baq$3RCb%4rScs?)gHMI<y!g*Tpuwe,EQ4$9P8]Y9&cZHH,cr3&}\uZ}Y%I7ev8iE]#LuX1+!GbiiZLa\yHdQ
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: e0 11 d6 bd de 5a 77 6b f7 3f 6d 76 e2 4a 97 64 9e 66 9f b8 1f ee d9 c1 9a 3f 1d 38 3f b6 27 0d eb 8a 25 18 45 10 8c 6d 38 ea fe 81 5a 75 f2 7a ac e9 97 22 12 0f 17 a6 58 4c 88 b2 47 66 ab 8c 18 a4 00 8d f1 1f 4b 1e 08 e8 f6 e6 b7 04 4c 9a 5d cd 3b 5b aa 4f fe 1b 51 fe 5a ca 0e 3d 12 a9 8a c5 67 2b ce 19 e2 80 fb f5 6b 42 d5 77 10 fd ad a1 d4 76 e3 cf f0 d1 dc 3f fe 02 9d 3f 1f ff 00 b4 f0 83 f3 3d 58 d2 35 b1 2f df ea 12 44 31 b7 62 88 90 aa 0c 7a 6b d4 84 c8 b0 e4 00 3c 93 cf 29 51 f8 42 fc 8c 66 13 b1 e4 2c df 32 4f 3f e4 e3 93 f3 c9 f9 e4 f5 34 d4 60 af fc bc de 38 6b 88 e3 9a 38 1b c7 14 0a 01 93 ca 91 2a 86 f2 3b 10 38 c8 60 4f 07 1d 5d b0 2c 79 ab 5a b4 d5 92 08 8d 9a f6 4c ac 93 18 c1 f4 b7 e4 c1 6f ab 6e 0c 08 1b 46 7a d3 bb ba e1 b7 4e 2b 85 a7 Data Ascii: Zwk?mvJdf?8?'%Em8Zuz"XLGfKL];[OQZ=g+kBwv??=X5/D1bzk<)QBf,2O?4`8k8*;8`O],yZLonFzN+
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: cf 90 15 68 c9 cb 26 0a 95 c7 3f 33 8e 95 c1 58 27 24 a1 d8 09 54 e1 5c 6d 5e 31 c6 dc 1f 9e dc fd 3a ee 3a 74 5b 5a ab 3c 2d ba f5 a2 a6 4a de 3c a8 45 50 3e 23 76 dd 80 92 a7 3b c9 c9 e7 ae dd d6 7e 06 a6 a1 a5 d6 fe b4 17 a2 d4 60 68 cf 31 34 d1 35 4b 91 12 3f f9 f0 c8 85 94 ff 00 68 27 1d 5b d4 3c f3 d6 43 03 13 12 66 42 72 4b 6e 3f ed 8f f7 ea 2a fb 85 96 64 93 ef 15 44 47 e4 09 6e 73 fe 83 a1 a1 b6 16 79 0f 8d 33 90 d9 e3 dc 13 9f f6 e9 ae 44 a1 62 54 dc 23 18 de 7d 9b f5 1c 1e 3f cf 56 4b 25 38 11 46 58 ee 70 08 c7 a9 47 03 f6 fa f5 25 29 eb fc 1b 9b b0 bc fb 45 9a 93 d2 7c 49 03 1d a1 91 b3 c1 04 93 b7 f6 6e 07 57 2f 6a 6d 6a 35 9e cb 58 2f e8 03 62 6e 90 e4 2c 61 f0 00 3b 7d 87 e8 7a d0 f4 88 e1 92 cd 57 d3 7c 62 d4 38 96 cc 8e c1 89 32 87 74 39 Data Ascii: h&?3X'$T\m^1::t[Z<-J<EP>#v;~`h145K?h'[<CfBrKn?*dDGnsy3DbT#}?VK%8FXpG%)E\|InW/jmj5X/bn,a;}zW\|b82t9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49965	3.89.179.162	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	689	OUT	GET /s/55128?_li_chk=true&previous_uuid=33b4c2382b6d4e4dad3bafd3033d027c HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=33b4c238-2b6d-4e4d-ad3b-afd3033d027c
2024-04-26 18:32:44 UTC	623	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Length: 0 Connection: close Location: https://d.turn.com/r/dd/id/L21rdC8xOTcxL2NpZC8xNzQ5ODczMjc1L3QvMg/url/https://i.liadm.com/s/53233?bidder_id=183658&bidder_uuid=$!%7BTURN_UUID%7D Set-Cookie: _li_ss=CggKBgjSARDjFw; Max-Age=2592000; Expires=Sun, 26 May 2024 18:32:44 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=33b4c238-2b6d-4e4d-ad3b-afd3033d027c; Max-Age=63072000; Expires=Sun, 26 Apr 2026 18:32:44 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 2 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49966	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	696	OUT	GET /roqad?uid=8b2f262a-441f-4f69-9075-2d2b920e1fd5&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:44 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:44 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49970	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	929	OUT	GET /xxrz/250x400/793/81/37/81372ed9dcce1a4c6528e51235ff77f4/81372ed9dcce1a4c6528e51235ff77f4.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:44 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: image/jpeg Content-Length: 74261 Connection: close Last-Modified: Wed, 24 Apr 2024 03:49:08 GMT Vary: Accept-Encoding ETag: W/"66288134-f834" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6942 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=avbRxCe6EYWc1KW9wGLYPWUwcZ0X7I2XI6JE041VpoVXpSG8UOVdS%2FsSXhNSLzJ5Bo8of0F5ThRAHHFvrAhds6JPnrFnY7e4M0H4VClVux1kTzxZAQvCe4X%2BtjhFTbCoGr4P"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a83eedfc7448-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:44 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 59 99 66 c0 51 be 5d 73 74 5f 55 63 68 02 8f cb 7e 23 a8 b0 70 f8 8e b7 fc 70 fa 9e b5 69 77 c3 de e7 37 a2 17 ac 74 dd 02 83 a4 98 ff 00 6d 8e 31 af 63 a1 58 f7 7c 65 ad cb 3e d4 33 da 13 28 a5 30 29 84 88 1d 28 74 c0 ea 0c 4c 04 fb 9b 72 fd 7c 60 4c 2e c1 47 64 46 6a e9 27 29 27 b1 66 7a af 33 41 f3 c1 fc e9 3f c5 5f 0e d7 52 64 b3 2e 2d 16 4b b6 34 e3 7f 9d 36 b4 a6 4f 8f 9f 39 de 1d 16 41 93 05 56 55 13 88 ad 5d 43 bd f9 02 bd 5a cc c5 95 ee 4f 36 ec d5 5a e6 5e 7b ab ed 72 c8 de ca 4e 3a b6 15 17 b1 3a 45 9a a4 90 45 c5 28 2d 1b 2d 0b e7 a3 c2 51 63 99 a9 ea b5 a7 e4 1f 5f 66 d3 bd f1 3e d3 15 3d d9 ee dd e5 68 df bd 53 0a 4c a9 73 94 49 4c be 2c ce 34 9f cc e9 5c 6f 26 83 8c 9f 9d 3d 06 a1 17 95 8d 19 3d c9 13 a5 13 11 4a 4c d4 6b e3 43 46 d4 ca e6 Data Ascii: YfQ]st_Uch~#ppiw7tm1cX\|e>3(0)(tLr\|`L.GdFj')'fz3A?_Rd.-K46O9AVU]CZO6Z^{rN::EE(--Qc_f>=hSLsIL,4\o&==JLkCF
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 94 ac 2c 94 52 11 55 db 4f df 9b 98 59 dc e7 c2 24 30 8e 8d 21 bd a4 4c ad 27 14 d2 1f 21 46 b2 5b de e0 20 ee ff 00 9e cc 07 08 20 c9 95 05 77 32 0d 91 21 1d 40 49 fc 99 30 aa 1d cd 3e 2b 64 67 08 97 16 ca 30 0d 0f 35 1c 87 6b 9b fa d9 7d 9a 82 40 01 8f d4 2c ad b8 78 86 80 79 d6 31 3a 88 f5 3a 76 8b 3d c1 e0 d6 c5 db dc 7c fd 09 0b ea d7 26 1e ee 64 c0 bd 0c 2c c5 31 87 ee b5 3c 2e d3 2e eb b1 d1 cc b4 cf e7 b6 5f 91 2e 65 8d 9e 7d 47 c7 2f d7 91 e0 b2 c7 51 68 de 2e 5f 9d 1b 6d 3d 28 fa 0e 8a 5a 4d 1f ed 30 d4 f4 a5 25 b9 0d 61 8f 45 ec 4d 39 aa 01 3a c5 b9 bc 65 67 76 f1 a6 e2 7e 95 87 85 74 19 7e 37 14 7b d7 61 b2 da 9e c8 71 8e 40 f9 66 f8 67 4a 3a af ce 3b a4 08 e7 a5 fc b2 e8 89 16 98 eb ac e7 5d 4b a2 d9 58 88 02 3f c8 6c 3d 39 ab f1 51 4d 2c a5 Data Ascii: ,RUOY$0!L'!F[ w2!@I0>+dg05k}@,xy1::v=\|&d,1<.._.e}G/Qh._m=(ZM0%aEM9:egv~t~7{aq@fgJ:;]KX?l=9QM,
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: f0 5e 2d 84 dd 14 f0 64 eb 1c 71 fc 75 ce b9 c6 71 9d 73 ae 74 c5 66 75 c8 96 ed 3b 64 99 1c 9b 9c a6 12 f2 59 1d ca b7 a3 00 9d 9d d0 53 6d ac 64 43 8a fd 76 58 8b 93 62 ac 95 b7 ae 72 ad 13 fd 6c 8e 6e 5a 9f b6 77 ea 9e bf 6a 4d d7 d9 2e 39 ab 5b 0c f4 c6 62 1b 5d 98 37 d7 52 6b f2 db 19 7e d7 8c e3 38 ce b9 d3 3a e7 5c e9 9e bc f5 e4 31 af 59 32 95 80 d8 1a ab 29 ce ed 8e e4 88 34 41 45 d4 ec 1d 3a b6 f2 07 73 54 94 a4 94 15 18 b1 d1 9b c1 20 fc 19 51 48 e1 a8 4b f6 bc 11 50 08 8a 05 60 f2 d5 e5 21 82 8f 63 e8 e7 0c e1 f1 c0 6f e2 6b 1c 7f 1c 67 19 c6 22 67 4c e9 9d 33 d7 9e bc aa 9c de b2 10 67 16 d9 0c b1 6c 1a ff 00 df 8e 88 35 e4 5a bd 93 ea 26 45 60 44 d9 f5 cb f9 37 2b 15 14 99 2d de b0 c6 ea e7 b7 f5 c5 2a 33 23 bd ae 47 aa 37 25 27 51 f4 f5 38 Data Ascii: ^-dquqstfu;dYSmdCvXbrlnZwjM.9[b]7Rk~8:\1Y2)4AE:sT QHKP`!cokg"gL3gl5Z&E`D7+-*3#G7%'Q8
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: a6 7d 39 5a e2 90 9a 9b d3 fe 30 4f 24 6a 82 cd 98 cd 2e a2 39 25 5c 94 44 56 f8 d5 79 d2 85 21 a8 f7 bb ae b0 09 c3 e1 4e 33 8f 5e 44 4a a8 55 f5 80 7e dd 6a 6b 2b 12 27 38 3e 78 e7 18 25 76 28 d7 8f 03 44 a4 1e d9 e5 2f 35 ca d7 2d 3c 65 e7 3b 1b ed 83 fc 85 0d 14 db 6a 7a f7 da 4c f1 0d 54 9a dd cb 74 75 61 ec e7 8e 93 67 a6 06 b1 02 29 c7 ad 46 7b 69 1e 28 16 fb 64 d1 4a b4 80 ef 6b ee 69 18 c8 f4 32 61 b6 82 6d 2b 0d 1a de 4c 67 e9 82 01 57 25 a3 c6 9e 2d dc a1 44 ad 7e b1 a9 48 93 ba ed f5 e3 ae 8d 21 ed 48 13 95 33 5e 9f 0f f1 74 b3 5a 39 1b 5d 4c 39 ad 98 07 c6 78 bf d7 d6 2a 37 08 8d eb fe 91 55 73 8c 6b 51 ce f1 c5 1d c3 ae 6b 68 a1 50 8e 4d fc 45 1c 9b f0 c5 5f f9 af c6 1c 0f 2c 3a 58 3f 2c c9 24 84 7a d3 b5 b0 80 29 12 98 93 71 94 11 c6 c9 94 Data Ascii: }9Z0O$j.9%\DVy!N3^DJU~jk+'8>x%v(D/5-<e;jzLTtuag)F{i(dJki2am+LgW%-D~H!H3^tZ9]L9x*7UskQkhPME_,:X?,$z)q
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 5d b8 63 0e 34 69 bc b9 0a f5 e7 bb f2 41 54 23 31 d1 e7 97 29 cf 7f b0 a7 50 a3 85 8a 3f 63 9e c7 61 84 d2 a1 47 c8 c8 26 7b fa 89 ab 1c 4a e4 0a b0 48 c9 a4 31 07 d9 16 2c 96 7c 88 f6 2a e0 8e b0 04 c9 96 23 21 92 1b 4f 2a 6c a8 f1 d6 5c d1 bd 96 c4 71 52 a6 59 18 db 09 a6 6c 79 65 8d 25 d6 da e3 6d 5f a5 e8 4d a1 d6 bb 64 8e 38 96 34 e3 b6 59 ca 74 99 47 52 b8 c6 3a 15 ac e1 8e 2c f6 39 a8 f2 34 44 2b 71 cc 7a e2 23 42 19 3d 44 74 7c 37 b0 5c 23 18 ae 2a 82 43 7a 82 6a 10 26 3b 82 c8 a6 e9 8f 9a 20 4e e1 49 81 b2 8e 39 44 99 d3 0e e6 a9 53 90 d7 d5 10 90 05 f2 48 eb 21 19 19 9a f4 35 b9 2d ce c5 da 3b e4 fd 1a 4f d9 f9 7a ab 57 96 39 3a 9d 7a c6 01 d7 82 35 51 91 41 cc 8f 6b ba a7 1f 1d 13 bc db 01 14 2c 90 13 19 e1 fd a4 38 9c 3e 23 5a c5 0b c4 14 86 Data Ascii: ]c4iAT#1)P?caG&{JH1,\|#!Ol\qRYlye%m_Md84YtGR:,94D+qz#B=Dt\|7\#*Czj&; NI9DSH!5-;OzW9:z5QAk,8>#Z
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 5c 38 3d 73 9e ab d9 38 7b ba 22 3d 57 38 5c 6b 7e db f5 88 e6 35 ad 27 6c 77 ec 9f 1d 72 54 74 34 e7 41 1b 59 36 37 ad e4 8a df 8a c4 f5 39 a8 8b 9c 21 56 3b 54 4e 62 30 f1 db 09 83 7c 68 bd 9d 53 5c ac 7c 0a e6 23 2e a3 08 56 d3 82 90 a7 af d2 e7 d6 47 fb 20 04 9f 1c ee e3 0b 23 aa 8a 42 b9 1c de ed ff 00 e3 74 76 29 b0 91 7d 6c 47 35 55 5d f6 37 63 51 ab 9d 1b 9f ff c4 00 42 11 00 02 01 03 02 04 03 05 05 06 04 03 09 00 00 00 01 02 03 00 04 11 12 21 05 13 31 41 22 51 61 06 32 71 81 a1 14 42 91 b1 f0 10 23 52 62 c1 e1 15 43 d1 f1 07 72 82 24 25 33 54 73 74 93 b3 d2 ff da 00 08 01 03 01 01 3f 01 54 fa d7 71 e6 4e d4 a8 23 8b af 88 fe 63 ad 67 7f 97 e7 4a 06 e5 bd d5 52 4f e4 3e b4 bd 35 1d a8 46 cf ee 82 c7 c8 0c d2 59 dc bf f9 4c 3e 54 96 77 51 e0 a4 7b Data Ascii: \8=s8{"=W8\k~5'lwrTt4AY679!V;TNb0\|hS\\|#.VG #Btv)}lG5U]7cQB!1A"Qa2qB#RbCr$%3Tst?TqN#cgJRO>5FYL>TwQ{
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: c7 ff 00 0c 9f fe 69 5a 44 6e e0 e7 7f 88 ae 1e d7 10 e9 32 2b a2 95 ce a7 52 a3 4e db ae ac 64 57 18 47 96 f1 a5 d1 2a 07 03 4e b5 29 ac 7f 12 ea dc 8f 5c 63 ca a2 8e 49 b6 8d 1d d8 75 54 52 e4 7a e1 7b 7a f4 a8 63 91 c1 e5 c7 23 e9 19 6d 28 4e 90 3b 9c 67 03 d4 ed 5a bc aa 4b 3b 96 8c 48 b6 f3 94 c6 a0 c2 19 0a 91 e6 0e 31 8a 48 9c 1d d7 14 22 3e bf ac 51 3e 55 ec 0d 91 37 17 dc 65 e2 69 93 86 db 49 c9 8d 54 bb 4b 73 2a 9c 2a 28 07 53 72 c3 0e 9b 19 05 7b 7f 64 ee 78 67 1b 48 5e 1f b7 5b 24 57 51 b2 95 78 ee 11 35 28 65 38 39 d3 98 cf fe 9d 7b 3c cf fe 35 c2 87 6f b7 da f6 cf f9 c9 5c 43 ed 10 af 1d 9f 89 cf 05 c7 07 fb 3a a5 b5 9a 47 cc 96 29 8c 51 83 cc d3 18 2a 59 98 10 18 b6 90 c1 ce 9c 54 36 fc 45 35 fd 9b 9b cb e5 fb a3 f7 9b 9c 1f 0e 46 57 de fc Data Ascii: iZDn2+RNdWGN)\cIuTRz{zc#m(N;gZK;H1H">Q>U7eiITKs(Sr{dxgH^[$WQx5(e89{<5o\C:G)QYT6E5FW
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: c8 23 ae 76 1e 95 37 03 b5 9f 58 55 d2 48 38 41 93 bf 7f 03 6b df d4 3e f5 71 ec 8f 83 28 a4 11 bf 84 91 9f 8a 37 f4 35 7d 67 2d 8c 9c b9 07 5d d4 ff 00 10 a7 19 cf a7 f5 ad 87 5a 96 45 45 11 46 70 8a 02 0e e4 e7 1b d7 08 bd b6 e1 c2 e7 9e 5b f7 f6 fa 13 42 ea 3a ba ef bf e2 6a 67 27 7f 3a ff 00 15 8a 1f 67 ee 38 7a 3c d1 de 49 72 b2 c6 d1 e5 57 4e a8 9b ff 00 10 10 54 f8 2a 5e 37 6f 37 b3 a9 c2 e5 79 da f9 6f 79 cc d2 82 ca 63 d6 df e6 64 9f bd 90 31 f3 ab 09 56 de fe de 57 c9 58 2e 61 95 88 f1 1d 31 c8 8c 40 5f 3c 7a d7 15 e2 dc 2b 88 24 b2 43 71 c4 39 cc 23 09 11 ca db 12 ba 77 31 8e fb 67 6e fb d2 48 ba 46 d9 c9 c0 1e 5f ac d3 2e ae bf 8f 96 76 a6 71 08 6d b3 b7 cb 75 03 a8 ae 1f 2b 17 66 39 0a 3a 1c e3 a6 06 3f db 7a 5b 94 8c e4 30 d2 b9 24 1c 9c c8 Data Ascii: #v7XUH8Ak>q(75}g-]ZEEFp[B:jg':g8z<IrWNT*^7o7yoycd1VWX.a1@_<z+$Cq9#w1gnHF_.vqmu+f9:?z[0$
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 4d 26 99 25 58 89 08 c7 d7 1f 2d cd 73 da 33 af de 27 08 47 9f 4c 6d e9 83 f8 d2 dc a0 d4 ab 83 98 b4 8f e5 7c e7 1f 0c 12 07 a9 a9 e5 93 52 85 73 84 00 0c 1c 60 f5 6f a9 a6 66 ea 7f a5 13 9a 5a 23 04 d4 91 90 58 63 7d fe 06 84 72 2b ea c6 07 97 95 2b 69 a0 e1 c7 41 92 31 5a 3d dc f5 5e 87 f0 ff 00 4a 82 3d 47 a6 29 d9 2d e0 2f fc 28 4f 5c 1f 0e e4 8a e2 5c 5a 4b 86 d2 92 48 c8 47 f1 91 a4 f9 0c 63 e3 bf 7c ef 5a fd 3e b4 73 a4 fc 45 6f d7 a5 64 9e b4 46 46 db 8f 3a d1 9a c6 00 fd 79 51 5d f3 4e 3c 5f 3c 7d 29 d1 41 3f 03 fd 29 3a 52 f5 a4 00 ac 64 8d fa 55 9a 8d b6 fd 6d 5c 51 b1 1c 23 62 0b a8 20 f7 07 c2 47 cc 13 52 ed 24 80 6c 03 b0 1f 8d 2d 7f 96 df f3 a7 e5 4c 48 c5 31 ca 64 f5 3f da a3 63 a3 f5 e5 4a 4e f4 a7 22 96 bf ff c4 00 43 11 00 02 01 02 04 Data Ascii: M&%X-s3'GLm\|Rs`ofZ#Xc}r++iA1Z=^J=G)-/(O\\ZKHGc\|Z>sEodFF:yQ]N<_<})A?):RdUm\Q#b GR$l-LH1d?cJN"C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49962	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	570	OUT	GET /400/4724873 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072
2024-04-26 18:32:45 UTC	849	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: application/javascript Content-Length: 83833 Connection: close X-Trace-Id: aa2927ea929e9cad9f5236b00c2b4345 Timing-Allow-Origin: * Expires: Tue, 11 Jan 1994 10:00:00 GMT Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Pragma: no-cache Vary: Origin Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:44 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:45 UTC	15535	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 28 66 75 6e 63 74 69 6f 6e 28 65 69 29 7b 28 28 29 3d 3e 7b 65 69 2e 65 3b 76 61 72 20 74 3d 65 69 2e 6d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 65 69 2e 44 4e 5d 28 74 2c 65 69 2e 6a 41 29 2c 65 5b 65 69 2e 77 7a 5d 28 74 29 2c 65 5b 65 69 2e 4c 44 5d 28 74 29 2c 21 65 69 2e 71 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 65 69 2e 76 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 5b 65 69 2e 52 44 5d 3d 65 69 2e 50 28 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 65 69 2e 61 5d 28 74 5b 65 69 2e 76 44 5d 2c 65 69 2e 51 69 2c 65 69 2e 50 28 65 69 2e 4a 6d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: (function(options) {(function(ei){(()=>{ei.e;var t=ei.m,e=function(e){try{return e[ei.DN](t,ei.jA),e[ei.wz](t),e[ei.LD](t),!ei.q}catch(t){return!ei.v}},n=function(){function t(){this[ei.RD]=ei.P()}return Object[ei.a](t[ei.vD],ei.Qi,ei.P(ei.Jm,function(){r
2024-04-26 18:32:45 UTC	16384	IN	Data Raw: 65 69 2e 76 3f 78 74 3a 6e 65 77 20 44 61 74 65 28 29 5b 65 69 2e 66 5d 28 29 29 3a 6b 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 78 74 3d 2d 65 69 2e 76 7d 2c 65 69 2e 44 6d 29 7d 76 61 72 20 4d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 6e 7c 7c 65 69 2e 46 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 69 2e 51 69 5d 29 66 6f 72 28 76 61 72 20 6f 2c 72 3d 65 69 2e 71 2c 69 3d 65 5b 65 69 2e 51 69 5d 3b 72 3c 69 3b 72 2b 2b 29 21 6f 26 26 72 20 69 6e 20 65 7c 7c 28 6f 7c 7c 28 6f 3d 41 72 72 61 79 5b 65 69 2e 76 44 5d 5b 65 69 2e 4f 5d 5b 65 69 2e 77 63 5d 28 65 2c 65 69 2e 71 2c 72 29 29 2c 6f 5b 72 5d 3d 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 5b 65 69 2e 41 69 5d 28 6f 7c 7c 41 72 72 61 79 5b 65 69 2e 76 Data Ascii: ei.v?xt:new Date()[ei.f]()):kt=setTimeout(function(){xt=-ei.v},ei.Dm)}var Mt=function(t,e,n){if(n\|\|ei.F===arguments[ei.Qi])for(var o,r=ei.q,i=e[ei.Qi];r<i;r++)!o&&r in e\|\|(o\|\|(o=Array[ei.vD][ei.O][ei.wc](e,ei.q,r)),o[r]=e[r]);return t[ei.Ai](o\|\|Array[ei.v
2024-04-26 18:32:45 UTC	16384	IN	Data Raw: 69 2e 6d 63 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 69 5b 53 79 6d 62 6f 6c 5b 65 69 2e 58 44 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 69 3b 66 75 6e 63 74 69 6f 6e 20 63 28 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 65 69 2e 54 51 29 3b 66 6f 72 28 3b 61 3b 29 74 72 79 7b 69 66 28 6e 3d 65 69 2e 76 2c 6f 26 26 28 72 3d 65 69 2e 46 26 69 5b 65 69 2e 71 5d 3f 6f 5b 65 69 2e 79 55 5d 3a 69 5b 65 69 2e 71 5d 3f 6f 5b 65 69 2e 5a 55 5d 7c 7c 28 28 72 3d 6f 5b 65 69 2e 79 55 5d 29 26 26 72 5b 65 69 2e 77 63 5d 28 6f 29 2c 65 69 2e 71 29 3a 6f 5b 65 69 Data Ascii: i.mc==typeof Symbol&&(i[Symbol[ei.XD]]=function(){return this}),i;function c(i){return function(c){return function(i){if(n)throw new TypeError(ei.TQ);for(;a;)try{if(n=ei.v,o&&(r=ei.F&i[ei.q]?o[ei.yU]:i[ei.q]?o[ei.ZU]\|\|((r=o[ei.yU])&&r[ei.wc](o),ei.q):o[ei
2024-04-26 18:32:45 UTC	16384	IN	Data Raw: 6d 29 3b 74 72 79 7b 77 69 6e 64 6f 77 5b 65 69 2e 57 5d 5b 65 69 2e 72 5b 65 69 2e 41 69 5d 28 65 69 2e 71 62 29 5b 65 69 2e 41 69 5d 28 65 29 5d 3d 6e 65 77 20 44 61 74 65 28 29 5b 65 69 2e 66 5d 28 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 68 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 6f 3d 6e 65 77 20 44 61 74 65 28 29 5b 65 69 2e 66 5d 28 29 2c 72 3d 74 5b 65 69 2e 75 6d 5d 2c 69 3d 74 5b 65 69 2e 4f 45 5d 3b 69 66 28 69 29 76 61 72 20 61 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 21 65 7c 7c 65 5b 65 69 2e 6f 62 5d 29 74 68 72 6f 77 20 65 69 2e 51 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 65 28 29 5b 65 69 2e 66 5d 28 29 2d 6f 3b 63 6c 65 61 72 49 6e Data Ascii: m);try{window[ei.W][ei.r[ei.Ai](ei.qb)[ei.Ai](e)]=new Date()[ei.f]()}catch(t){}}(h),function(t,e,n){var o=new Date()[ei.f](),r=t[ei.um],i=t[ei.OE];if(i)var a=setInterval(function(){try{if(!e\|\|e[ei.ob])throw ei.Q}catch(e){var t=new Date()[ei.f]()-o;clearIn
2024-04-26 18:32:45 UTC	16384	IN	Data Raw: 61 27 5d 2c 5b 27 67 77 27 2c 27 70 79 76 70 78 27 5d 2c 5b 27 4b 77 27 2c 27 76 73 65 6e 7a 72 5f 79 6e 61 71 76 61 74 5f 68 65 79 27 5d 2c 5b 27 47 77 27 2c 27 6f 79 68 65 43 6e 74 72 27 5d 2c 5b 27 52 77 27 2c 27 62 68 67 66 76 71 72 50 79 62 66 72 27 5d 2c 5b 27 48 77 27 2c 27 7a 66 74 46 67 6e 67 72 27 5d 2c 5b 27 68 77 27 2c 27 66 72 66 66 76 62 61 27 5d 2c 5b 27 65 4e 27 2c 27 70 65 72 6e 67 72 5a 72 66 66 6e 74 72 27 5d 2c 5b 27 69 4e 27 2c 27 66 68 6f 70 62 61 67 6e 76 61 72 65 46 67 6c 79 72 66 27 5d 2c 5b 27 6d 4e 27 2c 27 76 73 65 6e 7a 72 46 67 6c 79 72 66 27 5d 2c 5b 27 7a 4e 27 2c 27 74 72 67 5a 6e 6b 4e 70 67 76 69 72 5a 72 66 66 6e 74 72 66 27 5d 2c 5b 27 77 4e 27 2c 27 70 62 79 79 72 70 67 52 65 65 62 65 5a 72 66 66 6e 74 72 27 5d 2c 5b Data Ascii: a'],['gw','pyvpx'],['Kw','vsenzr_ynaqvat_hey'],['Gw','oyheCntr'],['Rw','bhgfvqrPybfr'],['Hw','zftFgngr'],['hw','frffvba'],['eN','perngrZrffntr'],['iN','fhopbagnvareFglyrf'],['mN','vsenzrFglyrf'],['zN','trgZnkNpgvirZrffntrf'],['wN','pbyyrpgReebeZrffntr'],[
2024-04-26 18:32:45 UTC	2762	IN	Data Raw: 2e 4a 2e 6d 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 58 57 5a 2e 23 2e 4a 2e 54 2e 29 2e 55 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 28 28 2e 62 2e 23 2e 4a 2e 30 2e 78 2e 78 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 2c 36 6c 4d 6f 57 39 28 28 2e 62 2e 23 2e 4a 2e 5f 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 40 45 23 6c 36 3a 68 71 6c 4e 5a 6f 36 3a 2e 23 2e 4a 48 57 4d 23 6c 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 40 45 3a 6c 36 7d 57 4d 2e 23 2e 4a 2e 6d 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 40 45 3a 6c 36 7d 57 4d 2e 7c 6f 35 71 4d 6c 2e 23 2e 4a 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 28 71 77 6c 6f 69 3a 2e 23 2e 4a 2e 5f 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 28 71 77 6c 6f 69 3a 2e 7c 6f 35 71 4d 6c 2e 23 2e 4a 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 Data Ascii: .J.m.V.#HW~lZi#3.XWZ.#.J.T.).U.V.#HW~lZi#3((.b.#.J.0.x.x.T.V.#HW~lZi#3.,6lMoW9((.b.#.J._.V.#HW~lZi#3.@E#l6:hqlNZo6:.#.JHWM#l.V.#HW~lZi#3.@E:l6}WM.#.J.m.V.#HW~lZi#3.@E:l6}WM.\|o5qMl.#.J.T.V.#HW~lZi#3(qwloi:.#.J._.T.V.#HW~lZi#3(qwloi:.\|o5qMl.#.J.T.V.#HW~lZi#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49971	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	929	OUT	GET /xxrz/250x400/793/e8/ad/e8ad60dd67c5bc3f2f133058d0b16dc9/e8ad60dd67c5bc3f2f133058d0b16dc9.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:44 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: image/jpeg Content-Length: 33337 Connection: close Last-Modified: Sun, 07 Apr 2024 13:02:14 GMT Vary: Accept-Encoding ETag: W/"66129956-6d90" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6941 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z3ENhuLeZebOCti7dXbHDrIhuSJlNsR5bKsoplTK%2BHkteu2Dglq0yK1S8DlV%2BoBvVUL1%2Bir5Lsjt4aeyLehX4N5mmG565E0L4%2FQzUSRE8oCVSMgKaOzxlXTr4yELKQoeQvwc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a83f4b924978-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:44 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 76 17 d8 ce d0 4b f3 41 65 5c bf c3 e3 38 b1 38 05 4a 42 c5 00 1c 00 a0 02 00 00 00 00 00 94 a9 23 00 04 be 72 4c 67 23 52 df 5e 19 a0 57 93 e7 bc b7 98 db 6d d6 67 3c 5a 3c d3 83 ad bc d7 59 2c c5 55 f4 ff 00 62 82 5f 7a 13 b5 ac b8 94 a9 36 1f 01 0e 36 e0 a0 03 80 1c 00 00 03 40 00 00 04 a5 49 18 00 25 ec 91 23 49 16 98 fa df cf 7c fe bf 74 3a 69 c9 ba cd be c4 c7 93 05 b6 b5 64 d3 6c 69 a5 c0 ad be 87 fa 34 4a f1 51 8f 46 8b 8c 4a 93 61 70 38 e3 6e 0a 00 38 00 00 00 00 00 00 00 12 95 65 18 80 15 2e f4 83 1b f7 f4 ef d6 1e 6e 8b 5d aa 4f 35 e4 94 37 8c cb 39 69 3b 1a fb 6a bd 9d d0 a4 f7 2e 03 dd 1b d4 86 ea 52 a3 1f 1e 95 a2 7d c2 a3 8d b8 28 00 e0 00 00 00 00 00 00 00 4a 54 91 80 02 5c de ee 35 ef 2a 4f a8 be 35 28 bd d5 ae 43 45 c3 d9 3a b9 a7 21 72 Data Ascii: vKAe\88JB#rLg#R^Wmg<Z<Y,Ub_z66@I%#I\|t:idli4JQFJap8n8e.n]O579i;j.R}(JT\5*O5(CE:!r
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 8e 58 32 69 59 c0 67 8b 7a fe 40 62 d8 6e fa 40 ff 00 1e 8e 80 2b 30 a0 7a 7f ff c4 00 34 10 00 00 05 03 02 02 08 05 05 00 03 00 00 00 00 00 01 02 03 04 05 00 06 11 10 12 20 35 13 14 21 22 30 34 36 40 15 25 31 32 33 16 23 24 26 41 42 43 46 ff da 00 08 01 01 00 01 05 02 f0 03 4b 3b d3 da 67 83 1a 0e 97 37 3c f6 96 7f a7 73 a8 e9 9e 0c 55 cd cf 7c 7c 70 d9 de 9e e2 1e 0b 97 9e 7b 01 e0 b3 bd 3d c0 3a e2 b1 a5 cd ce f4 0f 18 78 2c ff 00 4f 6a 34 3c 57 3f 3c d0 3c 61 e0 b3 bd 3d ae 38 ee 7e 7b a0 78 c3 c1 67 fa 7b 80 43 84 2a e6 e7 9a 07 b2 b3 c7 fa f6 28 43 4c 51 dc 22 45 35 1d 2e 5e 79 ed 2c ff 00 4f 6b 77 cc ab 18 c8 cb ae 63 d9 93 4a bd 4a 82 87 4b 97 9e 7b 01 e0 b3 fd 3b ad e4 c5 65 de bf 66 97 5b b5 e3 5c 27 35 c1 73 73 df 60 3c 16 7f a7 75 77 b3 a0 7d Data Ascii: X2iYgz@bn@+0z4 5!"046@%123#$&ABCFK;g7<sU\|\|p{=:x,Oj4<W?<<a=8~{xg{C*(CLQ"E5.^y,OkwcJJK{;ef[\'5ss`<uw}
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 4b 4d c8 9a 83 a5 89 9e a9 74 21 f1 18 44 52 04 51 b7 79 f4 e2 4a 25 78 5e fd 91 e4 fb 58 31 4d b3 a6 a6 3f ea 9e ae 06 77 7c 15 d2 8f 21 1b 2c d6 29 5b 4a 74 a5 b4 1d f5 59 8e e9 69 cb 81 78 e8 87 e8 ce 83 47 0c db 1a 3f 17 75 c1 df 84 b0 53 cb e9 22 03 b8 eb 27 9d 3b 6e 57 6d 8e 99 92 b6 e8 28 74 00 ce b6 17 95 03 a4 b0 90 fb cf 09 dd b9 e7 77 7e ae be b9 69 d7 23 76 f4 c7 d5 73 73 6a c5 3d ba 80 bf 05 8b 7f f1 36 2f 2f 7d 87 4b 72 35 36 7d 90 c8 7e 3a 8f 70 29 43 65 3c 4b 6e 3c 2d 88 96 19 c4 ab d3 85 b0 8f 57 b9 4e e0 84 56 50 33 1a 1a 0e 87 2a 68 86 96 26 00 ac dd ed b9 a1 5c f5 a3 44 7a b6 58 b9 bc 2f ae 59 39 c8 a1 de 75 f8 d6 66 c5 dd 78 f6 c8 5d 3c 86 d4 e4 2f d3 38 bd 0a 9c e4 89 81 7a 1a 68 39 b7 53 93 fe a3 23 e9 eb 39 3d 90 6c 24 58 3f 16 48 Data Ascii: KMt!DRQyJ%x^X1M?w\|!,)[JtYixG?uS"';nWm(tw~i#vssj=6//}Kr56}~:p)Ce<Kn<-WNVP3*h&\DzX/Y9ufx]</8zh9S#9=l$X?H
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 9b 7e 3c 3f 6f 9b 21 3a 91 91 b2 60 f0 ca 99 7b ee 98 9e ac 79 53 b9 cc cd 79 65 3f 21 14 10 47 a8 b9 54 99 a8 fd 8d a4 60 92 a2 a5 9e aa 24 fd a7 0d ef cc 4f 88 ff 00 0c 79 2e 3e a4 e4 9a e3 64 f6 46 66 79 49 fe 92 a9 74 cd 56 f0 f8 a9 fb 71 e5 4e ef 33 27 65 f1 e1 98 87 dd b3 71 dc 3e 93 fb 30 9f 7e 7a f9 b2 2c 9f e0 56 51 17 e9 96 28 03 fd 97 17 1e 51 19 46 75 6d 34 ec c9 11 e8 81 9a 54 07 22 4b 69 d5 b8 97 d7 aa 57 32 37 20 04 29 b5 ea 71 f5 a0 85 a9 b2 09 04 6a 49 51 45 36 9b 2e ad 2b d0 60 a0 38 ff 00 a2 ce 97 a4 9d 20 b3 4e 82 fd 42 49 bd 8d 8a 63 c5 75 49 1d ea b0 b8 bd f1 0e 33 d3 24 22 3c 74 eb 75 c0 bb 27 c5 2d a1 4e ac ff 00 65 0d a9 5e cc 70 3e 8d 13 2f e4 f7 3d 1e 5b f2 1c 9d 50 79 f9 c9 73 47 2a 3c c6 5a 66 2b cd 46 5a 10 90 eb 43 95 fc 68 Data Ascii: ~<?o!:`{ySye?!GT`$Oy.>dFfyItVqN3'eq>0~z,VQ(QFum4T"KiW27 )qjIQE6.+`8 NBIcuI3$"<tu'-Ne^p>/=[PysG*<Zf+FZCh
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: bd c5 ae 7b ad b8 b6 fb 1b ec 7b fd 7e 6a 14 84 fb 8d 48 49 b0 b5 2e 00 fb 22 b5 8c ea 95 49 cb 95 14 a6 fd 94 b6 f2 80 ef 4b 2f 21 c3 eb d8 26 f8 c8 13 9a 4d 1c c5 0e 0e 63 72 1d 5a c1 23 57 6b 40 4f 5d ec 12 90 91 ea 16 c5 65 e4 4d ce ed 14 00 e1 13 a9 ec 9b 74 5a 9b e4 85 0f ec ee 93 fd 1c 21 f5 04 ee 7d bf 8f b3 1c 51 77 99 4b a7 8e b6 9e 4f fa bb 98 db 7f d1 eb 37 1f 66 d7 f1 f0 ef b8 4e 1c 48 43 8b 42 5c 43 a9 42 d4 90 e3 7a c2 1c 09 36 0e 23 98 86 dc d0 ab 6a 4f 31 b4 2e c4 6a 42 55 74 82 76 03 b3 61 de 12 01 de c4 82 ab 05 2a dd 3b 44 81 be 9d 8e f8 07 5a ee b5 04 ea 3b ac 83 61 7e a4 84 24 9f fd 29 3f 46 0a ca 8d cf 5f dd b0 f6 01 b0 f5 61 40 25 28 51 b1 e6 20 90 12 e3 67 49 0b d3 db 09 2a 52 6f a5 56 42 c3 6a b1 42 ee a4 fc 6f d9 d7 0d ba 5b 0e Data Ascii: {{~jHI."IK/!&McrZ#Wk@O]eMtZ!}QwKO7fNHCB\CBz6#jO1.jBUtva;DZ;a~$)?F_a@%(Q gIRoVBjBo[
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: a9 dd 44 11 aa ea 29 1c be 89 d0 13 d4 ea b9 df 1e 4d b7 ff 00 75 ec ba 90 4a 4a a2 57 93 a8 5a e9 fc c9 3f 71 a8 29 37 1d 77 04 7a b1 4d a2 53 e2 66 5a 9e 69 4c a6 df 9b 5f a6 d1 a8 2f 2d 08 4a 03 93 32 f3 95 c5 4a 70 69 27 4b 8f 21 c0 d3 8c 8f e2 bd cd d2 49 d3 b4 93 a7 85 34 74 7f d1 38 e0 e3 76 b7 ca 4f 10 6a 0b dd 44 ee 34 b9 f3 49 26 dd 2c 6f 97 a4 b5 1b 8a bc 5a 7a 43 89 69 86 28 79 06 43 ae 2b 64 34 d3 70 2b a5 d7 14 7e 6a 52 8d 4a 3d c0 7a b1 9c a9 51 a8 ee f0 e2 0c 25 2d 96 57 c4 c5 48 6f 4f 2e f1 d7 55 8b 98 e7 3a 86 02 90 52 10 dc 89 6e 29 a4 a9 2b 09 16 04 14 00 91 c5 46 28 79 c7 24 f1 3b 2e 53 6a 52 61 54 72 9a e2 d7 b3 22 13 1a c2 63 f1 e9 2d d6 23 34 f2 d4 80 db ed ca 87 11 90 1c 60 85 30 fc 36 75 20 a1 1c b7 78 af 46 e1 0d 43 26 70 dd cc Data Ascii: D)MuJJWZ?q)7wzMSfZiL_/-J2Jpi'K!I4t8vOjD4I&,oZzCi(yC+d4p+~jRJ=zQ%-WHoO.U:Rn)+F(y$;.SjRaTr"c-#4`06u xFC&p
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 29 3a f4 29 2a 50 50 3b e2 a1 4e 72 5a d0 b1 60 52 92 92 76 df a9 17 e9 df b5 fb bd 78 76 2b 8c 3b ca 77 b2 ab 81 b6 e2 c6 db ea 17 16 b1 bf 7f ae d8 6e 94 b2 eb 4a 52 52 94 37 ca 0b 09 29 b1 d0 13 b9 1d 4a 97 6e d1 ef 37 38 ed ec 41 29 20 dc 2d 2a b2 81 1d e0 8d c1 c5 65 6e a5 31 1e ba 41 6d dd 90 a6 d0 b4 ea 4a 41 49 52 54 0b 6b 1d 9b 14 29 05 2a 04 85 02 3a f2 97 cb e7 0d 25 04 90 74 a9 25 48 b5 ad ad 1a 8a d0 15 aa c8 2b 00 2e ca d2 4e 93 82 8b 36 97 35 a0 eb 5b 88 d0 15 f0 89 e5 86 d5 a9 69 ee 42 f9 96 6c fc a5 36 e6 c3 4d c8 4a 2e da 42 96 a4 1b 2d dd 2d 0e 63 76 bf 33 48 2a ed 69 40 2b 1d b4 a5 42 da f4 11 d9 43 8b 69 5a da 71 68 50 b8 4a d0 a2 85 58 ec 77 4f 8a 6e 08 bf 7f 7e 37 59 ee bf 52 4a ad 72 7f a4 7c 77 f6 f9 88 ba 99 49 2a 29 d0 9d 89 3b Data Ascii: ):)PP;NrZ`Rvxv+;wnJRR7)Jn78A) -en1AmJAIRTk):%t%H+.N65[iBl6MJ.B--cv3Hi@+BCiZqhPJXwOn~7YRJr\|wI*);
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: bd ca a7 e1 0f e7 fb e7 3e f9 b5 d0 fa 9a 7f 73 84 28 3d aa b4 23 02 14 7b 67 4b 5e 4d 61 ac 77 3f 7c 3b c1 ff 00 d7 0d 78 69 6b b5 45 9a 07 54 13 24 2d d5 81 3a e1 42 7d a9 b3 aa 2e b8 b7 0e 58 d4 55 03 41 36 b9 fd f9 df 9b fe 61 d1 9c f6 67 97 a2 33 ec cf 86 73 d9 9f 78 04 08 92 75 d7 33 99 9f 40 d0 72 10 2c 95 05 09 13 a9 19 a5 49 32 92 41 c9 40 18 cb 23 a2 84 29 24 a4 83 d0 67 86 bf 9f 47 96 0e 5c 2d 51 ef ef 7c eb 9f 7c da ee 1e 3a cf 91 df 56 ab 5e 83 c6 47 cd a7 ed 55 a8 87 88 c7 34 bc 3d 25 42 c4 5a e8 1e 19 df 9b fe 61 d0 01 cf 39 9d 34 cb 2d 3d b9 f3 e5 68 b4 1e fd f4 8d fb df 3a e7 df 36 bb e1 35 4d 4f 12 53 fc 40 8f 6d af 16 88 7a 7e 49 48 8f 6d 98 4e 0a 1c c7 ee dc 3e 49 c4 74 b1 4d ae b1 0e b9 f3 7f cc 3a 53 d6 00 e6 92 40 38 4c 4a 7b 0e 12 Data Ascii: >s(=#{gK^Maw?\|;xikET$-:B}.XUA6ag3sxu3@r,I2A@#)$gG\-Q\|\|:V^GU4=%BZa94-=h:65MOS@mz~IHmN>ItM:S@8LJ{
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 01 5a 4a 13 4f 4e 55 20 66 4c e9 6a c6 2f 5a 3b c1 ba b6 6e aa ba b0 f5 c3 4b 44 43 6d bb d4 71 74 29 61 c9 29 69 c8 5b 2a 49 c4 da 82 55 97 00 41 b2 2e 9b cd 14 5b 2c 95 50 55 e3 a7 bc aa df 79 01 95 95 30 da ea a8 ca 4b e2 25 90 a4 21 6a 18 e3 24 e9 13 64 5c 95 74 75 db 50 db 74 af aa 99 db ba ad 34 6e 25 a5 94 3a 5c 7e 9d d6 99 69 40 42 dc 03 a9 85 39 e2 42 84 65 64 dd b7 8e e7 62 d5 dc 55 5e 27 56 f1 ab 01 87 0a a9 d3 fa 4d a7 25 e4 84 e2 6d 25 b0 54 14 a0 01 00 91 a5 a8 ea 2f 6b 96 fc be 9d 4d c7 5b 58 8b c2 b5 f2 d1 08 79 b4 96 d1 52 f2 f7 88 50 61 d0 e2 48 75 26 44 08 ce 73 b6 d6 d1 d5 d5 56 ec f2 e9 a9 9f a8 4b 15 8e 2d e5 34 da 96 96 52 5e a1 32 e1 48 21 00 84 28 ca a3 24 ab 91 b7 39 e2 7d 1d 9f d6 d7 6e cf d4 55 3b 59 dd 14 ce b4 1b da 0a 5a c4 Data Ascii: ZJONU fLj/Z;nKDCmqt)a)i[*IUA.[,PUy0K%!j$d\tuPt4n%:\~i@B9BedbU^'VM%m%T/kM[XyRPaHu&DsVK-4R^2H!($9}nU;YZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49972	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	699	OUT	GET /xxrz/1200x600/793/86/11/86112a473c75bb3e179e7892bdda6b84/86112a473c75bb3e179e7892bdda6b84.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:44 UTC	725	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: image/jpeg Content-Length: 591922 Connection: close Last-Modified: Thu, 21 Dec 2023 07:52:48 GMT Vary: Accept-Encoding ETag: W/"6583eed0-16b64d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6957 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pbvgwXX36%2BYNE0FnZxn6ASsNL6%2FEbWnnnKUCPB7PtWGR9S8twIcZQJCPeOsow9Nlo2i7Uhtokm7XbOrEwa7pHKGl1cMhw0b3M1Zm4A%2BsQhoLmN5cR6mI2xfrTO%2FcBTEMUl2c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a83f8fcd3dcc-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:44 UTC	644	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 01 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 9f 30 0b 6a 22 7f 29 80 6f b2 52 37 06 a3 16 88 ea d3 af d8 b3 89 48 5b fc ab ad 7c e1 16 d2 06 a4 86 30 f7 7d 2f 40 42 e4 56 6a 4c 04 a8 f5 84 78 36 52 1c 39 3a cd 15 89 10 62 19 64 86 bb 9a 27 c4 98 12 64 b7 9e 0f 58 d2 e9 5b ae 64 29 c0 7c 28 20 81 60 c9 c6 76 24 90 24 fd 84 27 26 4a 3f 64 e8 a0 bf 37 24 2a 52 09 be 12 5b 53 be 36 36 94 45 37 71 f5 ee 8c 3f 3a 69 c4 06 fe 63 db 02 5a 97 54 11 7d 1a a7 f8 aa f0 4c cc ba 25 02 31 d0 09 2c 0f cf 5d 8a d4 e2 38 f3 b7 73 6b 1d 9c 10 92 fb 72 83 0d c8 a4 92 b8 75 32 07 36 c8 fe fd cf d1 f6 b3 5e 7e 2c 93 4f ca c6 7a 12 40 12 18 04 ef bf 89 89 f1 85 10 78 0e 3b 13 20 fd 07 c6 40 c9 db 2e 91 a2 c4 5a e0 2e 5a 19 6d 88 84 82 96 07 34 50 88 9a 1c 68 5f 62 b3 38 81 05 86 0e 71 b3 80 d5 fa f9 31 84 ae b8 74 3d ea Data Ascii: 0j")oR7H[\|0}/@BVjLx6R9:bd'dX[d)\|( `v$$'&J?d7$*R[S66E7q?:icZT}L%1,]8skru26^~,Oz@x; @.Z.Zm4Ph_b8q1t=
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 2e 39 0c cd ec f5 a4 54 0c 5f 42 d3 ed 52 d5 31 9b bc 2d 99 65 06 60 61 cb 32 7b 06 eb c7 f6 fd 6b a3 4a ea 39 85 36 75 06 68 a5 45 2c 79 cf 24 52 9a 94 c4 13 ca 63 b0 80 64 50 e6 e0 e3 06 7e 5c d4 c0 8f cb 25 ac ea 1d 10 c2 2b 7e 67 6b 6a 40 15 df 44 f3 22 e9 61 80 ff 00 3e 44 49 f9 e9 3e 37 dd cf 28 f1 b6 dd 7c 17 d4 64 fd 18 b3 71 ca 9b 00 3e 1c 24 d0 0b 3a 0c b1 76 19 c1 20 f3 c2 6b d1 f7 ec 64 03 a2 92 d2 76 f6 78 c3 3d 15 09 cd 7a 01 3d fa 9e be 6c 0c ec db 5d 9e d7 39 88 ba 73 b7 ba 2b 1c d8 a8 ac 7a 61 eb f5 fa 47 99 e3 52 12 2c c8 d0 d2 d0 49 0c f1 9d 7a a9 01 37 93 47 da be 05 8a f1 f3 ea e7 71 a5 fe 92 80 a4 8e c7 24 c1 9e 2d 89 2a e4 93 6d 41 94 b4 da 76 72 56 0e 54 91 4a 0f 91 7f a4 9f 64 60 66 aa 8b 67 91 75 8e 4c e2 3d c3 5a 32 28 17 b5 71 Data Ascii: .9T_BR1-e`a2{kJ96uhE,y$RcdP~\%+~gkj@D"a>DI>7(\|dq>$:v kdvx=z=l]9s+zaGR,Iz7Gq$-*mAvrVTJd`fguL=Z2(q
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 22 de 1c 91 33 c1 79 14 6e 2f 6c ab ad b9 70 6e c9 2a 09 cc f2 36 3f aa f9 9e d8 1d 58 7c 28 6b 1e c8 ac 8b 12 0d cb 54 14 91 af 36 92 a9 35 94 5a 76 f9 92 fc f8 98 ef ae 03 11 09 1c 6a 8b ba ab e7 e1 5d 19 76 f7 3a 61 e6 9b 8d e6 1d 2e ce 95 c4 ce 28 eb e5 85 0b 47 25 21 7c 4a 2c 6e 2d 53 b4 ea 8c a2 4b 4a f9 83 d4 f8 4f ee 94 0f 50 be 1c d1 d1 fc 07 7b e6 f1 9d 71 1b 9c f5 9e 5b d7 95 3e a7 79 dd d4 d4 46 ed 88 39 76 37 92 db 4f 0f 6f b4 20 a0 92 a8 89 59 90 10 2e 66 bd 61 8d b9 30 d2 06 b9 df 0d ec ff 00 2d ea af a3 ab 53 36 5f 00 e8 d6 68 95 2b f6 1f 7a 65 7a f9 49 a6 c1 79 bc 21 b8 16 c0 22 30 d8 0f 70 62 55 9f 6e ff 00 40 fc 9c f4 af bf 71 99 c0 82 83 bb 15 01 9c 98 0b 9f 99 2c d9 70 9a eb 37 31 54 cc d7 e6 24 e0 db 33 3e 82 be 26 15 8a 12 34 76 86 Data Ascii: "3yn/lpn*6?X\|(kT65Zvj]v:a.(G%!\|J,n-SKJOP{q[>yF9v7Oo Y.fa0-S6_h+zezIy!"0pbUn@q,p71T$3>&4v
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: d2 85 b6 e0 7a 37 1f d5 95 51 a9 10 00 d4 22 f6 d5 2d 2f db 3e 81 54 b9 89 b0 8c 24 30 60 a2 b7 87 42 d7 b1 db cd 1c d1 0d 0f 51 db 96 3a f6 d2 ba 6b e9 c7 a5 b8 61 d7 ea 99 64 98 00 2b 0a 33 24 51 72 df 39 30 75 06 12 34 3b 5a ab f4 97 a6 8b e1 42 dd b9 60 b4 35 55 60 a1 03 1a c2 10 1c fd 76 d7 42 35 b8 db ef 9a 7d fd a7 7a b9 49 92 f4 65 a3 01 69 5a 97 c4 a0 c4 8e 48 56 08 54 24 f2 ab 12 2f cc 33 c3 22 d6 0c 36 b8 d2 12 9c b5 15 8d 59 59 8f d6 6e 82 3d c5 80 3b 41 e1 5f 6c 38 9a e2 e0 69 49 22 89 1d 85 6a 48 48 8d 43 02 97 8f f8 f8 c5 a0 c7 92 a3 91 0f 6e e0 80 c5 34 20 ca 03 07 37 51 b0 c5 49 5d 36 eb 33 11 55 e3 3d c6 77 2d 8d a7 30 e4 23 b2 88 c6 99 68 41 25 e7 d4 94 90 34 fe c3 5e 18 71 e3 37 75 d6 1f 57 6a c4 46 04 64 6c cb 09 9c c8 67 45 2b 90 c7 Data Ascii: z7Q"-/>T$0`BQ:kad+3$Qr90u4;ZB`5U`vB5}zIeiZHVT$/3"6YYn=;A_l8iI"jHHCn4 7QI]63U=w-0#hA%4^q7uWjFdlgE+
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 49 a7 ce 23 8c cd 07 c9 ec 06 17 1d a9 ad 1a 3f 6d 09 43 da b8 ea 22 65 6e d0 22 ce 27 6f 91 78 c4 66 e2 c9 32 86 4f 8b f6 e2 4d 1a 95 60 58 91 5d bb 44 a3 a5 5d 7d 5b e3 44 e5 48 87 ed 8a 72 35 04 de 6b ac 39 74 ed d8 82 a3 2a 89 cc f9 fe e8 5e 4e e2 f6 e4 f5 87 12 68 dc da af 64 86 8b 93 d6 53 22 ad b2 16 e2 cd 91 f4 1e 66 b5 b5 ab 13 0d 2b 23 4a 47 9e 74 74 c8 c9 e2 6b a5 6c 0a 61 1a 7b 59 95 0e 6c 6a 3d dc b7 b3 4c a8 71 59 ca 2d f8 02 d7 10 83 13 e7 5a 4d 04 c7 9b a3 05 d2 7b 77 a0 51 fb 1a ac b1 72 5a f9 61 ae ee ec a7 36 57 12 4a 1d 91 ac f5 b1 4a bb 81 9f 6d a7 c8 19 84 42 6e f1 19 30 7c 9d b9 6b 76 bf 79 8b 9a 3d 4d ce 37 d3 b1 42 9a 7a 33 59 b5 e4 b9 c5 a7 56 27 32 4f 15 58 65 65 ca c0 36 62 f5 b6 15 b7 a3 59 a7 3d 80 5d 97 89 6c 10 2a 6c 55 e6 Data Ascii: I#?mC"en"'oxf2OM`X]D]}[DHr5k9t^NhdS"f+#JGttkla{Ylj=LqY-ZM{wQrZa6WJJmBn0\|kvy=M7Bz3YV'2OXee6bY=]llU
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 83 a2 70 82 d8 53 53 e2 52 ee 97 3c df 30 3e b3 26 f4 4d 87 47 79 db a6 32 3a fa c2 1c d3 b6 6d 79 66 52 7a 56 40 f1 2f d5 ff 00 0f 4e 7f 27 b5 69 7b 0c 4e 87 24 15 1b 05 57 68 df 47 84 cd 2b be d8 35 5e ad cf ca 24 dd 04 68 5d 07 ea 2f 1f 55 bb 7f 15 6c 89 e8 15 6e 09 f4 37 26 f3 4e c3 e7 44 c9 3f 7d 68 be 93 1d e4 1f b9 f8 c9 e5 03 c5 79 5d 75 06 af 5c fd 06 a5 72 d9 83 51 5a 3a ab 11 da d6 7a 8f b7 56 27 81 d5 ed 93 9d ff 00 48 e8 79 21 bf 7e 5d 62 45 26 91 9b 5d 39 f7 4e 5c c6 50 fa ce d9 ac 1a 2c 12 3f 9a 0a c2 9e ee 8a 84 3b 23 36 e1 dc b7 72 a8 86 46 d3 75 55 76 cb 4a d7 d2 09 3f 36 eb 39 2e 71 76 41 53 58 2a e4 a5 35 b0 92 ba b1 29 0d 5b 30 80 25 dd 95 b8 d5 62 bc db 16 2d 86 af 8b d3 db 14 60 0d 8b 18 a1 b4 b3 3a a8 26 e6 1f 0f 08 50 72 d0 a8 d8 Data Ascii: pSSR<0>&MGy2:myfRzV@/N'i{N$WhG+5^$h]/Uln7&ND?}hy]u\rQZ:zV'Hy!~]bE&]9N\P,?;#6rFuUvJ?69.qvASX*5)[0%b-`:&Pr
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 63 63 cf 4c 3c bf 68 81 cf a8 d3 4f 46 e6 b9 49 21 d2 06 1f 26 a5 e4 55 16 98 fa 88 24 53 a6 ef d9 90 c0 5b 6f 21 58 c1 b9 7c 74 f5 8e 38 e5 1f 98 16 04 4e ee 80 df b7 f6 71 bf ec b5 18 94 7d 70 3d 0d 2c 7e 57 0e b9 79 f5 c3 3b c8 5e 51 40 9f 63 64 9b 02 de 19 ec d2 02 81 96 8a 22 0b b0 7e b1 ac 78 ec 4a dd fb 20 eb 9b 4d 79 be ad ec 0a da c8 44 c1 72 91 39 41 b1 f1 d4 6e 11 5e 6f 77 4a a9 95 93 1b 2b e4 d4 45 3c e2 78 94 37 56 64 21 a4 a4 30 ec 22 e3 64 51 fd 98 26 8f c5 a1 24 fa ad 1c 7a 13 9e 3b 7a 83 79 20 38 ec 39 69 c4 7e bb 36 c5 0a 51 78 f7 53 43 26 66 11 79 20 90 8c 66 37 11 1d e9 8b 02 23 9b 4b 2a b5 cc 53 3b 1d 1e fc 78 66 7e c7 fe 96 3c e9 78 59 fc 2c 9c 0c 6b cc 00 bb 29 18 77 1f d6 90 f8 a3 15 d8 7f 37 cd 97 5a 16 73 a7 b1 53 4e 10 75 58 5b Data Ascii: ccL<hOFI!&U$S[o!X\|t8Nq}p=,~Wy;^Q@cd"~xJ MyDr9An^owJ+E<x7Vd!0"dQ&$z;zy 89i~6QxSC&fy f7#K*S;xf~<xY,k)w7ZsSNuX[
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 4b 16 35 1c 6d 4e 7c 8c 85 d0 cd 77 31 63 51 86 83 82 e6 ac 61 ac 31 31 81 89 75 29 12 2f 8d 55 f4 b7 22 7e b3 1e 66 84 97 d6 dc cd 12 a8 a3 f3 31 28 9a 3f 63 d3 bf c9 7d 8e 3e fe 21 f2 08 dd 28 c5 7d e1 74 40 57 d2 07 2a ab 55 f6 08 8a e3 cb 4c 23 99 a4 0c 91 4b cb 18 8d 12 30 53 e2 86 0e 03 75 95 96 9b 0b 5a ba 37 77 f6 a5 8d 69 73 32 15 68 49 61 ca eb 39 9d 82 a8 79 e0 d5 08 02 c4 95 d2 f5 fa 4b 8e af 03 01 b9 aa d7 fc 15 4f 6d 4b 4e a3 7f 8a 69 3c 17 be 6d 1c e6 9d 83 67 8d b9 c9 ee db 06 65 47 ca de ac b6 63 51 a2 ab 19 fe 05 26 89 16 b3 2d 56 3a bf 22 f4 8e 31 00 73 68 d1 2e 74 d4 d4 f8 7b ea aa ec f6 0c d3 f3 69 94 49 f3 76 7e f4 18 5c 54 13 76 75 7b be 23 36 a1 6c 70 d4 de c6 cb 7f f9 fb b4 66 5b 2c f2 3f d7 ff 00 16 22 3f d7 72 0b 54 ad 2b 7e 76 Data Ascii: K5mN\|w1cQa11u)/U"~f1(?c}>!(}t@W*UL#K0SuZ7wis2hIa9yKOmKNi<mgeGcQ&-V:"1sh.t{iIv~\Tvu{#6lpf[,?"?rT+~v
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 39 dc 99 9a 0d c2 2b 7c 7e d2 cd d3 4e 65 d4 ae a9 ad 23 3a de 3b 2d 48 e4 8c 50 63 56 1e 8b a4 5d 79 8b 70 78 af ee 67 8f b5 ce eb 9f 25 27 6a ee 81 cb ec d1 35 ab 00 ec 9a 92 47 8f ef 1a 9d be 2d 44 ea 6c de a9 a6 3d b0 a3 37 25 7e d1 e8 25 11 6f d4 f7 0a 70 8d 7f 51 5f c4 8e 62 c5 89 4e 3e 1f ec 56 5e f5 63 2a 7e 6d 16 b1 c2 b2 84 93 d7 b3 60 9a c9 05 90 8d 27 b0 58 51 47 42 d2 bd c0 ee 65 a2 bd 07 c8 b2 8e bd 38 7c b1 fc de 40 c3 3a b1 d1 39 47 0d e5 81 c4 12 c3 9a db eb d9 7a 72 0e 1f 46 b2 75 bc 72 14 62 5d 7d ec cb fe 79 eb 2e 95 53 1f 5a d8 d5 bf 69 52 0c 9d bd f6 aa 45 0d 2f 4a ab e5 f7 a9 d4 c7 35 da 7c 7d be 81 80 dc 35 75 b2 b5 c5 52 36 c4 ad 75 d0 d1 c7 e8 6c e4 6b 95 8d 0f 20 6a fa ff 00 fc 9c 8c a2 c3 52 fc 5e c3 2e 1a b5 6a 50 09 05 69 d5 Data Ascii: 9+\|~Ne#:;-HPcV]ypxg%'j5G-Dl=7%~%opQ_bN>V^c*~m`'XQGBe8\|@:9GzrFurb]}y.SZiRE/J5\|}5uR6ulk jR^.jPi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49973	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	699	OUT	GET /xxrz/1200x600/793/ab/ad/abadcdcda3c7e85b004fac4398019af1/abadcdcda3c7e85b004fac4398019af1.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:44 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: image/jpeg Content-Length: 369313 Connection: close Last-Modified: Mon, 20 Nov 2023 18:18:15 GMT Vary: Accept-Encoding ETag: W/"655ba2e7-8eeea" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6957 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6UGqKJUjsD35Pd9f5UiV804%2F%2FoIdGXok0j83anQT5xLBVvuHDZzwk8w9aosArZmQLk6pzCNOUQUHOuX699v5zMTOoPuMyY2nZ5RtdzxGSaaLIt3lg3Ea2RFlWLU%2BXUbwhn19"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a83f99d7a67a-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:44 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: d4 fa 33 39 52 0a 3d 8f 7a 09 b4 e7 c9 0c 65 cc c9 33 97 13 20 a6 1f c4 c8 8e 65 d0 84 29 d4 b4 b0 ee 32 c9 5b 79 c9 e2 55 e7 1a 1e f3 cb 34 25 4b 5b 6b e0 d6 c9 7a 19 f1 0a 91 19 cf 48 14 64 ef 5c ad d1 82 b8 ee 1d 0f 56 fe d0 a4 ea 09 ad 3e e7 61 6a 2a 8c b7 25 ba b5 6c ba f6 c7 e6 ba 68 88 ed d9 3a 0e e3 a1 76 65 37 d8 bc 72 b8 0c e0 0b 78 2d 15 17 04 f4 69 08 87 bc fe 64 2e 56 16 53 36 45 0a 36 80 1d 4d c3 74 76 1f b0 74 eb d7 c6 7e e6 0e 96 de ed f1 fb be 1a d0 7f 53 b9 af d8 78 ff 00 9f 1a 1f e8 d6 b2 f6 be 13 e6 c5 4b af ab de a1 c5 72 6b 7b 1a 93 d6 ea 61 72 ef 81 ac 8d 2b 91 c8 bc 15 e4 93 3e 7b 05 01 a0 ac 43 1a 25 4f 39 78 1c a1 cb 18 41 49 02 05 07 30 b6 8e ac e1 6d 43 98 ce 42 df 69 a6 8e 41 24 65 db ce 59 52 de db 2e b5 5e c7 97 87 b0 57 e7 Data Ascii: 39R=ze3 e)2[yU4%K[kzHd\V>aj*%lh:ve7rx-id.VS6E6Mtvt~SxKrk{ar+>{C%O9xAI0mCBiA$eYR.^W
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: be 2d b0 58 bf af 9a 92 ac cc 6c b5 d7 6a 8c fd 17 9e e9 b4 93 f9 47 9a f5 d2 8c ad bc 89 06 80 91 43 36 3f d7 ef 9d 9d 31 cf f6 7b 6b e5 2f d8 1a 8e b9 dc d5 b8 21 46 d0 f5 df 44 b6 67 2c ed ad 06 c3 e4 6d 03 ed be 9f f4 6f 31 f9 0b 11 3e c7 d2 7f 3d d7 5a 25 8a 7b 34 0b 2b eb 03 4d 7e ef 05 51 e8 b3 57 a5 a9 be d3 74 d5 16 7d 3e cf 73 6f ce 1d f7 37 b6 fa 99 a9 78 56 3e 93 ba 7a 53 9d c4 dc d1 ea ca 86 b7 8f aa de af d6 54 db 46 ab 67 4d 87 94 82 de ea b9 da 02 6d ce ef 95 ad 06 eb 48 be d3 8d be 4c f3 2a 19 a5 94 e7 c9 97 1a 61 6b c7 32 c6 0c 87 71 0a 4b 9b 6d 59 93 1f 05 31 8d 43 ad 90 58 f9 e0 49 da 42 7c fb 66 2d 65 2b 00 75 d6 94 40 a7 46 91 29 0d b7 11 0c c9 71 4f 41 50 32 a5 f0 77 52 e7 95 38 95 3a b6 e2 33 9f 4c b0 ef b3 92 b7 12 ab 31 9f 2f 2e Data Ascii: -XljGC6?1{k/!FDg,mo1>=Z%{4+M~QWt}>so7xV>zSTFgMmHL*ak2qKmY1CXIB\|f-e+u@F)qOAP2wR8:3L1/.
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 65 f8 bf af f3 85 7b bb b8 77 d7 3c ce bb 83 c4 db d0 8b 39 d6 42 c1 7d 91 a5 2e dc a6 de ad a4 ac 55 fe 8f 53 14 3b e2 b9 8b 3a 29 a5 34 d2 41 41 86 47 25 aa 8f 14 49 26 11 6e 39 d7 7d 59 a2 a0 c7 46 42 31 f3 0d 63 16 bc 59 ae 95 f9 46 b4 32 f0 91 9e 4b 18 55 b2 57 1e 41 41 3e 1d 24 b2 30 da a7 1b c9 6d 63 1a 41 0a 8c 61 c5 3d 8a 68 b1 4b 00 a3 f9 dc 72 db 5c 79 4f 35 18 73 cf d8 43 08 2d 8c c6 1c 41 51 2c a8 cc b1 63 ac 85 14 21 4e 78 b1 1e 5a f2 1a 71 58 74 20 57 d9 09 ce 3d 85 cb 6d 2d 91 2c b9 23 12 38 eb cf b8 e0 19 ac 8c b9 35 19 4b 71 d6 3c 2c 16 7c 84 ad 86 4e c3 ca db ad 95 61 0d 5f b2 e2 b0 50 e2 7d 11 ec b2 eb c5 df 2d fb 0a f1 8d 3c c4 4b 96 04 9d 8a 92 53 d0 f3 76 75 9a 7c 76 fa 4b cc 3d 3e ef cb c5 99 a8 d8 54 69 bb 6e 92 10 8b 55 34 da 2f Data Ascii: e{w<9B}.US;:)4AAG%I&n9}YFB1cYF2KUWAA>$0mcAa=hKr\yO5sC-AQ,c!NxZqXt W=m-,#85Kq<,\|Na_P}-<KSvu\|vK=>TinU4/
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: f3 9e d0 e7 36 c3 d0 36 8d 4d f5 6b 63 2f 3b dd 33 71 c5 35 5e fc 63 12 1e a3 6c 47 31 8c 5b 82 ba c4 13 2d af 35 ae e1 0e 65 82 3a 5d c2 6e 35 97 97 22 d4 98 59 65 64 3a db 86 a2 3c d3 86 95 23 ce 2c 70 29 a8 12 09 c2 f3 24 1a 8c 70 d6 0a 0c 0d 42 4b 2b 61 72 e9 40 90 b3 88 31 0b a3 71 c0 64 98 91 6b 04 63 31 25 8a 6d ea a6 a9 95 ed e8 ae 4e 32 56 ed 68 46 ec 83 8b 2b ad c8 44 6a 6e f9 d5 30 96 33 87 4a 06 c9 59 62 0c e9 b4 12 62 36 f5 aa b1 73 0c b8 a6 e2 1a 72 39 72 b1 64 23 d6 c8 1c 49 e7 53 b4 8b 1e 68 70 98 9c 48 0d 56 c0 cb 70 d7 c0 ae 16 3d 98 11 b2 58 a8 cc 25 3e 4b 94 a5 3a 60 f4 9c 7c a5 aa ce be 93 2c 51 92 b6 57 27 ae 6b 65 61 6d 51 f4 3a 2b 6e 88 da fa 53 9b eb 68 3d a1 c5 f6 be 44 fe df eb 5e b3 e5 3b fd 77 39 6d 0d f7 40 d7 dd ec bc fc ac Data Ascii: 66Mkc/;3q5^clG1[-5e:]n5"Yed:<#,p)$pBK+ar@1qdkc1%mN2VhF+Djn03JYbb6sr9rd#IShpHVp=X%>K:`\|,QW'keamQ:+nSh=D^;w9m@
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 73 ec b1 21 96 1d 50 33 11 27 b3 5d c0 30 f6 15 05 8c 61 21 70 62 1f 8e b2 b8 94 48 2c d3 12 93 5a 19 07 cf fa 95 e1 d6 bc cc a3 ca c3 51 8c 2c 30 35 3f 1e b5 36 41 4c 79 f5 c7 1e 49 08 b1 10 92 d4 83 19 89 04 0e 06 47 99 43 73 97 cf 24 c5 e6 44 d9 5c 19 92 8e 1a a2 df 71 4a 98 dc 3f 81 c2 54 42 ac 24 57 9c f3 05 b6 df 6f 31 29 91 1a f5 04 3a 9c 39 0f b2 e1 84 60 b3 20 2e 0e 05 95 01 16 96 f9 b3 d6 eb 41 14 95 5a aa 6b 08 53 01 0e a1 73 29 61 78 4b 19 5a 92 07 e4 b8 da ac a0 03 04 09 4a de f4 c8 c3 c8 a3 09 86 cb 72 6d c7 b3 3b 1e bc 6a 48 52 46 5f 4f 9d 2c 7a d3 01 65 b5 ae 1f 45 6e 5b 1f 97 fa 04 7e b8 da a3 22 5d e8 8e 6b ed ed aa f9 af eb 47 cd 0e f6 e7 3b 7e 87 e1 7d 83 a5 2e 0f 45 17 d3 5f 37 fd 0f e7 6b 37 4d f3 2f 5c f5 df 3f ce 73 3e f5 a1 e8 7a Data Ascii: s!P3']0a!pbH,ZQ,05?6ALyIGCs$D\qJ?TB$Wo1):9` .AZkSs)axKZJrm;jHRF_O,zeEn[~"]kG;~}.E_7k7M/\?s>z
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 9a 62 bc 43 10 e1 60 01 b7 2e 6e 10 a1 4c 47 de 18 50 e7 c3 14 45 38 7a 00 03 c1 b8 83 01 c2 65 57 90 c6 b8 23 2b 8c 3c a1 26 55 cf 4f d8 b2 c5 3c a2 97 67 10 d9 0e 43 02 cb ac 09 be e0 4f 43 5d cb 4d 03 92 40 6a 5a 58 60 bf 32 a4 77 9d 6c 6b 24 29 77 e8 3a 25 d7 57 5e 19 f1 63 4a 5d 69 c6 31 21 ad a5 20 87 79 92 af 21 dc 79 66 43 29 6a 80 ce 1d 49 8f b0 af 0e 79 d4 1b 76 93 82 48 b0 c9 0c a9 10 8a 5f 52 9f 39 82 2d 21 27 25 5c 8b 91 82 79 63 b9 90 d2 8d 02 0b c3 ba 88 8c b6 f8 ae 60 a3 be ca e1 3e c2 ab 39 2b 7b ce 5e 1c 69 f2 26 32 e6 01 84 23 c4 b3 06 78 c5 14 b5 30 1b ee af 29 34 c5 b5 f1 d3 7c bf b3 39 33 cd 3a b1 22 49 12 a8 d2 45 da 30 6d 2c f5 4e 8d e8 ae bf 51 d1 7b 6b 9c ae 5d 37 3b d5 36 4d 75 76 e7 ea f0 7f 13 fd a7 e3 de 3b d1 29 3a 13 77 fa Data Ascii: bC`.nLGPE8zeW#+<&UO<gCOC]M@jZX`2wlk$)w:%W^cJ]i1! y!yfC)jIyvH_R9-!'%\yc`>9+{^i&2#x0)4\|93:"IE0m,NQ{k]7;6Muv;):w
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 45 bd c4 de d7 65 6c 3c 63 b5 c8 b7 95 0b 35 49 77 34 a6 68 51 b7 09 fd 7b 35 ec 85 a1 d5 c5 4b 16 18 e6 e5 78 db 0d 4c 2e cd 6b 82 b4 7d 1e 56 d5 a6 6c 74 d5 d2 72 10 ed 89 63 a0 a5 55 ad cd ea 1f 5f a8 74 be bd 5e df 51 d9 f6 35 62 c5 cd ef af 74 dd d1 0e c0 f1 f2 15 39 89 a4 26 32 fe 6c ae 88 e2 ce 99 e8 36 db 0f d6 5c ed 79 fa bb 56 c0 d0 15 41 2d 11 ab 4c 75 7a f5 5b a6 ba f0 b6 16 65 75 16 ed ac 42 e3 8a 94 91 90 a7 01 b3 47 5c 6a e3 2d e9 75 1e 7d 26 71 76 a9 c2 35 38 69 65 75 f9 86 f3 05 91 15 f6 81 65 80 73 00 c7 c3 39 b2 d3 76 23 8a 75 d8 97 58 94 9c 68 f6 22 e7 29 a2 df 1c 31 a0 19 68 46 0c 21 cf 13 63 16 01 f6 cb 03 ad 46 d8 f5 60 38 98 f9 f8 a0 28 e1 26 9d 18 ad 90 8a 6d 38 d8 4c c6 4e aa f3 4b b8 87 b5 55 78 a9 82 dd 91 d2 b3 32 40 ba 8b 56 Data Ascii: Eel<c5Iw4hQ{5KxL.k}VltrcU_t^Q5bt9&2l6\yVA-Luz[euBG\j-u}&qv58ieues9v#uXh")1hF!cF`8(&m8LNKUx2@V
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 5a ab 7a b9 5e b3 8e 51 56 6e d8 66 16 b4 6f 73 56 8c 28 03 5d 0a 7d 78 88 69 09 8b 55 63 20 f2 73 ab 0b 22 5b d6 2b c6 cb 0f 20 43 59 e6 9b be ac 4e b6 12 34 87 f5 76 d3 b4 35 b5 8a c8 b3 55 b0 c5 80 46 b1 22 cc 39 3b 53 5f ef ed 90 5d e0 f7 b7 af e6 90 21 ba 0e ad 96 ae 4b e9 1d 4f a5 d8 41 56 b7 69 00 d0 a6 eb 56 67 3f 51 6c 6d 75 7b a2 75 57 e0 9c b5 af bc 55 23 02 0c e8 42 f4 a6 c1 dd 50 ea 5d 31 72 d6 c9 65 b3 9f b6 dd 47 4f b8 e8 39 ed 41 d1 56 92 15 85 b2 36 74 a4 ac 14 eb 17 41 c9 51 07 92 6e 85 98 8a ad f6 3f 92 ea f7 7d 7f 48 74 1e 83 a4 e7 3e f9 e2 0e da e4 7a d9 7f 9c 3f 63 35 f8 2f 9c aa f4 1b bd 7e a2 85 c4 df 40 fb ab 58 df 8a f0 bf 7a 39 14 f7 7a eb e8 b7 13 75 f4 d4 52 73 2f 5f 9e af 4b 48 93 55 e0 43 5b 98 43 be 6f f3 c7 d9 ee 49 db b7 Data Ascii: Zz^QVnfosV(]}xiUc s"[+ CYN4v5UF"9;S_]!KOAViVg?Qlmu{uWU#BP]1reGO9AV6tAQn?}Ht>z?c5/~@Xz9zuRs/_KHUC[CoI
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: ba be 84 dd 1c 85 5d 79 7d 0f d7 70 f1 1e 29 ea 3a 3b 60 c3 6e 9e 4f af e9 4d ac 15 9f a7 e4 fc e9 24 ac a2 2a 5b 01 aa 76 68 5c 9d dc 43 a2 df ca 9a 57 d8 6e 5a eb ab 7c b4 ae 7d d2 d9 9c fd af cd cf 5b 7d 82 f8 e9 60 37 7c 3f cc 1e ac da 6b 60 f9 0b a5 79 99 56 7b 17 ef 27 e5 02 4b 13 fa e0 17 e6 4f d0 0e 6a dd c5 90 68 88 6d 8d 7a ee da e9 af 7c 65 fa c7 f9 e3 df ea eb 7b 6b 4f db b7 d5 fe fb 76 1f 21 75 bf 9a ed 65 ce ac 17 49 52 ed 8e ea da e7 9a f0 bb 29 5a f2 5a 56 7c 33 e4 ab 01 8d a5 c4 44 36 db e8 c9 1d 0e a2 5a de 55 e2 cc 79 3e 39 fc 78 93 1e 5f d1 7e 38 69 b1 e4 3e a4 c9 b0 87 12 66 e4 a0 0d 35 d8 a4 6b 72 0c 1b 44 8d 56 45 b9 6a 54 09 b3 16 29 2a a1 b3 96 73 2b 45 10 dd 66 75 d3 d7 eb 6c b6 68 25 ed a9 5a a3 63 87 dd 56 91 5c 3c 3b 5d 68 1e Data Ascii: ]y}p):;`nOM$[vh\CWnZ\|}[}`7\|?k`yV{'KOjhmz\|e{kOv!ueIR)ZZV\|3D6ZUy>9x_~8i>f5krDVEjT)s+Efulh%ZcV\<;]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49975	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	699	OUT	GET /xxrz/1200x600/793/d4/a5/d4a5ca2896ffd5bf878a6c93110fb09f/d4a5ca2896ffd5bf878a6c93110fb09f.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:44 UTC	720	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: image/jpeg Content-Length: 492546 Connection: close Last-Modified: Fri, 08 Dec 2023 02:38:40 GMT Vary: Accept-Encoding ETag: W/"657281b0-df4c7" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6957 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9X6mmtPumDRgLFMlPOBDiAIe0cfLppMl53UnXNYSILFUcmUxUBVHgIHKPm7GUDMFv9BleG2Nj9hJOEWZp1gc1AabsgDhvPY%2BIhHDtebWkZHe%2BRT7ETl4uM5DJaxN8mc3q2vx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8401fa99abf-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:44 UTC	649	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 02 58 04 2a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 03 00 03 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCX*"
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 77 fd 0d 20 d7 08 bc 18 30 c3 0f 1e 11 81 22 47 ef 0c 70 82 4e 1f 53 d7 f7 67 1f a2 fe cf 0f c7 e5 1b 8f 16 27 ce 4f 8e 3a 1f 43 4a 1b f9 d7 f0 0e 8e ce 1f 9c 1f 7e d7 6d 93 86 d9 bf 2e 75 f9 2c 9c 0c fa 25 c9 a9 d3 e7 8d a5 63 70 f4 7d 86 9e c4 7a 92 cb 39 67 a0 a0 0e f4 ce ff 00 a7 b5 35 a7 73 5c 8b aa b3 5a b0 b8 ea bb 5d 4c f9 c4 21 e8 8e b6 56 9b ca 59 cf d1 6f 39 25 d5 f5 5e 5c f4 34 bc 72 9e 66 ed 3b 32 c6 44 8c 5b f9 b1 2a f6 7b a6 57 a1 47 96 46 15 77 6f 8c e2 f3 26 86 e0 b0 d7 14 67 67 5c 82 56 db bd ee 0f 24 37 d3 10 75 42 ab 9d 76 13 af f6 56 6c d4 d1 d3 e6 75 c9 ab a0 12 1f e3 52 57 a0 58 5e c3 74 1c 4a 3c a7 65 06 86 c3 35 f8 35 82 3e 80 8a ed 36 91 85 66 40 72 84 b8 d0 3e 03 b2 2d 2e e4 53 ef e8 a2 61 da e7 78 5a be 77 ec ef 8b 7f d2 b4 16 Data Ascii: w 0"GpNSg'O:CJ~m.u,%cp}z9g5s\Z]L!VYo9%^\4rf;2D[*{WGFwo&gg\V$7uBvVluRWX^tJ<e55>6f@r>-.SaxZw
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: e6 b3 63 37 66 cb 63 e2 f4 4e 6a d3 59 fa 45 76 4e a1 cc fa c0 85 02 07 63 64 d9 b4 34 be d7 d9 49 e5 63 e7 9f ac be 78 59 72 ba d3 bd c2 5d 9f 2a 4a ed 7b 98 d4 99 3b 53 38 6e 3c f7 6a af 09 bb 48 a5 e8 0a c4 4f 77 43 5e 57 00 d8 b9 17 67 f1 f7 35 04 81 a1 e2 97 19 95 37 61 66 0b 17 88 c6 1c d2 f0 0d 07 dc 3e 75 33 af e9 a6 08 d2 6f 7c f2 f7 16 e3 92 d7 70 2f 53 37 7c be 8a d3 f7 13 4a ee 39 fb b2 f0 e9 f8 d5 3f 2e d0 fc 73 ea e7 93 c5 19 14 e8 14 d6 7f 82 ea eb 1d 2c 51 53 2d 72 03 2c 37 1b 51 51 b1 15 bb 0a a1 5b b1 81 f6 9a 83 62 46 59 2b e8 d6 51 ac eb 8c de c7 75 93 06 dd 79 a5 75 88 77 0a 02 99 00 9f 2b c0 cf 82 2f f3 3d bc 3a 8d a8 af 4a 73 59 bf 97 5c c7 34 19 ba 58 e9 05 d7 38 30 df 20 5d dc 72 6f 47 dd bc e4 2e 04 38 a5 91 bf 93 ff 00 38 c0 fe Data Ascii: c7fcNjYEvNcd4IcxYr]*J{;S8n<jHOwC^Wg57af>u3o\|p/S7\|J9?.s,QS-r,7QQ[bFY+Quyuw+/=:JsY\4X80 ]roG.88
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 38 0c 14 c2 3a 85 5d b1 41 7f 60 5b 80 c8 32 74 b5 e1 6c b6 1c 88 35 6d de fa 38 ae 50 be 25 94 79 1a f2 d8 c6 38 12 b8 b2 19 b0 3a d0 85 55 dd d5 f3 ac e6 64 fb 3e 96 97 a3 d1 56 84 34 de 7a 72 c3 12 c6 15 57 b5 68 c7 94 46 d2 ac 00 c4 3f 15 68 5d 99 c7 8a 01 ad b4 03 92 91 45 6b bb 3d 13 8c 87 2d 1e 3b 55 19 52 3a 7a 3b 30 bc 80 81 3a eb af 42 87 14 c5 68 8b 07 87 1b ee ea 8d d8 91 df bc 60 44 e0 d2 f1 c0 f6 24 74 b1 5d 31 b9 5d ed e5 0e 52 86 c1 6d aa 7b 65 52 7d 3c 4b 49 69 ac ed 57 ae 17 e0 af 3e 9f b5 ec 1c 89 a8 e0 19 cd e3 9a 68 27 6b 97 12 a2 63 3a 98 71 e2 a8 41 99 1a e3 46 d3 3e 84 f3 47 af ae 72 ec 92 0b 03 1c d1 45 37 12 9e ef b5 51 fb 2f 3e db 76 aa f9 9b f6 00 b6 b6 3d 30 5f 62 5f 33 40 ee 71 b8 1d 52 e3 71 a7 53 44 f0 cf f7 bf 2f 98 a8 3c Data Ascii: 8:]A`[2tl5m8P%y8:Ud>V4zrWhF?h]Ek=-;UR:z;0:Bh`D$t]1]Rm{eR}<KIiW>h'kc:qAF>GrE7Q/>v=0_b_3@qRqSD/<
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 9a cd 5b cc f0 c6 04 10 55 7d 49 6e 78 a6 55 96 5e 04 1d 04 90 b4 c7 8f 2e 3c 8f a0 24 9f 00 56 75 05 c3 90 99 30 6d 4e 52 83 9e 88 be 89 90 09 36 d7 6c be 44 9b 7f a0 cb 37 d1 a7 de 7e 9a 79 97 e8 6b 9a 8d a9 db 12 71 7b 57 59 2e ae e5 a5 e8 ea db 23 35 58 c9 76 0d 46 be a2 8a aa 91 2d bf 5a 58 a1 c7 64 12 f3 65 b9 41 ef aa e3 3e dc 29 2d 08 14 94 4b 41 de e0 c5 58 81 3b cd df 46 fc bf 99 59 56 f5 67 f9 ea f6 f1 cf ae b0 92 fa 45 15 cf 75 a6 95 69 33 93 71 39 18 c5 58 ff 00 44 de 53 44 55 3b 26 fe 49 69 b8 39 e7 51 ac 35 62 a0 e7 71 94 c6 95 d9 3b f2 7b 71 2d 1b 43 37 68 07 b3 82 9d bf 72 7a b1 c3 31 ea 4a fc a0 1a 27 bf 94 bb 3e 75 d3 a3 33 fd 9e 12 c9 69 7e 77 7e d6 f4 45 04 4b 5e b1 87 6f 8d 4f d4 9e 18 94 3d a1 6b 24 27 bd 02 89 61 2e 3e 53 71 8d 5f Data Ascii: [U}InxU^.<$Vu0mNR6lD7~ykq{WY.#5XvF-ZXdeA>)-KAX;FYVgEui3q9XDSDU;&Ii9Q5bq;{q-C7hrz1J'>u3i~w~EK^oO=k$'a.>Sq_
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 38 60 2d 0f 9a 67 8d cd 99 07 72 e2 5b 4e 07 08 26 89 a3 26 56 ad df 6c 7c 1c fe 89 c1 5d 5c a4 7e f4 52 36 42 d3 56 66 22 19 c9 4b 67 db 81 19 19 c6 9e 21 8e 6b a6 4f 3f 36 98 5c e1 db 97 dc 81 da f9 42 9d cd 2e 51 70 af aa 7e 3e 82 3e 6c 59 6c 98 3b 6b d2 6c f2 2b 56 5f e7 e7 22 34 e4 dc 51 e8 5f 96 24 13 e1 c2 8c 2e 93 1e 8a 96 8d 69 74 f6 2c 30 ec e9 4d f4 e5 bb 94 36 6d 83 12 9f 42 bc 25 2f a7 01 cf fc af df 18 97 a7 8c 85 a5 2f 43 99 60 cc ad 71 00 2d fe 25 c6 9c 4f 32 0e cb 87 9a b3 3b 79 85 d5 bf 4b c0 21 1a e8 ed a9 72 8e a3 27 69 f6 bd eb 3c 5a 63 bc ea cc 2f 9f e3 cd 75 72 13 dd 22 53 1c a0 7f 49 48 8c 80 f5 9e 22 d8 d7 c6 97 96 99 9d fa 20 65 c6 64 45 5d 9c b6 2d 0d 35 35 a7 a0 b4 ce 81 95 36 be 9b f7 eb c4 1e a4 06 9a fd 7e ab b0 73 b5 f4 bb Data Ascii: 8`-gr[N&&Vl\|]\~R6BVf"Kg!kO?6\B.Qp~>>lYl;kl+V_"4Q_$.it,0M6mB%//C`q-%O2;yK!r'i<Zc/ur"SIH" edE]-556~s
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 8f 1a bf 82 e2 7d 21 f3 df 86 d4 7a 20 e8 6c e0 39 4b e3 fc c8 cc 83 18 da 12 f4 d1 d6 5c 41 91 9a 0b 20 eb eb 69 5a 57 a1 9b 7d 82 58 4d a9 c3 a2 dc d8 9c 23 e9 1e f7 ba 60 6f d9 3f 9b 9b aa 07 9f c1 66 56 3d 0c 1f e7 97 cf ab d0 0e 58 11 e9 36 3d 81 1e 9c 72 85 a8 34 4b 08 d5 d3 c0 e5 9d 49 72 c7 f4 25 15 45 5d 5c 61 21 f3 7c ad 83 fb 5f cc 91 d7 08 ea ab 2f ba e3 2d 24 9b b3 6d 4e f4 f5 cf 85 ac b3 d1 e4 7b 78 bc 88 67 d7 85 8d b8 18 ab 67 35 d5 dd 48 87 82 aa d8 5a 8e c1 46 97 74 eb 36 98 71 c2 6f 8d 88 af 4e 54 59 96 d9 3b be a8 7f 39 b9 37 fa 1a f2 0c 73 19 77 ac 9c 11 81 2b ef ce ef c9 b9 1e e1 cf b7 6d 35 57 d0 cb c2 36 15 d1 a5 5c 90 5d 1a 92 52 78 be d8 93 24 7a c9 e6 bf ae 5c e2 2e 5f e9 6a 7a 4a 7d 56 df a0 65 8f c5 3b 5f 1a 6d 69 40 b1 43 2f Data Ascii: }!z l9K\A iZW}XM#`o?fV=X6=r4KIr%E]\a!\|_/-$mN{xgg5HZFt6qoNTY;97sw+m5W6\]Rx$z\._jzJ}Ve;_mi@C/
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: c7 5d 05 8e f8 0a d1 bd 04 b1 fc b8 ea 09 b0 fa c9 1b cd a9 e2 75 4d dc b3 84 27 c6 bc ec 22 b9 0d f9 8b 66 f7 b8 70 dd a3 c0 fa da 3e 5b 59 94 03 64 af 8e b8 1a 63 2a d3 96 96 75 d4 75 44 18 7a ae c7 96 26 87 b9 b2 f6 6c 9f e3 fd ed 49 64 fe 33 e8 c7 f1 f5 e9 45 d0 36 74 a8 53 85 d4 2f 16 05 de 80 f1 57 75 81 02 de a3 e5 84 a3 ac ea c9 f2 5d 7f b7 7c 20 7a 5d 1a 56 78 ac 02 7e 1f 09 36 10 d8 04 02 75 d7 6e 4b 8e b2 1d 31 b6 9f 6a 45 eb d6 f1 9f 25 84 1c 70 29 d2 39 8f a0 f8 5f 70 e1 e1 64 18 b4 8e 63 22 7e 97 e9 5b 8f 98 ba 26 b9 a2 6c 72 e8 4f f5 6d 18 c9 31 84 c6 cc 22 44 71 38 ae 4a 24 3c 84 57 49 4e 83 3e 1f 08 4e 83 35 9e 48 81 3e 7b 4b a9 93 b4 97 73 36 4c 43 94 fd 60 cd 27 b5 2c bc f0 8f b6 09 2d 30 89 aa 8e 19 c6 4c f4 5d 05 cb db 68 91 60 54 61 Data Ascii: ]uM'"fp>[Ydc*uuDz&lId3E6tS/Wu]\| z]Vx~6unK1jE%p)9_pdc"~[&lrOm1"Dq8J$<WIN>N5H>{Ks6LC`',-0L]h`Ta
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 08 76 2a 92 f1 cf d9 0e dc c7 b4 f0 03 74 f0 a7 06 bb af c5 75 4e c3 10 74 b0 92 53 04 97 5f 60 5b 95 ad bb 22 29 38 33 7a 67 8c 8d 61 d7 b7 5f ca d5 98 12 ef 5c a0 e9 59 9a 21 e8 12 56 56 52 af ab 44 f2 df 36 48 f6 74 68 1e 76 2d 26 1c a9 c2 08 49 87 2d c1 53 24 c3 98 b8 b2 67 8d 9e a6 c9 cb 81 39 b4 4b ee 8f df f4 3e f9 11 fb 15 06 7c f1 d3 1a 49 3a 12 f2 61 a5 68 f8 bf 64 56 b6 9e 03 fa 44 b2 db 43 37 56 36 dc 97 5f e9 fb 73 6f fc f5 d4 84 aa 19 77 6f 38 d9 10 94 e6 4a 82 d5 31 62 73 6b 63 94 bd 31 89 46 fb c2 4e 62 44 af 16 74 f7 9a 15 ff 00 56 95 af 58 97 51 a6 0e 3e 3e c6 72 22 ca 49 8b 32 45 6c 9f ed 1b b6 22 bd 18 15 cf 9c 20 ab 58 54 8f 08 dc 1e a1 08 48 d7 13 48 59 55 7c e2 e4 6c 7e d1 fc 81 ea 95 2b 6a 7b 79 dc b1 cd 31 f5 20 46 80 76 fe a0 75 Data Ascii: v*tuNtS_`[")83zga_\Y!VVRD6Hthv-&I-S$g9K>\|I:ahdVDC7V6_sowo8J1bskc1FNbDtVXQ>>r"I2El" XTHHYU\|l~+j{y1 Fvu
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 48 40 63 96 82 f3 9f 42 2a 47 a2 05 ac c5 7f a2 40 3c b0 7a e5 96 31 97 5e 35 15 c3 a4 42 94 8e f1 f2 80 ca 8e 74 b1 01 04 23 38 46 70 b9 91 dd 2f 30 44 e8 1d 23 e5 6f a8 de 53 9d b1 d4 39 77 47 65 bb c1 0b f4 f2 71 ba 3d 2f 70 79 f1 fb 67 03 33 9c ec 02 d5 31 81 d0 75 be 50 d1 d1 8d cf 84 d1 5b d6 8c 5b 8b 62 1a 9a 75 ed 16 ac ba 13 d5 65 a6 71 ee b4 b1 d7 f0 79 0d 91 ee 52 20 eb 4e 50 05 f3 5f d2 38 0a 8c b6 18 3e 5d 9a b6 d8 71 16 c9 c5 e6 07 69 0a 9a c2 63 98 49 56 86 d0 59 a9 52 d8 83 b3 dd f2 22 66 9e c1 53 a4 11 ac 5a 15 98 ca 51 1b 12 9b d3 a1 58 99 ff 00 08 f7 a6 5b 46 97 a2 ac 08 da 17 b5 a6 b2 ee 87 a8 e2 6d 92 d4 8c 2c 66 04 ab fd 2c f3 6b 5d f3 4f 5c a1 fd 96 ac fe 46 9b cb 1d 70 4d fa ce 32 89 ba 71 bf 5a c7 0f 2c 4a 88 46 04 40 11 36 a8 4a Data Ascii: H@cB*G@<z1^5Bt#8Fp/0D#oS9wGeq=/pyg31uP[[bueqyR NP_8>]qicIVYR"fSZQX[Fm,f,k]O\FpM2qZ,JF@6J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49978	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	581	OUT	GET /media/fonts/bp-assets/bp-assets.woff2 HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bitpanda.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:44 UTC	1068	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: application/octet-stream Content-Length: 16420 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT, POST Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Fri, 19 Mar 2021 11:33:19 GMT ETag: "885c5b776d2d19e3688c7ae4d5ce0ff0" Cache-Control: public, max-age=36000 x-amz-version-id: 5EI9Fi1tX6vhegWAZ7BAh52QdG1j24IQ X-Cache: Hit from cloudfront Via: 1.1 221c16f6368b9673111421e368023144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 7sJevNnrfL2dKdvxG1zgOYxKOgA0LOLSjcug6owzuTjUIHOqLBFOxw== Age: 20489 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:44 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: _cfuvid=_mbvG8nuTVFkWgnTuDxf7lW8QD2D7jlVoyjwNIE118I-1714156364854-0.0.1.1-604800000; path=/; domain=.bitpanda.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a8402eb6b3bf-MIA
2024-04-26 18:32:44 UTC	301	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 40 24 00 0d 00 00 00 00 95 94 00 00 3f ca 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 82 5e 11 08 0a 82 97 28 81 ea 5f 0b 81 2a 00 01 36 02 24 03 81 5a 04 20 05 83 33 07 86 51 1b b6 7d 45 23 72 b7 03 60 ed be 6b 64 44 c5 6a e5 a3 28 e1 a4 98 ec ff 3a 81 1e 62 99 a7 f0 1c aa 2c 52 88 46 26 a2 f6 20 b4 7e 5a 5d 46 98 60 59 7c 64 6b 97 40 bc 0b d6 cd d6 4c 68 c1 d8 09 e2 19 52 48 7f 1e 16 75 55 a7 16 1f 39 42 63 9f e4 42 4f cf 2f d7 f7 b9 f7 e9 58 de 9b 49 d0 01 46 82 78 32 83 c9 44 11 4d d8 75 24 b2 24 58 2d 21 68 56 2c ac 38 a2 fb 0d be 88 59 7c be b5 a6 63 ab 27 33 ab ff 4c 3c 62 af 43 12 4d 50 09 99 10 1b aa 2a 25 b9 52 c0 4f 94 64 db 0f fc 92 38 17 b4 73 3b 2d 9d Data Ascii: wOF2@$??FFTM`^(_6$Z 3Q}E#r`kdDj(:b,RF& ~Z]F`Y\|dk@LhRHuU9BcBO/XIFx2DMu$$X-!hV,8Y\|c'3L<bCMP%ROd8s;-
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 56 6c 83 45 41 8f 8d 68 59 01 a3 5c b0 11 3d ca 00 1d db 68 d1 06 15 54 4a 45 ac a1 60 24 98 85 84 df 68 d0 1f 46 05 2a d6 37 fa c7 b9 ea 77 ed ea bb 4f 84 8a d5 81 b3 79 36 b5 a1 b6 03 58 1c 40 5a 0e 1c ea 95 ae 97 b5 74 6a 3e b1 41 4b 97 e2 9b 66 4c 9c 47 dc ce bf aa da fa 01 53 0e d2 21 c5 7e 8f be 4a a7 b4 c9 25 6f 57 b9 5a b6 e5 e3 7f 80 01 fe 07 48 e2 83 bc 80 a0 64 53 a0 9c 47 82 91 1f 44 e9 f2 24 ea 8a 0a cc 33 65 a5 95 2b ad 4e 0d a4 92 0b ad 34 4a 69 55 57 eb 78 5b ab 5b e9 6d 4a 9b 6f da 6e 19 fb 30 4f 19 33 de 38 1d 0f 6f 27 6a 9b dc c3 83 0a 1c 08 35 97 f4 b7 32 fd 4d 6a 93 13 5c b2 d9 40 87 30 98 28 cd 8f c3 fc fe c3 34 a6 72 21 77 69 a2 21 76 f7 65 cb 7f 29 c7 ee 97 19 37 71 c4 13 9a d2 16 99 98 fc 43 36 6d 50 b7 cd f1 a6 c5 4b 82 de 45 90 Data Ascii: VlEAhY\=hTJE`$hF*7wOy6X@Ztj>AKfLGS!~J%oWZHdSGD$3e+N4JiUWx[[mJon0O38o'j52Mj\@0(4r!wi!ve)7qC6mPKE
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 54 7e bd 89 cc 05 a2 e9 aa 14 af e7 55 78 f0 92 1e 3b 9a a6 48 4f 76 c2 04 9b af d2 6e 06 24 fd 8c ba fb 3a 40 c7 b7 da 9e ba 01 e0 e2 d2 e3 ae 98 99 e3 ec 18 62 e1 b4 88 b4 60 9f 98 92 53 75 b7 90 3b 10 a5 05 da 6e 17 12 9d 0e 41 b0 98 6c 04 68 31 4c 11 50 11 60 92 07 e4 2a 29 f8 ec ad 8b 18 8e 9d a8 20 31 29 da d7 28 36 aa 08 02 0b 5a 5f 65 ba 9a 3e 69 b0 a1 60 0a cf 0b 90 a4 49 10 58 b6 10 a1 be c8 70 4f 49 d3 85 cd e0 0e 62 0f cb 21 95 2f 5e bd 78 47 fd b4 06 e8 1c 20 d7 8b ea a2 ef 4b 83 a8 42 92 0d 81 dd da 19 96 11 97 ae c1 0a cf b1 58 67 91 fd d2 8f a7 6f aa 99 99 ca 76 54 f0 d2 a1 8b a2 44 b8 52 ba 06 88 dd 28 4e 99 a5 53 59 fa 16 f3 4c 7b 1d e5 40 07 37 47 5a 84 b1 c2 d5 54 27 3f 21 56 86 40 2b 5c 15 38 6b d4 2e 66 22 cb c3 51 42 05 19 ed 29 eb Data Ascii: T~Ux;HOvn$:@b`Su;nAlh1LP`*) 1)(6Z_e>i`IXpOIb!/^xG KBXgovTDR(NSYL{@7GZT'?!V@+\8k.f"QB)
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 11 f1 bb 0a 8b d8 8b 59 05 fd 51 2a a2 71 ba 8b 81 29 7c 8f 48 ad b4 71 86 8c f5 50 95 a3 fa 7c 84 a8 51 a5 29 d3 81 f3 6b a3 67 4b ca d3 ed 86 6a 6b b9 cf 5b 3a fb 7c ae 93 9c d4 17 a8 67 85 6a 18 83 a7 df c6 bc 67 ce 96 a3 41 15 ff 34 7b 16 5f 57 59 83 07 e0 bb b5 54 59 78 38 a9 83 35 26 9c 7e 06 12 e0 7d 0f 5e c6 7c 41 48 59 ba 47 19 63 3c fd 38 8c 12 52 4e d4 d4 32 7f 9f f4 f3 72 b6 e7 2c fe 1c d1 ba 77 66 9c 69 83 b0 af dc 30 01 53 f5 63 c1 69 72 82 f4 1b 3a f8 fd 82 6a 14 81 b4 be 4a 0d 46 f7 4f a9 bf ad 96 fb 69 6d c2 17 fb f4 e2 d7 84 50 36 51 88 03 37 e7 77 f9 3c d8 47 dc 53 32 59 39 13 e5 26 0d ca c5 c6 db 3d 9b e2 02 75 09 80 ef ee 29 ab 5f df ce c9 c6 e1 fa 33 33 2c d4 a6 c9 9f 02 12 3c fc cf f2 e3 4f 3c f5 64 72 b0 27 c9 37 00 68 ee 96 dd b7 Data Ascii: YQ*q)\|HqP\|Q)kgKjk[:\|gjgA4{_WYTYx85&~}^\|AHYGc<8RN2r,wfi0Scir:jJFOimP6Q7w<GS2Y9&=u)_33,<O<dr'7h
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 21 ca a7 c0 22 7f e4 28 2c 01 e6 92 d4 d7 cb ba 88 be bb 6e dd 1e 6c 55 7b de a6 0f 54 53 16 84 27 69 b0 de bc 4b 4a 2b ad 5c cc fb 3b 50 c9 ea 29 87 95 01 29 ef 28 3a f9 f0 5f 66 41 d9 89 94 af 54 82 b2 67 80 0b d6 02 57 f1 0c b2 2d 22 6e b4 0f 22 6e a9 18 60 95 6a ab 81 b3 8e e3 21 7f b6 49 c5 c3 da 14 01 26 f8 66 e0 c7 29 ae e4 bf 84 9f 71 6e 8e 3e 40 ee 69 11 62 f0 24 89 b8 d8 ba c5 62 06 11 d5 bc d3 3d 2b d6 39 d2 85 d1 b4 39 b2 65 29 0e a8 54 43 2d f7 38 d5 86 a1 d2 dd eb d0 76 18 d7 4f 11 a9 98 d8 31 20 c9 00 51 98 ce c5 dc 29 81 c8 c4 56 c8 a8 06 80 89 58 40 02 1c c1 1b 74 43 a7 e3 80 70 aa 2d 8a 8e 49 e9 27 b8 38 47 55 3c 35 5c 65 33 a1 32 64 cd e0 37 d6 16 27 60 46 4b f3 b0 3d 0a 60 7f 5b dd b5 50 82 2a 4f 70 ed 9f 6c a4 3b 40 c7 13 96 f2 ca dc Data Ascii: !"(,nlU{TS'iKJ+\;P))(:_fATgW-"n"n`j!I&f)qn>@ib$b=+99e)TC-8vO1 Q)VX@tCp-I'8GU<5\e32d7'`FK=`[P*Opl;@
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 8f c8 da 4f 54 4c 56 20 2c 9d 75 15 2b 47 9e e2 a4 27 45 0a c6 ef 38 f0 5b 6c 6a 85 59 85 71 46 ba d2 1d af 48 85 e8 62 f3 ba 36 2c 96 7d 5d 41 af 37 66 44 ee 94 98 3a 61 ee 6c 82 f7 36 c5 f5 fc 0c 03 da 32 d0 ad 8e 32 ef a7 17 06 a0 1c 77 d5 0d e4 b9 f2 bd be 45 28 52 80 c9 7a ba 38 15 b4 f4 5e ca ba 6e 76 29 26 33 91 eb 70 33 f8 38 dd 31 0a e2 b4 5f 68 3b 7d dd 4b a3 97 49 e4 17 de 61 0d ef 1e de 41 79 46 92 3d cb f5 6b c6 f5 e6 47 cf 72 4f bd 83 aa 54 89 47 f4 ae 34 30 3c f1 d5 21 74 43 65 30 29 ec 96 b3 1b 26 94 b9 83 fd fb a0 62 e7 a1 71 9f 38 f0 98 0d 3f 1c 15 d5 1d 55 17 78 c0 16 14 4e af 52 7d e4 08 86 53 a0 b6 03 e7 90 06 1b 5d 0c c9 09 30 68 da 51 e4 ab 8f f1 42 3e 76 f9 a9 f0 84 bf 56 04 8a 5c 88 aa 6e f9 5d 50 7b f0 94 46 1b 8a 45 67 e4 b8 17 Data Ascii: OTLV ,u+G'E8[ljYqFHb6,}]A7fD:al622wE(Rz8^nv)&3p381_h;}KIaAyF=kGrOTG40<!tCe0)&bq8?UxNR}S]0hQB>vV\n]P{FEg
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 94 d3 99 52 86 74 25 93 ae a6 c3 ae d4 1f 93 a9 b1 14 34 21 f9 c7 d4 c4 96 c4 f7 12 d0 59 cf c7 c1 7b 42 c4 02 c2 f7 04 b1 b0 cf 7f 55 60 fa 48 35 40 d5 47 bf 8b c8 94 32 34 45 41 26 cb 5e 2e 43 a2 db e7 fe c8 ff b1 6b 42 4b d8 11 82 42 47 c0 05 3e 90 7f 35 90 25 5f c0 02 d1 ac 87 63 fe 29 cf 3b e5 e3 41 85 c7 17 ce 20 1a c4 cf 15 24 99 3e ea 35 4c 6c 49 fc 3e 91 f8 1d 47 f0 7d 16 be 57 37 0d ef 0f de 1b d2 17 3c 67 9c ab 01 5c 7d af f6 ef f0 1e f3 dd e1 3c bc 2b 9e bf 0c 36 b8 27 5d ef 84 8b 37 e0 b9 83 de 9a f3 91 65 3a 22 61 f7 42 31 93 2e 23 f7 c0 a5 aa 63 79 b2 2e 95 aa 4b 0a 49 d8 ff 0d 7f f7 de f7 77 21 ff 19 ee bd fc 7b 73 df 08 ae aa 93 4d 31 0f 34 55 4a d2 26 53 59 bc 6a a6 73 45 8a 22 93 02 ab fe bf 16 de eb 33 61 67 48 e0 bd 3b e0 ed 3e 49 97 Data Ascii: Rt%4!Y{BU`H5@G24EA&^.CkBKBG>5%_c);A $>5LlI>G}W7<g\}<+6']7e:"aB1.#cy.KIw!{sM14UJ&SYjsE"3agH;>I
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: e5 a4 41 dd c8 45 9e 01 14 be 80 cd ae f5 1e c6 46 a4 8e 51 89 1a 67 b5 93 c9 e4 bc b0 a4 c4 59 ca 64 8e a1 b0 13 93 d4 bd ea a4 34 67 40 68 4e 80 f7 9a 66 b1 93 e6 c0 78 d4 15 8a 90 a4 24 83 39 02 36 5f 69 36 24 25 2b 14 e1 a0 ea e6 30 45 52 b2 21 03 64 08 49 21 00 7d bb fc d8 89 a5 d8 7f 35 c7 46 d4 ab 46 a8 52 54 59 59 4d d8 8e f9 bb c4 a6 c6 68 63 74 4a b4 39 5b f7 ff a2 6a b7 a9 c6 92 d8 0f 0f c3 bd d0 1c 54 24 7e a2 4c 42 50 46 53 e7 6e ae 08 d8 00 ea d9 b2 db c0 df bf 24 86 7d f9 02 68 47 cb 9f 1f f5 df 59 15 13 fb 7f dc a2 7f 41 14 dd 37 1d 98 5a b4 6f 28 f2 3c 94 f9 be e0 5d 52 c1 af 6b 08 3e e5 d5 70 4c 89 6c 68 36 ee f4 bb bf cd 13 d1 91 bf fe fe 86 a2 07 a1 8d bb fc 28 5e 14 77 d7 db e8 b7 79 26 54 68 a2 93 94 08 4a ee 9b 26 cd 99 f2 2c 41 71 Data Ascii: AEFQgYd4g@hNfx$96_i6$%+0ER!dI!}5FFRTYYMhctJ9[jT$~LBPFSn$}hGYA7Zo(<]Rk>pLlh6(^wy&ThJ&,Aq
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 1f 00 1b 80 73 8f 06 c1 5e df b3 81 91 cf 0a 2b 6f 79 75 89 b5 69 42 34 3c bd 8f 8c a7 8b e5 b2 e0 75 47 6c 47 95 2a 92 29 b6 bd 4b 50 c6 65 0a 00 e9 83 b1 3d ed 4e 2f fb 0a 25 b2 88 77 1b 47 08 51 f3 b3 a0 c8 9e 06 42 f5 77 f0 75 b1 e1 0d af 4d 58 55 4c 6e 37 f4 3e 67 90 fc b9 70 68 3a 03 04 1e 26 35 9c 53 e2 64 02 ef 6e 7e d3 11 b0 3b 54 1a 2b 73 90 74 b1 21 20 c2 77 41 11 45 b9 52 d1 df d4 cd c6 08 e1 dd 26 80 a1 e1 b0 0a 96 98 b8 b7 71 34 c0 b8 bb f4 eb 49 fb 34 a7 bf 46 3d e0 f6 85 1c fe 37 1b a0 f7 0b c3 3f 89 28 6f 41 8d af 6c 0d 7e d7 58 6f da f5 71 d6 db d6 1b 6d c4 7e 9b 21 f2 25 12 7d c4 f0 fb 22 5a db 40 a1 d8 27 10 7d c5 48 e5 73 79 0d 6b 43 fa 7a 51 e3 53 83 d2 f2 6b 57 de 8d 33 15 65 8d 23 a7 bd 19 e7 bf 1e 13 af b9 7e cb bf f5 6d e8 a5 05 Data Ascii: s^+oyuiB4<uGlG*)KPe=N/%wGQBwuMXULn7>gph:&5Sdn~;T+st! wAER&q4I4F=7?(oAl~Xoqm~!%}"Z@'}HsykCzQSkW3e#~m
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 1e 2a a2 ca 74 11 91 dd 6e 9d ad 12 53 3c 3d ea 6d 3a 75 64 04 67 02 af b2 3c 2a 26 5c 4e 13 87 3e cc a5 0d f7 76 db 8a cd 7c 0c 90 da 92 00 af 13 92 e9 ec 46 36 00 ce b4 49 2c 60 df 6d 0f 3f 12 33 f6 21 1c fd 28 cf a3 5c 4b 9c a7 e4 29 50 38 e2 61 2c 93 e4 e7 31 a8 f0 4d 58 d5 5b 4c fe 65 56 63 38 46 1d 53 00 63 df 60 2e 5b 30 86 1a aa 70 71 a5 de b5 0d 3f 8a 82 31 68 22 d6 49 e1 e6 70 66 d3 85 a6 9c 70 cd 7a 12 16 8c a1 64 fe 92 f0 e1 12 5b 6b c6 ef fc 8a 06 f6 f5 de eb f2 3c 54 6e e4 72 8c e5 e5 f2 3e d4 fb 9c cd a6 9c b9 e1 ab 7a 13 d3 c9 67 96 36 4d 9d ce e1 4e 6f 6a 9a c2 a0 7d b4 64 2e f0 bb 94 ca ef eb fb c2 39 84 cb de cb 0a 4a 0b e6 2f e2 e6 52 73 e3 fe f7 52 73 91 4f 51 74 9d 0f 83 db 8f be e1 f0 97 af ef dd 76 58 b7 55 40 d7 27 44 d8 1c cd 93 Data Ascii: tnS<=m:udg<&\N>v\|F6I,`m?3!(\K)P8a,1MX[LeVc8FSc`.[0pq?1h"Ipfpzd[k<Tnr>zg6MNoj}d.9J/RsRsOQtvXU@'D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49979	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	595	OUT	GET /media/fonts/EuclidSquare/EuclidSquare-Regular.woff2 HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bitpanda.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:44 UTC	1068	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:44 GMT Content-Type: application/octet-stream Content-Length: 39424 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT, POST Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Tue, 09 Nov 2021 09:07:37 GMT ETag: "56fcedc954b09ce8f55c6780d55f1016" Cache-Control: public, max-age=36000 x-amz-version-id: 4M0XlHzQWFVNxdqjFSedaeNrmCzF_mWt X-Cache: Hit from cloudfront Via: 1.1 903a82370ff225ae16b374d8f5cbc5a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: O7NRdghYnagLn9GIDG-rK4Mg1CvLWv4iDBnHuWz2Kx4zfvJSdG5PZw== Age: 20489 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:44 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: _cfuvid=XYlCr71qeXCem6JlikTHdYMPtE4EVwLa19Ey1Y7PWEw-1714156364853-0.0.1.1-604800000; path=/; domain=.bitpanda.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a84039b5dab9-MIA
2024-04-26 18:32:44 UTC	301	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 9a 00 00 13 00 00 00 02 32 a4 00 00 99 93 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 81 08 3f 46 46 54 4d 1c 1a 36 1b 83 d3 00 1c ad 2e 06 60 00 88 76 08 2a 09 82 73 11 14 0a 83 f3 5c 83 b4 1c 0b 8b 04 00 01 36 02 24 03 96 04 04 20 05 8c 75 07 af 2c 0c 81 49 5b 12 0c 92 02 d6 c6 b6 53 5e 78 15 aa f4 66 d5 5f 5f 60 87 3f c8 01 3c d9 78 d2 d3 73 6b 87 80 5a 96 5d 09 db a6 47 b4 bb 55 15 78 04 f6 d9 ff ff ff ff bf 24 59 c8 d8 ee 1f b9 db 6f 00 43 00 11 4d b3 aa 0a f4 24 21 d1 0a a1 c8 28 19 61 3a a8 1f 98 c7 34 20 54 31 9d fb 92 91 4d 65 aa f2 72 8f f3 bc d8 a5 73 56 48 99 4e 24 d9 84 6d 4b 5e 80 85 e8 4c 52 51 df a8 2e ee 3c bb bc 6c 1e fd 9d de 2e 79 92 3c e1 e2 5d 8f 61 c2 6c 38 2e 2e 47 f7 a0 Data Ascii: wOF22?FFTM6.`v*s\6$ u,I[S^xf__`?<xskZ]GUx$YoCM$!(a:4 T1MersVHN$mK^LRQ.<l.y<]al8..G
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 19 66 61 c3 b5 76 56 ed 7e cb b9 59 6a cd f5 c0 98 ad 70 83 84 8a 4c ef 90 4b ba e2 c9 46 ac 28 26 30 dd fb 98 1e 2c e5 39 94 fc be a1 bc cc c7 88 f1 33 4c 44 41 7c 9d 6b 45 be 46 5d d6 62 fb 27 06 0c 77 67 b0 df 96 ce 7e 02 82 a7 8d ab f7 54 6b 9f 0d d6 05 f4 88 c9 3e a0 06 6a 96 cd dc ec d3 fc ac 24 e9 fe d2 f4 9c e9 8a 0e 5b 30 24 bc de 3f 50 c2 04 f1 1d c9 2b 01 b9 a4 a5 6e 4a 96 0e 49 9a 45 e8 b3 cf 17 fe b0 74 78 14 c4 bf cb 43 23 c2 f4 0b ff 41 82 d9 24 14 a3 03 75 28 4d de 50 9b cc 36 41 de 9f d4 be 9d a7 fe 69 01 fd bb 4b b2 25 0f 81 0d b8 0c 18 32 2d d9 b6 23 57 d2 fb f2 3c bc 7f ff d5 da fb dc 8f f2 6d 62 2c 84 14 a3 16 a2 19 67 46 d4 ed b0 ea 9d 9f e7 75 f3 cf bd ef bd 64 43 42 c2 48 48 42 08 21 60 c8 80 30 a6 10 08 61 ac 10 64 49 31 82 9b b1 Data Ascii: favV~YjpLKF(&0,93LDA\|kEF]b'wg~Tk>j$[0$?P+nJIEtxC#A$u(MP6AiK%2-#W<mb,gFudCBHHB!`0adI1
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: f4 77 6c 69 38 7b 0c 57 ef 37 7b 56 f5 13 5b b1 24 90 20 03 cc 80 e7 de b6 fd da 07 81 81 91 2a 3d eb aa 16 ec f2 99 e7 9e 00 bb c0 c2 0e 7e c9 f3 a7 56 54 57 94 95 03 79 ff 07 a6 64 82 f8 79 f3 aa 4b c1 f7 45 d5 53 4b e0 7e 5e df f5 2e 87 7c 34 80 c0 18 38 d0 fc 6f 08 18 1c e4 88 bf fd 3d af 00 f8 fd e9 6c fc 57 c2 97 3e 0a 01 fb 81 5b 02 45 41 f5 81 aa a9 2f 5c bf 46 40 1d 5b 13 dc d8 1e 82 90 40 81 00 7b 55 ab ed 89 45 65 89 a4 49 6e f9 e6 e8 90 2b 7c df 07 65 c8 81 f7 b8 8c 18 22 26 95 7d 8e e3 11 f7 bb 4f e6 42 a7 47 58 52 90 79 ac 25 95 58 42 79 d9 0b aa cb 13 49 a3 ed 24 0c 5e 73 58 b7 bb 2f a0 5b bf 0b 09 f2 a4 ee ba ae 7b 71 5d 8f 54 2f 18 d3 4e 19 a8 58 6e e3 33 78 39 7f 2f 3a 69 2e b4 3c 51 2a b6 82 21 c9 a2 27 c8 0c 59 2a 37 9a 9d 8a c5 70 61 Data Ascii: wli8{W7{V[$ =~VTWydyKESK~^.\|48o=lW>[EA/\F@[@{UEeIn+\|e"&}OBGXRy%XByI$^sX/[{q]T/NXn3x9/:i.<Q!'Y*7pa
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 9c d4 5c 4f 20 cf 60 d3 b8 9e d5 23 57 3d dd b1 2e 17 ea 64 85 cc 18 64 8e e3 e9 4f bd 5f ab 8b 99 42 07 b5 bf ab 20 1b 9a 1a 1e 21 29 de 2c f6 ea 85 d2 0b 84 fe e2 eb 33 19 33 98 53 58 cb d9 74 35 90 03 69 88 b8 74 5e 3c f3 1f 6d 32 b7 ca 9f 67 7a 72 86 62 02 1a 28 08 63 49 24 1d 58 77 a4 87 ea cb 1a 52 f9 a6 8d 64 3d 18 08 e0 04 81 2d c4 2d 30 94 b2 b2 c4 28 a9 b1 4a 0b d5 d4 38 6c 0d b4 66 50 8b e8 ed 20 ef 81 b5 b6 f6 a5 8e 84 6e a0 47 d0 b7 db 20 69 5d d8 50 99 af 6a 64 b7 07 59 01 de 78 62 d2 8e e7 25 60 13 cd 67 12 f1 1b 61 01 86 20 aa 87 b3 17 e7 39 c4 07 8c 70 3e e2 cc d3 9d eb 01 fa 80 21 cc 07 8d 00 0f e6 02 5c 5e 94 23 3a 78 7d d8 cf 39 3e 6a 84 82 02 5c 9e a3 4a 13 47 62 30 65 15 f1 45 12 33 a4 e6 30 16 31 27 b2 41 35 17 5c 50 8b c1 7b a3 dd Data Ascii: \O `#W=.ddO_B !),33SXt5it^<m2gzrb(cI$XwRd=--0(J8lfP nG i]PjdYxb%`ga 9p>!\^#:x}9>j\JGb0eE301'A5\P{
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: d8 61 84 23 c0 0f 94 3b 26 dc 79 d8 63 d8 20 ec 15 9c 68 e9 31 ca ca 5d e9 b9 27 2b 0f a4 e7 a1 ac 26 02 c9 15 89 42 31 61 31 e1 a0 70 a5 50 70 67 e4 b8 18 6a 9a 58 2a e0 b8 f4 a6 03 1c 5d 86 3f 09 f8 93 80 bf 4b 88 d1 c1 08 67 aa b8 6a 7d e4 80 62 2a 42 e7 48 f8 24 44 cd 8c 71 1a 62 a6 e5 5d 67 fe 6c d0 5f 32 0d 73 a7 a1 ff 55 b3 10 8c d8 52 c5 2a c0 81 a4 e2 0a 44 40 48 ee 28 3a cc e9 63 d1 e1 30 e2 d2 50 d0 31 ca 64 c6 97 88 92 8c 2f 85 83 54 7c 69 f8 2c f8 72 50 c6 a3 c9 43 f7 15 ba 7c 74 05 b2 14 a3 29 47 d3 88 ef 3c be c7 f8 06 f1 bd c2 8f 04 15 19 2a 72 54 82 f1 13 81 4a 34 4e 62 18 f2 10 27 8f 18 f2 04 27 83 0c a5 80 56 15 aa 5e a8 7a a3 3a 06 55 35 aa 63 51 8d 44 35 0a 55 23 aa d1 a8 c6 a0 6a 42 61 a2 60 2c 18 97 23 05 a1 c3 08 4f a5 c4 88 cc 23 Data Ascii: a#;&yc h1]'+&B1a1pPpgjX]?Kgj}bBH$Dqb]gl_2sURD@H(:c0P1d/T\|i,rPC\|t)G<rTJ4Nb''V^z:U5cQD5U#jBa`,#O#
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: d4 91 bc 52 46 c2 4c 24 ca ba 52 2b db ba b5 e0 53 45 91 68 a8 2d c9 5e 7c 9f 17 a4 23 10 88 10 84 01 04 ce 37 49 08 1d de 15 0e 2e e3 54 0f 77 c3 25 c6 37 20 6c b1 d8 57 b2 d3 27 99 01 cd da 49 75 35 09 31 0e 18 ca a1 e6 28 bc 40 80 4f 1a e4 35 86 16 7b d9 be a7 7c de 81 c5 96 1a 2b f4 16 ce a8 fd 67 77 6e 77 c8 46 d3 6c 5e 4e a8 4b f2 bc 50 54 5c 89 2b f4 1b 19 c1 29 71 2a aa 7c 6e 94 c7 3e 26 0c 55 9e 03 2a 6d fc a1 ae b4 94 3a 21 0d d8 a9 9d 92 6c 96 da e5 18 d8 96 37 e9 f2 89 4d 76 29 b2 37 ee 48 c0 b6 60 e2 22 eb 37 3b 56 44 49 89 cb 47 29 b0 a3 87 a4 97 b0 43 69 c0 db 61 9b 23 9c 09 9b 93 8a d3 ce e7 f9 8b 36 96 ec 35 0a bb d0 f1 fb 74 e9 72 f4 40 9c 49 39 6c 95 62 52 46 62 31 da 15 10 ca f5 43 b7 0a 3e 4c 7d ae c9 a0 d3 af 2a 79 4b 10 80 97 2f f5 Data Ascii: RFL$R+SEh-^\|#7I.Tw%7 lW'Iu51(@O5{\|+gwnwFl^NKPT\+)q\|n>&Um:!l7Mv)7H`"7;VDIG)Cia#65tr@I9lbRFb1C>L}*yK/
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: ed ac 5d 43 42 49 8c 1a d1 79 88 2c 18 f2 88 5b b7 23 a3 36 a5 59 de 2b 65 b5 58 de ae 70 1b 59 d7 b9 bf c1 22 0f 86 4b 75 54 93 dd 3c 1a 95 3f 75 a2 c8 2c 8a 47 14 fe 64 50 05 7a 5b e4 fb 49 0a de 29 ec f8 bc 75 30 e9 ad e6 67 ad 3e 87 79 88 e3 cf 48 17 09 0a 74 a3 55 f0 7a b6 a0 0a 9e ba a1 c7 7a 8a 74 b2 1b 98 c9 68 d7 b8 1f cf 7c e7 3e 5c 88 fa da 91 cd 90 c8 24 c5 6f 9f 07 ba 61 de 4d 8b 36 ec b1 69 d9 1d 2c 1e 48 4a 4d 26 07 03 95 80 f3 00 8d 38 06 9b 14 9f 40 f9 c8 33 1e ec 06 d3 4d a6 0d 55 9b b6 bb 23 eb 32 57 6a 27 62 92 d4 5c 80 9d 4c 08 23 dc 32 0c 57 a2 9e 27 8b 47 49 a7 25 9b f1 8f c9 04 78 88 1b aa 6e aa da 60 d9 b4 d3 1d b9 ac 2c e0 c0 cf 87 f7 47 c1 a8 d3 68 b3 a5 c7 31 b6 42 b2 fe b6 e3 72 b6 59 bb eb 8a c2 52 55 4e eb c0 50 3d 98 ac a7 Data Ascii: ]CBIy,[#6Y+eXpY"KuT<?u,GdPz[I)u0g>yHtUzzth\|>\$oaM6i,HJM&8@3MU#2Wj'b\L#2W'GI%xn`,Gh1BrYRUNP=
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: cc d7 50 2e 27 f3 0c 21 31 21 83 78 30 8c 13 f1 9c 66 d4 9d f1 f7 f0 f8 0f 37 86 09 22 4b c5 44 e7 e6 f7 36 21 bd 64 57 f3 a5 e3 8f cf d7 9e bf 57 cd 4e f0 d1 91 61 97 8f 66 a1 2e 9d 41 9a 1e c9 66 01 14 76 f8 da 2c 23 6f 4f 61 ca 53 40 c5 5e d6 74 c8 40 db 54 6c 56 f2 bd 09 9d 0a 64 1d a7 97 5e 20 e5 8c fa 61 74 23 e6 61 06 c0 31 85 be 6d 9c 5f 27 50 7a 3b f1 32 77 b4 8a 92 a9 02 95 b5 98 69 dc 0a c7 8f 90 91 45 19 e3 bd 1f 7a e1 30 33 33 16 0d 3f ff ee 5b 28 7d b9 45 d8 54 c2 3b c5 6d 48 15 2e c6 a5 2c 4a 1d 8d cc 20 0d 7d f8 08 ee b4 14 3f 61 ec 47 19 f0 da 1e 70 35 fd c2 be 5f c5 7d d0 1f e2 24 6b dc 55 33 60 77 31 b9 7f c0 cd 39 4e ac 52 e5 16 4c e9 ea c7 48 b3 84 5f 1c 47 a1 b0 3b 3d 8d ee 9e 56 bd a5 be d3 29 b7 b7 7d ac 29 3e 82 26 b9 7c 05 b3 e7 Data Ascii: P.'!1!x0f7"KD6!dWWNaf.Afv,#oOaS@^t@TlVd^ at#a1m_'Pz;2wiEz033?[(}ET;mH.,J }?aGp5_}$kU3`w19NRLH_G;=V)})>&\|
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 2b 45 02 ca c9 fb 61 dc 13 1a bb a6 d6 e2 8b 6e f3 5f 51 9c 80 63 3d 7f 6c 47 5b 0c a3 7b e9 dc eb 98 d9 96 3c 6b d3 95 03 33 c7 c3 d5 d4 2d 97 ce 91 b1 ef 78 c4 ae a5 31 de 34 d1 79 da 97 27 7f ba 4e c0 d2 5b 99 15 e1 3e 6c 84 44 f1 a1 62 46 fb b9 97 6a 4a de 3d fd 13 27 76 d8 7c 69 14 00 8d 00 0d c6 45 08 c4 c7 e6 b7 4e 52 06 ce a9 06 4c 75 65 f0 2e 53 c0 68 08 49 62 4c 54 19 9f 0a 4c 93 36 0e 94 ad c0 94 e1 22 02 aa 3e 47 5c c6 e4 c1 77 2c 9a 97 07 06 18 76 47 db 1d f9 14 f8 44 ee 57 38 65 84 ce 04 20 2d 1b b5 f5 9b 8c 64 ba 28 3e 14 11 0e 9d af 8e d3 c9 bb 6a 52 f6 25 28 80 70 f7 88 10 92 ad 85 a6 52 9e 22 59 a3 71 e4 e4 bb 2d 09 16 4b 48 76 a5 74 39 fc b7 23 eb 5a 55 b1 f3 b7 71 5b 59 02 3b b4 ae a8 ea 68 36 2e d9 45 48 29 de 92 04 9b 6c 36 6d c4 27 Data Ascii: +Ean_Qc=lG[{<k3-x14y'N[>lDbFjJ='v\|iENRLue.ShIbLTL6">G\w,vGDW8e -d(>jR%(pR"Yq-KHvt9#ZUq[Y;h6.EH)l6m'
2024-04-26 18:32:44 UTC	1369	IN	Data Raw: 6a c2 34 9d ac c6 25 74 e0 c4 bb 9b c1 43 80 20 68 a9 ff 9b 48 0d 59 07 b9 80 cb a1 39 3f f3 94 e5 c7 25 2a 84 83 b8 89 fe 47 3a f3 e4 af bc 33 30 3d 46 db 4c f9 21 c9 36 d2 f8 b0 01 13 f3 a6 2b c9 e4 5c ac fc d0 89 e8 8e bb 8a a8 08 f1 62 60 bc a8 57 24 21 2c fc 4a f7 d8 29 d1 77 b5 30 ae 20 45 4c 5a 3b e2 21 dd 62 1c ad ff 68 ce 72 e8 72 c8 e3 36 83 f5 c7 24 0b 6e 02 75 c7 85 40 ad 16 c3 9d 1b 95 5f 9c 05 da e1 98 f0 cc 47 28 f6 bf 86 f5 8b f4 50 26 69 44 79 10 a9 aa 00 85 d6 0e 14 69 37 da 80 a9 9f 3c af 6a 25 27 05 65 e8 8f af ae 91 83 b4 fe ad 62 65 34 5e f1 2e 84 f2 a6 6f 4d 29 fe 75 f6 64 dd 7d 22 fd 14 e3 15 18 aa 68 5a c6 80 88 7c b9 ea 32 94 a6 d4 20 f3 90 53 15 07 04 b9 19 64 22 9b 2a 0f 97 af 29 d3 f0 b8 d1 06 ca 7a 4a 04 f1 f8 c3 c0 15 5a ed Data Ascii: j4%tC hHY9?%G:30=FL!6+\b`W$!,J)w0 ELZ;!bhrr6$nu@_G(P&iDyi7<j%'ebe4^.oM)ud}"hZ\|2 Sd")zJZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49982	104.17.25.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	645	OUT	GET /ajax/libs/font-awesome/5.9.0/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://1movieshd.cc sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/css/all.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:45 UTC	966	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:45 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 75440 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "5eb03e60-126b0" Last-Modified: Mon, 04 May 2020 16:10:08 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 16 Apr 2025 18:32:45 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kkIQ4ZmobIu78NyfFFbEnmmEKz0OMu%2BVPnFZvLUWE5znNI6FPpIBu%2BKYkqqNPEhNwo6Z%2FgolvPHB0aeEtAazLPjbYlzTqEpgq8yVOwFBv1NJfFCemE3%2B9Nz4zTsf2pWv88k0NgNh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a8a842292f6dbc-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:45 UTC	403	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 26 b0 00 0d 00 00 00 02 ed 54 00 01 26 55 01 49 fb e7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 96 72 11 08 0a 8a 9c 0c 88 85 63 01 36 02 24 03 9d 7c 0b 9e 00 00 04 20 05 8a 25 07 dd 34 5b 45 52 92 42 b4 f3 af 14 b3 61 6e 1b 43 50 a7 51 f4 f3 3b 15 a8 6e 8d dc b9 6d c0 43 d6 52 97 cc c1 25 78 d3 31 05 ce 03 08 dc a8 3d 9b fd ff ff ff ff 6b 92 c5 18 f3 ff c4 03 e0 05 35 aa 2a cd aa b5 b6 4d 08 28 24 24 21 09 49 48 42 12 52 a8 49 1f 00 23 64 1f 52 b6 21 97 8c aa 1a e0 d8 a7 a9 94 52 4a 9e 21 f1 4e e7 9c 73 54 0d 50 11 50 11 50 11 50 f6 e5 60 66 d9 20 a5 aa e9 78 52 3e 54 dd 82 9c d1 45 7c e7 2b a0 8b 49 35 94 2f 43 4b 6d 69 32 f4 77 35 b3 f5 a2 6e fd 4b 4e ae 80 78 a1 eb 0d df Data Ascii: wOF2&T&UI?FFTM`rc6$\| %4[ERBanCPQ;nmCR%x1=k5*M($$!IHBRI#dR!RJ!NsTPPPP`f xR>TE\|+I5/CKmi2w5nKNx
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 3f b7 de f2 ff f5 df 9a 0d d8 18 0c 46 0f 36 68 dd 67 41 d4 36 60 a4 b2 51 1b 22 4a 0a 98 9b c9 30 00 c5 00 0b 8c 02 ef c0 48 f4 40 fb 4e 3c 39 a3 31 ee f4 f4 c2 b8 30 2e 19 e2 e7 f6 77 db 88 7c 23 07 c8 f7 60 54 8c 9e 7d 44 1b a3 e2 cb 91 62 cf ea c3 04 73 58 f9 6c 6c b0 f2 ac 40 87 95 cf 1e e6 ac 7e 54 ad 41 be 8b 88 72 a6 4b cc b1 10 f8 4c ac d5 66 08 89 92 29 95 4c 2a 64 d2 8b b1 2a 76 82 29 0f 9f b7 b7 ed 6e 3a f2 0d 30 ce 06 01 ce 92 38 cd 34 b0 2e a6 8f 80 1b 63 c7 34 c4 8e df eb b2 ff 82 96 e1 52 14 a2 10 92 2c b0 c0 36 c6 de db bd bf d7 ef 6f db 9e 4d 34 51 30 27 9f 74 ce 0c ad b9 90 4f fc c5 7d 43 43 a2 76 06 e6 64 ad 91 c9 f8 f4 3e 73 83 c6 90 9d ce 59 c6 3d d5 81 0f bb 70 ff 07 08 00 84 42 06 87 90 14 a9 04 09 e7 fe 86 19 41 c0 83 b4 f1 63 7b Data Ascii: ?F6hgA6`Q"J0H@N<910.w\|#`T}DbsXll@~TArKLf)Ldv)n:084.c4R,6oM4Q0'tO}CCvd>sY=pBAc{
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 8b 26 10 c9 74 16 1f be 66 72 24 25 27 60 90 33 30 f3 03 86 4a 42 cf c4 7f 48 38 44 34 2c 02 12 26 56 76 4e 7c 46 c3 22 a1 a5 67 62 85 ff 4a f1 e6 47 dd 8c eb f3 4a b6 3e 35 23 ab ab b0 4b 9f c2 f1 d4 cc d2 8a da d6 7e 7a 8b e3 df 51 ec 1c 5c dc 3c bd 85 44 bc f9 12 93 90 56 50 55 d7 d2 33 b5 b2 71 74 f7 12 16 97 52 50 d6 b2 b4 77 f3 ec 55 20 52 d3 36 36 b7 6e e5 6e fb cf cc 79 8b d7 6e d8 b2 d3 be 4d 4e 9b 35 7f d1 92 e5 2b d7 ac df bc 6d b0 ff 9d 43 89 cc ec aa c6 b6 ee e0 6e 3d c3 23 63 13 d2 b2 f2 8a 4b cb 6b ea 1a 5b da fb 17 9a 94 9e 5b 5c 5a d9 dc de b9 6b 28 3d 33 3b 37 bf b0 ac ba ae a1 b5 ab 4f 50 c7 80 e6 34 ea d0 25 6a 44 4e 11 e4 e6 83 c6 91 e9 42 b1 da ea 04 40 10 04 12 83 c3 13 c9 55 26 9b 93 2b 00 13 34 06 4b a4 b3 d8 5d 96 f6 3c cd fa 77 Data Ascii: &tfr$%'`30JBH8D4,&VvN\|F"gbJGJ>5#K~zQ\<DVPU3qtRPwU R66nnynMN5+mCn=#cKk[[\Zk(=3;7OP4%jDNB@U&+4K]<w
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 3c 20 31 52 e8 ce 2f 76 13 43 e3 c2 87 38 87 08 c6 0a 82 11 40 d8 ef 80 24 e9 97 4d f3 6a f1 a3 3c 05 74 9a 2e 73 da 0d 86 8c 19 a6 0c 7d 24 b6 e6 ec 2d 47 57 95 0b e7 86 e1 ca 48 b5 cf 2b 95 a2 02 64 85 17 f0 1a bf 00 1b f4 e5 2d e0 5b 60 b4 41 e6 db 62 27 26 58 2f 25 70 89 17 76 82 ad 80 3b d0 b3 e0 04 49 92 65 09 bb 3b 78 8f 63 ba 70 6b d5 0b 40 09 ab 37 9b 2e d2 0e 30 26 bb 33 28 6d 1e 50 d3 47 8c 69 c7 db d5 b5 88 5a 06 00 88 d2 e9 9a c8 64 02 e1 f5 c3 2b e5 1a 2c 66 a7 c7 56 36 22 67 c3 2b 36 99 ae 05 78 eb 75 90 22 4a 36 06 3a 32 83 39 ee 10 31 d1 29 15 c6 eb 36 63 96 51 a2 77 6e ca 68 27 8c dc 42 05 52 02 41 b7 bc 1a ba 0d 00 ed 71 12 31 9d c9 b2 b0 4d 46 27 2c 32 f3 f2 f8 14 40 08 72 c0 1c 90 c5 7d 9c c8 4f 3e e0 9b cd 52 f7 cf 70 04 9c 75 dd eb Data Ascii: < 1R/vC8@$Mj<t.s}$-GWH+d-[`Ab'&X/%pv;Ie;xcpk@7.0&3(mPGiZd+,fV6"g+6xu"J6:291)6cQwnh'BRAq1MF',2@r}O>Rpu
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 46 95 04 6b f3 25 bd 44 e5 b1 28 bf 8b ff 03 90 2a 05 ca 67 62 e5 c3 f2 b0 9f ce 3a b4 f9 f3 9a 85 f3 2a 27 89 8b ae eb 2f 92 0b e8 20 b2 fd b4 70 e7 d4 d1 e9 4a 1e 95 7a 15 05 4d 04 34 62 23 c0 34 28 b7 bc 38 13 10 16 dd 62 be 29 92 8c 1b a6 19 e5 89 e2 ef ef 30 af ee 92 ab 4a e6 a7 2c 33 71 68 32 7e c6 22 73 20 b6 47 cf 4b 79 5e 30 c0 ab 13 07 96 2b bc 8c 0f 10 ba ef 03 51 3d f9 40 8d fb f4 32 c0 9c 40 5f e6 c2 a3 05 d8 fe e0 1e 5a 82 7e c2 24 55 94 1c 6c dc 70 b9 6c a3 02 fa 43 3b 2f e8 f3 7a 2d a5 f6 f6 b3 63 3e 6d be 6d 00 6a ae 46 33 02 e0 01 00 9d e0 d2 22 3c 99 f7 3d c9 9b 4f d2 23 02 20 62 9c 72 0b 96 cb d3 09 65 19 70 04 72 c4 bc 8d a5 75 24 fd aa 75 95 2a 78 13 f4 85 3e ab 1e 56 57 ee bd f3 99 52 d9 21 51 75 d6 96 72 ff 98 a6 0b a2 e7 94 32 0a Data Ascii: Fk%D(gb:'/ pJzM4b#4(8b)0J,3qh2~"s GKy^0+Q=@2@_Z~$UlplC;/z-c>mmjF3"<=O# brepru$u*x>VWR!Qur2
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 85 83 78 0a 67 a2 3b 87 5d 24 06 ee 6b 33 99 d6 a1 3b 3d cf 7a d0 4f 6b d8 8c 67 0c d2 ea 67 66 9d 1d 7a 50 2d 7a 57 4e b2 7e 75 56 b7 2a 67 db 58 af 95 d1 4e 6d ba bd 74 74 56 74 aa 3d 16 ab 86 56 41 4c e9 3f 81 fb 63 f5 06 cd c6 3a d2 69 f3 c8 91 86 7c 3b 7a f8 2d 2e 8c 12 23 af 70 df d8 b3 c7 a6 d2 86 3e 03 36 85 db f1 f5 c9 c5 a7 7b 0f b6 d8 72 21 1a 4b 8d 3b e7 cd a0 b2 92 ad d7 37 4a 02 e4 00 e9 7b e2 27 0a 21 52 70 63 75 5c b7 6b 5f b0 3d d3 25 31 c2 74 2d 07 11 d7 38 00 63 ca 75 85 94 a8 81 01 8f 04 82 d0 62 14 f7 c8 72 13 66 41 a2 2a b4 cc ec 43 ac 50 da 14 41 24 9b 2f 31 01 83 12 7d 14 cf a9 20 56 1b 04 e2 99 e2 1e ba e0 19 b9 d9 fc 27 45 3b ef f7 72 93 92 10 35 b7 e8 77 04 79 54 6d 33 82 45 d2 3b c1 9f bd cb 98 23 d5 02 cc a0 db 86 27 0e 6e 58 Data Ascii: xg;]$k3;=zOkggfzP-zWN~uVgXNmttVt=VAL?c:i\|;z-.#p>6{r!K;7J{'!Rpcu\k_=%1t-8cubrfACPA$/1} V'E;r5wyTm3E;#'nX
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 1a 2d 0b 5c 59 be 7a 35 a9 fc ab 57 37 6e 09 54 d0 73 5d f8 c2 84 d3 b2 8f 57 66 53 89 95 a4 e6 21 7e 4f 22 23 72 05 89 6c f2 7b 37 31 a5 b3 d2 cd c3 30 76 bf 8d e6 13 19 12 c0 14 82 9d af b1 41 ed 38 20 14 81 56 c1 8c 6d cc 88 14 fd d2 84 9a 08 e9 1a 0b 4b 57 ee 72 9d 94 a1 19 93 4c 53 bf 39 b6 d5 e4 f2 c6 8a 56 30 8a 0b ae c1 9b 5c dc 1c b8 9b fd 76 ab 80 76 27 c3 b5 50 24 27 17 df ff f7 3d 42 83 31 9e da 20 96 20 66 60 55 b7 64 3e c2 14 66 66 24 1d ff 2d 73 d5 24 52 35 91 b8 63 0b 6b 64 52 53 17 e2 d0 80 6b 23 e0 f3 3b a7 55 87 27 62 aa c7 cf de 52 03 31 76 43 b7 44 32 a1 db e2 e6 a8 0e d9 ed 73 d8 67 f1 24 76 d9 99 bb 18 c0 f0 75 68 02 d4 3d 3c 5d ca 39 4b e0 34 6e 92 b0 48 4c fa 74 d5 5f ac 42 31 69 75 a9 d6 52 0a a8 1d cc eb 53 d9 30 8f ae d1 8c e7 Data Ascii: -\Yz5W7nTs]WfS!~O"#rl{710vA8 VmKWrLS9V0\vv'P$'=B1 f`Ud>ff$-s$R5ckdRSk#;U'bR1vCD2sg$vuh=<]9K4nHLt_B1iuRS0
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 0c 96 2c 55 4f e9 3b 00 83 2b bc e9 d1 dc fa ad b9 b2 fb 8b 7a 88 bd a2 01 da 2f 71 5d 4c 81 a7 1c 26 98 5a 25 e8 e2 03 2f 3d 04 44 7c a6 1e b4 cc 33 da 0a fa 02 7f e5 09 e9 09 8c 6e db 73 7f f0 f0 75 67 81 74 57 53 d9 9c 5a 20 21 98 7a 24 2b d0 75 ce 5d 25 0a 5c df 92 fe a3 8a 3e 80 ab a7 37 30 b0 16 14 d4 15 44 3a b3 64 2c 36 59 9e 55 0a 31 ac a6 f5 1c 88 a9 c7 96 e8 18 c0 18 ce da 2f 5f c7 6e 5a 54 34 d3 00 9f 26 d2 61 eb be 16 5f 7c c6 de 32 99 51 83 18 1a 24 4b fd dd 66 83 eb 71 03 12 2b 0d a0 dc 00 04 55 9c 99 97 82 1f 3b 56 73 6c 1e 86 39 4d 44 85 54 61 29 46 e2 27 e4 15 ba c7 d4 f9 6a 2a 50 ca a4 95 4e 43 1a da 9e 5d 43 7f bf 9d 63 6a cc 61 81 71 90 8e 91 39 aa d0 0d 93 fd ad e1 15 c8 8b c1 d0 e8 10 f5 7b 53 9e 2d d9 af 21 a6 d0 ae 6a 4a 61 f3 ea Data Ascii: ,UO;+z/q]L&Z%/=D\|3nsugtWSZ !z$+u]%\>70D:d,6YU1/_nZT4&a_\|2Q$Kfq+U;Vsl9MDTa)F'j*PNC]Ccjaq9{S-!jJa
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: a0 83 b1 c5 dd ec 71 88 27 49 86 98 26 5e 6f dd 96 c0 12 4c 98 4a 38 fc 76 7c da 68 fa 6f 92 65 bb 01 e7 b4 6b 4a 66 14 8a 3b d2 59 50 3c 7b f8 04 16 9b 20 08 bb ba 77 44 16 34 70 73 ab 3d 31 73 40 7c d0 1a 7c 90 09 34 4c a9 93 ac 71 fe 9c 79 e6 04 b5 bd b6 d6 65 76 50 da 5f 73 53 01 77 e9 81 a6 c4 be 48 46 50 24 96 bb e1 f0 f2 b6 e7 2a c3 d2 e9 1f c4 e2 3d 4d 2c 0e 99 92 ae 37 11 9d 1a 6b aa 4b 82 0f 56 2f 69 c4 31 0f 98 be 35 a1 1c 9f d7 07 46 87 cf 10 90 51 64 63 65 75 bb 13 c5 b1 e6 7d f8 84 9f 28 6c b6 48 11 f2 9a dd 1d f5 32 4b 29 fa 63 57 ff ef dd a3 eb 74 dc b5 d6 f5 8e d7 86 39 e5 f2 4e 2d 50 bc b9 17 72 43 12 c4 10 ca 59 f5 8c ff d4 ee 66 aa 07 8b f1 99 a1 e4 b4 38 2d 0e 4b e9 90 7a fa 1a 50 7b 0f 51 34 9d a5 14 eb aa 94 52 37 6f be a7 ab 6f 8a Data Ascii: q'I&^oLJ8v\|hoekJf;YP<{ wD4ps=1s@\|\|4LqyevP_sSwHFP$*=M,7kKV/i15FQdceu}(lH2K)cWt9N-PrCYf8-KzP{Q4R7oo
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: f4 03 c7 e9 9a 52 01 8f 79 00 8f 98 18 fd 18 fb 72 17 66 f3 3a 30 9a 61 63 2a 88 7d 02 62 e6 97 93 5c 8a 28 d6 ca 64 93 6a 27 ad 7f f3 4e 4e 86 26 a4 5a 86 97 f4 1a bc a2 26 1f 6f 6b 70 8a d1 35 d0 aa 63 a6 01 54 ee 94 ab a4 78 ab e0 a4 10 a9 49 8d 3a b4 80 c5 d4 b6 bf 7c df 33 09 c6 99 5b 10 25 c2 3f 51 2e 49 8d 5f 3e de fe 67 12 65 06 06 f0 2a bd 65 75 06 04 9a 5c 02 45 26 f8 10 8c 69 02 df 34 a8 04 57 04 c1 b2 39 aa 4f 10 13 0a a1 35 84 24 a9 50 9d 8c b2 cf ec 21 6d 83 98 98 f4 4b fd b2 c2 c2 58 a6 06 22 7a b3 4a 2c a2 c3 c7 c0 f6 7f a4 ea 7c 5d 9c b7 c6 4c 92 89 27 59 69 33 de ff de f1 d0 94 7c fb b3 45 1d 4c 74 7d 53 7c 97 4f 44 d2 df 3a c5 79 e8 db c5 11 29 4f 7c ce 84 e4 6c a6 e9 80 c3 a8 c7 09 71 15 7c 4d 83 9d b1 10 8e 88 3a 72 f4 9c a2 f5 73 95 Data Ascii: Ryrf:0ac}b\(dj'NN&Z&okp5cTxI:\|3[%?Q.I_>geeu\E&i4W9O5$P!mKX"zJ,\|]L'Yi3\|ELt}S\|OD:y)O\|lq\|M:rs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49980	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:44 UTC	680	OUT	GET /app/v2/css/all.min.css?id=0a6b6e34d2ce5388c046c8290ba08dfd HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000
2024-04-26 18:32:45 UTC	790	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:45 GMT Content-Type: text/css Content-Length: 655148 Connection: close Last-Modified: Tue, 05 Mar 2024 12:12:31 GMT ETag: "0a6b6e34d2ce5388c046c8290ba08dfd" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=15552000 x-amz-version-id: rFpVLPKI3mAVJDIWzHQp2BFm35aI8Pb4 X-Cache: Hit from cloudfront Via: 1.1 903a82370ff225ae16b374d8f5cbc5a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: BytE3qd_Frr809yfhJkHqYX5oTBG8oVK8QzTt3kKa4YGfaNO32sz1Q== Age: 359071 CF-Cache-Status: HIT Expires: Wed, 23 Oct 2024 18:32:45 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a84148b04c1f-MIA
2024-04-26 18:32:45 UTC	579	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 62 70 63 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 70 63 2d 63 75 73 74 6f 6d 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 2c 23 34 31 39 31 65 63 29 3b 2d 2d 62 70 63 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 70 63 2d 63 75 73 74 6f 6d 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 2c 23 65 30 34 64 34 64 29 3b 2d 2d 62 70 63 2d 73 70 69 6e 6e 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 70 63 2d 63 75 73 74 6f 6d 2d 73 70 69 6e 6e 65 72 2d 63 6f 6c 6f 72 2c 23 66 37 66 37 66 38 29 3b 2d 2d 62 70 63 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 70 63 2d 63 75 73 74 6f 6d 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2c 23 32 65 33 38 34 35 29 3b 2d 2d 62 70 63 2d 74 Data Ascii: :root{--bpc-primary-color:var(--bpc-custom-primary-color,#4191ec);--bpc-secondary-color:var(--bpc-custom-secondary-color,#e04d4d);--bpc-spinner-color:var(--bpc-custom-spinner-color,#f7f7f8);--bpc-border-color:var(--bpc-custom-border-color,#2e3845);--bpc-t
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 66 22 29 3b 2d 2d 62 70 63 2d 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 70 63 2d 63 75 73 74 6f 6d 2d 66 6f 6e 74 2d 73 69 7a 65 2c 31 32 70 78 29 3b 2d 2d 62 70 63 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 70 63 2d 63 75 73 74 6f 6d 2d 6c 69 6e 65 2d 68 65 69 67 68 74 2c 6e 6f 72 6d 61 6c 29 3b 2d 2d 62 70 63 2d 72 6f 77 2d 78 2d 6d 61 72 67 69 6e 3a 76 61 72 28 2d 2d 62 70 63 2d 63 75 73 74 6f 6d 2d 72 6f 77 2d 78 2d 6d 61 72 67 69 6e 2c 31 36 70 78 29 3b 2d 2d 62 70 63 2d 72 6f 77 2d 78 2d 6d 61 72 67 69 6e 2d 73 3a 76 61 72 28 2d 2d 62 70 63 2d 63 75 73 74 6f 6d 2d 72 6f 77 2d 78 2d 6d 61 72 67 69 6e 2d 73 2c 31 30 70 78 29 3b 2d 2d 62 70 63 2d 72 6f 77 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 70 63 2d 63 75 73 74 6f 6d Data Ascii: f");--bpc-font-size:var(--bpc-custom-font-size,12px);--bpc-line-height:var(--bpc-custom-line-height,normal);--bpc-row-x-margin:var(--bpc-custom-row-x-margin,16px);--bpc-row-x-margin-s:var(--bpc-custom-row-x-margin-s,10px);--bpc-row-height:var(--bpc-custom
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 2d 66 65 65 73 2d 74 61 62 6c 65 20 2e 74 61 62 6c 65 5f 5f 72 6f 77 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 35 30 70 78 20 37 38 70 78 20 37 34 70 78 20 31 30 30 70 78 7d 2e 62 70 63 2d 66 65 65 73 2d 74 61 62 6c 65 20 2e 74 61 62 6c 65 5f 5f 72 6f 77 20 2e 74 61 62 6c 65 5f 5f 63 65 6c 6c 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 70 63 2d 72 6f 77 2d 78 2d 6d 61 72 67 69 6e 2d 73 29 7d 2e 62 70 63 2d 66 65 65 73 2d 74 61 62 6c 65 20 2e 74 61 62 6c 65 5f 5f 72 6f 77 20 2e 74 61 62 6c 65 5f 5f 63 65 6c 6c 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 70 63 2d 72 6f 77 2d 78 2d 6d 61 72 67 69 6e 2d 73 29 7d 7d 2e Data Ascii: -fees-table .table__row{grid-template-columns:50px 78px 74px 100px}.bpc-fees-table .table__row .table__cell:first-of-type{margin-left:var(--bpc-row-x-margin-s)}.bpc-fees-table .table__row .table__cell:last-of-type{margin-right:var(--bpc-row-x-margin-s)}}.
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 72 6b 65 74 73 2d 74 61 62 6c 65 20 2e 74 61 62 6c 65 5f 5f 63 65 6c 6c 2d 2d 68 65 61 64 65 72 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 65 6e 64 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 33 31 30 70 78 29 7b 2e 62 70 63 2d 6d 61 72 6b 65 74 73 2d 74 61 62 6c 65 20 2e 74 61 62 6c 65 5f 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 68 69 67 68 2c 2e 62 70 63 2d 6d 61 72 6b 65 74 73 2d 74 61 62 6c 65 20 2e 74 61 62 6c 65 5f 5f 63 6f 6e 74 61 69 6e 65 72 20 2e 6c 6f 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 62 70 63 2d 6d 61 72 6b 65 74 73 2d 74 61 62 6c 65 20 2e 74 61 62 6c 65 5f 5f 72 6f 77 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 67 61 70 3a 38 70 78 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 61 72 65 61 73 3a 22 6d 61 72 6b 65 74 2d 6e 61 6d 65 Data Ascii: rkets-table .table__cell--header{align-self:end}@media (max-width:1310px){.bpc-markets-table .table__container .high,.bpc-markets-table .table__container .low{display:none}.bpc-markets-table .table__row{grid-column-gap:8px;grid-template-areas:"market-name
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 61 62 6c 65 20 2e 70 6f 73 69 74 69 76 65 20 2e 70 72 69 63 65 2d 63 68 61 6e 67 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 70 63 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 29 7d 2e 62 70 63 2d 6d 61 72 6b 65 74 73 2d 74 61 62 6c 65 20 2e 6e 65 67 61 74 69 76 65 20 2e 70 72 69 63 65 2d 63 68 61 6e 67 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 70 63 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 29 7d 2e 62 70 63 2d 6d 61 72 6b 65 74 73 2d 74 61 62 6c 65 20 2e 6d 61 72 6b 65 74 2d 6e 61 6d 65 7b 67 72 69 64 2d 61 72 65 61 3a 6d 61 72 6b 65 74 2d 6e 61 6d 65 3b 6a 75 73 74 69 66 79 2d 73 65 6c 66 3a 73 65 6c 66 2d 73 74 61 72 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 62 70 63 2d 6d 61 72 6b 65 74 73 2d 74 61 62 6c 65 20 2e 6d 61 72 6b 65 Data Ascii: able .positive .price-change{color:var(--bpc-primary-color)}.bpc-markets-table .negative .price-change{color:var(--bpc-secondary-color)}.bpc-markets-table .market-name{grid-area:market-name;justify-self:self-start;text-align:left}.bpc-markets-table .marke
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 70 63 2d 72 6f 77 2d 78 2d 6d 61 72 67 69 6e 29 7d 2e 62 70 63 2d 73 63 6f 72 65 62 6f 61 72 64 2d 74 61 62 6c 65 20 2e 74 61 62 6c 65 5f 5f 72 6f 77 2d 2d 68 65 61 64 65 72 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 70 63 2d 74 65 78 74 2d 64 61 72 6b 2d 63 6f 6c 6f 72 29 7d 2e 62 70 63 2d 73 63 6f 72 65 62 6f 61 72 64 2d 74 61 62 6c 65 20 2e 74 61 62 6c 65 5f 5f 63 65 6c 6c 2d 2d 68 65 61 64 65 72 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 65 6e 64 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 38 36 70 78 29 7b 2e 62 70 63 2d 73 63 6f 72 65 62 6f 61 72 64 2d 74 61 62 6c 65 20 2e 74 61 62 6c 65 5f 5f 72 6f 77 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 36 30 70 78 20 33 30 70 78 20 31 36 30 70 78 20 36 30 70 78 20 31 35 30 Data Ascii: pc-row-x-margin)}.bpc-scoreboard-table .table__row--header{color:var(--bpc-text-dark-color)}.bpc-scoreboard-table .table__cell--header{align-self:end}@media (max-width:786px){.bpc-scoreboard-table .table__row{grid-template-columns:60px 30px 160px 60px 150
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 3a 2d 2e 32 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 70 63 62 6f 75 6e 63 65 64 65 6c 61 79 7b 30 25 7b 6f 70 61 63 69 74 79 3a 2e 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 7d 34 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 38 30 25 2c 39 30 25 2c 74 6f 7b 6f 70 61 63 69 74 79 3a 2e 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 7d 7d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 3a 72 6f 6f 74 7b 2d 2d 62 70 2d 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 3b 2d 2d 62 70 2d 66 6f 6e 74 2d 73 69 7a 65 2d 73 6d 3a 31 34 70 78 3b 2d 2d 62 70 2d 66 6f 6e 74 2d 73 69 7a 65 2d 6c 67 3a 32 33 70 78 3b 2d 2d 62 70 2d 63 6f 6c 6f 72 3a 23 32 37 64 31 37 66 3b 2d 2d 62 70 2d 70 Data Ascii: :-.2s}@keyframes bpcbouncedelay{0%{opacity:.1;transform:scale(0)}40%{opacity:1;transform:scale(1)}80%,90%,to{opacity:.1;transform:scale(0)}}@charset "UTF-8";:root{--bp-font-size:17px;--bp-font-size-sm:14px;--bp-font-size-lg:23px;--bp-color:#27d17f;--bp-p
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 75 6b 2d 6c 69 6e 6b 2c 61 7b 63 6f 6c 6f 72 3a 23 31 65 38 37 66 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 75 6b 2d 6c 69 6e 6b 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 20 2e 75 6b 2d 6c 69 6e 6b 2c 2e 75 6b 2d 6c 69 6e 6b 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 20 2e 75 6b 2d 6c 69 6e 6b 2c 2e 75 6b 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 66 36 65 63 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 61 62 62 72 5b 74 69 74 6c 65 5d Data Ascii: ne-height:1.5}body{margin:0}a:active,a:hover{outline:none}.uk-link,a{color:#1e87f0;cursor:pointer;text-decoration:none}.uk-link-toggle:focus .uk-link,.uk-link-toggle:hover .uk-link,.uk-link:hover,a:hover{color:#0f6ecd;text-decoration:underline}abbr[title]
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 75 6d 2c 2e 75 6b 2d 68 65 61 64 69 6e 67 2d 73 6d 61 6c 6c 2c 2e 75 6b 2d 68 65 61 64 69 6e 67 2d 78 6c 61 72 67 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 45 75 63 6c 69 64 53 71 75 61 72 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6d 61 72 67 69 6e 3a 30 20 30 20 32 30 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2a 2b 2e 61 73 73 65 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 5f 5f 74 69 74 6c 65 2c 2a 2b 2e 62 70 2d 68 65 61 64 65 72 2d 2d 73 69 7a 65 2d 68 31 2c 2a 2b 2e 75 6b 2d 68 31 2c 2a 2b 2e 75 6b 2d 68 32 2c 2a 2b 2e 75 6b 2d 68 33 2c 2a 2b 2e 75 6b 2d 68 34 2c 2a 2b 2e 75 6b 2d 68 35 2c 2a 2b 2e Data Ascii: um,.uk-heading-small,.uk-heading-xlarge,h1,h2,h3,h4,h5,h6{color:#000;font-family:EuclidSquare,sans-serif;font-weight:400;margin:0 0 20px;text-transform:none}+.asset-description__title,+.bp-header--size-h1,+.uk-h1,+.uk-h2,+.uk-h3,+.uk-h4,+.uk-h5,+.
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 31 65 33 65 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 37 29 3b 66 6f 6e 74 3a 31 34 70 78 2f 31 2e 35 20 43 6f 6e 73 6f 6c 61 73 2c 6d 6f 6e 61 63 6f 2c 6d 6f 6e 6f 73 70 61 63 65 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 2d 6d 6f 7a 2d 74 61 62 2d 73 69 7a 65 3a 34 3b 2d 6f 2d 74 61 62 2d 73 69 7a 65 3a 34 3b 74 61 62 2d 73 69 7a 65 3a 34 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 6f 6e 73 6f 6c 61 73 2c 6d 6f 6e 61 63 6f 2c 6d 6f 6e 6f 73 70 61 63 65 7d 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e Data Ascii: ound:#fff;border:1px solid #e1e3e6;border-radius:3px;color:rgba(0,0,0,.7);font:14px/1.5 Consolas,monaco,monospace;overflow:auto;padding:10px;-moz-tab-size:4;-o-tab-size:4;tab-size:4}pre code{font-family:Consolas,monaco,monospace}::-moz-selection{backgroun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49984	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	698	OUT	GET /xxrz/250x400/793/4e/83/4e83cbfdc6263b8fdd928b5e14aaaac1/4e83cbfdc6263b8fdd928b5e14aaaac1.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:45 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:45 GMT Content-Type: image/jpeg Content-Length: 52216 Connection: close Last-Modified: Tue, 12 Mar 2024 09:09:55 GMT Vary: Accept-Encoding ETag: W/"65f01be3-7142" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6943 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zLm7Y1jDv4sm%2Bl3pdG9uRzDRrPaATeauzJIvfFR9t16MPcGCN0xLMn9L7MPuBzpX32ODPPQ%2FFdLze71YCED2MisCKUswPjGYFmfDfgh9F6F1Ad7lckE14e1SJQ%2F0vkIX%2F8wq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a842d8e89ae3-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:45 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 6d b4 50 23 22 5e 8e 82 60 42 de 33 82 67 ea 75 00 75 1f b0 60 4a 7b 23 01 75 99 0d 1e 71 1e 64 93 6c 10 ee 45 31 23 ff 00 27 e1 cc 85 a6 b1 b5 4a a4 9c ae 7e 43 a5 fc db 13 de 5d 64 6c 99 3c 6b 1e de 26 21 18 f7 f1 9c d5 37 05 b3 c5 67 33 b0 0d fe a5 da 7b 66 8c 6f 3a c6 f8 78 34 b6 2d a2 a3 dc 80 62 cd c4 11 85 1d bc 47 b9 16 be 79 d5 ca f1 b6 be 9c 79 ed 9d 04 a7 b7 18 d5 73 e9 ae a1 2c e0 04 80 01 25 bc e2 ae 63 71 b3 0b e2 58 d5 1c e5 c5 f6 26 ae 10 de 23 4d 69 5d 43 b6 d6 82 f7 b8 81 33 e5 65 7c c8 bc bb 41 b2 e8 b0 f4 26 61 e6 b4 e2 c0 c8 28 c2 7a 58 d6 b3 ee 2b 5b a4 67 e9 ac fb 72 99 65 03 6d 3d 39 f3 4d f5 db 8f 3d 00 12 dc 00 04 80 01 20 00 48 00 12 00 04 8d 26 34 25 57 0e 95 d9 cc c0 aa b7 67 1b d8 e7 15 73 3c ee c4 49 2d 5b e1 0b dd f7 a5 58 Data Ascii: mP#"^`B3guu`J{#uqdlE1#'J~C]dl<k&!7g3{fo:x4-bGyys,%cqX&#Mi]C3e\|A&a(zX+[grem=9M= H&4%Wgs<I-[X
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 44 fb 2e 31 ef b5 4e 95 b0 5a 74 d7 f0 d5 62 2f 90 90 d0 23 ac 87 6d 2c c7 f1 2a e2 ac c4 a4 bb 9f 55 d5 60 75 99 9e ea 0d b9 d1 07 59 f8 7a 2c 69 92 4c db 71 e7 b2 59 db 4c f9 dc ba 7e 62 eb fd 94 fd 0b 22 56 4c c2 dc 4c 95 d8 54 b4 47 b0 e4 b9 e6 cd 59 d4 69 0e 27 b2 47 ad 87 d5 7b 26 3a 9b 47 fc 44 5e 3d 72 9d af 99 b1 16 09 c5 20 d2 29 f6 6a 35 4c 85 1a 15 9d b6 35 48 2b 26 82 d6 d0 22 58 dd 57 8c cf 84 50 6e 13 d9 f3 e7 38 10 22 c6 05 b8 28 ce 32 96 33 80 92 95 fb 8c 06 f5 05 53 61 75 09 97 a2 3a 24 c6 51 c4 e5 45 55 9c 9d 38 8c c6 10 6c 25 31 9c 55 3a 65 d9 3b ef 1c 3b 5b f1 e7 20 65 9b a9 b5 8f 53 14 dd a5 6f 68 7b 90 ba 14 5e d0 9b f3 f3 fb bf 1b ae df ea 5e d7 82 8b 2b f2 34 3a ed 81 04 42 8e 4e a2 e2 80 d2 c0 05 88 98 ce 02 40 67 09 00 02 59 ef Data Ascii: D.1NZtb/#m,*U`uYz,iLqYL~b"VLLTGYi'G{&:GD^=r )j5L5H+&"XWPn8"(23Sau:$QEU8l%1U:e;;[ eSoh{^^+4:BN@gY
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 4c 65 8b 0e 2b 52 b8 f1 c5 0c 71 18 3e f3 45 02 0d 72 d6 c4 e3 dd 87 cb db 86 af 77 d9 e7 ec 86 64 c1 4b af 6d 0e 97 35 fd ba 61 f0 79 41 ba 65 ce b3 f9 b6 0d 20 52 d2 aa 65 14 60 09 47 e5 29 be 17 51 d9 35 c2 ee 12 36 6a ed 91 5b e7 3e 5e 16 ca 5e 52 45 55 57 b7 85 f4 e7 f2 a7 de 0c a9 03 9a 8a e9 08 8a aa fa 61 e4 ae d8 21 b1 1a da 01 d9 0d 7f e2 52 d6 54 1e 8e 68 76 2e 8f 35 fd a2 55 4b 93 dc 58 9b 3b 1c d9 ac 30 b4 57 2f b5 57 e4 a0 fc 4b 0b a2 5e 3f d1 a8 b2 78 13 81 65 e5 40 2f 94 65 da f6 f7 a6 a4 75 14 70 68 83 90 f0 a7 84 ee 59 5d 65 24 72 09 76 d9 87 da 17 b9 c7 c6 f7 af b1 ee 56 55 fe 59 2b 7b 72 c8 4c 91 8a c7 7f a3 57 68 f1 9c db 04 7b 05 21 f6 b6 b6 53 a3 86 30 36 bd e3 1a e8 1c 31 c8 ec 00 f7 73 67 d9 34 65 c2 d5 90 70 91 ef 82 a1 de 23 6b Data Ascii: Le+Rq>ErwdKm5ayAe Re`G)Q56j[>^^REUWa!RThv.5UKX;0W/WK^?xe@/euphY]e$rvVUY+{rLWh{!S061sg4ep#k
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 13 04 ee 11 ec 53 eb 7b d6 23 9c f5 f1 a6 39 98 c0 8a 21 4a a3 b6 16 15 f8 ce 8c 88 e9 e1 da 1f 24 75 57 08 ae 9a 99 bc a2 45 f1 f4 f4 ff 00 fb ff 00 50 d7 f4 4e 9a ff 00 53 b2 7f 93 6c b6 13 d5 55 51 5b 19 79 76 5c 2c 0e 2b d5 e2 a0 e7 7e 6f 48 66 92 07 ea 7b 1a 8e 65 c8 a2 1c 84 86 8d 75 95 19 62 c1 5d a6 8f 70 1d 16 b0 3b 2d ae 2b 44 5d 9e 69 41 a2 00 bf 19 35 d3 ff 00 3f 46 a2 48 ab b6 a9 d7 f0 fb 9f 99 ea 20 ec 87 dc 27 a7 19 c6 71 9c 67 4f 53 f5 ed d8 12 ec 2b 3a 7c 24 a1 99 7e bc ed 87 57 8d 62 3d 94 35 da ee d4 fb 2a ee cd a3 66 1d e1 47 51 67 60 a5 6a 57 41 09 47 a1 49 68 15 c6 89 5b 57 51 a7 51 d5 ba 9e 37 c4 e4 b0 ee 8a f3 64 fe d1 af a7 15 31 41 e3 b5 b0 8d 1d bd ed 90 4c 4d 4c 8b b3 7e 1d 37 cb fa 5a a9 0d 6e e6 6b 50 22 79 98 b8 5f e2 85 4e Data Ascii: S{#9!J$uWEPNSlUQ[yv\,+~oHf{eub]p;-+D]iA5?FH 'qgOS+:\|$~Wb=5*fGQg`jWAGIh[WQQ7d1ALML~7ZnkP"y_N
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 11 24 05 bc 4e 13 72 61 d1 32 78 f2 44 c8 07 9c a9 46 d1 b6 42 56 97 a5 23 a6 55 42 25 40 db 87 b6 2d 96 80 a0 f8 52 3d be ab f5 c3 c2 24 6f e3 23 93 22 93 23 93 11 c8 b8 d5 6a a4 78 89 f3 1a a6 22 a6 49 db 93 35 30 86 61 8e 44 ca 7d 04 fb 40 c6 ba ae d7 27 03 70 80 9c ae 3e 52 56 df 61 6d 43 af 23 78 95 62 82 eb 3a a8 ab a2 28 8b 9a 32 2b 17 d7 8c e3 38 ce 33 8c 62 fc 23 be 59 26 45 3e 45 37 18 d9 bb b1 24 5c 49 57 86 ca b9 1c bf 3e 64 c7 4a dc 92 56 e1 4e 44 6d 35 01 9b 2d 9e d1 b6 40 08 f2 95 2c 92 0f 60 44 12 52 ec 1f 80 d7 46 5a ec fb 26 eb b4 c2 6a f4 ce c8 28 04 36 ca 21 2f 2a 25 a5 db eb a6 e9 c4 5e 6f af 9c 45 c6 aa e3 1f 91 ce fc 8e 69 72 39 df 8d 9b 19 22 b9 18 e5 5c 6a 39 71 51 dc 2a 71 86 22 2b 6b 0b 34 48 c9 16 75 7a b5 51 6a 38 86 cb 6b dd Data Ascii: $Nra2xDFBV#UB%@-R=$o#"#jx"I50aD}@'p>RVamC#xb:(2+83b#Y&E>E7$\IW>dJVNDm5-@,`DRFZ&j(6!/%^oEir9"\j9qQq"+k4HuzQj8k
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 5a 35 f5 1e a4 0f 23 8a 6a c8 2b e2 13 d3 32 9d 6b a8 5a da 58 6d 6b 79 7e ec 66 59 16 57 9a dd 6a a9 d5 27 b6 f2 28 09 25 ed 60 43 28 1f cb 1c 2f 90 7e 4f 66 75 33 17 12 43 3c 2b 1c 2e 40 d4 17 98 ac ca 4d f7 bf 77 7d bd 98 ac 8a 1a d8 1a 09 16 e1 85 87 90 1b 74 18 cb a3 ae cb 73 89 29 c3 48 29 9a 46 ee 9f a9 6f 02 3c fc 71 52 dd df 6f f4 b6 38 82 a3 e8 9e 2d ce b0 47 f2 c3 a9 49 1d 4f 50 6d 81 6d ee 6d b6 de b3 e5 fe c3 86 33 c9 32 da 95 82 47 ff 00 56 90 ed 7f cd bd ef 7b f9 1f 1c 41 5f 05 52 a8 90 a8 3e 0d d0 f8 74 c2 d1 bd 6d 7c b1 24 8d ca cb a8 0d 49 00 d9 5a 79 e4 fa 20 7c c0 48 64 3e d2 3c b7 86 a4 32 00 c3 bc 9b 1d ff 00 b6 2a ca 33 89 42 ae ad fc 3f 67 13 36 b8 ba 5b f0 31 2e 58 6a 5c 6b 5b 8f 2f 6d b1 9c 70 c4 73 44 f2 42 39 73 2a dd 74 db 4b Data Ascii: Z5#j+2kZXmky~fYWj'(%`C(/~Ofu3C<+.@Mw}ts)H)Fo<qRo8-GIOPmmm32GV{A_R>tm\|$IZy \|Hd><23B?g6[1.Xj\k[/mpsDB9stK
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: e6 d2 d6 c6 f4 ef 4c b5 08 c0 4d 1e 89 15 59 ac 41 17 df 19 d7 6c 19 6e 7d db 57 09 66 dc 33 4b 59 99 d1 e5 b1 ae 4f 0c 69 a2 09 f3 29 2a 8c c8 79 22 76 0b 1a ea 99 00 32 b2 ec 09 db a0 e3 2c f7 8b 73 9e dc 78 22 95 72 7a 7c 93 33 a0 86 2f 93 e9 33 2a b1 5b 4f fe b0 6a a5 33 d5 35 17 d5 2c 35 6a 8d 19 ad 6d db cb 33 e1 dc eb b4 4c c3 3c a3 e3 ae 23 a1 a0 ca b8 0b 30 a6 a9 65 c9 f2 fe 5c 52 34 f4 02 79 25 92 7a 99 1e 61 1c 70 be 83 a9 5b 55 f5 6d d3 1c 29 d9 b7 00 57 49 c4 99 cc 9c fc f7 26 ca a7 48 68 97 5b 28 9d 56 96 39 a6 91 b9 62 26 93 bc da 50 77 45 ba df a6 3e 10 39 2e 45 c1 f9 be 4f 27 0e 51 45 4f 4b 59 41 cc aa a5 82 52 eb 14 a9 2b 28 6b 33 b9 52 c9 6d 4b b0 be e3 19 7e 65 0d 6a 0e 53 8b ed 75 63 66 53 eb 1e ec 65 b9 5d 16 6e b5 34 99 94 29 2c 4d Data Ascii: LMYAln}Wf3KYOi)y"v2,sx"rz\|3/3[Oj35,5jm3L<#0e\R4y%zap[Um)WI&Hh[(V9b&PwE>9.EO'QEOKYAR+(k3RmK~ejSucfSe]n4),M
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 96 b2 af 8d a9 d4 41 23 a7 30 19 33 4a fa a8 ce 90 c7 50 b3 c5 72 0f 77 50 bf 96 2b f3 bc b3 2d ed 43 3c 9e bf 30 a4 a4 44 e0 84 89 64 9e a2 18 d4 c9 e9 1a b9 6a 4b ef 29 b0 ee 0b 9c 71 e7 6b dc 39 51 c2 bc 1d 35 1d 6c 79 86 71 97 e7 19 3e 65 5f 97 20 7e 62 ad 04 72 73 c3 c8 50 44 a6 e0 05 dd af 71 8e 2d f8 49 f0 a0 cb f3 a9 78 77 21 cc be 5e cf 32 a1 96 49 5b 5a d1 45 0c 2a 22 9a 38 f5 24 72 ca 5f 90 2a 65 28 14 27 78 83 7d b1 c0 53 93 98 e6 00 f5 96 9f 98 7d 64 4b bf fd d8 db 59 27 c0 5f f9 62 b2 62 f2 9b 78 7c cc b3 27 ae cd e5 e5 d1 c4 5c 02 03 48 76 8d 6f 6e ad f8 be 3e 0e bc 3a 32 7e 11 e2 aa 1a ba e8 61 93 31 9e 25 32 bb 04 48 8b 52 c9 1f d6 66 1a be bd f6 d3 d2 db 63 30 e2 de 1e a0 e2 bc af 9f 9a 53 f2 b2 ec 92 ae 0a 89 e3 26 58 f9 d2 35 36 88 c1 Data Ascii: A#03JPrwP+-C<0DdjK)qk9Q5lyq>e_ ~brsPDq-Ixw!^2I[ZE"8$r_e('x}S}dKY'_bbx\|'\Hvon>:2~a1%2HRfc0S&X56
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: c9 6a 25 a5 09 cc 91 98 b3 c8 ba ce c8 14 5b 70 36 1d 36 db 15 99 85 4c 3c 31 4a 10 a8 33 13 ad ed df dd cb 12 1a fb 16 2c 6f e7 b7 96 2b aa e5 92 8b 26 a0 b2 2d 3c e9 4b cc 08 81 5d be 8a 21 f5 fa 8f 13 b7 89 27 10 52 a5 2d 1d 3c 14 ef 2c 50 a7 30 aa 06 0e 17 53 02 6d cd 59 08 17 de c0 81 72 71 ff c4 00 48 11 00 02 01 02 04 02 06 06 08 04 03 04 0b 00 00 00 01 02 03 04 11 00 05 12 21 31 41 06 13 22 51 61 71 14 32 81 91 b1 f0 10 20 23 42 a1 c1 d1 e1 07 15 52 72 24 82 c2 25 34 b3 f1 16 33 44 45 62 64 84 92 a2 a3 b2 ff da 00 08 01 02 01 01 3f 01 fa 84 db e8 26 d8 25 c4 ca ec 6c 4c 8d 64 2c 08 65 04 03 61 e3 f8 63 f8 85 93 c9 57 d2 a8 c4 36 1e 97 4f 4d a7 b4 17 70 34 13 da 23 55 8a f0 1b ef b0 38 6a 07 a0 c9 8d 3c 2a dd 64 10 75 b2 6d b3 37 de de fd d7 3c f8 Data Ascii: j%[p66L<1J3,o+&-<K]!'R-<,P0SmYrqH!1A"Qaq2 #BRr$%43DEbd?&%lLd,eacW6OMp4#U8j<*dum7<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49985	104.17.25.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	646	OUT	GET /ajax/libs/font-awesome/5.9.0/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://1movieshd.cc sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/css/all.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:45 UTC	966	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:45 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 74508 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "5eb03e60-1230c" Last-Modified: Mon, 04 May 2020 16:10:08 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 16 Apr 2025 18:32:45 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dszgWIJROkpUO95LsuiFJeGkJhdhKtX05sDQaAZqe99roHMYH16Nzk3vSTO5EAzJz1E%2FqE076%2FZF8%2BoR9RF676hYIYbZt%2FeoRkOKiM8t0pHYUpWwaObkekjecYvTrb0lY0IpuOFk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a8a842e8693365-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:45 UTC	403	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 23 0c 00 0d 00 00 00 01 f8 18 00 01 22 b2 01 49 fb e7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 8b 02 11 08 0a 87 99 74 85 d1 55 01 36 02 24 03 8d 36 0b 86 5e 00 04 20 05 8a 7f 07 a8 09 5b b0 8f 91 80 e1 85 97 31 9e b6 ae 8d 70 00 e3 5b f9 9d a9 17 83 1a 8d 8c dd 0e 28 f5 13 31 5a 70 5c 77 3b 40 52 28 9f 73 f6 ff ff ff ff 82 a4 21 b2 95 64 5b ee da 76 1d 6c 82 28 a0 3e fa b0 45 4c c8 44 71 b2 e1 9a 05 59 1a f5 b5 d6 8a 95 d6 92 1e 5b a3 ac 08 8b 7e d2 e7 7d 6f 47 0b 57 61 b2 30 59 98 2c 8c b7 76 a9 d7 88 09 6d f2 fb 22 8e 32 da d1 67 b9 8d 46 49 b9 dc de 13 07 7f 2c ee b3 de 6e a2 05 ae d1 a9 4c 28 f2 6e 5d a6 a7 7c e4 53 8d 43 7e 59 7c 9f 10 aa c1 38 ef 22 1a fd 54 4a 7d be Data Ascii: wOF2#"I?FFTM`tU6$6^ [1p[(1Zp\w;@R(s!d[vl(>ELDqY[~}oGWa0Y,vm"2gFI,nL(n]\|SC~Y\|8"TJ}
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 38 a0 82 c6 b9 f9 f0 44 6b bf 37 b3 7b a2 5f f4 ce 1b cd 92 78 53 6b d5 43 a2 44 62 82 52 68 50 17 0b d8 ed 20 6b 52 6a 92 f0 fe ff e7 7d fd be a7 98 96 46 1e 69 28 a7 9a e2 49 1a d2 43 41 38 2d ac 39 94 d6 07 53 e2 ed 00 01 80 ff fe e3 9c 65 ca 3d b7 66 bb 4b 3b 40 77 a8 01 6d d2 fe 02 fd d0 48 78 75 0a d3 49 f7 bc 47 3b 87 89 29 4c ce aa 00 99 4f a7 7d 33 ef ba 99 56 96 0c b8 06 4c b2 e0 58 71 08 4c 0b 34 90 ac 9b 24 fa fb 7c 04 45 23 b7 d6 95 8b 08 03 87 30 b0 dd de 91 80 15 1e 89 4f e8 0a be a9 b3 14 4b f2 cc cd 42 49 1f bf 0e 9e 03 92 83 c9 aa 1e 1d 78 5f d2 7d 66 df 75 e3 5c 37 f6 1c 63 7b dc 14 cc 4d 3f 6a a5 f6 49 32 24 6c d8 ff 03 0c d5 6e d2 0e 0f 03 04 0f f7 f3 ff fb 6d 26 c9 24 99 d0 c1 9e 12 5c 84 77 fb 88 48 2d 21 d8 75 5f 2e 90 44 b5 12 48 Data Ascii: 8Dk7{_xSkCDbRhP kRj}Fi(ICA8-9Se=fK;@wmHxuIG;)LO}3VLXqL4$\|E#0OKBIx_}fu\7c{M?jI2$lnm&$\wH-!u_.DH
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: db 81 8e 47 c4 24 64 34 68 d4 ba 6b d7 ba d9 e3 9e fe f0 af f9 3e 1f 04 7e 36 18 b2 be b1 8f 3d 94 6d 0d 1b d8 ca 0e f6 c1 d6 96 b0 9b e8 3e 63 d6 3c b9 cc 4b de f0 be 84 44 ad 41 a9 15 85 18 5d b4 d4 4d 99 0e ca c2 4a aa 26 16 f6 b6 ed d9 1b de ef 79 ad 47 ba 4c d4 cb 4e 11 18 1c 81 d4 d8 b6 46 28 69 f7 b7 ee cc 6e 7b 79 cf 54 f6 c6 ea 55 b2 6f 8c 2d b7 0e d3 fe d1 76 ad fd fe ad f9 b4 ba f6 2b fb c3 36 0e 07 fc c8 ff d0 ec f6 15 1b db b7 ec 3f ee b9 eb 90 04 f1 e2 c4 8a 14 c1 ef a1 db 6e b8 ee aa 2b 4e 3b 6e bf 8b 1a 29 fc f9 f2 ee cd d6 86 35 63 a9 44 14 70 b7 7f 8d d5 f8 df 1b af fd e1 81 cb 2e ba 20 81 91 9e 8e 86 4a 84 fd f6 d9 63 b7 a9 1d db 36 6d 58 b7 62 d9 a2 05 f3 e6 4c 8c f5 75 b4 55 1a 4a 45 ff ae b2 d2 4a da 53 69 25 a5 18 d8 8f dd 76 d9 69 Data Ascii: G$d4hk>~6=m>c<KDA]MJ&yGLNF(in{yTUo-v+6?n+N;n)5cDp. Jc6mXbLuUJEJSi%vi
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 8f ba 8c 39 ed 5b 05 44 41 7a af 56 53 8f 12 8a d6 0c 98 54 a4 31 35 f3 7b 0c a4 21 ad 5e be 78 52 f6 aa 46 ab 6a 66 8d 98 26 42 18 de 32 43 1f 28 8e 17 42 d2 93 7a ab 36 1b 97 e6 9c 31 5b f0 05 f8 25 50 d6 e1 05 88 b3 fd 2e 56 09 d5 7e b2 19 fc d0 91 f4 84 8b 2e da 22 54 04 80 42 ac 16 a5 26 54 08 84 95 f6 44 bf 16 91 a4 c2 3b 71 5f b1 35 6b 9c 5d 0e a3 e5 f9 85 b8 11 fc 9a 39 85 02 17 75 d6 28 82 45 85 73 84 95 49 84 0e d8 a1 66 12 4b a9 f7 4d 0c 24 62 5c 25 33 49 56 67 2b f3 fb 1d 62 89 28 9c f7 18 b2 50 24 00 2c cc 6e cc 65 bc f6 fb 90 6a 94 82 09 29 99 00 cc b3 d7 89 df 2b 2a 68 75 7c 6c 7a 41 8d f1 1a a2 10 89 86 5e 26 bd 81 51 e1 56 97 8b a3 cd 8d dd 69 11 f6 1c 5e 5b 9c 07 08 52 ae fa b9 b2 d0 07 a4 f1 52 4a 88 b1 88 b3 79 d2 ad e3 90 14 cc 69 5e Data Ascii: 9[DAzVST15{!^xRFjf&B2C(Bz61[%P.V~."TB&TD;q_5k]9u(EsIfKM$b\%3IVg+b(P$,nej)+*hu\|lzA^&QVi^[RRJyi^
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 31 78 24 92 5e de 3d 6a 27 75 ca 56 85 a9 0b ea 7d fb 6f 02 a1 20 c3 44 34 e8 7f 44 e9 8a 9e ea 4a ef 71 78 12 1d 05 23 77 47 a4 43 13 7b 51 60 cd f6 67 fb bc df fb e3 94 a6 78 2b 2c cd dd d8 7a b7 88 ed 1d 39 cf 8d d5 30 b4 57 52 1e 57 84 68 3a 8a 08 69 bb d5 84 d4 82 64 29 08 90 e2 ea 6d 58 64 63 6b 3b 8e a9 ea 5b dc cd 45 d1 91 d2 a3 ea 0a d5 5a 0b 2e 3d aa 49 bc f6 16 3c c3 77 f9 76 7b 32 52 d9 b0 a1 43 2e 1f da 9e e6 d7 42 0c f3 67 9f a4 93 7f 8b f8 f8 d2 21 6c b8 b1 79 31 1c c5 86 4b 46 89 8e 47 e2 3f f2 fd 79 66 c8 de 18 c0 2d 2e 25 7e 50 73 82 34 c3 c6 91 47 3d 71 3b c0 ec 7b f0 d8 10 0d 3b ad 77 f6 a9 16 c5 fb 8d 7e 2a 38 20 dc 23 d3 9f ae 05 67 30 46 b6 fa 0e 2b 57 4a b6 d3 f7 90 cd cf cd 54 f9 d0 99 fe eb 09 10 20 c3 4c 40 d6 af 7c 34 27 23 cc Data Ascii: 1x$^=j'uV}o D4DJqx#wGC{Q`gx+,z90WRWh:id)mXdck;[EZ.=I<wv{2RC.Bg!ly1KFG?yf-.%~Ps4G=q;{;w~*8 #g0F+WJT L@\|4'#
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 33 09 42 5b 83 52 1e 2a ff 78 3d 2e 5b 54 4a 51 67 0f 6b 07 d3 a3 6d d4 4f b1 c3 b9 e9 89 0c 8f d0 78 7c 95 41 b1 61 9f b0 a5 55 92 40 82 f4 80 0a 81 8e 5f 03 6c 15 9d d6 34 6c ed 41 3e 54 cf 10 f4 0c 43 d0 11 25 9f a1 07 a6 0c 85 3c c5 05 c0 01 e6 b1 38 f1 72 14 67 85 af b5 41 a2 fa 8e 60 43 aa 3a 7c 8d dc d7 fd 4f 31 50 75 88 49 33 61 91 51 c3 06 b2 65 53 a2 2c b6 3b eb 1d d7 3c 94 d5 c4 85 b2 67 f2 9c 66 1c 65 b8 88 5c 29 3a c7 83 69 e8 84 d1 e3 f3 62 5d 14 93 0b 0c f7 6f b2 e7 20 13 3e 2b b8 25 6b 8f 18 34 15 10 a5 2d ee 43 b0 e6 14 79 d9 64 b3 48 84 4f 10 0f 7c 07 69 69 d9 da b9 ee df 67 ea eb b6 a3 bd 8b fd c2 83 b1 8f b3 a8 1d 30 f7 da b7 8f cc ce 67 a5 7c c3 ab ac ee a3 b4 97 1c 75 8c ac 95 6f 5e fb d4 84 5d 2b a0 bb db eb 6a 66 00 66 5d 9e 7e 53 Data Ascii: 3B[R*x=.[TJQgkmOx\|AaU@_l4lA>TC%<8rgA`C:\|O1PuI3aQeS,;<gfe\):ib]o >+%k4-CydHO\|iig0g\|uo^]+jff]~S
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 93 4d e9 af ba 25 e2 fc 90 9c 40 a7 68 c7 12 9f e7 78 6e f2 5d 36 7a a5 44 f0 c2 88 ce be 34 5e cd 8d 34 7c 4d b1 11 35 0e 2c 19 3a e1 b3 b7 3d 02 dc 31 bb fb 9d 0c 71 71 9a 19 27 bc 31 c2 48 25 fc 33 9f cc 61 ab b9 91 6d db 2e 4d 44 a9 bf 92 e3 4a 2b ab 4f 4e d3 0b d8 46 cb e5 0c 55 c2 8a 35 d6 b2 d5 a1 e7 51 00 87 0e 85 79 e8 91 db 0b ff 46 01 61 38 f2 7c 86 9e 2f f6 14 2a 12 47 cc 2f e1 cd a2 49 81 c3 de a6 19 03 8e 70 f7 33 22 0e 8c 35 6e 37 24 f5 7f 77 25 d6 d5 df f4 c6 35 42 ef f7 ee 86 a7 2e 91 84 40 91 ad 13 b0 0f b1 db 62 28 24 f5 04 53 be 49 c0 2c 53 54 82 ac 4f f8 0c 23 66 b6 6e 22 2d 24 e2 35 95 d3 26 17 d5 fc 9b bb 86 6b 55 4d cf 6d de 96 b0 a4 fe 15 e1 b7 d1 1b 16 45 42 29 c8 2c ff ca 80 0b e0 5f f5 33 fd 08 82 17 ba 02 63 1c 00 c4 e3 82 4b Data Ascii: M%@hxn]6zD4^4\|M5,:=1qq'1H%3am.MDJ+ONFU5QyFa8\|/*G/Ip3"5n7$w%5B.@b($SI,STO#fn"-$5&kUMmEB),_3cK
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 03 5e 7f e1 93 23 47 9f 62 fd ce 04 99 28 b7 80 02 98 c9 df 3d 64 1c fb 54 87 ab 2b e1 c1 b6 2e 58 d6 30 b1 95 bd 76 97 2c b6 54 54 af 22 d0 20 15 0c 71 fa a4 2b c4 55 84 25 99 c8 12 a2 1e f1 19 93 7c 56 8c 31 5f 4c a3 24 0e ff ce 1e de fb 9c f1 64 eb 11 29 f9 8b 0a b1 83 c2 58 1f 38 fa e5 c5 e4 fe 50 8d e0 83 95 bf 14 ec fc 5c dd f5 6b 3f f3 91 a1 05 6d 48 af 3c 9e ee 60 54 99 8a 8a 2d e0 0c 20 9d 45 fb 68 58 de 3e 86 77 1c 06 9a 62 1f 63 2c 21 1f 6e b1 2c ac ad 4b 54 a7 90 7b 08 9a 85 33 05 68 f1 bd 8c 18 cf 96 42 97 32 c1 c1 49 5e 6e 81 6f e9 7e fc ab 89 aa 28 99 1c 26 6a 44 80 1f 16 10 3d e9 6d 49 2a 59 58 c9 9f c1 2a c8 30 16 31 4b e4 55 66 7a bb 8d 3e 33 cf 56 17 95 b7 61 68 e1 54 91 f8 c7 62 3c ca b2 62 42 89 1a 0a d4 f6 a2 d9 ae b3 3e 4f 73 15 6d Data Ascii: ^#Gb(=dT+.X0v,TT" q+U%\|V1_L$d)X8P\k?mH<`T- EhX>wbc,!n,KT{3hB2I^no~(&jD=mIYX01KUfz>3VahTb<bB>Osm
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 6f f5 66 e8 6e 6d e6 b3 86 48 e6 1f ac f2 ef 9e f7 f5 2b b6 56 67 fa 5b da a4 84 7e 8d 1a 4c ed f6 30 4e 1e e4 80 e1 82 de e8 ff a8 b8 15 be 7a 87 f0 1a 80 91 73 8a 0a bd 01 71 e0 df 8c f4 5a 8e 0f 42 7d 6b cb a5 b4 bd 1d 7d 77 20 25 61 f7 e0 a0 5f 86 f4 26 77 e0 0f a1 d4 0a 32 0a bd 1a 28 51 33 59 7d 51 1b 43 35 fd 92 51 70 52 65 8d 70 06 60 72 f5 8e f4 f1 d1 ca cd 48 ca 04 bc 14 39 bd df a9 23 a2 ea ac fe fb 13 1e ee 3d b8 75 a9 ac d8 e1 d1 6d aa ef 03 3b ab b2 07 7b c9 6a d0 4f 41 32 31 cb 5a df dd 7c f9 5a 8f b0 0a 2e 86 00 5a f0 2a a7 59 d0 86 f1 8a 21 c3 64 d1 d0 36 39 3a 15 ea ed 13 3d bb af c5 13 33 2b 1b 29 e1 d4 8b e6 b4 d7 cb c5 03 3a 4a e3 9b f6 67 a5 a4 db 84 8a 8e ca 17 ee ae 55 12 23 37 77 3b 2a 85 1e f9 d2 13 6b 0b da 06 8d 28 11 8e 23 c6 Data Ascii: ofnmH+Vg[~L0NzsqZB}k}w %a_&w2(Q3Y}QC5QpRep`rH9#=um;{jOA21Z\|Z.ZY!d69:=3+):JgU#7w;k(#
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: e2 72 b2 11 4b f8 b3 d1 d6 dd a5 b2 31 00 57 69 9b 1e 0b e4 f6 ff ac 98 0b d2 e9 3b f1 e4 64 ab 7f f5 21 55 95 31 08 61 fb 1d d1 ce e4 a1 38 f6 ea 34 b8 4f 78 7b e5 2f b5 49 ff e8 5b 11 1f c2 6d 96 ab 89 f5 42 05 6d e5 11 6f ca dd e4 5a 89 95 e7 ad ba b5 e5 9f 94 d5 f7 d7 15 d4 28 97 30 b2 6e fa 69 4c 7f 76 10 c7 5d e3 98 9f 6b 5f 36 08 d2 a8 2d 42 3e 20 9c 05 d0 73 61 94 d7 8a 4c 67 00 7c dd 52 9c 8d f4 b9 4f e5 f0 22 ba 82 bc 96 f3 c9 b1 80 74 39 7f 71 fc 3c 4b 0a 1e 4a 57 c5 54 17 9f 8e 1d f0 81 fc 98 f6 05 da 3a 78 ff 72 8c 6e 5d 35 ec 44 29 14 e7 0d 73 95 eb 84 2a b0 c3 ac 58 bb b6 cc 09 5b 21 eb 43 e6 71 c1 c1 f1 69 e5 fb 32 49 fa ca d4 53 0a f6 fb 2f be e4 76 8b 64 c9 41 95 37 b6 15 c9 59 03 dc 05 7b e1 cc f0 99 07 57 c5 12 94 8a 4d c2 44 0f d2 e6 Data Ascii: rK1Wi;d!U1a84Ox{/I[mBmoZ(0niLv]k_6-B> saLg\|RO"t9q<KJWT:xrn]5D)s*X[!Cqi2IS/vdA7Y{WMD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49983	3.16.63.45	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	737	OUT	GET /panorama?uid=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1&stid=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:45 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:45 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49986	104.17.25.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	647	OUT	GET /ajax/libs/font-awesome/5.9.0/webfonts/fa-regular-400.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://1movieshd.cc sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.9.0/css/all.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:45 UTC	983	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:45 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 13580 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "5eb03e60-350c" Last-Modified: Mon, 04 May 2020 16:10:08 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 245326 Expires: Wed, 16 Apr 2025 18:32:45 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dQbOBxKbCG8zMiG86pS%2BNxL09rVF0oB94bdl%2BN1DQcYE%2FXJ4yJb0GDbOlB1DawJ9zIOpk1CevGGaE5J%2FGIi%2B0TiVHvo0J7hh2iSOCw3rBf1Gf17rixVKkttu4fP3Q%2FTx3%2FsnQvrg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87a8a8432eb3a67a-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:45 UTC	386	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 35 0c 00 0d 00 00 00 00 85 2c 00 00 34 b2 01 49 fb e7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 1e 06 60 00 87 5a 11 08 0a 81 dd 44 81 ad 51 01 36 02 24 03 84 54 0b 82 36 00 04 20 05 8a 55 07 8f 2b 1b 1a 6b 65 86 18 6c 1c 00 c0 35 af 45 14 e5 83 d5 cd fe ff 9c a4 31 8e 76 93 5d 4b 11 f0 0f 11 65 ad c4 70 db dc d5 30 5a 0d bb d1 6d f8 68 cd 6d 66 b0 cf 4a ea 7e d5 99 21 c7 e8 e1 8a be 21 78 db 61 fe bc 54 05 3a 7d 68 0f 7a a3 90 22 b7 b2 94 54 ec 9b 31 83 8a 9f 62 09 27 7b 0f cc 0a 21 13 df d2 09 b1 1f b4 96 5f 18 38 e3 1c 07 19 7f 6e 2a 2d cd 05 47 91 6b 52 ad ec 90 a4 68 42 0f dc bb bb d7 58 53 20 f0 34 f0 50 3e 07 f8 91 4a 6c 73 c3 f3 6e eb b1 fe ff c0 87 2d 20 98 6c c5 05 12 a0 6d 51 Data Ascii: wOF25,4I?FFTM`ZDQ6$T6 U+kel5E1v]Kep0ZmhmfJ~!!xaT:}hz"T1b'{!_8n*-GkRhBXS 4P>Jlsn- lmQ
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: a1 33 54 d6 07 2c 0d a0 0a 03 60 69 8f c7 f7 9b 33 4a 7e d7 de e0 da 01 3a 7e 7e c2 15 52 a0 1c 8d 06 e6 99 f3 04 5e c2 50 4e ad 99 ed 6f a6 fd 09 9c a4 b0 60 8c 0b bb 5c 20 90 34 ed e5 d3 d4 7b e7 d7 2e ff 4f fa 6a be 64 5b 2d db 96 6d 05 16 92 75 c8 49 19 04 8b 84 20 43 47 e8 e1 e8 a6 7a b2 92 ab 56 99 4d e6 fe db e3 5c 1f 65 db c9 e6 25 9d 60 cb 9f 59 d1 01 09 25 4e 9a 73 f6 98 a9 4c ef ce 30 38 2f e4 11 07 b1 ac 69 4b 5b ad de 98 9f 1f df 47 84 28 39 03 e1 12 e8 6a 00 b4 37 ba 11 30 ff ea ac 5a 98 b9 0d 31 e8 62 99 ea 8d e9 f5 f7 fa 2d 4a fd ff 25 c1 d7 97 c0 02 cb b6 2c 27 60 12 c6 49 04 27 d6 f3 90 90 3d 80 99 79 18 87 09 1b 72 22 d8 7e c6 93 16 7b 43 4e ed a5 94 8a 7e df b5 d7 35 57 b4 a9 bd a2 6d 4e c7 14 89 76 cf ae 10 c0 55 d9 d1 1e 6b 6a 80 ac Data Ascii: 3T,`i3J~:~~R^PNo`\ 4{.Ojd[-muI CGzVM\e%`Y%NsL08/iK[G(9j70Z1b-J%,'`I'=yr"~{CN~5WmNvUkj
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 17 13 cc 8a 92 bb 08 96 75 b5 fa 9a 51 c8 73 6b 20 ef db f6 db b2 1c d0 c2 a6 b6 6d 1c 37 0c 32 b4 59 28 f9 63 45 e9 a6 da d2 d1 63 75 6a b4 e3 47 63 ef 41 a1 9f 38 be 77 51 aa c7 4e 54 15 78 39 fc 47 19 1c 95 0d df c9 15 83 69 96 12 20 30 86 69 b3 5b f5 3a 70 80 d6 e0 f9 52 97 5e 14 44 13 b1 ce 14 f0 f6 1b 58 cf 42 eb a1 e3 b4 10 3a c7 5a 80 d0 e4 30 b7 95 d0 52 9a f8 4d e1 e8 c9 00 fb 0d 9a 90 18 38 97 31 1a 45 1f 70 90 a2 30 53 b4 4f 45 05 8d 2e b1 d4 61 df 13 2d 33 d8 b1 79 39 71 d3 9b 9d 2b 45 6f 34 91 77 64 e5 fa 60 4d 1c 9f a4 b9 4d 77 73 b0 05 b5 d8 f8 9a 75 ad 95 51 44 7a f5 0c 80 4d fa 38 13 dc 3c 0e c9 b5 4e 9d 74 37 54 62 80 d9 a2 22 6a 9f 5c 54 f2 80 5b b9 48 41 7c 97 8f 53 d3 a5 37 3e f0 1c c2 74 57 41 d0 a6 42 aa 92 f2 8b b9 cc e4 e0 1f d0 Data Ascii: uQsk m72Y(cEcujGcA8wQNTx9Gi 0i[:pR^DXB:Z0RM81Ep0SOE.a-3y9q+Eo4wd`MMwsuQDzM8<Nt7Tb"j\T[HA\|S7>tWAB
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: cd aa c2 b2 d6 d6 8a db bf 7d a8 90 ef 70 d3 c9 1d b1 6a 41 c6 dc 31 56 d8 7b 1b f1 db a9 45 c4 22 86 e5 c4 9c 32 d0 70 c6 3c 3a 78 c1 99 77 e7 ec 61 02 9d 09 56 a6 31 7a 36 dd ba 0a 8a f6 74 af e5 e7 c2 ff 28 b2 ab c1 4a d6 84 31 44 b2 a1 59 06 03 f9 9d 62 22 79 3b 8a ff 0c 80 c5 df 89 e5 96 8a 68 cf 9e 73 e7 9d 21 ee 19 7b 1b 48 ae 9a ba e5 a5 4b 71 db 39 f8 13 c5 cc 33 c8 f6 86 aa f5 ef 0c de 06 6f cd f9 01 39 d9 c7 97 56 33 77 0c 5b 7a 7a 8b b8 76 55 95 8e 31 ab 37 fb cf 9a b2 99 e6 0d 1d 5a 54 87 c5 39 78 31 7a a0 da da f2 7e c6 87 57 49 5c 6e 69 5e c6 0c 8b 40 aa 43 f4 6b 47 b5 6d b8 26 12 dc 47 52 ae 5c 4d 99 dc 2b de ac e4 d7 00 e5 82 b5 bf 56 aa ab bc 35 12 d7 11 21 23 d0 03 55 d8 6f d9 75 65 8c 8b e0 ce 35 2a e4 49 d9 b1 53 7d 01 c4 22 3b ef 10 Data Ascii: }pjA1V{E"2p<:xwaV1z6t(J1DYb"y;hs!{HKq93o9V3w[zzvU17ZT9x1z~WI\ni^@CkGm&GR\M+V5!#Uoue5*IS}";
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 73 4b f5 6f 6e c8 19 63 d2 73 64 ec dd 3a e2 e7 4d ac 2c dd 98 73 b9 f9 6d bb 81 35 49 bb 78 1a 4c ce e6 0e 48 cc 23 2c d3 ef 55 18 1a 53 14 23 e5 c8 8c ce e5 60 5c 12 b4 3c aa b4 1a be 63 1a 77 a4 76 4b 9a 82 98 b5 a5 45 85 c2 7c 40 89 2b 55 fe f5 cb 38 63 e7 10 a1 59 16 d8 bf 77 0e 76 d0 82 9b a3 a6 09 47 3f 01 8f 0c 76 f5 08 7d c5 da 58 58 53 3b f1 bb 9e 28 5d 4a d5 24 96 71 bf ab d4 df 5b af a8 eb 96 ef a3 74 c9 55 d3 84 07 7b 67 81 67 92 62 77 6c 3e 0a 2a 91 17 0f 57 96 6e 88 04 ee dd 6b df 29 0a 66 ac ea 36 89 7e 46 a6 bc 5d aa bd e3 4c e0 da be 6c 2c 54 fb 4c fa 90 f3 72 75 9b 95 c7 83 13 72 9e 6a 62 1d 4a 93 67 68 60 67 b7 ba b4 82 76 b6 f8 9a 0d b0 59 b9 37 47 4e e3 3d 4e ea c2 8f 10 57 17 bf 17 51 57 3c b5 08 9c d6 c4 ec 97 83 f0 38 6e e6 42 c5 Data Ascii: sKoncsd:M,sm5IxLH#,US#`\<cwvKE\|@+U8cYwvG?v}XXS;(]J$q[tU{ggbwl>*Wnk)f6~F]Ll,TLrurjbJgh`gvY7GN=NWQW<8nB
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 82 77 a3 54 1d cb bc 97 81 c9 21 f8 a2 c7 5d d4 df 0d 41 96 41 b6 da 1d 96 e5 f2 50 f4 0a 90 96 8e e5 e6 fb 07 f1 8d 3e 66 65 57 9f cb 07 c6 8a 60 bd a0 fe 00 ff 2d 3f ff b2 41 ee 10 72 22 7f 30 c3 6e 98 6e f5 7c 6f ad 8f d7 53 3d e8 a3 ff 4d 40 85 f3 4e c0 93 d5 6d 9b 7d 0b 0b 17 fa 2e 15 fa ce 9f 7c 1d 9e bc ea 0e 8c a7 d9 13 ec db a7 2b 1c df d6 3a 08 0f d4 42 10 5b 9a da 6e 33 98 6c bc 13 45 c5 9e 23 22 c6 70 b2 d5 f6 cd fb 43 e2 38 ce 87 8f 84 ba 7e 4f 94 99 69 02 bd 8e 59 cd 16 a8 b7 a6 d0 fa ed 8f 49 98 af 99 f5 b8 9f ed f6 2a dc ce eb 10 94 4d 54 4f b0 88 d9 10 04 42 e9 fb 81 7a 95 aa 7f 6c 0c d2 eb a1 bf 89 fb 6b 1d 33 fd 33 0e e4 76 0f e9 99 9a aa 73 39 5c 9d cb da 99 5c e7 d3 a7 38 42 a2 bd fb 29 77 e7 81 fd ee ba 9c 9c 1f 88 78 c9 0e 6e da e8 Data Ascii: wT!]AAP>feW`-?Ar"0nn\|oS=M@Nm}.\|+:B[n3lE#"pC8~OiYI*MTOBzlk33vs9\\8B)wxn
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 0e 47 42 d4 d1 17 5f 39 42 61 4e b0 e7 97 50 5d 62 a2 4e 9b 94 10 16 fa 8b 27 98 03 87 1a 65 8b ea 8f 46 c5 95 94 82 51 6b 17 4a 61 52 9b 88 af d7 21 68 17 60 ce c0 ac a8 e0 05 71 d6 d5 5e 14 09 5f 42 f1 8a 1d 10 45 fa 05 b3 a2 e0 19 e6 4a 68 de 78 09 06 28 23 23 f3 f4 45 2a 01 a6 a4 eb 9a d6 22 68 12 80 c6 eb 9c 39 71 a3 71 c4 55 e6 23 26 69 f6 de d0 20 3b 23 d3 b2 1b 88 4f 49 59 0a 14 e2 4a ab a8 22 8b f4 94 d8 c0 46 2b 40 a5 21 46 ab a1 d2 a6 e7 3d 09 e1 e9 c7 54 7c 7e 8f 1d d7 89 02 b6 49 11 8a 66 65 0d 59 8c b5 55 d8 b6 d8 f1 70 02 d5 0a 8b 39 19 3a 12 d0 13 28 b7 15 d1 bd 63 23 fb 7f 6d 0a 72 33 d5 3f b0 32 5e 6f 7d 9d c1 fa 41 9d 09 39 d2 6d 51 15 5c fc 9d e5 eb 9a 32 58 4b 6b d5 99 3b d3 77 82 18 a8 43 c0 7f 0d 69 8a 4d 86 c0 ae 02 34 82 da e0 65 Data Ascii: GB_9BaNP]bN'eFQkJaR!h`q^_BEJhx(##E*"h9qqU#&i ;#OIYJ"F+@!F=T\|~IfeYUp9:(c#mr3?2^o}A9mQ\2XKk;wCiM4e
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 58 98 3f 6a 17 e6 fa 1b 5b f3 79 c9 db fc da 82 80 b8 94 f9 bf 9e 4e 48 a0 96 c4 8e 13 ba 9d d2 fc 64 38 ff 6d e2 ff df 45 f7 d7 7c 6c de ba ee ea ff 89 79 c2 8f b8 09 b1 9c 12 aa a1 24 7e f3 cf b6 53 c6 83 c0 bf 91 06 fd 6f b9 80 4b d7 67 1b 94 d2 4c 8b 88 43 e8 c8 9f f4 17 b3 bb 1e 1e 1e b7 c8 85 a2 f6 c9 15 b0 a3 ca 8d 0a 93 c2 b5 81 e7 47 9a 74 9a 6c 92 52 cf 8a a5 e8 a0 71 c0 45 60 41 21 74 6c 70 60 60 cc 7a 77 f5 23 69 2c 1f 7d c1 a3 32 29 68 17 60 d4 75 fd d5 d5 c5 bb 8b 18 1a be 92 9c cb 7b 9d a9 b0 06 c2 ef 1f f2 e3 a8 aa 4a c8 10 7f 90 7a 0a 19 94 db 8b 25 bf a3 d0 dc 11 8b 53 4d 8b fc 23 7e 55 2c 4c d7 10 70 4c 9f b2 bd 27 c4 3c 2d 9b 23 e9 95 c9 9e 68 7a 34 0b 58 78 fc 42 d2 0f ff 8c 55 aa 19 48 c3 ff a6 52 ea 35 69 58 b7 84 49 d1 99 1f fe 2a Data Ascii: X?j[yNHd8mE\|ly$~SoKgLCGtlRqE`A!tlp``zw#i,}2)h`u{Jz%SM#~U,LpL'<-#hz4XxBUHR5iXI*
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: d1 a8 5d 14 37 d5 4d d9 86 8d b5 94 67 74 d0 cf dd 72 eb f8 96 a2 f9 18 31 66 2a b0 c9 c7 9e 39 86 1b fc d9 d8 d1 f5 79 95 25 a6 35 be 29 e4 a6 18 67 a1 8d eb 17 d6 b0 9d 19 fa a5 45 e3 07 d8 67 ec ba 23 5d a3 59 a1 82 12 01 66 f8 14 2e 24 9b 1f 57 98 e3 5b 59 90 28 f1 1d 4b 81 ad 6c 2b 77 c9 49 5f 49 71 2a 3e ea 7f 2c c3 14 39 0f f3 e1 e3 72 7a f9 a3 3d 98 af ac 31 74 dc ff fd 77 98 f0 6c fd 7b cb ff 89 2b 91 d0 85 b6 42 5b 31 ff 2c 7f af fe 55 5d 47 f9 bf fb 59 20 d0 85 d1 ef f6 5c 17 ff 5b de 51 07 3e 16 b2 f5 6c dc da 5c ae 17 12 3d 1a 09 0d 8b 36 aa 3c 7a cf d8 a4 d6 7a bc db fd 23 c4 6b 08 8b 57 e8 83 ef a3 d1 fa f0 3e 85 3c 16 72 8d 08 68 0b 0f 1b bc b4 bc 38 e7 2f ed 63 87 53 90 17 ff cb 05 a9 b4 47 54 11 e1 a9 07 93 99 3f f7 c9 49 99 8a 79 46 d8 Data Ascii: ]7Mgtr1f9y%5)gEg#]Yf.$W[Y(Kl+wI_Iq>,9rz=1twl{+B[1,U]GY \[Q>l\=6<zz#kW><rh8/cSGT?IyF
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: c7 59 09 7c 7e ba 74 95 c9 4c 77 2a 72 1a de a1 4f 23 97 1b 0f fb 8a cb 17 ac d3 07 8b 7d 0f 37 15 2c a8 ea 96 77 d0 e3 cc 8f 5e ba fc 81 06 bd ba 15 64 1d 21 c5 55 d8 b6 a2 fa 8b 3f 0a 81 c8 23 2b b3 61 3d fc 05 31 ee 75 75 7b 48 e1 ff 07 f3 76 27 f2 83 38 54 8e 20 30 71 37 2f 88 1f cb 67 de 46 47 91 05 05 f3 d5 35 fb fc d3 05 59 4c 0e 2e 0e cf 26 22 bc 38 98 7c ea 67 76 72 1e a3 ac 25 0f 53 f5 66 3c c7 bf d8 d6 1d 84 2d 8e d8 d6 59 30 f8 a7 fa 75 fd 52 01 07 bf a5 f6 6e b7 be 86 c5 71 bb 34 22 6f 79 ef fc b4 34 1e a0 21 2b fa 8c ca d7 d6 dc 5a a7 11 71 b6 b4 ba d9 fa cd 9d 61 24 7b 74 94 21 ef a0 45 ff ed 60 4f 25 27 24 84 43 5f 7f 1b 03 79 11 d2 a1 78 ef 78 48 4d 56 43 f1 fc 38 38 0d e2 98 de ee 15 1c da 29 03 20 93 76 19 0a d8 e3 8f 47 3f fc b1 bc e7 Data Ascii: Y\|~tLw*rO#}7,w^d!U?#+a=1uu{Hv'8T 0q7/gFG5YL.&"8\|gvr%Sf<-Y0uRnq4"oy4!+Zqa${t!E`O%'$C_yxxHMVC88) vG?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49991	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	698	OUT	GET /xxrz/250x400/793/e8/ad/e8ad60dd67c5bc3f2f133058d0b16dc9/e8ad60dd67c5bc3f2f133058d0b16dc9.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:45 UTC	720	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:45 GMT Content-Type: image/jpeg Content-Length: 33337 Connection: close Last-Modified: Sun, 07 Apr 2024 13:02:14 GMT Vary: Accept-Encoding ETag: W/"66129956-6d90" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6942 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1TTl2KkyM3GDr2KJ6oOn34iDU1ajiBbnkOsyVuVDsJYCbiQrYqGSmtidhz78LCDwbc7D%2B3tivcBe1DTMzBmaV1KdUXMcdVs58TOSxDMpSeuXuD2%2F%2F8ndzzW7RPVDpAkUbJl9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8439b607483-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:45 UTC	649	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: d8 ce d0 4b f3 41 65 5c bf c3 e3 38 b1 38 05 4a 42 c5 00 1c 00 a0 02 00 00 00 00 00 94 a9 23 00 04 be 72 4c 67 23 52 df 5e 19 a0 57 93 e7 bc b7 98 db 6d d6 67 3c 5a 3c d3 83 ad bc d7 59 2c c5 55 f4 ff 00 62 82 5f 7a 13 b5 ac b8 94 a9 36 1f 01 0e 36 e0 a0 03 80 1c 00 00 03 40 00 00 04 a5 49 18 00 25 ec 91 23 49 16 98 fa df cf 7c fe bf 74 3a 69 c9 ba cd be c4 c7 93 05 b6 b5 64 d3 6c 69 a5 c0 ad be 87 fa 34 4a f1 51 8f 46 8b 8c 4a 93 61 70 38 e3 6e 0a 00 38 00 00 00 00 00 00 00 12 95 65 18 80 15 2e f4 83 1b f7 f4 ef d6 1e 6e 8b 5d aa 4f 35 e4 94 37 8c cb 39 69 3b 1a fb 6a bd 9d d0 a4 f7 2e 03 dd 1b d4 86 ea 52 a3 1f 1e 95 a2 7d c2 a3 8d b8 28 00 e0 00 00 00 00 00 00 00 4a 54 91 80 02 5c de ee 35 ef 2a 4f a8 be 35 28 bd d5 ae 43 45 c3 d9 3a b9 a7 21 72 8b 47 Data Ascii: KAe\88JB#rLg#R^Wmg<Z<Y,Ub_z66@I%#I\|t:idli4JQFJap8n8e.n]O579i;j.R}(JT\5*O5(CE:!rG
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 32 69 59 c0 67 8b 7a fe 40 62 d8 6e fa 40 ff 00 1e 8e 80 2b 30 a0 7a 7f ff c4 00 34 10 00 00 05 03 02 02 08 05 05 00 03 00 00 00 00 00 01 02 03 04 05 00 06 11 10 12 20 35 13 14 21 22 30 34 36 40 15 25 31 32 33 16 23 24 26 41 42 43 46 ff da 00 08 01 01 00 01 05 02 f0 03 4b 3b d3 da 67 83 1a 0e 97 37 3c f6 96 7f a7 73 a8 e9 9e 0c 55 cd cf 7c 7c 70 d9 de 9e e2 1e 0b 97 9e 7b 01 e0 b3 bd 3d c0 3a e2 b1 a5 cd ce f4 0f 18 78 2c ff 00 4f 6a 34 3c 57 3f 3c d0 3c 61 e0 b3 bd 3d ae 38 ee 7e 7b a0 78 c3 c1 67 fa 7b 80 43 84 2a e6 e7 9a 07 b2 b3 c7 fa f6 28 43 4c 51 dc 22 45 35 1d 2e 5e 79 ed 2c ff 00 4f 6b 77 cc ab 18 c8 cb ae 63 d9 93 4a bd 4a 82 87 4b 97 9e 7b 01 e0 b3 fd 3b ad e4 c5 65 de bf 66 97 5b b5 e3 5c 27 35 c1 73 73 df 60 3c 16 7f a7 75 77 b3 a0 7d 28 63 Data Ascii: 2iYgz@bn@+0z4 5!"046@%123#$&ABCFK;g7<sU\|\|p{=:x,Oj4<W?<<a=8~{xg{C*(CLQ"E5.^y,OkwcJJK{;ef[\'5ss`<uw}(c
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: c8 9a 83 a5 89 9e a9 74 21 f1 18 44 52 04 51 b7 79 f4 e2 4a 25 78 5e fd 91 e4 fb 58 31 4d b3 a6 a6 3f ea 9e ae 06 77 7c 15 d2 8f 21 1b 2c d6 29 5b 4a 74 a5 b4 1d f5 59 8e e9 69 cb 81 78 e8 87 e8 ce 83 47 0c db 1a 3f 17 75 c1 df 84 b0 53 cb e9 22 03 b8 eb 27 9d 3b 6e 57 6d 8e 99 92 b6 e8 28 74 00 ce b6 17 95 03 a4 b0 90 fb cf 09 dd b9 e7 77 7e ae be b9 69 d7 23 76 f4 c7 d5 73 73 6a c5 3d ba 80 bf 05 8b 7f f1 36 2f 2f 7d 87 4b 72 35 36 7d 90 c8 7e 3a 8f 70 29 43 65 3c 4b 6e 3c 2d 88 96 19 c4 ab d3 85 b0 8f 57 b9 4e e0 84 56 50 33 1a 1a 0e 87 2a 68 86 96 26 00 ac dd ed b9 a1 5c f5 a3 44 7a b6 58 b9 bc 2f ae 59 39 c8 a1 de 75 f8 d6 66 c5 dd 78 f6 c8 5d 3c 86 d4 e4 2f d3 38 bd 0a 9c e4 89 81 7a 1a 68 39 b7 53 93 fe a3 23 e9 eb 39 3d 90 6c 24 58 3f 16 48 f4 37 Data Ascii: t!DRQyJ%x^X1M?w\|!,)[JtYixG?uS"';nWm(tw~i#vssj=6//}Kr56}~:p)Ce<Kn<-WNVP3*h&\DzX/Y9ufx]</8zh9S#9=l$X?H7
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 3c 3f 6f 9b 21 3a 91 91 b2 60 f0 ca 99 7b ee 98 9e ac 79 53 b9 cc cd 79 65 3f 21 14 10 47 a8 b9 54 99 a8 fd 8d a4 60 92 a2 a5 9e aa 24 fd a7 0d ef cc 4f 88 ff 00 0c 79 2e 3e a4 e4 9a e3 64 f6 46 66 79 49 fe 92 a9 74 cd 56 f0 f8 a9 fb 71 e5 4e ef 33 27 65 f1 e1 98 87 dd b3 71 dc 3e 93 fb 30 9f 7e 7a f9 b2 2c 9f e0 56 51 17 e9 96 28 03 fd 97 17 1e 51 19 46 75 6d 34 ec c9 11 e8 81 9a 54 07 22 4b 69 d5 b8 97 d7 aa 57 32 37 20 04 29 b5 ea 71 f5 a0 85 a9 b2 09 04 6a 49 51 45 36 9b 2e ad 2b d0 60 a0 38 ff 00 a2 ce 97 a4 9d 20 b3 4e 82 fd 42 49 bd 8d 8a 63 c5 75 49 1d ea b0 b8 bd f1 0e 33 d3 24 22 3c 74 eb 75 c0 bb 27 c5 2d a1 4e ac ff 00 65 0d a9 5e cc 70 3e 8d 13 2f e4 f7 3d 1e 5b f2 1c 9d 50 79 f9 c9 73 47 2a 3c c6 5a 66 2b cd 46 5a 10 90 eb 43 95 fc 68 53 89 Data Ascii: <?o!:`{ySye?!GT`$Oy.>dFfyItVqN3'eq>0~z,VQ(QFum4T"KiW27 )qjIQE6.+`8 NBIcuI3$"<tu'-Ne^p>/=[PysG*<Zf+FZChS
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: ae 7b ad b8 b6 fb 1b ec 7b fd 7e 6a 14 84 fb 8d 48 49 b0 b5 2e 00 fb 22 b5 8c ea 95 49 cb 95 14 a6 fd 94 b6 f2 80 ef 4b 2f 21 c3 eb d8 26 f8 c8 13 9a 4d 1c c5 0e 0e 63 72 1d 5a c1 23 57 6b 40 4f 5d ec 12 90 91 ea 16 c5 65 e4 4d ce ed 14 00 e1 13 a9 ec 9b 74 5a 9b e4 85 0f ec ee 93 fd 1c 21 f5 04 ee 7d bf 8f b3 1c 51 77 99 4b a7 8e b6 9e 4f fa bb 98 db 7f d1 eb 37 1f 66 d7 f1 f0 ef b8 4e 1c 48 43 8b 42 5c 43 a9 42 d4 90 e3 7a c2 1c 09 36 0e 23 98 86 dc d0 ab 6a 4f 31 b4 2e c4 6a 42 55 74 82 76 03 b3 61 de 12 01 de c4 82 ab 05 2a dd 3b 44 81 be 9d 8e f8 07 5a ee b5 04 ea 3b ac 83 61 7e a4 84 24 9f fd 29 3f 46 0a ca 8d cf 5f dd b0 f6 01 b0 f5 61 40 25 28 51 b1 e6 20 90 12 e3 67 49 0b d3 db 09 2a 52 6f a5 56 42 c3 6a b1 42 ee a4 fc 6f d9 d7 0d ba 5b 0e 00 96 Data Ascii: {{~jHI."IK/!&McrZ#Wk@O]eMtZ!}QwKO7fNHCB\CBz6#jO1.jBUtva;DZ;a~$)?F_a@%(Q gIRoVBjBo[
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 44 11 aa ea 29 1c be 89 d0 13 d4 ea b9 df 1e 4d b7 ff 00 75 ec ba 90 4a 4a a2 57 93 a8 5a e9 fc c9 3f 71 a8 29 37 1d 77 04 7a b1 4d a2 53 e2 66 5a 9e 69 4c a6 df 9b 5f a6 d1 a8 2f 2d 08 4a 03 93 32 f3 95 c5 4a 70 69 27 4b 8f 21 c0 d3 8c 8f e2 bd cd d2 49 d3 b4 93 a7 85 34 74 7f d1 38 e0 e3 76 b7 ca 4f 10 6a 0b dd 44 ee 34 b9 f3 49 26 dd 2c 6f 97 a4 b5 1b 8a bc 5a 7a 43 89 69 86 28 79 06 43 ae 2b 64 34 d3 70 2b a5 d7 14 7e 6a 52 8d 4a 3d c0 7a b1 9c a9 51 a8 ee f0 e2 0c 25 2d 96 57 c4 c5 48 6f 4f 2e f1 d7 55 8b 98 e7 3a 86 02 90 52 10 dc 89 6e 29 a4 a9 2b 09 16 04 14 00 91 c5 46 28 79 c7 24 f1 3b 2e 53 6a 52 61 54 72 9a e2 d7 b3 22 13 1a c2 63 f1 e9 2d d6 23 34 f2 d4 80 db ed ca 87 11 90 1c 60 85 30 fc 36 75 20 a1 1c b7 78 af 46 e1 0d 43 26 70 dd cc d5 9a Data Ascii: D)MuJJWZ?q)7wzMSfZiL_/-J2Jpi'K!I4t8vOjD4I&,oZzCi(yC+d4p+~jRJ=zQ%-WHoO.U:Rn)+F(y$;.SjRaTr"c-#4`06u xFC&p
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: f4 29 2a 50 50 3b e2 a1 4e 72 5a d0 b1 60 52 92 92 76 df a9 17 e9 df b5 fb bd 78 76 2b 8c 3b ca 77 b2 ab 81 b6 e2 c6 db ea 17 16 b1 bf 7f ae d8 6e 94 b2 eb 4a 52 52 94 37 ca 0b 09 29 b1 d0 13 b9 1d 4a 97 6e d1 ef 37 38 ed ec 41 29 20 dc 2d 2a b2 81 1d e0 8d c1 c5 65 6e a5 31 1e ba 41 6d dd 90 a6 d0 b4 ea 4a 41 49 52 54 0b 6b 1d 9b 14 29 05 2a 04 85 02 3a f2 97 cb e7 0d 25 04 90 74 a9 25 48 b5 ad ad 1a 8a d0 15 aa c8 2b 00 2e ca d2 4e 93 82 8b 36 97 35 a0 eb 5b 88 d0 15 f0 89 e5 86 d5 a9 69 ee 42 f9 96 6c fc a5 36 e6 c3 4d c8 4a 2e da 42 96 a4 1b 2d dd 2d 0e 63 76 bf 33 48 2a ed 69 40 2b 1d b4 a5 42 da f4 11 d9 43 8b 69 5a da 71 68 50 b8 4a d0 a2 85 58 ec 77 4f 8a 6e 08 bf 7f 7e 37 59 ee bf 52 4a ad 72 7f a4 7c 77 f6 f9 88 ba 99 49 2a 29 d0 9d 89 3b 6a bd Data Ascii: )PP;NrZ`Rvxv+;wnJRR7)Jn78A) -en1AmJAIRTk):%t%H+.N65[iBl6MJ.B--cv3Hi@+BCiZqhPJXwOn~7YRJr\|wI*);j
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: a7 e1 0f e7 fb e7 3e f9 b5 d0 fa 9a 7f 73 84 28 3d aa b4 23 02 14 7b 67 4b 5e 4d 61 ac 77 3f 7c 3b c1 ff 00 d7 0d 78 69 6b b5 45 9a 07 54 13 24 2d d5 81 3a e1 42 7d a9 b3 aa 2e b8 b7 0e 58 d4 55 03 41 36 b9 fd f9 df 9b fe 61 d1 9c f6 67 97 a2 33 ec cf 86 73 d9 9f 78 04 08 92 75 d7 33 99 9f 40 d0 72 10 2c 95 05 09 13 a9 19 a5 49 32 92 41 c9 40 18 cb 23 a2 84 29 24 a4 83 d0 67 86 bf 9f 47 96 0e 5c 2d 51 ef ef 7c eb 9f 7c da ee 1e 3a cf 91 df 56 ab 5e 83 c6 47 cd a7 ed 55 a8 87 88 c7 34 bc 3d 25 42 c4 5a e8 1e 19 df 9b fe 61 d0 01 cf 39 9d 34 cb 2d 3d b9 f3 e5 68 b4 1e fd f4 8d fb df 3a e7 df 36 bb e1 35 4d 4f 12 53 fc 40 8f 6d af 16 88 7a 7e 49 48 8f 6d 98 4e 0a 1c c7 ee dc 3e 49 c4 74 b1 4d ae b1 0e b9 f3 7f cc 3a 53 d6 00 e6 92 40 38 4c 4a 7b 0e 12 a4 c8 Data Ascii: >s(=#{gK^Maw?\|;xikET$-:B}.XUA6ag3sxu3@r,I2A@#)$gG\-Q\|\|:V^GU4=%BZa94-=h:65MOS@mz~IHmN>ItM:S@8LJ{
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 4a 13 4f 4e 55 20 66 4c e9 6a c6 2f 5a 3b c1 ba b6 6e aa ba b0 f5 c3 4b 44 43 6d bb d4 71 74 29 61 c9 29 69 c8 5b 2a 49 c4 da 82 55 97 00 41 b2 2e 9b cd 14 5b 2c 95 50 55 e3 a7 bc aa df 79 01 95 95 30 da ea a8 ca 4b e2 25 90 a4 21 6a 18 e3 24 e9 13 64 5c 95 74 75 db 50 db 74 af aa 99 db ba ad 34 6e 25 a5 94 3a 5c 7e 9d d6 99 69 40 42 dc 03 a9 85 39 e2 42 84 65 64 dd b7 8e e7 62 d5 dc 55 5e 27 56 f1 ab 01 87 0a a9 d3 fa 4d a7 25 e4 84 e2 6d 25 b0 54 14 a0 01 00 91 a5 a8 ea 2f 6b 96 fc be 9d 4d c7 5b 58 8b c2 b5 f2 d1 08 79 b4 96 d1 52 f2 f7 88 50 61 d0 e2 48 75 26 44 08 ce 73 b6 d6 d1 d5 d5 56 ec f2 e9 a9 9f a8 4b 15 8e 2d e5 34 da 96 96 52 5e a1 32 e1 48 21 00 84 28 ca a3 24 ab 91 b7 39 e2 7d 1d 9f d6 d7 6e cf d4 55 3b 59 dd 14 ce b4 1b da 0a 5a c4 17 5b Data Ascii: JONU fLj/Z;nKDCmqt)a)i[*IUA.[,PUy0K%!j$d\tuPt4n%:\~i@B9BedbU^'VM%m%T/kM[XyRPaHu&DsVK-4R^2H!($9}nU;YZ[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49990	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	698	OUT	GET /xxrz/250x400/793/b4/ed/b4ed2bf6911aacc0dc0604cc1828af1f/b4ed2bf6911aacc0dc0604cc1828af1f.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:45 UTC	721	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:45 GMT Content-Type: image/jpeg Content-Length: 84444 Connection: close Last-Modified: Wed, 24 Apr 2024 14:34:13 GMT Vary: Accept-Encoding ETag: W/"66291865-147d4" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6943 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CIdx5Oyl0k%2Bc3RiEiejcYOCTKi2FZnvq5I5SVaioDsfyOkEj7xCj9EIvdZt8wyEo4IRDl%2BhDF4IfVNBMz%2BeKa5ejneDzjd9DsmqMExVctAjjw0lln2zaGoc8QTynyRybBpLr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a843a9536dd3-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:45 UTC	648	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 2a 60 e9 07 b1 c3 2a e8 3d ae 35 59 2b 15 5a 9e bd 43 57 2d d4 92 23 05 67 9b cb 35 1b c8 86 e3 7a 99 94 22 88 29 18 9d 1e 6f 6b 21 ea be d3 5e 27 d1 2f c8 f2 a2 fd 3c c1 4b d9 f0 46 5c 95 07 de 04 b2 b2 8c b2 98 f3 8a d1 0f 5b ad 44 b6 67 57 cb c8 98 74 78 b6 8e 31 59 1d 51 66 9b 18 31 e4 85 20 13 08 d9 a5 11 9c 15 9e a1 a1 cd 48 6a 51 a0 d8 ad bd fe c7 ea 59 aa 5e 22 2a 70 74 6f bc 03 00 1c fd 5b 51 3a 19 f5 5d a6 76 e5 c5 94 2f a5 fd 82 78 57 57 cb 84 f9 94 87 bd 7c 35 a8 ef ef 40 7d 22 5a bc d5 bc 7a d1 a7 18 82 d7 61 a6 cc 41 1b 17 89 38 fa 73 f7 a8 5f 35 6b 81 7c 74 d4 e5 cc 56 11 45 ce 3b 74 a4 5f 90 d5 27 ab ab 92 a3 5e d6 e8 6c fe a9 3e a4 27 19 47 d2 da aa 41 97 cc 2c 01 64 10 c4 66 c1 01 5c f5 f0 74 32 ce b5 1d 2a 32 5b 78 b4 ab 9a f3 d6 e4 dc Data Ascii: `=5Y+ZCW-#g5z")ok!^'/<KF\[DgWtx1YQf1 HjQY^"pto[Q:]v/xWW\|5@}"ZzaA8s_5k\|tVE;t_'^l>'GA,df\t22[x
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 3c ba 3e 5c fa 32 d7 51 db 99 cb e6 85 44 88 3a ed 7c 70 96 60 94 2c f1 31 5a 10 0f 9a 54 8d 50 a5 fd 15 89 d6 26 15 af 84 10 0b 0e 02 5c 7a 06 83 d3 2d d5 69 5a e4 d5 b4 dc e4 14 ee 50 77 63 86 01 89 e7 ba dc 01 ee 89 0f 66 57 58 4f 2d 69 71 96 95 d1 3e 5c e4 dd 31 e1 c2 e0 19 4b 0c f8 b1 fe 18 76 a7 3d 05 87 05 8e 94 42 2a c5 7a 0c c9 73 e2 df 60 60 71 9b 5d 3c 46 2c e4 7a d2 27 25 46 81 35 1f 7e b4 57 2b e3 1f be 4e 45 88 05 15 57 30 2e 01 4b a0 9b 0b cd 0f bf 28 dc 4d de 5d e3 e7 1b 80 47 d8 e5 f8 91 d7 ce 73 b5 58 9d 4b 4d 96 0f d3 e5 b1 c9 cb 53 27 ce 71 f2 96 c6 2c b8 9d 1c f6 ae 2f aa 5c 92 d7 f1 ea 04 8e 85 b3 62 98 aa 7e e7 bc d8 0c 5e e6 ee 40 d8 c7 97 d7 e4 67 eb 67 16 fc 09 8f 6b c6 30 9e 4a cb 52 ce 13 5f ae f4 59 a2 52 57 98 85 26 ef b1 ca Data Ascii: <>\2QD:\|p`,1ZTP&\z-iZPwcfWXO-iq>\1Kv=B*zs``q]<F,z'%F5~W+NEW0.K(M]GsXKMS'q,/\b~^@ggk0JR_YRW&
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 1d 78 79 b3 de 9c d9 de 06 2b 6f ed 96 d2 5c 92 f2 86 91 89 ec 2b 83 4e 55 c8 d4 31 1d 91 35 7a 65 c8 5a 9e bc e4 7e 9d ab a8 ec 35 ca 6f 55 ed 30 a3 90 ce 5e 7a 22 e3 46 f5 c5 1b da bd ca 88 47 bd e9 8e ab 96 c8 b4 35 54 53 b2 d3 54 8b 14 b2 aa a6 42 94 60 cd af 33 24 71 80 92 37 62 03 dd 9a 7b dd 10 b5 56 88 98 92 f8 c7 99 c8 d9 76 0e 6b 76 59 c7 57 48 45 51 90 66 76 28 3a aa 1f d1 8b 3f 85 25 e4 84 73 b6 29 8a a1 de a4 a2 c7 dd 4c f6 3b 67 42 b2 da 73 4f 87 ff 00 cf 09 49 6c 14 f9 95 cd c4 b1 86 8a cb 18 0b 81 99 1f 95 95 5e fc 78 b4 e2 2f e2 34 f3 e5 05 6c 2a 7b 3d 97 60 9f b5 56 cd ab f4 11 aa 46 38 13 1c dc ad b5 fa a8 b8 ed 91 6c 3b b4 87 5e 2c e5 ab 52 73 c6 46 49 78 98 c9 33 18 e4 24 ae 52 44 b7 2a af 65 58 5a f5 d5 90 ed 69 2d e8 a5 4a aa b0 80 Data Ascii: xy+o\+NU15zeZ~5oU0^z"FG5TSTB`3$q7b{VvkvYWHEQfv(:?%s)L;gBsOIl^x/4l{=`VF8l;^,RsFIx3$RDeXZi-J
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 22 f2 fa 98 79 63 e3 ba 2b 19 5b 3d ed 36 b2 bb 24 ea ab 7b 7a 0a f7 ec 17 70 35 fa ba c8 9b 65 95 1e b7 54 f2 28 4a bb b5 d2 2c 15 14 87 5c 51 16 19 2b de 93 9a 28 fd 10 d5 23 5c 86 fb fa 39 31 fc b5 bf d7 4a 8d fe a1 b6 50 e7 fc 41 df 95 b7 de 45 db b6 41 92 39 d8 9a 2f 8f fd 02 3d 7f a0 d5 51 55 49 5a c4 68 9c cf a9 49 c3 2d d8 84 49 51 57 9d c3 56 f9 2d d4 37 9b ad 3e c7 54 f2 05 36 d8 27 11 57 14 aa a8 a5 56 e7 90 1f 26 ef 71 b2 85 5e 46 ea 9a 6d 1d 09 b6 ad c6 0e be 0b 09 73 67 12 f6 69 27 93 8c 56 2f 35 f6 ff 00 20 33 69 4e 19 0c 72 49 18 61 b1 c8 ca 7f 66 26 ac 37 b7 f4 30 de a2 d1 c1 d9 34 e8 f9 17 5e 04 9d 96 1c 76 f1 6b 14 4c c8 8d 68 b2 1c b4 6e 7c 9e 72 59 fb 64 e8 de c4 34 35 ee 1a 32 4a 76 fd a3 ac 61 45 93 2e 1a 6b be 5f bb ac 4a cf 29 55 Data Ascii: "yc+[=6${zp5eT(J,\Q+(#\91JPAEA9/=QUIZhI-IQWV-7>T6'WV&q^Fmsgi'V/5 3iNrIaf&704^vkLhn\|rYd452JvaE.k_J)U
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: af 65 0e bf 21 09 1e 55 1d 22 ca 6b 72 5b bb b9 f2 d6 4b d5 51 b4 b5 0e 58 d0 34 5d ce 25 dc 5b 50 a1 23 4a 8f de 88 f1 93 1d 1f 85 62 7f 71 af 46 e2 bd 1d 84 e3 17 f9 2f 0c ed 13 af 30 9c c6 e2 11 bc 23 d1 11 d2 57 15 ca f4 3f 6c 22 72 88 15 c6 b3 35 f8 c8 37 eb fa f3 ad 62 56 d6 c4 ab 8f e4 f9 8c f6 25 9b eb ed 52 f6 2b 13 da d1 24 82 3c 31 40 e5 45 98 4e b0 e9 a3 2c 88 41 95 2a ae 5d 16 d5 1e 6c 67 01 16 0c c8 8a 32 94 1f 4f 6a 67 0a c7 7a 4c a8 2a 79 c7 56 6a 97 86 5f d2 17 f8 2d 7e 7c 65 65 71 d9 83 61 11 15 1c a8 bf 58 e4 57 63 91 71 63 ae 7a 39 50 d7 3c ae 3d d4 0a 71 f8 c7 da 41 3c cd 1b 7c 91 6e 5b 2d 9f c8 66 58 36 8d b5 98 ad 67 07 5d a7 55 38 35 f0 bd a8 b3 08 9e ca 17 f5 90 55 57 8f 62 92 e1 87 50 dc 63 16 a6 7c 44 7b 65 44 e9 86 1b b9 6b 18 Data Ascii: e!U"kr[KQX4]%[P#JbqF/0#W?l"r57bV%R+$<1@EN,A]lg2OjgzLyVj_-~\|eeqaXWcqcz9P<=qA<\|n[-fX6g]U85UWbPc\|D{eDk
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: ce 6f 2d ae d9 b0 ed da e6 a7 4f 2e e3 6a ad d9 36 eb 3d db c8 35 71 23 d8 f3 d5 51 dd 70 75 36 6f 19 c1 2e 36 78 e7 70 4b 48 45 5e d9 57 4d b4 d2 25 d5 3e e3 b0 65 76 b7 b4 51 cb 5a dd d8 96 96 94 7b 5d f1 52 2e f0 fa fb 2a 2f 24 d6 d5 d4 68 7b c5 3d db 25 79 b5 72 16 87 b9 c0 bb 59 3e 6d cf db fd c9 2f 7e 4f 9b 97 36 1d 23 7a db 25 ba 07 96 9f 53 03 48 de 6b 69 9b e2 1b a4 74 47 f9 9e 14 3b 1f 17 6c d6 52 69 6b bc b1 af 57 5c 43 f3 05 dd 76 b1 a6 f9 13 4d 7a 6b de 4c 76 c1 fb 7d b9 3a f2 38 7c c3 f8 9b f8 44 ac 9b 64 1f 54 88 23 42 ca fc 96 bb 1f 24 d6 41 33 2c 75 39 11 25 50 5e 2d c4 29 1c ab 64 35 51 c5 73 93 3b ae 0c ca 8a 22 62 13 be 6c da c4 9a f9 cc f6 b5 18 ff 00 a7 61 09 c6 7b 57 3b aa e3 51 78 45 4e c8 ee 7f a1 df fc 06 ec 3b 97 11 dc 63 55 78 Data Ascii: o-O.j6=5q#Qpu6o.6xpKHE^WM%>evQZ{]R.*/$h{=%yrY>m/~O6#z%SHkitG;lRikW\CvMzkLv}:8\|DdT#B$A3,u9%P^-)d5Qs;"bla{W;QxEN;cUx
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: f0 b0 8a 98 75 06 ce 58 96 61 d6 1b a1 6e 7a 5f 63 a6 96 a8 f8 67 0d 63 18 92 17 79 19 cf 66 e9 1b 67 39 ae 4f 85 ac 05 eb 13 c2 f0 c8 f8 95 8d 19 73 10 10 5f 31 4b 00 d7 bf 2d 35 15 82 e0 b8 29 5a 14 79 94 ba 66 32 a8 04 67 cd 6b 5c ed d4 d3 96 be 15 89 e1 71 c6 e8 30 a8 cc b2 bb a3 16 da 21 9e e1 85 bc 8d af df 58 25 7c 26 1b 2b c6 a7 22 74 89 7f b8 d6 60 08 da ea 47 aa 8a 90 45 12 45 88 ed c7 3a e6 21 91 64 b4 82 c7 29 36 04 ef b9 d6 a5 49 0e 10 e2 46 16 08 e2 b8 b3 5a d2 35 d8 28 b2 dc 8d eb 15 88 c5 64 e8 63 2e 79 30 dc c5 6f 68 0b ee 39 1b 69 eb 5f c2 b1 58 ec 44 8a 92 34 85 2e 73 48 d6 f2 1e ba fb a8 f0 b6 0c 91 b3 10 cd 76 2d a6 50 a2 d7 53 f7 af a5 4b c3 ba 17 54 79 09 2c 06 a0 5c 5c 90 2d 7a 87 80 61 9d 13 f9 93 d3 59 8b ae 5b 8d 7b 16 3f 3d 29 Data Ascii: uXanz_cgcyfg9Os_1K-5)Zyf2gk\q0!X%\|&+"t`GEE:!d)6IFZ5(dc.y0oh9i_XD4.sHv-PSKTy,\\-zaY[{?=)
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 9f 17 91 ae 3d f5 0f 10 0d 60 e2 c0 9b 5c 77 d4 78 94 b7 2a c4 ca 64 01 37 07 56 ff 00 8a db e7 fa ee ac 5b 96 63 ca a5 54 92 42 cf b0 ea a8 f2 3a 9f 5f c2 8b ea 6d fa 1c aa 16 6c c8 6f a3 7b ef 6a e1 f3 88 e3 00 02 1d 5b 3a 1b fb 64 f5 95 bd 34 f8 d2 4c b3 46 08 1b f7 f2 ef a9 14 5f df 5d 20 41 ae dc a8 4b 31 19 84 52 15 df 30 5b e9 a5 2b 24 a0 12 41 3e 3a 11 e8 6b 15 88 10 b6 45 b6 d7 3a df 7b 53 4b 23 6e c4 f9 eb 57 34 a7 ac 3c 2a 13 a0 bf e8 54 cf d6 3a ff 00 a7 a7 fd 85 62 a5 ed 93 dd a7 ad 62 db 23 22 2e b9 51 6f dd ad aa 0b b6 62 76 ca df 2a 86 e6 48 80 ff 00 70 7b ba a4 d6 06 30 56 51 6d 3a 50 c0 ff 00 6a fc ed 58 39 7a 37 78 4e df d4 1e ba 1b 56 2b 8b e2 22 9d ff 00 94 cf 87 5b f6 0d 9f 70 01 20 dc 7c 2b 01 c4 c4 82 f0 f0 7c 4c ec 35 2e 72 3e 5d Data Ascii: =`\wxd7V[cTB:_mlo{j[:d4LF_] AK1R0[+$A>:kE:{SK#nW4<T:bb#".Qobv*Hp{0VQm:PjX9z7xNV+"[p \|+\|L5.r>]
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: f7 17 b5 61 67 2a ca a7 96 52 19 89 b0 2a 46 f6 3a e9 71 eb 4d 36 66 56 8e 48 d6 d1 3c 77 66 60 7a f6 d4 59 79 5b 4e ff 00 0a 92 4e b4 65 25 88 94 85 a3 2c 4b 0e b3 84 d7 45 f6 4a 82 2a 57 49 0c 07 3c 4f d1 25 9b a4 67 19 9c 85 04 f5 54 9b 69 46 60 d1 c2 a6 48 58 ab 86 92 f9 80 20 7b 20 65 b9 d0 db 5a 41 08 8b 11 09 9c 65 91 be ac 80 c5 95 40 50 b7 f1 5b 6d 7d 85 09 af 2c 72 49 3c 6a 23 b8 22 36 93 eb 6e 2c 33 29 01 54 73 b6 b4 64 fa c9 64 06 0b bb 82 1b 33 e6 55 b2 a9 19 6d 6d 40 f4 a6 c9 24 99 f3 c7 d9 5c 84 e6 ed 2b 66 b1 16 b5 9b 63 bd b7 a9 d9 1d c1 cf 11 cd 16 e4 b8 31 bf 7a 32 8b fa 6c 7d 2b 89 c5 71 0c c0 86 39 00 66 fb 5b 6a 6b 0d 02 4c 18 be 61 63 61 ca fd f4 a5 6d bd 74 bc 81 b8 e5 fa bd 33 11 7b 1f 3a cc 79 52 48 3d 6b 86 63 3a 44 ca e6 cf 18 Data Ascii: agRF:qM6fVH<wf`zYy[NNe%,KEJ*WI<O%gTiF`HX { eZAe@P[m},rI<j#"6n,3)Tsdd3Umm@$\+fc1z2l}+q9f[jkLacamt3{:yRH=kc:D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49989	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	461	OUT	GET /roqad?uid=8b2f262a-441f-4f69-9075-2d2b920e1fd5&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:45 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:45 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49993	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	594	OUT	GET /media/fonts/EuclidSquare/EuclidSquare-Medium.woff2 HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bitpanda.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:45 UTC	1068	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:45 GMT Content-Type: application/octet-stream Content-Length: 39488 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT, POST Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Tue, 09 Nov 2021 09:07:37 GMT ETag: "39f022af561204e2d500fd4dfae4cd80" Cache-Control: public, max-age=36000 x-amz-version-id: gjjQH.4kO7kZy7OwpqW1i0dCo_a2eiAQ X-Cache: Hit from cloudfront Via: 1.1 8a771ca27e5a3c9e06b12b7af5d25aa4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: TD-WoQ1OT-tAysjorBro7u-YD12CA6VmBTwVABYSTZ3kJrnLzQKm4g== Age: 20490 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:45 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: _cfuvid=h8jICjXZmwi8.XJLBS6sra733sBYG3AiiOdpj45yqws-1714156365478-0.0.1.1-604800000; path=/; domain=.bitpanda.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a8441d9431ce-MIA
2024-04-26 18:32:45 UTC	301	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 9a 40 00 13 00 00 00 02 32 24 00 00 99 d2 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 81 08 3f 46 46 54 4d 1c 1a 36 1b 83 d3 06 1c ad 2e 06 60 00 88 76 08 2a 09 82 73 11 14 0a 83 f1 2c 83 b2 44 0b 8b 04 00 01 36 02 24 03 96 04 04 20 05 8e 20 07 af 2c 0c 81 49 5b eb 0b 92 02 e2 6e 73 10 85 a0 ee aa 44 7c ee fe 0d cf 35 78 c3 41 af eb cd c2 a1 76 65 fe b2 1a 99 9b 4b 3c e4 b6 01 44 58 2b 8b 8f ce fe ff ff ff ff 0d 49 45 c6 4c 33 48 bb c1 00 00 50 55 55 ff 7b 08 ee 72 84 67 08 2a 51 d0 f5 15 43 19 27 d2 c5 bc 04 26 28 67 de ad 74 db ed 62 8e 9d 1c e1 98 64 1d 87 9b d3 98 91 37 eb 8b 42 a8 5a b2 c7 19 8e 2c 0c 17 68 8f 39 b3 2b b6 5b af 62 ee e1 64 17 2d a2 61 44 aa 3b 2f a2 92 1c 1b ea c1 26 7f b0 Data Ascii: wOF2@2$?FFTM6.`vs,D6$ ,I[nsD\|5xAveK<DX+IEL3HPUU{rgQC'&(gtbd7BZ,h9+[bd-aD;/&
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 73 c2 bd 94 48 ca 2d 7e 97 bb f5 76 5f 4f 5d 5a b4 e6 07 71 eb 06 9b 6b 94 5f 8c 28 49 b2 22 d9 b8 9b 48 14 bd 5d e8 3d dd 79 a1 6a 60 e6 fd 53 76 c1 be 9a c3 d6 f4 50 bb fc ef 8f 6a 64 5f a7 92 63 5a 2e 47 20 e3 7c 2d 9f a8 a6 7e b1 8d 98 1f bf a6 5a 1f 8c 5b 6f 22 20 f3 22 4a ec 78 d0 61 86 98 58 86 12 3c 6d 31 35 ed 63 fe 97 97 dc 8a cf 0a 51 89 ac 2e 49 26 64 bc 99 31 7f 50 16 73 bb e1 bd 5b 47 47 94 e1 4c de 58 4d 18 e9 e3 20 7b c1 90 dc 73 6f c0 1b a8 e6 4a f6 2f 0b f7 96 bc 04 c6 e0 f2 80 21 6a 9a 96 ec a3 2a b9 da a7 be 50 f4 fe f4 bf ee 39 57 b2 2c d9 7e fa c4 bc 1b 02 46 08 11 00 70 48 11 b1 ab 16 c1 73 68 ab b2 54 aa 96 5a d4 a8 86 69 9e 9e e1 85 b9 9d db 43 7e 84 ec 9d 42 66 8e 73 3b 49 ec fc 93 d8 40 3f cf cf ed cf 7d 7b 6f 1b 2b d8 46 8d 4d Data Ascii: sH-~v_O]Zqk_(I"H]=yj`SvPjd_cZ.G \|-~Z[o" "JxaX<m15cQ.I&d1Ps[GGLXM {soJ/!j*P9W,~FpHshTZiC~Bfs;I@?}{o+FM
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: e4 8d d4 a6 08 1c 8f 8a 65 31 c6 98 2f 52 94 f1 dd c8 ff fe 9d b8 ad 0f 0f b7 c9 45 86 20 22 41 42 08 41 c4 fd 75 2f 7a ff bf 99 3d 9f f7 2b db fb eb fd bc aa 75 ac 1a 35 d6 58 11 31 22 22 62 8c 75 96 b1 95 89 17 cd 2b 62 a3 c3 c8 61 7c 95 0f fe a6 dd 83 83 09 e3 c4 30 cd 28 50 68 3d e9 8a 26 e4 fb 8c 3d f6 f3 69 af 9b bb 7a a9 69 a1 82 80 da ff 2d 53 cb f8 7e 4d e6 af cd ad 80 8d b0 68 12 60 df 1a d3 6a 1a 76 a0 80 41 3e e4 c7 df ba ce da ea d9 87 80 05 60 12 c1 bb 4f 53 a0 c6 01 be 73 b7 8e c0 e6 a2 0b 16 14 37 41 f7 e1 eb bc 9e 78 3b 18 87 0c 00 a1 90 c5 c6 f7 08 58 44 74 a1 df 7f 4f e9 51 00 3f 5c e5 e4 47 e1 4d fe 25 60 0b 70 36 20 02 ac 6e b0 4a c3 05 ab 4c 06 ac 81 51 87 55 eb 24 84 00 01 08 58 fa ad 82 85 10 62 42 2d e8 fc 96 a1 bc ae e1 d6 73 c0 Data Ascii: e1/RE "ABAu/z=+u5X1""bu+ba\|0(Ph=&=izi-S~Mh`jvA>`OSs7Ax;XDtOQ?\GM%`p6 nJLQU$XbB-s
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 99 4e c7 a5 20 30 39 9e da 21 0d 64 54 67 d6 94 2d 52 48 e4 10 b9 18 6f 36 73 1a 71 01 d1 a8 63 93 ec 76 65 63 9d 9d 64 76 5a 5d 7a 49 18 69 9d 4c 6e ca b2 23 a9 36 01 07 7d 76 8e da 37 e9 68 1a 55 5c 71 8d 04 70 81 46 fd 98 be a8 fe 25 92 11 4d 66 da 31 70 82 7e 88 dc a0 ab 73 05 38 9d 97 dc a1 a0 3f 8b fd 5f 44 1d 10 df 5d cc 09 71 a3 35 cf a2 5a b9 e4 3c 7a 8c 1d b7 5e 2f 99 43 46 6b 1c ac b9 a4 5a 14 ce 95 ef b3 f2 e5 fe 55 db 4e e7 24 73 e3 55 c2 bc 14 d5 10 bf 48 3d 4f 90 a2 39 99 31 0b 97 54 27 aa 68 1d 79 91 9c 98 0e 8a 27 99 24 a2 10 d2 8e 74 c8 ba 72 22 79 7d 63 06 72 86 7d 31 34 cc b7 03 6a 89 60 a8 65 18 71 cc 58 c5 a0 6a 0d 7e a6 7a ac d3 18 8d 04 9b 58 cd 27 b6 1a 5a fb 42 96 76 49 87 ae 6b 49 ef ca 36 2c b2 ac 6f 8f 81 65 c3 4b 31 c5 fd c8 Data Ascii: N 09!dTg-RHo6sqcvecdvZ]zIiLn#6}v7hU\qpF%Mf1p~s8?_D]q5Z<z^/CFkZUN$sUH=O91T'hy'$tr"y}cr}14j`eqXj~zX'ZBvIkI6,oeK1
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: a0 01 da e0 d8 40 26 70 8d 94 35 db 4c 1e 53 c8 14 31 69 4a 2c e5 7e 25 03 ea 9f 4b a4 14 28 f3 ce 27 df fc 3a ff cb 4c 52 6b 10 0d 91 98 51 36 46 b5 9f 8e c4 63 ba 9d a7 57 d3 ea 6e ea 05 7a a0 53 8e 53 04 71 8f 04 cf 36 e4 41 3e 4b 00 84 50 04 3d 71 bc 71 c4 81 5c 28 0f f4 fe 3b c5 37 92 40 8a ca e8 1d a3 3c 4e e8 6d 3a 8e d3 79 9b ee e3 f4 dc 96 88 72 74 01 1c da e1 d8 41 08 e7 13 04 a5 c7 36 e0 01 3e 26 60 0a 81 08 d0 7a c5 24 f7 4c e1 b5 84 a4 a0 0c de 81 d9 7b d4 ea 1e 57 db 2f ab fb ad b6 bf 56 f7 4f 8d 02 85 e0 80 f6 5a 2d 60 27 70 ba e1 36 51 c9 e5 a5 aa a6 f3 f3 d4 15 ce 5c c5 e9 34 9b 69 7b fe 3f 6a 68 1e 99 c0 05 ae 69 59 35 02 fd 66 d4 a9 03 56 20 8f 3d 02 87 87 dc e0 16 09 ab 94 27 db a4 7d 8c 47 f2 8d 0a 48 21 29 22 5d 20 57 5c d7 1a dc 68 Data Ascii: @&p5LS1iJ,~%K(':LRkQ6FcWnzSSq6A>KP=qq\(;7@<Nm:yrtA6>&`z$L{W/VOZ-`'p6Q\4i{?jhiY5fV ='}GH!)"] W\h
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 71 ec ba 2a 2d 36 6a 9a 9b 9c 1f 5f 97 66 1b f2 a0 91 48 3c 06 9d 4e ee 3f ec 66 25 4d e8 6c a4 76 66 bd 8a 68 fc 5a b1 6d f6 b2 a0 25 46 52 d7 2e 26 41 b6 42 71 90 ac 19 6e 30 64 8d fb 0d 76 ba 41 9f 04 29 38 0d 73 91 b2 52 35 be 7d 12 30 31 30 41 c9 24 17 f5 7a b8 36 f1 4b 84 14 c7 bb a1 ec 14 61 f0 34 95 29 62 6a ce 0a 45 70 0a cb f7 14 a0 83 7d ab cf 30 a9 c1 10 47 a8 03 c5 c6 ae bc 70 1c e3 61 03 44 0c 81 0c 78 4f 0c 55 64 77 6a 05 01 f1 4c fc 54 00 c0 05 ae 26 ee e7 42 8d 9f 64 62 87 c5 de d4 4e ef 13 d5 c8 c5 e6 39 64 78 98 c4 4c 21 c4 b0 1e bd 8b e8 25 d2 eb fb 29 c2 6f 5a b6 11 53 83 f7 ab b1 9c 64 69 68 14 9d 1b 3a 46 1a 9b 7a 5f f4 26 7b 19 65 84 5d 0c 2b 92 85 5e 5d ab 05 dd 08 52 6e 80 43 13 18 e5 c9 10 09 87 a8 e5 1a 70 8a cd cc b1 6f ef 46 Data Ascii: q*-6j_fH<N?f%MlvfhZm%FR.&ABqn0dvA)8sR5}010A$z6Ka4)bjEp}0GpaDxOUdwjLT&BdbN9dxL!%)oZSdih:Fz_&{e]+^]RnCpoF
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 1a f6 85 f9 ed af 2e a8 17 67 91 40 75 22 07 8f e2 11 09 66 bc 58 77 0e 8b e2 85 d6 30 da 8e ad 2c bd 97 e6 16 db 28 eb 72 3c 3e 64 b0 96 d0 67 4e 2e 58 55 0d df e8 89 65 78 d4 07 f8 c9 81 90 33 07 d7 cc 83 93 f9 e5 97 8b 59 f2 3a df 02 ec c0 78 af a1 df 8a c0 fc d2 65 5f cb c2 b8 54 52 59 1f cc 1f 9d 81 7f fc ce fc dd e4 af 46 d0 08 41 19 5d cd 1b 8a 21 fd 3e d7 74 04 b4 d2 2c 2a b3 e9 98 a0 28 b1 55 17 df d9 12 0a 93 d8 29 64 2c 3a 4c 6c c4 df f5 d0 dd c0 18 d7 43 71 0b fe 0d 2d 6a 5c dd a4 15 eb d2 cb cd 2c 5a 79 1a 4d a5 9e 93 16 c4 b1 52 42 50 d8 4b 47 c3 0c 4e 22 ab 7e b4 f4 2a 72 2a cb 0d 4e cd 86 89 ad 9d c4 7a 06 97 40 02 19 ff 66 9c 6c 67 1d db 50 68 89 6a 03 55 23 18 41 c1 d3 0a 70 da 94 51 bb 95 8e 3d 39 08 99 5b 9f 5c 44 41 b3 cd 49 e8 6d f8 Data Ascii: .g@u"fXw0,(r<>dgN.XUex3Y:xe_TRYFA]!>t,(U)d,:LlCq-j\,ZyMRBPKGN"~r*Nz@flgPhjU#ApQ=9[\DAIm
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: fc 2b f0 01 8f 42 98 3f 0c 1e 26 ca 14 5c 75 5a 10 18 e7 25 74 58 6a b8 4d c4 87 cb 42 54 1c 79 5e 5c 95 8c ba 8d 71 1c b2 fb e3 21 39 1c 36 b2 12 e8 f4 bb a4 e5 b3 99 db 32 07 03 d2 68 a8 9b 49 14 ec 4d ae 99 59 0c 33 a3 d7 1c 24 ba 25 46 17 09 1b ce c3 fa f1 3c db cd 3d de 56 70 8b 6e 6e e7 2e 0c 1d 4f da 0a 88 f5 0c dd a2 c7 43 4b 33 27 64 fe b4 00 37 2c b6 a0 fa 2b cd 30 20 c7 32 f8 ac 61 9e aa 99 03 a0 b2 b0 84 62 8a a4 c3 30 7e 80 a4 06 a4 98 34 6c 0b 0e a0 e6 d2 f8 db 36 d5 e9 ae 33 31 51 3e 6a a3 b4 d9 84 c1 11 84 74 2c c1 50 37 ff d1 db 0d 55 72 68 25 35 37 f9 44 52 f3 a1 06 9f b1 00 06 d8 7a 22 09 33 98 18 fa 5e 01 8b 70 66 b0 ed 65 4e e1 da 0f 53 88 2d 8e ff e2 01 f1 29 4e 78 44 da e4 ca 7e 53 36 47 fc 7a 29 4d ab b3 d3 1f 47 26 cd cd 0f 02 d9 Data Ascii: +B?&\uZ%tXjMBTy^\q!962hIMY3$%F<=Vpnn.OCK3'd7,+0 2ab0~4l631Q>jt,P7Urh%57DRz"3^pfeNS-)NxD~S6Gz)MG&
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: e1 99 4c 9e e3 48 bd cc ba 2e 34 1a fb 19 32 48 b9 04 9b a1 f2 5a 24 66 78 c2 8b 3d 3c b1 38 82 48 b0 5d 92 01 22 2c b6 3e b0 48 c7 38 54 02 3d 44 d8 6a d2 15 06 2c f4 00 5c a0 c1 e1 03 3b 67 d0 32 93 05 28 ff 44 a5 01 ba fe 9c c1 63 92 b2 bb 92 c0 ff 89 0b 34 0b a9 7e c4 e5 15 94 c7 da 96 f1 9f 9d ed 15 7d 41 69 51 e1 9b c8 ee 2d f1 e5 0e 19 06 24 55 71 0e 03 da 11 d4 c0 1b 41 e0 ef 26 b8 93 bb 63 5d 55 7a 49 6d e6 06 11 87 ff 31 50 66 67 dc 76 a2 32 91 f7 2e 0c 4a 9c 04 1e 0a f7 14 5e ba 9b 58 27 03 67 fa b2 2f 2b 54 c6 1d d8 7f fa 56 2b 27 55 fa 45 8d a0 2f 12 9d d1 d4 dd e0 fb f1 5c 47 81 23 8f 79 34 1c a4 3c 47 41 28 4b b8 32 47 35 11 63 2a 23 4c 74 f5 44 6a 8c d6 43 99 5e 52 90 7a bb d3 fd 12 ce 19 47 ea f0 2f 76 af d9 60 2f de c8 79 13 5d 67 92 4b Data Ascii: LH.42HZ$fx=<8H]",>H8T=Dj,\;g2(Dc4~}AiQ-$UqA&c]UzIm1Pfgv2.J^X'g/+TV+'UE/\G#y4<GA(K2G5c*#LtDjC^RzG/v`/y]gK
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 64 72 38 ac dd 2c c3 c8 89 b4 0b 8c 14 71 2d 69 27 b7 9f a5 a5 62 9a 17 f8 a6 89 ef 4d 1b cd 3c 2d d2 73 bb dd 66 55 d7 46 9e a0 28 ea 5c d6 8e 43 94 6b 6c 70 51 f4 63 b5 ce fa cd 1c ed b2 01 46 19 f9 f9 87 72 e3 3d 49 67 e1 0c 74 2a 5d c0 c2 63 0c ef b2 c1 c4 7b 1c c7 34 54 42 32 f3 89 6c 39 6a 7f ec 66 e3 52 ea d9 54 cf 64 3b c2 f0 90 78 37 85 eb 63 ec 9e d4 7e 8d 05 24 af 41 73 01 5b ee 39 98 4b 52 0f 61 9b 06 3c f2 b3 a6 84 de 81 95 7e c7 23 87 84 47 79 67 e1 9f c5 a5 96 ca 82 81 04 46 63 ee 49 83 1a cc 30 f3 d0 ad 1e 55 f9 71 66 46 cc c2 f3 56 d0 cf 93 2b 88 2b 0b ce f1 8b cb 9c 68 0f c3 85 df 31 f0 2f 80 69 6a e7 1e 7f e4 09 e8 bd d0 8f 7f da 72 05 13 ca bf 68 42 f5 73 38 f7 cc cf d3 91 db 76 e2 11 1b 55 3e c9 a7 f2 11 07 2b 53 22 95 2f d2 82 7d bd Data Ascii: dr8,q-i'bM<-sfUF(\CklpQcFr=Igt*]c{4TB2l9jfRTd;x7c~$As[9KRa<~#GygFcI0UqfFV++h1/ijrhBs8vU>+S"/}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49988	34.111.113.62	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	675	OUT	GET /idsync/ex/receive?partner_id=2326&gdpr=0&gdpr_consent=&partner_device_id=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:45 UTC	1100	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:45 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714156365504;Expires=Tue, 25 Jun 2024 18:32:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=c9519294-632a-4d82-bad6-7d3fcc8fdd1e;Expires=Tue, 25 Jun 2024 18:32:45 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=2326&gdpr=0&gdpr_consent=&partner_device_id=ZGkACWYr8zMAAAAIA98YAw%3D%3D Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49976	142.250.189.142	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	548	OUT	GET /optimize.js?id=OPT-N3D6ZNP HTTP/1.1 Host: www.googleoptimize.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:45 UTC	654	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control Vary: Accept-Encoding Date: Fri, 26 Apr 2024 18:32:45 GMT Expires: Fri, 26 Apr 2024 18:32:45 GMT Cache-Control: private, max-age=900 Last-Modified: Fri, 26 Apr 2024 18:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Server: Google Tag Manager X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Connection: close Transfer-Encoding: chunked
2024-04-26 18:32:45 UTC	601	IN	Data Raw: 38 30 30 30 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 31 38 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 64 65 65 22 7d 5d 2c 0a 20 20 22 74 61 67 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 61 73 70 72 76 22 2c 22 76 74 70 5f 67 6c 6f 62 61 6c 4e 61 6d 65 22 3a 22 67 6f 6f 67 6c 65 5f 6f 70 74 69 6d 69 7a 65 22 2c 22 76 74 70 5f 6c 69 73 74 65 6e 46 Data Ascii: 8000// Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"18", "macros":[{"function":"__e"},{"function":"__dee"}], "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenF
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 22 6f 62 Data Ascii: rn function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["ob
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 72 20 65 20 69 6e 20 64 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 6a 61 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 70 61 7d 29 3b 76 61 72 20 71 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 72 61 3b 0a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: r e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};ja("Object.assign",function(a){return a\|\|pa});var qa="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ra;if("function"==typ
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 26 2d 31 21 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 6e 61 74 69 76 65 20 63 6f 64 65 22 29 3f 42 61 3a 43 61 3b 72 65 74 75 72 6e 20 44 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 45 61 3d 0a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 2f 2a 0a 20 6a 51 75 65 72 79 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 2e 0a 2a 2f 0a 76 61 72 20 46 61 3d 2f 5c 5b 6f 62 6a 65 63 74 20 28 42 6f 6f 6c 65 61 6e 7c 4e 75 6d 62 65 72 7c 53 74 72 69 6e 67 7c 46 75 6e 63 74 69 6f 6e 7c 41 72 72 61 79 Data Ascii: &-1!=Function.prototype.bind.toString().indexOf("native code")?Ba:Ca;return Da.apply(null,arguments)},Ea=function(a){return a};/* jQuery (c) 2005, 2012 jQuery Foundation, Inc. jquery.org/license.*/var Fa=/\[object (Boolean\|Number\|String\|Function\|Array
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 68 61 72 43 6f 64 65 41 74 28 63 2b 32 29 3a 30 2c 6d 3d 66 3e 3e 32 2c 6e 3d 28 66 26 33 29 3c 3c 34 7c 68 3e 3e 34 2c 70 3d 28 68 26 31 35 29 3c 3c 32 7c 6c 3e 3e 36 2c 71 3d 6c 26 36 33 3b 65 7c 7c 28 71 3d 36 34 2c 64 7c 7c 28 70 3d 36 34 29 29 3b 62 2e 70 75 73 68 28 4b 61 5b 6d 5d 2c 4b 61 5b 6e 5d 2c 4b 61 5b 70 5d 2c 4b 61 5b 71 5d 29 7d 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 22 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4f 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6d 29 7b 66 6f 72 28 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 6e 3d 61 2e 63 68 61 72 41 74 28 64 2b 2b 29 2c 70 3d 4d 61 5b 6e 5d 3b 69 66 28 6e 75 6c 6c 21 3d 70 29 72 65 74 75 72 6e 20 70 3b 69 66 28 21 2f 5e 5b 5c 73 5c 78 61 30 5d 2a 24 2f 2e 74 65 73 74 28 6e 29 Data Ascii: harCodeAt(c+2):0,m=f>>2,n=(f&3)<<4\|h>>4,p=(h&15)<<2\|l>>6,q=l&63;e\|\|(q=64,d\|\|(p=64));b.push(Ka[m],Ka[n],Ka[p],Ka[q])}return b.join("")}function Oa(a){function b(m){for(;d<a.length;){var n=a.charAt(d++),p=Ma[n];if(null!=p)return p;if(!/^[\s\xa0]*$/.test(n)
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 34 38 33 36 34 37 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 62 2d 61 2b 31 29 2b 61 29 7d 2c 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 6e 65 77 20 5a 61 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2e 73 65 74 28 61 5b 64 5d 2c 21 30 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 62 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 63 2e 67 65 74 28 62 5b 65 5d 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 0a 63 29 26 26 Data Ascii: 483647;return Math.floor(Math.random()*(b-a+1)+a)},$a=function(a,b){for(var c=new Za,d=0;d<a.length;d++)c.set(a[d],!0);for(var e=0;e<b.length;e++)if(c.get(b[e]))return!0;return!1},B=function(a,b){for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 64 3d 63 2c 65 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 2c 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 2d 31 3b 66 2b 2b 29 64 3d 64 5b 65 5b 66 5d 5d 3d 7b 7d 3b 64 5b 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 5d 3d 62 3b 72 65 74 75 72 6e 20 63 7d 2c 6d 62 3d 2f 5e 5c 77 7b 31 2c 39 7d 24 2f 2c 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 7c 7c 7b 7d 3b 62 3d 62 7c 7c 22 2c 22 3b 76 61 72 20 63 3d 5b 5d 3b 42 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 6d 62 2e 74 65 73 74 28 64 29 26 26 0a 65 26 26 63 2e 70 75 73 68 28 64 29 7d 29 3b 72 65 74 75 72 6e 20 63 2e 6a 6f 69 6e 28 62 29 7d 2c 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 2b 2b 64 3d 3d 3d 62 Data Ascii: {for(var c={},d=c,e=a.split("."),f=0;f<e.length-1;f++)d=d[e[f]]={};d[e[e.length-1]]=b;return c},mb=/^\w{1,9}$/,nb=function(a,b){a=a\|\|{};b=b\|\|",";var c=[];B(a,function(d,e){mb.test(d)&&e&&c.push(d)});return c.join(b)},ob=function(a,b){function c(){++d===b
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 62 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 2d 31 7d 3b 76 61 72 20 41 62 3d 7b 7d 2c 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 44 3d 61 7d 3b 42 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 22 41 52 54 49 43 4c 45 20 53 45 43 54 49 4f 4e 20 4e 41 56 20 41 53 49 44 45 20 48 31 20 48 32 20 48 33 20 48 34 20 48 35 20 48 36 20 48 45 41 44 45 52 20 46 4f 4f 54 45 52 20 41 44 44 52 45 53 53 20 50 20 48 52 20 50 52 45 20 42 4c 4f 43 4b 51 55 4f 54 45 20 4f 4c 20 55 4c 20 4c 48 20 4c 49 20 44 4c 20 44 54 20 44 44 20 46 49 47 55 52 45 20 46 49 47 43 41 50 54 49 4f 4e 20 4d 41 49 4e 20 44 49 56 20 45 4d 20 53 54 Data Ascii: b)return c;return-1};var Ab={},Bb=function(a){this.D=a};Bb.prototype.toString=function(){return this.D.toString()};"ARTICLE SECTION NAV ASIDE H1 H2 H3 H4 H5 H6 HEADER FOOTER ADDRESS P HR PRE BLOCKQUOTE OL UL LH LI DL DT DD FIGURE FIGCAPTION MAIN DIV EM ST
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 65 72 74 79 28 64 29 7c 7c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 64 2c 65 29 7d 29 7d 0a 76 61 72 20 4c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 46 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 4b 62 28 66 2c 64 2c 49 62 29 3b 66 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 66 2e 61 73 79 6e 63 3d 64 26 26 21 31 3d 3d 3d 64 2e 61 73 79 6e 63 3f 21 31 3a 21 30 3b 76 61 72 20 68 2c 6c 3d 43 62 28 61 29 2c 6d 3d 71 62 28 29 2c 6e 3d 6d 3f 6d 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 6c 29 3a 6c 3b 68 3d 6e 65 77 20 72 62 28 6e 2c 73 62 29 3b 66 2e 73 72 63 3d 68 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 62 26 26 68 2e 63 6f 6e 73 74 72 75 63 74 6f Data Ascii: erty(d)\|\|a.setAttribute(d,e)})}var Lb=function(a,b,c,d,e){var f=F.createElement("script");Kb(f,d,Ib);f.type="text/javascript";f.async=d&&!1===d.async?!1:!0;var h,l=Cb(a),m=qb(),n=m?m.createScriptURL(l):l;h=new rb(n,sb);f.src=h instanceof rb&&h.constructo
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 28 29 7b 65 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 63 26 26 63 28 29 7d 3b 65 2e 73 72 63 3d 61 7d 2c 50 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 21 64 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 2c 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3a 61 2e 64 65 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 2c 49 Data Ascii: (){e.onerror=null;c&&c()};e.src=a},Pb=function(a,b,c,d){a.addEventListener?a.addEventListener(b,c,!!d):a.attachEvent&&a.attachEvent("on"+b,c)},Qb=function(a,b,c){a.removeEventListener?a.removeEventListener(b,c,!1):a.detachEvent&&a.detachEvent("on"+b,c)},I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49994	192.178.50.68	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	959	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3&co=aHR0cHM6Ly8xbW92aWVzaGQuY2M6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=7fmypvln0sab HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:45 UTC	845	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Security-Policy: script-src 'report-sample' 'nonce-T0o1GYOeIpAJqoA2qzvFPA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Date: Fri, 26 Apr 2024 18:32:45 GMT Expires: Fri, 26 Apr 2024 18:32:45 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:32:45 UTC	410	IN	Data Raw: 31 63 36 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 Data Ascii: 1c6d<!DOCTYPE HTML><html dir="ltr"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><style type="text/css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-st
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 Data Ascii: U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unic
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 Data Ascii: ; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 Data Ascii: t-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c Data Ascii: (//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212,
2024-04-26 18:32:45 UTC	1255	IN	Data Raw: 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 Data Ascii: -range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.wof
2024-04-26 18:32:45 UTC	600	IN	Data Raw: 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 54 30 6f 31 47 59 4f 65 49 70 41 4a 71 6f 41 32 71 7a 76 46 50 41 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 73 63 72 69 70 Data Ascii: ecaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js" nonce="T0o1GYOeIpAJqoA2qzvFPA"> </script></head><body><scrip
2024-04-26 18:32:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49987	69.194.242.12	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	694	OUT	GET /r/dd/id/L21rdC8xOTcxL2NpZC8xNzQ5ODczMjc1L3QvMg/url/https://i.liadm.com/s/53233?bidder_id=183658&bidder_uuid=$!%7BTURN_UUID%7D HTTP/1.1 Host: d.turn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:45 UTC	499	IN	HTTP/1.1 302 p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV" cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 pragma: no-cache set-cookie: uid=4599182454307579907; Domain=.turn.com; Expires=Wed, 23-Oct-2024 18:32:45 GMT; Path=/; Secure; SameSite=None location: https://i.liadm.com/s/53233?bidder_id=183658&bidder_uuid=4599182454307579907 content-length: 0 date: Fri, 26 Apr 2024 18:32:45 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49996	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	698	OUT	GET /xxrz/250x400/793/81/37/81372ed9dcce1a4c6528e51235ff77f4/81372ed9dcce1a4c6528e51235ff77f4.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:45 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:45 GMT Content-Type: image/jpeg Content-Length: 74261 Connection: close Last-Modified: Wed, 24 Apr 2024 03:49:08 GMT Vary: Accept-Encoding ETag: W/"66288134-f834" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6943 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zz703Rfgpis%2FsesC0isqaMmwiWQnPMTGBqCA6bt%2FPgn8F1oI%2B6vFiUKDtpY27HVI2iKAwh9ZsUBHLgCmivxen%2F6ZC83Q0th4sGTojo6gWhhFZcBppDlRzmGr9yuH6CY%2FyUrK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8450cd89ab4-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:45 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: d0 e8 e7 0b 3a a7 59 99 66 c0 51 be 5d 73 74 5f 55 63 68 02 8f cb 7e 23 a8 b0 70 f8 8e b7 fc 70 fa 9e b5 69 77 c3 de e7 37 a2 17 ac 74 dd 02 83 a4 98 ff 00 6d 8e 31 af 63 a1 58 f7 7c 65 ad cb 3e d4 33 da 13 28 a5 30 29 84 88 1d 28 74 c0 ea 0c 4c 04 fb 9b 72 fd 7c 60 4c 2e c1 47 64 46 6a e9 27 29 27 b1 66 7a af 33 41 f3 c1 fc e9 3f c5 5f 0e d7 52 64 b3 2e 2d 16 4b b6 34 e3 7f 9d 36 b4 a6 4f 8f 9f 39 de 1d 16 41 93 05 56 55 13 88 ad 5d 43 bd f9 02 bd 5a cc c5 95 ee 4f 36 ec d5 5a e6 5e 7b ab ed 72 c8 de ca 4e 3a b6 15 17 b1 3a 45 9a a4 90 45 c5 28 2d 1b 2d 0b e7 a3 c2 51 63 99 a9 ea b5 a7 e4 1f 5f 66 d3 bd f1 3e d3 15 3d d9 ee dd e5 68 df bd 53 0a 4c a9 73 94 49 4c be 2c ce 34 9f cc e9 5c 6f 26 83 8c 9f 9d 3d 06 a1 17 95 8d 19 3d c9 13 a5 13 11 4a 4c d4 6b Data Ascii: :YfQ]st_Uch~#ppiw7tm1cX\|e>3(0)(tLr\|`L.GdFj')'fz3A?_Rd.-K46O9AVU]CZO6Z^{rN::EE(--Qc_f>=hSLsIL,4\o&==JLk
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 03 21 6c d1 b8 b1 94 ac 2c 94 52 11 55 db 4f df 9b 98 59 dc e7 c2 24 30 8e 8d 21 bd a4 4c ad 27 14 d2 1f 21 46 b2 5b de e0 20 ee ff 00 9e cc 07 08 20 c9 95 05 77 32 0d 91 21 1d 40 49 fc 99 30 aa 1d cd 3e 2b 64 67 08 97 16 ca 30 0d 0f 35 1c 87 6b 9b fa d9 7d 9a 82 40 01 8f d4 2c ad b8 78 86 80 79 d6 31 3a 88 f5 3a 76 8b 3d c1 e0 d6 c5 db dc 7c fd 09 0b ea d7 26 1e ee 64 c0 bd 0c 2c c5 31 87 ee b5 3c 2e d3 2e eb b1 d1 cc b4 cf e7 b6 5f 91 2e 65 8d 9e 7d 47 c7 2f d7 91 e0 b2 c7 51 68 de 2e 5f 9d 1b 6d 3d 28 fa 0e 8a 5a 4d 1f ed 30 d4 f4 a5 25 b9 0d 61 8f 45 ec 4d 39 aa 01 3a c5 b9 bc 65 67 76 f1 a6 e2 7e 95 87 85 74 19 7e 37 14 7b d7 61 b2 da 9e c8 71 8e 40 f9 66 f8 67 4a 3a af ce 3b a4 08 e7 a5 fc b2 e8 89 16 98 eb ac e7 5d 4b a2 d9 58 88 02 3f c8 6c 3d 39 Data Ascii: !l,RUOY$0!L'!F[ w2!@I0>+dg05k}@,xy1::v=\|&d,1<.._.e}G/Qh._m=(ZM0%aEM9:egv~t~7{aq@fgJ:;]KX?l=9
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: b1 8d aa 4f 3d 64 f0 5e 2d 84 dd 14 f0 64 eb 1c 71 fc 75 ce b9 c6 71 9d 73 ae 74 c5 66 75 c8 96 ed 3b 64 99 1c 9b 9c a6 12 f2 59 1d ca b7 a3 00 9d 9d d0 53 6d ac 64 43 8a fd 76 58 8b 93 62 ac 95 b7 ae 72 ad 13 fd 6c 8e 6e 5a 9f b6 77 ea 9e bf 6a 4d d7 d9 2e 39 ab 5b 0c f4 c6 62 1b 5d 98 37 d7 52 6b f2 db 19 7e d7 8c e3 38 ce b9 d3 3a e7 5c e9 9e bc f5 e4 31 af 59 32 95 80 d8 1a ab 29 ce ed 8e e4 88 34 41 45 d4 ec 1d 3a b6 f2 07 73 54 94 a4 94 15 18 b1 d1 9b c1 20 fc 19 51 48 e1 a8 4b f6 bc 11 50 08 8a 05 60 f2 d5 e5 21 82 8f 63 e8 e7 0c e1 f1 c0 6f e2 6b 1c 7f 1c 67 19 c6 22 67 4c e9 9d 33 d7 9e bc aa 9c de b2 10 67 16 d9 0c b1 6c 1a ff 00 df 8e 88 35 e4 5a bd 93 ea 26 45 60 44 d9 f5 cb f9 37 2b 15 14 99 2d de b0 c6 ea e7 b7 f5 c5 2a 33 23 bd ae 47 aa 37 Data Ascii: O=d^-dquqstfu;dYSmdCvXbrlnZwjM.9[b]7Rk~8:\1Y2)4AE:sT QHKP`!cokg"gL3gl5Z&E`D7+-*3#G7
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: df 90 a1 7c b9 26 a6 7d 39 5a e2 90 9a 9b d3 fe 30 4f 24 6a 82 cd 98 cd 2e a2 39 25 5c 94 44 56 f8 d5 79 d2 85 21 a8 f7 bb ae b0 09 c3 e1 4e 33 8f 5e 44 4a a8 55 f5 80 7e dd 6a 6b 2b 12 27 38 3e 78 e7 18 25 76 28 d7 8f 03 44 a4 1e d9 e5 2f 35 ca d7 2d 3c 65 e7 3b 1b ed 83 fc 85 0d 14 db 6a 7a f7 da 4c f1 0d 54 9a dd cb 74 75 61 ec e7 8e 93 67 a6 06 b1 02 29 c7 ad 46 7b 69 1e 28 16 fb 64 d1 4a b4 80 ef 6b ee 69 18 c8 f4 32 61 b6 82 6d 2b 0d 1a de 4c 67 e9 82 01 57 25 a3 c6 9e 2d dc a1 44 ad 7e b1 a9 48 93 ba ed f5 e3 ae 8d 21 ed 48 13 95 33 5e 9f 0f f1 74 b3 5a 39 1b 5d 4c 39 ad 98 07 c6 78 bf d7 d6 2a 37 08 8d eb fe 91 55 73 8c 6b 51 ce f1 c5 1d c3 ae 6b 68 a1 50 8e 4d fc 45 1c 9b f0 c5 5f f9 af c6 1c 0f 2c 3a 58 3f 2c c9 24 84 7a d3 b5 b0 80 29 12 98 93 Data Ascii: \|&}9Z0O$j.9%\DVy!N3^DJU~jk+'8>x%v(D/5-<e;jzLTtuag)F{i(dJki2am+LgW%-D~H!H3^tZ9]L9x*7UskQkhPME_,:X?,$z)
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: ae 4b cd 55 4f 26 5d b8 63 0e 34 69 bc b9 0a f5 e7 bb f2 41 54 23 31 d1 e7 97 29 cf 7f b0 a7 50 a3 85 8a 3f 63 9e c7 61 84 d2 a1 47 c8 c8 26 7b fa 89 ab 1c 4a e4 0a b0 48 c9 a4 31 07 d9 16 2c 96 7c 88 f6 2a e0 8e b0 04 c9 96 23 21 92 1b 4f 2a 6c a8 f1 d6 5c d1 bd 96 c4 71 52 a6 59 18 db 09 a6 6c 79 65 8d 25 d6 da e3 6d 5f a5 e8 4d a1 d6 bb 64 8e 38 96 34 e3 b6 59 ca 74 99 47 52 b8 c6 3a 15 ac e1 8e 2c f6 39 a8 f2 34 44 2b 71 cc 7a e2 23 42 19 3d 44 74 7c 37 b0 5c 23 18 ae 2a 82 43 7a 82 6a 10 26 3b 82 c8 a6 e9 8f 9a 20 4e e1 49 81 b2 8e 39 44 99 d3 0e e6 a9 53 90 d7 d5 10 90 05 f2 48 eb 21 19 19 9a f4 35 b9 2d ce c5 da 3b e4 fd 1a 4f d9 f9 7a ab 57 96 39 3a 9d 7a c6 01 d7 82 35 51 91 41 cc 8f 6b ba a7 1f 1d 13 bc db 01 14 2c 90 13 19 e1 fd a4 38 9c 3e 23 Data Ascii: KUO&]c4iAT#1)P?caG&{JH1,\|#!Ol\qRYlye%m_Md84YtGR:,94D+qz#B=Dt\|7\#*Czj&; NI9DSH!5-;OzW9:z5QAk,8>#
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 57 aa a0 fe d6 13 5c 38 3d 73 9e ab d9 38 7b ba 22 3d 57 38 5c 6b 7e db f5 88 e6 35 ad 27 6c 77 ec 9f 1d 72 54 74 34 e7 41 1b 59 36 37 ad e4 8a df 8a c4 f5 39 a8 8b 9c 21 56 3b 54 4e 62 30 f1 db 09 83 7c 68 bd 9d 53 5c ac 7c 0a e6 23 2e a3 08 56 d3 82 90 a7 af d2 e7 d6 47 fb 20 04 9f 1c ee e3 0b 23 aa 8a 42 b9 1c de ed ff 00 e3 74 76 29 b0 91 7d 6c 47 35 55 5d f6 37 63 51 ab 9d 1b 9f ff c4 00 42 11 00 02 01 03 02 04 03 05 05 06 04 03 09 00 00 00 01 02 03 00 04 11 12 21 05 13 31 41 22 51 61 06 32 71 81 a1 14 42 91 b1 f0 10 23 52 62 c1 e1 15 43 d1 f1 07 72 82 24 25 33 54 73 74 93 b3 d2 ff da 00 08 01 03 01 01 3f 01 54 fa d7 71 e6 4e d4 a8 23 8b af 88 fe 63 ad 67 7f 97 e7 4a 06 e5 bd d5 52 4f e4 3e b4 bd 35 1d a8 46 cf ee 82 c7 c8 0c d2 59 dc bf f9 4c 3e 54 Data Ascii: W\8=s8{"=W8\k~5'lwrTt4AY679!V;TNb0\|hS\\|#.VG #Btv)}lG5U]7cQB!1A"Qa2qB#RbCr$%3Tst?TqN#cgJRO>5FYL>T
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 8a 6b 2b cf fc a5 c7 ff 00 0c 9f fe 69 5a 44 6e e0 e7 7f 88 ae 1e d7 10 e9 32 2b a2 95 ce a7 52 a3 4e db ae ac 64 57 18 47 96 f1 a5 d1 2a 07 03 4e b5 29 ac 7f 12 ea dc 8f 5c 63 ca a2 8e 49 b6 8d 1d d8 75 54 52 e4 7a e1 7b 7a f4 a8 63 91 c1 e5 c7 23 e9 19 6d 28 4e 90 3b 9c 67 03 d4 ed 5a bc aa 4b 3b 96 8c 48 b6 f3 94 c6 a0 c2 19 0a 91 e6 0e 31 8a 48 9c 1d d7 14 22 3e bf ac 51 3e 55 ec 0d 91 37 17 dc 65 e2 69 93 86 db 49 c9 8d 54 bb 4b 73 2a 9c 2a 28 07 53 72 c3 0e 9b 19 05 7b 7f 64 ee 78 67 1b 48 5e 1f b7 5b 24 57 51 b2 95 78 ee 11 35 28 65 38 39 d3 98 cf fe 9d 7b 3c cf fe 35 c2 87 6f b7 da f6 cf f9 c9 5c 43 ed 10 af 1d 9f 89 cf 05 c7 07 fb 3a a5 b5 9a 47 cc 96 29 8c 51 83 cc d3 18 2a 59 98 10 18 b6 90 c1 ce 9c 54 36 fc 45 35 fd 9b 9b cb e5 fb a3 f7 9b 9c Data Ascii: k+iZDn2+RNdWGN)\cIuTRz{zc#m(N;gZK;H1H">Q>U7eiITKs(Sr{dxgH^[$WQx5(e89{<5o\C:G)QYT6E5
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: b3 86 01 79 67 18 c8 23 ae 76 1e 95 37 03 b5 9f 58 55 d2 48 38 41 93 bf 7f 03 6b df d4 3e f5 71 ec 8f 83 28 a4 11 bf 84 91 9f 8a 37 f4 35 7d 67 2d 8c 9c b9 07 5d d4 ff 00 10 a7 19 cf a7 f5 ad 87 5a 96 45 45 11 46 70 8a 02 0e e4 e7 1b d7 08 bd b6 e1 c2 e7 9e 5b f7 f6 fa 13 42 ea 3a ba ef bf e2 6a 67 27 7f 3a ff 00 15 8a 1f 67 ee 38 7a 3c d1 de 49 72 b2 c6 d1 e5 57 4e a8 9b ff 00 10 10 54 f8 2a 5e 37 6f 37 b3 a9 c2 e5 79 da f9 6f 79 cc d2 82 ca 63 d6 df e6 64 9f bd 90 31 f3 ab 09 56 de fe de 57 c9 58 2e 61 95 88 f1 1d 31 c8 8c 40 5f 3c 7a d7 15 e2 dc 2b 88 24 b2 43 71 c4 39 cc 23 09 11 ca db 12 ba 77 31 8e fb 67 6e fb d2 48 ba 46 d9 c9 c0 1e 5f ac d3 2e ae bf 8f 96 76 a6 71 08 6d b3 b7 cb 75 03 a8 ae 1f 2b 17 66 39 0a 3a 1c e3 a6 06 3f db 7a 5b 94 8c e4 30 Data Ascii: yg#v7XUH8Ak>q(75}g-]ZEEFp[B:jg':g8z<IrWNT*^7o7yoycd1VWX.a1@_<z+$Cq9#w1gnHF_.vqmu+f9:?z[0
2024-04-26 18:32:45 UTC	1369	IN	Data Raw: 1d c0 e8 72 37 ef 4d 26 99 25 58 89 08 c7 d7 1f 2d cd 73 da 33 af de 27 08 47 9f 4c 6d e9 83 f8 d2 dc a0 d4 ab 83 98 b4 8f e5 7c e7 1f 0c 12 07 a9 a9 e5 93 52 85 73 84 00 0c 1c 60 f5 6f a9 a6 66 ea 7f a5 13 9a 5a 23 04 d4 91 90 58 63 7d fe 06 84 72 2b ea c6 07 97 95 2b 69 a0 e1 c7 41 92 31 5a 3d dc f5 5e 87 f0 ff 00 4a 82 3d 47 a6 29 d9 2d e0 2f fc 28 4f 5c 1f 0e e4 8a e2 5c 5a 4b 86 d2 92 48 c8 47 f1 91 a4 f9 0c 63 e3 bf 7c ef 5a fd 3e b4 73 a4 fc 45 6f d7 a5 64 9e b4 46 46 db 8f 3a d1 9a c6 00 fd 79 51 5d f3 4e 3c 5f 3c 7d 29 d1 41 3f 03 fd 29 3a 52 f5 a4 00 ac 64 8d fa 55 9a 8d b6 fd 6d 5c 51 b1 1c 23 62 0b a8 20 f7 07 c2 47 cc 13 52 ed 24 80 6c 03 b0 1f 8d 2d 7f 96 df f3 a7 e5 4c 48 c5 31 ca 64 f5 3f da a3 63 a3 f5 e5 4a 4e f4 a7 22 96 bf ff c4 00 43 Data Ascii: r7M&%X-s3'GLm\|Rs`ofZ#Xc}r++iA1Z=^J=G)-/(O\\ZKHGc\|Z>sEodFF:yQ]N<_<})A?):RdUm\Q#b GR$l-LH1d?cJN"C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49995	3.232.64.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	689	OUT	GET /pixel?pid=m4omg6v&t=gif&call=2&gdpr=0&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18f1bae1d9d-42c70000010a45f6; SERVERID=17910~DM
2024-04-26 18:32:45 UTC	587	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=17910~DM; Domain=eyeota.net; Path=/; Expires=Fri, 26 Apr 2024 18:42:45 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm&google_sc&google_hm=MnhVdVR6TWdfcnJ0dDZvU2lPVmg4SHVMMkQ3blJEUFlXWUc4SVY3M2RtVjg&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=m4omg6v Content-Length: 0 Date: Fri, 26 Apr 2024 18:32:45 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49997	18.212.140.196	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	739	OUT	GET /v1/s/sharethis?puid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdprcs=?&rdurl=http%3A%2F%2Fsync.sharethis.com%2Fcarbon%3Fuid%3D%7B%7Bccuid%7D%7D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: eus-api.ccgateway.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:45 UTC	83	IN	HTTP/1.1 204 No Content date: Fri, 26 Apr 2024 18:32:45 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50000	35.169.4.189	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	635	OUT	GET /map/st/?pid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: map.go.affec.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:45 UTC	941	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 18:32:45 GMT Content-Type: text/html; charset=utf-8 Content-Length: 331 Connection: close Location: https://match.360yield.com/match?dsp_callback=1&publisher_dsp_id=440&external_user_id=662bf34d3757330001701a4b&r=https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fim%2F%7BPUB_USER_ID%7D%3Fch%3D662bf34d3757330001701a4c%26chc%3Dst%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= Set-Cookie: ck=662bf34d3757330001701a4b; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:32:45 GMT; Secure; SameSite=None Set-Cookie: oo=1; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:32:45 GMT; Secure; SameSite=None Set-Cookie: pt=eyJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM2NX0sInYiOjB9\|1714156365\|799bbebaaf25d06d1571516dbd7e59d791c8c427; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:32:45 GMT; Secure; SameSite=None
2024-04-26 18:32:45 UTC	331	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 33 36 30 79 69 65 6c 64 2e 63 6f 6d 2f 6d 61 74 63 68 3f 64 73 70 5f 63 61 6c 6c 62 61 63 6b 3d 31 26 61 6d 70 3b 70 75 62 6c 69 73 68 65 72 5f 64 73 70 5f 69 64 3d 34 34 30 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 36 36 32 62 66 33 34 64 33 37 35 37 33 33 30 30 30 31 37 30 31 61 34 62 26 61 6d 70 3b 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 70 2e 67 6f 2e 61 66 66 65 63 2e 74 76 25 32 46 6d 61 70 25 32 46 69 6d 25 32 46 25 37 42 50 55 42 5f 55 53 45 52 5f 49 44 25 37 44 25 33 46 63 68 25 33 44 36 36 32 62 66 33 34 64 33 37 35 37 33 33 30 30 30 31 37 30 31 61 34 63 25 32 36 63 68 63 25 33 44 73 74 25 32 36 72 65 64 69 72 65 63 74 5f 75 72 6c 25 33 44 Data Ascii: <a href="https://match.360yield.com/match?dsp_callback=1&publisher_dsp_id=440&external_user_id=662bf34d3757330001701a4b&r=https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fim%2F%7BPUB_USER_ID%7D%3Fch%3D662bf34d3757330001701a4c%26chc%3Dst%26redirect_url%3D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49999	18.230.167.103	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	741	OUT	GET /ibs:dpid=600901&dpuuid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.sharethis.com%2Fadobe%3Fuid%3D%24%7BDD_UUID%7D%26_rand%3D1714156364519 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:46 UTC	890	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:46 GMT Content-Length: 0 Connection: close X-TID: cF3SdMr3TU8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=600901&dpuuid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.sharethis.com%2Fadobe%3Fuid%3D%24%7BDD_UUID%7D%26_rand%3D1714156364519 DCS: dcs-prod-sae-2-v059-0e0ccded2.edge-sae.demdex.com 0 ms set-cookie: demdex=06291327801249806183443003251739176557; Max-Age=15552000; Expires=Wed, 23 Oct 2024 18:32:46 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50002	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	505	OUT	GET /panorama?uid=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1&stid=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:46 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:46 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50003	3.89.179.162	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	701	OUT	GET /s/53233?bidder_id=183658&bidder_uuid=4599182454307579907 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CggKBgjSARDjFw; lidid=33b4c238-2b6d-4e4d-ad3b-afd3033d027c
2024-04-26 18:32:46 UTC	566	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 18:32:46 GMT Content-Length: 0 Connection: close Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=liveintent&ttd_tpi=1&gdpr=0 Set-Cookie: _li_ss=Cg8KBgjSARDjFwoFCAoQ4xc; Max-Age=2592000; Expires=Sun, 26 May 2024 18:32:46 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=33b4c238-2b6d-4e4d-ad3b-afd3033d027c; Max-Age=63072000; Expires=Sun, 26 Apr 2026 18:32:46 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50001	69.169.85.7	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	634	OUT	GET /image.sbmx?go=304847&pid=583&xid=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: ib.mookie1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:46 UTC	72	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 42 69 67 49 50 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.0 200 OKServer: BigIPConnection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50004	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	596	OUT	GET /media/fonts/EuclidSquare/EuclidSquare-Semibold.woff2 HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bitpanda.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:46 UTC	1068	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:46 GMT Content-Type: application/octet-stream Content-Length: 39620 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT, POST Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Mon, 23 Aug 2021 11:18:02 GMT ETag: "1162c28db253e6ff4b66c21bfeface94" Cache-Control: public, max-age=36000 x-amz-version-id: mg5u89wHIXuF4esYxbF4DBNk2DuPkujW X-Cache: Hit from cloudfront Via: 1.1 221c16f6368b9673111421e368023144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: aWEXOPJ6fhuZr4_ODo_-F83iV0tbpB02rzlErEfYRwpsQpoyYLG-Zw== Age: 20491 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:46 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: _cfuvid=r8bcQgIotS6gOmfGbjYj12U6iML3TRB64VOZKAxi3Rs-1714156366114-0.0.1.1-604800000; path=/; domain=.bitpanda.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a8481d7102e4-MIA
2024-04-26 18:32:46 UTC	301	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 9a c4 00 13 00 00 00 02 31 a0 00 00 9a 58 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 81 08 3f 46 46 54 4d 1c 1a 36 1b 83 d3 00 1c ad 2e 06 60 00 88 76 08 2a 09 82 73 11 14 0a 83 f0 10 83 b1 4f 0b 8b 04 00 01 36 02 24 03 96 04 04 20 05 8e 3e 07 af 2c 0c 81 49 5b 8e 0b 72 07 75 c3 a4 ca 26 a8 f8 bb 4d 04 58 24 cc bf be 74 af 55 c2 6e 99 d1 9b 95 68 1c d7 ee 98 03 cc 4d fd 18 f5 dc 36 a8 a1 d3 4e e8 c7 64 ff ff ff ff 4b 92 86 8c 65 72 d5 dc b5 45 b4 00 28 8a 2a f3 b7 6d 10 b9 e0 70 0a 29 07 72 c9 a5 96 4e 15 a7 4e 91 d5 8b cf e1 41 97 2e 9a ce 0e 0d d1 28 34 fa 04 85 e6 99 c3 74 59 0a b7 22 dc f2 de cd a5 38 6b 41 f1 5a b9 b9 39 15 53 7d eb 71 85 e7 7c 5b e9 d6 47 b6 ee ee 74 17 22 1c 85 1e 19 57 Data Ascii: wOF21X?FFTM6.`vsO6$ >,I[ru&MX$tUnhM6NdKerE(mp)rNNA.(4tY"8kAZ9S}q\|[Gt"W
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: bb d6 0e 35 59 32 77 99 52 f2 1d db af 57 a3 e9 3b 8e 63 87 19 e7 e4 26 2e 14 4e 7d a2 cc 7d c3 70 e3 4f fa 87 4f 24 99 3a c0 6a 6a ff 88 d7 a5 7e 4d a5 4c 3f 62 3f 26 35 3c 9e e6 6f 91 0c 99 12 ed 4b 5e 1f a2 29 f7 7d 6e 94 cd e9 75 a6 20 15 7c 9d 73 b9 a0 d0 18 08 c8 ca c5 69 47 a1 8b 21 3b 92 fb e4 13 74 a0 1b b5 b4 3f f4 83 5d 7f 59 f6 75 72 fb 9f a8 c3 7f 84 74 a1 4a 72 dc 8d 33 22 69 c2 96 3a 43 96 a0 a3 19 d0 a8 50 a6 5b 9a 8e b1 52 35 3a 59 ae e4 f9 60 4f 01 71 dc bc 00 43 94 d6 a6 58 92 ad 1c e9 ab 3c 7f cc 13 e4 5f f1 7f aa fa ce 82 f3 20 7c 49 31 ac 08 74 46 64 df a1 80 ed 9f 7f 37 eb cf b9 89 57 92 92 10 20 0d 34 04 2d 93 0a d4 64 19 da 52 83 a6 22 3a 02 b3 ed ba 7f 3d ff 53 d7 8e 78 57 6d 88 b6 79 ff 80 d1 4b 9b 61 15 a2 0b a3 89 d2 5e 2b 56 Data Ascii: 5Y2wRW;c&.N}}pOO$:jj~ML?b?&5<oK^)}nu \|siG!;t?]YurtJr3"i:CP[R5:Y`OqCX<_ \|I1tFd7W 4-dR":=SxWmyKa^+V
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 91 04 99 92 c9 3c a2 18 73 18 63 6e e8 dc b1 be 27 fd ff ff 5d e9 7d bf ef 76 0d 46 1d 35 6a 44 45 45 45 44 d5 a8 d9 0b bf ff df 4c d9 7d ef df 73 ce bd 77 1d 6b ad aa 5a a3 aa 46 c5 88 88 88 88 31 ea 5e 63 5a b3 d8 ae 75 34 89 9d 45 6a 64 45 e3 b7 ba 3f b6 ff 3f be c8 f8 61 41 cb a8 6d 78 fd f1 37 c3 c1 5c 4f bc 62 68 13 48 20 f2 14 ae df 3b 6c d3 86 ca 54 a8 04 d5 60 12 81 ed f1 b1 1c 7c 3f 37 b0 5c 31 58 0c 49 44 64 ce 31 18 5a e2 31 df be f0 9f db 78 95 bf cb dc 19 60 4e 08 aa d5 31 b3 21 11 73 02 6c 01 8b 72 e4 c1 f7 db 2a ee 17 4f 17 80 be f9 2d 73 93 a0 df f7 f6 fd 53 50 ff c0 fd ad 93 f0 9c d7 cd 77 01 16 b1 00 41 f0 4a e1 2c 86 c0 62 a6 a6 f9 9d cf 9f 3f 01 be f9 5a 7d 58 ac df 1b 9f b1 3e cd 7b c0 15 81 62 60 b5 60 b5 8b 43 aa 57 53 58 b3 12 90 Data Ascii: <scn']}vF5jDEEEDL}swkZF1^cZu4EjdE??aAmx7\ObhH ;lT`\|?7\1XIDd1Z1x`N1!slr*O-sSPwAJ,b?Z}X>{b``CWSX
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 04 3d 87 91 c9 ca 94 4d 72 47 b2 7c d2 24 c6 64 06 1c 6c 15 98 46 0a a3 c4 34 16 20 0b 85 0a 41 61 33 f1 64 17 bd c3 df 9d 4f 25 21 53 b3 ad db 97 88 ef 90 48 54 6f e1 91 bc 13 6e 2d 96 4c 03 e8 28 d7 85 c8 92 dd 41 96 ab 27 4f f1 6a 63 73 f4 76 1d b7 1b 8c 29 28 9e 98 53 9b 21 37 e3 e0 42 da 0d aa 99 1f c8 72 fc 1a ce e0 3b 23 67 51 52 0c 1e 48 fd 35 3c e2 b9 45 b9 92 cd 61 1a 05 d6 b0 43 06 37 53 23 d0 6d ba bf 28 e6 d4 a8 bb 78 b2 07 48 67 a8 96 ea 57 69 48 05 15 ee 8a 71 00 2d 9b 1e c9 8e 04 74 23 97 56 37 45 8b e2 c5 80 f1 ec 54 ab 41 d3 f9 30 fc 88 e0 8b 62 ae 50 be d2 ab a9 69 b4 18 7a b4 44 10 bb 96 98 d9 d2 ad 64 02 ad 7f 29 d9 93 55 44 fe 24 f2 64 32 4c 59 33 47 07 97 0c e5 6a f2 a2 60 14 b1 4a 7d 65 8a 8a 30 47 97 9a 56 75 51 97 bb 5c ec 30 ae Data Ascii: =MrG\|$dlF4 Aa3dO%!SHTon-L(A'Ojcsv)(S!7Br;#gQRH5<EaC7S#m(xHgWiHq-t#V7ETA0bPizDd)UD$d2LY3Gj`J}e0GVuQ\0
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 81 2f 61 7f 10 c1 99 d5 1c be 11 b5 25 d8 0b 16 25 52 19 b9 59 43 66 25 ce 70 f6 39 86 39 85 f9 57 8e b8 8a 65 17 1e a2 85 a1 97 ce 93 75 5a fc 6a 7c 6e 9b 99 21 5d c0 60 ec 48 01 49 90 a5 63 7c c0 b1 b8 05 41 34 ff dc 50 11 69 a9 1b 56 fd 2c ad 5f 5f d1 61 32 82 93 ad 1a f4 6e b7 3e 21 79 0d 08 2a df d4 43 71 8e 67 78 8e 17 78 c9 7a 65 8d d9 29 12 19 46 0c 94 c6 8a 2f 78 33 ad 0b 0e 1b 16 f7 e8 e9 28 1d 76 7b 0c 63 8e 48 71 c5 13 b1 32 bb 2c 23 fa f0 86 f1 72 ca e5 71 46 f0 1c bc 13 2a 14 54 78 37 01 9f 20 e6 93 20 9f 92 e8 d3 6c 7c 93 80 43 bc 73 78 cf e0 63 65 2a bc 8d d6 4d c5 b1 d1 86 a9 b8 36 86 02 15 2a d1 34 8c 41 a2 41 a5 54 65 f2 2c 21 69 31 7d 38 c3 38 39 8a bc 52 23 38 0e ce aa 6a ef c6 ef 13 28 3e c5 da 37 f1 3b c4 39 87 f3 0c 2e 56 9a 82 37 Data Ascii: /a%%RYCf%p99WeuZj\|n!]`HIc\|A4PiV,__a2n>!yCqgxxze)F/x3(v{cHq2,#rqFTx7 l\|CsxceM64AATe,!i1}889R#8j(>7;9.V7
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 55 ac 95 0b e5 4f 15 aa 2f 8a 53 f4 36 5a 2a 66 79 8f c9 16 57 d5 dc 75 d6 2c c3 d9 92 b9 e2 41 f6 fc 27 e6 e0 04 3f 20 28 25 89 f2 19 19 7e 9c 88 95 10 a6 9d 4b 05 bb 5f ef 7e 43 32 cb 78 b6 70 8e 68 90 3f 1f 5c 80 85 4c b7 c1 30 c8 2c ca 88 16 4c 2b ec 31 33 e4 96 b7 f5 32 89 27 d5 b1 e8 14 83 e8 0c bc 5e d5 56 80 13 29 0a 22 67 79 71 7b ef 44 49 48 15 4f 55 c4 ed 1b ae 92 32 84 99 61 2b f1 67 01 b3 c1 39 dc b9 bc 65 03 2f f5 91 8f 4a 79 83 c9 c7 20 b8 00 cb e2 1b a3 9d ee ea 3a 4e 9c 88 4a d1 ab 20 9d 85 d3 07 27 b8 83 4a 3b 1d de 6e e5 71 2f 25 06 c6 a5 e8 15 68 98 1b c3 8b 17 25 b0 60 cb a6 3e f3 bb 2f b9 30 de 4b 4c f4 c4 c5 3b dc 16 de dc 1f ae a6 6f e8 e5 65 e0 8c 80 1b 69 23 cb a8 af 5d d1 78 e3 15 33 10 17 48 14 2f b6 f8 f2 de 03 db 8c e7 8c b5 Data Ascii: UO/S6Z*fyWu,A'? (%~K_~C2xph?\L0,L+132'^V)"gyq{DIHOU2a+g9e/Jy :NJ 'J;nq/%h%`>/0KL;oei#]x3H/
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 75 5a dd bd 1a 7e 53 a6 56 67 1b d1 21 b9 ba a9 bd 33 9a d1 c9 7e c3 9a 8d d4 9a d8 4c e7 35 28 bf 4c 4f 5a e4 1a 26 e5 d0 82 68 01 04 04 03 61 40 58 5b f7 ef bd 2b 79 fb 43 cd 3e d1 87 af 84 a9 93 c9 93 00 66 e6 4f 2d 31 52 dd e8 c0 92 2f 67 57 1b 62 47 b1 9d f6 2a 19 08 59 6c f4 62 0a 49 d4 ba 16 61 e1 48 4e 23 a8 04 cb 45 29 bd 6f 01 86 0e 6e 45 d4 ad 8c c2 dc d0 62 10 d0 11 2f 01 05 a3 29 c8 fa 85 0b a5 06 ca e6 2d da 6f 06 a8 a3 5f a7 c4 4a 5c 86 31 89 30 19 0f 0f f9 60 3d 30 16 f2 4e 36 76 74 cd 77 0a 37 a6 f0 b1 e8 71 f5 40 dd 9b d7 17 2b e8 3e 22 fa 8c 87 ba ab 4d 91 f9 d0 fd e8 94 fe f1 db fe 7b e4 7e 59 c3 1d 1f 40 ae 85 0a 03 e0 27 c5 9d 1c cf 43 0c 23 a5 09 b5 10 29 1d 41 5d 1d 7c f5 7c 6b 9b 10 90 11 ad 43 4f 2b b5 07 09 d3 bb 76 46 60 66 29 Data Ascii: uZ~SVg!3~L5(LOZ&ha@X[+yC>fO-1R/gWbG*YlbIaHN#E)onEb/)-o_J\10`=0N6vtw7q@+>"M{~Y@'C#)A]\|\|kCO+vF`f)
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 4e ee ea 96 ac 66 af f5 be 7c 1f 7f 76 dd b7 3d 45 28 54 75 4f a9 5a 77 f3 87 b7 b4 c2 82 36 89 57 5b 9a fa 5a db 68 4e 98 c9 72 fe 11 25 29 e3 82 d4 62 15 0b e5 bf 59 ad 1e 16 bc db f3 3a 7d 97 09 d1 e5 0a 2d 78 41 ce 24 ca ee 97 98 70 31 f6 aa 58 5f 9d 17 f1 db 48 d5 b5 dd c0 f8 18 e0 00 64 4e 0b 1f 28 d5 92 95 8a 12 c8 03 89 3e 72 8f a8 aa 79 e4 17 fc bb 55 12 03 bb a6 2c 66 e3 78 49 55 8c 08 dd 36 e0 5e 1f 0f cb c1 71 bc aa 78 1f f0 64 43 63 c4 22 28 49 55 2f 25 d4 d3 ef b8 c8 10 30 c2 71 5b e9 cb cd 70 ff 18 36 a8 34 a6 e8 ce 53 4f ca 2a 1e 9a 17 40 e9 23 b9 ad f1 3c a9 69 98 4a a3 83 49 c0 95 34 92 99 c0 aa b1 28 07 71 5e de 4f b0 f9 e8 55 d5 7f 1e 6b 03 53 4f b5 39 2f e7 a5 86 77 f6 f2 f4 a7 b5 59 44 f9 86 71 ae a3 e9 ab 11 00 cd 23 39 b6 f1 7b 0b Data Ascii: Nf\|v=E(TuOZw6W[ZhNr%)bY:}-xA$p1X_HdN(>ryU,fxIU6^qxdCc"(IU/%0q[p64SO*@#<iJI4(q^OUkSO9/wYDq#9{
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 57 0a 51 c3 3a 13 29 ec 70 e6 71 71 fe f3 04 30 a2 56 80 0e 40 87 46 ac 89 5c 2b 6a 8a fe 43 e8 45 67 2d 9f 11 9b cf a5 91 c9 64 bc c5 aa 7a 76 62 a1 3b a4 f6 59 78 b3 82 b4 98 9c 24 a4 26 35 92 05 8e 18 d3 6d 6a a9 e3 be 39 20 ac 77 cd 0d a7 12 ba 1e c5 35 9c cf 16 08 19 da 84 b9 64 f0 55 79 f7 f5 4f a4 cb d6 02 d7 b4 91 f4 29 00 c7 3b 83 5b f3 a2 e1 d9 0f 94 e7 bd 57 be 13 51 d6 52 07 a4 e0 14 21 1b 26 4d 16 c3 aa fd 11 4e eb 8d 70 f4 6c aa 0c 2c 21 c5 c8 c3 e4 8f 43 5d 04 33 5a 7d 19 ed 00 5c 53 6a c3 17 30 cb a3 0e 94 d8 28 7c 94 ec 9e 33 c2 a0 b1 95 fd 9b 7e 49 22 53 ad a5 38 ae 22 94 3c 76 c2 15 31 eb 6c 81 a3 82 e9 c9 e1 ae 25 ac 01 2a 64 71 c0 68 8d c4 a6 99 72 03 44 fa 54 d8 c0 42 10 1b c0 8a bf 7f 35 bc 6b 40 17 90 88 5d 4f 4a ac 2d 1c 3f ca b6 Data Ascii: WQ:)pqq0V@F\+jCEg-dzvb;Yx$&5mj9 w5dUyO);[WQR!&MNpl,!C]3Z}\Sj0(\|3~I"S8"<v1l%*dqhrDTB5k@]OJ-?
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 5d 3a d6 02 91 dc 22 cb 20 8f 61 e2 75 99 18 39 6b 16 71 69 33 05 6a 2d 09 77 68 5d 35 0d 4b 27 c6 98 90 20 9d 1a 1d 22 c5 b3 de 55 f6 14 0e a7 e1 dc 25 cf c5 9c dc 47 39 0d d6 bb 00 2b c4 42 2f fe 8c cf 1d 5c c6 90 e3 0c 1b 70 bb 3d f2 64 0d a2 b7 90 e3 b8 ee 66 b6 27 c8 ad d6 55 82 d8 23 4a 26 c3 71 6c 09 df 1d 4c b4 18 35 9a 4a fc c4 59 f8 f0 b0 1e 5c 25 65 13 02 84 18 29 26 f6 c2 86 05 dc 92 ed eb 67 59 c2 46 16 b3 26 fa 55 4a bc f5 e3 8f 30 31 6a 47 09 87 de 2c 22 74 0a e3 10 a9 d5 a1 2b 54 cf 2e 27 24 ba 80 04 1b ce 58 77 c9 bb c2 85 13 25 bc 22 b6 17 51 71 99 2c fc da e1 62 25 73 b9 0d 07 3d af f2 21 72 01 2e 5f 37 9e 7e 56 8c b8 c8 b0 34 1a 96 21 7c 67 46 b4 ee 08 a9 83 cb 46 5a be cb 74 94 b3 39 da 97 59 80 f3 25 07 ea a1 7b 05 47 36 cb 72 28 4a Data Ascii: ]:" au9kqi3j-wh]5K' "U%G9+B/\p=df'U#J&qlL5JY\%e)&gYF&UJ01jG,"t+T.'$Xw%"Qq,b%s=!r._7~V4!\|gFFZt9Y%{G6r(J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	49998	141.94.171.214	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	648	OUT	GET /?partner=138&gdpr=0&gdpr_consent=&mapped=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:46 UTC	438	IN	HTTP/1.1 302 Found set-cookie: cookie=293f006c26e11ff7; Max-Age=31536000; Expires=Sat, 26 Apr 2025 18:32:46 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects147=1; Max-Age=86400; Expires=Sat, 27 Apr 2024 18:32:46 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50006	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:45 UTC	665	OUT	GET /app/v2/js/head.min.js?id=c9d8a7523921951f3dc02c71193d6fe4 HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000
2024-04-26 18:32:46 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:46 GMT Content-Type: text/javascript Content-Length: 114973 Connection: close Last-Modified: Tue, 05 Mar 2024 12:12:32 GMT ETag: "c9d8a7523921951f3dc02c71193d6fe4" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=15552000 x-amz-version-id: hmxPC1QRX3Oh5EpgVzgfGyRq4WTlwXYF X-Cache: Hit from cloudfront Via: 1.1 9abd3232e1a3776dc26ad56d2477147c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: koK7CvWBIgVmSpDttqTG5xy8dgyRJj4vaHYrRYXpt8OcTpt_qlXcPA== Age: 359072 CF-Cache-Status: HIT Expires: Wed, 23 Oct 2024 18:32:46 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8488820db2d-MIA
2024-04-26 18:32:46 UTC	572	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 68 65 61 64 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 37 35 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 65 78 70 6f 72 74 73 3f 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 6f 63 75 6d 65 6e 74 3f 6e 28 74 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 Data Ascii: /! For license information please see head.min.js.LICENSE.txt /(()=>{var e={755:function(e,t){var n;!function(t,n){"use strict";"object"==typeof e.exports?e.exports=t.document?n(t,!0):function(e){if(!e.document)throw new Error("jQuery requires a window
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 63 74 29 2c 67 3d 7b 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 69 74 65 6d 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 62 3d 72 2e 64 6f 63 75 6d 65 6e 74 2c 78 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 28 6e 3d 6e 7c 7c 62 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 Data Ascii: ct),g={},y=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},m=function(e){return null!=e&&e===e.window},b=r.document,x={type:!0,src:!0,nonce:!0,noModule:!0};function w(e,t,n){var r,i,o=(n=n\|\|b).createElement(
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 3e 3d 30 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d Data Ascii: t){return(t+1)%2})))},odd:function(){return this.pushStack(S.grep(this,(function(e,t){return t%2})))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(n>=0&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()}
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 3d 53 2e 74 65 78 74 28 74 29 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 69 7c 7c 31 31 3d 3d 3d 69 3f 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 39 3d 3d 3d 69 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 33 3d 3d 3d 69 7c 7c 34 3d 3d 3d 69 3f 65 2e 6e 6f 64 65 56 61 6c 75 65 3a 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 41 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 6c 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 Data Ascii: =S.text(t);return 1===i\|\|11===i?e.textContent:9===i?e.documentElement.textContent:3===i\|\|4===i?e.nodeValue:n},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(A(Object(e))?S.merge(n,"string"==typeof e?[e]:e):l.call(n,e)),n},inArray:function(e,t,n){ret
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 20 74 3f 22 5c 30 22 3d 3d 3d 65 3f 22 ef bf bd 22 3a 65 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 53 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 4d 2c 71 29 7d 3b 76 61 72 20 5f 3d 62 2c 48 3d 6c 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 61 2c 75 2c 6c 2c 66 2c 70 2c 68 2c 76 3d 48 2c 79 3d 53 2e 65 78 70 61 6e 64 6f 2c 6d 3d 30 2c 62 3d 30 2c 78 3d 65 65 28 29 2c 77 3d 65 65 28 29 2c 54 3d 65 65 28 29 2c 43 3d 65 65 28 29 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: t?"\0"===e?"":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e}S.escapeSelector=function(e){return(e+"").replace(M,q)};var _=b,H=l;!function(){var e,t,n,i,a,u,l,f,p,h,v=H,y=S.expando,m=0,b=0,x=ee(),w=ee(),T=ee(),C=ee(),E=function(e,
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 56 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 47 3d 2f 5b 2b 7e 5d 2f 2c 59 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4f 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c Data Ascii: )$/i,X=/^h\d$/i,V=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,G=/[+~]/,Y=new RegExp("\\\\[\\da-fA-F]{1,6}"+O+"?\|\\\\([^\\r\\n\\f])","g"),Q=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 64 29 29 2c 6e 7d 63 61 74 63 68 28 74 29 7b 43 28 65 2c 21 30 29 7d 66 69 6e 61 6c 6c 79 7b 73 3d 3d 3d 79 26 26 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 6d 65 28 65 2e 72 65 70 6c 61 63 65 28 4c 2c 22 24 31 22 29 2c 74 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 6e 28 72 2c 69 29 7b 72 65 74 75 72 6e 20 65 2e 70 75 73 68 28 72 2b 22 20 22 29 3e 74 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 6e 5b 65 2e 73 68 69 66 74 28 29 5d 2c 6e 5b 72 2b 22 20 22 5d 3d 69 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 79 5d 3d Data Ascii: erySelectorAll(d)),n}catch(t){C(e,!0)}finally{s===y&&t.removeAttribute("id")}}}return me(e.replace(L,"$1"),t,n,r)}function ee(){var e=[];return function n(r,i){return e.push(r+" ")>t.cacheLength&&delete n[e.shift()],n[r+" "]=i}}function te(e){return e[y]=
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 4e 61 6d 65 7c 7c 21 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 53 2e 65 78 70 61 6e 64 6f 29 2e 6c 65 6e 67 74 68 7d 29 29 2c 67 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 6e 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 68 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 7d 29 29 2c 67 2e 73 63 6f 70 65 3d 6e 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 22 29 7d 29 29 2c 67 2e 63 73 73 48 61 73 3d 6e 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 75 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 3a 68 61 73 28 2a 2c 3a 6a 71 66 61 6b 65 29 22 29 2c 21 31 7d 63 61 74 63 68 28 65 29 7b 72 65 74 Data Ascii: Name\|\|!u.getElementsByName(S.expando).length})),g.disconnectedMatch=ne((function(e){return h.call(e,"")})),g.scope=ne((function(){return u.querySelectorAll(":scope")})),g.cssHas=ne((function(){try{return u.querySelector(":has(,:jqfake)"),!1}catch(e){ret
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 79 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 70 2e 70 75 73 68 28 22 7e 3d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 79 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 70 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 70 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 28 74 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: SelectorAll("[id~="+y+"-]").length\|\|p.push("~="),e.querySelectorAll("a#"+y+"+*").length\|\|p.push(".#.+[+~]"),e.querySelectorAll(":checked").length\|\|p.push(":checked"),(t=u.createElement("input")).setAttribute("type","hidden"),e.appendChild(t).setAttribute(
2024-04-26 18:32:46 UTC	1369	IN	Data Raw: 75 65 28 65 29 3b 76 61 72 20 72 3d 74 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 69 3d 72 26 26 64 2e 63 61 6c 6c 28 74 2e 61 74 74 72 48 61 6e 64 6c 65 2c 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 72 28 65 2c 6e 2c 21 66 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 6e 29 7d 2c 5a 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 79 6e 74 61 78 20 65 72 72 6f 72 2c 20 75 6e 72 65 63 6f 67 6e 69 7a 65 64 20 65 78 70 72 65 73 73 69 6f 6e 3a 20 22 2b 65 29 7d 2c 53 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d Data Ascii: ue(e);var r=t.attrHandle[n.toLowerCase()],i=r&&d.call(t.attrHandle,n.toLowerCase())?r(e,n,!f):void 0;return void 0!==i?i:e.getAttribute(n)},Z.error=function(e){throw new Error("Syntax error, unrecognized expression: "+e)},S.uniqueSort=function(e){var t,n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50005	34.111.113.62	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:46 UTC	761	OUT	GET /idsync/ex/receive/check?partner_id=2326&gdpr=0&gdpr_consent=&partner_device_id=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714156365504; TapAd_DID=c9519294-632a-4d82-bad6-7d3fcc8fdd1e
2024-04-26 18:32:46 UTC	1227	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:46 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714156365504;Expires=Tue, 25 Jun 2024 18:32:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=c9519294-632a-4d82-bad6-7d3fcc8fdd1e;Expires=Tue, 25 Jun 2024 18:32:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Tue, 25 Jun 2024 18:32:46 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=c9519294-632a-4d82-bad6-7d3fcc8fdd1e%252C%252C&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50007	142.250.189.130	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:47 UTC	759	OUT	GET /pixel?google_nid=eye&google_cm&google_sc&google_hm=MnhVdVR6TWdfcnJ0dDZvU2lPVmg4SHVMMkQ3blJEUFlXWUc4SVY3M2RtVjg&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=m4omg6v HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:47 UTC	941	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm=&google_sc=&google_hm=MnhVdVR6TWdfcnJ0dDZvU2lPVmg4SHVMMkQ3blJEUFlXWUc4SVY3M2RtVjg&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=m4omg6v&google_tc= Date: Fri, 26 Apr 2024 18:32:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 459 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 26-Apr-2024 18:47:47 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:32:47 UTC	314	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 65 79 65 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 73 63 3d 26 61 6d 70 3b 67 6f 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm=&google_sc=&goo
2024-04-26 18:32:47 UTC	145	IN	Data Raw: 4d 32 52 74 56 6a 67 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 69 64 3d 31 26 61 6d 70 3b 62 69 64 3d 67 64 6f 39 6f 35 31 26 61 6d 70 3b 6e 65 77 75 73 65 72 3d 31 26 61 6d 70 3b 72 65 66 65 72 72 65 72 5f 70 69 64 3d 6d 34 6f 6d 67 36 76 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 74 63 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: M2RtVjg&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=m4omg6v&google_tc=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50011	15.197.193.217	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:47 UTC	719	OUT	GET /track/cmf/generic?ttd_pid=liveintent&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; TDCPM=CAEYBSABKAIyCwjUvqDDvorzPBAFOAE.
2024-04-26 18:32:47 UTC	563	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:47 GMT Content-Length: 215 Connection: close server: Kestrel location: https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=6f67744e-1091-4048-adba-e024cc18f2d2 set-cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; expires=Sat, 26 Apr 2025 18:32:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUYASABKAIyCwig4PqEwIrzPBAFOAFaCmxpdmVpbnRlbnRgAg..; expires=Sat, 26 Apr 2025 18:32:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 18:32:47 UTC	215	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 33 35 37 35 39 3f 62 69 64 64 65 72 5f 69 64 3d 34 34 34 38 39 26 62 69 64 64 65 72 5f 75 75 69 64 3d 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 22 3e 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 33 35 37 35 39 3f 62 69 64 64 65 72 5f 69 64 3d 34 34 34 38 39 26 62 69 64 64 65 72 5f 75 75 69 64 3d 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=6f67744e-1091-4048-adba-e024cc18f2d2">https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=6f67744e-1091-4048-adba-e024cc18f2d2</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50010	18.211.29.223	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:47 UTC	834	OUT	GET /match?dsp_callback=1&publisher_dsp_id=440&external_user_id=662bf34d3757330001701a4b&r=https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fim%2F%7BPUB_USER_ID%7D%3Fch%3D662bf34d3757330001701a4c%26chc%3Dst%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:47 UTC	810	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:47 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: tuuid=d5f646a1-3a90-4585-81a0-693ca4a06fc0; Expires=Thu, 25 Jul 2024 18:32:47 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: tuuid_lu=1714156367; Expires=Thu, 25 Jul 2024 18:32:47 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://match.360yield.com/ul_cb/match?dsp_callback=1&publisher_dsp_id=440&external_user_id=662bf34d3757330001701a4b&r=https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fim%2F%7BPUB_USER_ID%7D%3Fch%3D662bf34d3757330001701a4c%26chc%3Dst%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	49977	104.18.8.9	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:47 UTC	537	OUT	GET /stock/highstock.js HTTP/1.1 Host: code.highcharts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:47 UTC	693	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:47 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: bAd276l/zLVbNiwYtEpXEfbfDhk5KKuM71LY0DcApFbAvVUa/Bd9URYAmeG7RsNfIL0W4MIIAp4= x-amz-request-id: YT09VDWRP6BBZ873 Cache-Control: public, max-age=2678400 Expires: Mon, 27 May 2024 18:32:47 GMT Last-Modified: Thu, 04 Apr 2024 13:12:25 GMT ETag: W/"043e08820d9109123fbf88b5b7d84a06" CF-Cache-Status: HIT Age: 1919623 Set-Cookie: _cfuvid=mnwi8iB8qTmUJ_sxxy8.AEP1XWF9NimautDWPZvkU0A-1714156367271-0.0.1.1-604800000; path=/; domain=.highcharts.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a84f5f730a16-MIA
2024-04-26 18:32:47 UTC	676	IN	Data Raw: 37 63 65 65 0d 0a 21 2f 2a 2a 0a 20 2a 20 48 69 67 68 73 74 6f 63 6b 20 4a 53 20 76 31 31 2e 34 2e 31 20 28 32 30 32 34 2d 30 34 2d 30 34 29 0a 20 2a 0a 20 2a 20 28 63 29 20 32 30 30 39 2d 32 30 32 34 20 54 6f 72 73 74 65 69 6e 20 48 6f 6e 73 69 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 77 77 77 2e 68 69 67 68 63 68 61 72 74 73 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 28 65 2e 64 65 66 61 75 6c 74 3d 65 2c 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 26 26 74 2e 64 6f 63 75 6d 65 6e 74 3f 65 28 74 29 3a 65 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 Data Ascii: 7cee!/** * Highstock JS v11.4.1 (2024-04-04) * * (c) 2009-2024 Torstein Honsi * * License: www.highcharts.com/license */function(t,e){"object"==typeof module&&module.exports?(e.default=e,module.exports=t&&t.document?e(t):e):"function"==typeof defi
2024-04-26 18:32:47 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 69 3b 72 65 74 75 72 6e 28 69 3d 65 7c 7c 28 65 3d 7b 7d 29 29 2e 53 56 47 5f 4e 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 69 2e 70 72 6f 64 75 63 74 3d 22 48 69 67 68 63 68 61 72 74 73 22 2c 69 2e 76 65 72 73 69 6f 6e 3d 22 31 31 2e 34 2e 31 22 2c 69 2e 77 69 6e 3d 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 7b 7d 2c 69 2e 64 6f 63 3d 69 2e 77 69 6e 2e 64 6f 63 75 6d 65 6e 74 2c 69 2e 73 76 67 3d 69 2e 64 6f 63 26 26 69 2e 64 6f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 26 26 21 21 69 2e 64 6f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 69 2e 53 56 47 5f 4e 53 2c 22 73 76 67 22 29 2e 63 72 65 61 74 65 53 56 47 52 65 63 74 2c 69 2e 75 73 65 Data Ascii: function(){var e,i;return(i=e\|\|(e={})).SVG_NS="http://www.w3.org/2000/svg",i.product="Highcharts",i.version="11.4.1",i.win=void 0!==t?t:{},i.doc=i.win.document,i.svg=i.doc&&i.doc.createElementNS&&!!i.doc.createElementNS(i.SVG_NS,"svg").createSVGRect,i.use
2024-04-26 18:32:47 UTC	1369	IN	Data Raw: 3d 3d 65 26 26 28 65 3d 60 24 7b 6e 7d 3a 20 44 65 70 72 65 63 61 74 65 64 20 6d 65 6d 62 65 72 60 29 3b 6c 65 74 20 6c 3d 70 28 65 29 2c 68 3d 6c 3f 60 24 7b 6e 7d 20 23 24 7b 65 7d 3a 20 77 77 77 2e 68 69 67 68 63 68 61 72 74 73 2e 63 6f 6d 2f 65 72 72 6f 72 73 2f 24 7b 65 7d 2f 60 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 7b 6c 65 74 20 74 3d 22 22 3b 6c 26 26 28 68 2b 3d 22 3f 22 29 2c 4d 28 61 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 74 2b 3d 60 0a 20 2d 20 24 7b 69 7d 3a 20 24 7b 65 7d 60 2c 6c 26 26 28 68 2b 3d 65 6e 63 6f 64 65 55 52 49 28 69 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 28 65 29 29 7d 29 2c 68 2b 3d 74 7d 43 28 74 2c 22 64 69 73 70 6c 61 79 45 72 72 6f 72 22 2c 7b 63 68 61 72 74 3a 73 Data Ascii: ==e&&(e=`${n}: Deprecated member`);let l=p(e),h=l?`${n} #${e}: www.highcharts.com/errors/${e}/`:e.toString();if(void 0!==a){let t="";l&&(h+="?"),M(a,function(e,i){t+=` - ${i}: ${e}`,l&&(h+=encodeURI(i)+"="+encodeURI(e))}),h+=t}C(t,"displayError",{chart:s
2024-04-26 18:32:47 UTC	1369	IN	Data Raw: 76 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3e 31 65 31 34 3f 74 3a 70 61 72 73 65 46 6c 6f 61 74 28 74 2e 74 6f 50 72 65 63 69 73 69 6f 6e 28 65 7c 7c 31 34 29 29 7d 28 72 7c 7c 28 72 3d 7b 7d 29 29 2e 6d 65 73 73 61 67 65 73 3d 5b 5d 2c 4d 61 74 68 2e 65 61 73 65 49 6e 4f 75 74 53 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 2d 2e 35 2a 28 4d 61 74 68 2e 63 6f 73 28 4d 61 74 68 2e 50 49 2a 74 29 2d 31 29 7d 3b 6c 65 74 20 53 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 69 6e 64 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6c 65 74 20 69 3b 6c 65 74 20 73 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 69 3d 30 3b 69 3c 73 3b 69 2b Data Ascii: v(t,e){return t>1e14?t:parseFloat(t.toPrecision(e\|\|14))}(r\|\|(r={})).messages=[],Math.easeInOutSine=function(t){return -.5(Math.cos(Math.PIt)-1)};let S=Array.prototype.find?function(t,e){return t.find(e)}:function(t,e){let i;let s=t.length;for(i=0;i<s;i+
2024-04-26 18:32:47 UTC	1369	IN	Data Raw: 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 26 26 72 2e 63 61 6c 6c 28 65 2c 6f 29 7d 4d 28 7b 6d 61 70 3a 22 6d 61 70 22 2c 65 61 63 68 3a 22 66 6f 72 45 61 63 68 22 2c 67 72 65 70 3a 22 66 69 6c 74 65 72 22 2c 72 65 64 75 63 65 3a 22 72 65 64 75 63 65 22 2c 73 6f 6d 65 3a 22 73 6f 6d 65 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 74 5b 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 28 33 32 2c 21 31 2c 76 6f 69 64 20 30 2c 7b 5b 60 48 69 67 68 63 68 61 72 74 73 2e 24 7b 69 7d 60 5d 3a 60 75 73 65 20 41 72 72 61 79 2e 24 7b 65 7d 60 7d 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2e 61 70 70 6c 79 28 74 2c 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 7d 29 3b 6c 65 74 Data Ascii: defaultPrevented&&r.call(e,o)}M({map:"map",each:"forEach",grep:"filter",reduce:"reduce",some:"some"},function(e,i){t[i]=function(t){return r(32,!1,void 0,{[`Highcharts.${i}`]:`use Array.${e}`}),Array.prototype[e].apply(t,[].slice.call(arguments,1))}});let
2024-04-26 18:32:47 UTC	1369	IN	Data Raw: 6f 75 74 28 74 29 7d 2c 63 6f 72 72 65 63 74 46 6c 6f 61 74 3a 76 2c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 2c 72 29 7b 6c 65 74 20 61 3d 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 3b 72 65 74 75 72 6e 20 65 26 26 6d 28 61 2c 65 29 2c 72 26 26 79 28 61 2c 7b 70 61 64 64 69 6e 67 3a 22 30 22 2c 62 6f 72 64 65 72 3a 22 6e 6f 6e 65 22 2c 6d 61 72 67 69 6e 3a 22 30 22 7d 29 2c 69 26 26 79 28 61 2c 69 29 2c 6f 26 26 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2c 61 7d 2c 63 73 73 3a 79 2c 64 65 66 69 6e 65 64 3a 75 2c 64 65 73 74 72 6f 79 4f 62 6a 65 63 74 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 4d 28 74 2c 66 75 6e 63 74 69 6f 6e 28 73 2c 6f 29 7b 73 21 Data Ascii: out(t)},correctFloat:v,createElement:function(t,e,i,o,r){let a=s.createElement(t);return e&&m(a,e),r&&y(a,{padding:"0",border:"none",margin:"0"}),i&&y(a,i),o&&o.appendChild(a),a},css:y,defined:u,destroyObjectProperties:function(t,e,i){M(t,function(s,o){s!
2024-04-26 18:32:47 UTC	1369	IN	Data Raw: 65 6e 67 74 68 26 26 75 28 65 29 3b 29 7b 6c 65 74 20 74 3d 69 2e 73 68 69 66 74 28 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 3d 3d 3d 74 29 72 65 74 75 72 6e 3b 69 66 28 22 74 68 69 73 22 3d 3d 3d 74 29 7b 6c 65 74 20 74 3b 72 65 74 75 72 6e 20 68 28 65 29 26 26 28 74 3d 65 5b 22 40 74 68 69 73 22 5d 29 2c 74 3f 3f 65 7d 6c 65 74 20 73 3d 65 5b 74 5d 3b 69 66 28 21 75 28 73 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 73 3d 3d 3d 6f 29 72 65 74 75 72 6e 3b 65 3d 73 7d 72 65 74 75 72 6e 20 65 7d 2c 67 65 74 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 69 2c 73 29 7b 6c 65 74 20 72 3b 69 Data Ascii: ength&&u(e);){let t=i.shift();if(void 0===t\|\|"__proto__"===t)return;if("this"===t){let t;return h(e)&&(t=e["@this"]),t??e}let s=e[t];if(!u(s)\|\|"function"==typeof s\|\|"number"==typeof s.nodeType\|\|s===o)return;e=s}return e},getStyle:function t(e,i,s){let r;i
2024-04-26 18:32:47 UTC	1369	IN	Data Raw: 26 26 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 21 3d 3d 6f 26 26 28 21 68 28 69 2c 21 30 29 7c 7c 63 28 69 29 7c 7c 64 28 69 29 3f 74 5b 6f 5d 3d 65 5b 6f 5d 3a 74 5b 6f 5d 3d 73 28 74 5b 6f 5d 7c 7c 7b 7d 2c 69 29 29 7d 29 2c 74 7d 3b 21 30 3d 3d 3d 65 5b 30 5d 26 26 28 69 3d 65 5b 31 5d 2c 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 65 2c 32 29 29 3b 6c 65 74 20 6f 3d 65 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 74 3d 30 3b 74 3c 6f 3b 74 2b 2b 29 69 3d 73 28 69 2c 65 5b 74 5d 29 3b 72 65 74 75 72 6e 20 69 7d 2c 6e 6f 72 6d 61 6c 69 7a 65 54 69 63 6b 49 6e 74 65 72 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 73 2c 6f 29 7b 6c 65 74 20 72 2c 61 3d 74 3b 69 3d 78 28 69 2c 62 28 74 29 29 3b 6c 65 74 20 6e 3d Data Ascii: &&"constructor"!==o&&(!h(i,!0)\|\|c(i)\|\|d(i)?t[o]=e[o]:t[o]=s(t[o]\|\|{},i))}),t};!0===e[0]&&(i=e[1],e=Array.prototype.slice.call(e,2));let o=e.length;for(t=0;t<o;t++)i=s(i,e[t]);return i},normalizeTickInterval:function(t,e,i,s,o){let r,a=t;i=x(i,b(t));let n=
2024-04-26 18:32:47 UTC	1369	IN	Data Raw: 65 6c 65 74 65 20 74 5b 73 5d 2e 73 61 66 65 49 7d 2c 73 79 6e 63 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 65 3e 30 3f 73 65 74 54 69 6d 65 6f 75 74 28 74 2c 65 2c 69 29 3a 28 74 2e 63 61 6c 6c 28 30 2c 69 29 2c 2d 31 29 7d 2c 74 69 6d 65 55 6e 69 74 73 3a 7b 6d 69 6c 6c 69 73 65 63 6f 6e 64 3a 31 2c 73 65 63 6f 6e 64 3a 31 65 33 2c 6d 69 6e 75 74 65 3a 36 65 34 2c 68 6f 75 72 3a 33 36 65 35 2c 64 61 79 3a 38 36 34 65 35 2c 77 65 65 6b 3a 36 30 34 38 65 35 2c 6d 6f 6e 74 68 3a 32 34 31 39 32 65 35 2c 79 65 61 72 3a 33 31 34 34 39 36 65 35 7d 2c 75 6e 69 71 75 65 4b 65 79 3a 41 2c 75 73 65 53 65 72 69 61 6c 49 64 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 3d 78 28 74 2c 65 29 7d 2c Data Ascii: elete t[s].safeI},syncTimeout:function(t,e,i){return e>0?setTimeout(t,e,i):(t.call(0,i),-1)},timeUnits:{millisecond:1,second:1e3,minute:6e4,hour:36e5,day:864e5,week:6048e5,month:24192e5,year:314496e5},uniqueKey:A,useSerialIds:function(t){return e=x(t,e)},
2024-04-26 18:32:47 UTC	1369	IN	Data Raw: 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 6d 61 74 52 61 6e 67 65 3b 63 6c 61 73 73 20 6d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 7b 7d 2c 74 68 69 73 2e 75 73 65 55 54 43 3d 21 31 2c 74 68 69 73 2e 76 61 72 69 61 62 6c 65 54 69 6d 65 7a 6f 6e 65 3d 21 31 2c 74 68 69 73 2e 44 61 74 65 3d 69 2e 44 61 74 65 2c 74 68 69 73 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 3d 74 68 69 73 2e 74 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 46 75 6e 63 74 69 6f 6e 28 29 2c 74 68 69 73 2e 75 70 64 61 74 65 28 74 29 7d 67 65 74 28 74 2c 65 29 7b 69 66 28 74 68 69 73 2e 76 61 72 69 61 62 6c 65 54 69 6d 65 7a 6f 6e 65 7c 7c 74 68 69 73 2e 74 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 29 Data Ascii: ateTimeFormat.prototype.formatRange;class m{constructor(t){this.options={},this.useUTC=!1,this.variableTimezone=!1,this.Date=i.Date,this.getTimezoneOffset=this.timezoneOffsetFunction(),this.update(t)}get(t,e){if(this.variableTimezone\|\|this.timezoneOffset)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50017	3.89.179.162	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:47 UTC	726	OUT	GET /s/35759?bidder_id=44489&bidder_uuid=6f67744e-1091-4048-adba-e024cc18f2d2 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=Cg8KBgjSARDjFwoFCAoQ4xc; lidid=33b4c238-2b6d-4e4d-ad3b-afd3033d027c
2024-04-26 18:32:47 UTC	596	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 18:32:47 GMT Content-Length: 0 Connection: close Location: https://i6.liadm.com/s/35759?bidder_id=44489&bidder_uuid=6f67744e-1091-4048-adba-e024cc18f2d2 Set-Cookie: _li_ss=ChoKBgjSARDjFwoFCAoQ4xcKCQj_____BxDtFw; Max-Age=2592000; Expires=Sun, 26 May 2024 18:32:47 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=33b4c238-2b6d-4e4d-ad3b-afd3033d027c; Max-Age=63072000; Expires=Sun, 26 Apr 2026 18:32:47 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50015	18.211.29.223	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:47 UTC	913	OUT	GET /ul_cb/match?dsp_callback=1&publisher_dsp_id=440&external_user_id=662bf34d3757330001701a4b&r=https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fim%2F%7BPUB_USER_ID%7D%3Fch%3D662bf34d3757330001701a4c%26chc%3Dst%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=d5f646a1-3a90-4585-81a0-693ca4a06fc0; tuuid_lu=1714156367
2024-04-26 18:32:47 UTC	712	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:47 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: um=!440,pDiXtfEkDgV78C2sVzpZkvblsa1.Aok.SLLzOl1-WWYSi-e6nfc,1721932367; Expires=Thu, 25 Jul 2024 18:32:47 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: umeh=!440,0,1776364367,-1; Expires=Thu, 25 Jul 2024 18:32:47 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://map.go.affec.tv/map/im/d5f646a1-3a90-4585-81a0-693ca4a06fc0?ch=662bf34d3757330001701a4c&chc=st&redirect_url=&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50018	142.250.189.130	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:47 UTC	812	OUT	GET /pixel?google_nid=eye&google_cm=&google_sc=&google_hm=MnhVdVR6TWdfcnJ0dDZvU2lPVmg4SHVMMkQ3blJEUFlXWUc4SVY3M2RtVjg&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=m4omg6v&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-26 18:32:47 UTC	1041	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ps.eyeota.net/match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=m4omg6v&google_gid=CAESEKQtqQHSa0ynV9jyDPDHJVI&google_cver=1 Date: Fri, 26 Apr 2024 18:32:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 375 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkEiXynQ3F2vfWpzcT0iiYFVMu4cIAq8AD1TijBJDcnZ7lPa4qPjngJWg7LZTM; expires=Sun, 26-Apr-2026 18:32:47 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:32:47 UTC	214	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 6d 61 74 63 68 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ps.eyeota.net/match?gdpr=0&gdpr_co
2024-04-26 18:32:47 UTC	161	IN	Data Raw: 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 69 64 3d 31 26 61 6d 70 3b 62 69 64 3d 67 64 6f 39 6f 35 31 26 61 6d 70 3b 6e 65 77 75 73 65 72 3d 31 26 61 6d 70 3b 72 65 66 65 72 72 65 72 5f 70 69 64 3d 6d 34 6f 6d 67 36 76 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 4b 51 74 71 51 48 53 61 30 79 6e 56 39 6a 79 44 50 44 48 4a 56 49 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: nsent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=m4omg6v&google_gid=CAESEKQtqQHSa0ynV9jyDPDHJVI&google_cver=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50014	15.197.193.217	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:47 UTC	772	OUT	GET /track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUYASABKAIyCwig4PqEwIrzPBAFOAFaCmxpdmVpbnRlbnRgAg..
2024-04-26 18:32:47 UTC	582	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:47 GMT Content-Length: 261 Connection: close server: Kestrel location: https://pixel.onaudience.com/?partner=147&mapped=6f67744e-1091-4048-adba-e024cc18f2d2&icm&gdpr=0&gdpr_consent=&cver set-cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; expires=Sat, 26 Apr 2025 18:32:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUYASABKAIyCwj0u5yLwIrzPBAFOAFaB3hrc3c5bGFgAg..; expires=Sat, 26 Apr 2025 18:32:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 18:32:47 UTC	261	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 31 34 37 26 6d 61 70 70 65 64 3d 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 26 69 63 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 76 65 72 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 31 34 37 26 6d 61 70 70 65 64 3d 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 26 69 63 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 63 76 Data Ascii: Redirecting to: <a href="https://pixel.onaudience.com/?partner=147&mapped=6f67744e-1091-4048-adba-e024cc18f2d2&icm&gdpr=0&gdpr_consent=&cver">https://pixel.onaudience.com/?partner=147&mapped=6f67744e-1091-4048-adba-e024cc18f2d2&icm&gdpr=0&gdpr_consent=&cv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50016	15.197.193.217	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:47 UTC	840	OUT	GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=c9519294-632a-4d82-bad6-7d3fcc8fdd1e%252C%252C&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUYASABKAIyCwig4PqEwIrzPBAFOAFaCmxpdmVpbnRlbnRgAg..
2024-04-26 18:32:47 UTC	655	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:47 GMT Content-Length: 359 Connection: close server: Kestrel location: https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=6f67744e-1091-4048-adba-e024cc18f2d2&ttd_puid=c9519294-632a-4d82-bad6-7d3fcc8fdd1e%2C%2C set-cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; expires=Sat, 26 Apr 2025 18:32:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUSFAoFdGFwYWQSCwiYvKjeqYrzPBAFGAEgASgCMgsI1LKri8CK8zwQBTgBWgV0YXBhZGAC; expires=Sat, 26 Apr 2025 18:32:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 18:32:47 UTC	359	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 26 74 74 64 5f 70 75 69 64 3d 63 39 35 31 39 32 39 34 2d 36 33 32 61 2d 34 64 38 32 2d 62 61 64 36 2d 37 64 33 66 63 63 38 66 64 64 31 65 25 32 43 25 32 43 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 31 38 33 30 26 70 61 72 74 6e 65 Data Ascii: Redirecting to: <a href="https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=6f67744e-1091-4048-adba-e024cc18f2d2&ttd_puid=c9519294-632a-4d82-bad6-7d3fcc8fdd1e%2C%2C">https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50013	18.230.167.103	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:47 UTC	818	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=600901&dpuuid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.sharethis.com%2Fadobe%3Fuid%3D%24%7BDD_UUID%7D%26_rand%3D1714156364519 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=06291327801249806183443003251739176557
2024-04-26 18:32:48 UTC	940	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:48 GMT Content-Length: 0 Connection: close X-TID: zTy9KNoFRNc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://sync.sharethis.com/adobe?uid=06291327801249806183443003251739176557&_rand=1714156364519 DCS: dcs-prod-sae-2-v059-00cb86c38.edge-sae.demdex.com 2 ms set-cookie: dpm=06291327801249806183443003251739176557; Max-Age=15552000; Expires=Wed, 23 Oct 2024 18:32:48 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=06291327801249806183443003251739176557; Max-Age=15552000; Expires=Wed, 23 Oct 2024 18:32:48 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50012	64.58.232.180	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:47 UTC	399	OUT	GET /image.sbmx?go=304847&pid=583&xid=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: ib.mookie1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50020	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:48 UTC	1976	OUT	GET /?rb=JVm5XvfSd03Ue4eZ5ZPUOND5sQExgVpnSQxm0ih1SgAbMOLCxXkPnOMu2K_xqLssoBix-OMGkGd1r_bvO80gLLZz6bqpWnFiFGKiCwCeNkZjMoMo38tLcP61-9Y8YlGKyzqs8jLRfpj1wARjKKChzvGq1qzBG1ud-dJNdj2KIW0vr7ZkJ4B8qe8aaKhXgmyPo7_hcp5M7Pa3TTUxhRjalN7BJLTD91TxwApQLEDnyrLRr7DD-RA_cjw0A3BYFANPhzLWSwhtvJAsFl70kEHCFuRJXMPlA4cOHi1fylAY6mXCRCIQzxQAmAq8-5OB1sPWXlYNbw%3D%3D&request_ab2=0&zoneid=4724866&js_build=iclick-v1.785.1-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=907&wiw=1280&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=1263&wfc=3&pl=https%3A%2F%2F1movieshd.cc%2Fhome&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-120&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.785.1-auto&navlng=en-US&pnt=0&pnrc=0&bs=7373eea3-0277-46eb-86bf-41c2eeee3baf&userId=k3oa752910bk686846683x2y8sbun072&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.132&wasm=1&fallback=early-click-pns HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156357
2024-04-26 18:32:48 UTC	1358	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:48 GMT Content-Type: text/html; charset=utf8 Content-Length: 995 Connection: close X-Trace-Id: 4ec8544affa23584601c272c0e66ff13 Link: <https://eephaush.com>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:48 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156368; expires=Sat, 26 Apr 2025 18:32:48 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Fri, 03 May 2024 18:32:48 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:48 UTC	995	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 68 74 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6e 6f 73 63 72 69 70 74 3e 0a 09 09 3c 6d 65 74 61 20 69 64 3d 22 6d 65 74 61 2d 72 65 66 72 65 73 68 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 34 2f 36 31 31 38 37 38 30 2f 3f 76 61 72 3d 34 37 32 34 38 36 36 26 61 6d 70 3b Data Ascii: <!doctype html><html lang="en" xmlns="http://www.w3.org/1999/html"><head> <meta charset="UTF-8"/> <title>Redirect</title><noscript><meta id="meta-refresh" http-equiv="refresh" content="1; url=https://eephaush.com/4/6118780/?var=4724866&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50021	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:48 UTC	1565	OUT	GET /?rb=JVm5XvfSd03Ue4eZ5ZPUOND5sQExgVpnSQxm0ih1SgAbMOLCxXkPnOMu2K_xqLssoBix-OMGkGd1r_bvO80gLLZz6bqpWnFiFGKiCwCeNkZjMoMo38tLcP61-9Y8YlGKyzqs8jLRfpj1wARjKKChzvGq1qzBG1ud-dJNdj2KIW0vr7ZkJ4B8qe8aaKhXgmyPo7_hcp5M7Pa3TTUxhRjalN7BJLTD91TxwApQLEDnyrLRr7DD-RA_cjw0A3BYFANPhzLWSwhtvJAsFl70kEHCFuRJXMPlA4cOHi1fylAY6mXCRCIQzxQAmAq8-5OB1sPWXlYNbw%3D%3D&request_ab2=0&zoneid=4724866&js_build=iclick-v1.785.1-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=907&wiw=1280&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=1263&wfc=3&pl=https%3A%2F%2F1movieshd.cc%2Fhome&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-120&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.785.1-auto&navlng=en-US&pnt=0&pnrc=0&bs=7373eea3-0277-46eb-86bf-41c2eeee3baf&userId=k3oa752910bk686846683x2y8sbun072&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.132&wasm=1&m=link HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156357
2024-04-26 18:32:48 UTC	1201	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:48 GMT Content-Type: application/json Content-Length: 4472 Connection: close X-Trace-Id: 25f72cb65cbc57793c1de31cd6cd6ff9 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:48 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156368; expires=Sat, 26 Apr 2025 18:32:48 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Fri, 03 May 2024 18:32:48 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:48 UTC	4472	IN	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 32 36 39 35 39 31 37 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 39 35 38 37 34 39 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 34 2f 36 31 31 38 37 38 30 2f 3f 76 61 72 3d 34 37 32 34 38 36 36 5c 75 30 30 32 36 62 74 7a 3d 45 75 72 6f 70 65 2f 5a 75 72 69 63 68 5c 75 30 30 32 36 62 74 6f 3d 2d 31 32 30 5c 75 30 30 32 36 62 61 72 3d 78 22 2c 22 63 61 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 63 61 74 2e 70 68 70 3f 75 73 65 72 49 64 3d 6b 33 6f 61 37 35 32 39 31 30 62 6b 36 38 36 38 34 36 36 38 33 78 32 79 38 73 62 75 6e 30 37 32 5c 75 30 30 32 36 7a 6f 6e 65 69 64 3d 34 37 32 34 38 36 36 5c 75 30 30 32 36 72 62 3d 4a 56 6d 35 Data Ascii: {"bannerId":2695917,"campaignId":1958749,"dstUrl":"https://eephaush.com/4/6118780/?var=4724866\u0026btz=Europe/Zurich\u0026bto=-120\u0026bar=x","catUrl":"https://eephaush.com/cat.php?userId=k3oa752910bk686846683x2y8sbun072\u0026zoneid=4724866\u0026rb=JVm5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50019	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:48 UTC	1016	OUT	GET /4/6118780/?var=4724866&btz=Europe/Zurich&bto=-120&bar=x HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156368
2024-04-26 18:32:49 UTC	1205	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:48 GMT Content-Type: text/html; charset=utf8 Content-Length: 34082 Connection: close X-Trace-Id: 08dd1bd29c30079b6ea9f9ffd6b92bec Link: <https://yonmewon.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:48 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156368; expires=Sat, 26 Apr 2025 18:32:48 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:49 UTC	15179	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 68 74 6d 6c 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 65 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 Data Ascii: <!doctype html><html lang="en" xmlns="http://www.w3.org/1999/html"><head> <meta charset="UTF-8"/> <meta http-equiv="cache-control" content="no-cache"/> <meta http-equiv="expires" content="0"/> <meta http-equiv="pragma" content="no-cache"
2024-04-26 18:32:49 UTC	16384	IN	Data Raw: 5f 32 27 5d 2c 5b 27 79 67 27 2c 27 70 79 76 70 78 5f 76 71 27 5d 2c 5b 27 52 67 27 2c 27 70 62 66 67 27 5d 2c 5b 27 44 67 27 2c 27 77 66 67 6e 74 27 5d 2c 5b 27 66 67 27 2c 27 62 6e 5f 76 71 27 5d 2c 5b 27 51 67 27 2c 27 6e 71 71 76 67 76 62 61 6e 79 5f 76 71 66 27 5d 2c 5b 27 47 67 27 2c 27 7b 28 2e 2a 3f 29 5c 5c 7d 27 5d 2c 5b 27 58 67 27 2c 27 73 47 6c 63 72 27 5d 2c 5b 27 55 67 27 2c 27 70 75 6e 61 70 72 27 5d 2c 5b 27 63 67 27 2c 27 73 79 62 62 65 27 5d 2c 5b 27 62 67 27 2c 27 70 79 76 72 61 67 56 71 27 5d 2c 5b 27 42 67 27 2c 27 6e 6b 70 76 71 27 5d 2c 5b 27 6e 67 27 2c 27 67 65 6e 73 73 76 70 46 62 68 65 70 72 56 71 27 5d 2c 5b 27 6b 67 27 2c 27 6e 6b 67 66 76 71 27 5d 2c 5b 27 77 67 27 2c 27 6e 73 73 76 79 76 6e 67 72 56 71 27 5d 2c 5b 27 65 67 Data Ascii: _2'],['yg','pyvpx_vq'],['Rg','pbfg'],['Dg','wfgnt'],['fg','bn_vq'],['Qg','nqqvgvbany_vqf'],['Gg','{(.*?)\\}'],['Xg','sGlcr'],['Ug','punapr'],['cg','sybbe'],['bg','pyvragVq'],['Bg','nkpvq'],['ng','genssvpFbheprVq'],['kg','nkgfvq'],['wg','nssvyvngrVq'],['eg
2024-04-26 18:32:49 UTC	2519	IN	Data Raw: 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 75 62 6d 69 74 2d 66 6f 72 6d 22 29 2e 73 75 62 6d 69 74 28 29 7d 29 29 3a 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 75 62 6d 69 74 2d 66 6f 72 6d 22 29 2e 73 75 62 6d 69 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 69 66 28 61 2e 6f 70 74 69 6f 6e 73 2e 63 68 72 6f 6d 65 49 4f 53 44 69 72 65 63 74 4c 69 6e 6b 29 69 66 28 64 6f 63 75 6d 65 6e 74 2e 68 61 73 46 6f 63 75 73 28 29 29 7b 75 28 29 3b 76 61 72 20 6e 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 68 61 73 46 6f 63 75 73 28 29 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 6e 29 2c 6c 28 29 29 7d 29 2c 31 30 30 29 7d 65 6c 73 65 20 75 28 Data Ascii: lementById("submit-form").submit()})):window.document.getElementById("submit-form").submit()}function m(){if(a.options.chromeIOSDirectLink)if(document.hasFocus()){u();var n=setInterval((function(){document.hasFocus()&&(clearInterval(n),l())}),100)}else u(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50022	37.48.68.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:48 UTC	692	OUT	POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=7373eea3-0277-46eb-86bf-41c2eeee3baf HTTP/1.1 Host: datatechonert.com Connection: keep-alive Content-Length: 2014 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:48 UTC	2014	OUT	Data Raw: 4c 1b 52 52 1f 1c 26 1c 14 05 67 1f 1c 4b 12 03 01 05 50 0e 4c 5f 04 0a 11 1a 58 16 10 4a 4f 40 79 27 3e 75 24 4a 46 2c 1d 5b 09 01 52 15 13 60 0f 08 12 09 1b 42 09 47 4a 17 51 4a 46 38 05 5d 08 19 64 51 52 52 1f 16 59 2c 10 14 51 0a 1c 19 49 39 1b 09 08 51 1c 02 1e 19 1b 06 02 54 49 58 45 21 08 2d 3c 10 48 46 4e 38 05 5d 08 19 64 51 52 52 1f 16 59 0c 07 0b 4e 0c 0b 10 43 46 4c 19 04 16 54 4f 70 56 5c 51 16 01 59 21 1b 01 16 49 51 7e 0e 05 09 07 17 1d 4c 41 15 4b 43 46 58 5e 48 5a 59 40 4c 13 16 1b 5b 47 5f 59 42 18 4c 1a 40 1b 09 07 48 5c 49 44 57 15 50 4b 43 00 59 5e 42 49 05 5d 19 4f 0d 08 01 0e 4a 48 5b 1f 1c 0a 1a 53 40 09 56 46 4c 1c 0a 16 54 5d 1b 1b 44 4f 58 5e 49 44 57 0b 40 4b 43 09 4d 48 19 0d 11 16 54 58 1b 1b 40 57 12 46 43 51 4d 56 14 4b 0a Data Ascii: LRR&gKPL_XJO@y'>u$JF,[R`BGJQJF8]dQRRY,QI9QTIXE!-<HFN8]dQRRYNCFLTOpV\QY!IQ~LAKCFX^HZY@L[G_YBL@H\IDWPKCY^BI]OJH[S@VFLT]DOX^IDW@KCMHTX@WFCQMVK
2024-04-26 18:32:49 UTC	465	IN	HTTP/1.1 200 OK Server: nginx/1.19.10 Date: Fri, 26 Apr 2024 18:32:49 GMT Content-Type: application/json; charset=utf-8 Content-Length: 12 Connection: close Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-04-26 18:32:49 UTC	12	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 7d Data Ascii: {"status":2}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50023	35.169.4.189	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:48 UTC	912	OUT	GET /map/im/d5f646a1-3a90-4585-81a0-693ca4a06fc0?ch=662bf34d3757330001701a4c&chc=st&redirect_url=&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1 Host: map.go.affec.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ck=662bf34d3757330001701a4b; oo=1; pt=eyJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM2NX0sInYiOjB9\|1714156365\|799bbebaaf25d06d1571516dbd7e59d791c8c427
2024-04-26 18:32:49 UTC	901	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 18:32:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 234 Connection: close Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fan%2F%24UID%3Fch%3D662bf34d3757330001701a4c%26chc%3Dst%257Cim%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= Set-Cookie: ck=662bf34d3757330001701a4b; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:32:48 GMT; Secure; SameSite=None Set-Cookie: oo=1; Secure; SameSite=None Set-Cookie: pt=eyJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM2NX0sImltIjp7ImR0IjoxNzE0MTU2MzY4LCJpZCI6ImQ1ZjY0NmExLTNhOTAtNDU4NS04MWEwLTY5M2NhNGEwNmZjMCIsImxzIjoxNzE0MTU2MzY4fSwidiI6MH0=\|1714156368\|b252bcf131486c85def7d81454372c086bd8d607; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:32:48 GMT; Secure; SameSite=None
2024-04-26 18:32:49 UTC	234	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 70 2e 67 6f 2e 61 66 66 65 63 2e 74 76 25 32 46 6d 61 70 25 32 46 61 6e 25 32 46 25 32 34 55 49 44 25 33 46 63 68 25 33 44 36 36 32 62 66 33 34 64 33 37 35 37 33 33 30 30 30 31 37 30 31 61 34 63 25 32 36 63 68 63 25 33 44 73 74 25 32 35 37 43 69 6d 25 32 36 72 65 64 69 72 65 63 74 5f 75 72 6c 25 33 44 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 53 65 65 20 4f 74 68 65 72 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://secure.adnxs.com/getuid?https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fan%2F%24UID%3Fch%3D662bf34d3757330001701a4c%26chc%3Dst%257Cim%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=">See Other</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50025	3.232.64.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:48 UTC	766	OUT	GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=m4omg6v&google_gid=CAESEKQtqQHSa0ynV9jyDPDHJVI&google_cver=1 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18f1bae1d9d-42c70000010a45f6; SERVERID=17910~DM
2024-04-26 18:32:49 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=17910~DM; Domain=eyeota.net; Path=/; Expires=Fri, 26 Apr 2024 18:42:49 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Fri, 26 Apr 2024 18:32:49 GMT
2024-04-26 18:32:49 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50026	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:48 UTC	697	OUT	GET /adobe?uid=06291327801249806183443003251739176557&_rand=1714156364519 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:49 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:49 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:49 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50029	104.18.8.9	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:48 UTC	634	OUT	GET /modules/annotations.js HTTP/1.1 Host: code.highcharts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=mnwi8iB8qTmUJ_sxxy8.AEP1XWF9NimautDWPZvkU0A-1714156367271-0.0.1.1-604800000
2024-04-26 18:32:49 UTC	530	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:48 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: jMRf2hVb+t2YoOCWcZw3VEk4Ybu+Yup5hp3DE7SKKjdov+w6g1lfy9nahSeB1txQwIZ0voWuye0= x-amz-request-id: YT0AWR8GZ2RR4PNZ Cache-Control: public, max-age=2678400 Expires: Mon, 27 May 2024 18:32:48 GMT Last-Modified: Thu, 04 Apr 2024 13:12:25 GMT ETag: W/"43657b616381a6d616bf3518c8ce4491" CF-Cache-Status: HIT Age: 799714 Server: cloudflare CF-RAY: 87a8a85a0f8725be-MIA
2024-04-26 18:32:49 UTC	839	IN	Data Raw: 37 64 39 32 0d 0a 21 2f 2a 2a 0a 20 2a 20 48 69 67 68 63 68 61 72 74 73 20 4a 53 20 76 31 31 2e 34 2e 31 20 28 32 30 32 34 2d 30 34 2d 30 34 29 0a 20 2a 0a 20 2a 20 41 6e 6e 6f 74 61 74 69 6f 6e 73 20 6d 6f 64 75 6c 65 0a 20 2a 0a 20 2a 20 28 63 29 20 32 30 30 39 2d 32 30 32 34 20 54 6f 72 73 74 65 69 6e 20 48 6f 6e 73 69 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 77 77 77 2e 68 69 67 68 63 68 61 72 74 73 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 28 74 2e 64 65 66 61 75 6c 74 3d 74 2c 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 Data Ascii: 7d92!/** * Highcharts JS v11.4.1 (2024-04-04) * * Annotations module * * (c) 2009-2024 Torstein Honsi * * License: www.highcharts.com/license */function(t){"object"==typeof module&&module.exports?(t.default=t,module.exports=t):"function"==typeof
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 2e 69 6e 69 74 41 6e 6e 6f 74 61 74 69 6f 6e 28 74 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 6e 6e 6f 74 61 74 69 6f 6e 73 2e 70 75 73 68 28 73 2e 6f 70 74 69 6f 6e 73 29 2c 61 28 69 2c 21 30 29 26 26 28 73 2e 72 65 64 72 61 77 28 29 2c 73 2e 67 72 61 70 68 69 63 2e 61 74 74 72 28 7b 6f 70 61 63 69 74 79 3a 31 7d 29 29 2c 73 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 6c 65 74 20 74 3d 74 68 69 73 3b 74 2e 70 6c 6f 74 42 6f 78 43 6c 69 70 3d 74 68 69 73 2e 72 65 6e 64 65 72 65 72 2e 63 6c 69 70 52 65 63 74 28 74 68 69 73 2e 70 6c 6f 74 42 6f 78 29 2c 74 2e 63 6f 6e 74 72 6f 6c 50 6f 69 6e 74 73 47 72 6f 75 70 3d 74 2e 72 65 6e 64 65 72 65 72 2e 67 28 22 63 6f 6e 74 72 6f 6c 2d 70 6f 69 6e 74 73 22 29 2e 61 74 74 72 28 7b 7a 49 6e Data Ascii: .initAnnotation(t);return this.options.annotations.push(s.options),a(i,!0)&&(s.redraw(),s.graphic.attr({opacity:1})),s}function h(){let t=this;t.plotBoxClip=this.renderer.clipRect(this.plotBox),t.controlPointsGroup=t.renderer.g("control-points").attr({zIn
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 65 74 20 69 3d 30 3b 69 3c 74 3b 2b 2b 69 29 61 5b 69 5d 3d 22 22 3b 61 2e 70 75 73 68 28 73 29 2c 61 2e 78 56 61 6c 75 65 73 3d 5b 5d 2c 61 2e 78 56 61 6c 75 65 73 5b 6f 5d 3d 65 2c 69 2e 64 61 74 61 52 6f 77 73 2e 70 75 73 68 28 61 29 2c 6e 3d 21 30 7d 69 66 28 6e 7c 7c 69 2e 64 61 74 61 52 6f 77 73 2e 66 6f 72 45 61 63 68 28 74 3d 3e 7b 21 6e 26 26 74 2e 78 56 61 6c 75 65 73 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 65 3d 3d 3d 74 2e 78 56 61 6c 75 65 73 5b 6f 5d 26 26 28 6c 26 26 74 2e 6c 65 6e 67 74 68 3e 61 3f 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 72 2b 73 3a 74 2e 70 75 73 68 28 73 29 2c 6e 3d 21 30 29 7d 29 2c 21 6e 29 7b 6c 65 74 20 74 3d 69 2e 64 61 74 61 52 6f 77 73 5b 30 5d 2e 6c 65 6e 67 74 68 2c 6e 3d 41 72 72 61 79 28 74 29 3b 66 6f Data Ascii: et i=0;i<t;++i)a[i]="";a.push(s),a.xValues=[],a.xValues[o]=e,i.dataRows.push(a),n=!0}if(n\|\|i.dataRows.forEach(t=>{!n&&t.xValues&&void 0!==o&&e===t.xValues[o]&&(l&&t.length>a?t[t.length-1]+=r+s:t.push(s),n=!0)}),!n){let t=i.dataRows[0].length,n=Array(t);fo
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 57 69 74 68 49 6e 69 74 2e 61 6e 6e 6f 74 61 74 69 6f 6e 73 3d 5b 6c 5d 2c 6f 2e 63 6f 6c 6c 65 63 74 69 6f 6e 73 57 69 74 68 55 70 64 61 74 65 2e 70 75 73 68 28 22 61 6e 6e 6f 74 61 74 69 6f 6e 73 22 29 2c 6f 2e 64 72 61 77 41 6e 6e 6f 74 61 74 69 6f 6e 73 3d 63 2c 6f 2e 72 65 6d 6f 76 65 41 6e 6e 6f 74 61 74 69 6f 6e 3d 70 2c 6f 2e 69 6e 69 74 41 6e 6e 6f 74 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 6c 65 74 20 73 3d 6e 65 77 28 74 2e 74 79 70 65 73 5b 69 2e 74 79 70 65 5d 7c 7c 74 29 28 74 68 69 73 2c 69 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 6e 6e 6f 74 61 74 69 6f 6e 73 2e 70 75 73 68 28 73 29 2c 73 7d 2c 72 28 6e 2c 22 6f 6e 43 6f 6e 74 61 69 6e 65 72 4d 6f 75 73 65 44 6f 77 6e 22 2c 75 29 7d 7d 2c 69 7d 29 2c 73 28 69 2c 22 45 78 Data Ascii: WithInit.annotations=[l],o.collectionsWithUpdate.push("annotations"),o.drawAnnotations=c,o.removeAnnotation=p,o.initAnnotation=function(i){let s=new(t.types[i.type]\|\|t)(this,i);return this.annotations.push(s),s},r(n,"onContainerMouseDown",u)}},i}),s(i,"Ex
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 3a 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 69 3d 3e 7b 74 2e 6f 6e 4d 6f 75 73 65 44 6f 77 6e 28 69 29 7d 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 7d 3b 69 66 28 69 28 74 68 69 73 2e 67 72 61 70 68 69 63 2e 65 6c 65 6d 65 6e 74 29 2c 28 74 2e 6c 61 62 65 6c 73 7c 7c 5b 5d 29 2e 66 6f 72 45 61 63 68 28 74 3d 3e 7b 74 2e 6f 70 74 69 6f 6e 73 2e 75 73 65 48 54 4d 4c 26 26 74 2e 67 72 61 70 68 69 63 2e 74 65 78 74 26 26 69 28 74 2e 67 72 61 70 68 69 63 2e 74 65 78 74 2e 65 6c 65 6d 65 6e 74 29 7d 29 2c 61 28 74 2e 6f 70 74 69 6f 6e 73 2e 65 76 65 6e 74 73 2c 28 69 2c 73 29 3d 3e 7b 6c 65 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 63 6c 69 63 6b 22 3d 3d 3d 73 26 26 74 2e 63 61 6e 63 65 6c 43 6c 69 63 6b 7c 7c 69 2e 63 61 6c 6c 28 74 2c 74 2e 63 68 61 72 Data Ascii: :"mousedown",i=>{t.onMouseDown(i)},{passive:!1})};if(i(this.graphic.element),(t.labels\|\|[]).forEach(t=>{t.options.useHTML&&t.graphic.text&&i(t.graphic.text.element)}),a(t.options.events,(i,s)=>{let e=function(e){"click"===s&&t.cancelClick\|\|i.call(t,t.char
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 6c 6f 74 4f 6e 6c 79 3a 21 30 7d 29 29 7b 6c 65 74 20 69 3d 74 68 69 73 2e 6d 6f 75 73 65 4d 6f 76 65 54 6f 54 72 61 6e 73 6c 61 74 69 6f 6e 28 74 29 3b 22 78 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 72 61 67 67 61 62 6c 65 26 26 28 69 2e 79 3d 30 29 2c 22 79 22 3d 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 72 61 67 67 61 62 6c 65 26 26 28 69 2e 78 3d 30 29 2c 74 68 69 73 2e 70 6f 69 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 74 72 61 6e 73 6c 61 74 65 28 69 2e 78 2c 69 2e 79 29 3a 28 74 68 69 73 2e 73 68 61 70 65 73 2e 66 6f 72 45 61 63 68 28 74 3d 3e 74 2e 74 72 61 6e 73 6c 61 74 65 28 69 2e 78 2c 69 2e 79 29 29 2c 74 68 69 73 2e 6c 61 62 65 6c 73 2e 66 6f 72 45 61 63 68 28 74 3d 3e 74 2e 74 72 61 6e 73 6c 61 74 65 28 69 2e 78 2c Data Ascii: lotOnly:!0})){let i=this.mouseMoveToTranslation(t);"x"===this.options.draggable&&(i.y=0),"y"===this.options.draggable&&(i.x=0),this.points.length?this.translate(i.x,i.y):(this.shapes.forEach(t=>t.translate(i.x,i.y)),this.labels.forEach(t=>t.translate(i.x,
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 6a 73 22 5d 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 6c 65 74 7b 6d 65 72 67 65 3a 73 2c 70 69 63 6b 3a 65 7d 3d 69 3b 72 65 74 75 72 6e 20 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 69 2c 73 2c 6f 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 6e 6f 6e 44 4f 4d 45 76 65 6e 74 73 3d 5b 22 64 72 61 67 22 5d 2c 74 68 69 73 2e 63 68 61 72 74 3d 74 2c 74 68 69 73 2e 74 61 72 67 65 74 3d 69 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 73 2c 74 68 69 73 2e 69 6e 64 65 78 3d 65 28 73 2e 69 6e 64 65 78 2c 6f 29 7d 64 65 73 74 72 6f 79 28 29 7b 73 75 70 65 72 2e 64 65 73 74 72 6f 79 28 29 2c 74 68 69 73 2e 67 72 61 70 68 69 63 26 26 28 74 68 69 73 2e 67 72 61 70 68 69 63 3d 74 68 69 73 2e 67 72 61 70 68 69 63 2e 64 Data Ascii: js"]],function(t,i){let{merge:s,pick:e}=i;return class extends t{constructor(t,i,s,o){super(),this.nonDOMEvents=["drag"],this.chart=t,this.target=i,this.options=s,this.index=e(s.index,o)}destroy(){super.destroy(),this.graphic&&(this.graphic=this.graphic.d
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 2c 7b 78 3a 6f 2c 79 3a 6e 7d 7d 73 74 61 74 69 63 20 70 6f 69 6e 74 54 6f 4f 70 74 69 6f 6e 73 28 74 29 7b 72 65 74 75 72 6e 7b 78 3a 74 2e 78 2c 79 3a 74 2e 79 2c 78 41 78 69 73 3a 74 2e 73 65 72 69 65 73 2e 78 41 78 69 73 2c 79 41 78 69 73 3a 74 2e 73 65 72 69 65 73 2e 79 41 78 69 73 7d 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 69 2c 65 29 7b 74 68 69 73 2e 6d 6f 63 6b 3d 21 30 2c 74 68 69 73 2e 73 65 72 69 65 73 3d 7b 76 69 73 69 62 6c 65 3a 21 30 2c 63 68 61 72 74 3a 74 2c 67 65 74 50 6c 6f 74 42 6f 78 3a 73 2e 67 65 74 50 6c 6f 74 42 6f 78 7d 2c 74 68 69 73 2e 74 61 72 67 65 74 3d 69 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 65 2c 74 68 69 73 2e 61 70 70 6c 79 4f 70 74 69 6f 6e 73 28 74 68 69 73 2e 67 65 74 4f 70 74 69 6f 6e 73 Data Ascii: ,{x:o,y:n}}static pointToOptions(t){return{x:t.x,y:t.y,xAxis:t.series.xAxis,yAxis:t.series.yAxis}}constructor(t,i,e){this.mock=!0,this.series={visible:!0,chart:t,getPlotBox:s.getPlotBox},this.target=i\|\|null,this.options=e,this.applyOptions(this.getOptions
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 61 3d 74 68 69 73 2e 70 6c 6f 74 59 2d 69 3b 74 68 69 73 2e 70 6c 6f 74 58 3d 6e 2a 65 2d 61 2a 6f 2b 74 2c 74 68 69 73 2e 70 6c 6f 74 59 3d 6e 2a 6f 2b 61 2a 65 2b 69 2c 74 68 69 73 2e 72 65 66 72 65 73 68 4f 70 74 69 6f 6e 73 28 29 7d 7d 73 63 61 6c 65 28 74 2c 69 2c 73 2c 65 29 7b 69 66 28 21 74 68 69 73 2e 68 61 73 44 79 6e 61 6d 69 63 4f 70 74 69 6f 6e 73 28 29 29 7b 6c 65 74 20 6f 3d 74 68 69 73 2e 70 6c 6f 74 58 2a 73 2c 6e 3d 74 68 69 73 2e 70 6c 6f 74 59 2a 65 3b 74 68 69 73 2e 70 6c 6f 74 58 3d 28 31 2d 73 29 2a 74 2b 6f 2c 74 68 69 73 2e 70 6c 6f 74 59 3d 28 31 2d 65 29 2a 69 2b 6e 2c 74 68 69 73 2e 72 65 66 72 65 73 68 4f 70 74 69 6f 6e 73 28 29 7d 7d 73 65 74 41 78 69 73 28 74 2c 69 29 7b 6c 65 74 20 73 3d 69 2b 22 41 78 69 73 22 2c 6f 3d 74 Data Ascii: a=this.plotY-i;this.plotX=ne-ao+t,this.plotY=no+ae+i,this.refreshOptions()}}scale(t,i,s,e){if(!this.hasDynamicOptions()){let o=this.plotXs,n=this.plotYe;this.plotX=(1-s)t+o,this.plotY=(1-e)i+n,this.refreshOptions()}}setAxis(t,i){let s=i+"Axis",o=t
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 69 6e 74 73 2e 66 6f 72 45 61 63 68 28 74 3d 3e 74 2e 64 65 73 74 72 6f 79 28 29 29 2c 74 68 69 73 2e 63 68 61 72 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 50 6f 69 6e 74 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 70 6f 69 6e 74 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 61 6e 6e 6f 74 61 74 69 6f 6e 26 26 28 74 68 69 73 2e 61 6e 6e 6f 74 61 74 69 6f 6e 3d 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3b 72 65 74 75 72 6e 20 74 2e 70 6f 69 6e 74 73 7c 7c 74 2e 70 6f 69 6e 74 26 26 73 2e 73 70 6c 61 74 28 74 2e 70 6f 69 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 6c 65 74 20 74 2c 69 3b 6c 65 74 20 73 3d 74 68 69 73 2e 67 65 74 50 Data Ascii: ints.forEach(t=>t.destroy()),this.chart=null,this.controlPoints=null,this.points=null,this.options=null,this.annotation&&(this.annotation=null)}function r(){let t=this.options;return t.points\|\|t.point&&s.splat(t.point)}function l(){let t,i;let s=this.getP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50027	34.111.113.62	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:48 UTC	813	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=6f67744e-1091-4048-adba-e024cc18f2d2&ttd_puid=c9519294-632a-4d82-bad6-7d3fcc8fdd1e%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714156365504; TapAd_DID=c9519294-632a-4d82-bad6-7d3fcc8fdd1e; TapAd_3WAY_SYNCS=
2024-04-26 18:32:49 UTC	1101	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:49 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714156365504;Expires=Tue, 25 Jun 2024 18:32:49 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=c9519294-632a-4d82-bad6-7d3fcc8fdd1e;Expires=Tue, 25 Jun 2024 18:32:49 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2826;Expires=Tue, 25 Jun 2024 18:32:49 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:32:49 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50024	141.94.171.214	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:49 UTC	719	OUT	GET /?partner=147&mapped=6f67744e-1091-4048-adba-e024cc18f2d2&icm&gdpr=0&gdpr_consent=&cver HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=293f006c26e11ff7; done_redirects147=1
2024-04-26 18:32:49 UTC	572	IN	HTTP/1.1 302 Found set-cookie: cookie=293f006c26e11ff7; Max-Age=31536000; Expires=Sat, 26 Apr 2025 18:32:49 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects104=1; Max-Age=86400; Expires=Sat, 27 Apr 2024 18:32:49 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=293f006c26e11ff7/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50031	44.215.14.95	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:49 UTC	695	OUT	GET /s/35759?bidder_id=44489&bidder_uuid=6f67744e-1091-4048-adba-e024cc18f2d2 HTTP/1.1 Host: i6.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=33b4c238-2b6d-4e4d-ad3b-afd3033d027c
2024-04-26 18:32:49 UTC	226	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:49 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50030	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:49 UTC	805	OUT	GET /app/v2/js/append-asset-page-schema-offers.min.js?id=71732fec015742c40848be16858be73b HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:49 UTC	796	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:49 GMT Content-Type: text/javascript Content-Length: 10436 Connection: close Last-Modified: Tue, 05 Mar 2024 12:12:31 GMT ETag: "71732fec015742c40848be16858be73b" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=15552000 x-amz-version-id: VE4Ohk7DoRan8Skj1c6DVp7m0FOwQuSC X-Cache: Hit from cloudfront Via: 1.1 c8ee9137ed6341821e410f1ccbd20d4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: p4LvVU0i5rNu6Jc532Ug4NNHkDurOeUyHc-vfs-QEQZ_K0zIFTKMZA== Age: 358993 CF-Cache-Status: HIT Expires: Wed, 23 Oct 2024 18:32:49 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a85b9bcfb3e5-MIA
2024-04-26 18:32:49 UTC	573	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 65 6e 64 2d 61 73 73 65 74 2d 70 61 67 65 2d 73 63 68 65 6d 61 2d 6f 66 66 65 72 73 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 72 65 74 75 72 6e 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d Data Ascii: /! For license information please see append-asset-page-schema-offers.min.js.LICENSE.txt /(()=>{function t(r){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Sym
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 63 49 74 65 72 61 74 6f 72 22 2c 6c 3d 63 2e 74 6f 53 74 72 69 6e 67 54 61 67 7c 7c 22 40 40 74 6f 53 74 72 69 6e 67 54 61 67 22 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 72 2c 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 2c 74 5b 72 5d 7d 74 72 79 7b 73 28 7b 7d 2c 22 22 29 7d 63 61 74 63 68 28 65 29 7b 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 72 65 74 75 72 6e 20 74 5b 72 5d 3d 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 2c 72 2c 65 2c 6e 29 7b 76 61 72 20 6f 3d 72 26 26 72 2e 70 72 6f 74 6f 74 79 70 65 20 69 6e 73 74 61 6e Data Ascii: cIterator",l=c.toStringTag\|\|"@@toStringTag";function s(t,r,e){return Object.defineProperty(t,r,{value:e,enumerable:!0,configurable:!0,writable:!0}),t[r]}try{s({},"")}catch(e){s=function(t,r,e){return t[r]=e}}function h(t,r,e,n){var o=r&&r.prototype instan
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 6e 65 77 20 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 69 66 28 6f 3d 3d 3d 6d 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 69 29 74 68 72 6f 77 20 61 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 65 2c 64 6f 6e 65 3a 21 30 7d 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 61 3b 3b 29 7b 76 61 72 20 63 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 63 29 7b 76 61 72 20 75 3d 4e 28 63 2c 6e 29 3b 69 66 28 75 29 7b 69 66 28 75 3d 3d 3d 67 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 75 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d Data Ascii: new Error("Generator is already running");if(o===m){if("throw"===i)throw a;return{value:e,done:!0}}for(n.method=i,n.arg=a;;){var c=n.delegate;if(c){var u=N(c,n);if(u){if(u===g)continue;return u}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 69 65 73 3d 5b 7b 74 72 79 4c 6f 63 3a 22 72 6f 6f 74 22 7d 5d 2c 74 2e 66 6f 72 45 61 63 68 28 6b 2c 74 68 69 73 29 2c 74 68 69 73 2e 72 65 73 65 74 28 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 47 28 72 29 7b 69 66 28 72 7c 7c 22 22 3d 3d 3d 72 29 7b 76 61 72 20 6e 3d 72 5b 75 5d 3b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 72 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 6e 65 78 74 29 72 65 74 75 72 6e 20 72 3b 69 66 28 21 69 73 4e 61 4e 28 72 2e 6c 65 6e 67 74 68 29 29 7b 76 61 72 20 6f 3d 2d 31 2c 61 3d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 66 6f 72 28 3b 2b 2b 6f 3c 72 2e 6c 65 6e 67 74 68 3b 29 69 66 28 69 2e 63 61 6c 6c 28 72 2c 6f 29 29 72 65 74 75 72 6e 20 74 2e 76 61 6c 75 65 3d 72 5b 6f 5d 2c 74 2e Data Ascii: ies=[{tryLoc:"root"}],t.forEach(k,this),this.reset(!0)}function G(r){if(r\|\|""===r){var n=r[u];if(n)return n.call(r);if("function"==typeof r.next)return r;if(!isNaN(r.length)){var o=-1,a=function t(){for(;++o<r.length;)if(i.call(r,o))return t.value=r[o],t.
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 74 7d 72 65 74 75 72 6e 20 74 2e 64 6f 6e 65 3d 21 30 2c 74 7d 7d 2c 6e 2e 76 61 6c 75 65 73 3d 47 2c 41 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 41 2c 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3d 30 2c 74 68 69 73 2e 6e 65 78 74 3d 30 2c 74 68 69 73 2e 73 65 6e 74 3d 74 68 69 73 2e 5f 73 65 6e 74 3d 65 2c 74 68 69 73 2e 64 6f 6e 65 3d 21 31 2c 74 68 69 73 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 74 68 69 73 2e 61 72 67 3d 65 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 66 6f 72 45 61 63 68 28 54 29 2c 21 74 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 68 69 73 29 22 74 22 3d 3d 3d 72 2e 63 68 61 72 41 74 28 30 Data Ascii: t}return t.done=!0,t}},n.values=G,A.prototype={constructor:A,reset:function(t){if(this.prev=0,this.next=0,this.sent=this._sent=e,this.done=!1,this.delegate=null,this.method="next",this.arg=e,this.tryEntries.forEach(T),!t)for(var r in this)"t"===r.charAt(0
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 6f 64 3d 22 6e 65 78 74 22 2c 74 68 69 73 2e 6e 65 78 74 3d 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 2c 67 29 3a 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 28 61 29 7d 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 74 2e 74 79 70 65 29 74 68 72 6f 77 20 74 2e 61 72 67 3b 72 65 74 75 72 6e 22 62 72 65 61 6b 22 3d 3d 3d 74 2e 74 79 70 65 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 74 68 69 73 2e 6e 65 78 74 3d 74 2e 61 72 67 3a 22 72 65 74 75 72 6e 22 3d 3d 3d 74 2e 74 79 70 65 3f 28 74 68 69 73 2e 72 76 61 6c 3d 74 68 69 73 2e 61 72 67 3d 74 2e 61 72 67 2c 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 74 68 69 73 2e 6e 65 78 74 3d 22 65 6e 64 22 29 3a 22 6e 6f 72 Data Ascii: od="next",this.next=o.finallyLoc,g):this.complete(a)},complete:function(t,r){if("throw"===t.type)throw t.arg;return"break"===t.type\|\|"continue"===t.type?this.next=t.arg:"return"===t.type?(this.rval=this.arg=t.arg,this.method="return",this.next="end"):"nor
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 74 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 22 4f 62 6a 65 63 74 22 3d 3d 3d 65 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 65 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 3b 69 66 28 22 4d 61 70 22 3d 3d 3d 65 7c 7c 22 53 65 74 22 3d 3d 3d 65 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 3b 69 66 28 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 65 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 65 29 29 72 65 74 75 72 6e 20 6e 28 74 2c 72 29 7d 28 74 2c 72 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 Data Ascii: t).slice(8,-1);"Object"===e&&t.constructor&&(e=t.constructor.name);if("Map"===e\|\|"Set"===e)return Array.from(t);if("Arguments"===e\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(e))return n(t,r)}(t,r)\|\|function(){throw new TypeError("Invalid attempt to
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 28 65 29 3f 65 3a 53 74 72 69 6e 67 28 65 29 7d 28 65 29 29 69 6e 20 72 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 65 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 72 5b 65 5d 3d 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 72 2c 65 2c 6e 2c 6f 2c 69 2c 61 29 7b 74 72 79 7b 76 61 72 20 63 3d 74 5b 69 5d 28 61 29 2c 75 3d 63 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 65 28 74 29 7d 63 2e 64 6f 6e 65 3f 72 28 75 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 6e Data Ascii: ring");return"symbol"===t(e)?e:String(e)}(e))in r?Object.defineProperty(r,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):r[e]=n,r}function c(t,r,e,n,o,i,a){try{var c=t[i](a),u=c.value}catch(t){return void e(t)}c.done?r(u):Promise.resolve(u).then(n
2024-04-26 18:32:49 UTC	280	IN	Data Raw: 65 6e 67 74 68 29 7b 74 2e 6e 65 78 74 3d 39 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 22 4e 6f 20 61 73 73 65 74 20 70 72 69 63 65 73 22 29 29 3b 63 61 73 65 20 39 3a 72 65 74 75 72 6e 20 74 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 69 29 3b 63 61 73 65 20 31 30 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 74 2e 73 74 6f 70 28 29 7d 7d 29 2c 74 29 7d 29 29 29 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 28 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 67 65 74 41 74 74 72 69 62 75 Data Ascii: ength){t.next=9;break}return t.abrupt("return",Promise.reject("No asset prices"));case 9:return t.abrupt("return",i);case 10:case"end":return t.stop()}}),t)})))).apply(this,arguments)}!function(t){f.apply(this,arguments)}(document.currentScript.getAttribu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50028	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:49 UTC	1368	OUT	POST /sftouch?userId=k3oa752910bk686846683x2y8sbun072&z=6118780&p_rid=b067492a-89aa-4505-910a-665227fefb96&p_src=sf&branchId=0&rb=47dhdUQtg2vkCkSdx_l-KoKnTHCz7Oy3PWtNRvjfNW0JgzE6GRK2Xcf98EkfplcCp7Oh0AkZANKroxkZaL8M38vM-_EjcPqbkicFa3BrPPAUE4J9TTcHPdJ3f21LG73Vqn7waKc7hHA_KrA0OnIU0UdHf7BruM0WNMBPIOkdKWnRGfRuifCkccX7fQywg7lzezs3yIPbSnd2jquiXtZ_Yvg1pm8XhZeKOx1aqOpwbdFZS5kTHkT38W7HHz7AAf1IqSjarqqCsFMYddMGblS2F5hcE-Y8VxY6K2-W88bkGw5lJFGQLo8bxA== HTTP/1.1 Host: eephaush.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Origin: https://eephaush.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://eephaush.com/4/6118780/?var=4724866&btz=Europe/Zurich&bto=-120&bar=x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156368
2024-04-26 18:32:49 UTC	869	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:49 GMT Content-Type: text/plain Content-Length: 2 Connection: close X-Trace-Id: 6f84b3a74b3614723c8fe498c52b3c84 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://eephaush.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:49 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50033	104.18.33.110	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:49 UTC	541	OUT	GET /js/apis/geoip2/v2.1/geoip2.js HTTP/1.1 Host: geoip-js.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:49 UTC	452	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:49 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 3492 Connection: close CF-Cache-Status: HIT Age: 1596 Last-Modified: Fri, 26 Apr 2024 18:06:13 GMT Expires: Fri, 26 Apr 2024 22:32:49 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87a8a85d9c6667c6-MIA
2024-04-26 18:32:49 UTC	917	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 67 65 6f 69 70 32 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6c 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 72 2c 73 2c 6e 29 7b 74 68 69 73 2e 73 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 3d 65 2c 74 68 69 73 2e 65 72 72 6f 72 43 61 6c 6c 62 61 63 6b 3d 72 2c 74 68 69 73 2e 74 79 70 65 3d 6e 7d 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 53 75 63 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 73 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 26 26 74 79 70 65 6f 66 20 74 68 69 73 2e 73 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 68 69 73 2e 73 75 63 63 65 73 73 43 61 6c 6c 62 61 63 Data Ascii: (function(){window.geoip2=function(){"use strict";var l={};function a(e,r,s,n){this.successCallback=e,this.errorCallback=r,this.type=n}a.prototype.returnSuccess=function(e){this.successCallback&&typeof this.successCallback=="function"&&this.successCallbac
2024-04-26 18:32:49 UTC	1369	IN	Data Raw: 5b 22 73 75 62 64 69 76 69 73 69 6f 6e 73 22 2c 22 41 72 72 61 79 22 2c 30 2c 22 4f 62 6a 65 63 74 22 2c 22 6e 61 6d 65 73 22 2c 22 4f 62 6a 65 63 74 22 5d 2c 5b 22 74 72 61 69 74 73 22 2c 22 4f 62 6a 65 63 74 22 5d 5d 7d 3b 72 65 74 75 72 6e 20 61 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 49 6e 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 74 68 69 73 2e 74 79 70 65 3d 3d 3d 22 63 6f 75 6e 74 72 79 22 3f 68 2e 63 6f 75 6e 74 72 79 3a 68 2e 63 69 74 79 2c 73 3d 30 3b 73 3c 72 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 66 6f 72 28 76 61 72 20 6e 3d 72 5b 73 5d 2c 6f 3d 65 2c 74 3d 30 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 3d 32 29 7b 76 61 72 20 63 3d 6e 5b 74 5d 3b 6f 5b 63 5d 7c 7c 28 6f 5b 63 5d 3d 6e 5b 74 2b 31 Data Ascii: ["subdivisions","Array",0,"Object","names","Object"],["traits","Object"]]};return a.prototype.fillInObject=function(e){for(var r=this.type==="country"?h.country:h.city,s=0;s<r.length;s++)for(var n=r[s],o=e,t=0;t<n.length;t+=2){var c=n[t];o[c]\|\|(o[c]=n[t+1
2024-04-26 18:32:49 UTC	1206	IN	Data Raw: 32 30 30 29 6e 2e 72 65 74 75 72 6e 53 75 63 63 65 73 73 28 74 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 3b 65 6c 73 65 7b 76 61 72 20 64 3d 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 29 3f 74 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3a 74 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 2c 75 3b 69 66 28 2f 6a 73 6f 6e 2f 2e 74 65 73 74 28 64 29 26 26 74 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2e 6c 65 6e 67 74 68 29 74 72 79 7b 75 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 7d 63 61 74 63 68 28 66 29 7b 75 3d 7b 63 6f 64 65 3a 22 48 54 54 50 5f 45 52 52 4f 52 22 2c 65 72 72 6f 72 3a 22 54 68 65 20 73 65 72 76 65 72 20 72 65 Data Ascii: 200)n.returnSuccess(t.responseText);else{var d=t.hasOwnProperty("contentType")?t.contentType:t.getResponseHeader("Content-Type"),u;if(/json/.test(d)&&t.responseText.length)try{u=JSON.parse(t.responseText)}catch(f){u={code:"HTTP_ERROR",error:"The server re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50035	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:49 UTC	634	OUT	GET /app/v2/js/dotcom-components/dotcom-components.esm.js?id=418046627d829dcf7600c6e5a8714272 HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bitpanda.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:50 UTC	1099	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:50 GMT Content-Type: text/javascript Content-Length: 475 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT, POST Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Tue, 05 Mar 2024 12:12:31 GMT ETag: "418046627d829dcf7600c6e5a8714272" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=15552000 x-amz-version-id: Wl6IvmbtIWElqQqz39oz4gcVXaZ_1b_u X-Cache: Hit from cloudfront Via: 1.1 d1c64d10e2bd86b43a04bfb63e7766c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: ldkRhlyK1kcETKnEvfC9iFuk9OUK8mwuLTwLK2FGijauGQPtf81xmg== Age: 359076 CF-Cache-Status: HIT Expires: Wed, 23 Oct 2024 18:32:50 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: _cfuvid=lmq.qpDw5DLtkBhZAt5i9Ecuq3nWUJeQsvFWhwCOXfI-1714156370013-0.0.1.1-604800000; path=/; domain=.bitpanda.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a8606f0f67cf-MIA
2024-04-26 18:32:50 UTC	270	IN	Data Raw: 69 6d 70 6f 72 74 7b 70 20 61 73 20 65 2c 62 20 61 73 20 61 7d 66 72 6f 6d 22 2e 2f 70 2d 30 36 66 38 38 61 63 63 2e 6a 73 22 3b 65 28 29 2e 74 68 65 6e 28 65 3d 3e 61 28 5b 5b 22 70 2d 64 61 36 38 64 30 61 32 22 2c 5b 5b 30 2c 22 62 70 63 2d 66 65 65 2d 6c 65 76 65 6c 73 22 2c 7b 6c 61 6e 67 75 61 67 65 3a 5b 31 5d 2c 68 65 61 64 65 72 73 3a 5b 33 32 5d 7d 5d 2c 5b 30 2c 22 62 70 63 2d 6d 61 72 6b 65 74 73 22 2c 7b 6c 61 6e 67 75 61 67 65 3a 5b 31 5d 2c 68 65 61 64 65 72 73 3a 5b 33 32 5d 7d 5d 2c 5b 30 2c 22 62 70 63 2d 73 63 6f 72 65 62 6f 61 72 64 2d 74 61 62 6c 65 22 2c 7b 6c 61 6e 67 75 61 67 65 3a 5b 31 5d 2c 66 69 6c 74 65 72 5a 65 72 6f 73 3a 5b 34 2c 22 66 69 6c 74 65 72 2d 7a 65 72 6f 73 22 5d 2c 72 61 6e 6b 73 4e 75 6d 62 65 72 3a 5b 32 2c 22 Data Ascii: import{p as e,b as a}from"./p-06f88acc.js";e().then(e=>a([["p-da68d0a2",[[0,"bpc-fee-levels",{language:[1],headers:[32]}],[0,"bpc-markets",{language:[1],headers:[32]}],[0,"bpc-scoreboard-table",{language:[1],filterZeros:[4,"filter-zeros"],ranksNumber:[2,"
2024-04-26 18:32:50 UTC	205	IN	Data Raw: 63 6f 6d 70 65 74 69 74 69 6f 6e 49 64 3a 5b 32 2c 22 63 6f 6d 70 65 74 69 74 69 6f 6e 2d 69 64 22 5d 2c 68 65 61 64 65 72 73 3a 5b 33 32 5d 7d 5d 2c 5b 30 2c 22 62 70 63 2d 64 61 74 61 2d 74 61 62 6c 65 22 2c 7b 68 65 61 64 65 72 73 3a 5b 38 5d 2c 6c 61 6e 67 75 61 67 65 3a 5b 31 5d 2c 63 6c 61 73 73 65 73 3a 5b 31 5d 2c 67 65 74 44 61 74 61 3a 5b 31 36 5d 2c 67 65 74 48 65 61 64 65 72 73 3a 5b 31 36 5d 2c 74 72 61 6e 73 6c 61 74 65 64 4b 65 79 73 3a 5b 33 32 5d 2c 64 61 74 61 3a 5b 33 32 5d 2c 65 72 72 6f 72 3a 5b 33 32 5d 7d 5d 2c 5b 30 2c 22 62 70 63 2d 73 70 69 6e 6e 65 72 22 5d 5d 5d 5d 2c 65 29 29 3b Data Ascii: competitionId:[2,"competition-id"],headers:[32]}],[0,"bpc-data-table",{headers:[8],language:[1],classes:[1],getData:[16],getHeaders:[16],translatedKeys:[32],data:[32],error:[32]}],[0,"bpc-spinner"]]]],e));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50034	68.67.181.211	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:49 UTC	936	OUT	GET /getuid?https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fan%2F%24UID%3Fch%3D662bf34d3757330001701a4c%26chc%3Dst%257Cim%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=-lBTO87oE1q2j5ZgQrZoc7orAwxvjOJuHVqHh1IudHjfYH1iAps-CU7yEFaCrGbChgtgds1o0wDPMQKlmeD3MbgxClGbwDhR2tcv_pRCcWc.; receive-cookie-deprecation=1; uuid2=6576787287013452325
2024-04-26 18:32:50 UTC	1517	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 26 Apr 2024 18:32:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://map.go.affec.tv/map/an/6576787287013452325?ch=662bf34d3757330001701a4c&chc=st%7Cim&redirect_url=&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 76efeed3-6559-4a5c-b111-a46d42c9b85c Set-Cookie: XANDR_PANID=-lBTO87oE1q2j5ZgQrZoc7orAwxvjOJuHVqHh1IudHjfYH1iAps-CU7yEFaCrGbChgtgds1o0wDPMQKlmeD3MbgxClGbwDhR2tcv_pRCcWc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:32:50 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 14-Apr-2034 18:32:50 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6576787287013452325; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:32:50 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.220; 102.129.152.220; 584.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50036	139.45.195.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:50 UTC	720	OUT	POST /img.gif?f=merge&userId=k3oa752910bk686846683x2y8sbun072&z=6118780&p_rid=b067492a-89aa-4505-910a-665227fefb96&p_src=sf HTTP/1.1 Host: my.rtmark.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://eephaush.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://eephaush.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ID=k3oa752910bk686846683x2y8sbun072
2024-04-26 18:32:50 UTC	678	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:50 GMT Content-Type: image/gif Content-Length: 43 Connection: close Access-Control-Allow-Origin: https://eephaush.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token Access-Control-Expose-Headers: Authorization Access-Control-Allow-Credentials: true Timing-Allow-Origin: * Set-Cookie: ID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:50 GMT; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50041	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:50 UTC	462	OUT	GET /adobe?uid=06291327801249806183443003251739176557&_rand=1714156364519 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:50 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:50 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50043	35.169.4.189	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:50 UTC	1012	OUT	GET /map/an/6576787287013452325?ch=662bf34d3757330001701a4c&chc=st%7Cim&redirect_url=&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1 Host: map.go.affec.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ck=662bf34d3757330001701a4b; oo=1; pt=eyJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM2NX0sImltIjp7ImR0IjoxNzE0MTU2MzY4LCJpZCI6ImQ1ZjY0NmExLTNhOTAtNDU4NS04MWEwLTY5M2NhNGEwNmZjMCIsImxzIjoxNzE0MTU2MzY4fSwidiI6MH0=\|1714156368\|b252bcf131486c85def7d81454372c086bd8d607
2024-04-26 18:32:50 UTC	879	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 18:32:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 128 Connection: close Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=mssm115&ttd_tpi=1&gdpr=0&gdpr_consent= Set-Cookie: ck=662bf34d3757330001701a4b; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:32:50 GMT; Secure; SameSite=None Set-Cookie: oo=1; Secure; SameSite=None Set-Cookie: pt=eyJhbiI6eyJkdCI6MTcxNDE1NjM3MCwiaWQiOiI2NTc2Nzg3Mjg3MDEzNDUyMzI1IiwibHMiOjE3MTQxNTYzNzB9LCJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM2NX0sImltIjp7ImR0IjoxNzE0MTU2MzY4LCJpZCI6ImQ1ZjY0NmExLTNhOTAtNDU4NS04MWEwLTY5M2NhNGEwNmZjMCIsImxzIjoxNzE0MTU2MzY4fSwidiI6MH0=\|1714156370\|aad1f0e606ce7be488d98fd38fce45fd3c7e224b; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:32:50 GMT; Secure; SameSite=None
2024-04-26 18:32:50 UTC	128	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 6d 73 73 6d 31 31 35 26 61 6d 70 3b 74 74 64 5f 74 70 69 3d 31 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 53 65 65 20 4f 74 68 65 72 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://match.adsrvr.org/track/cmf/generic?ttd_pid=mssm115&ttd_tpi=1&gdpr=0&gdpr_consent=">See Other</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50050	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:50 UTC	518	OUT	OPTIONS /v1/assets/prices HTTP/1.1 Host: api.bitpanda.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.bitpanda.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:50 UTC	1034	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:50 GMT Content-Length: 0 Connection: close Set-Cookie: AWSALB=8upr/SfT5wMNga4/m5u3CGGMkwVlvwYNDBodAAD/dF9cMolW51h8uWZJVgPHkT2s8eSkrWY7axuNC4TyCO5NKVKWD2P15tehwmQySxYYsbDXnKAudrV4DQQKLAsg; Expires=Fri, 03 May 2024 18:32:50 GMT; Path=/ access-control-allow-origin: https://www.bitpanda.com access-control-allow-methods: GET,POST,PUT,PATCH,DELETE,OPTIONS access-control-allow-headers: content-type vary: Accept-Encoding CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: AWSALBCORS=8upr/SfT5wMNga4/m5u3CGGMkwVlvwYNDBodAAD/dF9cMolW51h8uWZJVgPHkT2s8eSkrWY7axuNC4TyCO5NKVKWD2P15tehwmQySxYYsbDXnKAudrV4DQQKLAsg; Expires=Fri, 03 May 2024 18:32:50 GMT; Path=/; SameSite=None; Secure Set-Cookie: _cfuvid=2zZu0LenldpykHZUpH.83iFLnqgG3EtG3_YaA_olhho-1714156370782-0.0.1.1-604800000; path=/; domain=.bitpanda.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a8648e2531ec-MIA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50054	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:50 UTC	861	OUT	GET /media/New%20navigation_Rebrand%203.0/Screenshot%202022-11-17%20at%2011.14.47.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:50 UTC	802	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:50 GMT Content-Type: image/png Content-Length: 69728 Connection: close Age: 20494 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=100557 ETag: "22ea5deb3345788502e2c472abc0221f" Last-Modified: Thu, 17 Nov 2022 10:16:35 GMT Via: 1.1 8a771ca27e5a3c9e06b12b7af5d25aa4.cloudfront.net (CloudFront) X-Amz-Cf-Id: 28RORM99u_2i3hAAgq_b9W4MDrBqFLAls-CLOOzFiKphJ0sAtad4yw== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: 3JqZyOeIvjCy4g47xAFH1.oWHeBebykg CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:50 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a864cc3c09b2-MIA
2024-04-26 18:32:50 UTC	567	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 01 fb 08 02 00 00 00 1b c7 c6 51 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 01 10 1a 49 44 41 54 78 da ec d6 31 0d c0 30 00 04 b1 20 28 7f b6 0d 81 db 23 bd 6c 14 3e 1f 00 00 3c 72 7e 00 00 78 44 46 01 00 08 32 0a 00 c0 38 19 05 00 20 c8 28 00 00 e3 64 14 00 80 20 a3 00 00 8c 93 51 00 00 82 8c 02 00 30 4e 46 01 00 08 32 0a 00 c0 38 19 05 00 20 c8 28 00 00 e3 64 14 00 80 20 a3 00 00 8c 93 51 00 00 82 8c 02 00 30 4e 46 01 00 08 32 0a 00 c0 38 19 05 00 20 c8 28 00 00 e3 64 14 00 80 20 a3 00 00 8c 93 51 00 00 82 8c 02 00 30 4e 46 01 00 08 32 0a 00 c0 38 19 05 00 20 c8 28 00 00 e3 64 14 00 80 20 a3 00 00 8c 93 51 00 00 82 8c 02 00 30 4e 46 01 00 08 32 0a 00 c0 38 19 05 00 20 c8 28 00 00 e3 64 14 Data Ascii: PNGIHDRQsRGBIDATx10 (#l><r~xDF28 (d Q0NF28 (d Q0NF28 (d Q0NF28 (d Q0NF28 (d
2024-04-26 18:32:50 UTC	1369	IN	Data Raw: 4e 46 01 00 08 32 0a 00 c0 38 19 05 00 20 c8 28 00 00 e3 64 14 00 80 20 a3 5c 76 ed 5e 35 b1 20 0c c0 f0 cc ba 10 d2 87 5c 46 ea 40 ea 40 88 a0 f8 83 62 6f 61 a7 8d 85 b5 7a 05 62 2f d8 28 8a 5a 28 d8 69 6d a9 82 95 85 85 88 a0 a2 07 05 7f ce cc 6c 71 c8 c2 b2 16 9b dd 4d e1 e1 7d 8a e1 bb 80 e1 e3 1d 18 00 00 00 97 23 46 01 00 00 70 05 31 0a 00 00 00 97 23 46 01 00 00 70 05 31 0a 00 00 00 97 23 46 01 00 00 70 05 31 0a 00 00 00 97 23 46 01 00 00 70 05 31 0a 00 00 00 97 fb 2e 00 00 bf 32 c6 38 83 94 52 00 00 be d2 37 01 dc 9a cb e5 e2 b4 82 52 ca e9 86 c3 e1 b0 db ed 36 9b cd 7a bd de ef f7 b6 6d 1b 63 04 f0 0f b4 d6 c6 18 e7 82 39 c3 f1 78 b4 2c 6b bb dd ee f7 fb d3 e9 a4 94 12 c0 7f 65 db b6 65 59 eb f5 da b9 66 c7 e3 d1 7c 60 a7 c1 cd 0c 70 53 94 52 ce Data Ascii: NF28 (d \v^5 \F@@boazb/(Z(imlqM}#Fp1#Fp1#Fp1#Fp1.28R7R6zmc9x,keeYf\|`pSR
2024-04-26 18:32:50 UTC	1369	IN	Data Raw: 13 62 55 29 15 ec 66 01 52 17 01 19 0d d0 7e e1 e7 d3 1f 7c f0 c1 1f fe f0 87 68 28 41 f5 67 5e 5e 1e 94 2a a5 94 cf 21 70 df d1 a5 dc 7f dc 02 12 29 8c 48 f1 01 b0 6c d9 32 50 0d 28 0a 90 57 b1 a1 53 80 00 89 40 fa e9 4f 7f 7a f7 dd 77 e3 a0 02 bd 0a 31 06 29 dd 0f 2d 60 77 f4 7b ad 35 b4 2b f4 d4 e3 15 50 e4 07 55 1e 89 7b bc a0 25 a3 41 2e b5 23 c3 a6 62 e0 85 7c fc f1 c7 7f f9 e5 97 a8 f8 c4 a1 05 fb 12 ed 09 98 59 12 b0 61 66 8c b9 f0 c2 0b b1 43 e2 1c 15 44 57 80 d4 45 40 46 03 b4 5f 58 2d 01 5b 36 f2 59 c8 4c 2d 5e bc d8 56 56 ed 69 ea d3 3e 5f 29 85 1e 67 24 fa f1 0a e8 47 79 f2 c9 27 b1 89 53 87 41 50 29 db 36 3e fa e8 a3 c3 0f 3f 1c 8b ca ca 4a 74 2b 83 25 88 88 1f 87 7b 1a 72 20 b2 48 f4 43 bb f2 f3 f5 20 a6 4a a9 40 1f ed b0 b0 cd 46 d8 76 2e Data Ascii: bU)fR~\|h(Ag^^*!p)Hl2P(WS@Ozw1)-`w{5+PU{%A.#b\|YafCDWE@F_X-[6YL-^VVi>_)g$Gy'SAP)6>?Jt+%{r HC J@Fv.
2024-04-26 18:32:50 UTC	1369	IN	Data Raw: 10 90 d1 00 ed 11 c6 98 af be fa 0a 0b 6b 80 62 77 e7 dd 91 fd ac 08 0a fb 3d b4 de 13 11 46 d8 23 f7 ca 4c 4c 04 1c 73 f4 98 92 ac bc da d9 8b 86 74 ab 1e da a3 0f 35 b4 34 7f b9 78 75 ed 73 d9 85 f9 b9 e5 25 ba 67 25 75 2f a3 08 93 63 b9 99 a4 d0 6e a5 94 da 69 ca 1e 8f ef 2a 89 aa 08 60 e6 8e ab 17 20 75 6e c3 0c 33 15 d1 8f dc aa 14 af 0d e5 1e fc 00 3d 28 08 b3 e2 e2 62 ac d1 a5 c4 71 58 92 31 66 cc 18 74 4c 23 79 0a 25 ec e3 8f 3f c6 74 1c a8 a4 1d 72 60 a3 10 e0 f3 51 f6 05 aa 8e 15 74 90 33 5f 7c f1 45 ec 4b b5 b5 b5 96 8f 32 f3 37 be 9d b1 95 61 eb 83 b3 7d ef de bd f1 b3 8d 8d 4d f3 e7 cf 27 12 66 40 2b a2 d3 4e 1a d7 52 b3 d6 ab 5d 73 f4 b0 de d5 45 22 8d f5 4b 5e 7f aa 78 46 8f ac c2 d2 48 65 6f aa ee 43 05 c5 ec 64 91 0e a5 ca 26 b6 6f 34 d1 Data Ascii: kbw=F#LLst54xus%g%u/cni*` un3=(bqX1ftL#y%?tr`Qt3_\|EK27a}M'f@+NR]sE"K^xFHeoCd&o4
2024-04-26 18:32:50 UTC	1369	IN	Data Raw: b2 7f ce a1 a3 fb 59 d6 95 9b 9b 8b e4 20 ca 24 ee b9 e7 1e f0 51 4a 53 30 f3 da b5 6b e2 ad 21 85 70 b4 b5 47 97 e4 ef fa 34 14 0a 28 72 ac 33 66 cc 20 a2 9b 6e ba e9 f4 d3 4f 47 98 81 83 fa 43 04 ec b0 59 63 0c 1e 54 4a 25 9f 9d b4 d6 f8 71 f0 0c 4a 63 48 d2 92 c9 e0 22 b2 e7 9c 2d 2e 38 a8 59 be a2 66 e9 a2 85 cf 3e f9 9b c3 46 0d 1a 39 a4 af b8 8d 9e 17 63 26 23 1e ac 06 d0 40 56 51 51 46 44 22 69 d8 47 07 35 14 63 e4 44 04 31 a0 b5 de d1 f1 03 fb 95 ad 32 c2 7b 0d a7 1d d4 7e 88 08 7e 2d 27 9c 70 02 64 75 0d 24 46 82 19 23 2d cd d1 70 46 98 94 30 0b 87 1c 22 4d e2 10 3b d4 65 c0 9a ac 2a 53 b7 64 60 5e 5e 76 38 e6 35 6f 93 da 0d e5 05 dd d7 2f 5d 42 f3 66 51 51 19 a5 17 12 5a 3b 2e f6 48 d7 37 d1 fc af 37 2f fa 7a f9 9c 39 b3 7f ff e8 a4 6b 2e 39 a3 Data Ascii: Y $QJS0k!pG4(r3f nOGCYcTJ%qJcH"-.8Yf>F9c&#@VQQFD"iG5cD12{~~-'pdu$F#-pF0"M;e*Sd`^^v85o/]BfQQZ;.H77/z9k.9
2024-04-26 18:32:50 UTC	1369	IN	Data Raw: 5d 3d 2d 58 41 5f 2d 5e fb d9 bc e5 9f 7c 35 bf c1 28 27 ab 40 3b e5 dc b9 b7 ce cc f6 14 84 17 2d 0d b1 16 2f 46 db ea 89 24 d9 d2 08 4a 21 f8 13 ee 94 86 10 43 b2 7c cd ca ef 9c 70 82 62 0a 87 42 2b 56 ac 84 a6 6e 48 58 29 16 26 a6 a8 d7 02 e7 85 ba 0d 9b 66 cd 9c 79 d9 e5 97 dd f4 3f 37 f5 ac ae f6 d5 68 7f 5c c0 82 f9 f3 99 a8 b2 a2 db f2 15 cb 6f fa 9f ff f9 d1 4d 37 ff e1 0f 7f 00 63 c8 2b c8 17 3b 84 29 1e 91 f9 b9 79 50 dc 29 1d 20 89 8b 3d 51 b8 8c a2 55 f5 b4 68 95 4c 9b bb 62 fa fc 55 08 b6 ba 46 91 70 96 93 51 9e dd b5 7f a6 13 09 b1 43 a2 1d 43 8d 5b 1b c8 78 22 9e 52 c9 aa 97 20 d0 d2 a6 8c 4f 7c aa 4e 76 a9 e0 94 8c 53 71 9f 7e 7d 97 2d 5b aa 15 27 8c 99 c8 36 11 e2 2d 86 d9 08 73 e7 ce 5f bf 7e c3 93 4f 3e 81 33 33 2a 46 e2 63 17 4c 42 a1 Data Ascii: ]=-XA_-^\|5('@;-/F$J!C\|pbB+VnHX)&fy?7h\oM7c+;)yP) =QUhLbUFpQCC[x"R O\|NvSq~}-['6-s_~O>33*FcLB
2024-04-26 18:32:50 UTC	1369	IN	Data Raw: ed ac 89 01 31 b6 4a 33 33 37 a7 aa ba 87 10 35 35 36 66 66 44 dc 68 cc 11 ca e2 50 0e e9 e6 8d 35 97 9f 72 d6 ed bf 99 94 59 da 99 84 da 18 93 63 f3 cb e8 8f c6 e2 8c 33 ce 80 5d df d4 a9 53 bb 75 eb 56 52 52 f2 66 1c e7 9d 77 de ad 3f fd e9 96 ad 5b c0 7d 49 b1 2b e4 84 88 1c bf e0 2b c5 7c 37 99 94 47 34 fb eb da 0f 66 ae 2d e9 7b b0 97 59 b4 a5 25 16 53 4e a3 b0 eb 8a 88 61 a5 44 6c 1d 96 b0 b2 ce 02 4a 11 96 46 44 c8 f3 a8 83 21 2b 92 d9 bb 67 6f 2c c0 12 c4 08 e2 44 45 d8 64 a9 7a 74 1a c5 e8 bc 1b 2e fe df 5f dd 5d a4 f2 c8 f5 48 87 48 2b 92 ed 42 37 d9 e1 41 6b 5d 53 5b f3 fd ef 7d 1f ae a5 b0 d0 ef 56 d1 0d 25 80 ef be f7 2e ae 13 4f 38 f1 b1 c7 1e 43 87 13 02 0f 75 0f a9 5e b5 26 f1 da d0 59 8b d6 7c 3c ab 76 d0 91 e7 48 43 c3 36 63 1a 8c 17 6d Data Ascii: 1J337556ffDhP5rYc3]SuVRRfw?[}I++\|7G4f-{Y%SNaDlJFD!+go,DEdzt._]HH+B7Ak]S[}V%.O8Cu^&Y\|<vHC6cm
2024-04-26 18:32:50 UTC	1369	IN	Data Raw: c8 d7 a3 b9 55 29 35 67 ce 9c 15 cb 97 33 b1 dd e8 55 a2 5a c0 27 1e 9c 52 99 7a 8e 5f 56 96 f2 d8 89 b7 a0 6a 92 64 43 00 11 8e 5f 09 22 2f 22 69 c3 07 f6 4a 79 81 f4 d2 59 bc 68 dd d6 8d 1b b6 d5 88 b8 a3 7f 3a e1 c8 ab 4e 89 14 3b 59 11 ea 9e 5f 16 26 c5 c4 89 a0 48 92 54 12 a6 ad 7e 98 21 0b 8f fc 29 1e 41 b6 94 44 26 9c 76 1a 5c 72 ef bb f7 3e 26 86 c7 e4 c2 85 0b 15 2b 88 f4 89 29 58 29 fc a1 c8 44 5a 28 64 d8 31 c6 31 2e 8b 47 24 2c 9a c4 89 7f 47 11 5b 37 76 12 b6 2a a8 58 1a aa 84 95 28 32 4a 89 66 21 26 95 3e a1 67 a2 d4 54 43 9f bd b9 e2 9e eb 67 fd fc 82 85 0f ff 78 d9 ef 7f 31 e3 8e ab b7 fc e1 7e 5a 39 9b 4c c3 90 01 fd 48 a8 20 2f 7f 4b cd 96 c1 21 ba 6b 7c d7 33 07 74 0e af 5f 51 d1 77 30 75 ae 24 15 06 5b f4 69 28 27 c1 e6 d0 e1 26 06 cf Data Ascii: U)5g3UZ'Rz_VjdC_"/"iJyYh:N;Y_&HT~!)AD&v\r>&+)X)DZ(d11.G$,G[7v*X(2Jf!&>gTCgx1~Z9LH /K!k\|3t_Qw0u$[i('&
2024-04-26 18:32:50 UTC	1369	IN	Data Raw: f5 76 3d b6 be e3 91 51 f2 88 a2 4c 0d ec 56 1e d1 ef d4 e2 eb 43 7d 0a 6a dc fa 28 79 11 18 d9 e6 55 54 71 59 e8 9b cc bd 58 29 12 41 19 1f 9c c2 5e 7e e5 65 e4 52 41 40 7b 74 ef 01 47 db 3b ee b8 c3 8b fb 85 f9 8e 4e bd 7b f7 4e 0b 6b 27 c0 ea 9c 7e d9 4d 52 f1 67 22 8e 84 fc b7 53 4a 95 5d ef 12 42 96 80 37 d6 c7 26 bf f0 e5 9b 7f 77 1b 37 16 57 55 f7 3c 64 1c e7 17 6e 9e 36 79 e9 27 6f 0e 29 8d 98 cd ab 8c 89 3a 0e 91 78 2a 2c 86 3d 6f ab 5b 5d 5c b2 62 e6 07 0d 9e f9 f1 c9 07 17 37 2c 2e 6e 5a 6b 3c 37 2b bf 53 9d 34 95 0d 18 4a 9d bb 12 6b 22 d5 06 3b b4 e2 28 e8 26 c2 ec 5f ff fa 17 9a 2f 67 cf 9e 0d 1a fa 97 bf fc 45 6b ed 3f 67 6b c3 36 2c aa 7b 56 8b 18 e2 ed 0b a4 3c 8f 59 31 b7 67 02 da d6 8e 26 c4 d2 9a 53 fa 03 4e 64 17 34 94 2c d2 60 53 ef Data Ascii: v=QLVC}j(yUTqYX)A^~eRA@{tG;N{Nk'~MRg"SJ]B7&w7WU<dn6y'o):x*,=o[]\b7,.nZk<7+S4Jk";(&_/gEk?gk6,{V<Y1g&SNd4,`S
2024-04-26 18:32:50 UTC	1369	IN	Data Raw: 78 4f 5c 26 0d 24 f6 8b 2e be 18 6c e0 d5 57 5f fd f1 4f 7e fc c5 97 5f 70 c2 66 dc 88 81 8d 03 06 e3 a4 99 5f 81 d8 3b 13 a7 7f 49 1e 93 f5 b6 0c 39 c6 ce 43 65 97 c8 23 65 c4 b8 6c 18 6b 5f 40 4d ae 74 34 e4 e8 8c 02 a2 10 89 36 ac 36 35 35 ae dc 10 eb 75 cc 69 59 df bb 8c 0a 7b 90 ce b2 d6 bf 24 bb 25 8e 42 fb ec d5 ab d7 13 4f 3c 01 67 fb e7 9f 7f fe e9 a7 9f 66 66 df de 0e f5 f1 10 e6 99 79 a7 f1 d9 9e 27 2d 7d e3 49 80 7d c9 61 37 62 32 a8 10 4d 69 04 64 34 c0 7e da c0 0d 15 77 2a a9 28 ab 5d 57 97 57 98 c7 a0 a3 ae 48 9c 8f 02 d2 ca 70 88 89 42 ba d1 6d a9 41 19 94 1b dd b2 be b6 d9 8b e5 77 2f ef 76 c8 a0 f2 d3 4f a2 d2 42 0a 29 d2 ec 6f 4b 76 45 6d ca a2 3e fa f6 ed 0b 27 94 cb 2f bf 7c f1 e2 c5 e8 48 b5 5e 74 7f fd eb 5f 31 ad 9e 99 d3 87 8f 02 Data Ascii: xO\&$.lW_O~_pf_;I9Ce#elk_@Mt46655uiY{$%BO<gffy'-}I}a7b2Mid4~w*(]WWHpBmAw/vOB)oKvEm>'/\|H^t_1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50047	107.20.88.0	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:50 UTC	691	OUT	GET /merge?pid=8050&3pid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&location=https%3A%2F%2Fsync.sharethis.com%2Fsovrn%3Fuid%3D%5BSOVRNID%5D HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:50 UTC	605	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:50 GMT Content-Length: 0 Connection: close Set-Cookie: ljt_reader=Ijp4ARZHzrcLtCmtRkicHZbu; Path=/; Domain=.lijit.com; Expires=Sat, 26-Apr-2025 18:32:50 GMT; Max-Age=31536000;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Location: https://ce.lijit.com/merge?pid=8050&3pid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&location=https%3A%2F%2Fsync.sharethis.com%2Fsovrn%3Fuid%3D%5BSOVRNID%5D&dnr=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50052	44.215.14.95	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:50 UTC	460	OUT	GET /s/35759?bidder_id=44489&bidder_uuid=6f67744e-1091-4048-adba-e024cc18f2d2 HTTP/1.1 Host: i6.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=33b4c238-2b6d-4e4d-ad3b-afd3033d027c
2024-04-26 18:32:50 UTC	226	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:50 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 18:32:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50038	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:50 UTC	1324	OUT	POST /?z=6118780&syncedCookie=false&rhd=false HTTP/1.1 Host: eephaush.com Connection: keep-alive Content-Length: 862 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 Origin: https://eephaush.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://eephaush.com/afu.php?zoneid=6118780&var=6118780&rid=33-IJ2mCiw9DGbmF2LWarg%3D%3D&rhd=false&ab2r=0&sf=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.132 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156368
2024-04-26 18:32:50 UTC	862	OUT	Data Raw: 7a 6f 6e 65 3d 36 31 31 38 37 38 30 26 72 62 3d 34 37 64 68 64 55 51 74 67 32 76 6b 43 6b 53 64 78 5f 6c 2d 4b 6f 4b 6e 54 48 43 7a 37 4f 79 33 50 57 74 4e 52 76 6a 66 4e 57 30 4a 67 7a 45 36 47 52 4b 32 58 63 66 39 38 45 6b 66 70 6c 63 43 70 37 4f 68 30 41 6b 5a 41 4e 4b 72 6f 78 6b 5a 61 4c 38 4d 33 38 76 4d 2d 5f 45 6a 63 50 71 62 6b 69 63 46 61 33 42 72 50 50 41 55 45 34 4a 39 54 54 63 48 50 64 4a 33 66 32 31 4c 47 37 33 56 71 6e 37 77 61 4b 63 37 68 48 41 5f 4b 72 41 30 4f 6e 49 55 30 55 64 48 66 37 42 72 75 4d 30 57 4e 4d 42 50 49 4f 6b 64 4b 57 6e 52 47 66 52 75 69 66 43 6b 63 63 58 37 66 51 79 77 67 37 6c 7a 65 7a 73 33 79 49 50 62 53 6e 64 32 6a 71 75 69 58 74 5a 5f 59 76 67 31 70 6d 38 58 68 5a 65 4b 4f 78 31 61 71 4f 70 77 62 64 46 5a 53 35 6b Data Ascii: zone=6118780&rb=47dhdUQtg2vkCkSdx_l-KoKnTHCz7Oy3PWtNRvjfNW0JgzE6GRK2Xcf98EkfplcCp7Oh0AkZANKroxkZaL8M38vM-_EjcPqbkicFa3BrPPAUE4J9TTcHPdJ3f21LG73Vqn7waKc7hHA_KrA0OnIU0UdHf7BruM0WNMBPIOkdKWnRGfRuifCkccX7fQywg7lzezs3yIPbSnd2jquiXtZ_Yvg1pm8XhZeKOx1aqOpwbdFZS5k
2024-04-26 18:32:51 UTC	1519	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 26 Apr 2024 18:32:51 GMT Content-Length: 0 Connection: close X-Trace-Id: 7997a9244ef685f10208ce3ee5afc449 Link: <https://starpassing.com>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Referrer-Policy: no-referrer Location: https://starpassing.com/DDBxdb?cost=0.000700&currency=usd&external_id=807792968760304233&creative_id=19799038&ad_campaign_id=7728685&source=6118780&sub_id_1=windows&sub_id_2=chrome&sub_id_3=desktop&sub_id_4={zone_type}&sub_id_5=19799038 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://eephaush.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:50 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156368; expires=Sat, 26 Apr 2025 18:32:50 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50048	34.196.226.77	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:50 UTC	818	OUT	GET /map/c=8587/tp=CLOD/tpid=293f006c26e11ff7/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=0; _cc_id=afa9acdd318515b6d11857989cfe776c
2024-04-26 18:32:50 UTC	368	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:50 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.56.13 Location: https://pixel.onaudience.com/?partner=104&icm&cver&mapped=afa9acdd318515b6d11857989cfe776c&gdpr=0 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50037	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:50 UTC	1062	OUT	POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=b067492a-89aa-4505-910a-665227fefb96 HTTP/1.1 Host: eephaush.com Connection: keep-alive Content-Length: 2031 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Origin: https://eephaush.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://eephaush.com/4/6118780/?var=4724866&btz=Europe/Zurich&bto=-120&bar=x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156368
2024-04-26 18:32:50 UTC	2031	OUT	Data Raw: 4c 1b 52 52 1f 1c 26 1c 14 05 67 1f 1c 4b 12 03 01 05 50 0e 4c 5f 04 0a 6c 79 3c 46 55 4a 07 0b 1a 53 5b 78 2f 2d 22 2e 52 1c 29 02 58 5e 5f 53 56 44 2f 1d 19 09 59 07 59 08 4f 59 40 5b 52 1c 3d 1a 5e 5f 47 65 12 05 1d 0d 07 42 7c 0c 0f 50 02 0f 4e 43 21 41 0c 17 52 4b 5c 1f 5a 4c 49 10 45 52 08 59 3a 09 25 2f 47 42 5e 14 3d 1a 5e 5f 47 65 12 05 1d 0d 07 42 5c 1b 10 4f 04 18 47 49 5e 16 1c 1b 15 03 11 71 15 0b 1e 04 10 42 71 07 1a 17 41 42 29 04 1d 53 02 08 1e 1b 1f 14 08 14 09 4a 4f 53 00 45 5b 4d 1b 05 4c 51 5f 05 5c 5d 1b 1b 44 41 58 5e 48 5a 4d 52 14 4b 0e 51 43 50 57 53 46 18 4c 1a 5e 4e 11 0c 4b 56 41 58 59 40 4f 00 11 1b 5b 53 5e 5c 5e 16 19 15 15 03 03 1a 58 13 00 4a 4f 52 14 4b 10 41 43 50 5e 47 50 43 08 0e 15 03 03 1a 58 17 18 00 57 58 01 51 4d Data Ascii: LRR&gKPL_ly<FUJS[x/-".R)X^_SVD/YYOY@[R=^_GeB\|PNC!ARK\ZLIERY:%/GB^=^_GeB\OGI^qBqAB)SJOSE[MLQ_\]DAX^HZMRKQCPWSFL^NKVAXY@O[S^\^XJORKACP^GPCXWXQM
2024-04-26 18:32:51 UTC	552	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:51 GMT Content-Type: application/json; charset=utf-8 Content-Length: 12 Connection: close Access-Control-Allow-Origin: https://eephaush.com Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:51 UTC	12	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 7d Data Ascii: {"status":2}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50051	52.55.144.0	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:50 UTC	531	OUT	GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&referrer_pid=m4omg6v&google_gid=CAESEKQtqQHSa0ynV9jyDPDHJVI&google_cver=1 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18f1bae1d9d-42c70000010a45f6; SERVERID=17910~DM
2024-04-26 18:32:50 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=17910~DM; Domain=eyeota.net; Path=/; Expires=Fri, 26 Apr 2024 18:42:50 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Fri, 26 Apr 2024 18:32:50 GMT
2024-04-26 18:32:50 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50049	141.95.33.120	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:50 UTC	637	OUT	GET /s/121/2.gif?puid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:51 UTC	1423	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: id5=ef3cddf5-ca0f-737b-a417-e2297a9c0d9f#1714156371003#1; Max-Age=300; Expires=Fri, 26-Apr-2024 18:37:51 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://id5-sync.com/c/121/121/2/1.gif?puid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent=&us_privacy= transfer-encoding: chunked date: Fri, 26 Apr 2024 18:32:50 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-26 18:32:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50046	52.218.29.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:51 UTC	645	OUT	GET /static/cryptocoin/eth.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:52 UTC	431	IN	HTTP/1.1 200 OK x-amz-id-2: PK3D3aVQYtOMRZg2FS65mzN7PlF0h6ENgoXUwKSa8BdbbOntqFwTwZEfmw+3nJy9LVjuWghN5Zk= x-amz-request-id: JKG2XEA6B9ASWQHK Date: Fri, 26 Apr 2024 18:32:52 GMT Last-Modified: Wed, 16 Dec 2020 17:58:30 GMT ETag: "7b72368062df486eed49627bf11af312" x-amz-version-id: Ol5GsqCjFaOpn3vRYF8g1pkoFT.ro8rA Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 416 Connection: close
2024-04-26 18:32:52 UTC	416	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 39 34 39 34 39 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d 38 2e 30 35 39 20 31 38 2d 31 38 20 31 38 53 30 20 32 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#494949" fill-rule="nonzero" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50042	37.48.68.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:51 UTC	431	OUT	GET /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=7373eea3-0277-46eb-86bf-41c2eeee3baf HTTP/1.1 Host: datatechonert.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:52 UTC	454	IN	HTTP/1.1 400 Bad Request Server: nginx/1.19.10 Date: Fri, 26 Apr 2024 18:32:51 GMT Content-Type: application/json; charset=utf-8 Content-Length: 25 Connection: close Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-04-26 18:32:52 UTC	25	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 22 3a 31 30 30 31 7d Data Ascii: {"status":0,"error":1001}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50040	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:51 UTC	1367	OUT	GET /?rb=JVm5XvfSd03Ue4eZ5ZPUOND5sQExgVpnSQxm0ih1SgAbMOLCxXkPnOMu2K_xqLssoBix-OMGkGd1r_bvO80gLLZz6bqpWnFiFGKiCwCeNkZjMoMo38tLcP61-9Y8YlGKyzqs8jLRfpj1wARjKKChzvGq1qzBG1ud-dJNdj2KIW0vr7ZkJ4B8qe8aaKhXgmyPo7_hcp5M7Pa3TTUxhRjalN7BJLTD91TxwApQLEDnyrLRr7DD-RA_cjw0A3BYFANPhzLWSwhtvJAsFl70kEHCFuRJXMPlA4cOHi1fylAY6mXCRCIQzxQAmAq8-5OB1sPWXlYNbw%3D%3D&request_ab2=0&zoneid=4724866&js_build=iclick-v1.785.1-auto&jsp=1&fs=0&cf=0&sw=1280&sh=1024&wih=907&wiw=1280&ww=1280&wh=984&sah=984&wx=0&wy=0&cw=1263&wfc=3&pl=https%3A%2F%2F1movieshd.cc%2Fhome&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&btz=Europe%2FZurich&bto=-120&wgl=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&js_build=iclick-v1.785.1-auto&navlng=en-US&pnt=0&pnrc=0&bs=7373eea3-0277-46eb-86bf-41c2eeee3baf&userId=k3oa752910bk686846683x2y8sbun072&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.132&wasm=1&m=link HTTP/1.1 Host: eephaush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156368
2024-04-26 18:32:52 UTC	1182	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:52 GMT Content-Type: application/json Content-Length: 4360 Connection: close X-Trace-Id: 482b62e2353c7f40b2d5db0809680314 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:52 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156372; expires=Sat, 26 Apr 2025 18:32:52 GMT; path=/; secure; SameSite=None Set-Cookie: syncedCookie=true; expires=Fri, 03 May 2024 18:32:52 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:32:52 UTC	4360	IN	Data Raw: 7b 22 62 61 6e 6e 65 72 49 64 22 3a 32 36 39 35 39 31 37 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 31 39 35 38 37 34 39 2c 22 64 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 34 2f 36 31 31 38 37 38 30 2f 3f 76 61 72 3d 34 37 32 34 38 36 36 5c 75 30 30 32 36 62 74 7a 3d 45 75 72 6f 70 65 2f 5a 75 72 69 63 68 5c 75 30 30 32 36 62 74 6f 3d 2d 31 32 30 5c 75 30 30 32 36 62 61 72 3d 78 22 2c 22 63 61 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 63 61 74 2e 70 68 70 3f 75 73 65 72 49 64 3d 6b 33 6f 61 37 35 32 39 31 30 62 6b 36 38 36 38 34 36 36 38 33 78 32 79 38 73 62 75 6e 30 37 32 5c 75 30 30 32 36 7a 6f 6e 65 69 64 3d 34 37 32 34 38 36 36 5c 75 30 30 32 36 72 62 3d 4a 56 6d 35 Data Ascii: {"bannerId":2695917,"campaignId":1958749,"dstUrl":"https://eephaush.com/4/6118780/?var=4724866\u0026btz=Europe/Zurich\u0026bto=-120\u0026bar=x","catUrl":"https://eephaush.com/cat.php?userId=k3oa752910bk686846683x2y8sbun072\u0026zoneid=4724866\u0026rb=JVm5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50053	34.111.113.62	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:51 UTC	584	OUT	GET /idsync/ex/receive?partner_id=1830&partner_device_id=6f67744e-1091-4048-adba-e024cc18f2d2&ttd_puid=c9519294-632a-4d82-bad6-7d3fcc8fdd1e%2C%2C HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714156365504; TapAd_DID=c9519294-632a-4d82-bad6-7d3fcc8fdd1e; TapAd_3WAY_SYNCS=1!2826
2024-04-26 18:32:51 UTC	1101	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:51 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714156365504;Expires=Tue, 25 Jun 2024 18:32:51 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=c9519294-632a-4d82-bad6-7d3fcc8fdd1e;Expires=Tue, 25 Jun 2024 18:32:51 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=1!2826;Expires=Tue, 25 Jun 2024 18:32:51 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:32:51 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50045	52.218.29.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:51 UTC	646	OUT	GET /static/cryptocoin/usdt.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:52 UTC	431	IN	HTTP/1.1 200 OK x-amz-id-2: OOeDeGQFvbZglJB3hd5SSEpoGDuvZX+jmTihdLXClmUcojY49J2QGeOxiWCnQi9TiAs/H5eib4A= x-amz-request-id: 2CEVCZAZQQDFBMSC Date: Fri, 26 Apr 2024 18:32:53 GMT Last-Modified: Wed, 16 Dec 2020 17:58:30 GMT ETag: "f3865339d1dcf0b0f5b6d136798b2d8c" x-amz-version-id: z6Yxn3_pS3Ny034jPbl9k.njOsOCwmbB Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 988 Connection: close
2024-04-26 18:32:52 UTC	988	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 41 34 37 39 22 20 64 3d 22 4d 31 38 20 33 36 43 38 2e 30 35 39 20 33 36 20 30 20 32 37 2e 39 34 31 20 30 20 31 38 53 38 2e 30 35 39 20 30 20 31 38 20 30 73 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 2d 38 2e 30 35 39 20 31 38 2d 31 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#00A479" d="M18 36C8.059 36 0 27.941 0 18S8.059 0 18 0s18 8.059 18 18-8.059 18-18

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50056	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	614	OUT	POST /v1/assets/prices HTTP/1.1 Host: api.bitpanda.com Connection: keep-alive Content-Length: 19 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.bitpanda.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:52 UTC	19	OUT	Data Raw: 7b 22 61 73 73 65 74 5f 69 64 73 22 3a 5b 22 31 22 5d 7d Data Ascii: {"asset_ids":["1"]}
2024-04-26 18:32:52 UTC	1361	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:52 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=KLaFnpprjA/mEWBxNpH54ZYGb0cPzBiLjYJA5mdC1vpW6hAOt0WAhR1x+B8KTavKlkOGzS+dqQNFkxl6EDjJ2eNHQkAHJOg4GlCz+i2F/SSCVjbXUjEYpGDcoBA6; Expires=Fri, 03 May 2024 18:32:52 GMT; Path=/ cache-control: no-store, private access-control-allow-origin: https://www.bitpanda.com access-control-allow-headers: origin, content-type, access-token, x-bitpanda-academy, x-tracking-id, If-None-Match, If-Match, x-bitpanda-app-web, x-datadog-trace-id, x-datadog-parent-id, x-datadog-origin, x-datadog-sampling-priority, bp-broker-user-api-token-id strict-transport-security: max-age=15552000; includeSubDomains; preload x-frame-options: SAMEORIGIN vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers, Accept-Encoding CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Set-Cookie: AWSALBCORS=KLaFnpprjA/mEWBxNpH54ZYGb0cPzBiLjYJA5mdC1vpW6hAOt0WAhR1x+B8KTavKlkOGzS+dqQNFkxl6EDjJ2eNHQkAHJOg4GlCz+i2F/SSCVjbXUjEYpGDcoBA6; Expires=Fri, 03 May 2024 18:32:52 GMT; Path=/; SameSite=None; Secure Set-Cookie: _cfuvid=auKwHh80Gxsn72r2Tf.S3WZNk7suLul2HJia1NIKMMY-1714156372715-0.0.1.1-604800000; path=/; domain=.bitpanda.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a86edba0a65a-MIA
2024-04-26 18:32:52 UTC	8	IN	Data Raw: 31 62 39 0d 0a 7b 22 64 Data Ascii: 1b9{"d
2024-04-26 18:32:52 UTC	440	IN	Data Raw: 61 74 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 61 73 73 65 74 5f 70 72 69 63 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 70 69 64 22 3a 22 62 38 36 63 30 33 34 62 2d 65 66 65 33 2d 31 31 65 62 2d 62 35 36 66 2d 30 36 39 31 37 36 34 34 34 36 61 37 22 2c 22 70 72 69 63 65 22 3a 22 35 39 37 36 35 2e 31 35 22 2c 22 70 72 69 63 65 5f 61 6d 6f 75 6e 74 5f 63 68 61 6e 67 65 73 22 3a 7b 22 64 61 79 22 3a 22 2d 35 34 34 2e 35 39 32 34 38 32 33 35 31 38 39 30 33 39 37 33 22 2c 22 77 65 65 6b 22 3a 22 2d 35 38 32 2e 38 37 30 38 36 37 35 31 32 36 31 34 37 34 31 38 22 2c 22 6d 6f 6e 74 68 22 3a 22 2d 33 34 36 37 2e 33 34 32 30 37 39 33 32 33 35 38 37 36 35 36 37 22 2c 22 79 65 61 72 22 3a 22 33 33 30 35 31 2e 31 33 36 38 35 36 30 38 34 34 35 33 32 39 39 38 22 Data Ascii: ata":[{"type":"asset_price","attributes":{"pid":"b86c034b-efe3-11eb-b56f-0691764446a7","price":"59765.15","price_amount_changes":{"day":"-544.5924823518903973","week":"-582.8708675126147418","month":"-3467.3420793235876567","year":"33051.1368560844532998"
2024-04-26 18:32:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50058	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	828	OUT	GET /media/sponsorships/FCB/bp-fcb-partner-logo3.gif HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:52 UTC	841	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:52 GMT Content-Type: image/gif Content-Length: 119792 Connection: close Age: 20497 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=133316 ETag: "60a54db85e0e9cddc7d370327c311656" Last-Modified: Tue, 09 Jan 2024 17:56:09 GMT Via: 1.1 344d3cc6f132c3533d8a58d054dcf1da.cloudfront.net (CloudFront) X-Amz-Cf-Id: c-uaOEjjAQ2ARprWUen_bmY3EGP0F0kjfi4pXlblaCcnF1TCwk5Iiw== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-server-side-encryption: AES256 x-amz-version-id: Uj9qW5OyICn9lW6qSckRZmbrTk3NkVOj CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:52 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a86f7b8d3353-MIA
2024-04-26 18:32:52 UTC	528	IN	Data Raw: 47 49 46 38 39 61 e0 03 90 01 f6 20 00 ff ff ff 00 00 00 aa a6 a3 9f 9b 98 cb c6 c3 fe f9 f4 31 30 2f 51 4f 4d f8 f1 ec 40 3e 3c 8d 89 86 ee e9 e3 ff ff fb e8 e2 dd 85 82 80 96 92 90 0f 0f 0e dd d8 d4 6c 69 67 7a 77 74 d4 ce ca bb b7 b4 b3 ae aa 80 7d 7a 74 71 6f 64 61 5f 23 22 22 5c 5a 59 ff f7 f0 c5 c0 bb ff e8 e0 a3 9f 9c e1 dc d8 2f f5 9e 1f a0 66 15 73 4a 29 cf 85 10 51 34 0c 3c 27 07 29 1b 04 19 12 32 ff a6 f2 ec e8 c1 bc b9 f4 eb e6 57 fa b1 90 ff cf 71 fe c0 c4 ff e6 e6 ff f4 af ff d9 f4 fa ff e1 c9 c5 ff ee e8 b9 d4 ec 53 b0 85 49 64 56 52 84 6c 82 d9 a8 c7 dc f0 0a 7b c1 1d 83 c4 13 7d c2 34 8f ca 06 79 be b6 ce e9 ff c9 c6 fe 31 52 fe 2d 50 ef df cf fe 2c 4f 92 c5 e3 7b b1 da ff 7a 84 ff 5e 6e ff d9 d5 ff 4c 63 26 86 c6 ff cc cf ff 57 69 ff 37 Data Ascii: GIF89a 10/QOM@><ligzwt}ztqoda_#""\ZY/fsJ)Q4<')2WqSIdVRl{}4y1R-P,O{z^nLc&Wi7
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d Data Ascii: "Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xm
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 83 0b 1f 4e bc b8 f1 e3 c8 93 2b 5f ce bc b9 f3 e7 d0 a3 4b 9f 4e bd ba f5 eb d8 b3 6b df ce bd bb f7 ef e0 c3 8b 1f 4f be bc f9 f3 e8 d3 ab 5f cf be bd fb f7 f0 e3 cb 9f 4f bf be fd fb f8 f3 eb df cf bf bf ff ff 00 06 28 e0 80 04 16 68 e0 81 f5 2d d0 00 82 0c 96 52 80 05 0e 1c 60 00 04 01 54 68 21 04 1a 1c 30 81 05 1e 34 e8 ff a1 25 04 4c a0 81 85 24 96 68 a2 06 12 54 f0 e1 8a 8c 74 90 c1 88 26 c6 28 63 85 10 64 10 01 8b 38 06 f2 e0 01 14 ce e8 a3 8f 09 a8 98 e3 90 77 14 30 40 02 3d fe a8 a4 8f 06 08 49 e4 93 6d 34 f0 80 01 4b 56 59 65 02 1d 42 a9 65 19 11 38 00 a3 95 60 2a 09 c1 03 5b 96 e9 05 01 18 7c 19 e6 9a 4a 1e e0 97 99 70 4e 51 41 06 49 b2 69 a7 98 1d c4 a9 27 13 05 08 c0 e3 9d 80 82 79 c1 9e 84 12 c1 c1 91 75 06 aa a8 92 58 16 1a e7 02 0a 24 b0 Data Ascii: N+_KNkO_O(h-R`Th!04%L$hTt&(cd8w0@=Im4KVYeBe8`*[\|JpNQAIi'yuX$
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 66 4b a2 5c 4e 2c 87 55 8a ad 31 b8 5b a1 da fa e8 b6 71 28 ff 28 9b 76 0b 80 c4 ae 56 11 63 84 a1 70 27 91 5b 19 45 f7 5a 08 48 1f 98 96 9b 8c e6 5a c8 bc 33 ba 6f 1c c8 db 56 22 54 d7 4a a5 35 44 3d c3 54 09 ff 96 28 c1 cd 3a e5 9a c4 db 54 3b 01 58 46 e8 85 83 7b ad c4 de 0d 47 56 11 0b 5e ed 54 1d 91 01 45 61 13 56 0e e6 2f 32 1c 1c 80 0b c7 48 c0 70 a8 2f ef 0c 2c d4 44 84 d8 4a 95 b0 64 85 64 78 2d 09 87 89 c2 c4 20 b0 8b 4d 94 61 37 44 e0 4e 84 f5 b0 92 20 4c 88 1b 47 76 c4 8c 50 6f a0 70 37 b0 14 47 83 c5 43 2e 11 8c dd 40 c6 35 45 77 02 93 03 31 9b 28 b1 80 45 79 57 57 3e 06 13 90 87 21 e4 e7 da 96 0e 14 00 d4 58 21 0b a6 33 0f c2 c9 62 82 f2 22 10 60 e6 ef b2 49 c5 c7 c0 b2 9b 7d b4 65 36 b0 15 a4 44 08 e2 92 a8 8c 08 3c b7 52 12 65 56 e9 c4 d2 Data Ascii: fK\N,U1[q((vVcp'[EZHZ3oV"TJ5D=T(:T;XF{GV^TEaV/2Hp/,DJddx- Ma7DN LGvPop7GC.@5Ew1(EyWW>!X!3b"`I}e6D<ReV
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 07 60 a3 7d 17 b2 01 d1 87 8a 25 42 95 50 70 28 2d 18 26 d4 b2 04 8d a9 96 2b 08 06 18 f9 66 43 f0 8a 8a 72 32 36 29 04 2a 63 2a ec 95 87 91 58 81 18 80 8c 26 12 56 6b b0 44 91 c7 00 6e 34 23 f5 58 4e 6b 32 9b 43 d0 79 bf 72 01 1d 28 07 1d 10 95 85 89 01 f6 e3 72 56 02 96 49 60 8b 57 92 04 03 80 99 27 b2 7e 6f 30 00 a0 16 3c 45 d6 94 5d 40 00 92 39 71 12 70 97 b2 f6 84 62 60 95 60 92 89 d3 62 96 7c 62 6d be b2 6e f4 07 26 46 c0 00 65 88 2c 1a d0 96 65 b0 44 cc c6 01 bf 29 23 0b 89 04 3d 35 01 46 d0 01 dd 59 29 19 10 a0 71 20 00 d8 79 44 c4 c9 67 6b 52 99 ff 4b 10 7f 8c 72 04 d7 e9 2b f9 99 07 1e 89 2c 88 63 04 9c 49 22 9e b9 04 16 70 a0 51 25 01 9f c3 26 fa 89 9a 97 a8 7e 1a 39 29 42 33 8b 46 00 9a b8 69 43 6b 58 08 22 f9 48 f9 46 2f 1a 20 9d 5c c0 9b 4c Data Ascii: `}%BPp(-&+fCr26)cX&VkDn4#XNk2Cyr(rVI`W'~o0<E]@9qpb``b\|bmn&Fe,eD)#=5FY)q yDgkRKr+,cI"pQ%&~9)B3FiCkX"HF/ \L
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: b8 06 f0 2b 01 db 3c 04 a2 34 29 42 2c a5 03 8d ca 46 20 00 22 1b 23 2e 3d 04 aa 4c 4b 27 bd ab 6c 72 d2 7e 3a 29 09 5a 05 05 b0 a1 bf 8c 05 b5 3c 39 1b 0c 9b 6b 5c 25 cb 7c 05 03 7c 22 21 cc 2d 07 c0 2e 15 50 01 45 e5 cb 76 b2 d2 74 d0 c0 de 93 d4 4a 30 78 8e 78 a7 11 fc 05 6d f8 23 b3 1c 4e ff 94 b2 01 0b 8c 04 61 5c 63 56 40 60 0f d6 c7 50 60 01 ff aa cf 8b a2 01 33 5d 81 47 7d 58 58 c0 b3 a2 f9 c5 4a 70 01 33 9a d0 42 80 bd f5 a2 d5 7e f3 af 10 1d 05 77 fc b8 d2 03 90 1d 50 d3 26 62 c5 d4 ac 28 12 40 b1 4b 30 bb 8a 15 ba 34 1c d2 a6 a8 06 0d ca 5a 5c 40 01 d8 59 c0 47 10 d3 01 10 c5 53 c0 00 5e 6b 25 75 0d 00 8e 4d 22 90 3d 05 1d 2d 23 9c ec 04 f4 7a 27 6f ba 7a 77 fd 7b 57 90 db b9 49 d9 4a 30 d4 6b 42 d8 54 b0 d4 e7 ca 37 4f d0 00 bc 6d 22 56 2d 07 Data Ascii: +<4)B,F "#.=LK'lr~:)Z<9k\%\|\|"!-.PEvtJ0xxm#Na\cV@`P`3]G}XXJp3B~wP&b(@K04Z\@YGS^k%uM"=-#z'ozw{WIJ0kBT7Om"V-
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 64 70 8d cd 3c b3 8e 05 5d ff 84 ab a4 c4 3c bd 90 02 58 b9 88 62 15 a7 79 04 ba 4c 16 69 59 9c 66 1c 0f 16 05 44 2d 9b a5 90 2e e9 15 e2 d6 b4 d2 a1 ac e2 ee c5 2d 84 ee a6 16 08 12 32 0e 85 c7 92 08 c1 4a f6 b2 ca 51 9b 27 31 80 af 74 2c c4 79 8c 26 6c 2e c3 8b 98 56 b4 4a 47 21 52 9f 85 5e 51 51 fa 0d e9 c8 42 81 ef 10 de 77 72 d1 db 2a 5e 22 85 46 ca ba 50 4a 2b a6 0b 21 46 0a f3 de cc 48 7c fb 36 d1 30 21 73 d6 cf 80 5a 4a c5 dc 38 ce 62 37 47 b3 6e 2d 04 91 ae 2c 6c ca 01 51 d5 1c 09 2b 52 0a fe aa e8 cd f3 2f eb d8 45 65 d7 9c 45 7e f0 7b 24 b6 56 26 54 da 90 58 3c 9d b9 64 46 ff 4e 8c d7 5d 7d 3a c0 6f 32 c0 81 f7 1a 1b ec 27 21 2e 5b 44 37 e6 c6 70 ce 8d c6 e2 8b 44 02 c9 48 82 26 41 40 8a 3b 68 33 37 3a 1b ca bc 45 6c 33 22 14 d5 4a ab 04 b5 32 Data Ascii: dp<]<XbyLiYfD-.-2JQ'1t,y&l.VJG!R^QQBwr*^"FPJ+!FH\|60!sZJ8b7Gn-,lQ+R/EeE~{$V&TX<dFN]}:o2'!.[D7pDH&A@;h37:El3"J2
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 4a ca 00 cd a2 5a b8 92 4a 3f c7 d1 21 78 34 31 e3 74 43 3f 7f 69 44 0b 09 b3 5a 28 45 0a 5e 9b 20 c0 39 f8 ed a5 71 8c 29 2a 55 d7 9a a9 ba 81 4e 33 c2 e6 1a 8c 3a 1e 88 16 e2 ad be d0 66 a2 70 46 54 43 19 56 56 44 08 eb 3a 05 3b 58 a7 ba 24 90 95 c0 62 62 63 74 9d 18 0e 93 17 59 01 2c 14 d6 2a 84 45 a2 c1 7f e4 60 9e 1b 8a 9b 84 df 36 81 ae be 48 2b 18 82 3b 59 94 3c 36 ae c8 b2 44 2c b1 61 d7 63 40 96 09 7a 05 03 76 4b 32 dc d8 0d 81 99 f0 8b ad 10 08 8b 94 ed cd 6f a4 b0 2c e9 72 da 59 88 2f de e3 b8 87 6d cb 5c 2b 7b ff 9a cb 12 b4 47 34 25 c3 18 8f 3a 9b cf 96 e1 9f 79 48 a1 4b 52 37 d3 bd 89 4f 94 0c 22 40 57 9b 80 54 8d 02 e2 b6 23 54 27 3b 0f 02 e1 5b 4e 81 89 55 dd 44 5b 9f 90 55 6c 84 f5 ab fb 00 70 21 3a eb 15 bc d5 d0 a5 9b c4 2c 36 9e eb aa Data Ascii: JZJ?!x41tC?iDZ(E^ 9q)UN3:fpFTCVVD:;X$bbctY,E`6H+;Y<6D,ac@zvK2o,rY/m\+{G4%:yHKR7O"@WT#T';[NUD[Ulp!:,6
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: a0 03 48 f1 0b 16 d1 11 de af bb 66 f1 0b b4 f0 50 84 cf 20 3b b0 08 9e 10 0c d6 b0 20 95 12 91 12 40 01 08 c0 65 1a f1 02 6c b2 12 ae 10 cd 68 11 1b fa 30 12 0f 60 02 14 40 00 04 40 01 1c 20 03 7c 30 0b 1e b0 0a 36 d2 09 34 00 03 04 00 a1 22 60 00 36 e0 1f d7 ff 49 18 a7 c0 05 c7 0d 03 2c 80 73 0a 80 02 1e 20 29 a3 92 09 ca d1 71 40 91 16 d6 0f b8 e2 51 29 0d e0 02 3a c0 65 38 a0 03 2e 20 24 d1 a0 fe 90 e0 2b 4d 4e 02 fa 72 0a 28 60 00 04 73 30 f3 91 0c e2 90 c1 e6 30 09 02 90 32 7f d1 4d 86 b2 e6 10 70 cf 06 33 0b 20 40 03 12 60 36 67 53 03 ec d2 2d 4b 01 22 ab ee 36 27 4e 17 5e 13 0a 34 c0 00 68 73 36 79 33 b2 68 01 35 61 53 36 87 d3 36 7f f3 09 1c 51 08 58 72 45 44 11 11 76 31 2a 63 73 38 13 80 39 9b b3 09 52 71 08 52 72 db b0 53 3b b7 53 11 63 b1 57 Data Ascii: HfP ; @elh0`@@ \|064"`6I,s )q@Q):e8. $+MNr(`s002Mp3 @`6gS-K"6'N^4hs6y3h5aS66QXrEDv1*cs89RqRrS;ScW
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 0c 29 60 02 ac 78 2d 0d 77 08 0a 80 00 a4 79 9a a9 b9 9a a7 d9 03 09 60 02 2a 59 38 24 80 8e 6b d1 9a c1 b9 9a 11 99 14 1a 40 00 26 e0 00 c4 d3 e9 12 e0 00 2e 40 00 78 92 55 f8 77 0a 02 f0 53 8d 02 13 ca 38 31 18 a0 02 24 60 9b 99 c0 00 26 40 d5 c2 39 a0 a5 b9 0f 1a 40 a0 c3 b9 95 e5 80 01 0c 3a 9c f9 46 00 36 a0 e5 d4 17 10 17 da 9a b5 16 1b 3a 00 03 f8 99 1a 31 60 cc 26 da 9a c7 d9 fd 20 39 f4 8c 34 1b 7a 58 3f dd f7 99 67 6e 00 ce d9 00 ac e2 3a 37 60 02 06 80 02 18 17 a5 97 09 01 38 60 9c 49 ac 0c 16 a0 02 ce 32 3b 9d 22 38 0f 40 02 14 a0 02 ee f9 58 28 c0 9c 37 c0 a7 9d ce 00 0e 00 03 06 80 00 66 9a a6 a5 9a 0f 1a f1 01 30 e0 00 58 da 26 5c 7a 02 e2 72 aa af 51 00 2e 20 a9 d3 99 1a 99 1a 03 1e 00 aa 51 fa 98 d5 74 4e 97 30 94 6d 17 46 bd 3a ae e5 ff Data Ascii: )`x-wy`*Y8$k@&.@xUwS81$`&@9@:F6:1`& 94zX?gn:7`8`I2;"8@X(7f0X&\zrQ. QtN0mF:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50064	104.21.6.192	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	882	OUT	GET /DDBxdb?cost=0.000700&currency=usd&external_id=807792968760304233&creative_id=19799038&ad_campaign_id=7728685&source=6118780&sub_id_1=windows&sub_id_2=chrome&sub_id_3=desktop&sub_id_4={zone_type}&sub_id_5=19799038 HTTP/1.1 Host: starpassing.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:52 UTC	1177	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Fri, 26 Apr 2024 18:32:52 GMT Location: https://onlinetopchoice.com/go/jump.php?id=mtd0013&pre=1&tags=lp0ai49b7tf5&pl=2 Set-Cookie: _subid=lp0ai49b7tf5; expires=Mon, 27 May 2024 18:32:52 GMT; path=/ Set-Cookie: 9d22d=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjIxOVwiOjE3MTQxNTYzNzJ9LFwiY2FtcGFpZ25zXCI6e1wiMTE2XCI6MTcxNDE1NjM3Mn0sXCJ0aW1lXCI6MTcxNDE1NjM3Mn0ifQ.VM8DaC-Uo9gaLYZeAOdR-jorg-1q_2y_E4RXB5lN9OY; expires=Mon, 22 Aug 2078 13:05:44 GMT; path=/ Vary: Accept-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BTyddXM9iZmwi1exngjFesSf8VoxDnanWtI05Q66Vs%2Bds358e6Yr80USpWxBp1m41fetO45VeGS1mOt10vrlGouhgyrndaG%2FMNZ34HR2wC%2B0sXrbe40XeqwIoP9Tbd8tTuY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a86fbfa131d2-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50059	107.20.88.0	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	742	OUT	GET /merge?pid=8050&3pid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&location=https%3A%2F%2Fsync.sharethis.com%2Fsovrn%3Fuid%3D%5BSOVRNID%5D&dnr=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=Ijp4ARZHzrcLtCmtRkicHZbu
2024-04-26 18:32:52 UTC	675	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:52 GMT Content-Length: 0 Connection: close Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_8050=ZGkACWYr8zMAAAAIA98YAw==; Path=/; Domain=.lijit.com; Expires=Sat, 26-Apr-2025 18:32:52 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=Ijp4ARZHzrcLtCmtRkicHZbu; Path=/; Domain=.lijit.com; Expires=Sat, 26-Apr-2025 18:32:52 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Location: https://sync.sharethis.com/sovrn?uid=Ijp4ARZHzrcLtCmtRkicHZbu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50066	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	626	OUT	GET /media/New%20navigation_Rebrand%203.0/Screenshot%202022-11-17%20at%2011.14.47.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:52 UTC	802	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:52 GMT Content-Type: image/png Content-Length: 69728 Connection: close Age: 20496 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=100557 ETag: "22ea5deb3345788502e2c472abc0221f" Last-Modified: Thu, 17 Nov 2022 10:16:35 GMT Via: 1.1 8a771ca27e5a3c9e06b12b7af5d25aa4.cloudfront.net (CloudFront) X-Amz-Cf-Id: 28RORM99u_2i3hAAgq_b9W4MDrBqFLAls-CLOOzFiKphJ0sAtad4yw== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: 3JqZyOeIvjCy4g47xAFH1.oWHeBebykg CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:52 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8709fff21bb-MIA
2024-04-26 18:32:52 UTC	567	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 01 fb 08 02 00 00 00 1b c7 c6 51 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 01 10 1a 49 44 41 54 78 da ec d6 31 0d c0 30 00 04 b1 20 28 7f b6 0d 81 db 23 bd 6c 14 3e 1f 00 00 3c 72 7e 00 00 78 44 46 01 00 08 32 0a 00 c0 38 19 05 00 20 c8 28 00 00 e3 64 14 00 80 20 a3 00 00 8c 93 51 00 00 82 8c 02 00 30 4e 46 01 00 08 32 0a 00 c0 38 19 05 00 20 c8 28 00 00 e3 64 14 00 80 20 a3 00 00 8c 93 51 00 00 82 8c 02 00 30 4e 46 01 00 08 32 0a 00 c0 38 19 05 00 20 c8 28 00 00 e3 64 14 00 80 20 a3 00 00 8c 93 51 00 00 82 8c 02 00 30 4e 46 01 00 08 32 0a 00 c0 38 19 05 00 20 c8 28 00 00 e3 64 14 00 80 20 a3 00 00 8c 93 51 00 00 82 8c 02 00 30 4e 46 01 00 08 32 0a 00 c0 38 19 05 00 20 c8 28 00 00 e3 64 14 Data Ascii: PNGIHDRQsRGBIDATx10 (#l><r~xDF28 (d Q0NF28 (d Q0NF28 (d Q0NF28 (d Q0NF28 (d
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 4e 46 01 00 08 32 0a 00 c0 38 19 05 00 20 c8 28 00 00 e3 64 14 00 80 20 a3 5c 76 ed 5e 35 b1 20 0c c0 f0 cc ba 10 d2 87 5c 46 ea 40 ea 40 88 a0 f8 83 62 6f 61 a7 8d 85 b5 7a 05 62 2f d8 28 8a 5a 28 d8 69 6d a9 82 95 85 85 88 a0 a2 07 05 7f ce cc 6c 71 c8 c2 b2 16 9b dd 4d e1 e1 7d 8a e1 bb 80 e1 e3 1d 18 00 00 00 97 23 46 01 00 00 70 05 31 0a 00 00 00 97 23 46 01 00 00 70 05 31 0a 00 00 00 97 23 46 01 00 00 70 05 31 0a 00 00 00 97 23 46 01 00 00 70 05 31 0a 00 00 00 97 fb 2e 00 00 bf 32 c6 38 83 94 52 00 00 be d2 37 01 dc 9a cb e5 e2 b4 82 52 ca e9 86 c3 e1 b0 db ed 36 9b cd 7a bd de ef f7 b6 6d 1b 63 04 f0 0f b4 d6 c6 18 e7 82 39 c3 f1 78 b4 2c 6b bb dd ee f7 fb d3 e9 a4 94 12 c0 7f 65 db b6 65 59 eb f5 da b9 66 c7 e3 d1 7c 60 a7 c1 cd 0c 70 53 94 52 ce Data Ascii: NF28 (d \v^5 \F@@boazb/(Z(imlqM}#Fp1#Fp1#Fp1#Fp1.28R7R6zmc9x,keeYf\|`pSR
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 13 62 55 29 15 ec 66 01 52 17 01 19 0d d0 7e e1 e7 d3 1f 7c f0 c1 1f fe f0 87 68 28 41 f5 67 5e 5e 1e 94 2a a5 94 cf 21 70 df d1 a5 dc 7f dc 02 12 29 8c 48 f1 01 b0 6c d9 32 50 0d 28 0a 90 57 b1 a1 53 80 00 89 40 fa e9 4f 7f 7a f7 dd 77 e3 a0 02 bd 0a 31 06 29 dd 0f 2d 60 77 f4 7b ad 35 b4 2b f4 d4 e3 15 50 e4 07 55 1e 89 7b bc a0 25 a3 41 2e b5 23 c3 a6 62 e0 85 7c fc f1 c7 7f f9 e5 97 a8 f8 c4 a1 05 fb 12 ed 09 98 59 12 b0 61 66 8c b9 f0 c2 0b b1 43 e2 1c 15 44 57 80 d4 45 40 46 03 b4 5f 58 2d 01 5b 36 f2 59 c8 4c 2d 5e bc d8 56 56 ed 69 ea d3 3e 5f 29 85 1e 67 24 fa f1 0a e8 47 79 f2 c9 27 b1 89 53 87 41 50 29 db 36 3e fa e8 a3 c3 0f 3f 1c 8b ca ca 4a 74 2b 83 25 88 88 1f 87 7b 1a 72 20 b2 48 f4 43 bb f2 f3 f5 20 a6 4a a9 40 1f ed b0 b0 cd 46 d8 76 2e Data Ascii: bU)fR~\|h(Ag^^*!p)Hl2P(WS@Ozw1)-`w{5+PU{%A.#b\|YafCDWE@F_X-[6YL-^VVi>_)g$Gy'SAP)6>?Jt+%{r HC J@Fv.
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 10 90 d1 00 ed 11 c6 98 af be fa 0a 0b 6b 80 62 77 e7 dd 91 fd ac 08 0a fb 3d b4 de 13 11 46 d8 23 f7 ca 4c 4c 04 1c 73 f4 98 92 ac bc da d9 8b 86 74 ab 1e da a3 0f 35 b4 34 7f b9 78 75 ed 73 d9 85 f9 b9 e5 25 ba 67 25 75 2f a3 08 93 63 b9 99 a4 d0 6e a5 94 da 69 ca 1e 8f ef 2a 89 aa 08 60 e6 8e ab 17 20 75 6e c3 0c 33 15 d1 8f dc aa 14 af 0d e5 1e fc 00 3d 28 08 b3 e2 e2 62 ac d1 a5 c4 71 58 92 31 66 cc 18 74 4c 23 79 0a 25 ec e3 8f 3f c6 74 1c a8 a4 1d 72 60 a3 10 e0 f3 51 f6 05 aa 8e 15 74 90 33 5f 7c f1 45 ec 4b b5 b5 b5 96 8f 32 f3 37 be 9d b1 95 61 eb 83 b3 7d ef de bd f1 b3 8d 8d 4d f3 e7 cf 27 12 66 40 2b a2 d3 4e 1a d7 52 b3 d6 ab 5d 73 f4 b0 de d5 45 22 8d f5 4b 5e 7f aa 78 46 8f ac c2 d2 48 65 6f aa ee 43 05 c5 ec 64 91 0e a5 ca 26 b6 6f 34 d1 Data Ascii: kbw=F#LLst54xus%g%u/cni*` un3=(bqX1ftL#y%?tr`Qt3_\|EK27a}M'f@+NR]sE"K^xFHeoCd&o4
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: b2 7f ce a1 a3 fb 59 d6 95 9b 9b 8b e4 20 ca 24 ee b9 e7 1e f0 51 4a 53 30 f3 da b5 6b e2 ad 21 85 70 b4 b5 47 97 e4 ef fa 34 14 0a 28 72 ac 33 66 cc 20 a2 9b 6e ba e9 f4 d3 4f 47 98 81 83 fa 43 04 ec b0 59 63 0c 1e 54 4a 25 9f 9d b4 d6 f8 71 f0 0c 4a 63 48 d2 92 c9 e0 22 b2 e7 9c 2d 2e 38 a8 59 be a2 66 e9 a2 85 cf 3e f9 9b c3 46 0d 1a 39 a4 af b8 8d 9e 17 63 26 23 1e ac 06 d0 40 56 51 51 46 44 22 69 d8 47 07 35 14 63 e4 44 04 31 a0 b5 de d1 f1 03 fb 95 ad 32 c2 7b 0d a7 1d d4 7e 88 08 7e 2d 27 9c 70 02 64 75 0d 24 46 82 19 23 2d cd d1 70 46 98 94 30 0b 87 1c 22 4d e2 10 3b d4 65 c0 9a ac 2a 53 b7 64 60 5e 5e 76 38 e6 35 6f 93 da 0d e5 05 dd d7 2f 5d 42 f3 66 51 51 19 a5 17 12 5a 3b 2e f6 48 d7 37 d1 fc af 37 2f fa 7a f9 9c 39 b3 7f ff e8 a4 6b 2e 39 a3 Data Ascii: Y $QJS0k!pG4(r3f nOGCYcTJ%qJcH"-.8Yf>F9c&#@VQQFD"iG5cD12{~~-'pdu$F#-pF0"M;e*Sd`^^v85o/]BfQQZ;.H77/z9k.9
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 5d 3d 2d 58 41 5f 2d 5e fb d9 bc e5 9f 7c 35 bf c1 28 27 ab 40 3b e5 dc b9 b7 ce cc f6 14 84 17 2d 0d b1 16 2f 46 db ea 89 24 d9 d2 08 4a 21 f8 13 ee 94 86 10 43 b2 7c cd ca ef 9c 70 82 62 0a 87 42 2b 56 ac 84 a6 6e 48 58 29 16 26 a6 a8 d7 02 e7 85 ba 0d 9b 66 cd 9c 79 d9 e5 97 dd f4 3f 37 f5 ac ae f6 d5 68 7f 5c c0 82 f9 f3 99 a8 b2 a2 db f2 15 cb 6f fa 9f ff f9 d1 4d 37 ff e1 0f 7f 00 63 c8 2b c8 17 3b 84 29 1e 91 f9 b9 79 50 dc 29 1d 20 89 8b 3d 51 b8 8c a2 55 f5 b4 68 95 4c 9b bb 62 fa fc 55 08 b6 ba 46 91 70 96 93 51 9e dd b5 7f a6 13 09 b1 43 a2 1d 43 8d 5b 1b c8 78 22 9e 52 c9 aa 97 20 d0 d2 a6 8c 4f 7c aa 4e 76 a9 e0 94 8c 53 71 9f 7e 7d 97 2d 5b aa 15 27 8c 99 c8 36 11 e2 2d 86 d9 08 73 e7 ce 5f bf 7e c3 93 4f 3e 81 33 33 2a 46 e2 63 17 4c 42 a1 Data Ascii: ]=-XA_-^\|5('@;-/F$J!C\|pbB+VnHX)&fy?7h\oM7c+;)yP) =QUhLbUFpQCC[x"R O\|NvSq~}-['6-s_~O>33*FcLB
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: ed ac 89 01 31 b6 4a 33 33 37 a7 aa ba 87 10 35 35 36 66 66 44 dc 68 cc 11 ca e2 50 0e e9 e6 8d 35 97 9f 72 d6 ed bf 99 94 59 da 99 84 da 18 93 63 f3 cb e8 8f c6 e2 8c 33 ce 80 5d df d4 a9 53 bb 75 eb 56 52 52 f2 66 1c e7 9d 77 de ad 3f fd e9 96 ad 5b c0 7d 49 b1 2b e4 84 88 1c bf e0 2b c5 7c 37 99 94 47 34 fb eb da 0f 66 ae 2d e9 7b b0 97 59 b4 a5 25 16 53 4e a3 b0 eb 8a 88 61 a5 44 6c 1d 96 b0 b2 ce 02 4a 11 96 46 44 c8 f3 a8 83 21 2b 92 d9 bb 67 6f 2c c0 12 c4 08 e2 44 45 d8 64 a9 7a 74 1a c5 e8 bc 1b 2e fe df 5f dd 5d a4 f2 c8 f5 48 87 48 2b 92 ed 42 37 d9 e1 41 6b 5d 53 5b f3 fd ef 7d 1f ae a5 b0 d0 ef 56 d1 0d 25 80 ef be f7 2e ae 13 4f 38 f1 b1 c7 1e 43 87 13 02 0f 75 0f a9 5e b5 26 f1 da d0 59 8b d6 7c 3c ab 76 d0 91 e7 48 43 c3 36 63 1a 8c 17 6d Data Ascii: 1J337556ffDhP5rYc3]SuVRRfw?[}I++\|7G4f-{Y%SNaDlJFD!+go,DEdzt._]HH+B7Ak]S[}V%.O8Cu^&Y\|<vHC6cm
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: c8 d7 a3 b9 55 29 35 67 ce 9c 15 cb 97 33 b1 dd e8 55 a2 5a c0 27 1e 9c 52 99 7a 8e 5f 56 96 f2 d8 89 b7 a0 6a 92 64 43 00 11 8e 5f 09 22 2f 22 69 c3 07 f6 4a 79 81 f4 d2 59 bc 68 dd d6 8d 1b b6 d5 88 b8 a3 7f 3a e1 c8 ab 4e 89 14 3b 59 11 ea 9e 5f 16 26 c5 c4 89 a0 48 92 54 12 a6 ad 7e 98 21 0b 8f fc 29 1e 41 b6 94 44 26 9c 76 1a 5c 72 ef bb f7 3e 26 86 c7 e4 c2 85 0b 15 2b 88 f4 89 29 58 29 fc a1 c8 44 5a 28 64 d8 31 c6 31 2e 8b 47 24 2c 9a c4 89 7f 47 11 5b 37 76 12 b6 2a a8 58 1a aa 84 95 28 32 4a 89 66 21 26 95 3e a1 67 a2 d4 54 43 9f bd b9 e2 9e eb 67 fd fc 82 85 0f ff 78 d9 ef 7f 31 e3 8e ab b7 fc e1 7e 5a 39 9b 4c c3 90 01 fd 48 a8 20 2f 7f 4b cd 96 c1 21 ba 6b 7c d7 33 07 74 0e af 5f 51 d1 77 30 75 ae 24 15 06 5b f4 69 28 27 c1 e6 d0 e1 26 06 cf Data Ascii: U)5g3UZ'Rz_VjdC_"/"iJyYh:N;Y_&HT~!)AD&v\r>&+)X)DZ(d11.G$,G[7v*X(2Jf!&>gTCgx1~Z9LH /K!k\|3t_Qw0u$[i('&
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: f5 76 3d b6 be e3 91 51 f2 88 a2 4c 0d ec 56 1e d1 ef d4 e2 eb 43 7d 0a 6a dc fa 28 79 11 18 d9 e6 55 54 71 59 e8 9b cc bd 58 29 12 41 19 1f 9c c2 5e 7e e5 65 e4 52 41 40 7b 74 ef 01 47 db 3b ee b8 c3 8b fb 85 f9 8e 4e bd 7b f7 4e 0b 6b 27 c0 ea 9c 7e d9 4d 52 f1 67 22 8e 84 fc b7 53 4a 95 5d ef 12 42 96 80 37 d6 c7 26 bf f0 e5 9b 7f 77 1b 37 16 57 55 f7 3c 64 1c e7 17 6e 9e 36 79 e9 27 6f 0e 29 8d 98 cd ab 8c 89 3a 0e 91 78 2a 2c 86 3d 6f ab 5b 5d 5c b2 62 e6 07 0d 9e f9 f1 c9 07 17 37 2c 2e 6e 5a 6b 3c 37 2b bf 53 9d 34 95 0d 18 4a 9d bb 12 6b 22 d5 06 3b b4 e2 28 e8 26 c2 ec 5f ff fa 17 9a 2f 67 cf 9e 0d 1a fa 97 bf fc 45 6b ed 3f 67 6b c3 36 2c aa 7b 56 8b 18 e2 ed 0b a4 3c 8f 59 31 b7 67 02 da d6 8e 26 c4 d2 9a 53 fa 03 4e 64 17 34 94 2c d2 60 53 ef Data Ascii: v=QLVC}j(yUTqYX)A^~eRA@{tG;N{Nk'~MRg"SJ]B7&w7WU<dn6y'o):x*,=o[]\b7,.nZk<7+S4Jk";(&_/gEk?gk6,{V<Y1g&SNd4,`S
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 78 4f 5c 26 0d 24 f6 8b 2e be 18 6c e0 d5 57 5f fd f1 4f 7e fc c5 97 5f 70 c2 66 dc 88 81 8d 03 06 e3 a4 99 5f 81 d8 3b 13 a7 7f 49 1e 93 f5 b6 0c 39 c6 ce 43 65 97 c8 23 65 c4 b8 6c 18 6b 5f 40 4d ae 74 34 e4 e8 8c 02 a2 10 89 36 ac 36 35 35 ae dc 10 eb 75 cc 69 59 df bb 8c 0a 7b 90 ce b2 d6 bf 24 bb 25 8e 42 fb ec d5 ab d7 13 4f 3c 01 67 fb e7 9f 7f fe e9 a7 9f 66 66 df de 0e f5 f1 10 e6 99 79 a7 f1 d9 9e 27 2d 7d e3 49 80 7d c9 61 37 62 32 a8 10 4d 69 04 64 34 c0 7e da c0 0d 15 77 2a a9 28 ab 5d 57 97 57 98 c7 a0 a3 ae 48 9c 8f 02 d2 ca 70 88 89 42 ba d1 6d a9 41 19 94 1b dd b2 be b6 d9 8b e5 77 2f ef 76 c8 a0 f2 d3 4f a2 d2 42 0a 29 d2 ec 6f 4b 76 45 6d ca a2 3e fa f6 ed 0b 27 94 cb 2f bf 7c f1 e2 c5 e8 48 b5 5e 74 7f fd eb 5f 31 ad 9e 99 d3 87 8f 02 Data Ascii: xO\&$.lW_O~_pf_;I9Ce#elk_@Mt46655uiY{$%BO<gffy'-}I}a7b2Mid4~w*(]WWHpBmAw/vOB)oKvEm>'/\|H^t_1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50057	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	973	OUT	GET /500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=3&pl=https%3A%2F%2F1movieshd.cc%2F&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072
2024-04-26 18:32:52 UTC	815	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 26 Apr 2024 18:32:52 GMT Connection: close X-Trace-Id: 49078fa1fa1df27e8d5ae8271344e82a Expires: Tue, 11 Jan 1994 10:00:00 GMT Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Pragma: no-cache Timing-Allow-Origin: * Vary: Origin Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:52 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50062	15.197.193.217	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	782	OUT	GET /track/cmf/generic?ttd_pid=mssm115&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUYASABKAIyCwj0u5yLwIrzPBAFOAFaB3hrc3c5bGFgAg..
2024-04-26 18:32:52 UTC	566	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:52 GMT Content-Length: 229 Connection: close server: Kestrel location: https://map.go.affec.tv/map/ttd/6f67744e-1091-4048-adba-e024cc18f2d2?ttd_puid=&gdpr=0&gdpr_consent= set-cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; expires=Sat, 26 Apr 2025 18:32:52 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUYASABKAIyCwjky5i4wIrzPBAFOAFaB21zc20xMTVgAg..; expires=Sat, 26 Apr 2025 18:32:52 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 18:32:52 UTC	229	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 70 2e 67 6f 2e 61 66 66 65 63 2e 74 76 2f 6d 61 70 2f 74 74 64 2f 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 3f 74 74 64 5f 70 75 69 64 3d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 70 2e 67 6f 2e 61 66 66 65 63 2e 74 76 2f 6d 61 70 2f 74 74 64 2f 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 3f 74 74 64 5f 70 75 69 64 3d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://map.go.affec.tv/map/ttd/6f67744e-1091-4048-adba-e024cc18f2d2?ttd_puid=&gdpr=0&gdpr_consent=">https://map.go.affec.tv/map/ttd/6f67744e-1091-4048-adba-e024cc18f2d2?ttd_puid=&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50061	141.94.171.214	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	722	OUT	GET /?partner=104&icm&cver&mapped=afa9acdd318515b6d11857989cfe776c&gdpr=0 HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=293f006c26e11ff7; done_redirects147=1; done_redirects104=1
2024-04-26 18:32:52 UTC	419	IN	HTTP/1.1 302 Found set-cookie: cookie=293f006c26e11ff7; Max-Age=31536000; Expires=Sat, 26 Apr 2025 18:32:52 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects219=1; Max-Age=86400; Expires=Sat, 27 Apr 2024 18:32:52 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://spl.zeotap.com?zdid=1332&zcluid=293f006c26e11ff7 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50060	141.95.33.120	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	721	OUT	GET /c/121/121/2/1.gif?puid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=ef3cddf5-ca0f-737b-a417-e2297a9c0d9f#1714156371003#1
2024-04-26 18:32:52 UTC	1741	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: id5=ef3cddf5-ca0f-737b-a417-e2297a9c0d9f#1714156371003#2; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:32:52 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: 3pi=121#1714156372767#-1519022819; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:32:52 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ice.360yield.com/match?publisher_dsp_id=79&dsp_callback=1&external_user_id=ID5-5f7fKNu6Ccn5uyl68Zo3g-hvXdNYw_FQSAKpahtQuA&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F121%2F124%2F1%2F2.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Fri, 26 Apr 2024 18:32:52 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-26 18:32:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50067	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	861	OUT	GET /media/New%20navigation_Rebrand%203.0/Screenshot%202022-11-17%20at%2011.15.02.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:52 UTC	802	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:52 GMT Content-Type: image/png Content-Length: 56219 Connection: close Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=84174 ETag: "bca0082c8da9a8ac228e72c2907fc5ff" Last-Modified: Thu, 17 Nov 2022 10:16:35 GMT Via: 1.1 2e9033da1cf7b64ac622ab535b39a266.cloudfront.net (CloudFront) X-Amz-Cf-Id: GYa9-gqqXmAMSE_8V-tvk4cZCXcBw_ZNhLoJ1TGJRsM1LF-CbuNNEA== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Miss from cloudfront x-amz-version-id: fZU4z.Mh3DlsYYt16HyOr.Gh0gag0w81 CF-Cache-Status: HIT Age: 20496 Expires: Sat, 27 Apr 2024 04:32:52 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8727986a686-MIA
2024-04-26 18:32:52 UTC	567	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 85 00 00 01 f9 08 02 00 00 00 b9 cd 0c 64 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 db 55 49 44 41 54 78 da ec d6 41 0d 80 40 00 04 31 82 80 f3 ef 16 0c ec ff 92 49 ab a2 cf 07 00 00 97 9c 73 de 07 00 00 ee f1 51 00 00 36 1f 05 00 a0 cf 47 01 00 d8 7c 14 00 80 3e 1f 05 00 60 f3 51 00 00 fa 7c 14 00 80 cd 47 01 00 e8 f3 51 00 00 36 1f 05 00 a0 cf 47 01 00 d8 7c 14 00 80 3e 1f 05 00 60 f3 51 00 00 fa 7c 14 00 80 cd 47 01 00 e8 f3 51 00 00 36 1f 05 00 a0 cf 47 01 00 d8 7c 14 00 80 3e 1f 05 00 60 f3 51 00 00 fa 7c 14 00 80 cd 47 01 00 e8 f3 51 00 00 36 1f 05 00 a0 cf 47 01 00 d8 7c 14 00 80 3e 1f 05 00 60 f3 51 00 00 fa 7c 14 00 80 cd 47 01 00 e8 f3 51 00 00 36 1f 05 00 a0 cf 47 01 00 d8 7c 14 00 80 Data Ascii: PNGIHDRdsRGBUIDATxA@1IsQ6G\|>`Q\|GQ6G\|>`Q\|GQ6G\|>`Q\|GQ6G\|>`Q\|GQ6G\|
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 5f f3 f6 bb 79 f9 cc f3 7a 91 2f 22 f5 f4 01 98 a6 49 bf 1e 76 64 7c 70 2c 1b f1 63 56 8d db 65 ed 82 6b 7f ff 6d ae 5d 0f c0 b5 5f ef ff 99 60 ef 2a aa 22 da 6a e5 ca 0a 68 66 de fd ca ed 82 54 18 05 c0 f3 f5 c0 ab 8a a8 1a 97 c3 65 5e cb 11 0b 39 ab 6a 2e 46 a7 aa 6c 07 02 c0 fe 51 a0 df 3f 3a a2 46 8c 73 d4 9f cb f1 3c 62 1c 22 8f 71 fc 15 87 63 1c 0e 71 b8 3e b9 b4 a6 2c ba 6a cd 7c 3a 53 1c 7d 22 e5 d5 5c c0 cf 9b a6 49 7d 14 f6 68 c4 f8 1d 7f d9 bb 13 28 b9 ae f2 4e e0 ff ff 77 df 7b 55 d5 d5 7b 4b ad c5 5a 2c cb 96 64 5b b6 bc c8 42 5e 65 1b 1b b0 b1 61 0c 0e 4b 02 71 18 4f 60 12 43 c2 99 c0 61 27 e4 90 4c 20 70 12 02 61 3b 10 33 0c 83 81 40 08 66 c2 62 02 c6 31 c2 60 47 d8 16 b6 64 59 b2 25 6b e9 96 d4 ad de b7 aa 7a ef de 6f a4 ea 56 8d d4 b2 85 Data Ascii: _yz/"Ivd\|p,cVekm]_`*"jhfTe^9j.FlQ?:Fs<b"qcq>,j\|:S}"\I}h(Nw{U{KZ,d[B^eaKqO`Ca'L pa;3@fb1`GdY%kzoV
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 2b 69 04 8f 10 41 51 eb 53 21 a0 5a 4b a6 a8 22 10 8e 9a b7 29 78 4e 4a 00 a0 28 54 21 0a 81 e2 30 82 24 6b c1 94 93 9b ee 4f ac 07 5f ad 8f fb 3f 9d 07 52 c0 1f 2e 8b 96 02 46 ca e8 e8 c2 96 1d a5 07 1f db f1 ad 7b 7f 96 c6 b3 35 df d2 bc 78 99 06 1d 15 c9 80 4c 03 42 50 04 f5 d5 9a ba 7a 01 09 08 22 22 1a ad c0 c5 6d 49 fb 69 05 97 dd f3 e8 e6 ef 3f f0 99 3f 78 e9 65 b7 dd 72 ee a2 16 44 01 09 21 b4 cd 9e 8c 31 96 47 8d f9 8d a6 38 16 b3 e0 01 55 78 45 78 b6 92 24 51 8b 97 82 71 04 14 54 4c a6 04 51 cb b4 4a 20 64 59 3e 8e 9b ea eb 1d 98 86 b2 68 e2 9c 7b ae 00 4a 9e e0 9c 1f 5b db f2 d7 41 81 e1 14 7b 46 f1 54 27 3a 3a b1 73 df c0 f6 ae de 8d 5b 9e ee e9 1b 1e 2d f9 42 43 5b eb 92 e7 95 55 4a 5e f7 97 4b 1e 08 e2 94 84 2a 31 8e a0 03 11 70 88 57 a5 30 Data Ascii: +iAQS!ZK")xNJ(T!0$kO_?R.F{5xLBPz""mIi??xerD!1G8UxEx$QqTLQJ dY>h{J[A{FT'::s[-BC[UJ^K*1pW0
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: b9 48 81 80 50 74 79 d9 5f be 7e e9 a5 af 98 fb 82 f3 67 2d eb 1e ee ed 1a 38 90 14 73 9e 21 89 e3 4a a5 22 22 a8 22 48 50 01 02 9e d8 39 d8 9d 34 15 cf 6e 3c bd 88 48 c8 c8 39 80 b5 95 f1 49 12 13 48 5a 8b fd af 85 02 50 05 49 55 04 a2 4c 6c ee c4 bb 3e fe e8 8f b6 0d 69 e3 9c 92 42 09 21 09 d4 f6 da 22 c0 49 c1 90 7a c4 e4 51 c5 89 21 48 00 20 15 c4 f8 a0 2a c7 d2 b4 ad ad bd ff c0 58 3a 12 ad bb a4 29 01 55 83 90 16 46 8d 31 27 98 47 6d ff 7a 63 a6 97 0c 61 14 95 cd d8 f9 e9 87 bf ba 2f 3f 98 b4 16 3c 83 f8 80 10 26 af 45 0a fa a0 f5 49 d1 0f 94 1a a5 ee dc 33 56 8c 96 4b 3f 7d e2 91 90 63 73 5b 13 1c ca 3e 0b 1a 44 51 da dd 7f c3 99 57 dc 34 fb ea 36 d4 65 d0 2d d8 fb b5 a7 ef d9 32 b6 2b 9e 55 17 7c 26 22 50 9d 78 e6 ae 10 0a c6 a9 1b 1c 28 ad 9b bf Data Ascii: HPty_~g-8s!J"""HP94n<H9IHZPIULl>iB!"IzQ!H *X:)UF1'Gmzca/?<&EI3VK?}cs[>DQW46e-2+U\|&"Px(
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 1f 22 21 09 84 c3 35 74 9d 18 aa 4a 88 88 1e 44 15 25 95 22 a2 5e 93 38 c9 47 d4 ca 48 79 b0 47 4a 7d a7 b7 d7 dd fe da 17 46 39 fc f5 3f fe b8 6f c8 37 b4 cd 1a 18 1e a6 38 e5 89 56 c2 49 aa 2a 00 3d 08 aa c2 5c 43 db 8f 1f db f1 b3 6d b8 6a 39 92 00 10 13 68 5b c8 1a 63 6c fe a8 31 d3 9e 88 a4 5a 51 05 95 aa 1a 54 11 40 0a c9 da 54 3d 52 2a de 87 c8 f9 c0 05 8d 87 aa 98 04 41 52 78 f4 62 e7 00 39 31 26 ae 44 0d 27 5e 28 70 39 14 ce 4a ce 5c a4 f3 87 3a 7a 8b 88 13 45 02 21 08 4e 9c 67 ab d8 9f 0a 3a 31 8e 58 28 b4 0c fc f0 e1 f2 9e c1 42 c3 ac f6 fe c1 1e 89 20 02 60 bc 5c ee 55 3d 11 aa 63 e2 5a a5 aa 20 4b 2b 21 ad 44 c1 e7 c9 96 ba 62 2e 0b 63 9d 7b 74 f7 e6 2b e6 86 bf bd fd d2 af be ef ea db ae c0 2b 2e c1 eb 5e b8 96 3d 7b 9b 63 97 a3 40 03 4e 14 Data Ascii: "!5tJD%"^8GHyGJ}F9?o78VI=\Cmj9h[cl1ZQT@T=RARxb91&D'^(p9J\:zE!Ng:1X(B `\U=cZ K+!Db.c{t++.^={c@N
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: e8 41 00 81 58 a4 77 cf d3 77 bc ec e2 37 be 62 7e 7b 84 9c 02 01 01 aa 50 50 26 6e 2e 05 8f ec de 27 a8 50 82 84 03 66 17 71 fd 65 cb ef 7b e2 81 98 88 9c 0b de 07 88 82 98 4c 71 18 59 bb 85 54 c1 00 15 a2 e2 b3 10 e5 d3 a4 61 e3 d6 dd 43 23 73 9a 1b 10 08 a1 55 df 8d 31 f6 bc de 98 19 83 02 c6 90 90 f9 34 cb 4a 59 1a 08 78 cc 2b b4 2f c0 bc 08 71 50 82 0e 20 c0 93 12 1f 55 35 cb 32 ef fd f8 31 8e 61 33 4a 7f ed 38 31 94 50 90 80 22 52 2c 3f 0d 57 9c bf a0 d4 d7 5d 1f e5 73 8a d9 f5 8d 05 75 39 15 07 89 28 ce 87 91 7d 3b 5b b2 8e 39 11 e2 00 68 ed b3 93 49 f1 b1 76 ac 80 72 e2 40 80 3c b0 7a e5 ac b9 b3 1b fa fb 0e 44 a4 40 08 42 a1 a8 8d c9 b4 0a e3 08 05 02 c1 5c 7c 60 74 cc 17 5b 9f d8 dd d3 b1 0f d0 5a 86 b5 3d be 8c 31 96 47 8d 99 21 14 08 d0 a1 b1 Data Ascii: AXww7b~{PP&n.'Pfqe{LqYTaC#sU14JYx+/qP U521a3J81P"R,?W]su9(};[9hIvr@<zD@B\\|`t[Z=1G!
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 1e 9d 31 14 80 12 70 40 1e b8 78 45 6b 4b d1 31 a4 04 3c 38 12 42 eb a2 a5 77 7f 6f c3 43 1b 77 02 70 50 c1 94 aa 9a 14 d0 21 e4 80 15 8b 71 e5 ea 65 95 81 ce ba d8 41 01 25 7e 31 9d 18 55 5e 01 49 86 46 ca 59 06 40 00 8b a4 c6 18 cb a3 c6 cc 14 ac 95 aa 5c 1d a2 c5 68 be 7a ee 85 43 cf 74 0f ee eb 85 8e 7f fd a4 4d 1e 7d e8 a1 87 0e 16 47 49 86 10 2c 8c ce 14 c4 21 82 20 aa 8b e7 60 cd b9 8b 30 d6 ed 34 03 e5 c0 d0 48 e3 9c c5 51 f3 59 df f8 ee c3 15 0f 82 27 be cd 01 27 06 09 10 59 bd c3 cd 57 2f 77 63 fb f3 0e ea c1 a9 45 66 55 20 a8 c2 45 a3 a5 34 cd a0 d6 c7 64 8c b1 3c 6a cc 0c c3 89 a1 01 a2 cc 23 5a 77 e1 da 27 1f 7d 5c 40 0d 8a 00 04 40 4f 42 1e fd c6 37 be 71 dd 75 d7 91 b4 e2 e8 4c 42 e2 10 a5 a6 05 87 5b ae 39 1b fd db 9b 0b ac 54 ca 65 1f 06 Data Ascii: 1p@xEkK1<8BwoCwpP!qeA%~1U^IFY@\hzCtM}GI,! `04HQY''YW/wcEfU E4d<j#Zw'}\@@OB7quLB[9Te
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: d2 8d 01 3f 78 1c ff fd cf bf 2e 0b ce e9 ad 90 22 01 1a 00 15 06 81 68 88 ca a5 25 ad 71 c7 c6 ef ce d6 3d df fb df 7f b5 64 76 4e 15 a4 a8 a2 ea 39 f2 68 0d a1 8a be 80 bb ee c3 db ff ee eb 67 5c 72 c5 ce 7d 5d a1 34 ea d2 c1 06 19 5a 71 5a fd 0b 2f 5d 71 f5 ea 85 4b e7 21 4f 08 40 40 00 81 0a 58 5b c9 41 55 a3 28 82 31 c6 3c 5b 1e b5 7f 9b 1a 33 f3 b4 b7 b7 1f 5c a4 e9 e0 a6 f3 98 a2 fe fe fe 83 61 f4 60 71 74 3c 8c 56 2a 15 8b 08 33 1f 14 d8 be cb 67 c8 2b 24 a8 4e 6a c3 0f 20 eb ea 77 f4 96 e6 af 7a c1 3e 3f ef f9 bf f3 a6 27 76 8f 04 0a 14 cf 89 80 2a 6a 14 84 e6 89 cb ce c5 fc b8 af 7b d3 bd b3 43 c7 25 8b dd ed 37 5d f0 b1 77 de f2 89 f7 5c ff 87 37 2f 3c 6f 2e 9a 34 14 34 4d e0 63 a8 03 a0 18 9f 1f 92 65 99 88 1c 79 a7 79 ef ad 14 62 8c 39 8a 1a Data Ascii: ?x."h%q=dvN9hg\r}]4ZqZ/]qK!O@@X[AU(1<[3\a`qt<V3g+$Nj wz>?'vj{C%7]w\7/<o.44Mceyyb9
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 59 9f 79 b8 ad dc 2d 9b e7 36 c7 e6 2a e3 0f be 9a c2 9b a6 fb 95 d1 7b 1f ad f3 df ed 91 d6 cc fc 8f 51 df da f4 ed 95 85 27 9f d6 ca bc 09 d0 06 d8 05 d8 03 60 1c 80 f7 c1 c0 b1 b1 51 8c c5 1e 31 06 8c 71 06 c0 80 f7 b8 fe ad fa fb c2 bb b7 57 af 79 8a c5 a2 78 ae 53 ff 95 31 06 08 21 f4 9f f3 f5 98 47 11 1a 26 9a a6 a9 aa 1a 0e 87 f3 f9 7c 4f 27 52 26 63 ff d8 39 bb 97 a6 e2 30 8e 5f 76 d1 ab e9 65 06 bd 80 41 f4 57 74 e3 5d 52 d0 1a 41 e2 54 72 e4 64 24 bd 40 2b e8 c2 02 11 91 66 5d 4f 82 6a c1 14 ab 49 10 1b 2c 76 29 cb b0 a0 41 4e 74 9b 2f 25 a1 4d 37 b7 73 9e e7 db 61 0f 1e 66 03 bd 9e 3e 1f 9e 8b e7 fc b6 df 6e f6 83 7d f8 3e 3b 87 44 55 63 b1 98 35 63 b5 d7 2b 51 1f ad 49 76 f2 51 f9 4e 99 80 1c 10 cf a0 c9 15 3a 76 23 7a fe f1 f2 c1 ce 6f 87 ba Data Ascii: Yy-6*{Q'`Q1qWyxS1!G&\|O'R&c90_veAWt]RATrd$@+f]OjI,v)ANt/%M7saf>n}>;DUc5c+QIvQN:v#zo
2024-04-26 18:32:52 UTC	1369	IN	Data Raw: 3f f3 f9 02 27 51 ce a3 12 34 a5 ff d1 7c 99 cb dd 0e 0e ba c2 e1 88 d6 24 f9 15 61 14 00 90 47 01 9e 34 ad b5 bd 86 69 63 63 63 66 66 86 bf 4b a7 6c 1b fe 60 29 eb e6 e6 66 61 61 61 7a 7a 3a 1a 8d ca 4e f8 72 2b 7e a1 a8 d7 eb 4d a5 52 b9 5c ae b5 b5 f5 e8 e8 08 2f 6a 82 47 8b a3 d7 d7 d7 c1 e0 fb be be 01 de 79 54 6a a2 4a d1 d9 d9 4f 2e 97 6e 6f 7f 93 43 c9 a0 e6 3c be 49 ce 4a 66 e5 96 c9 fc ee ee 7e 79 7a 9a 90 89 7b d4 47 01 a0 32 8f 3a 88 a8 06 00 9e 0c 9e a9 af ab ab bb ba ba 0a 04 02 73 73 73 f5 f5 f5 1c 49 6b 6b 6b 1d 0e 07 9f 75 58 cc 9f ad f4 b3 44 22 c1 55 d2 62 b1 d8 d4 d4 c4 a3 32 99 0c 97 4e 7b 7a 7a 3a 3b 3b 9d 4e 27 4f fa 7b 3c 1e 5e a4 df dc dc ac b5 e6 1b d6 00 dc 27 09 35 18 0c f6 f7 0f 34 34 34 86 42 21 de 65 ac 54 2a c5 62 b1 64 32 Data Ascii: ?'Q4\|$aG4icccffKl`)faaazz:Nr+~MR\/jGyTjJO.noC<IJf~yz{G2:sssIkkkuXD"Ub2N{zz:;;N'O{<^'5444B!eT*bd2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50063	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	511	OUT	GET /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=b067492a-89aa-4505-910a-665227fefb96 HTTP/1.1 Host: eephaush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156368
2024-04-26 18:32:52 UTC	446	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Fri, 26 Apr 2024 18:32:52 GMT Content-Type: application/json; charset=utf-8 Content-Length: 25 Connection: close Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-04-26 18:32:52 UTC	25	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 22 3a 31 30 30 31 7d Data Ascii: {"status":0,"error":1001}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50070	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	845	OUT	GET /media/New%20navigation_Rebrand%203.0/Blog-nav-thumb3-280x200.jpg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:53 UTC	802	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: image/jpeg Content-Length: 26786 Connection: close Age: 19945 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=28629 ETag: "268f2c450626f162617a3506d85e800e" Last-Modified: Mon, 27 Dec 2021 13:28:22 GMT Via: 1.1 b3879c23ec3b402566708cfe9d0ddc18.cloudfront.net (CloudFront) X-Amz-Cf-Id: UjRqeLGp0yL_b-ZG3fAvzHwY9Z8kQ3KQV2WcetIvGb387phnpsHcPg== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: vGjOmUEIEh1wbezGFdo.CxiO7DOjnkbQ CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:53 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8734a7802e4-MIA
2024-04-26 18:32:53 UTC	567	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 02 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 01 02 02 02 02 02 02 02 02 02 02 01 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 ff c2 00 11 08 00 c8 01 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 3a 00 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 08 03 04 06 07 01 05 09 02 0a 01 01 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 09 01 0a ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 03 d5 0c Data Ascii: JFIF:
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 49 95 1c cd a4 32 0e 53 e0 de b6 97 26 ef 7e db b5 05 d3 4e 75 f3 a9 ed e6 2d e6 cb 95 36 ae bc f3 ae a6 1c eb 7a 6d 9c 73 b4 77 68 00 00 00 00 00 00 03 06 ac cb a0 9f 41 74 85 09 d1 54 fb 0e 57 8e 49 b9 a3 a6 c8 ec 76 fd 89 84 d8 ab e3 18 1f cd 93 06 cb 70 4c 06 4c f2 57 3a 5f e1 d2 a0 85 7c ff 00 6c ea 6f 9e 7d 7a 59 d3 76 75 71 80 00 00 00 00 00 01 15 b6 6e f6 8a 5d 0b b4 ba 99 ca 72 08 1c 49 f9 c1 40 a4 fb f1 f2 5d dd aa 56 f5 e7 9c 76 33 f9 07 e5 67 e9 36 06 3d 50 8f 1d d7 d1 b6 7b 83 29 00 00 00 00 00 00 02 25 6d ad f1 13 fa 07 68 59 c2 bf a4 6c bd 0f 64 de 9a ea 8b 1a cc 6a e3 86 f4 bc e2 17 29 94 d0 50 82 56 47 8e 4a e8 3c 2d e5 d9 af 6c e3 da 93 2a bd 3b dd bb 06 3b 76 96 de 00 00 00 00 00 10 fc 45 f4 08 95 b5 f7 cc 47 e8 6d 9f f1 4e eb f5 bd bb Data Ascii: I2S&~Nu-6zmswhAtTWIvpLLW:_\|lo}zYvuqn]rI@]Vv3g6=P{)%mhYldj)PVGJ<-l*;;vEGmN
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: a8 ca 9a 21 2b 24 b1 cc 1b 44 d1 ab 2a ed 13 af 13 2b 75 5e c4 11 de 3d c7 e7 df cf fc 07 79 c6 49 96 f9 ba 9c b4 c0 2d 5d 42 87 a9 63 f4 11 2f 49 60 d5 d8 14 74 9f eb 7b 86 3c fd 4d a9 ef 04 fb 30 c7 65 22 14 26 44 ec 66 46 b6 9b fe ec 3e 7f e9 13 67 4d 6a 70 7d 2e b6 06 a1 d7 f1 7a 7a 29 6e 3d b7 e0 71 3c 34 99 9d 26 89 09 96 9a 52 b3 43 34 2d a2 78 27 8f e4 ea a9 9f e8 2a e3 6b fb f7 a3 82 a7 04 bd 64 6f 90 66 ee 82 b5 e3 db 65 d9 82 2e 98 2b d6 13 e8 eb 22 07 e4 ea 10 f4 6a 21 e2 9a cf 14 65 38 74 78 9d e2 95 74 4b 13 b4 72 a1 f5 64 43 a5 87 df fa 8f ce 00 2c 42 a8 66 66 36 55 50 59 98 f7 2a 8e 27 14 b9 0d 4c dd 2a 89 16 9d 3d 95 02 59 7d dc 74 a9 f8 9c 27 27 f2 c5 eb f3 b9 4f 7e dd 63 fd 94 4c 66 99 4d 3d 34 2d 53 46 d3 14 8a 5d 8c f1 4c 43 94 37 01 Data Ascii: !+$D+u^=yI-]Bc/I`t{<M0e"&DfF>gMjp}.zz)n=q<4&RC4-x'kdofe.+"j!e8txtKrdC,Bff6UPY'L=Y}t''O~cLfM=4-SF]LC7
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: eb da 71 6d 31 80 22 8c 1b 22 76 e0 55 c8 af 3c 9f dd dd ea 34 ed 5a 4a 4a 6f 51 74 a9 8c 2c 40 40 d6 f6 34 f0 b9 df 81 98 55 ac 30 c0 92 ec c4 25 4e dd 24 ab 4a c9 b4 1b e8 a9 a8 5a af 4d 19 e0 db 81 23 b4 63 cf 75 3c e0 4c ca c6 3d 99 46 a4 86 bf 30 a7 85 a4 d5 71 3e b6 9e 47 57 03 76 9b e8 f0 c2 72 87 30 41 27 a6 aa da 6b 77 a4 7e 75 13 2d 1e ef 44 9b 39 28 0e dc a1 bf 4f 52 b9 bf 66 07 2a 73 28 d6 1d 95 5d 66 d6 e9 ce 8c d1 d1 4b 13 a7 d2 9a 55 8d 10 a4 b7 ea 87 25 7d ac 47 cb 7c cd 27 b0 af a9 4a 3d 9d f5 cd 45 1b 55 09 6f d5 d9 d2 e6 21 4c 5a 7b 75 6a fa b8 fe ba 54 d4 19 5a b2 58 0b c3 a9 29 8b c5 9a b3 55 c4 3a 49 a9 e1 76 14 a4 b6 ed 2f ab 4f 1d 5a 71 fd 6e 22 95 27 68 69 cc ad a3 5d 0c 35 73 b5 5c 45 ce 96 bb 54 65 c2 29 02 f1 62 b2 70 e1 7c 7f Data Ascii: qm1""vU<4ZJJoQt,@@4U0%N$JZM#cu<L=F0q>GWvr0A'kw~u-D9(ORf*s(]fKU%}G\|'J=EUo!LZ{ujTZX)U:Iv/OZqn"'hi]5s\ETe)bp\|
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: f3 8d 7b 0e e6 69 e6 84 1f c9 e3 32 a5 7a e8 95 16 4b 68 6d 62 26 36 8a 56 ec da 77 11 d9 d9 88 32 fc ce ba 49 84 74 a2 96 18 25 68 1a 6a e7 68 8c b2 c7 d7 14 f0 22 16 92 31 7e be e5 3d 97 c3 f3 9a 09 e6 d9 3e ce b2 90 be f5 37 47 68 c1 26 27 fc 24 2c 37 1b fb 5d e3 11 54 25 4d 3c 15 29 b9 2a 60 8e 65 53 ea 89 10 36 9f 1b 12 47 c3 14 33 eb 8c c6 4e f8 5b 47 e6 9e 92 7f 11 f0 c7 12 07 16 6e aa a8 bb b7 82 a8 de c7 0d 49 56 a2 ed 47 5a 83 bd a8 ea 54 7d ed 16 23 14 e6 1c c4 54 58 4a b4 47 99 87 ba b7 3a 35 14 eb d0 1d af b0 33 fc 2f 8c f2 a0 0e 52 e7 91 a5 dd c6 65 22 b2 44 8d 23 dc 47 16 e2 b1 a9 37 c7 27 79 3b 57 36 c6 b2 77 5a 54 5e 96 c5 d2 43 52 c0 8d c7 41 00 20 f7 e1 1a 48 e3 d9 ac 8e 16 d6 b2 9d 37 f7 e9 ff 00 1f 23 44 a2 a6 6c d5 95 5a ae 66 96 9f Data Ascii: {i2zKhmb&6Vw2It%hjh"1~=>7Gh&'$,7]T%M<)*`eS6G3N[GnIVGZT}#TXJG:53/Re"D#G7'y;W6wZT^CRA H7#DlZf
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 06 3a f5 6c db f0 b6 25 1b fd a1 57 78 fc a0 bf d6 1d b8 7e 79 08 d4 f0 3b 47 d9 34 5e 9a 02 3b 08 9a 2b af df bf c3 02 a9 e5 e8 c5 14 b2 b7 74 71 bb 9f 8e 91 b8 62 2a 57 9a 50 6a 00 62 a6 fc d5 48 70 08 e0 6a dd 0d 95 7f 16 09 66 f5 ac 31 0c 7a 47 79 3b c9 ef 27 c8 c0 1e 23 10 45 4e 23 ac 53 4d b4 33 ad 0a ac a1 14 ac 06 2c c6 9a 7d 52 1b 74 43 6c c2 af d6 61 8c f0 6a e5 a6 72 7b f9 4b 53 ff 00 bc c0 ea a7 e4 e2 ff 00 d3 5c 54 c5 b4 50 c3 ad 1d c8 ef 20 ee 61 f7 62 5b 83 63 eb 6f 5e e7 1f 57 bf f8 76 e0 b3 0a fa 01 1d f6 b1 4c b3 1d 37 d4 9a a5 86 38 2f 6e a9 79 ac 17 bf 49 c6 7f 22 cb 9c d7 ba db 74 a2 36 b7 03 24 68 ab 21 fd 2f dd f3 2c ee 10 f4 a2 a4 c3 ce 16 90 54 73 98 14 2e d2 5a 0a 98 4c 35 7b 12 dd 49 d3 d1 4a 84 6f 06 0c 49 14 d0 6c d6 74 64 69 Data Ascii: :l%Wx~y;G4^;+tqb*WPjbHpjf1zGy;'#EN#SM3,}RtClajr{KS\TP ab[co^WvL78/nyI"t6$h!/,Ts.ZL5{IJoIltdi
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 6c 0d db 1d 65 04 96 92 09 81 e3 ba dd d8 ab a8 a7 a5 89 9e aa 4d 84 7e b6 ff 00 4e c3 f0 70 44 0e a6 91 b8 77 0b e2 ae a1 aa ea a7 aa 61 a4 cf 21 7d 1e c2 f0 44 f8 20 5f f2 19 29 69 a6 90 4d 25 3c 4d 30 dc 26 d1 a6 7b 77 6d 92 cd 6f 8e 02 a8 e0 3f 79 3f 79 ff 00 2e ff c4 00 2a 10 01 00 02 02 01 03 03 03 04 03 01 00 00 00 00 00 01 11 21 00 31 41 51 61 71 10 81 91 40 a1 f0 30 50 b1 c1 20 d1 e1 f1 ff da 00 08 01 01 00 01 3f 21 fd d5 da 8e 1e 4c 4b 40 22 86 21 42 a8 51 ac f6 df b1 68 bf a4 ec 7f 61 8a 33 9e 03 3d ef d7 b2 58 f8 c5 55 bc f5 22 2f fa 32 c1 34 3b 7f 9f 17 e7 35 a6 75 cd f5 a3 c1 3e 38 56 43 99 a8 da 90 85 ea 85 c9 1d 4b 03 eb 56 09 85 ec 12 ab 40 1b 14 03 95 03 2b 52 09 82 bd e1 94 a5 3b 32 10 d4 20 80 62 7e 76 40 5b 1a 64 cd db b1 6a 23 a8 e8 Data Ascii: leM~NpDwa!}D _)iM%<M0&{wmo?y?y.*!1AQaq@0P ?!LK@"!BQha3=XU"/24;5u>8VCKV@+R;2 b~v@[dj#
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 7a 98 ae a3 01 5b 41 28 74 ce bb 97 b6 18 3b 93 e4 70 2f ce 00 4c 11 36 f7 7a af 2f eb 0f e9 51 7b 48 f0 25 39 ea 12 ef fb f1 a9 08 e5 90 8b 42 4d b6 f5 6d f9 71 ce 8b 07 dd ca 56 c5 86 38 d3 03 bd b8 ab 76 5e f2 f4 b0 80 40 d8 76 00 79 40 2e b3 fb 3e 70 a3 a4 e3 c8 dd 8f 29 af 89 f1 83 3f 9f d6 4f 2c 6f 57 c4 32 22 33 da 43 79 20 37 78 72 b6 81 89 6b 16 c5 59 54 04 0b 38 82 0e 28 eb 3b 62 68 76 a5 8e b0 b1 07 c2 08 8e 07 d5 6d 03 38 bf 90 fe 55 6e b3 50 09 09 38 0c d3 f2 5c c7 be 11 9b 66 4e 12 68 25 3c 18 82 a5 64 9d cf 3c 98 df 8f f9 8e 90 06 84 05 e9 36 3f ac 6f a8 61 52 31 48 e4 3c 4a 35 89 00 43 a8 88 19 57 8c 1c 69 18 96 d4 15 ba 18 17 a8 c9 80 7c 30 da 2d 7b 20 f6 7d 1d 15 a0 0b 22 6e 98 76 b3 58 bd f2 72 c4 8d 38 18 57 ad ef 6c 47 ad 64 38 a2 29 Data Ascii: z[A(t;p/L6z/Q{H%9BMmqV8v^@vy@.>p)?O,oW2"3Cy 7xrkYT8(;bhvm8UnP8\fNh%<d<6?oaR1H<J5CWi\|0-{ }"nvXr8WlGd8)
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 87 b1 d6 41 cc 14 e0 50 2a 33 ad 74 43 cc d2 2a b3 11 2d c6 b4 0c 50 01 58 98 62 c3 81 8c 11 5b 30 24 33 1d 7e 61 db dc bc a9 c8 9e 9f b8 ee 6c ee 0f 42 fa 0c 36 c0 13 b5 22 30 91 a7 9d a7 f4 31 84 07 dc f0 9d e8 3c db 86 d5 10 0a 20 c2 e2 bb 83 fd 24 36 9d 24 27 db 0a a6 12 c8 b4 35 79 03 b0 50 0d 3e 9e e8 3e f5 e0 9e 3c 65 87 93 a1 a0 0f c1 87 80 1a 08 fa 23 06 ae 8b e6 1d 40 6c fd a9 10 2b 0e 2c 78 0e ef 94 48 f2 61 ba 17 d3 ed a7 48 a7 34 25 23 c0 84 25 63 a5 0b 5e 42 d1 2f 02 0b a0 c3 b4 90 7a 94 70 ca 93 88 1c 3a d8 33 fc cd a9 10 c2 79 94 46 df 70 29 14 8f 9b c3 9f 0d d8 04 12 1b c2 ed db 15 21 71 27 34 7a f1 eb 4f a0 74 83 bc 15 28 22 1e 04 89 55 08 cb b4 80 3a 01 c0 13 09 47 a1 98 cb ba 01 a3 23 3a e4 4b 66 29 c5 dd af 0e 0c eb f2 fe fa d9 4a ec Data Ascii: AP3tC-PXb[0$3~alB6"01< $6$'5yP>><e#@l+,xHaH4%#%c^B/zp:3yFp)!q'4zOt("U:G#:Kf)J
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 8c 05 73 d6 b8 51 fd 1c 4c 51 ae 92 27 3c e8 09 ec 3e 09 bd 68 8c 01 72 c6 b1 2d 92 64 5a 01 0d 0d e1 de d6 2c 9e d0 bb 2c b0 50 4c 19 ea 94 95 a7 55 dd b3 10 2a 02 94 b1 57 40 f6 fc 63 28 a9 42 ce 03 1f 08 ef f5 be 22 ad 64 54 32 8a f0 ac 85 0c d0 02 a0 07 41 d1 38 67 89 7d 06 bf 9f 18 b7 86 ea b5 60 34 60 2a 15 57 c5 d9 e1 ef ae d9 7c fd 0e cd 8a 53 77 7d c2 63 4c 35 6d 6d fe 4f 18 71 e3 7b 03 53 e6 ee e3 da 95 b4 1c a0 e1 e4 b7 73 09 3a 0b f2 f9 e6 b5 75 8e 02 05 c7 dc b1 ca 06 1c 70 6f bb e6 a2 3b e1 c0 30 18 d3 88 22 52 91 74 ec e6 f0 9d 6b 8d 41 12 6f 96 79 c2 fb 1e 90 73 1a d2 65 13 07 00 61 1d 10 0a 89 5d 20 99 6a 95 7c 31 6d 9a 3c 47 14 ec 87 19 d0 e7 ed 71 19 78 17 f1 a6 be f1 d4 71 f8 91 4c 49 b7 7c 6a 78 9d 4d 8d 0d 53 ff 00 33 85 ab de ca 07 Data Ascii: sQLQ'<>hr-dZ,,PLUW@c(B"dT2A8g}`4`W\|Sw}cL5mmOq{Ss:upo;0"RtkAoysea] j\|1m<GqxqLI\|jxMS3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50071	35.169.4.189	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	1053	OUT	GET /map/ttd/6f67744e-1091-4048-adba-e024cc18f2d2?ttd_puid=&gdpr=0&gdpr_consent= HTTP/1.1 Host: map.go.affec.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ck=662bf34d3757330001701a4b; oo=1; pt=eyJhbiI6eyJkdCI6MTcxNDE1NjM3MCwiaWQiOiI2NTc2Nzg3Mjg3MDEzNDUyMzI1IiwibHMiOjE3MTQxNTYzNzB9LCJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM2NX0sImltIjp7ImR0IjoxNzE0MTU2MzY4LCJpZCI6ImQ1ZjY0NmExLTNhOTAtNDU4NS04MWEwLTY5M2NhNGEwNmZjMCIsImxzIjoxNzE0MTU2MzY4fSwidiI6MH0=\|1714156370\|aad1f0e606ce7be488d98fd38fce45fd3c7e224b
2024-04-26 18:32:53 UTC	855	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: text/html Connection: close Set-Cookie: ck=662bf34d3757330001701a4b; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:32:53 GMT; Secure; SameSite=None Set-Cookie: oo=1; Secure; SameSite=None Set-Cookie: pt=eyJhbiI6eyJkdCI6MTcxNDE1NjM3MCwiaWQiOiI2NTc2Nzg3Mjg3MDEzNDUyMzI1IiwibHMiOjE3MTQxNTYzNzB9LCJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM2NX0sInRkIjp7ImR0IjoxNzE0MTU2MzczLCJpZCI6IjZmNjc3NDRlLTEwOTEtNDA0OC1hZGJhLWUwMjRjYzE4ZjJkMiIsImxzIjoxNzE0MTU2MzczfSwiaW0iOnsiZHQiOjE3MTQxNTYzNjgsImlkIjoiZDVmNjQ2YTEtM2E5MC00NTg1LTgxYTAtNjkzY2E0YTA2ZmMwIiwibHMiOjE3MTQxNTYzNjh9LCJ2IjowfQ==\|1714156373\|fe38a37a29004b0c3ba1840c6fe54c1191497f0b; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:32:53 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50072	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:52 UTC	663	OUT	GET /sovrn?uid=Ijp4ARZHzrcLtCmtRkicHZbu HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:53 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:53 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50073	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	872	OUT	GET /media/your-investment-your-assets-why-your-money-is-safe-with-bitpanda-bitpanda-blog-de.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:53 UTC	803	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: image/png Content-Length: 137477 Connection: close Age: 24304 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=232028 ETag: "92864f1d91b2141d958267f64bcbd483" Last-Modified: Mon, 16 May 2022 15:47:43 GMT Via: 1.1 b3fa6483b226ef7cc87d8bab653f621c.cloudfront.net (CloudFront) X-Amz-Cf-Id: sj6rMUc3SvdnRFYAyDnNrMkK_yG04y5ts3CcoV8Z4EqBShKY-r7E9g== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: TjpSOTUN.JjLReFlZF2ux4fPR.YBaqvT CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:53 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a874df572269-MIA
2024-04-26 18:32:53 UTC	566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 04 b0 08 02 00 00 00 2c 46 46 e9 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 02 18 bf 49 44 41 54 78 da ec d8 31 0d 00 20 10 c0 40 dc f0 fe 15 22 82 05 9a 4b 4e 40 e7 ae d9 03 00 00 00 00 00 5c 5a 6f 66 01 00 00 00 00 c0 5f 0c 77 00 00 00 00 00 30 dc 01 00 00 00 00 c0 70 07 00 00 00 00 80 0c c3 1d 00 00 00 00 00 0c 77 00 00 00 00 00 30 dc 01 00 00 00 00 20 c3 70 07 00 00 00 00 00 c3 1d 00 00 00 00 00 0c 77 00 00 00 00 00 c8 30 dc 01 00 00 00 00 c0 70 07 00 00 00 00 00 c3 1d 00 00 00 00 00 32 0c 77 00 00 00 00 00 30 dc 01 00 00 00 00 c0 70 07 00 00 00 00 80 0c c3 1d 00 00 00 00 00 0c 77 00 00 00 00 00 30 dc 01 00 00 00 00 20 c3 70 07 00 00 00 00 00 c3 1d 00 00 00 00 00 0c 77 00 00 00 00 00 c8 Data Ascii: PNGIHDR,FFsRGBIDATx1 @"KN@\Zof_w0pw0 pw0p2w0pw0 pw
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 00 00 00 82 21 b8 03 00 00 00 00 80 e0 0e 00 00 00 00 00 82 3b 00 00 00 00 00 04 43 70 07 00 00 00 00 00 c1 1d 00 00 00 00 00 04 77 00 00 00 00 00 08 86 e0 0e 00 00 00 00 00 82 3b 00 00 00 00 00 08 ee 00 00 00 00 00 10 0c c1 1d 00 00 00 00 00 04 77 00 00 00 00 00 10 dc 01 00 00 00 00 20 18 82 3b 00 00 00 00 00 08 ee 00 00 00 00 00 20 b8 03 00 00 00 00 40 30 04 77 00 00 00 00 00 10 dc 01 00 00 00 00 40 70 07 00 00 00 00 80 60 08 ee 00 00 00 00 00 20 b8 03 00 00 00 00 80 e0 0e 00 00 00 00 00 c1 10 dc 01 00 00 00 00 40 70 07 00 00 00 00 00 c1 1d 00 00 00 00 00 82 21 b8 03 00 00 00 00 80 e0 0e 00 00 00 00 00 82 3b 00 00 00 00 00 04 43 70 07 00 00 00 00 00 c1 1d 00 00 00 00 00 04 77 00 00 00 00 00 08 86 e0 0e 00 00 00 00 00 82 3b 00 00 00 00 00 08 ee 00 00 00 Data Ascii: !;Cpw;w ; @0w@p` @p!;Cpw;
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 00 80 0b fd bc 3d 74 61 a8 10 22 25 25 a5 a9 a9 c9 6c 36 4b 4f d0 80 69 a0 b3 b3 53 ad 56 9f 3d 7b 76 db b6 6d 62 ac e8 e8 e8 8c 8c 8c 82 82 02 85 42 51 57 57 37 3c 3c 2c 3d 59 43 43 43 57 af 5e dd b4 71 93 10 62 f6 ac d9 ae 79 b6 13 14 83 3b 00 00 00 00 00 00 00 3c 32 c7 54 bd 28 74 51 71 71 f1 fa f5 eb 85 9c 42 a1 d0 e9 74 8f 74 75 fb e8 e8 a8 c9 64 32 18 0c dd dd dd 5f 7f f5 f5 07 ef 7f 20 e4 dc 5e 76 8b 8d 8d dd b0 61 c3 9e ec 3d 55 55 55 1a 8d 46 72 76 0d 0d 0d f1 1f c6 7b b8 7b b8 e6 f1 4e 50 0c ee 00 00 00 00 00 00 00 f0 c8 66 cd 9c b5 22 66 85 24 49 f5 f5 f5 1b 93 37 ce 7f 73 be 10 22 3d 2d bd a7 a7 e7 47 37 77 9b cd 36 32 32 62 32 99 6a 6b 6b 77 ef de fd 9f 9d 3d c0 3f 20 3a 2a fa e3 b5 1f ef dd bb f7 cc 99 33 cd cd cd d2 d3 ec 7a ed f5 98 77 63 Data Ascii: =ta"%%l6KOiSV={vmbBQWW7<<,=YCCCW^qby;<2T(tQqqBttud2_ ^va=UUUFrv{{NPf"f$I7s"=-G7w622b2jkkw=? :*3zwc
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 04 f4 b8 f2 67 94 12 87 5c a4 4d 61 e4 61 4d cc 34 4d 35 32 36 64 c7 e4 ad 62 33 a5 20 bf 06 b4 6d 24 c4 5d 74 76 55 44 59 d8 ef 7d 66 1d 1c ef ce 5d 2d 29 be 5f 79 be e6 31 ce 34 b6 f2 e5 fb e7 73 3e f3 d9 a9 e6 c9 e6 cb 3f eb c6 83 7b 45 45 45 e2 7d 89 96 58 8b fa ce 55 7f 0f f0 e6 9b 6f 12 dc 09 ee 00 00 00 00 00 00 00 60 bc e0 ee f1 78 5a 5a 5a 4a 4b 4b 73 56 e5 2c 59 b2 24 e5 a1 94 e9 d3 a6 9b a2 4c ea 5f f6 77 aa 3d 70 70 6f 6a 6c d2 fc 6c e7 ce 9d 16 8b 25 6e 66 5c 80 e0 ae 4e c1 13 dc 09 ee 00 00 00 00 00 00 00 60 bc e0 ae 3e 9b f5 4c 56 62 62 62 54 64 d4 a5 db 63 ae fc 2a d4 c1 0d ee 1f 94 7f 10 1f 17 7f 9f e5 3e 82 3b c1 1d 00 00 00 00 00 00 00 6e b6 e0 de d5 d5 15 3b 23 36 68 74 50 80 ce 7e fd c1 7d 71 fa e2 96 e6 96 00 c1 3d 2e 36 2e 31 21 91 Data Ascii: g\MaaM4M526db3 m$]tvUDY}f]-)_y14s>?{EEE}XUo`xZZZJKKsV,Y$L_w=ppojll%nf\N`>LVbbbTdc*>;n;#6htP~}q=.6.1!
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 00 00 00 00 00 0c 8b e0 ee 72 b9 6c 36 db 47 1f 7d 54 54 54 f4 dc b3 cf cd 9e 35 5b 7c 8b 9c 10 b9 69 d3 a6 9a 9a 9a a3 47 8f aa 1f e1 76 b9 b5 9f b3 7d ff de 37 7a d4 68 11 89 31 c7 e8 f3 0d 1b 11 c1 1d 00 00 00 00 00 00 00 86 2c b8 4f fd fd d4 2d 9b b7 68 ff bd be be be 9f 7e fa e9 f0 e1 c3 5f 7f fd f5 f6 ed db 33 32 32 64 60 71 33 e3 56 bd bc ea d3 4f 3f ad ab ab 3b 7e fc 78 6f 6f af f6 8b a6 ce c2 57 57 57 67 65 65 89 88 ba f9 5d 9f 2f d9 70 08 ee 00 00 00 00 00 00 00 30 64 c1 7d c6 f4 19 25 25 25 da c0 3a 3b 3b 1b 8e 34 ec d9 b3 a7 b8 b8 78 c5 8a 15 32 b0 d4 d4 d4 37 de 78 e3 b3 cf 3e db b7 6f 5f 53 53 93 ef de 98 1b 9d ca fa cd cd cd 9b 37 6f 16 11 53 94 c9 3c d9 ac cf 57 6d 20 04 77 00 00 00 00 00 00 00 18 b2 e0 1e 3b 33 56 b5 75 a7 d3 d9 da da 7a Data Ascii: rl6G}TTT5[\|iGv}7zh1,O-h~_322d`q3VO?;~xooWWWgee]/p0d}%%%:;;4x27x>o_SS7oS<Wm w;3Vuz
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 9e 9e 9e 10 42 f7 a1 6e c1 5d 70 07 00 00 00 00 98 27 c1 7d 7c 7c 7c cb 67 5b ea eb ea 73 0d b9 94 af c7 cc 2a b8 6f fa 74 60 60 40 70 17 dc 01 00 00 00 00 aa c3 9c 04 f7 8d 9f 6c 6c 6a 6c 4a 79 c5 ec 6f b8 0f 0d 0e cd 18 dc 47 47 46 05 77 c1 1d 00 00 00 00 60 3e 04 f7 27 4f 9e ec 68 db d1 98 6b 9c db 53 6d de bc 79 ac 3c 16 9f ef 86 bb e0 0e 00 00 00 00 50 05 e6 24 b8 b7 7d d5 d6 94 9b e3 1b ee f1 99 2f 5f be 4c 52 a6 54 2a 85 10 8a 5d c5 e1 e1 e1 b4 e0 de d5 d5 55 bb 58 70 17 dc 01 00 00 00 00 fe af c1 3d d6 f6 b5 1f ad 3d 7e fc 78 12 a7 e2 0d f7 c3 87 0f 8f 8e 8e 56 08 ee 4b 16 2f c9 e6 da 33 4e 70 07 00 00 00 00 98 0f c1 3d bf 32 1f 8f 34 30 30 90 a4 cf f9 f3 e7 43 08 a7 7e 3e 55 2e 97 d3 82 7b 67 67 67 dd 92 ba 6c ae 3d e3 04 77 00 00 00 00 80 aa 0f Data Ascii: Bn]p'}\|\|\|g[sot``@plljlJyoGGFw`>'OhkSmy<P$}/_LRT]UXp==~xVK/3Np=2400C~>U.{gggl=w
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: fb 9e 3d 7b 94 7b 86 0e 19 9a 9e 96 fe 85 e1 8b c7 ae 91 32 ae e1 7d 76 79 94 e4 f2 7d 7b f7 6d de bc 39 e6 0f 31 cf 53 fb f4 29 d3 65 53 7c 5b 5b db b7 fe ae fc bc 77 ef 5e 54 54 94 c7 00 0f 7d 1e 75 1f 42 70 07 00 00 00 00 00 00 00 ed 83 7b 76 76 f6 ec d9 b3 d3 b7 a5 97 95 95 19 8d c6 96 07 2d b2 27 dd a9 dd c8 03 2f 5c b8 70 e2 c4 89 dc dc dc f7 ff fc 7e c0 b8 00 e5 9a d8 d8 d8 82 82 82 fa fa 7a bb dd ee 7c 89 91 28 9f 95 95 a5 94 0a 18 1f a0 cf a3 ee 43 08 ee 00 00 00 00 00 00 00 a0 71 70 b7 d9 6c 12 d9 6b 6a 6a be 6a fe ca 62 b1 68 78 99 bd a5 a5 a5 b2 b2 f2 f4 a9 d3 3b 33 77 46 47 47 0f 78 65 80 72 cd b4 29 d3 b6 a7 6f 2f 2d 2d ad ad ad 75 ad 91 79 a9 31 9b cd 45 45 45 03 07 0c 1c 35 72 94 3e cf b9 6f 21 b8 03 00 00 00 00 00 00 80 f6 c1 dd a9 dd f4 Data Ascii: ={{2}vy}{m91S)eS\|[[w^TT}uBp{vv-'/\p~z\|(Cqplkjjjbhx;3wFGGxer)o/--uy1EEE5r>o!
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 4a 4a ca d2 3f 2e 0d 0f 0b 9f 3c 69 b2 94 7d 7d 1e 02 08 ee 00 00 00 00 00 00 00 30 fe 7f ec dd 31 4b 5b 51 00 86 e1 33 97 da 08 2d a9 a8 95 26 31 2d 66 a9 95 4a 11 ea 56 37 17 87 5a a7 ba c7 45 2a b8 37 93 38 55 90 3a 3b 45 04 97 ba 28 62 1d 84 40 86 0c 21 43 25 5b b6 64 c8 14 32 24 4b 0a 16 a1 53 29 4d 68 93 f0 7c 3c 3f e0 de f5 e5 70 4e f7 66 5f cc ee ec ec f4 ea ae f6 7a bd 9e cf e7 0f be 1c 6c a4 37 96 97 97 e7 5f cd ff 3c 47 ef 1d d4 81 20 b8 03 00 00 00 00 74 f5 7a ea dc cb b9 cd cd cd ab 6f 57 9d bf 5d ad 56 3b 3f 3f df fb bc b7 bd bd bd fe 61 7d f1 cd e2 e4 f8 e4 d4 93 a9 e4 74 d2 ed 31 03 44 70 07 00 00 00 00 e8 4a 22 9e 08 21 ac bd 5f 3b ca 1e b5 5a ad ce 1f af 54 2a 9d 9d 9d 65 b3 d9 4c 26 b3 fa 6e 35 fa 30 1a 42 88 8c 44 62 4f 63 3a fb 20 12 Data Ascii: JJ?.<i}}01K[Q3-&1-fJV7ZE78U:;E(b@!C%[d2$KS)Mh\|<?pNf_zl7_<G tzoW]V;??a}t1DpJ"!_;ZTeL&n50BDbOc:
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 00 36 84 3b 00 00 00 00 00 08 77 00 00 00 00 00 10 ee 00 00 00 00 00 b0 21 dc 01 00 00 00 00 40 b8 03 00 00 00 00 80 70 07 00 00 00 00 80 0d e1 0e 00 00 00 00 00 c2 1d 00 00 00 00 00 84 3b 00 00 00 00 00 6c 08 77 00 00 00 00 00 10 ee 00 00 00 00 00 20 dc 01 00 00 00 00 60 43 b8 03 00 00 00 00 80 70 07 00 00 00 00 00 e1 0e 00 00 00 00 00 1b c2 1d 00 00 00 00 00 84 3b 00 00 00 00 00 08 77 00 00 00 00 00 d8 10 ee 00 00 00 00 00 20 dc 01 00 00 00 00 40 b8 03 00 00 00 00 c0 86 70 07 00 00 00 00 00 e1 0e 00 00 00 00 00 c2 1d 00 00 00 00 00 36 84 3b 00 00 00 00 00 08 77 00 00 00 00 00 10 ee 00 00 00 00 00 b0 21 dc 01 00 00 00 00 40 b8 03 00 00 00 00 80 70 07 00 00 00 00 80 0d e1 0e 00 00 00 00 00 c2 1d 00 00 00 00 00 84 3b 00 00 00 00 00 6c 08 77 00 00 00 00 00 Data Ascii: 6;w!@p;lw `Cp;w @p6;w!@p;lw
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: b4 28 3f 3f ff 37 8d 50 4a 1d 3c 78 50 44 4a 72 3a 1b 07 e8 50 41 1d 3a 74 48 29 55 f4 cb 41 a7 83 28 5f c2 0b 44 33 42 f8 cc 70 fd 0b 3c 79 f2 64 50 ff 20 34 09 3a e6 5b 46 88 83 20 22 9f 7d f6 99 d1 4f 5a 74 a0 26 19 1b 36 d6 11 04 77 28 32 50 db c3 c3 c3 af 5f bf fe e0 c1 03 54 3b ea cf c0 5f f0 cf 7b f7 ee ad 5f bf 1e cd 4a 85 9d f0 45 b9 25 22 ef 07 bf 8f 72 0b cf c2 53 6c 9f 8e 45 e6 f8 f1 e3 90 6c d8 49 44 fe 42 44 64 e5 ca 95 4a 2f a6 4d 9b 56 a1 5c 05 c7 bc 10 7d a9 14 db 06 f8 e5 55 45 c6 f5 9f af 2f 8c 5a 28 22 dc 4d 77 16 44 24 2a 2a 0a 6b 75 b1 f9 1b 56 e0 0b 17 2e 88 88 7d 4d 27 22 32 63 c6 8c 8c 8c 0c 23 29 d5 09 7c 4b 58 f3 57 ad 5a 05 cd bd 41 bd 06 8e f9 03 24 84 3c 2e cf f4 ea d5 aa a3 99 3d 25 25 45 29 65 9b 3d 1a 7f 4f 4d 4d 7d b7 df Data Ascii: (??7PJ<xPDJr:PA:tH)UA(_D3Bp<ydP 4:[F "}OZt&6w(2P_T;_{_JE%"rSlElIDBDdJ/MV\}UE/Z("MwD$**kuV.}M'"2c#)\|KXWZA$<.=%%E)e=OMM}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50074	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	593	OUT	GET /media/sponsorships/FCB/bp-fcb-partner-logo3.gif HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:53 UTC	841	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: image/gif Content-Length: 119792 Connection: close Age: 20498 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=133316 ETag: "60a54db85e0e9cddc7d370327c311656" Last-Modified: Tue, 09 Jan 2024 17:56:09 GMT Via: 1.1 344d3cc6f132c3533d8a58d054dcf1da.cloudfront.net (CloudFront) X-Amz-Cf-Id: c-uaOEjjAQ2ARprWUen_bmY3EGP0F0kjfi4pXlblaCcnF1TCwk5Iiw== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-server-side-encryption: AES256 x-amz-version-id: Uj9qW5OyICn9lW6qSckRZmbrTk3NkVOj CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:53 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a874ef3667b6-MIA
2024-04-26 18:32:53 UTC	528	IN	Data Raw: 47 49 46 38 39 61 e0 03 90 01 f6 20 00 ff ff ff 00 00 00 aa a6 a3 9f 9b 98 cb c6 c3 fe f9 f4 31 30 2f 51 4f 4d f8 f1 ec 40 3e 3c 8d 89 86 ee e9 e3 ff ff fb e8 e2 dd 85 82 80 96 92 90 0f 0f 0e dd d8 d4 6c 69 67 7a 77 74 d4 ce ca bb b7 b4 b3 ae aa 80 7d 7a 74 71 6f 64 61 5f 23 22 22 5c 5a 59 ff f7 f0 c5 c0 bb ff e8 e0 a3 9f 9c e1 dc d8 2f f5 9e 1f a0 66 15 73 4a 29 cf 85 10 51 34 0c 3c 27 07 29 1b 04 19 12 32 ff a6 f2 ec e8 c1 bc b9 f4 eb e6 57 fa b1 90 ff cf 71 fe c0 c4 ff e6 e6 ff f4 af ff d9 f4 fa ff e1 c9 c5 ff ee e8 b9 d4 ec 53 b0 85 49 64 56 52 84 6c 82 d9 a8 c7 dc f0 0a 7b c1 1d 83 c4 13 7d c2 34 8f ca 06 79 be b6 ce e9 ff c9 c6 fe 31 52 fe 2d 50 ef df cf fe 2c 4f 92 c5 e3 7b b1 da ff 7a 84 ff 5e 6e ff d9 d5 ff 4c 63 26 86 c6 ff cc cf ff 57 69 ff 37 Data Ascii: GIF89a 10/QOM@><ligzwt}ztqoda_#""\ZY/fsJ)Q4<')2WqSIdVRl{}4y1R-P,O{z^nLc&Wi7
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d Data Ascii: "Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xm
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 83 0b 1f 4e bc b8 f1 e3 c8 93 2b 5f ce bc b9 f3 e7 d0 a3 4b 9f 4e bd ba f5 eb d8 b3 6b df ce bd bb f7 ef e0 c3 8b 1f 4f be bc f9 f3 e8 d3 ab 5f cf be bd fb f7 f0 e3 cb 9f 4f bf be fd fb f8 f3 eb df cf bf bf ff ff 00 06 28 e0 80 04 16 68 e0 81 f5 2d d0 00 82 0c 96 52 80 05 0e 1c 60 00 04 01 54 68 21 04 1a 1c 30 81 05 1e 34 e8 ff a1 25 04 4c a0 81 85 24 96 68 a2 06 12 54 f0 e1 8a 8c 74 90 c1 88 26 c6 28 63 85 10 64 10 01 8b 38 06 f2 e0 01 14 ce e8 a3 8f 09 a8 98 e3 90 77 14 30 40 02 3d fe a8 a4 8f 06 08 49 e4 93 6d 34 f0 80 01 4b 56 59 65 02 1d 42 a9 65 19 11 38 00 a3 95 60 2a 09 c1 03 5b 96 e9 05 01 18 7c 19 e6 9a 4a 1e e0 97 99 70 4e 51 41 06 49 b2 69 a7 98 1d c4 a9 27 13 05 08 c0 e3 9d 80 82 79 c1 9e 84 12 c1 c1 91 75 06 aa a8 92 58 16 1a e7 02 0a 24 b0 Data Ascii: N+_KNkO_O(h-R`Th!04%L$hTt&(cd8w0@=Im4KVYeBe8`*[\|JpNQAIi'yuX$
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 66 4b a2 5c 4e 2c 87 55 8a ad 31 b8 5b a1 da fa e8 b6 71 28 ff 28 9b 76 0b 80 c4 ae 56 11 63 84 a1 70 27 91 5b 19 45 f7 5a 08 48 1f 98 96 9b 8c e6 5a c8 bc 33 ba 6f 1c c8 db 56 22 54 d7 4a a5 35 44 3d c3 54 09 ff 96 28 c1 cd 3a e5 9a c4 db 54 3b 01 58 46 e8 85 83 7b ad c4 de 0d 47 56 11 0b 5e ed 54 1d 91 01 45 61 13 56 0e e6 2f 32 1c 1c 80 0b c7 48 c0 70 a8 2f ef 0c 2c d4 44 84 d8 4a 95 b0 64 85 64 78 2d 09 87 89 c2 c4 20 b0 8b 4d 94 61 37 44 e0 4e 84 f5 b0 92 20 4c 88 1b 47 76 c4 8c 50 6f a0 70 37 b0 14 47 83 c5 43 2e 11 8c dd 40 c6 35 45 77 02 93 03 31 9b 28 b1 80 45 79 57 57 3e 06 13 90 87 21 e4 e7 da 96 0e 14 00 d4 58 21 0b a6 33 0f c2 c9 62 82 f2 22 10 60 e6 ef b2 49 c5 c7 c0 b2 9b 7d b4 65 36 b0 15 a4 44 08 e2 92 a8 8c 08 3c b7 52 12 65 56 e9 c4 d2 Data Ascii: fK\N,U1[q((vVcp'[EZHZ3oV"TJ5D=T(:T;XF{GV^TEaV/2Hp/,DJddx- Ma7DN LGvPop7GC.@5Ew1(EyWW>!X!3b"`I}e6D<ReV
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 07 60 a3 7d 17 b2 01 d1 87 8a 25 42 95 50 70 28 2d 18 26 d4 b2 04 8d a9 96 2b 08 06 18 f9 66 43 f0 8a 8a 72 32 36 29 04 2a 63 2a ec 95 87 91 58 81 18 80 8c 26 12 56 6b b0 44 91 c7 00 6e 34 23 f5 58 4e 6b 32 9b 43 d0 79 bf 72 01 1d 28 07 1d 10 95 85 89 01 f6 e3 72 56 02 96 49 60 8b 57 92 04 03 80 99 27 b2 7e 6f 30 00 a0 16 3c 45 d6 94 5d 40 00 92 39 71 12 70 97 b2 f6 84 62 60 95 60 92 89 d3 62 96 7c 62 6d be b2 6e f4 07 26 46 c0 00 65 88 2c 1a d0 96 65 b0 44 cc c6 01 bf 29 23 0b 89 04 3d 35 01 46 d0 01 dd 59 29 19 10 a0 71 20 00 d8 79 44 c4 c9 67 6b 52 99 ff 4b 10 7f 8c 72 04 d7 e9 2b f9 99 07 1e 89 2c 88 63 04 9c 49 22 9e b9 04 16 70 a0 51 25 01 9f c3 26 fa 89 9a 97 a8 7e 1a 39 29 42 33 8b 46 00 9a b8 69 43 6b 58 08 22 f9 48 f9 46 2f 1a 20 9d 5c c0 9b 4c Data Ascii: `}%BPp(-&+fCr26)cX&VkDn4#XNk2Cyr(rVI`W'~o0<E]@9qpb``b\|bmn&Fe,eD)#=5FY)q yDgkRKr+,cI"pQ%&~9)B3FiCkX"HF/ \L
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: b8 06 f0 2b 01 db 3c 04 a2 34 29 42 2c a5 03 8d ca 46 20 00 22 1b 23 2e 3d 04 aa 4c 4b 27 bd ab 6c 72 d2 7e 3a 29 09 5a 05 05 b0 a1 bf 8c 05 b5 3c 39 1b 0c 9b 6b 5c 25 cb 7c 05 03 7c 22 21 cc 2d 07 c0 2e 15 50 01 45 e5 cb 76 b2 d2 74 d0 c0 de 93 d4 4a 30 78 8e 78 a7 11 fc 05 6d f8 23 b3 1c 4e ff 94 b2 01 0b 8c 04 61 5c 63 56 40 60 0f d6 c7 50 60 01 ff aa cf 8b a2 01 33 5d 81 47 7d 58 58 c0 b3 a2 f9 c5 4a 70 01 33 9a d0 42 80 bd f5 a2 d5 7e f3 af 10 1d 05 77 fc b8 d2 03 90 1d 50 d3 26 62 c5 d4 ac 28 12 40 b1 4b 30 bb 8a 15 ba 34 1c d2 a6 a8 06 0d ca 5a 5c 40 01 d8 59 c0 47 10 d3 01 10 c5 53 c0 00 5e 6b 25 75 0d 00 8e 4d 22 90 3d 05 1d 2d 23 9c ec 04 f4 7a 27 6f ba 7a 77 fd 7b 57 90 db b9 49 d9 4a 30 d4 6b 42 d8 54 b0 d4 e7 ca 37 4f d0 00 bc 6d 22 56 2d 07 Data Ascii: +<4)B,F "#.=LK'lr~:)Z<9k\%\|\|"!-.PEvtJ0xxm#Na\cV@`P`3]G}XXJp3B~wP&b(@K04Z\@YGS^k%uM"=-#z'ozw{WIJ0kBT7Om"V-
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 64 70 8d cd 3c b3 8e 05 5d ff 84 ab a4 c4 3c bd 90 02 58 b9 88 62 15 a7 79 04 ba 4c 16 69 59 9c 66 1c 0f 16 05 44 2d 9b a5 90 2e e9 15 e2 d6 b4 d2 a1 ac e2 ee c5 2d 84 ee a6 16 08 12 32 0e 85 c7 92 08 c1 4a f6 b2 ca 51 9b 27 31 80 af 74 2c c4 79 8c 26 6c 2e c3 8b 98 56 b4 4a 47 21 52 9f 85 5e 51 51 fa 0d e9 c8 42 81 ef 10 de 77 72 d1 db 2a 5e 22 85 46 ca ba 50 4a 2b a6 0b 21 46 0a f3 de cc 48 7c fb 36 d1 30 21 73 d6 cf 80 5a 4a c5 dc 38 ce 62 37 47 b3 6e 2d 04 91 ae 2c 6c ca 01 51 d5 1c 09 2b 52 0a fe aa e8 cd f3 2f eb d8 45 65 d7 9c 45 7e f0 7b 24 b6 56 26 54 da 90 58 3c 9d b9 64 46 ff 4e 8c d7 5d 7d 3a c0 6f 32 c0 81 f7 1a 1b ec 27 21 2e 5b 44 37 e6 c6 70 ce 8d c6 e2 8b 44 02 c9 48 82 26 41 40 8a 3b 68 33 37 3a 1b ca bc 45 6c 33 22 14 d5 4a ab 04 b5 32 Data Ascii: dp<]<XbyLiYfD-.-2JQ'1t,y&l.VJG!R^QQBwr*^"FPJ+!FH\|60!sZJ8b7Gn-,lQ+R/EeE~{$V&TX<dFN]}:o2'!.[D7pDH&A@;h37:El3"J2
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 4a ca 00 cd a2 5a b8 92 4a 3f c7 d1 21 78 34 31 e3 74 43 3f 7f 69 44 0b 09 b3 5a 28 45 0a 5e 9b 20 c0 39 f8 ed a5 71 8c 29 2a 55 d7 9a a9 ba 81 4e 33 c2 e6 1a 8c 3a 1e 88 16 e2 ad be d0 66 a2 70 46 54 43 19 56 56 44 08 eb 3a 05 3b 58 a7 ba 24 90 95 c0 62 62 63 74 9d 18 0e 93 17 59 01 2c 14 d6 2a 84 45 a2 c1 7f e4 60 9e 1b 8a 9b 84 df 36 81 ae be 48 2b 18 82 3b 59 94 3c 36 ae c8 b2 44 2c b1 61 d7 63 40 96 09 7a 05 03 76 4b 32 dc d8 0d 81 99 f0 8b ad 10 08 8b 94 ed cd 6f a4 b0 2c e9 72 da 59 88 2f de e3 b8 87 6d cb 5c 2b 7b ff 9a cb 12 b4 47 34 25 c3 18 8f 3a 9b cf 96 e1 9f 79 48 a1 4b 52 37 d3 bd 89 4f 94 0c 22 40 57 9b 80 54 8d 02 e2 b6 23 54 27 3b 0f 02 e1 5b 4e 81 89 55 dd 44 5b 9f 90 55 6c 84 f5 ab fb 00 70 21 3a eb 15 bc d5 d0 a5 9b c4 2c 36 9e eb aa Data Ascii: JZJ?!x41tC?iDZ(E^ 9q)UN3:fpFTCVVD:;X$bbctY,E`6H+;Y<6D,ac@zvK2o,rY/m\+{G4%:yHKR7O"@WT#T';[NUD[Ulp!:,6
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: a0 03 48 f1 0b 16 d1 11 de af bb 66 f1 0b b4 f0 50 84 cf 20 3b b0 08 9e 10 0c d6 b0 20 95 12 91 12 40 01 08 c0 65 1a f1 02 6c b2 12 ae 10 cd 68 11 1b fa 30 12 0f 60 02 14 40 00 04 40 01 1c 20 03 7c 30 0b 1e b0 0a 36 d2 09 34 00 03 04 00 a1 22 60 00 36 e0 1f d7 ff 49 18 a7 c0 05 c7 0d 03 2c 80 73 0a 80 02 1e 20 29 a3 92 09 ca d1 71 40 91 16 d6 0f b8 e2 51 29 0d e0 02 3a c0 65 38 a0 03 2e 20 24 d1 a0 fe 90 e0 2b 4d 4e 02 fa 72 0a 28 60 00 04 73 30 f3 91 0c e2 90 c1 e6 30 09 02 90 32 7f d1 4d 86 b2 e6 10 70 cf 06 33 0b 20 40 03 12 60 36 67 53 03 ec d2 2d 4b 01 22 ab ee 36 27 4e 17 5e 13 0a 34 c0 00 68 73 36 79 33 b2 68 01 35 61 53 36 87 d3 36 7f f3 09 1c 51 08 58 72 45 44 11 11 76 31 2a 63 73 38 13 80 39 9b b3 09 52 71 08 52 72 db b0 53 3b b7 53 11 63 b1 57 Data Ascii: HfP ; @elh0`@@ \|064"`6I,s )q@Q):e8. $+MNr(`s002Mp3 @`6gS-K"6'N^4hs6y3h5aS66QXrEDv1*cs89RqRrS;ScW
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 0c 29 60 02 ac 78 2d 0d 77 08 0a 80 00 a4 79 9a a9 b9 9a a7 d9 03 09 60 02 2a 59 38 24 80 8e 6b d1 9a c1 b9 9a 11 99 14 1a 40 00 26 e0 00 c4 d3 e9 12 e0 00 2e 40 00 78 92 55 f8 77 0a 02 f0 53 8d 02 13 ca 38 31 18 a0 02 24 60 9b 99 c0 00 26 40 d5 c2 39 a0 a5 b9 0f 1a 40 a0 c3 b9 95 e5 80 01 0c 3a 9c f9 46 00 36 a0 e5 d4 17 10 17 da 9a b5 16 1b 3a 00 03 f8 99 1a 31 60 cc 26 da 9a c7 d9 fd 20 39 f4 8c 34 1b 7a 58 3f dd f7 99 67 6e 00 ce d9 00 ac e2 3a 37 60 02 06 80 02 18 17 a5 97 09 01 38 60 9c 49 ac 0c 16 a0 02 ce 32 3b 9d 22 38 0f 40 02 14 a0 02 ee f9 58 28 c0 9c 37 c0 a7 9d ce 00 0e 00 03 06 80 00 66 9a a6 a5 9a 0f 1a f1 01 30 e0 00 58 da 26 5c 7a 02 e2 72 aa af 51 00 2e 20 a9 d3 99 1a 99 1a 03 1e 00 aa 51 fa 98 d5 74 4e 97 30 94 6d 17 46 bd 3a ae e5 ff Data Ascii: )`x-wy`*Y8$k@&.@xUwS81$`&@9@:F6:1`& 94zX?gn:7`8`I2;"8@X(7f0X&\zrQ. QtN0mF:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50075	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	562	OUT	GET /v1/assets/prices HTTP/1.1 Host: api.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:53 UTC	1191	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=z4A+AjEvcwkiPDC7Nc58DcFnHnBi/dEE2OuELDR21jT0HvSo/67LxAtv0UfHNPiVNo7L3NvvEj0LgBSrCtSjxoB5g6HK8oNM+pHXeoP/EHhlwwLm6f23clRMffF+; Expires=Fri, 03 May 2024 18:32:53 GMT; Path=/ Set-Cookie: AWSALBCORS=z4A+AjEvcwkiPDC7Nc58DcFnHnBi/dEE2OuELDR21jT0HvSo/67LxAtv0UfHNPiVNo7L3NvvEj0LgBSrCtSjxoB5g6HK8oNM+pHXeoP/EHhlwwLm6f23clRMffF+; Expires=Fri, 03 May 2024 18:32:53 GMT; Path=/; SameSite=None; Secure vary: Accept-Encoding,Origin,Access-Control-Request-Method,Access-Control-Request-Headers access-control-allow-origin: * access-control-allow-headers: origin, content-type, access-token, x-bitpanda-academy, x-tracking-id, If-None-Match, If-Match, x-bitpanda-app-web, x-datadog-trace-id, x-datadog-parent-id, x-datadog-origin, x-datadog-sampling-priority, bp-broker-user-api-token-id cache-control: max-age=14, public, s-maxage=29 strict-transport-security: max-age=15552000; includeSubDomains; preload x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8761f1c8da6-MIA
2024-04-26 18:32:53 UTC	178	IN	Data Raw: 37 61 66 61 0d 0a 7b 22 64 61 74 61 22 3a 5b 7b 22 74 79 70 65 22 3a 22 61 73 73 65 74 5f 70 72 69 63 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 70 69 64 22 3a 22 62 38 36 63 30 33 34 62 2d 65 66 65 33 2d 31 31 65 62 2d 62 35 36 66 2d 30 36 39 31 37 36 34 34 34 36 61 37 22 2c 22 70 72 69 63 65 22 3a 22 35 39 37 38 35 2e 38 35 22 2c 22 70 72 69 63 65 5f 61 6d 6f 75 6e 74 5f 63 68 61 6e 67 65 73 22 3a 7b 22 64 61 79 22 3a 22 2d 35 34 34 2e 37 38 31 30 38 36 38 32 37 38 39 32 34 36 34 30 22 2c 22 77 65 65 6b 22 3a 22 2d Data Ascii: 7afa{"data":[{"type":"asset_price","attributes":{"pid":"b86c034b-efe3-11eb-b56f-0691764446a7","price":"59785.85","price_amount_changes":{"day":"-544.7810868278924640","week":"-
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 35 38 33 2e 30 37 32 37 32 38 36 34 33 38 33 39 35 36 34 32 22 2c 22 6d 6f 6e 74 68 22 3a 22 2d 33 34 36 38 2e 35 34 32 38 39 36 39 32 30 35 36 36 38 36 39 39 22 2c 22 79 65 61 72 22 3a 22 33 33 30 36 32 2e 35 38 33 31 39 39 30 38 34 30 37 33 35 39 39 32 22 7d 2c 22 70 72 69 63 65 5f 70 65 72 63 65 6e 74 61 67 65 5f 63 68 61 6e 67 65 73 22 3a 7b 22 64 61 79 22 3a 22 2d 30 2e 39 30 22 2c 22 77 65 65 6b 22 3a 22 2d 30 2e 39 37 22 2c 22 6d 6f 6e 74 68 22 3a 22 2d 35 2e 34 38 22 2c 22 79 65 61 72 22 3a 22 31 32 33 2e 37 32 22 7d 2c 22 63 69 72 63 75 6c 61 74 69 6e 67 5f 73 75 70 70 6c 79 22 3a 22 31 39 36 39 30 32 35 33 2e 30 30 30 30 30 30 30 30 22 2c 22 6d 61 72 6b 65 74 5f 63 61 70 22 3a 22 31 31 37 37 31 39 38 35 31 34 37 38 31 2e 33 33 31 36 32 35 30 30 Data Ascii: 583.0727286438395642","month":"-3468.5428969205668699","year":"33062.5831990840735992"},"price_percentage_changes":{"day":"-0.90","week":"-0.97","month":"-5.48","year":"123.72"},"circulating_supply":"19690253.00000000","market_cap":"1177198514781.33162500
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 22 2d 31 31 2e 35 32 31 22 2c 22 77 65 65 6b 22 3a 22 2d 30 2e 32 33 31 22 2c 22 6d 6f 6e 74 68 22 3a 22 2d 39 2e 32 38 31 22 2c 22 79 65 61 72 22 3a 22 38 34 2e 36 37 37 22 7d 2c 22 63 69 72 63 75 6c 61 74 69 6e 67 5f 73 75 70 70 6c 79 22 3a 22 31 32 38 39 30 30 34 34 34 2e 35 32 31 39 38 30 30 30 22 2c 22 6d 61 72 6b 65 74 5f 63 61 70 22 3a 22 32 31 31 36 30 37 39 31 34 2e 33 34 38 33 33 34 32 33 22 7d 2c 22 69 64 22 3a 22 36 22 7d 2c 7b 22 74 79 70 65 22 3a 22 61 73 73 65 74 5f 70 72 69 63 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 70 69 64 22 3a 22 62 38 36 63 31 36 34 61 2d 65 66 65 33 2d 31 31 65 62 2d 62 35 36 66 2d 30 36 39 31 37 36 34 34 34 36 61 37 22 2c 22 70 72 69 63 65 22 3a 22 32 38 2e 33 38 22 2c 22 70 72 69 63 65 5f 61 6d 6f 75 Data Ascii: "-11.521","week":"-0.231","month":"-9.281","year":"84.677"},"circulating_supply":"128900444.52198000","market_cap":"211607914.34833423"},"id":"6"},{"type":"asset_price","attributes":{"pid":"b86c164a-efe3-11eb-b56f-0691764446a7","price":"28.38","price_amou
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 30 32 30 37 32 37 32 33 36 2e 39 31 37 39 32 36 38 34 22 7d 2c 22 69 64 22 3a 22 39 22 7d 2c 7b 22 74 79 70 65 22 3a 22 61 73 73 65 74 5f 70 72 69 63 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 70 69 64 22 3a 22 62 38 36 63 32 30 31 32 2d 65 66 65 33 2d 31 31 65 62 2d 62 35 36 66 2d 30 36 39 31 37 36 34 34 34 36 61 37 22 2c 22 70 72 69 63 65 22 3a 22 30 2e 30 37 35 31 22 2c 22 70 72 69 63 65 5f 61 6d 6f 75 6e 74 5f 63 68 61 6e 67 65 73 22 3a 7b 22 64 61 79 22 3a 22 30 2e 30 30 30 32 32 39 35 31 36 37 34 38 33 34 36 35 22 2c 22 77 65 65 6b 22 3a 22 30 2e 30 30 31 38 30 38 38 38 36 34 32 36 34 31 32 34 22 2c 22 6d 6f 6e 74 68 22 3a 22 2d 30 2e 30 30 32 34 36 36 34 35 33 35 35 38 34 36 32 37 22 2c 22 79 65 61 72 22 3a 22 30 2e 30 30 36 31 39 38 37 Data Ascii: 020727236.91792684"},"id":"9"},{"type":"asset_price","attributes":{"pid":"b86c2012-efe3-11eb-b56f-0691764446a7","price":"0.0751","price_amount_changes":{"day":"0.0002295167483465","week":"0.0018088864264124","month":"-0.0024664535584627","year":"0.0061987
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 37 22 2c 22 70 72 69 63 65 22 3a 22 30 2e 37 37 33 30 22 2c 22 70 72 69 63 65 5f 61 6d 6f 75 6e 74 5f 63 68 61 6e 67 65 73 22 3a 7b 22 64 61 79 22 3a 22 2d 30 2e 30 32 39 39 39 39 36 35 35 34 39 30 37 33 34 39 22 2c 22 77 65 65 6b 22 3a 22 30 2e 30 33 30 30 38 37 36 34 32 30 34 36 31 32 37 33 22 2c 22 6d 6f 6e 74 68 22 3a 22 2d 30 2e 32 30 32 34 32 36 37 39 37 30 32 35 30 35 30 38 22 2c 22 79 65 61 72 22 3a 22 2d 30 2e 31 37 30 30 32 38 30 32 34 31 30 38 36 32 35 32 22 7d 2c 22 70 72 69 63 65 5f 70 65 72 63 65 6e 74 61 67 65 5f 63 68 61 6e 67 65 73 22 3a 7b 22 64 61 79 22 3a 22 2d 33 2e 37 33 36 30 22 2c 22 77 65 65 6b 22 3a 22 34 2e 30 35 30 30 22 2c 22 6d 6f 6e 74 68 22 3a 22 2d 32 30 2e 37 35 32 37 22 2c 22 79 65 61 72 22 3a 22 2d 31 38 2e 30 33 30 30 Data Ascii: 7","price":"0.7730","price_amount_changes":{"day":"-0.0299996554907349","week":"0.0300876420461273","month":"-0.2024267970250508","year":"-0.1700280241086252"},"price_percentage_changes":{"day":"-3.7360","week":"4.0500","month":"-20.7527","year":"-18.0300
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 3a 22 2d 30 2e 35 30 31 30 34 39 31 35 31 32 39 38 38 31 31 39 22 2c 22 79 65 61 72 22 3a 22 30 2e 32 33 37 38 36 35 36 34 30 39 35 34 30 39 33 36 22 7d 2c 22 70 72 69 63 65 5f 70 65 72 63 65 6e 74 61 67 65 5f 63 68 61 6e 67 65 73 22 3a 7b 22 64 61 79 22 3a 22 2d 32 2e 34 37 32 39 22 2c 22 77 65 65 6b 22 3a 22 2d 33 2e 36 39 33 30 22 2c 22 6d 6f 6e 74 68 22 3a 22 2d 35 31 2e 31 30 35 32 22 2c 22 79 65 61 72 22 3a 22 39 38 2e 34 39 30 34 22 7d 2c 22 63 69 72 63 75 6c 61 74 69 6e 67 5f 73 75 70 70 6c 79 22 3a 22 38 34 37 34 39 36 30 35 34 2e 38 30 32 37 37 30 30 30 22 2c 22 6d 61 72 6b 65 74 5f 63 61 70 22 3a 22 34 30 36 32 37 30 32 33 34 2e 39 31 32 36 33 35 31 35 22 7d 2c 22 69 64 22 3a 22 31 37 22 7d 2c 7b 22 74 79 70 65 22 3a 22 61 73 73 65 74 5f 70 72 Data Ascii: :"-0.5010491512988119","year":"0.2378656409540936"},"price_percentage_changes":{"day":"-2.4729","week":"-3.6930","month":"-51.1052","year":"98.4904"},"circulating_supply":"847496054.80277000","market_cap":"406270234.91263515"},"id":"17"},{"type":"asset_pr
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 31 22 2c 22 6d 6f 6e 74 68 22 3a 22 2d 31 32 2e 39 39 34 36 22 2c 22 79 65 61 72 22 3a 22 32 34 2e 36 35 39 39 22 7d 2c 22 63 69 72 63 75 6c 61 74 69 6e 67 5f 73 75 70 70 6c 79 22 3a 22 32 38 39 33 38 39 30 36 35 36 37 2e 36 32 33 30 30 30 30 30 22 2c 22 6d 61 72 6b 65 74 5f 63 61 70 22 3a 22 33 30 39 31 36 39 37 30 35 34 2e 32 31 33 30 33 39 31 37 22 7d 2c 22 69 64 22 3a 22 32 30 22 7d 2c 7b 22 74 79 70 65 22 3a 22 61 73 73 65 74 5f 70 72 69 63 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 70 69 64 22 3a 22 62 38 36 63 37 36 63 62 2d 65 66 65 33 2d 31 31 65 62 2d 62 35 36 66 2d 30 36 39 31 37 36 34 34 34 36 61 37 22 2c 22 70 72 69 63 65 22 3a 22 30 2e 39 34 34 37 22 2c 22 70 72 69 63 65 5f 61 6d 6f 75 6e 74 5f 63 68 61 6e 67 65 73 22 3a 7b 22 64 Data Ascii: 1","month":"-12.9946","year":"24.6599"},"circulating_supply":"28938906567.62300000","market_cap":"3091697054.21303917"},"id":"20"},{"type":"asset_price","attributes":{"pid":"b86c76cb-efe3-11eb-b56f-0691764446a7","price":"0.9447","price_amount_changes":{"d
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 32 35 37 30 35 34 31 2e 31 34 32 34 35 31 32 39 22 7d 2c 22 69 64 22 3a 22 32 33 22 7d 2c 7b 22 74 79 70 65 22 3a 22 61 73 73 65 74 5f 70 72 69 63 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 70 69 64 22 3a 22 62 38 36 63 37 64 39 39 2d 65 66 65 33 2d 31 31 65 62 2d 62 35 36 66 2d 30 36 39 31 37 36 34 34 34 36 61 37 22 2c 22 70 72 69 63 65 22 3a 22 32 35 2e 37 39 33 32 22 2c 22 70 72 69 63 65 5f 61 6d 6f 75 6e 74 5f 63 68 61 6e 67 65 73 22 3a 7b 22 64 61 79 22 3a 22 30 2e 37 36 35 31 36 37 39 31 36 39 31 35 38 30 30 39 22 2c 22 77 65 65 6b 22 3a 22 30 2e 39 36 38 39 39 36 35 31 34 37 38 34 35 38 38 34 22 2c 22 6d 6f 6e 74 68 22 3a 22 2d 33 2e 32 37 35 37 34 35 35 36 36 38 30 38 33 37 35 30 22 2c 22 79 65 61 72 22 3a 22 37 2e 35 39 32 36 33 31 33 Data Ascii: 2570541.14245129"},"id":"23"},{"type":"asset_price","attributes":{"pid":"b86c7d99-efe3-11eb-b56f-0691764446a7","price":"25.7932","price_amount_changes":{"day":"0.7651679169158009","week":"0.9689965147845884","month":"-3.2757455668083750","year":"7.5926313
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 2c 22 70 72 69 63 65 22 3a 22 30 2e 39 33 34 36 22 2c 22 70 72 69 63 65 5f 61 6d 6f 75 6e 74 5f 63 68 61 6e 67 65 73 22 3a 7b 22 64 61 79 22 3a 22 30 2e 30 30 32 35 39 39 35 38 33 31 30 31 35 32 39 39 22 2c 22 77 65 65 6b 22 3a 22 2d 30 2e 30 30 35 32 39 39 31 35 30 31 36 38 35 30 33 32 22 2c 22 6d 6f 6e 74 68 22 3a 22 30 2e 30 31 31 31 39 38 32 30 34 31 32 39 36 36 37 32 22 2c 22 79 65 61 72 22 3a 22 30 2e 30 32 35 35 32 30 36 33 36 30 30 36 35 37 35 30 22 7d 2c 22 70 72 69 63 65 5f 70 65 72 63 65 6e 74 61 67 65 5f 63 68 61 6e 67 65 73 22 3a 7b 22 64 61 79 22 3a 22 30 2e 32 37 38 39 22 2c 22 77 65 65 6b 22 3a 22 2d 30 2e 35 36 33 38 22 2c 22 6d 6f 6e 74 68 22 3a 22 31 2e 32 31 32 38 22 2c 22 79 65 61 72 22 3a 22 32 2e 38 30 37 35 22 7d 2c 22 63 69 72 63 Data Ascii: ,"price":"0.9346","price_amount_changes":{"day":"0.0025995831015299","week":"-0.0052991501685032","month":"0.0111982041296672","year":"0.0255206360065750"},"price_percentage_changes":{"day":"0.2789","week":"-0.5638","month":"1.2128","year":"2.8075"},"circ
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 6f 6e 74 68 22 3a 22 2d 33 2e 36 38 38 30 31 35 38 39 39 36 37 35 32 30 31 31 22 2c 22 79 65 61 72 22 3a 22 2d 32 2e 36 39 38 32 37 34 32 33 36 34 36 32 33 34 38 31 22 7d 2c 22 70 72 69 63 65 5f 70 65 72 63 65 6e 74 61 67 65 5f 63 68 61 6e 67 65 73 22 3a 7b 22 64 61 79 22 3a 22 2d 31 2e 31 35 22 2c 22 77 65 65 6b 22 3a 22 30 2e 32 32 22 2c 22 6d 6f 6e 74 68 22 3a 22 2d 33 32 2e 31 38 22 2c 22 79 65 61 72 22 3a 22 2d 32 35 2e 37 37 22 7d 2c 22 63 69 72 63 75 6c 61 74 69 6e 67 5f 73 75 70 70 6c 79 22 3a 22 33 39 30 39 33 30 36 37 31 2e 30 30 30 30 30 30 30 30 22 2c 22 6d 61 72 6b 65 74 5f 63 61 70 22 3a 22 33 30 33 39 30 39 39 33 39 31 2e 33 32 31 36 37 34 39 34 22 7d 2c 22 69 64 22 3a 22 33 32 22 7d 2c 7b 22 74 79 70 65 22 3a 22 61 73 73 65 74 5f 70 72 69 Data Ascii: onth":"-3.6880158996752011","year":"-2.6982742364623481"},"price_percentage_changes":{"day":"-1.15","week":"0.22","month":"-32.18","year":"-25.77"},"circulating_supply":"390930671.00000000","market_cap":"3039099391.32167494"},"id":"32"},{"type":"asset_pri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50076	172.67.40.173	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	607	OUT	GET /?zdid=1332&zcluid=293f006c26e11ff7 HTTP/1.1 Host: spl.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:53 UTC	1127	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://t.sharethis.com location: https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=1a1f3838-e54f-4c21-6419-351f87b95f28&reqId=c6201517-1960-426a-5eed-0fdae320a0a6&zcluid=293f006c26e11ff7&zdid=1332 set-cookie: zc=1a1f3838-e54f-4c21-6419-351f87b95f28; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure set-cookie: zsc=%B6Y%AFD%13%E1%7Du%C3%40%7B%CEg%3FY%8Cz%EA%99%81Y+%18e%23%25t%FC%09%C1p%F3%A3%92%A2%27M%FD%0C%B1%0D%9C%BB%D19%26%1F%98HLp%D9%C7%2Fg%CD%F7%2BzA%1D%AE%D89%A3%3AX%A5%E3%BB%C3%00%86%BEt~%EBX%A4%EB%B0%7DH; Path=/; Domain=.zeotap.com; Max-Age=86400; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8763fb7029b-MIA
2024-04-26 18:32:53 UTC	242	IN	Data Raw: 31 31 38 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6f 74 61 70 5f 64 64 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 26 61 6d 70 3b 7a 70 61 72 74 6e 65 72 69 64 3d 31 26 61 6d 70 3b 65 6e 76 3d 6d 57 65 62 26 61 6d 70 3b 65 76 65 6e 74 54 79 70 65 3d 6d 61 70 26 61 6d 70 3b 69 64 5f 6d 69 64 5f 34 3d 31 61 31 66 33 38 33 38 2d 65 35 34 66 2d 34 63 32 31 2d 36 34 31 39 2d 33 35 31 66 38 37 62 39 35 66 32 38 26 61 6d 70 3b 72 65 71 49 64 3d 63 36 32 30 31 35 31 37 2d 31 39 36 30 2d 34 32 36 61 2d 35 65 65 64 2d 30 66 64 61 65 33 32 30 61 30 61 36 26 61 6d 70 3b 7a 63 6c 75 69 64 3d 32 Data Ascii: 118<a href="https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=1a1f3838-e54f-4c21-6419-351f87b95f28&reqId=c6201517-1960-426a-5eed-0fdae320a0a6&zcluid=2
2024-04-26 18:32:53 UTC	45	IN	Data Raw: 39 33 66 30 30 36 63 32 36 65 31 31 66 66 37 26 61 6d 70 3b 7a 64 69 64 3d 31 33 33 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: 93f006c26e11ff7&zdid=1332">Found</a>.
2024-04-26 18:32:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50069	52.92.0.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	409	OUT	GET /static/cryptocoin/eth.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:53 UTC	431	IN	HTTP/1.1 200 OK x-amz-id-2: D2BoFI6o4MAO1bdJglXkgGDjc1+173/JZXcucQtqHr5o3m4YATLhA8tKQh3YXDExPlcLX4OMdzs= x-amz-request-id: 3JGZP3XW5GN4KN2Y Date: Fri, 26 Apr 2024 18:32:54 GMT Last-Modified: Wed, 16 Dec 2020 17:58:30 GMT ETag: "7b72368062df486eed49627bf11af312" x-amz-version-id: Ol5GsqCjFaOpn3vRYF8g1pkoFT.ro8rA Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 416 Connection: close
2024-04-26 18:32:53 UTC	416	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 39 34 39 34 39 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d 38 2e 30 35 39 20 31 38 2d 31 38 20 31 38 53 30 20 32 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#494949" fill-rule="nonzero" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50068	52.92.0.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	410	OUT	GET /static/cryptocoin/usdt.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:53 UTC	431	IN	HTTP/1.1 200 OK x-amz-id-2: jWI8c7jP6zZuq3ImSD6WQK3DAJnyLThz7nl1I5NXN7AisFSoEFR1C5qxAben9VA3fvwQ7rG5jAY= x-amz-request-id: 3JGPXTAP2STJNYBR Date: Fri, 26 Apr 2024 18:32:54 GMT Last-Modified: Wed, 16 Dec 2020 17:58:30 GMT ETag: "f3865339d1dcf0b0f5b6d136798b2d8c" x-amz-version-id: z6Yxn3_pS3Ny034jPbl9k.njOsOCwmbB Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 988 Connection: close
2024-04-26 18:32:53 UTC	988	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 41 34 37 39 22 20 64 3d 22 4d 31 38 20 33 36 43 38 2e 30 35 39 20 33 36 20 30 20 32 37 2e 39 34 31 20 30 20 31 38 53 38 2e 30 35 39 20 30 20 31 38 20 30 73 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 2d 38 2e 30 35 39 20 31 38 2d 31 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#00A479" d="M18 36C8.059 36 0 27.941 0 18S8.059 0 18 0s18 8.059 18 18-8.059 18-18

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50077	104.21.56.65	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	725	OUT	GET /go/jump.php?id=mtd0013&pre=1&tags=lp0ai49b7tf5&pl=2 HTTP/1.1 Host: onlinetopchoice.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:53 UTC	779	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding referrer-policy: origin strict-transport-security: max-age=63072000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8XvElbZEWOd1Doe2VCjxpmiX1Deq74pj7SJmcXy5sgdBnNa1D1YoyV4IWQgEj5OP5rUJz5HJUSyGpndWGrezR5EHFGYFyjkfg8yXldS%2BEgmG2VHcTuXc6X5WIrP%2FABUbT5A7yETR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8771f8fa4d6-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:53 UTC	190	IN	Data Raw: 62 38 0d 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 69 64 3d 22 6d 72 65 66 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 55 52 4c 3d 6a 75 6d 70 2e 70 68 70 3f 69 64 3d 6d 74 64 30 30 31 33 26 4d 54 44 52 65 66 3d 26 4d 54 44 53 65 74 72 65 66 3d 31 26 4d 54 44 74 73 3d 45 26 4d 54 44 53 71 75 65 72 79 3d 30 26 6e 61 6d 65 3d 30 26 74 61 67 73 3d 6c 70 30 61 69 34 39 62 37 74 66 35 26 70 6c 3d 32 0a 22 3e 0d 0a Data Ascii: b8<meta content="origin" id="mref" name="referrer"><meta http-equiv="refresh" content="0;URL=jump.php?id=mtd0013&MTDRef=&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=lp0ai49b7tf5&pl=2">
2024-04-26 18:32:53 UTC	1125	IN	Data Raw: 34 35 65 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 20 28 21 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 72 65 74 75 72 6e 3b 76 61 72 20 6a 73 20 3d 20 22 77 69 6e 64 6f 77 5b 27 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 27 5d 3d 7b 72 3a 27 38 37 61 38 61 38 37 37 31 66 38 66 61 34 64 36 27 2c 74 3a 27 4d 54 63 78 4e 44 45 31 4e 6a 4d 33 4d 79 34 33 4d 7a 51 77 4d 44 41 3d 27 7d 3b 5f 63 70 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5f 63 70 6f 2e 6e 6f 6e 63 65 3d 27 27 2c 5f 63 70 6f 2e 73 72 63 3d 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 73 63 72 69 70 74 73 2f 6a 73 64 2f 6d 61 69 6e 2e 6a 73 27 2c 64 6f 63 75 6d Data Ascii: 45e<script>(function(){if (!document.body) return;var js = "window['__CF$cv$params']={r:'87a8a8771f8fa4d6',t:'MTcxNDE1NjM3My43MzQwMDA='};_cpo=document.createElement('script');_cpo.nonce='',_cpo.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js',docum
2024-04-26 18:32:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50078	44.210.231.214	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	986	OUT	GET /match?publisher_dsp_id=79&dsp_callback=1&external_user_id=ID5-5f7fKNu6Ccn5uyl68Zo3g-hvXdNYw_FQSAKpahtQuA&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F121%2F124%2F1%2F2.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ice.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=d5f646a1-3a90-4585-81a0-693ca4a06fc0; tuuid_lu=1714156367; um=!440,pDiXtfEkDgV78C2sVzpZkvblsa1.Aok.SLLzOl1-WWYSi-e6nfc,1721932367; umeh=!440,0,1776364367,-1
2024-04-26 18:32:53 UTC	791	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: um=!79,904POBYiLAQlUPJsP6vafPfFb1kBrYHQLO8hlEEWyZPSjGgDVYJCgzxclqFanMz7gdIAGC5n77WmETDX,1721932373!440,pDiXtfEkDgV78C2sVzpZkvblsa1.Aok.SLLzOl1-WWYSi-e6nfc,1721932367; Expires=Thu, 25 Jul 2024 18:32:53 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: umeh=!79,0,1776364373,-1!440,0,1776364367,-1; Expires=Thu, 25 Jul 2024 18:32:53 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://id5-sync.com/cq/121/124/1/2.gif?puid=d5f646a1-3a90-4585-81a0-693ca4a06fc0&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50079	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	626	OUT	GET /media/New%20navigation_Rebrand%203.0/Screenshot%202022-11-17%20at%2011.15.02.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:53 UTC	802	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: image/png Content-Length: 56219 Connection: close Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=84174 ETag: "bca0082c8da9a8ac228e72c2907fc5ff" Last-Modified: Thu, 17 Nov 2022 10:16:35 GMT Via: 1.1 2e9033da1cf7b64ac622ab535b39a266.cloudfront.net (CloudFront) X-Amz-Cf-Id: GYa9-gqqXmAMSE_8V-tvk4cZCXcBw_ZNhLoJ1TGJRsM1LF-CbuNNEA== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Miss from cloudfront x-amz-version-id: fZU4z.Mh3DlsYYt16HyOr.Gh0gag0w81 CF-Cache-Status: HIT Age: 20497 Expires: Sat, 27 Apr 2024 04:32:53 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a877ff550a02-MIA
2024-04-26 18:32:53 UTC	567	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 85 00 00 01 f9 08 02 00 00 00 b9 cd 0c 64 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 db 55 49 44 41 54 78 da ec d6 41 0d 80 40 00 04 31 82 80 f3 ef 16 0c ec ff 92 49 ab a2 cf 07 00 00 97 9c 73 de 07 00 00 ee f1 51 00 00 36 1f 05 00 a0 cf 47 01 00 d8 7c 14 00 80 3e 1f 05 00 60 f3 51 00 00 fa 7c 14 00 80 cd 47 01 00 e8 f3 51 00 00 36 1f 05 00 a0 cf 47 01 00 d8 7c 14 00 80 3e 1f 05 00 60 f3 51 00 00 fa 7c 14 00 80 cd 47 01 00 e8 f3 51 00 00 36 1f 05 00 a0 cf 47 01 00 d8 7c 14 00 80 3e 1f 05 00 60 f3 51 00 00 fa 7c 14 00 80 cd 47 01 00 e8 f3 51 00 00 36 1f 05 00 a0 cf 47 01 00 d8 7c 14 00 80 3e 1f 05 00 60 f3 51 00 00 fa 7c 14 00 80 cd 47 01 00 e8 f3 51 00 00 36 1f 05 00 a0 cf 47 01 00 d8 7c 14 00 80 Data Ascii: PNGIHDRdsRGBUIDATxA@1IsQ6G\|>`Q\|GQ6G\|>`Q\|GQ6G\|>`Q\|GQ6G\|>`Q\|GQ6G\|
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 5f f3 f6 bb 79 f9 cc f3 7a 91 2f 22 f5 f4 01 98 a6 49 bf 1e 76 64 7c 70 2c 1b f1 63 56 8d db 65 ed 82 6b 7f ff 6d ae 5d 0f c0 b5 5f ef ff 99 60 ef 2a aa 22 da 6a e5 ca 0a 68 66 de fd ca ed 82 54 18 05 c0 f3 f5 c0 ab 8a a8 1a 97 c3 65 5e cb 11 0b 39 ab 6a 2e 46 a7 aa 6c 07 02 c0 fe 51 a0 df 3f 3a a2 46 8c 73 d4 9f cb f1 3c 62 1c 22 8f 71 fc 15 87 63 1c 0e 71 b8 3e b9 b4 a6 2c ba 6a cd 7c 3a 53 1c 7d 22 e5 d5 5c c0 cf 9b a6 49 7d 14 f6 68 c4 f8 1d 7f d9 bb 13 28 b9 ae f2 4e e0 ff ff 77 df 7b 55 d5 d5 7b 4b ad c5 5a 2c cb 96 64 5b b6 bc c8 42 5e 65 1b 1b b0 b1 61 0c 0e 4b 02 71 18 4f 60 12 43 c2 99 c0 61 27 e4 90 4c 20 70 12 02 61 3b 10 33 0c 83 81 40 08 66 c2 62 02 c6 31 c2 60 47 d8 16 b6 64 59 b2 25 6b e9 96 d4 ad de b7 aa 7a ef de 6f a4 ea 56 8d d4 b2 85 Data Ascii: _yz/"Ivd\|p,cVekm]_`*"jhfTe^9j.FlQ?:Fs<b"qcq>,j\|:S}"\I}h(Nw{U{KZ,d[B^eaKqO`Ca'L pa;3@fb1`GdY%kzoV
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 2b 69 04 8f 10 41 51 eb 53 21 a0 5a 4b a6 a8 22 10 8e 9a b7 29 78 4e 4a 00 a0 28 54 21 0a 81 e2 30 82 24 6b c1 94 93 9b ee 4f ac 07 5f ad 8f fb 3f 9d 07 52 c0 1f 2e 8b 96 02 46 ca e8 e8 c2 96 1d a5 07 1f db f1 ad 7b 7f 96 c6 b3 35 df d2 bc 78 99 06 1d 15 c9 80 4c 03 42 50 04 f5 d5 9a ba 7a 01 09 08 22 22 1a ad c0 c5 6d 49 fb 69 05 97 dd f3 e8 e6 ef 3f f0 99 3f 78 e9 65 b7 dd 72 ee a2 16 44 01 09 21 b4 cd 9e 8c 31 96 47 8d f9 8d a6 38 16 b3 e0 01 55 78 45 78 b6 92 24 51 8b 97 82 71 04 14 54 4c a6 04 51 cb b4 4a 20 64 59 3e 8e 9b ea eb 1d 98 86 b2 68 e2 9c 7b ae 00 4a 9e e0 9c 1f 5b db f2 d7 41 81 e1 14 7b 46 f1 54 27 3a 3a b1 73 df c0 f6 ae de 8d 5b 9e ee e9 1b 1e 2d f9 42 43 5b eb 92 e7 95 55 4a 5e f7 97 4b 1e 08 e2 94 84 2a 31 8e a0 03 11 70 88 57 a5 30 Data Ascii: +iAQS!ZK")xNJ(T!0$kO_?R.F{5xLBPz""mIi??xerD!1G8UxEx$QqTLQJ dY>h{J[A{FT'::s[-BC[UJ^K*1pW0
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: b9 48 81 80 50 74 79 d9 5f be 7e e9 a5 af 98 fb 82 f3 67 2d eb 1e ee ed 1a 38 90 14 73 9e 21 89 e3 4a a5 22 22 a8 22 48 50 01 02 9e d8 39 d8 9d 34 15 cf 6e 3c bd 88 48 c8 c8 39 80 b5 95 f1 49 12 13 48 5a 8b fd af 85 02 50 05 49 55 04 a2 4c 6c ee c4 bb 3e fe e8 8f b6 0d 69 e3 9c 92 42 09 21 09 d4 f6 da 22 c0 49 c1 90 7a c4 e4 51 c5 89 21 48 00 20 15 c4 f8 a0 2a c7 d2 b4 ad ad bd ff c0 58 3a 12 ad bb a4 29 01 55 83 90 16 46 8d 31 27 98 47 6d ff 7a 63 a6 97 0c 61 14 95 cd d8 f9 e9 87 bf ba 2f 3f 98 b4 16 3c 83 f8 80 10 26 af 45 0a fa a0 f5 49 d1 0f 94 1a a5 ee dc 33 56 8c 96 4b 3f 7d e2 91 90 63 73 5b 13 1c ca 3e 0b 1a 44 51 da dd 7f c3 99 57 dc 34 fb ea 36 d4 65 d0 2d d8 fb b5 a7 ef d9 32 b6 2b 9e 55 17 7c 26 22 50 9d 78 e6 ae 10 0a c6 a9 1b 1c 28 ad 9b bf Data Ascii: HPty_~g-8s!J"""HP94n<H9IHZPIULl>iB!"IzQ!H *X:)UF1'Gmzca/?<&EI3VK?}cs[>DQW46e-2+U\|&"Px(
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 1f 22 21 09 84 c3 35 74 9d 18 aa 4a 88 88 1e 44 15 25 95 22 a2 5e 93 38 c9 47 d4 ca 48 79 b0 47 4a 7d a7 b7 d7 dd fe da 17 46 39 fc f5 3f fe b8 6f c8 37 b4 cd 1a 18 1e a6 38 e5 89 56 c2 49 aa 2a 00 3d 08 aa c2 5c 43 db 8f 1f db f1 b3 6d b8 6a 39 92 00 10 13 68 5b c8 1a 63 6c fe a8 31 d3 9e 88 a4 5a 51 05 95 aa 1a 54 11 40 0a c9 da 54 3d 52 2a de 87 c8 f9 c0 05 8d 87 aa 98 04 41 52 78 f4 62 e7 00 39 31 26 ae 44 0d 27 5e 28 70 39 14 ce 4a ce 5c a4 f3 87 3a 7a 8b 88 13 45 02 21 08 4e 9c 67 ab d8 9f 0a 3a 31 8e 58 28 b4 0c fc f0 e1 f2 9e c1 42 c3 ac f6 fe c1 1e 89 20 02 60 bc 5c ee 55 3d 11 aa 63 e2 5a a5 aa 20 4b 2b 21 ad 44 c1 e7 c9 96 ba 62 2e 0b 63 9d 7b 74 f7 e6 2b e6 86 bf bd fd d2 af be ef ea db ae c0 2b 2e c1 eb 5e b8 96 3d 7b 9b 63 97 a3 40 03 4e 14 Data Ascii: "!5tJD%"^8GHyGJ}F9?o78VI=\Cmj9h[cl1ZQT@T=RARxb91&D'^(p9J\:zE!Ng:1X(B `\U=cZ K+!Db.c{t++.^={c@N
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: e8 41 00 81 58 a4 77 cf d3 77 bc ec e2 37 be 62 7e 7b 84 9c 02 01 01 aa 50 50 26 6e 2e 05 8f ec de 27 a8 50 82 84 03 66 17 71 fd 65 cb ef 7b e2 81 98 88 9c 0b de 07 88 82 98 4c 71 18 59 bb 85 54 c1 00 15 a2 e2 b3 10 e5 d3 a4 61 e3 d6 dd 43 23 73 9a 1b 10 08 a1 55 df 8d 31 f6 bc de 98 19 83 02 c6 90 90 f9 34 cb 4a 59 1a 08 78 cc 2b b4 2f c0 bc 08 71 50 82 0e 20 c0 93 12 1f 55 35 cb 32 ef fd f8 31 8e 61 33 4a 7f ed 38 31 94 50 90 80 22 52 2c 3f 0d 57 9c bf a0 d4 d7 5d 1f e5 73 8a d9 f5 8d 05 75 39 15 07 89 28 ce 87 91 7d 3b 5b b2 8e 39 11 e2 00 68 ed b3 93 49 f1 b1 76 ac 80 72 e2 40 80 3c b0 7a e5 ac b9 b3 1b fa fb 0e 44 a4 40 08 42 a1 a8 8d c9 b4 0a e3 08 05 02 c1 5c 7c 60 74 cc 17 5b 9f d8 dd d3 b1 0f d0 5a 86 b5 3d be 8c 31 96 47 8d 99 21 14 08 d0 a1 b1 Data Ascii: AXww7b~{PP&n.'Pfqe{LqYTaC#sU14JYx+/qP U521a3J81P"R,?W]su9(};[9hIvr@<zD@B\\|`t[Z=1G!
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 1e 9d 31 14 80 12 70 40 1e b8 78 45 6b 4b d1 31 a4 04 3c 38 12 42 eb a2 a5 77 7f 6f c3 43 1b 77 02 70 50 c1 94 aa 9a 14 d0 21 e4 80 15 8b 71 e5 ea 65 95 81 ce ba d8 41 01 25 7e 31 9d 18 55 5e 01 49 86 46 ca 59 06 40 00 8b a4 c6 18 cb a3 c6 cc 14 ac 95 aa 5c 1d a2 c5 68 be 7a ee 85 43 cf 74 0f ee eb 85 8e 7f fd a4 4d 1e 7d e8 a1 87 0e 16 47 49 86 10 2c 8c ce 14 c4 21 82 20 aa 8b e7 60 cd b9 8b 30 d6 ed 34 03 e5 c0 d0 48 e3 9c c5 51 f3 59 df f8 ee c3 15 0f 82 27 be cd 01 27 06 09 10 59 bd c3 cd 57 2f 77 63 fb f3 0e ea c1 a9 45 66 55 20 a8 c2 45 a3 a5 34 cd a0 d6 c7 64 8c b1 3c 6a cc 0c c3 89 a1 01 a2 cc 23 5a 77 e1 da 27 1f 7d 5c 40 0d 8a 00 04 40 4f 42 1e fd c6 37 be 71 dd 75 d7 91 b4 e2 e8 4c 42 e2 10 a5 a6 05 87 5b ae 39 1b fd db 9b 0b ac 54 ca 65 1f 06 Data Ascii: 1p@xEkK1<8BwoCwpP!qeA%~1U^IFY@\hzCtM}GI,! `04HQY''YW/wcEfU E4d<j#Zw'}\@@OB7quLB[9Te
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: d2 8d 01 3f 78 1c ff fd cf bf 2e 0b ce e9 ad 90 22 01 1a 00 15 06 81 68 88 ca a5 25 ad 71 c7 c6 ef ce d6 3d df fb df 7f b5 64 76 4e 15 a4 a8 a2 ea 39 f2 68 0d a1 8a be 80 bb ee c3 db ff ee eb 67 5c 72 c5 ce 7d 5d a1 34 ea d2 c1 06 19 5a 71 5a fd 0b 2f 5d 71 f5 ea 85 4b e7 21 4f 08 40 40 00 81 0a 58 5b c9 41 55 a3 28 82 31 c6 3c 5b 1e b5 7f 9b 1a 33 f3 b4 b7 b7 1f 5c a4 e9 e0 a6 f3 98 a2 fe fe fe 83 61 f4 60 71 74 3c 8c 56 2a 15 8b 08 33 1f 14 d8 be cb 67 c8 2b 24 a8 4e 6a c3 0f 20 eb ea 77 f4 96 e6 af 7a c1 3e 3f ef f9 bf f3 a6 27 76 8f 04 0a 14 cf 89 80 2a 6a 14 84 e6 89 cb ce c5 fc b8 af 7b d3 bd b3 43 c7 25 8b dd ed 37 5d f0 b1 77 de f2 89 f7 5c ff 87 37 2f 3c 6f 2e 9a 34 14 34 4d e0 63 a8 03 a0 18 9f 1f 92 65 99 88 1c 79 a7 79 ef ad 14 62 8c 39 8a 1a Data Ascii: ?x."h%q=dvN9hg\r}]4ZqZ/]qK!O@@X[AU(1<[3\a`qt<V3g+$Nj wz>?'vj{C%7]w\7/<o.44Mceyyb9
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 59 9f 79 b8 ad dc 2d 9b e7 36 c7 e6 2a e3 0f be 9a c2 9b a6 fb 95 d1 7b 1f ad f3 df ed 91 d6 cc fc 8f 51 df da f4 ed 95 85 27 9f d6 ca bc 09 d0 06 d8 05 d8 03 60 1c 80 f7 c1 c0 b1 b1 51 8c c5 1e 31 06 8c 71 06 c0 80 f7 b8 fe ad fa fb c2 bb b7 57 af 79 8a c5 a2 78 ae 53 ff 95 31 06 08 21 f4 9f f3 f5 98 47 11 1a 26 9a a6 a9 aa 1a 0e 87 f3 f9 7c 4f 27 52 26 63 ff d8 39 bb 97 a6 e2 30 8e 5f 76 d1 ab e9 65 06 bd 80 41 f4 57 74 e3 5d 52 d0 1a 41 e2 54 72 e4 64 24 bd 40 2b e8 c2 02 11 91 66 5d 4f 82 6a c1 14 ab 49 10 1b 2c 76 29 cb b0 a0 41 4e 74 9b 2f 25 a1 4d 37 b7 73 9e e7 db 61 0f 1e 66 03 bd 9e 3e 1f 9e 8b e7 fc b6 df 6e f6 83 7d f8 3e 3b 87 44 55 63 b1 98 35 63 b5 d7 2b 51 1f ad 49 76 f2 51 f9 4e 99 80 1c 10 cf a0 c9 15 3a 76 23 7a fe f1 f2 c1 ce 6f 87 ba Data Ascii: Yy-6*{Q'`Q1qWyxS1!G&\|O'R&c90_veAWt]RATrd$@+f]OjI,v)ANt/%M7saf>n}>;DUc5c+QIvQN:v#zo
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 3f f3 f9 02 27 51 ce a3 12 34 a5 ff d1 7c 99 cb dd 0e 0e ba c2 e1 88 d6 24 f9 15 61 14 00 90 47 01 9e 34 ad b5 bd 86 69 63 63 63 66 66 86 bf 4b a7 6c 1b fe 60 29 eb e6 e6 66 61 61 61 7a 7a 3a 1a 8d ca 4e f8 72 2b 7e a1 a8 d7 eb 4d a5 52 b9 5c ae b5 b5 f5 e8 e8 08 2f 6a 82 47 8b a3 d7 d7 d7 c1 e0 fb be be 01 de 79 54 6a a2 4a d1 d9 d9 4f 2e 97 6e 6f 7f 93 43 c9 a0 e6 3c be 49 ce 4a 66 e5 96 c9 fc ee ee 7e 79 7a 9a 90 89 7b d4 47 01 a0 32 8f 3a 88 a8 06 00 9e 0c 9e a9 af ab ab bb ba ba 0a 04 02 73 73 73 f5 f5 f5 1c 49 6b 6b 6b 1d 0e 07 9f 75 58 cc 9f ad f4 b3 44 22 c1 55 d2 62 b1 d8 d4 d4 c4 a3 32 99 0c 97 4e 7b 7a 7a 3a 3b 3b 9d 4e 27 4f fa 7b 3c 1e 5e a4 df dc dc ac b5 e6 1b d6 00 dc 27 09 35 18 0c f6 f7 0f 34 34 34 86 42 21 de 65 ac 54 2a c5 62 b1 64 32 Data Ascii: ?'Q4\|$aG4icccffKl`)faaazz:Nr+~MR\/jGyTjJO.noC<IJf~yz{G2:sssIkkkuXD"Ub2N{zz:;;N'O{<^'5444B!eT*bd2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50080	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	610	OUT	GET /media/New%20navigation_Rebrand%203.0/Blog-nav-thumb3-280x200.jpg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:53 UTC	802	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: image/jpeg Content-Length: 26786 Connection: close Age: 19945 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=28629 ETag: "268f2c450626f162617a3506d85e800e" Last-Modified: Mon, 27 Dec 2021 13:28:22 GMT Via: 1.1 b3879c23ec3b402566708cfe9d0ddc18.cloudfront.net (CloudFront) X-Amz-Cf-Id: UjRqeLGp0yL_b-ZG3fAvzHwY9Z8kQ3KQV2WcetIvGb387phnpsHcPg== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: vGjOmUEIEh1wbezGFdo.CxiO7DOjnkbQ CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:53 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a877fef58dd8-MIA
2024-04-26 18:32:53 UTC	567	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 02 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 01 02 02 02 02 02 02 02 02 02 02 01 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 ff c2 00 11 08 00 c8 01 18 03 01 11 00 02 11 01 03 11 01 ff c4 00 3a 00 01 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 08 03 04 06 07 01 05 09 02 0a 01 01 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 08 09 01 0a ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f6 03 d5 0c Data Ascii: JFIF:
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 49 95 1c cd a4 32 0e 53 e0 de b6 97 26 ef 7e db b5 05 d3 4e 75 f3 a9 ed e6 2d e6 cb 95 36 ae bc f3 ae a6 1c eb 7a 6d 9c 73 b4 77 68 00 00 00 00 00 00 03 06 ac cb a0 9f 41 74 85 09 d1 54 fb 0e 57 8e 49 b9 a3 a6 c8 ec 76 fd 89 84 d8 ab e3 18 1f cd 93 06 cb 70 4c 06 4c f2 57 3a 5f e1 d2 a0 85 7c ff 00 6c ea 6f 9e 7d 7a 59 d3 76 75 71 80 00 00 00 00 00 01 15 b6 6e f6 8a 5d 0b b4 ba 99 ca 72 08 1c 49 f9 c1 40 a4 fb f1 f2 5d dd aa 56 f5 e7 9c 76 33 f9 07 e5 67 e9 36 06 3d 50 8f 1d d7 d1 b6 7b 83 29 00 00 00 00 00 00 02 25 6d ad f1 13 fa 07 68 59 c2 bf a4 6c bd 0f 64 de 9a ea 8b 1a cc 6a e3 86 f4 bc e2 17 29 94 d0 50 82 56 47 8e 4a e8 3c 2d e5 d9 af 6c e3 da 93 2a bd 3b dd bb 06 3b 76 96 de 00 00 00 00 00 10 fc 45 f4 08 95 b5 f7 cc 47 e8 6d 9f f1 4e eb f5 bd bb Data Ascii: I2S&~Nu-6zmswhAtTWIvpLLW:_\|lo}zYvuqn]rI@]Vv3g6=P{)%mhYldj)PVGJ<-l*;;vEGmN
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: a8 ca 9a 21 2b 24 b1 cc 1b 44 d1 ab 2a ed 13 af 13 2b 75 5e c4 11 de 3d c7 e7 df cf fc 07 79 c6 49 96 f9 ba 9c b4 c0 2d 5d 42 87 a9 63 f4 11 2f 49 60 d5 d8 14 74 9f eb 7b 86 3c fd 4d a9 ef 04 fb 30 c7 65 22 14 26 44 ec 66 46 b6 9b fe ec 3e 7f e9 13 67 4d 6a 70 7d 2e b6 06 a1 d7 f1 7a 7a 29 6e 3d b7 e0 71 3c 34 99 9d 26 89 09 96 9a 52 b3 43 34 2d a2 78 27 8f e4 ea a9 9f e8 2a e3 6b fb f7 a3 82 a7 04 bd 64 6f 90 66 ee 82 b5 e3 db 65 d9 82 2e 98 2b d6 13 e8 eb 22 07 e4 ea 10 f4 6a 21 e2 9a cf 14 65 38 74 78 9d e2 95 74 4b 13 b4 72 a1 f5 64 43 a5 87 df fa 8f ce 00 2c 42 a8 66 66 36 55 50 59 98 f7 2a 8e 27 14 b9 0d 4c dd 2a 89 16 9d 3d 95 02 59 7d dc 74 a9 f8 9c 27 27 f2 c5 eb f3 b9 4f 7e dd 63 fd 94 4c 66 99 4d 3d 34 2d 53 46 d3 14 8a 5d 8c f1 4c 43 94 37 01 Data Ascii: !+$D+u^=yI-]Bc/I`t{<M0e"&DfF>gMjp}.zz)n=q<4&RC4-x'kdofe.+"j!e8txtKrdC,Bff6UPY'L=Y}t''O~cLfM=4-SF]LC7
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: eb da 71 6d 31 80 22 8c 1b 22 76 e0 55 c8 af 3c 9f dd dd ea 34 ed 5a 4a 4a 6f 51 74 a9 8c 2c 40 40 d6 f6 34 f0 b9 df 81 98 55 ac 30 c0 92 ec c4 25 4e dd 24 ab 4a c9 b4 1b e8 a9 a8 5a af 4d 19 e0 db 81 23 b4 63 cf 75 3c e0 4c ca c6 3d 99 46 a4 86 bf 30 a7 85 a4 d5 71 3e b6 9e 47 57 03 76 9b e8 f0 c2 72 87 30 41 27 a6 aa da 6b 77 a4 7e 75 13 2d 1e ef 44 9b 39 28 0e dc a1 bf 4f 52 b9 bf 66 07 2a 73 28 d6 1d 95 5d 66 d6 e9 ce 8c d1 d1 4b 13 a7 d2 9a 55 8d 10 a4 b7 ea 87 25 7d ac 47 cb 7c cd 27 b0 af a9 4a 3d 9d f5 cd 45 1b 55 09 6f d5 d9 d2 e6 21 4c 5a 7b 75 6a fa b8 fe ba 54 d4 19 5a b2 58 0b c3 a9 29 8b c5 9a b3 55 c4 3a 49 a9 e1 76 14 a4 b6 ed 2f ab 4f 1d 5a 71 fd 6e 22 95 27 68 69 cc ad a3 5d 0c 35 73 b5 5c 45 ce 96 bb 54 65 c2 29 02 f1 62 b2 70 e1 7c 7f Data Ascii: qm1""vU<4ZJJoQt,@@4U0%N$JZM#cu<L=F0q>GWvr0A'kw~u-D9(ORf*s(]fKU%}G\|'J=EUo!LZ{ujTZX)U:Iv/OZqn"'hi]5s\ETe)bp\|
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: f3 8d 7b 0e e6 69 e6 84 1f c9 e3 32 a5 7a e8 95 16 4b 68 6d 62 26 36 8a 56 ec da 77 11 d9 d9 88 32 fc ce ba 49 84 74 a2 96 18 25 68 1a 6a e7 68 8c b2 c7 d7 14 f0 22 16 92 31 7e be e5 3d 97 c3 f3 9a 09 e6 d9 3e ce b2 90 be f5 37 47 68 c1 26 27 fc 24 2c 37 1b fb 5d e3 11 54 25 4d 3c 15 29 b9 2a 60 8e 65 53 ea 89 10 36 9f 1b 12 47 c3 14 33 eb 8c c6 4e f8 5b 47 e6 9e 92 7f 11 f0 c7 12 07 16 6e aa a8 bb b7 82 a8 de c7 0d 49 56 a2 ed 47 5a 83 bd a8 ea 54 7d ed 16 23 14 e6 1c c4 54 58 4a b4 47 99 87 ba b7 3a 35 14 eb d0 1d af b0 33 fc 2f 8c f2 a0 0e 52 e7 91 a5 dd c6 65 22 b2 44 8d 23 dc 47 16 e2 b1 a9 37 c7 27 79 3b 57 36 c6 b2 77 5a 54 5e 96 c5 d2 43 52 c0 8d c7 41 00 20 f7 e1 1a 48 e3 d9 ac 8e 16 d6 b2 9d 37 f7 e9 ff 00 1f 23 44 a2 a6 6c d5 95 5a ae 66 96 9f Data Ascii: {i2zKhmb&6Vw2It%hjh"1~=>7Gh&'$,7]T%M<)*`eS6G3N[GnIVGZT}#TXJG:53/Re"D#G7'y;W6wZT^CRA H7#DlZf
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 06 3a f5 6c db f0 b6 25 1b fd a1 57 78 fc a0 bf d6 1d b8 7e 79 08 d4 f0 3b 47 d9 34 5e 9a 02 3b 08 9a 2b af df bf c3 02 a9 e5 e8 c5 14 b2 b7 74 71 bb 9f 8e 91 b8 62 2a 57 9a 50 6a 00 62 a6 fc d5 48 70 08 e0 6a dd 0d 95 7f 16 09 66 f5 ac 31 0c 7a 47 79 3b c9 ef 27 c8 c0 1e 23 10 45 4e 23 ac 53 4d b4 33 ad 0a ac a1 14 ac 06 2c c6 9a 7d 52 1b 74 43 6c c2 af d6 61 8c f0 6a e5 a6 72 7b f9 4b 53 ff 00 bc c0 ea a7 e4 e2 ff 00 d3 5c 54 c5 b4 50 c3 ad 1d c8 ef 20 ee 61 f7 62 5b 83 63 eb 6f 5e e7 1f 57 bf f8 76 e0 b3 0a fa 01 1d f6 b1 4c b3 1d 37 d4 9a a5 86 38 2f 6e a9 79 ac 17 bf 49 c6 7f 22 cb 9c d7 ba db 74 a2 36 b7 03 24 68 ab 21 fd 2f dd f3 2c ee 10 f4 a2 a4 c3 ce 16 90 54 73 98 14 2e d2 5a 0a 98 4c 35 7b 12 dd 49 d3 d1 4a 84 6f 06 0c 49 14 d0 6c d6 74 64 69 Data Ascii: :l%Wx~y;G4^;+tqb*WPjbHpjf1zGy;'#EN#SM3,}RtClajr{KS\TP ab[co^WvL78/nyI"t6$h!/,Ts.ZL5{IJoIltdi
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 6c 0d db 1d 65 04 96 92 09 81 e3 ba dd d8 ab a8 a7 a5 89 9e aa 4d 84 7e b6 ff 00 4e c3 f0 70 44 0e a6 91 b8 77 0b e2 ae a1 aa ea a7 aa 61 a4 cf 21 7d 1e c2 f0 44 f8 20 5f f2 19 29 69 a6 90 4d 25 3c 4d 30 dc 26 d1 a6 7b 77 6d 92 cd 6f 8e 02 a8 e0 3f 79 3f 79 ff 00 2e ff c4 00 2a 10 01 00 02 02 01 03 03 03 04 03 01 00 00 00 00 00 01 11 21 00 31 41 51 61 71 10 81 91 40 a1 f0 30 50 b1 c1 20 d1 e1 f1 ff da 00 08 01 01 00 01 3f 21 fd d5 da 8e 1e 4c 4b 40 22 86 21 42 a8 51 ac f6 df b1 68 bf a4 ec 7f 61 8a 33 9e 03 3d ef d7 b2 58 f8 c5 55 bc f5 22 2f fa 32 c1 34 3b 7f 9f 17 e7 35 a6 75 cd f5 a3 c1 3e 38 56 43 99 a8 da 90 85 ea 85 c9 1d 4b 03 eb 56 09 85 ec 12 ab 40 1b 14 03 95 03 2b 52 09 82 bd e1 94 a5 3b 32 10 d4 20 80 62 7e 76 40 5b 1a 64 cd db b1 6a 23 a8 e8 Data Ascii: leM~NpDwa!}D _)iM%<M0&{wmo?y?y.*!1AQaq@0P ?!LK@"!BQha3=XU"/24;5u>8VCKV@+R;2 b~v@[dj#
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 7a 98 ae a3 01 5b 41 28 74 ce bb 97 b6 18 3b 93 e4 70 2f ce 00 4c 11 36 f7 7a af 2f eb 0f e9 51 7b 48 f0 25 39 ea 12 ef fb f1 a9 08 e5 90 8b 42 4d b6 f5 6d f9 71 ce 8b 07 dd ca 56 c5 86 38 d3 03 bd b8 ab 76 5e f2 f4 b0 80 40 d8 76 00 79 40 2e b3 fb 3e 70 a3 a4 e3 c8 dd 8f 29 af 89 f1 83 3f 9f d6 4f 2c 6f 57 c4 32 22 33 da 43 79 20 37 78 72 b6 81 89 6b 16 c5 59 54 04 0b 38 82 0e 28 eb 3b 62 68 76 a5 8e b0 b1 07 c2 08 8e 07 d5 6d 03 38 bf 90 fe 55 6e b3 50 09 09 38 0c d3 f2 5c c7 be 11 9b 66 4e 12 68 25 3c 18 82 a5 64 9d cf 3c 98 df 8f f9 8e 90 06 84 05 e9 36 3f ac 6f a8 61 52 31 48 e4 3c 4a 35 89 00 43 a8 88 19 57 8c 1c 69 18 96 d4 15 ba 18 17 a8 c9 80 7c 30 da 2d 7b 20 f6 7d 1d 15 a0 0b 22 6e 98 76 b3 58 bd f2 72 c4 8d 38 18 57 ad ef 6c 47 ad 64 38 a2 29 Data Ascii: z[A(t;p/L6z/Q{H%9BMmqV8v^@vy@.>p)?O,oW2"3Cy 7xrkYT8(;bhvm8UnP8\fNh%<d<6?oaR1H<J5CWi\|0-{ }"nvXr8WlGd8)
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 87 b1 d6 41 cc 14 e0 50 2a 33 ad 74 43 cc d2 2a b3 11 2d c6 b4 0c 50 01 58 98 62 c3 81 8c 11 5b 30 24 33 1d 7e 61 db dc bc a9 c8 9e 9f b8 ee 6c ee 0f 42 fa 0c 36 c0 13 b5 22 30 91 a7 9d a7 f4 31 84 07 dc f0 9d e8 3c db 86 d5 10 0a 20 c2 e2 bb 83 fd 24 36 9d 24 27 db 0a a6 12 c8 b4 35 79 03 b0 50 0d 3e 9e e8 3e f5 e0 9e 3c 65 87 93 a1 a0 0f c1 87 80 1a 08 fa 23 06 ae 8b e6 1d 40 6c fd a9 10 2b 0e 2c 78 0e ef 94 48 f2 61 ba 17 d3 ed a7 48 a7 34 25 23 c0 84 25 63 a5 0b 5e 42 d1 2f 02 0b a0 c3 b4 90 7a 94 70 ca 93 88 1c 3a d8 33 fc cd a9 10 c2 79 94 46 df 70 29 14 8f 9b c3 9f 0d d8 04 12 1b c2 ed db 15 21 71 27 34 7a f1 eb 4f a0 74 83 bc 15 28 22 1e 04 89 55 08 cb b4 80 3a 01 c0 13 09 47 a1 98 cb ba 01 a3 23 3a e4 4b 66 29 c5 dd af 0e 0c eb f2 fe fa d9 4a ec Data Ascii: AP3tC-PXb[0$3~alB6"01< $6$'5yP>><e#@l+,xHaH4%#%c^B/zp:3yFp)!q'4zOt("U:G#:Kf)J
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 8c 05 73 d6 b8 51 fd 1c 4c 51 ae 92 27 3c e8 09 ec 3e 09 bd 68 8c 01 72 c6 b1 2d 92 64 5a 01 0d 0d e1 de d6 2c 9e d0 bb 2c b0 50 4c 19 ea 94 95 a7 55 dd b3 10 2a 02 94 b1 57 40 f6 fc 63 28 a9 42 ce 03 1f 08 ef f5 be 22 ad 64 54 32 8a f0 ac 85 0c d0 02 a0 07 41 d1 38 67 89 7d 06 bf 9f 18 b7 86 ea b5 60 34 60 2a 15 57 c5 d9 e1 ef ae d9 7c fd 0e cd 8a 53 77 7d c2 63 4c 35 6d 6d fe 4f 18 71 e3 7b 03 53 e6 ee e3 da 95 b4 1c a0 e1 e4 b7 73 09 3a 0b f2 f9 e6 b5 75 8e 02 05 c7 dc b1 ca 06 1c 70 6f bb e6 a2 3b e1 c0 30 18 d3 88 22 52 91 74 ec e6 f0 9d 6b 8d 41 12 6f 96 79 c2 fb 1e 90 73 1a d2 65 13 07 00 61 1d 10 0a 89 5d 20 99 6a 95 7c 31 6d 9a 3c 47 14 ec 87 19 d0 e7 ed 71 19 78 17 f1 a6 be f1 d4 71 f8 91 4c 49 b7 7c 6a 78 9d 4d 8d 0d 53 ff 00 33 85 ab de ca 07 Data Ascii: sQLQ'<>hr-dZ,,PLUW@c(B"dT2A8g}`4`W\|Sw}cL5mmOq{Ss:upo;0"RtkAoysea] j\|1m<GqxqLI\|jxMS3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50082	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	837	OUT	GET /media/BTC-halving/bitpanda-bitcoin-halving-countdown.jpg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:53 UTC	842	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: image/jpeg Content-Length: 335543 Connection: close Age: 20496 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=370843 ETag: "abbc6cd668a860bda8f7ece840a7a077" Last-Modified: Wed, 06 Dec 2023 12:38:05 GMT Via: 1.1 d7db6b9cdf796f6ea0cdbe5b3a75c84a.cloudfront.net (CloudFront) X-Amz-Cf-Id: dKGmxKxvkdVolDxeGmP_ahoLPyeF9L90FAtjR8wSHPve2QPl9PmJWQ== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-server-side-encryption: AES256 x-amz-version-id: PEhjySaprsRhDANZgzKEwNBzJsgTWUaK CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:53 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8783b4131f6-MIA
2024-04-26 18:32:53 UTC	527	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 64 00 64 00 00 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 01 02 02 02 02 02 02 02 02 02 02 01 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 ff c2 00 11 08 04 38 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 3a 00 01 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 01 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 09 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f8 2f d8 d7 00 00 00 00 Data Ascii: JFIFdd8:/
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d9 0d 0f 2b f5 13 e5 7f 31 7b ab c5 f8 de 52 70 94 2c 21 32 72 a3 70 b2 8a 35 31 2a e9 d1 43 e7 4f ad ef 3e 49 fd bf ee 69 2c b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 ff 00 ab ca fa 46 f3 5f 9b 3e 8f bc ef c0 b7 8c ea 44 a8 94 57 15 c1 18 a4 57 04 ea a7 06 2a 2c 9d 9d 7e be 4f c2 57 b4 fd 61 e6 4f a0 fd 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: +1{Rp,!2rp51CO>Ii,F_>DWW,~OWaO
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 cf 5a 3e 6f ea 13 cb 7e 63 f7 9b 87 f1 3c ac a1 36 71 55 29 93 83 10 57 32 c8 a5 55 93 34 51 25 31 2a 24 ab 02 8a 15 93 04 49 11 95 9d a6 7d 5b 0c 6a 79 fb ce fc df e5 96 ae a7 18 4b b5 d1 4f 47 fa 7f c6 df 7f fb ee 95 b7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 37 7d 6e 6f d1 5f 9a fc e7 f4 a5 e7 3f 3c f2 36 75 22 18 89 51 29 d6 53 55 3a 70 46 64 a2 9d 46 45 32 9a 31 4a 72 a0 00 a6 4a 8d 4c 4b 39 9d ec a4 f6 ba f3 ab f2 7f 39 34 7e 45 d1 9a f7 75 f8 ee f4 f3 bb fa 27 c5 0f a2 7f 43 f0 5b 5d 30 00 00 Data Ascii: Z>o~c<6qU)W2U4Q%1*$I}[jyKOG7}no_?<6u"Q)SU:pFdFE21JrJLK994~Eu'C[]0
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 26 df f6 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1f 52 fe 33 f2 6f d3 37 03 e0 89 46 a2 54 d0 ad 8b 99 cc 15 c5 38 31 16 20 c1 98 23 32 ca a9 18 32 00 02 8a 19 76 e6 76 7d 1e 10 d6 f9 a7 41 f4 7e 2b d0 da 1a 0e 36 23 2c f5 73 a9 f7 6f 29 3d b7 ee 2e af fa 0f af 4a b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 e4 73 35 e2 aa 54 ec 54 af 12 58 9c e6 7d 3e 77 ae df 39 ec 7a c5 f2 6f a1 7a a7 f2 af 71 d8 5f 03 f4 ab 1e 7f 6a da 8b d9 52 8c e4 86 61 14 90 b2 5a a5 34 65 63 5c d9 cc 90 94 99 85 95 78 9a 55 d2 c4 21 1a a5 c5 52 d9 ad 6f 66 ad 4b f4 21 9d 2a fd 0e 44 9b 7c 8a 9b 7c 7b 8d ce 1d 3d ae 24 bb fc 29 f7 fc fc 3a 7e 6d bd e7 28 ef 79 a9 37 7c dd 3e 8f 9d 74 39 38 Data Ascii: &2R3o7FT81 #22vv}A~+6#,so)=.Js5TTX}>w9zozq_jRaZ4ec\xU!RofK!*D\|\|{=$):~m(y7\|>t98
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: f2 80 2a 65 1a b1 09 e6 58 e2 b5 91 9a ba aa 57 1a ca 6e e1 a5 92 a7 47 25 56 96 c1 1e 0e e3 57 93 de 35 7c 2f 36 6b fe 7e e6 79 fc 07 b4 fc af 25 cf 1a dc 8e 63 ab d8 ef b1 f6 db 16 7b 99 78 f5 2f f1 b9 77 8d ab 9c 5b 5e 76 75 ee fb bc 5b f4 7f a0 3c 3c ef fe a6 ef 47 2f c6 fd 5e f9 8f c8 9d 82 af cf 48 cc c9 31 1d 82 7d 1a e9 f5 b3 4f e3 be 78 68 fc b7 a6 55 6f 6b f0 bb 1d 66 ff 00 44 bd 1f ea 3f 2e bd af ec ee 26 ea 7b 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 ad db ee 7c 7e c5 fc 76 d7 a9 9f 9f fe e1 a4 f8 ef a1 dd d7 66 7f 52 ed 87 5e cc a5 16 df 53 9b b8 e6 e6 99 54 ae c9 a1 28 d3 65 de 31 4e bb a9 57 6d 48 62 85 73 92 39 92 a9 c2 bc c9 29 c2 0b 3c 66 9d 79 a7 8b Data Ascii: *eXWnG%VW5\|/6k~y%c{x/w[^vu[<<G/^H1}OxhUokfD?.&{`U\|~vfR^ST(e1NWmHbs9)<fy
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: ef d3 46 77 f2 ae ea 2a b5 5b 52 ac cb 14 ec d3 aa 72 c2 c8 b1 2d 79 a3 55 94 63 65 b6 27 1a e5 41 3b 64 ad 63 9a 55 91 cd b2 36 51 9d 04 e8 67 16 31 5a 33 6e c5 85 90 c6 57 8c 7a bc 7c a3 46 ca ad 33 46 2e ea 31 ca 6c e1 af 63 bb a3 65 6e 9e 36 cd 4b 5b 34 29 59 a1 6b 2d 7b 1d be 54 b9 d3 b5 b7 4a 8d bc c9 f6 79 b6 db 7c 79 6f d1 8e c7 2a 4b 39 73 5f cf ab b3 cd a3 b7 c8 a1 6e 94 fb 5c ba 17 e8 63 76 74 b1 fb 3c dc 3e ce be bd 7c 75 2d 99 71 7e d5 fc 39 bb d4 e1 0e 97 a0 e1 9e 9f a9 e2 ed ce f7 1e ef 75 75 4d 8d dc 25 db 58 ab b6 6c 6e d8 b5 4a d6 78 a1 9c c9 66 64 c6 24 24 c8 23 94 8a f1 46 cb 25 46 bd 71 96 51 9e 35 55 ae 15 d4 5d 62 9b c8 6a 64 29 e6 65 69 e7 ec f8 f2 dc 8f a9 e1 b9 27 53 e5 5c ad 9f 85 73 fd 3f 19 ec 8f 3f cd f3 66 be 9e ff 00 5f a3 Data Ascii: Fw[Rr-yUce'A;dcU6Qg1Z3nWz\|F3F.1lcen6K[4)Yk-{TJy\|yoK9s_n\cvt<>\|u-q~9uuM%XlnJxfd$$#F%FqQ5U]bjd)ei'S\s??f_
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 73 a7 5c a4 d8 41 2a 71 8d 4c c2 6c 8c 42 28 67 11 c6 20 c5 48 d3 3c 31 3c 6b ad 9a 6f 23 a9 90 8e 96 4f 5f 9d 9a af 8b b4 43 ce f2 06 9f 83 e4 2d 7f 98 72 76 3e 27 c8 51 f9 a7 29 ea 79 7e 47 d7 e7 ed b0 e7 65 f1 45 c6 10 cc 71 79 b3 17 1b b5 d9 ee e8 16 ef e9 36 f4 f8 fa ef 5f a8 cb da e9 97 7d 47 a6 de 9f fa 1f d6 da ed ea 77 53 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d8 de 4e 8f d5 af e2 ff 00 b2 7d 11 7e 3c fd 45 b7 51 e8 b3 3d 2e 75 ef 67 4f 21 bb a9 7b bf 5d c6 fe 9d d6 c4 2d 76 21 f1 ab fb 23 f1 1f d6 4f e7 2f d5 fc 9b cf ea 51 66 28 cc c4 d6 46 9e 73 47 2a 54 ca 9e 73 6e cd 96 33 6b 95 94 b3 8f c2 cf 0c 4c a1 af c9 85 9d 7a fe 2a c0 ec 51 ad db ad ad 67 5f 5c bb 57 Data Ascii: s\AqLlB(g H<1<ko#O_C-rv>'Q)y~GeEqy6_}GwSdN}~<EQ=.ugO!{]-v!#O/Qf(FsGTsn3kLz*Qg_\W
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 6f 5f 83 fd 2f 13 e5 7b f5 a7 e1 7f a7 1f cc ff 00 b5 b9 d7 4b ad 42 c5 b5 90 a3 98 d9 4f 18 d9 42 c6 ea f0 b3 af 5d 9b 5b 96 be a7 6e b6 9f 3a 74 bd 8d 3d 43 63 9f a4 4f 53 49 b3 4b 52 d9 d2 d6 2e d3 d3 f6 b4 35 79 eb 6b 96 e9 e2 a7 af 88 bf 56 c2 70 c4 d9 ab 8b be 9c 6d ba 58 cb b5 70 d7 42 d6 75 5c c2 14 73 5d ae 63 86 d9 a6 0a d2 ae 84 e1 69 99 50 95 70 ce bb 39 a5 9a 25 c6 2d ec 8f 72 37 ee fa b1 f7 5e a3 d3 be e7 4b 89 f5 e9 f8 ed f0 1e 4b ca 2e 4f 26 52 9c b0 9d b4 92 b7 b2 74 ec 95 b5 f7 5b d9 2b 4b 53 4a 52 db 8b 49 d9 61 75 96 16 df 8b d8 b3 03 b1 b1 83 d8 da c5 6c 59 87 bb 67 1b 7c ec 2c c5 85 f7 5b 25 23 12 33 49 75 0b 25 2d 68 10 96 23 2c cb 66 29 62 99 71 91 18 c5 14 22 96 ec cd 1c 4a 46 cc 4f 45 73 e2 15 8a f1 a2 e7 15 dd e3 4e e2 1a b7 d1 Data Ascii: o_/{KBOB][n:t=CcOSIKR.5ykVpmXpBu\s]ciPp9%-r7^KK.O&Rt[+KSJRIaulYg\|,[%#3Iu%-h#,f)bq"JFOEsN
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: f5 0d ec bd 2f d4 17 ae f5 1e 6b f3 39 fc 3d 45 1e ae 76 7a 9f 98 cf cb be 75 90 bf 67 f4 1a fa 17 ba f9 d1 e1 f2 f9 f7 6a ee e8 ef ee 75 8a b8 f1 c4 a5 99 9e 7a c3 1c 7b 81 bb b3 e6 75 34 f5 ca 53 f7 f7 6e ff 00 10 a9 af 3d 39 7a ed 75 9e 32 57 1e 09 9b e9 3a c9 fc cf 46 3d 85 4f d5 a9 cb e1 92 ba ba 44 b6 58 a1 98 c9 98 d3 b6 c9 72 83 11 66 4c 21 84 b0 4b 98 4f 8c 46 69 23 0a 72 4b 28 cc cc 15 ce 4d 5c 50 cc 50 89 14 6b c6 aa a8 56 cd 75 a3 5d 68 d3 3e 21 52 11 95 54 15 cd 99 4f 8a a5 cc e0 b6 5c 5b 0c c6 8c a7 6b 6e cd 15 97 90 ab b3 f6 6e 70 af 2f af e6 8f a3 d7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ee 57 9f e7 fd b3 7f 38 7f 48 fa 07 f8 d3 f6 15 1d 4d e9 ea b5 89 55 92 e7 31 b9 b6 Data Ascii: /k9=Evzugjuz{u4Sn=9zu2W:F=ODXrfL!KOFi#rK(M\PPkVu]h>!RTO\[knnp/W8HMU1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50083	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	862	OUT	GET /media/BTC-halving/bitpanda-academy-intermediate-22-bitcoin-halving-header-NEW.jpg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:53 UTC	801	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: application/octet-stream Content-Length: 68779 Connection: close Last-Modified: Mon, 18 Dec 2023 18:37:13 GMT ETag: "47d9fd4e004c37e011fe88ce26405864" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: gf1FdpvWwC5klEXJrJNUXzfRqeW2Yj1L X-Cache: Hit from cloudfront Via: 1.1 ef3100c3f2434fd3889627d60775da30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: MaNN8E6TAAwZdbHyzuxflkZ6a_uYobYFKxxRFuNYLagZac3WyH2-2g== Age: 20497 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:53 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8784b13a554-MIA
2024-04-26 18:32:53 UTC	568	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 01 0b 91 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 08 34 00 00 04 ec 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 0c 0c 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 01 00 0d 00 06 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD(iinfinfeav01ColorjiprpKipcoispe4pixiav1Ccolrnclx
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 1e ab 5c 31 7b 2b 9b 5a c6 94 90 7e 46 18 be e4 a7 2a 6e 49 56 39 08 ce da 6b ee 67 40 c4 37 49 d8 31 0f 9a e8 48 f1 ef cf 9c ed 2e 93 65 10 f1 69 53 92 3b b1 52 13 ee b7 df b0 1f 1d 75 3b 50 c8 b5 b3 ea 30 88 c5 21 a4 fd be 1d 3b 23 1b 0e c2 11 93 c3 4a ba 8a cf 6c 7e 53 d2 44 29 8c a8 a7 10 f1 7d 37 96 96 a5 eb 0e 89 91 07 92 13 86 2f d8 a3 5f d8 db b6 4a cc d3 48 50 f2 b5 43 8a d2 87 f2 0a 09 1e 07 e9 8d f6 3e f3 e4 63 b8 bf 89 de ff 47 1b 2a 9b aa ae 32 9f 67 ee 99 01 e6 9b 5a 3e 81 31 ea 6d c3 13 c8 4a c0 85 37 6c a3 1d 11 c5 7f d5 54 9d 4f 82 25 44 86 a3 61 8a 74 78 b4 c7 c3 57 ac 36 9c a7 92 d1 f4 7f fd 71 2e 16 3f fb d3 1e 33 3c 01 08 6c 0c 15 a3 32 db 74 d6 6d d7 2e 69 13 e2 24 35 57 ca 38 1b c1 16 db 52 df 9c 66 5e 67 95 33 71 62 f0 0d 2f 0e ea Data Ascii: \1{+Z~FnIV9kg@7I1H.eiS;Ru;P0!;#Jl~SD)}7/_JHPC>cG2gZ>1mJ7lTO%DatxW6q.?3<l2tm.i$5W8Rf^g3qb/
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 4f 53 f5 65 c9 78 e9 be 02 dd 4a e9 97 f9 77 ec 3c 20 66 a1 04 be da 8d 63 79 fa 6e 15 36 9d 58 bc 94 94 7c 23 c0 05 4c 85 79 b7 63 20 14 96 98 31 f5 4e 2d cc f6 ce ee 2c 72 40 8e 77 f0 77 df ab 4c 6d e5 b6 31 91 93 60 33 f7 5f 69 82 cf 27 fb fc 26 d0 02 19 0a 10 c8 65 e5 1f 8c 47 ae 3d 57 86 67 14 5d b4 44 26 43 71 be 89 a4 4b 17 71 6e 44 2c b1 7f af db 9b 31 e1 0a 9a fe 34 81 6a 87 37 4f 0b fd 4c ec e4 d8 38 64 aa d3 31 46 56 30 87 76 e3 0f d2 0b f6 6f 40 c1 23 34 a2 99 8b 0d eb 67 27 a5 18 a2 76 7c 1a b8 16 79 47 aa 71 4b 06 10 09 e7 32 31 74 8e a0 35 af 5c 10 e6 e4 26 78 28 73 c7 8f df d0 a3 f5 82 b9 c7 09 27 5f 5a fc ee a5 5e 37 74 92 4d e6 ce 0e c0 7c 5e 0c ab fe 3d e7 ad ee d6 da 77 03 c1 90 5d 69 d7 20 d5 94 35 60 24 bb 10 f5 02 40 69 24 91 d3 2a Data Ascii: OSexJw< fcyn6X\|#Lyc 1N-,r@wwLm1`3_i'&eG=Wg]D&CqKqnD,14j7OL8d1FV0vo@#4g'v\|yGqK21t5\&x(s'_Z^7tM\|^=w]i 5`$@i$*
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 99 3a d6 a0 27 85 c1 08 70 7a f7 40 31 d9 72 eb 07 17 94 b6 31 f0 c6 c7 0e 21 93 bd e0 fe 5f 06 73 fe 8a 1b 2a 1e b4 f5 1b c6 c5 3a 4a 98 6a cd d1 73 7c 05 8b 22 c7 c7 9a a2 67 e3 bc b9 95 f3 a6 19 c6 6e 47 9d 00 83 62 5b cd 6b d9 66 20 72 31 80 d4 7b d6 c3 4a dd 97 ed 09 77 06 9f 4d fe 34 58 87 b6 f9 1d 1d ce b5 32 3a 13 de 24 1b be 72 61 a7 3d d1 af a9 89 6c 39 98 bc 68 79 88 f6 66 98 77 6d d0 0a 14 13 58 0d b9 53 5b d8 8e a5 f5 87 e3 44 14 80 6d 91 0c 3e b4 43 c0 ee 55 2d 72 3e f6 ec 2d a7 ed c8 a5 cd 60 f5 60 9a a5 23 3c b4 b0 53 75 f6 b8 26 f6 30 c8 40 80 63 70 8e a9 70 60 0c 84 e2 05 59 64 88 45 cd 1e 5b d0 19 15 90 d4 ff e4 9c 96 3d bb 7d d4 ab 3d 36 07 ee ac e1 3a 9c b8 f6 c7 35 d6 e1 e2 f2 27 e2 1c b4 f1 1d d6 61 d7 1b ed 30 58 df 49 73 2c 03 ff Data Ascii: :'pz@1r1!_s*:Jjs\|"gnGb[kf r1{JwM4X2:$ra=l9hyfwmXS[Dm>CU-r>-``#<Su&0@cpp`YdE[=}=6:5'a0XIs,
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 05 72 85 9a cd 17 07 9b 52 6f a3 87 a2 50 c9 9f 3f 12 21 6e 7c 27 7b eb 3f 2c c0 66 15 91 73 0c 21 b1 e8 bc 14 02 17 21 88 b3 74 fe b8 57 a4 24 cd ee 9d 36 df ca d3 72 7f 0c 70 71 8d a8 fa 42 3f 29 b3 35 ad 6c 1b ae ce 7a 64 c1 6d 17 11 e9 a3 e7 49 6d cf b9 12 8f c6 62 83 f4 d6 8a 03 69 f5 c8 f7 2d c7 c5 02 d3 27 16 90 5f 0a 8e ec 44 f8 bb 79 4c c5 0a ca 9d 81 bb 80 1c d9 0d 6c a6 cf a0 8d f1 58 4d 5e b9 dd 13 49 af a4 ed 0a 45 da 06 45 8e 52 e9 55 64 77 57 8e e8 21 9d c9 3a 41 c2 9d 25 b1 b8 0d aa bb f5 6b ce 23 9b 62 7c ce e9 e8 94 5a 45 72 c3 2a 75 07 61 ad bf be e6 37 8e 3d 2a dc b9 fa bc 27 65 3f 7e 47 f3 6d 1e 12 dd 1f 26 a0 48 a8 73 67 5e 31 87 a1 14 df 44 39 fa 45 dc 34 f6 dd 97 9c 84 50 26 f3 2d db fb d4 66 c7 32 c7 0f 1e 53 dd e3 15 a9 64 ba e6 Data Ascii: rRoP?!n\|'{?,fs!!tW$6rpqB?)5lzdmImbi-'_DyLlXM^IEERUdwW!:A%k#b\|ZErua7='e?~Gm&Hsg^1D9E4P&-f2Sd
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 63 e9 c0 15 0a f1 68 b9 1b d9 7e 4a a6 c7 ca d3 67 fd 87 6e 75 74 01 e4 97 66 94 85 44 73 d3 dd 2a 05 05 53 84 18 fe 07 4b c3 e7 d0 bd 98 f1 dd b6 dc d4 3c 95 e0 b0 6f 73 03 d0 51 65 ff 0f 48 37 fd bd 7c a5 62 90 fd ec f2 90 6f c3 ff 19 26 20 55 f7 3d c3 03 2f 7d bf 21 23 3c d0 78 d5 e6 bb 2c a0 46 97 c8 be 65 bd ff 77 0b 41 19 5a b3 0b d4 e5 5a 66 35 a7 81 1b 5d 2a d7 c9 c9 23 b8 7b a8 ff 5c dc fa ee 93 ad 3d 5a a8 7f 4b 0c 49 ec 31 30 89 26 22 c7 90 bc 03 e8 a4 6f ff 09 85 ce 98 e7 69 97 79 99 78 9e f0 cd 3e 42 77 3f 73 08 16 69 a7 de 93 10 85 c4 30 a3 e8 95 e7 a9 58 7e 33 32 45 31 ce 35 96 ef 92 ea 9b 1b ad 85 32 8e b1 a7 ab e6 e3 d1 d1 6a e9 2f 90 99 18 2a 5b 4c 43 d9 a8 b3 0c 12 39 70 fd 7b a2 64 72 b8 9f 74 f1 c2 29 b5 2b 8e 4a b6 4e 0e c8 00 8b 57 Data Ascii: ch~JgnutfDsSK<osQeH7\|bo& U=/}!#<x,FewAZZf5]#{\=ZKI10&"oiyx>Bw?si0X~32E152j/*[LC9p{drt)+JNW
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 73 0d c8 df 36 88 0d 87 cb 88 ea 13 45 30 fd 43 67 5c 52 e9 af d9 37 0d 3c bd a2 c2 19 b9 0f a3 be fc 93 03 89 19 e9 98 1b b7 a4 14 e6 a8 a7 9e 61 67 20 57 27 49 07 4b d3 c8 50 72 41 ab 5c e0 ee 29 92 ab aa 78 66 20 03 af 17 83 03 ac 1e 72 ad cb 76 58 91 b0 d4 b5 a8 45 b0 d5 df b8 00 c7 aa c8 eb 8f c5 11 ad b7 ce d8 d2 f1 a5 68 74 be 90 d2 d2 26 4f d7 5c 8f 07 d6 a6 37 04 c7 7b ff c0 07 07 e7 25 71 e2 97 fe c6 85 62 b4 f5 cb 1f 41 32 46 f0 a7 c1 1e 68 1e 1f fb 47 8e a0 04 da 54 58 ad 35 e9 93 72 8c f0 ca ee 59 ba ef c9 f9 3b 85 9d 29 db a6 11 ab 38 37 f7 c4 27 b7 ca b4 6e f2 52 f3 f8 8e 6f 54 8d 25 cb 27 1c c7 9b 29 11 14 88 c9 12 1e 0e 5c ff d4 46 07 df c9 8e 2a 73 a9 f8 52 bf 3e 4f 23 7a cb ac 1d 49 dd fd e3 8c 05 c8 fc 92 dc 10 f4 47 37 e8 f1 97 d8 e2 Data Ascii: s6E0Cg\R7<ag W'IKPrA\)xf rvXEht&O\7{%qbA2FhGTX5rY;)87'nRoT%')\F*sR>O#zIG7
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 2e cc 9f e6 41 e0 80 e2 f3 ba c0 54 5f 68 65 d7 2a e6 34 4d 80 ae 37 2c ae 6d cc b9 ff db f7 ec 8c 93 31 4c e5 48 d8 4e e8 ca 82 c3 0f 56 9f 7c 47 dd 6d 62 39 8b 6d 51 27 b6 12 7b 61 57 54 6d 63 ee cb fb 82 44 f5 25 17 39 17 b8 07 31 f8 2e b3 0e 44 8e 37 50 a0 51 c6 4e 8d 98 5f 09 c6 19 4a 1b ec 34 62 6f 26 b9 ad 45 c7 85 28 3a d9 21 ed 96 2c fc 62 5c ad 3e 4c 0d 64 31 8e 96 db ad 7b 29 4b 87 e4 2a b3 c5 74 eb 75 f5 cb 9e e2 2e ba a2 80 35 35 cf ce 34 0f a2 87 92 bb 22 74 b5 a2 da fc d0 fc 5c 82 ac 30 70 c9 0c 5b 68 27 b0 7d ea b9 0e 5b 1e e2 10 c7 75 51 cf 2a 23 9f 34 c7 39 ae 72 66 3d 96 8a 81 cb ac f5 de 2b 55 36 c3 66 a2 df f1 28 ee 88 3a 32 d2 56 48 ea 6c fb 09 f8 b8 5e 6e 64 0f ab f0 79 d1 ea ce 5b f9 58 38 e9 9a 23 d5 f1 cd 7e 1b 7a c1 7f 61 76 e6 Data Ascii: .AT_he4M7,m1LHNV\|Gmb9mQ'{aWTmcD%91.D7PQN_J4bo&E(:!,b\>Ld1{)Ktu.554"t\0p[h'}[uQ*#49rf=+U6f(:2VHl^ndy[X8#~zav
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: fe 43 1e 1c 9a 30 ed 58 d7 20 c5 25 02 a4 ad b8 66 95 8b 5c 46 f6 f2 b4 cc 2a d5 05 0b 20 74 77 16 ff 69 2c b0 5d 24 0c cd 35 94 89 98 52 d9 7e da ec a8 32 7a c3 5c 3d f2 9f 3a 11 97 d0 06 95 12 4d b6 84 96 36 e6 04 32 6f c6 f6 7b 84 c4 e2 e7 7c 77 97 7e 7a 49 29 5a 45 4a 67 36 20 b9 f0 29 47 2a 82 64 13 96 69 25 f2 4c 35 03 b5 fb 95 a8 ef b8 42 ef 32 97 ce 7b 41 7c 11 98 e7 ec c7 e0 58 73 43 cc e4 93 13 6d 85 4a de da 27 aa 70 b1 08 2a aa aa aa aa aa aa 3e 7e 35 4c 11 8e dd 40 1e fd 38 ef e0 11 44 87 50 6f 63 0c 03 b0 9c 06 01 4e 59 b4 9d 34 76 ac aa b8 96 ec a5 d8 ea 66 b1 7d d2 26 0f d0 66 0e 5d 43 c9 49 e4 2c 9b 0c e1 45 39 44 62 86 9c ae 43 6b b3 da 45 56 8e c4 61 cb f1 80 22 22 9a 87 ac 74 d1 87 44 3e 4d 46 fa c1 be ff ff 9b 10 de ff 0c 4a e7 57 ff Data Ascii: C0X %f\F* twi,]$5R~2z\=:M62o{\|w~zI)ZEJg6 )Gdi%L5B2{A\|XsCmJ'p>~5L@8DPocNY4vf}&f]CI,E9DbCkEVa""tD>MFJW
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 75 f2 ec 7a 11 03 6f 1d 41 df 3f 33 fe ec 4c 5e 4c 78 a1 75 9e 07 f5 cb 79 26 05 fb 6b 27 f4 d9 47 27 43 7b 01 b1 7e 4d df 60 10 a5 6d 8f d8 63 9c 03 46 7d e0 e1 de 03 07 b5 7d 59 f9 c3 8d 7c 19 91 7b 2b 41 b6 e9 8e 5f da 5b 1e eb 4f 19 a2 da 44 28 ab 14 d0 f0 7a 2b e8 4c a9 09 c2 df 0f 46 46 74 d7 b2 9c 9e e0 ce 65 08 79 0d 14 08 36 c0 dd f9 da bf 91 b8 d6 8c a4 af 23 94 25 33 45 2e 1f 3e f5 f8 a8 84 89 00 f5 31 de b4 b6 06 22 ba ba ab d5 53 da 25 47 52 59 fe c6 76 87 e1 a4 30 97 88 0b 6f 3d 20 09 f2 b0 40 ea 09 be 1f 7c 5b 14 6e 2b d9 af 8c 0f e8 6e a2 ee 2d c3 4a 09 ac 89 32 e1 2c 85 30 55 41 de 61 15 f8 6a 21 8b 9f 80 a0 4e dc c8 cd cc 8c dc c9 da 0c 10 bc 78 c0 bc 06 b8 d0 20 54 14 f3 90 9f 89 2f 9d 5e 46 de 3e 5b 77 53 fc 87 5c 45 70 a6 44 b0 16 b7 Data Ascii: uzoA?3L^Lxuy&k'G'C{~M`mcF}}Y\|{+A_[OD(z+LFFtey6#%3E.>1"S%GRYv0o= @\|[n+n-J2,0UAaj!Nx T/^F>[wS\EpD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50081	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	428	OUT	GET /sovrn?uid=Ijp4ARZHzrcLtCmtRkicHZbu HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:32:53 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:32:53 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:32:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50084	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	834	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%201310.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:53 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: image/svg+xml Content-Length: 1725 Connection: close Last-Modified: Mon, 20 Dec 2021 10:16:09 GMT ETag: "c0adfa4f733b54e128d62f32c4ddbb48" Cache-Control: public, max-age=36000 x-amz-version-id: zu5V1psvtw2FxfLo2Iiwjg.dGy8oIz3m X-Cache: Hit from cloudfront Via: 1.1 81148d596ccabdf71245563094108fbe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: l5IY17n0bXaGmx46kw_nxSnR2R57tiA3xsWY9WRPh6f7mRGgCFvqvg== Age: 20496 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:53 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a87889d44c20-MIA
2024-04-26 18:32:53 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 31 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 33 31 30 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 31 20 2d 32 30 30 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 38 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 30 38 32 22 20 74 72 61 6e 73 66 6f 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_1310" data-name="Group 1310" transform="translate(-611 -200)"> <g id="Group_1082" data-name="Group 1082" transfor
2024-04-26 18:32:53 UTC	1107	IN	Data Raw: 30 2e 38 33 2d 2e 31 33 36 2c 37 2e 36 36 31 2c 37 2e 36 36 31 2c 30 2c 30 2c 31 2d 31 2e 30 38 33 2d 39 2e 32 39 33 6c 2d 32 2e 37 37 35 2e 39 36 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 38 38 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 30 38 38 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 36 36 2e 38 38 39 20 32 36 39 2e 36 31 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 38 34 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 38 34 37 22 20 64 3d 22 4d 31 33 2e 33 32 37 2c 32 30 2e Data Ascii: 0.83-.136,7.661,7.661,0,0,1-1.083-9.293l-2.775.966" fill="none" stroke="#27d17f" stroke-width="1"/> <g id="Group_1088" data-name="Group 1088" transform="translate(-166.889 269.61)"> <path id="Path_847" data-name="Path 847" d="M13.327,20.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50085	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	829	OUT	GET /media/New%20navigation_Rebrand%203.0/Cryptos.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:53 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: image/svg+xml Content-Length: 10401 Connection: close Last-Modified: Wed, 29 Dec 2021 09:14:37 GMT ETag: "164f494b4f642eefecb7bc6967dd3dd8" Cache-Control: public, max-age=36000 x-amz-version-id: YEWPFbMe5uNPPmPQ6ABTQlrxEYqH04T7 X-Cache: Hit from cloudfront Via: 1.1 221c16f6368b9673111421e368023144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: T_1f8iiTY7OcBRwf_sMtvyx9C5wDPz95-g66hKtzOn2g9Z0obneGiw== Age: 20497 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:53 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a878d858749e-MIA
2024-04-26 18:32:53 UTC	617	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 70 78 22 20 68 65 69 67 68 74 3d 22 33 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 49 63 6f 6e 41 73 73 65 74 43 6c 61 73 73 2f 43 72 79 70 74 6f 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 76 32 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36px" height="38px" viewBox="0 0 36 38" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>IconAssetClass/Cryptos</title> <g id="v2" stroke="none"
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 31 38 2e 35 22 20 72 78 3d 22 31 38 22 20 72 79 3d 22 31 38 2e 35 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 38 2e 35 36 30 34 39 38 37 2c 31 32 2e 37 39 35 31 33 38 33 20 4c 32 38 2e 35 36 30 34 39 38 37 2c 31 32 2e 37 39 35 31 33 38 33 20 43 32 38 2e 34 32 38 34 39 38 37 2c 31 30 2e 37 31 35 37 33 38 33 20 32 34 2e 35 34 37 36 39 38 37 2c 39 2e 31 34 39 34 30 34 39 36 20 31 39 2e 35 33 34 30 39 38 37 2c 39 2e 31 34 39 34 30 34 39 36 20 43 31 34 2e 35 32 30 34 39 38 37 2c 39 2e 31 34 39 34 30 34 39 36 20 31 30 2e 36 35 34 30 39 38 37 2c 31 30 2e 37 31 35 37 33 38 33 20 31 30 2e 35 31 30 30 39 38 37 2c 31 32 2e 37 37 37 38 37 31 36 20 43 31 30 2e 35 30 37 38 34 39 39 Data Ascii: 18.5" rx="18" ry="18.5"></ellipse> <path d="M28.5604987,12.7951383 L28.5604987,12.7951383 C28.4284987,10.7157383 24.5476987,9.14940496 19.5340987,9.14940496 C14.5204987,9.14940496 10.6540987,10.7157383 10.5100987,12.7778716 C10.5078499
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 33 38 33 20 32 37 2e 37 34 32 30 39 38 37 2c 31 31 2e 34 30 33 39 33 38 33 20 32 37 2e 38 33 35 36 39 38 37 2c 31 32 2e 38 33 39 35 33 38 33 20 43 32 37 2e 38 33 36 38 35 36 38 2c 31 32 2e 38 35 33 34 39 30 37 20 32 37 2e 38 33 36 38 35 36 38 2c 31 32 2e 38 36 37 35 31 39 32 20 32 37 2e 38 33 35 36 39 38 37 2c 31 32 2e 38 38 31 34 37 31 36 20 43 32 37 2e 38 33 35 36 39 38 37 2c 31 33 2e 34 39 38 31 33 38 33 20 32 37 2e 32 33 33 32 39 38 37 2c 31 34 2e 31 32 37 31 33 38 33 20 32 36 2e 31 33 38 38 39 38 37 2c 31 34 2e 36 35 35 30 30 35 20 43 32 34 2e 35 32 38 34 39 38 37 2c 31 35 2e 34 33 39 34 30 35 20 32 32 2e 31 32 31 32 39 38 37 2c 31 35 2e 38 38 38 33 33 38 33 20 31 39 2e 35 33 31 36 39 38 37 2c 31 35 2e 38 38 38 33 33 38 33 20 43 31 36 2e 39 34 32 30 Data Ascii: 383 27.7420987,11.4039383 27.8356987,12.8395383 C27.8368568,12.8534907 27.8368568,12.8675192 27.8356987,12.8814716 C27.8356987,13.4981383 27.2332987,14.1271383 26.1388987,14.655005 C24.5284987,15.439405 22.1212987,15.8883383 19.5316987,15.8883383 C16.9420
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 38 37 2c 32 30 2e 32 35 36 38 30 35 20 31 34 2e 36 34 30 34 39 38 37 2c 32 30 2e 33 31 31 30 37 31 36 20 31 34 2e 38 34 36 38 39 38 37 2c 32 30 2e 33 36 32 38 37 31 36 20 4c 31 34 2e 38 39 39 36 39 38 37 2c 32 30 2e 33 36 32 38 37 31 36 20 43 31 35 2e 31 30 31 32 39 38 37 2c 32 30 2e 34 31 32 32 30 35 20 31 35 2e 33 31 30 30 39 38 37 2c 32 30 2e 34 35 36 36 30 35 20 31 35 2e 35 32 31 32 39 38 37 2c 32 30 2e 34 39 38 35 33 38 33 20 4c 31 35 2e 36 31 30 30 39 38 37 2c 32 30 2e 35 31 35 38 30 35 20 43 31 35 2e 38 31 36 34 39 38 37 2c 32 30 2e 35 35 35 32 37 31 36 20 31 36 2e 30 33 30 30 39 38 37 2c 32 30 2e 35 39 32 32 37 31 36 20 31 36 2e 32 34 36 30 39 38 37 2c 32 30 2e 36 32 36 38 30 35 20 4c 31 36 2e 33 35 34 30 39 38 37 2c 32 30 2e 36 34 34 30 37 31 36 Data Ascii: 87,20.256805 14.6404987,20.3110716 14.8468987,20.3628716 L14.8996987,20.3628716 C15.1012987,20.412205 15.3100987,20.456605 15.5212987,20.4985383 L15.6100987,20.515805 C15.8164987,20.5552716 16.0300987,20.5922716 16.2460987,20.626805 L16.3540987,20.6440716
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 2e 33 39 32 34 36 35 33 20 32 34 2e 35 36 31 34 33 38 32 2c 32 30 2e 34 33 37 37 36 34 33 20 32 34 2e 35 33 30 38 39 38 37 2c 32 30 2e 34 38 31 32 37 31 36 20 43 32 34 2e 35 31 36 36 31 33 37 2c 32 30 2e 35 30 37 38 35 35 35 20 32 34 2e 35 30 30 35 37 36 33 2c 32 30 2e 35 33 33 34 30 34 20 32 34 2e 34 38 32 38 39 38 37 2c 32 30 2e 35 35 37 37 33 38 33 20 43 32 34 2e 34 33 31 39 32 39 2c 32 30 2e 36 32 37 39 32 32 38 20 32 34 2e 33 37 36 36 31 34 35 2c 32 30 2e 36 39 34 36 36 30 39 20 32 34 2e 33 31 37 32 39 38 37 2c 32 30 2e 37 35 37 35 33 38 33 20 4c 32 34 2e 32 35 37 32 39 38 37 2c 32 30 2e 38 31 31 38 30 35 20 43 32 34 2e 32 30 37 33 36 37 32 2c 32 30 2e 38 36 34 32 38 37 31 20 32 34 2e 31 35 34 34 37 35 39 2c 32 30 2e 39 31 33 37 30 35 37 20 32 34 2e Data Ascii: .3924653 24.5614382,20.4377643 24.5308987,20.4812716 C24.5166137,20.5078555 24.5005763,20.533404 24.4828987,20.5577383 C24.431929,20.6279228 24.3766145,20.6946609 24.3172987,20.7575383 L24.2572987,20.811805 C24.2073672,20.8642871 24.1544759,20.9137057 24.
2024-04-26 18:32:53 UTC	1369	IN	Data Raw: 37 34 38 39 38 37 2c 32 32 2e 38 35 31 37 33 38 33 20 31 36 2e 34 37 36 34 39 38 37 2c 32 32 2e 38 35 31 37 33 38 33 20 43 31 34 2e 33 31 36 34 39 38 37 2c 32 32 2e 38 35 31 37 33 38 33 20 31 32 2e 32 37 31 36 39 38 37 2c 32 32 2e 35 33 33 35 33 38 33 20 31 30 2e 37 31 36 34 39 38 37 2c 32 31 2e 39 37 31 31 33 38 33 20 43 31 30 2e 34 32 36 39 35 39 39 2c 32 31 2e 38 36 39 31 35 30 36 20 31 30 2e 31 34 32 36 30 30 31 2c 32 31 2e 37 35 32 32 34 37 31 20 39 2e 38 36 34 34 39 38 37 31 2c 32 31 2e 36 32 30 38 37 31 36 20 43 39 2e 36 35 37 36 35 35 38 38 2c 32 31 2e 35 31 39 39 39 39 20 39 2e 34 35 36 35 33 34 32 31 2c 32 31 2e 34 30 37 31 37 34 31 20 39 2e 32 36 32 30 39 38 37 31 2c 32 31 2e 32 38 32 39 33 38 33 20 43 38 2e 36 34 30 34 39 38 37 31 2c 32 30 2e Data Ascii: 748987,22.8517383 16.4764987,22.8517383 C14.3164987,22.8517383 12.2716987,22.5335383 10.7164987,21.9711383 C10.4269599,21.8691506 10.1426001,21.7522471 9.86449871,21.6208716 C9.65765588,21.519999 9.45653421,21.4071741 9.26209871,21.2829383 C8.64049871,20.
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 32 33 2e 36 32 36 32 37 31 36 20 31 37 2e 39 38 33 36 39 38 37 2c 32 33 2e 36 30 39 30 30 35 20 31 38 2e 31 36 31 32 39 38 37 2c 32 33 2e 35 39 34 32 30 35 20 43 31 38 2e 34 32 30 34 39 38 37 2c 32 33 2e 35 37 32 30 30 35 20 31 38 2e 37 30 36 30 39 38 37 2c 32 33 2e 35 34 34 38 37 31 36 20 31 38 2e 39 37 32 34 39 38 37 2c 32 33 2e 35 31 32 38 30 35 20 4c 31 39 2e 31 33 35 36 39 38 37 2c 32 33 2e 34 39 35 35 33 38 33 20 4c 31 39 2e 31 38 31 32 39 38 37 2c 32 33 2e 34 39 35 35 33 38 33 20 4c 31 39 2e 36 31 38 30 39 38 37 2c 32 33 2e 34 33 31 34 30 35 20 4c 31 39 2e 37 39 33 32 39 38 37 2c 32 33 2e 34 30 34 32 37 31 36 20 4c 31 39 2e 38 30 35 32 39 38 37 2c 32 33 2e 34 30 34 32 37 31 36 20 43 31 39 2e 39 39 32 34 39 38 37 2c 32 33 2e 33 37 34 36 37 31 36 20 Data Ascii: 23.6262716 17.9836987,23.609005 18.1612987,23.594205 C18.4204987,23.572005 18.7060987,23.5448716 18.9724987,23.512805 L19.1356987,23.4955383 L19.1812987,23.4955383 L19.6180987,23.431405 L19.7932987,23.4042716 L19.8052987,23.4042716 C19.9924987,23.3746716
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 33 32 37 36 38 2c 31 39 2e 38 39 39 33 35 32 32 20 32 31 2e 33 38 34 39 37 35 36 2c 32 30 2e 31 36 36 33 33 33 35 20 31 39 2e 35 32 39 32 39 38 37 2c 32 30 2e 31 34 33 33 33 38 33 20 43 31 35 2e 30 37 32 34 39 38 37 2c 32 30 2e 31 34 33 33 33 38 33 20 31 31 2e 38 33 32 34 39 38 37 2c 31 38 2e 38 32 38 36 30 35 20 31 31 2e 33 30 32 30 39 38 37 2c 31 37 2e 34 38 36 37 33 38 33 20 43 31 31 2e 32 37 31 30 31 30 33 2c 31 37 2e 34 30 37 36 33 34 35 20 31 31 2e 32 35 30 30 33 35 33 2c 31 37 2e 33 32 34 37 32 30 37 20 31 31 2e 32 33 39 36 39 38 37 2c 31 37 2e 32 34 30 30 37 31 36 20 43 31 31 2e 32 33 39 36 39 38 37 2c 31 37 2e 32 34 30 30 37 31 36 20 31 31 2e 32 33 39 36 39 38 37 2c 31 37 2e 32 34 30 30 37 31 36 20 31 31 2e 32 33 39 36 39 38 37 2c 31 37 2e 32 34 Data Ascii: 32768,19.8993522 21.3849756,20.1663335 19.5292987,20.1433383 C15.0724987,20.1433383 11.8324987,18.828605 11.3020987,17.4867383 C11.2710103,17.4076345 11.2500353,17.3247207 11.2396987,17.2400716 C11.2396987,17.2400716 11.2396987,17.2400716 11.2396987,17.24
2024-04-26 18:32:54 UTC	201	IN	Data Raw: 36 2e 37 32 32 30 39 38 37 2c 31 38 2e 37 39 31 36 30 35 20 32 35 2e 30 31 30 38 39 38 37 2c 31 39 2e 33 35 31 35 33 38 33 20 5a 22 20 69 64 3d 22 53 68 61 70 65 22 20 73 74 72 6f 6b 65 3d 22 23 46 46 46 46 46 46 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 30 2e 35 22 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e Data Ascii: 6.7220987,18.791605 25.0108987,19.3515383 Z" id="Shape" stroke="#FFFFFF" stroke-width="0.5" fill="#FFFFFF" fill-rule="nonzero"></path> </g> </g> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50089	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	587	OUT	GET /app/v2/js/dotcom-components/p-06f88acc.js HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.bitpanda.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://cdn.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:54 UTC	1100	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: text/javascript Content-Length: 7973 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT, POST Access-Control-Expose-Headers: ETag Access-Control-Max-Age: 3000 Last-Modified: Tue, 05 Mar 2024 12:12:31 GMT ETag: "28be48ee20defa8159b4c733d34dc91f" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=15552000 x-amz-version-id: Ag_D58dtV0zu_rdXKsvZ6m0VGdSbl2i8 X-Cache: Hit from cloudfront Via: 1.1 96ec34ce0a0b54341f66006912ddc5d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Xstt7T9pwI9b_OPAYescDCG8uklZWnRv0CDGp731y3dGBIe_w-TY5Q== Age: 359071 CF-Cache-Status: HIT Expires: Wed, 23 Oct 2024 18:32:53 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: _cfuvid=hd36YCHlmWCo9iAiLbFKQEW2CCDpFwNfAu30M6ZfpwQ-1714156373953-0.0.1.1-604800000; path=/; domain=.bitpanda.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a8790d8b9ab3-MIA
2024-04-26 18:32:54 UTC	269	IN	Data Raw: 6c 65 74 20 65 3d 30 2c 74 3d 21 31 3b 63 6f 6e 73 74 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 7b 7d 2c 6f 3d 6e 2e 43 53 53 2c 6c 3d 6e 2e 64 6f 63 75 6d 65 6e 74 7c 7c 7b 68 65 61 64 3a 7b 7d 7d 2c 73 3d 7b 74 3a 30 2c 6f 3a 22 22 2c 6a 6d 70 3a 65 3d 3e 65 28 29 2c 72 61 66 3a 65 3d 3e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 65 29 2c 61 65 6c 3a 28 65 2c 74 2c 6e 2c 6f 29 3d 3e 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 6f 29 2c 72 65 6c 3a 28 65 2c 74 2c 6e 2c 6f 29 3d 3e 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 2c 6f 29 7d 2c 63 3d 65 3d 3e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 65 29 2c Data Ascii: let e=0,t=!1;const n="undefined"!=typeof window?window:{},o=n.CSS,l=n.document\|\|{head:{}},s={t:0,o:"",jmp:e=>e(),raf:e=>requestAnimationFrame(e),ael:(e,t,n,o)=>e.addEventListener(t,n,o),rel:(e,t,n,o)=>e.removeEventListener(t,n,o)},c=e=>Promise.resolve(e),
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 65 63 74 22 3d 3d 28 65 3d 74 79 70 65 6f 66 20 65 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 65 2c 61 3d 28 65 2c 74 2c 2e 2e 2e 6e 29 3d 3e 7b 6c 65 74 20 6f 3d 6e 75 6c 6c 2c 6c 3d 6e 75 6c 6c 2c 73 3d 21 31 2c 63 3d 21 31 2c 72 3d 5b 5d 3b 63 6f 6e 73 74 20 61 3d 74 3d 3e 7b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 6f 3d 74 5b 6e 5d 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6f 29 3f 61 28 6f 29 3a 6e 75 6c 6c 21 3d 6f 26 26 22 62 6f 6f 6c 65 61 6e 22 21 3d 74 79 70 65 6f 66 20 6f 26 26 28 28 73 3d 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 21 69 28 6f 29 29 26 26 28 6f 2b 3d 22 22 29 2c 73 26 26 63 3f 72 5b 72 2e 6c 65 6e 67 74 68 2d 31 5d 2e 6c 2b 3d 6f 3a 72 2e 70 75 73 68 28 73 Data Ascii: ect"==(e=typeof e)\|\|"function"===e,a=(e,t,...n)=>{let o=null,l=null,s=!1,c=!1,r=[];const a=t=>{for(let n=0;n<t.length;n++)o=t[n],Array.isArray(o)?a(o):null!=o&&"boolean"!=typeof o&&((s="function"!=typeof e&&!i(o))&&(o+=""),s&&c?r[r.length-1].l+=o:r.push(s
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 2c 79 3d 28 65 2c 74 2c 6e 2c 6f 2c 6c 2c 73 29 3d 3e 7b 6c 65 74 20 63 2c 72 3d 65 3b 66 6f 72 28 3b 6c 3c 3d 73 3b 2b 2b 6c 29 6f 5b 6c 5d 26 26 28 63 3d 68 28 6e 75 6c 6c 2c 6e 2c 6c 29 2c 63 26 26 28 6f 5b 6c 5d 2e 68 3d 63 2c 72 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 74 29 29 29 7d 2c 77 3d 28 65 2c 74 2c 6e 2c 6f 29 3d 3e 7b 66 6f 72 28 3b 74 3c 3d 6e 3b 2b 2b 74 29 28 6f 3d 65 5b 74 5d 29 26 26 6f 2e 68 2e 72 65 6d 6f 76 65 28 29 7d 2c 62 3d 28 65 2c 74 29 3d 3e 65 2e 24 3d 3d 3d 74 2e 24 26 26 65 2e 70 3d 3d 3d 74 2e 70 2c 5f 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 74 2e 68 3d 65 2e 68 2c 6f 3d 65 2e 75 2c 6c 3d 74 2e 75 2c 73 3d 74 2e 6c 3b 6e 75 6c 6c 3d 3d 3d 73 3f 28 24 28 65 2c 74 2c 21 31 29 2c 6e 75 6c 6c 21 3d 3d 6f 26 Data Ascii: ,y=(e,t,n,o,l,s)=>{let c,r=e;for(;l<=s;++l)o[l]&&(c=h(null,n,l),c&&(o[l].h=c,r.insertBefore(c,t)))},w=(e,t,n,o)=>{for(;t<=n;++t)(o=e[t])&&o.h.remove()},b=(e,t)=>e.$===t.$&&e.p===t.p,_=(e,t)=>{const n=t.h=e.h,o=e.u,l=t.u,s=t.l;null===s?($(e,t,!1),null!==o&
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 6c 3d 28 65 3d 3e 65 26 26 65 2e 24 3d 3d 3d 66 29 28 74 29 3f 74 3a 61 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 74 29 3b 6c 2e 24 3d 6e 75 6c 6c 2c 6c 2e 74 7c 3d 34 2c 65 2e 4d 3d 6c 2c 6c 2e 68 3d 6f 2e 68 3d 6e 2c 5f 28 6f 2c 6c 29 7d 29 28 65 2c 4d 28 74 29 29 2c 65 2e 74 26 3d 2d 31 37 2c 65 2e 74 7c 3d 32 2c 6f 26 26 28 6f 2e 6d 61 70 28 65 3d 3e 65 28 29 29 2c 6e 5b 22 73 2d 72 63 22 5d 3d 76 6f 69 64 20 30 29 3b 7b 63 6f 6e 73 74 20 74 3d 6e 5b 22 73 2d 70 22 5d 2c 6f 3d 28 29 3d 3e 6b 28 65 29 3b 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 3f 6f 28 29 3a 28 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 74 29 2e 74 68 65 6e 28 6f 29 2c 65 2e 74 7c 3d 34 2c 74 2e 6c 65 6e 67 74 68 3d 30 29 7d 7d 2c 4d 3d 65 3d 3e 7b 74 72 79 7b 65 3d 65 2e 72 65 6e 64 65 72 28 29 7d 63 61 Data Ascii: l=(e=>e&&e.$===f)(t)?t:a(null,null,t);l.$=null,l.t\|=4,e.M=l,l.h=o.h=n,_(o,l)})(e,M(t)),e.t&=-17,e.t\|=2,o&&(o.map(e=>e()),n["s-rc"]=void 0);{const t=n["s-p"],o=()=>k(e);0===t.length?o():(Promise.all(t).then(o),e.t\|=4,t.length=0)}},M=e=>{try{e=e.render()}ca
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 26 6f 7d 29 7d 2c 65 2e 6f 62 73 65 72 76 65 64 41 74 74 72 69 62 75 74 65 73 3d 6f 2e 66 69 6c 74 65 72 28 28 5b 65 2c 74 5d 29 3d 3e 31 35 26 74 5b 30 5d 29 2e 6d 61 70 28 28 5b 65 2c 6e 5d 29 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 6e 5b 31 5d 7c 7c 65 3b 72 65 74 75 72 6e 20 74 2e 73 65 74 28 6f 2c 65 29 2c 6f 7d 29 7d 7d 72 65 74 75 72 6e 20 65 7d 2c 78 3d 28 65 2c 74 3d 7b 7d 29 3d 3e 7b 63 6f 6e 73 74 20 6f 3d 5b 5d 2c 63 3d 74 2e 65 78 63 6c 75 64 65 7c 7c 5b 5d 2c 72 3d 6e 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2c 69 3d 6c 2e 68 65 61 64 2c 61 3d 69 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6d 65 74 61 5b 63 68 61 72 73 65 74 5d 22 29 2c 75 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 2c 66 3d 5b 5d 3b 6c 65 74 Data Ascii: &o})},e.observedAttributes=o.filter(([e,t])=>15&t[0]).map(([e,n])=>{const o=n[1]\|\|e;return t.set(o,e),o})}}return e},x=(e,t={})=>{const o=[],c=t.exclude\|\|[],r=n.customElements,i=l.head,a=i.querySelector("meta[charset]"),u=l.createElement("style"),f=[];let
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 68 79 64 72 61 74 65 64 7b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 7d 22 2c 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 74 79 6c 65 73 22 2c 22 22 29 2c 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 75 2c 61 3f 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3a 69 2e 66 69 72 73 74 43 68 69 6c 64 29 2c 70 3d 21 31 2c 66 2e 6c 65 6e 67 74 68 3f 66 2e 6d 61 70 28 65 3d 3e 65 2e 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 29 3a 73 2e 6a 6d 70 28 28 29 3d 3e 6d 3d 73 65 74 54 69 6d 65 6f 75 74 28 4c 2c 33 30 29 29 7d 2c 41 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 43 3d 65 3d 3e 41 2e 67 65 74 28 65 29 2c 45 3d 28 65 2c 74 29 3d 3e 41 2e 73 65 74 28 74 2e 6a 3d 65 2c 74 29 2c 46 3d 28 Data Ascii: lity:hidden}.hydrated{visibility:inherit}",u.setAttribute("data-styles",""),i.insertBefore(u,a?a.nextSibling:i.firstChild),p=!1,f.length?f.map(e=>e.connectedCallback()):s.jmp(()=>m=setTimeout(L,30))},A=new WeakMap,C=e=>A.get(e),E=(e,t)=>A.set(t.j=e,t),F=(
2024-04-26 18:32:54 UTC	859	IN	Data Raw: 69 62 75 74 65 28 22 64 61 74 61 2d 73 74 65 6e 63 69 6c 2d 6e 61 6d 65 73 70 61 63 65 22 29 29 2c 74 3d 65 5b 22 64 61 74 61 2d 6f 70 74 73 22 5d 7c 7c 7b 7d 3b 72 65 74 75 72 6e 22 6f 6e 62 65 66 6f 72 65 6c 6f 61 64 22 69 6e 20 65 26 26 21 68 69 73 74 6f 72 79 2e 73 63 72 6f 6c 6c 52 65 73 74 6f 72 61 74 69 6f 6e 3f 7b 74 68 65 6e 28 29 7b 7d 7d 3a 28 74 2e 72 65 73 6f 75 72 63 65 73 55 72 6c 3d 6e 65 77 20 55 52 4c 28 22 2e 22 2c 6e 65 77 20 55 52 4c 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 72 65 73 6f 75 72 63 65 73 2d 75 72 6c 22 29 7c 7c 65 2e 73 72 63 2c 6e 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 2e 68 72 65 66 2c 53 28 74 2e 72 65 73 6f 75 72 63 65 73 55 72 6c 2c 65 29 2c 6e 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e Data Ascii: ibute("data-stencil-namespace")),t=e["data-opts"]\|\|{};return"onbeforeload"in e&&!history.scrollRestoration?{then(){}}:(t.resourcesUrl=new URL(".",new URL(e.getAttribute("data-resources-url")\|\|e.src,n.location.href)).href,S(t.resourcesUrl,e),n.customElemen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50088	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	828	OUT	GET /media/New%20navigation_Rebrand%203.0/Stocks.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:54 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:53 GMT Content-Type: image/svg+xml Content-Length: 1007 Connection: close Last-Modified: Wed, 29 Dec 2021 09:14:37 GMT ETag: "2de2b6150938e51e42ae5b3d7aa395db" Cache-Control: public, max-age=36000 x-amz-version-id: KDtf8KZt8KqaWwJ3IjHpetKCWi8lQAUy X-Cache: Hit from cloudfront Via: 1.1 eb083428a00073810c04a8eb17b6bb24.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: PwDaYmuMHk-i5byPhY0CR6XEJBzLX81ESW6BHmjw__bFl2-14jwJ0Q== Age: 20497 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:53 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8790d31288e-MIA
2024-04-26 18:32:54 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 70 78 22 20 68 65 69 67 68 74 3d 22 33 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 49 63 6f 6e 73 41 73 73 65 74 43 6c 61 73 73 2f 53 74 6f 63 6b 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 76 32 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36px" height="36px" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>IconsAssetClass/Stocks</title> <g id="v2" stroke="none"
2024-04-26 18:32:54 UTC	389	IN	Data Raw: 22 20 78 3d 22 39 2e 33 38 33 33 33 33 33 33 22 20 79 3d 22 31 36 22 20 77 69 64 74 68 3d 22 33 2e 39 31 36 36 36 36 36 37 22 20 68 65 69 67 68 74 3d 22 31 31 2e 37 35 22 20 72 78 3d 22 31 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 2d 43 6f 70 79 2d 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 78 3d 22 31 36 2e 30 34 31 36 36 36 37 22 20 79 3d 22 31 32 2e 31 32 35 22 20 77 69 64 74 68 3d 22 33 2e 39 31 36 36 36 36 36 37 22 20 68 65 69 67 68 74 3d 22 31 33 2e 34 37 32 33 30 36 32 22 20 72 78 3d 22 31 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 2d 43 6f 70 79 2d 31 30 Data Ascii: " x="9.38333333" y="16" width="3.91666667" height="11.75" rx="1"></rect> <rect id="Rectangle-Copy-7" fill="#FFFFFF" x="16.0416667" y="12.125" width="3.91666667" height="13.4723062" rx="1"></rect> <rect id="Rectangle-Copy-10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50090	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	827	OUT	GET /media/New%20navigation_Rebrand%203.0/etf-1.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:54 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:54 GMT Content-Type: image/svg+xml Content-Length: 1383 Connection: close Last-Modified: Mon, 20 Dec 2021 10:02:37 GMT ETag: "22abcbd4023d3936f8bf954ca64c0645" Cache-Control: public, max-age=36000 x-amz-version-id: TXfWyeZsFzQeIDPQ54v1xtQbi5HVD8Rf X-Cache: Hit from cloudfront Via: 1.1 dce51d45ef5ad8611b405be0de5fb2da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: SNq2ukvylTdRPP-WWXppXGbqPaDVqRhAVRr4mUDI-Hz2pxhIpOTiaQ== Age: 20498 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:54 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a87acf978dd6-MIA
2024-04-26 18:32:54 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 70 78 22 20 68 65 69 67 68 74 3d 22 33 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 2f 65 74 66 73 2f 67 6c 6f 62 61 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 61 73 73 65 74 73 2f 65 74 66 73 2f 67 6c 6f 62 61 6c 22 20 73 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36px" height="36px" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>assets/etfs/global</title> <g id="assets/etfs/global" st
2024-04-26 18:32:54 UTC	765	IN	Data Raw: 35 39 35 32 37 36 2c 31 34 2e 36 32 35 20 32 39 2e 34 37 32 39 32 33 33 2c 31 34 2e 36 32 35 20 32 39 2e 32 31 35 31 38 37 31 2c 31 34 2e 36 32 35 20 43 32 37 2e 34 37 32 39 32 33 33 2c 31 34 2e 36 32 35 20 32 34 2e 38 35 39 35 32 37 36 2c 31 34 2e 36 32 35 20 32 31 2e 33 37 35 2c 31 34 2e 36 32 35 20 43 32 31 2e 33 37 35 2c 31 31 2e 31 32 32 39 32 34 38 20 32 31 2e 33 37 35 2c 38 2e 34 39 36 33 36 38 34 31 20 32 31 2e 33 37 35 2c 36 2e 37 34 35 33 33 30 38 31 20 43 32 31 2e 33 37 35 2c 36 2e 34 39 36 33 36 38 34 31 20 32 31 2e 33 37 35 2c 36 2e 31 32 32 39 32 34 38 20 32 31 2e 33 37 35 2c 35 2e 36 32 35 20 5a 22 20 69 64 3d 22 50 61 74 68 22 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 2f Data Ascii: 595276,14.625 29.4729233,14.625 29.2151871,14.625 C27.4729233,14.625 24.8595276,14.625 21.375,14.625 C21.375,11.1229248 21.375,8.49636841 21.375,6.74533081 C21.375,6.49636841 21.375,6.1229248 21.375,5.625 Z" id="Path" fill="#FFFFFF" fill-rule="nonzero"></

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50087	18.239.225.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:53 UTC	656	OUT	GET /adscores/r.pixel?sid=9212270798&puid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:54 UTC	869	IN	HTTP/1.1 302 Found Transfer-Encoding: chunked Connection: close Date: Fri, 26 Apr 2024 18:32:54 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AvrUVPPddecJuOYpnw9f4xj%2FF%2FkDRVGai; Path=/; Domain=.agkn.com; Expires=Sat, 26-Apr-2025 18:32:54 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://static.agkn.com/spacer.gif X-Cache: Miss from cloudfront Via: 1.1 01e55a257e5690c34b2cb5cd713468ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P8 X-Amz-Cf-Id: dauOJEbpDMGFz-US6boBdBfVnU-NzDM9nvXStLk6h9nnd321kBAheA==
2024-04-26 18:32:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50086	3.225.96.121	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:54 UTC	634	OUT	GET /sync/img?req=api5137&cust=269&p1=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: api5137.d41.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:54 UTC	1164	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:54 GMT Content-Type: image/gif; charset=ISO-8859-1 Content-Length: 43 Connection: close access-control-allow-origin: https://t.sharethis.com access-control-allow-credentials: true Cache-Control: no-cache, no-store Pragma: no-cache X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Referrer-Policy: no-referrer-when-downgrade Expect-CT: max-age=30, report-uri="https://a54b4ab95d40a8b116fae47033b75682.report-uri.com/r/d/ct/reportOnly" Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; frame-ancestors 'self'; form-action 'self'; Set-Cookie: D41ID=v3\|v4\|197059634fe141449898fb53dec95bfd\|https://d41.co; path=/; expires=Sat, 26 Apr 2025 18:32:54 GMT; domain=.d41.co; samesite=none; secure Set-Cookie: D41IDT=7e8eb141692d47379bb430dc67014cab; path=/; expires=Fri, 26 Apr 2024 18:32:59 GMT; domain=.d41.co; samesite=none; secure Location: https://id.rlcdn.com/712087.gif?cparams=197059634fe141449898fb53dec95bfd-7e8eb141692d47379bb430dc67014cab-2-269-api5137
2024-04-26 18:32:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50091	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:54 UTC	825	OUT	GET /media/New%20navigation_Rebrand%203.0/BCI.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:54 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:54 GMT Content-Type: image/svg+xml Content-Length: 1731 Connection: close Last-Modified: Wed, 29 Dec 2021 09:33:15 GMT ETag: "af2bdc3d5d19d82d96339842b52193c5" Cache-Control: public, max-age=36000 x-amz-version-id: ifNoMTnJAGsCRtyICtCHz4I2HjCjT0e. X-Cache: Hit from cloudfront Via: 1.1 96ec34ce0a0b54341f66006912ddc5d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: yzEdXDMRppHcNpvaONzoSbG2Z6niwSFLqIX7YLd5AwMCz8R-Ko-1Dg== Age: 20498 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:54 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a87c1d2b2286-MIA
2024-04-26 18:32:54 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 76 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 35 2e 37 39 35 22 20 68 65 69 67 68 74 3d 22 33 35 2e 37 39 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 2e 37 39 35 20 33 35 2e 37 39 35 22 3e 0a 20 20 3c 67 20 69 64 3d 22 42 69 74 70 61 6e 64 61 2d 44 65 73 69 67 6e 2d 53 79 73 74 65 6d 2d 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 33 39 20 2d 37 39 36 32 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 33 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="v2" xmlns="http://www.w3.org/2000/svg" width="35.795" height="35.795" viewBox="0 0 35.795 35.795"> <g id="Bitpanda-Design-System-" transform="translate(-139 -7962)"> <g id="Group-33" transform="transla
2024-04-26 18:32:54 UTC	1113	IN	Data Raw: 36 61 31 32 2e 38 34 39 2c 31 32 2e 38 34 39 2c 30 2c 30 2c 30 2c 2e 31 33 31 2c 31 2e 35 33 32 6c 31 2e 34 38 37 2d 2e 33 33 34 2c 31 30 2e 34 31 37 2d 32 2e 33 33 35 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 38 22 20 64 3d 22 4d 35 2e 37 35 32 2c 32 32 2e 34 36 35 41 31 33 2e 30 31 36 2c 31 33 2e 30 31 36 2c 30 2c 30 2c 31 2c 35 2e 33 2c 32 31 2e 30 30 36 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 31 30 22 20 64 3d 22 4d 39 2e 38 31 37 2c 32 36 2e 30 33 33 61 31 31 2e 34 31 38 2c 31 31 2e 34 31 38 2c 30 2c 30 2c 31 2d 32 2e 35 38 2d 33 2e 39 31 39 6c 38 2e 32 34 35 2d 31 2e 39 34 34 2e 30 32 34 2c 38 2e 39 33 32 61 Data Ascii: 6a12.849,12.849,0,0,0,.131,1.532l1.487-.334,10.417-2.335Z" fill="#fff"/> <path id="Fill-8" d="M5.752,22.465A13.016,13.016,0,0,1,5.3,21.006" fill="#fff"/> <path id="Fill-10" d="M9.817,26.033a11.418,11.418,0,0,1-2.58-3.919l8.245-1.944.024,8.932a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50093	104.21.56.65	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:54 UTC	780	OUT	GET /go/jump.php?id=mtd0013&MTDRef=&MTDSetref=1&MTDts=E&MTDSquery=0&name=0&tags=lp0ai49b7tf5&pl=2 HTTP/1.1 Host: onlinetopchoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://onlinetopchoice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:54 UTC	1081	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:32:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * x-robots-tag: noindex, nofollow location: https://www.plus500.com/MultiPlatformDownload?clt=Web&redirect=aHR0cHM6Ly9hcHAucGx1czUwMC5jb20vdHJhZGU/SXNSZWFsTW9kZT1UcnVlJmhsPWRlJmlkPTEyNzEwOA==&id=127108&tags=lp0ai49b7tf5&pl=2 cache-control: no-cache, no-store, must-revalidate, max-age=0 referrer-policy: origin strict-transport-security: max-age=63072000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kOENCB54ephjq1jzqThs1pJ97ishzTmre2iCxocPgz8d9393dIru%2FmghH8I2EzV6KH6D5lBN1bNwsdvUikmAnzYXgqriQIbxULCGjG784kpOFkZWjQj8LRje0JFoI2VX0%2B%2BwAQfV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a87cede15c75-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50092	104.21.56.65	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:54 UTC	594	OUT	GET /favicon.ico HTTP/1.1 Host: onlinetopchoice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlinetopchoice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:54 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:54 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Wed, 01 May 2024 11:57:19 GMT last-modified: Sun, 04 Apr 2021 14:04:57 GMT vary: Accept-Encoding referrer-policy: origin strict-transport-security: max-age=63072000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 196535 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hkipvolkApcWXmrIUyJSpdsdnmIukAY1IHIbZzxsobSCOSpCOiBDYRU6fbj2uOj0Pbq5P8w%2BZWTblHAxKffSQ%2Bv6sUa%2FDUpF7HjCYVLPaa3XWscUwlRqcaeKWWjdOvdWifYilTG4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a87cefe6d9a5-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:54 UTC	466	IN	Data Raw: 33 63 32 65 0d 0a 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 bf bf bf 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 c8 c8 0e cb cb cb 4f cb cb cb 63 c9 c9 c9 55 ce ce ce 68 cb cb cb 4a aa aa aa 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 3c2e h6 (00 h&( OcUhJ
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf bf bf 10 cd cd cd 52 ce ce ce 62 cc cc cc 4b c8 c8 cc 46 6c 6c ca a3 a4 a4 cc f3 cf cf cf 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c9 c9 c9 21 cc cc cc b5 cb cb cb 63 d8 d8 d8 0d cc cc cc 0a c5 c5 cc 46 88 88 cc de a0 a0 cc e2 cc cc cc 83 aa aa aa 03 00 00 00 00 00 00 00 00 00 00 00 00 d0 d0 d0 26 c8 c8 c8 0e bf bf bf 04 cb cb cb 97 cb cb cb 9d aa aa aa 06 00 00 00 00 00 00 00 00 92 92 b6 07 72 72 ca ae 91 91 cc a4 cc cc cc a0 cf cf cf 45 df df df 08 bf bf bf 04 cc cc cc 14 cc cc cc 9b c9 c9 c9 13 d1 d1 d1 16 cc cc cc df cc cc cc 50 00 00 00 00 00 00 ff 01 00 00 00 00 40 40 bf 04 68 68 ca 9b 9c 9c cc cc ca ca ca 18 c9 c9 c9 47 cb Data Ascii: RbKFll;!cF&rrEP@@hhG
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 16 cf cf cf 10 c3 c3 c3 11 ce ce ce 1f cb cb cb 59 cb cb cb c1 cd cd cd ae d0 d0 d0 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d1 d1 d1 0b cd cd cd 57 cb cb cb d4 cc cc cc da cd cd cd 6c d4 d4 d4 18 80 80 80 02 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 c8 c8 c8 0e cb cb cb 4f cd cd cd bb ce ce ce 39 cc cc cc 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 03 ca ca ca 30 cc cc cc c7 cc cc cc e9 ca ca ca 82 cc cc cc 19 ff ff ff 01 00 00 00 00 00 00 Data Ascii: YWlO90
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: a5 a5 cc c7 6f 6f cc f4 7a 7a cc d6 c1 c1 cc db cc cc cc dd cd cd cd 57 b9 b9 b9 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc cc cc 14 cc cc cc 74 c9 c9 c9 2f ff ff ff 04 00 00 00 00 aa aa aa 03 cf cf cf 30 cc cc cc c8 cc cc cc ea cc cc cc 7d cc cc cc 14 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a1 a1 c9 13 94 94 cb 8a 6c 6c cc ee 7d 7d cb d9 b6 b6 cb 70 cd cd cd c5 cc cc cc b8 cf cf cf 35 db db db 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 d4 d4 06 ce ce ce 39 cc cc cc b4 c8 c8 c8 2a 80 80 80 02 00 00 00 00 cc cc cc 0f cc cc cc 78 cb cb cb eb cc cc cc da cd cd cd 33 aa aa aa 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 71 71 c6 Data Ascii: oozzWt/0}ll}}p59*x3qq
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: ca ca cc cd cd cd 84 ce ce ce 1a ff ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c4 c4 c4 0d cd cd cd 51 cc cc cc d6 cc cc cc d8 cb cb cb 58 e3 e3 e3 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 ce ce ce 15 cc cc cc 6d cb cb cb bb ce ce ce 68 ce ce ce 1f c4 c4 c4 0d c6 c6 c6 09 c4 c4 c4 0d ca ca ca 18 cc cc cc 50 cb cb cb bc cc cc cc c7 cc cc cc 6d d7 d7 d7 13 ff ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 Data Ascii: QXmhPm
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc cc cc 05 cc cc cc 0a b1 b1 b1 0d c4 c4 c4 0d d1 d1 d1 0b cc cc cc 05 ff ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 00 00 00 00 00 ff ff ff 01 bf bf bf 0c cb cb cb 2c cb cb cb 88 cc cc cc b5 cd cd cd 52 d3 d3 d3 17 ff ff ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 03 ce ce ce 15 cc cc cc 6e cc cc cc ce cc cc cc ef cb cb cb ca cc cc cc 7e cc cc cc 2d b3 b3 b3 0a ff ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 c8 c8 c8 0e cb cb cb 4f cd cd cd 84 cd cd cd 65 cd cd cd 2e bf bf bf 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ,Rn~-Oe.
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 62 c4 0d 63 63 c7 3b 65 65 ca 9f 6b 6b cb f7 80 80 cc ff a7 a7 cc ff c7 c7 cc d7 c7 c7 c7 65 bf bf bf 20 aa aa aa 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 d4 d4 d4 Data Ascii: bbcc;eekke
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: b6 b6 07 ca ca ca 3a cb cb cb 88 cc cc cc db cc cc cc ec cc cc cc be ce ce ce 53 ce ce ce 1a cc cc cc 05 ff ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 80 80 02 d1 d1 d1 0b ba ba cf 3b ac ac cb ad 87 87 cc e9 6a 6a cd f3 72 72 cc d9 9e 9e cc cc c8 c8 cc d2 cc cc cc e8 cb cb cb ac cd cd cd 51 c5 c5 c5 16 ff ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c6 c6 c6 09 cd cd cd 56 cc cc cc 87 cb cb cb 40 c9 c9 c9 13 80 80 80 02 00 00 00 00 00 00 00 00 ff ff ff 03 ce ce ce 15 cd cd cd 70 cc cc cc d0 cb cb cb f0 cc cc cc c7 cc cc cc 78 c9 c9 c9 26 cc cc cc 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: :S;jjrrQV@px&
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 55 55 aa 03 5d 5d e8 0b 5d 5d d1 16 64 64 d3 17 55 55 d4 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 62 c4 0d 63 63 c7 3b 65 65 ca 9f 6b 6b cb f7 81 81 cd fe a7 a7 cc f9 c9 c9 cd c1 cc cc cc 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 01 6a 6a bf 0c 72 72 d0 26 80 80 c7 20 c3 c3 c3 11 d3 d3 d3 17 c6 c6 c6 1b c4 c4 c4 1a d3 d3 d3 17 d5 d5 d5 12 d4 d4 d4 0c db db db 07 aa aa aa 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa aa aa 03 c9 c9 c9 21 cb cb cb 67 cc cc cc d7 cc cc cc ff cc cc cc d7 cb cb cb 67 c9 c9 c9 21 aa aa aa 03 00 00 00 00 00 00 00 00 6d 6d db 07 64 64 d1 21 67 67 ce 43 65 65 cb 49 59 59 cc 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 62 c4 0d 63 63 c7 3b 65 65 ca 9f 6b 6b cb f7 80 80 cc ff a7 Data Ascii: UU]]]]ddUUbbcc;eekk2jjrr& !gg!mmdd!ggCeeIYYbbcc;eekk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50094	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:54 UTC	830	OUT	GET /media/New%20navigation_Rebrand%203.0/metals-1.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:54 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:54 GMT Content-Type: image/svg+xml Content-Length: 875 Connection: close Last-Modified: Wed, 29 Dec 2021 09:33:15 GMT ETag: "8e997b7e5b9cd25f29f1a81ee8fd285c" Cache-Control: public, max-age=36000 x-amz-version-id: jupUmD15ehY6.s3a99r6.rNNOjl53rY0 X-Cache: Hit from cloudfront Via: 1.1 8a771ca27e5a3c9e06b12b7af5d25aa4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Kur3cV4YKxt4uRqp5zF9lSXkHWypYlUxoEfjVCFvdfmhxCiUJFuFFg== Age: 20498 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:54 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a87cf8addaa9-MIA
2024-04-26 18:32:54 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 76 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 42 69 74 70 61 6e 64 61 2d 44 65 73 69 67 6e 2d 53 79 73 74 65 6d 2d 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 33 39 20 2d 37 39 30 36 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 53 68 61 70 65 2d 67 6f 6c 64 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 33 39 20 37 39 30 36 29 22 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="v2" xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Bitpanda-Design-System-" transform="translate(-139 -7906)"> <g id="Shape-gold" transform="translate(139 7906)">
2024-04-26 18:32:54 UTC	256	IN	Data Raw: 31 2e 36 38 37 2d 34 2e 35 41 31 2e 31 32 35 2c 31 2e 31 32 35 2c 30 2c 30 2c 30 2c 32 37 2e 35 36 33 2c 31 38 5a 6d 2d 36 2e 37 35 2d 39 48 31 35 2e 31 38 38 61 31 2e 31 32 35 2c 31 2e 31 32 35 2c 30 2c 30 2c 30 2d 31 2e 30 35 33 2e 37 33 68 30 6c 2d 31 2e 36 38 37 2c 34 2e 35 41 31 2e 31 32 35 2c 31 2e 31 32 35 2c 30 2c 30 2c 30 2c 31 33 2e 35 2c 31 35 2e 37 35 68 39 61 31 2e 31 32 35 2c 31 2e 31 32 35 2c 30 2c 30 2c 30 2c 31 2e 30 35 33 2d 31 2e 35 32 68 30 6c 2d 31 2e 36 38 37 2d 34 2e 35 41 31 2e 31 32 35 2c 31 2e 31 32 35 2c 30 2c 30 2c 30 2c 32 30 2e 38 31 33 2c 39 5a 22 20 66 69 6c 6c 3d 22 23 62 36 38 65 34 36 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e Data Ascii: 1.687-4.5A1.125,1.125,0,0,0,27.563,18Zm-6.75-9H15.188a1.125,1.125,0,0,0-1.053.73h0l-1.687,4.5A1.125,1.125,0,0,0,13.5,15.75h9a1.125,1.125,0,0,0,1.053-1.52h0l-1.687-4.5A1.125,1.125,0,0,0,20.813,9Z" fill="#b68e46" fill-rule="evenodd"/> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50096	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:54 UTC	831	OUT	GET /media/New%20navigation_Rebrand%203.0/corn%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:54 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:54 GMT Content-Type: image/png Content-Length: 1283 Connection: close Age: 19237 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=2616 ETag: "d3c910513c2e02a766ef2fbc4e6e4aa5" Last-Modified: Tue, 30 Aug 2022 08:01:16 GMT Via: 1.1 ef3100c3f2434fd3889627d60775da30.cloudfront.net (CloudFront) X-Amz-Cf-Id: hVx-vpyVs7YZaCOIXjVWN3ZNfolRHPgIqbN_GYuQ5KYCrVDuQt_vWA== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: lDYz5oHjmBwefPWyrFklMmL3QF_sb9uC CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:54 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a87d2c266db5-MIA
2024-04-26 18:32:54 UTC	570	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 f6 50 4c 54 45 00 00 00 ff df 40 ef df 40 f7 df 40 f7 d7 40 fa da 45 fa da 40 f4 da 40 fa d5 45 f7 db 44 f9 d9 43 f5 d9 46 f5 d9 43 f7 da 42 f8 dd 43 f8 db 42 f6 db 42 f6 d8 44 f9 db 44 f7 db 44 f7 d9 44 f8 db 44 f6 da 44 f8 da 43 f6 da 45 f6 da 43 f8 db 44 f6 d9 44 f6 d9 43 f8 da 44 f7 da 44 f8 da 45 f8 da 44 f6 db 44 f6 da 44 f7 da 45 f7 da 43 f7 d9 45 f8 da 44 f6 da 44 ff ff ff ff fd f3 fe fd f4 fe fb e8 fe fa e8 fe f8 dd fe f8 dc fd f6 d0 fd f4 c4 fc f4 c5 fc f2 b9 fc f1 b9 fc f1 b8 fc ef ad fb ef ad fc ee ae fc ee ad fb ed a2 fb ed a1 fb ec a2 fb ec a1 fb eb Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTE@@@@E@@EDCFCBCBBDDDDDDCECDDCDDEDDDECEDD
2024-04-26 18:32:54 UTC	713	IN	Data Raw: 4c 75 89 65 31 7f 7f 74 42 15 bf ad c9 6d d5 79 78 5a 6c 9e 95 c9 7d c3 75 7a f5 1b 96 45 bf 00 fc e3 29 25 0b 9c d1 25 71 75 57 5a b5 01 ed d3 4f c2 a3 de 2d 64 44 8c 69 22 f4 6a 2b c4 e8 1e 20 4a 3c 84 60 c4 9f d2 98 8b cc 21 6d da 27 47 b4 48 8a 72 a4 c3 14 98 c7 23 2e ff 66 d9 94 1d d8 88 a5 82 67 34 46 26 ea 94 81 23 3e 55 19 c8 52 db 9b 45 a5 e8 33 65 a2 5a 1c 36 03 66 94 9e 42 a3 e5 cc 6c 5f 89 f2 b3 05 d2 b2 f1 e2 69 06 3d 37 57 66 05 53 22 95 a4 24 05 86 a2 fe c6 dc 1c a5 56 22 a1 3a 96 cf 09 c0 54 07 0d 7d eb 38 7a 2f 00 2e a4 55 0c 77 8e 9f 7c a4 b8 b8 28 50 e1 3e e9 3a 03 52 79 4c 52 20 df 8f 52 64 94 4d b9 e6 28 da 2b b4 22 f5 dd 01 c5 4a c9 32 55 aa 91 d4 f0 cf 55 d1 b6 ad d6 65 9f 0e 01 b5 ac 47 e0 cc e5 b9 24 93 ac f0 8a bc 73 06 44 4f d5 Data Ascii: Lue1tBmyxZl}uzE)%%quWZO-dDi"j+ J<`!m'GHr#.fg4F&#>URE3eZ6fBl_i=7WfS"$V":T}8z/.Uw\|(P>:RyLR RdM(+"J2UUeG$sDO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50095	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:54 UTC	851	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/leveraged_token-menu.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:54 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:54 GMT Content-Type: image/svg+xml Content-Length: 4072 Connection: close Last-Modified: Tue, 11 Apr 2023 16:29:34 GMT ETag: "1ff45187322fe8a144d1cab5f34602cc" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: 8RxqRsFo7wFfGYO7GBjtL6LCyrnYj7SD X-Cache: Hit from cloudfront Via: 1.1 4c3d8e28c41258b22a9e9534d51ead58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Wts0UbPbB_RAAwJxivEMtcfO92oUx1cYN9XY_ustUFH2OnU9n_49ug== Age: 19946 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:54 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a87d3e367444-MIA
2024-04-26 18:32:54 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 65 6c 6c 69 70 73 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 37 2e 39 39 39 38 22 20 72 78 3d 22 31 38 22 20 72 79 3d 22 31 37 2e 35 31 33 35 22 20 66 69 6c 6c 3d 22 23 37 39 32 31 45 41 22 2f 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 30 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg"><ellipse cx="18" cy="17.9998" rx="18" ry="17.5135" fill="#7921EA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M10
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 2e 34 33 35 36 20 32 32 2e 38 38 37 35 20 32 34 2e 30 33 32 38 20 32 32 2e 34 38 36 39 20 32 34 2e 34 32 39 33 20 32 32 2e 30 36 37 31 43 32 34 2e 38 32 33 33 20 32 31 2e 36 35 20 32 35 20 32 31 2e 32 33 37 20 32 35 20 32 30 2e 38 34 32 31 43 32 35 20 32 30 2e 35 36 35 39 20 32 35 2e 32 32 33 39 20 32 30 2e 33 34 32 31 20 32 35 2e 35 20 32 30 2e 33 34 32 31 43 32 35 2e 37 37 36 31 20 32 30 2e 33 34 32 31 20 32 36 20 32 30 2e 35 36 35 39 20 32 36 20 32 30 2e 38 34 32 31 43 32 36 20 32 30 2e 39 34 36 35 20 32 35 2e 39 39 33 31 20 32 31 2e 30 34 39 35 20 32 35 2e 39 37 39 36 20 32 31 2e 31 35 30 38 43 32 35 2e 39 39 32 39 20 32 31 2e 31 39 35 38 20 32 36 20 32 31 2e 32 34 33 33 20 32 36 20 32 31 2e 32 39 32 35 56 32 35 2e 32 39 32 35 43 32 36 20 32 35 2e 39 Data Ascii: .4356 22.8875 24.0328 22.4869 24.4293 22.0671C24.8233 21.65 25 21.237 25 20.8421C25 20.5659 25.2239 20.3421 25.5 20.3421C25.7761 20.3421 26 20.5659 26 20.8421C26 20.9465 25.9931 21.0495 25.9796 21.1508C25.9929 21.1958 26 21.2433 26 21.2925V25.2925C26 25.9
2024-04-26 18:32:54 UTC	1369	IN	Data Raw: 32 2e 37 31 37 38 20 31 30 2e 37 36 30 33 43 31 31 2e 35 33 32 34 20 31 31 2e 34 32 32 33 20 31 31 20 31 32 2e 31 36 37 35 20 31 31 20 31 32 2e 38 34 32 31 43 31 31 20 31 33 2e 32 33 37 31 20 31 31 2e 31 37 36 37 20 31 33 2e 36 35 30 31 20 31 31 2e 35 37 30 37 20 31 34 2e 30 36 37 32 43 31 31 2e 39 36 37 32 20 31 34 2e 34 38 36 39 20 31 32 2e 35 36 34 34 20 31 34 2e 38 38 37 36 20 31 33 2e 33 34 30 34 20 31 35 2e 32 33 35 43 31 34 2e 38 39 31 20 31 35 2e 39 32 39 33 20 31 37 2e 30 36 38 34 20 31 36 2e 33 37 31 35 20 31 39 2e 35 20 31 36 2e 33 37 31 35 43 32 31 2e 39 33 31 36 20 31 36 2e 33 37 31 35 20 32 34 2e 31 30 39 20 31 35 2e 39 32 39 33 20 32 35 2e 36 35 39 36 20 31 35 2e 32 33 35 43 32 36 2e 34 33 35 36 20 31 34 2e 38 38 37 36 20 32 37 2e 30 33 32 Data Ascii: 2.7178 10.7603C11.5324 11.4223 11 12.1675 11 12.8421C11 13.2371 11.1767 13.6501 11.5707 14.0672C11.9672 14.4869 12.5644 14.8876 13.3404 15.235C14.891 15.9293 17.0684 16.3715 19.5 16.3715C21.9316 16.3715 24.109 15.9293 25.6596 15.235C26.4356 14.8876 27.032
2024-04-26 18:32:54 UTC	754	IN	Data Raw: 2e 36 33 38 34 20 31 36 2e 39 31 31 38 20 31 32 2e 39 33 31 37 20 31 36 2e 31 34 37 37 43 31 32 2e 31 36 32 31 20 31 35 2e 38 30 33 31 20 31 31 2e 34 39 39 39 20 31 35 2e 33 38 38 37 20 31 31 20 31 34 2e 39 31 30 39 56 31 37 2e 32 39 32 36 5a 22 20 66 69 6c 6c 3d 22 23 42 43 39 30 46 35 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 32 35 36 31 20 31 32 2e 36 34 32 36 48 32 31 2e 35 37 36 37 56 31 31 2e 36 33 34 48 31 38 2e 39 33 37 56 31 31 2e 35 33 38 36 4c 32 30 2e 30 34 35 32 20 31 30 2e 35 30 35 31 43 32 31 2e 31 33 36 37 20 39 2e 34 39 36 35 38 20 32 31 2e 34 38 39 35 20 38 2e 39 33 32 31 33 20 32 31 2e 34 38 39 35 20 38 2e 32 35 31 34 36 56 38 2e 32 33 39 30 31 43 32 31 2e 34 38 39 35 20 37 2e 32 30 35 35 37 20 32 30 2e 36 32 36 32 20 36 2e 35 Data Ascii: .6384 16.9118 12.9317 16.1477C12.1621 15.8031 11.4999 15.3887 11 14.9109V17.2926Z" fill="#BC90F5"/><path d="M17.2561 12.6426H21.5767V11.634H18.937V11.5386L20.0452 10.5051C21.1367 9.49658 21.4895 8.93213 21.4895 8.25146V8.23901C21.4895 7.20557 20.6262 6.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50100	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:55 UTC	637	OUT	GET /media/your-investment-your-assets-why-your-money-is-safe-with-bitpanda-bitpanda-blog-de.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:55 UTC	803	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:55 GMT Content-Type: image/png Content-Length: 137477 Connection: close Age: 24306 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=232028 ETag: "92864f1d91b2141d958267f64bcbd483" Last-Modified: Mon, 16 May 2022 15:47:43 GMT Via: 1.1 b3fa6483b226ef7cc87d8bab653f621c.cloudfront.net (CloudFront) X-Amz-Cf-Id: sj6rMUc3SvdnRFYAyDnNrMkK_yG04y5ts3CcoV8Z4EqBShKY-r7E9g== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: TjpSOTUN.JjLReFlZF2ux4fPR.YBaqvT CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:55 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8840930b3b6-MIA
2024-04-26 18:32:55 UTC	566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 04 b0 08 02 00 00 00 2c 46 46 e9 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 02 18 bf 49 44 41 54 78 da ec d8 31 0d 00 20 10 c0 40 dc f0 fe 15 22 82 05 9a 4b 4e 40 e7 ae d9 03 00 00 00 00 00 5c 5a 6f 66 01 00 00 00 00 c0 5f 0c 77 00 00 00 00 00 30 dc 01 00 00 00 00 c0 70 07 00 00 00 00 80 0c c3 1d 00 00 00 00 00 0c 77 00 00 00 00 00 30 dc 01 00 00 00 00 20 c3 70 07 00 00 00 00 00 c3 1d 00 00 00 00 00 0c 77 00 00 00 00 00 c8 30 dc 01 00 00 00 00 c0 70 07 00 00 00 00 00 c3 1d 00 00 00 00 00 32 0c 77 00 00 00 00 00 30 dc 01 00 00 00 00 c0 70 07 00 00 00 00 80 0c c3 1d 00 00 00 00 00 0c 77 00 00 00 00 00 30 dc 01 00 00 00 00 20 c3 70 07 00 00 00 00 00 c3 1d 00 00 00 00 00 0c 77 00 00 00 00 00 c8 Data Ascii: PNGIHDR,FFsRGBIDATx1 @"KN@\Zof_w0pw0 pw0p2w0pw0 pw
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 00 00 00 82 21 b8 03 00 00 00 00 80 e0 0e 00 00 00 00 00 82 3b 00 00 00 00 00 04 43 70 07 00 00 00 00 00 c1 1d 00 00 00 00 00 04 77 00 00 00 00 00 08 86 e0 0e 00 00 00 00 00 82 3b 00 00 00 00 00 08 ee 00 00 00 00 00 10 0c c1 1d 00 00 00 00 00 04 77 00 00 00 00 00 10 dc 01 00 00 00 00 20 18 82 3b 00 00 00 00 00 08 ee 00 00 00 00 00 20 b8 03 00 00 00 00 40 30 04 77 00 00 00 00 00 10 dc 01 00 00 00 00 40 70 07 00 00 00 00 80 60 08 ee 00 00 00 00 00 20 b8 03 00 00 00 00 80 e0 0e 00 00 00 00 00 c1 10 dc 01 00 00 00 00 40 70 07 00 00 00 00 00 c1 1d 00 00 00 00 00 82 21 b8 03 00 00 00 00 80 e0 0e 00 00 00 00 00 82 3b 00 00 00 00 00 04 43 70 07 00 00 00 00 00 c1 1d 00 00 00 00 00 04 77 00 00 00 00 00 08 86 e0 0e 00 00 00 00 00 82 3b 00 00 00 00 00 08 ee 00 00 00 Data Ascii: !;Cpw;w ; @0w@p` @p!;Cpw;
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 00 80 0b fd bc 3d 74 61 a8 10 22 25 25 a5 a9 a9 c9 6c 36 4b 4f d0 80 69 a0 b3 b3 53 ad 56 9f 3d 7b 76 db b6 6d 62 ac e8 e8 e8 8c 8c 8c 82 82 02 85 42 51 57 57 37 3c 3c 2c 3d 59 43 43 43 57 af 5e dd b4 71 93 10 62 f6 ac d9 ae 79 b6 13 14 83 3b 00 00 00 00 00 00 00 3c 32 c7 54 bd 28 74 51 71 71 f1 fa f5 eb 85 9c 42 a1 d0 e9 74 8f 74 75 fb e8 e8 a8 c9 64 32 18 0c dd dd dd 5f 7f f5 f5 07 ef 7f 20 e4 dc 5e 76 8b 8d 8d dd b0 61 c3 9e ec 3d 55 55 55 1a 8d 46 72 76 0d 0d 0d f1 1f c6 7b b8 7b b8 e6 f1 4e 50 0c ee 00 00 00 00 00 00 00 f0 c8 66 cd 9c b5 22 66 85 24 49 f5 f5 f5 1b 93 37 ce 7f 73 be 10 22 3d 2d bd a7 a7 e7 47 37 77 9b cd 36 32 32 62 32 99 6a 6b 6b 77 ef de fd 9f 9d 3d c0 3f 20 3a 2a fa e3 b5 1f ef dd bb f7 cc 99 33 cd cd cd d2 d3 ec 7a ed f5 98 77 63 Data Ascii: =ta"%%l6KOiSV={vmbBQWW7<<,=YCCCW^qby;<2T(tQqqBttud2_ ^va=UUUFrv{{NPf"f$I7s"=-G7w622b2jkkw=? :*3zwc
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 04 f4 b8 f2 67 94 12 87 5c a4 4d 61 e4 61 4d cc 34 4d 35 32 36 64 c7 e4 ad 62 33 a5 20 bf 06 b4 6d 24 c4 5d 74 76 55 44 59 d8 ef 7d 66 1d 1c ef ce 5d 2d 29 be 5f 79 be e6 31 ce 34 b6 f2 e5 fb e7 73 3e f3 d9 a9 e6 c9 e6 cb 3f eb c6 83 7b 45 45 45 e2 7d 89 96 58 8b fa ce 55 7f 0f f0 e6 9b 6f 12 dc 09 ee 00 00 00 00 00 00 00 60 bc e0 ee f1 78 5a 5a 5a 4a 4b 4b 73 56 e5 2c 59 b2 24 e5 a1 94 e9 d3 a6 9b a2 4c ea 5f f6 77 aa 3d 70 70 6f 6a 6c d2 fc 6c e7 ce 9d 16 8b 25 6e 66 5c 80 e0 ae 4e c1 13 dc 09 ee 00 00 00 00 00 00 00 60 bc e0 ae 3e 9b f5 4c 56 62 62 62 54 64 d4 a5 db 63 ae fc 2a d4 c1 0d ee 1f 94 7f 10 1f 17 7f 9f e5 3e 82 3b c1 1d 00 00 00 00 00 00 00 6e b6 e0 de d5 d5 15 3b 23 36 68 74 50 80 ce 7e fd c1 7d 71 fa e2 96 e6 96 00 c1 3d 2e 36 2e 31 21 91 Data Ascii: g\MaaM4M526db3 m$]tvUDY}f]-)_y14s>?{EEE}XUo`xZZZJKKsV,Y$L_w=ppojll%nf\N`>LVbbbTdc*>;n;#6htP~}q=.6.1!
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 00 00 00 00 00 0c 8b e0 ee 72 b9 6c 36 db 47 1f 7d 54 54 54 f4 dc b3 cf cd 9e 35 5b 7c 8b 9c 10 b9 69 d3 a6 9a 9a 9a a3 47 8f aa 1f e1 76 b9 b5 9f b3 7d ff de 37 7a d4 68 11 89 31 c7 e8 f3 0d 1b 11 c1 1d 00 00 00 00 00 00 00 86 2c b8 4f fd fd d4 2d 9b b7 68 ff bd be be be 9f 7e fa e9 f0 e1 c3 5f 7f fd f5 f6 ed db 33 32 32 64 60 71 33 e3 56 bd bc ea d3 4f 3f ad ab ab 3b 7e fc 78 6f 6f af f6 8b a6 ce c2 57 57 57 67 65 65 89 88 ba f9 5d 9f 2f d9 70 08 ee 00 00 00 00 00 00 00 30 64 c1 7d c6 f4 19 25 25 25 da c0 3a 3b 3b 1b 8e 34 ec d9 b3 a7 b8 b8 78 c5 8a 15 32 b0 d4 d4 d4 37 de 78 e3 b3 cf 3e db b7 6f 5f 53 53 93 ef de 98 1b 9d ca fa cd cd cd 9b 37 6f 16 11 53 94 c9 3c d9 ac cf 57 6d 20 04 77 00 00 00 00 00 00 00 18 b2 e0 1e 3b 33 56 b5 75 a7 d3 d9 da da 7a Data Ascii: rl6G}TTT5[\|iGv}7zh1,O-h~_322d`q3VO?;~xooWWWgee]/p0d}%%%:;;4x27x>o_SS7oS<Wm w;3Vuz
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 9e 9e 9e 10 42 f7 a1 6e c1 5d 70 07 00 00 00 00 98 27 c1 7d 7c 7c 7c cb 67 5b ea eb ea 73 0d b9 94 af c7 cc 2a b8 6f fa 74 60 60 40 70 17 dc 01 00 00 00 00 aa c3 9c 04 f7 8d 9f 6c 6c 6a 6c 4a 79 c5 ec 6f b8 0f 0d 0e cd 18 dc 47 47 46 05 77 c1 1d 00 00 00 00 60 3e 04 f7 27 4f 9e ec 68 db d1 98 6b 9c db 53 6d de bc 79 ac 3c 16 9f ef 86 bb e0 0e 00 00 00 00 50 05 e6 24 b8 b7 7d d5 d6 94 9b e3 1b ee f1 99 2f 5f be 4c 52 a6 54 2a 85 10 8a 5d c5 e1 e1 e1 b4 e0 de d5 d5 55 bb 58 70 17 dc 01 00 00 00 00 fe af c1 3d d6 f6 b5 1f ad 3d 7e fc 78 12 a7 e2 0d f7 c3 87 0f 8f 8e 8e 56 08 ee 4b 16 2f c9 e6 da 33 4e 70 07 00 00 00 00 98 0f c1 3d bf 32 1f 8f 34 30 30 90 a4 cf f9 f3 e7 43 08 a7 7e 3e 55 2e 97 d3 82 7b 67 67 67 dd 92 ba 6c ae 3d e3 04 77 00 00 00 00 80 aa 0f Data Ascii: Bn]p'}\|\|\|g[sot``@plljlJyoGGFw`>'OhkSmy<P$}/_LRT]UXp==~xVK/3Np=2400C~>U.{gggl=w
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: fb 9e 3d 7b 94 7b 86 0e 19 9a 9e 96 fe 85 e1 8b c7 ae 91 32 ae e1 7d 76 79 94 e4 f2 7d 7b f7 6d de bc 39 e6 0f 31 cf 53 fb f4 29 d3 65 53 7c 5b 5b db b7 fe ae fc bc 77 ef 5e 54 54 94 c7 00 0f 7d 1e 75 1f 42 70 07 00 00 00 00 00 00 00 ed 83 7b 76 76 f6 ec d9 b3 d3 b7 a5 97 95 95 19 8d c6 96 07 2d b2 27 dd a9 dd c8 03 2f 5c b8 70 e2 c4 89 dc dc dc f7 ff fc 7e c0 b8 00 e5 9a d8 d8 d8 82 82 82 fa fa 7a bb dd ee 7c 89 91 28 9f 95 95 a5 94 0a 18 1f a0 cf a3 ee 43 08 ee 00 00 00 00 00 00 00 a0 71 70 b7 d9 6c 12 d9 6b 6a 6a be 6a fe ca 62 b1 68 78 99 bd a5 a5 a5 b2 b2 f2 f4 a9 d3 3b 33 77 46 47 47 0f 78 65 80 72 cd b4 29 d3 b6 a7 6f 2f 2d 2d ad ad ad 75 ad 91 79 a9 31 9b cd 45 45 45 03 07 0c 1c 35 72 94 3e cf b9 6f 21 b8 03 00 00 00 00 00 00 80 f6 c1 dd a9 dd f4 Data Ascii: ={{2}vy}{m91S)eS\|[[w^TT}uBp{vv-'/\p~z\|(Cqplkjjjbhx;3wFGGxer)o/--uy1EEE5r>o!
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 4a 4a ca d2 3f 2e 0d 0f 0b 9f 3c 69 b2 94 7d 7d 1e 02 08 ee 00 00 00 00 00 00 00 30 fe 7f ec dd 31 4b 5b 51 00 86 e1 33 97 da 08 2d a9 a8 95 26 31 2d 66 a9 95 4a 11 ea 56 37 17 87 5a a7 ba c7 45 2a b8 37 93 38 55 90 3a 3b 45 04 97 ba 28 62 1d 84 40 86 0c 21 43 25 5b b6 64 c8 14 32 24 4b 0a 16 a1 53 29 4d 68 93 f0 7c 3c 3f e0 de f5 e5 70 4e f7 66 5f cc ee ec ec f4 ea ae f6 7a bd 9e cf e7 0f be 1c 6c a4 37 96 97 97 e7 5f cd ff 3c 47 ef 1d d4 81 20 b8 03 00 00 00 00 74 f5 7a ea dc cb b9 cd cd cd ab 6f 57 9d bf 5d ad 56 3b 3f 3f df fb bc b7 bd bd bd fe 61 7d f1 cd e2 e4 f8 e4 d4 93 a9 e4 74 d2 ed 31 03 44 70 07 00 00 00 00 e8 4a 22 9e 08 21 ac bd 5f 3b ca 1e b5 5a ad ce 1f af 54 2a 9d 9d 9d 65 b3 d9 4c 26 b3 fa 6e 35 fa 30 1a 42 88 8c 44 62 4f 63 3a fb 20 12 Data Ascii: JJ?.<i}}01K[Q3-&1-fJV7ZE78U:;E(b@!C%[d2$KS)Mh\|<?pNf_zl7_<G tzoW]V;??a}t1DpJ"!_;ZTeL&n50BDbOc:
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 00 36 84 3b 00 00 00 00 00 08 77 00 00 00 00 00 10 ee 00 00 00 00 00 b0 21 dc 01 00 00 00 00 40 b8 03 00 00 00 00 80 70 07 00 00 00 00 80 0d e1 0e 00 00 00 00 00 c2 1d 00 00 00 00 00 84 3b 00 00 00 00 00 6c 08 77 00 00 00 00 00 10 ee 00 00 00 00 00 20 dc 01 00 00 00 00 60 43 b8 03 00 00 00 00 80 70 07 00 00 00 00 00 e1 0e 00 00 00 00 00 1b c2 1d 00 00 00 00 00 84 3b 00 00 00 00 00 08 77 00 00 00 00 00 d8 10 ee 00 00 00 00 00 20 dc 01 00 00 00 00 40 b8 03 00 00 00 00 c0 86 70 07 00 00 00 00 00 e1 0e 00 00 00 00 00 c2 1d 00 00 00 00 00 36 84 3b 00 00 00 00 00 08 77 00 00 00 00 00 10 ee 00 00 00 00 00 b0 21 dc 01 00 00 00 00 40 b8 03 00 00 00 00 80 70 07 00 00 00 00 80 0d e1 0e 00 00 00 00 00 c2 1d 00 00 00 00 00 84 3b 00 00 00 00 00 6c 08 77 00 00 00 00 00 Data Ascii: 6;w!@p;lw `Cp;w @p6;w!@p;lw
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: b4 28 3f 3f ff 37 8d 50 4a 1d 3c 78 50 44 4a 72 3a 1b 07 e8 50 41 1d 3a 74 48 29 55 f4 cb 41 a7 83 28 5f c2 0b 44 33 42 f8 cc 70 fd 0b 3c 79 f2 64 50 ff 20 34 09 3a e6 5b 46 88 83 20 22 9f 7d f6 99 d1 4f 5a 74 a0 26 19 1b 36 d6 11 04 77 28 32 50 db c3 c3 c3 af 5f bf fe e0 c1 03 54 3b ea cf c0 5f f0 cf 7b f7 ee ad 5f bf 1e cd 4a 85 9d f0 45 b9 25 22 ef 07 bf 8f 72 0b cf c2 53 6c 9f 8e 45 e6 f8 f1 e3 90 6c d8 49 44 fe 42 44 64 e5 ca 95 4a 2f a6 4d 9b 56 a1 5c 05 c7 bc 10 7d a9 14 db 06 f8 e5 55 45 c6 f5 9f af 2f 8c 5a 28 22 dc 4d 77 16 44 24 2a 2a 0a 6b 75 b1 f9 1b 56 e0 0b 17 2e 88 88 7d 4d 27 22 32 63 c6 8c 8c 8c 0c 23 29 d5 09 7c 4b 58 f3 57 ad 5a 05 cd bd 41 bd 06 8e f9 03 24 84 3c 2e cf f4 ea d5 aa a3 99 3d 25 25 45 29 65 9b 3d 1a 7f 4f 4d 4d 7d b7 df Data Ascii: (??7PJ<xPDJr:PA:tH)UA(_D3Bp<ydP 4:[F "}OZt&6w(2P_T;_{_JE%"rSlElIDBDdJ/MV\}UE/Z("MwD$**kuV.}M'"2c#)\|KXWZA$<.=%%E)e=OMM}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50098	141.95.33.120	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:55 UTC	774	OUT	GET /cq/121/124/1/2.gif?puid=d5f646a1-3a90-4585-81a0-693ca4a06fc0&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=ef3cddf5-ca0f-737b-a417-e2297a9c0d9f#1714156371003#2; 3pi=121#1714156372767#-1519022819
2024-04-26 18:32:55 UTC	1402	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=121#1714156372767#-1519022819\|124#1714156375753#1865358582; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:32:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=gif; Max-Age=300; Expires=Fri, 26-Apr-2024 18:37:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=121; Max-Age=300; Expires=Fri, 26-Apr-2024 18:37:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=0; Max-Age=300; Expires=Fri, 26-Apr-2024 18:37:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=3; Max-Age=300; Expires=Fri, 26-Apr-2024 18:37:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=0\|; Max-Age=300; Expires=Fri, 26-Apr-2024 18:37:55 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://match.prod.bidr.io/cookie-sync/id5?us_privacy= transfer-encoding: chunked date: Fri, 26 Apr 2024 18:32:55 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-26 18:32:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50106	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:55 UTC	842	OUT	GET /media/New%20navigation_Rebrand%203.0/Crypto%20Index%20new.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:55 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:55 GMT Content-Type: image/svg+xml Content-Length: 1015 Connection: close Last-Modified: Mon, 20 Dec 2021 10:14:20 GMT ETag: "dd691ba6977370e6d0cdbd36d889fe83" Cache-Control: public, max-age=36000 x-amz-version-id: l5Q2Ny6ZrQvDvoiKB_s343by8Xmr3v7r X-Cache: Hit from cloudfront Via: 1.1 177fd0f8c3e2c78883d72714aa07183a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 7Hh38wyr237vdIoPKRlJ9WAyaOTCOjDt-f9pcBDadp4pbN4-NhH5uw== Age: 20499 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:55 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8841bee9ac3-MIA
2024-04-26 18:32:55 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 43 72 79 70 74 6f 5f 49 6e 64 65 78 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 72 79 70 74 6f 20 49 6e 64 65 78 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 72 78 3d 22 31 38 22 20 66 69 6c 6c 3d 22 23 66 32 66 61 66 36 22 2f 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 38 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Crypto_Index" data-name="Crypto Index" xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <rect id="Rectangle" width="36" height="36" rx="18" fill="#f2faf6"/> <g id="Group_138
2024-04-26 18:32:55 UTC	397	IN	Data Raw: 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 39 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 32 39 37 22 20 64 3d 22 4d 32 33 34 2e 38 33 31 2d 37 30 35 2e 33 39 61 37 2e 31 2c 37 2e 31 2c 30 2c 30 2c 31 2d 37 2e 31 2c 37 2e 31 2c 37 2e 31 2c 37 2e 31 2c 30 2c 30 2c 31 2d 37 2e 31 2d 37 2e 31 2c 37 2e 31 2c 37 2e 31 2c 30 2c 30 2c 31 2c 37 2e 31 2d 37 2e 31 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 2d 31 2e 39 34 31 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 39 38 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 32 39 Data Ascii: > <path id="Path_297" data-name="Path 297" d="M234.831-705.39a7.1,7.1,0,0,1-7.1,7.1,7.1,7.1,0,0,1-7.1-7.1,7.1,7.1,0,0,1,7.1-7.1" transform="translate(0 -1.941)" fill="none" stroke="#27d17f" stroke-width="1"/> <path id="Path_298" data-name="Path 29

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50097	142.250.189.130	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:55 UTC	856	OUT	GET /pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=1a1f3838-e54f-4c21-6419-351f87b95f28&reqId=c6201517-1960-426a-5eed-0fdae320a0a6&zcluid=293f006c26e11ff7&zdid=1332 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkEiXynQ3F2vfWpzcT0iiYFVMu4cIAq8AD1TijBJDcnZ7lPa4qPjngJWg7LZTM
2024-04-26 18:32:55 UTC	810	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://mwzeom.zeotap.com/mw?google_gid=CAESEH572_eSjRp97nTOhZn8BNs&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=1a1f3838-e54f-4c21-6419-351f87b95f28&reqId=c6201517-1960-426a-5eed-0fdae320a0a6&zcluid=293f006c26e11ff7&zdid=1332 Date: Fri, 26 Apr 2024 18:32:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 469 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:32:55 UTC	445	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 77 7a 65 6f 6d 2e 7a 65 6f 74 61 70 2e 63 6f 6d 2f 6d 77 3f 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 48 35 37 32 5f 65 53 6a 52 70 39 37 6e 54 4f 68 5a 6e 38 42 4e 73 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 26 61 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://mwzeom.zeotap.com/mw?google_gid=CAESEH572_eSjRp97nTOhZn8BNs&google_cver=1&a
2024-04-26 18:32:55 UTC	24	IN	Data Raw: 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: e</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50102	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:55 UTC	599	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%201310.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:55 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:55 GMT Content-Type: image/svg+xml Content-Length: 1725 Connection: close Last-Modified: Mon, 20 Dec 2021 10:16:09 GMT ETag: "c0adfa4f733b54e128d62f32c4ddbb48" Cache-Control: public, max-age=36000 x-amz-version-id: zu5V1psvtw2FxfLo2Iiwjg.dGy8oIz3m X-Cache: Hit from cloudfront Via: 1.1 81148d596ccabdf71245563094108fbe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: l5IY17n0bXaGmx46kw_nxSnR2R57tiA3xsWY9WRPh6f7mRGgCFvqvg== Age: 20498 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:55 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88419d15c67-MIA
2024-04-26 18:32:55 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 31 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 33 31 30 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 31 20 2d 32 30 30 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 38 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 30 38 32 22 20 74 72 61 6e 73 66 6f 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_1310" data-name="Group 1310" transform="translate(-611 -200)"> <g id="Group_1082" data-name="Group 1082" transfor
2024-04-26 18:32:55 UTC	1107	IN	Data Raw: 30 2e 38 33 2d 2e 31 33 36 2c 37 2e 36 36 31 2c 37 2e 36 36 31 2c 30 2c 30 2c 31 2d 31 2e 30 38 33 2d 39 2e 32 39 33 6c 2d 32 2e 37 37 35 2e 39 36 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 38 38 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 30 38 38 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 36 36 2e 38 38 39 20 32 36 39 2e 36 31 29 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 38 34 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 38 34 37 22 20 64 3d 22 4d 31 33 2e 33 32 37 2c 32 30 2e Data Ascii: 0.83-.136,7.661,7.661,0,0,1-1.083-9.293l-2.775.966" fill="none" stroke="#27d17f" stroke-width="1"/> <g id="Group_1088" data-name="Group 1088" transform="translate(-166.889 269.61)"> <path id="Path_847" data-name="Path 847" d="M13.327,20.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50101	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:55 UTC	627	OUT	GET /media/BTC-halving/bitpanda-academy-intermediate-22-bitcoin-halving-header-NEW.jpg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:55 UTC	801	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:55 GMT Content-Type: application/octet-stream Content-Length: 68779 Connection: close Last-Modified: Mon, 18 Dec 2023 18:37:13 GMT ETag: "47d9fd4e004c37e011fe88ce26405864" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: gf1FdpvWwC5klEXJrJNUXzfRqeW2Yj1L X-Cache: Hit from cloudfront Via: 1.1 ef3100c3f2434fd3889627d60775da30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: MaNN8E6TAAwZdbHyzuxflkZ6a_uYobYFKxxRFuNYLagZac3WyH2-2g== Age: 20499 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:55 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8841fe46daf-MIA
2024-04-26 18:32:55 UTC	568	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 01 0b 91 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 08 34 00 00 04 ec 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 0c 0c 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 01 00 0d 00 06 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD(iinfinfeav01ColorjiprpKipcoispe4pixiav1Ccolrnclx
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 1e ab 5c 31 7b 2b 9b 5a c6 94 90 7e 46 18 be e4 a7 2a 6e 49 56 39 08 ce da 6b ee 67 40 c4 37 49 d8 31 0f 9a e8 48 f1 ef cf 9c ed 2e 93 65 10 f1 69 53 92 3b b1 52 13 ee b7 df b0 1f 1d 75 3b 50 c8 b5 b3 ea 30 88 c5 21 a4 fd be 1d 3b 23 1b 0e c2 11 93 c3 4a ba 8a cf 6c 7e 53 d2 44 29 8c a8 a7 10 f1 7d 37 96 96 a5 eb 0e 89 91 07 92 13 86 2f d8 a3 5f d8 db b6 4a cc d3 48 50 f2 b5 43 8a d2 87 f2 0a 09 1e 07 e9 8d f6 3e f3 e4 63 b8 bf 89 de ff 47 1b 2a 9b aa ae 32 9f 67 ee 99 01 e6 9b 5a 3e 81 31 ea 6d c3 13 c8 4a c0 85 37 6c a3 1d 11 c5 7f d5 54 9d 4f 82 25 44 86 a3 61 8a 74 78 b4 c7 c3 57 ac 36 9c a7 92 d1 f4 7f fd 71 2e 16 3f fb d3 1e 33 3c 01 08 6c 0c 15 a3 32 db 74 d6 6d d7 2e 69 13 e2 24 35 57 ca 38 1b c1 16 db 52 df 9c 66 5e 67 95 33 71 62 f0 0d 2f 0e ea Data Ascii: \1{+Z~FnIV9kg@7I1H.eiS;Ru;P0!;#Jl~SD)}7/_JHPC>cG2gZ>1mJ7lTO%DatxW6q.?3<l2tm.i$5W8Rf^g3qb/
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 4f 53 f5 65 c9 78 e9 be 02 dd 4a e9 97 f9 77 ec 3c 20 66 a1 04 be da 8d 63 79 fa 6e 15 36 9d 58 bc 94 94 7c 23 c0 05 4c 85 79 b7 63 20 14 96 98 31 f5 4e 2d cc f6 ce ee 2c 72 40 8e 77 f0 77 df ab 4c 6d e5 b6 31 91 93 60 33 f7 5f 69 82 cf 27 fb fc 26 d0 02 19 0a 10 c8 65 e5 1f 8c 47 ae 3d 57 86 67 14 5d b4 44 26 43 71 be 89 a4 4b 17 71 6e 44 2c b1 7f af db 9b 31 e1 0a 9a fe 34 81 6a 87 37 4f 0b fd 4c ec e4 d8 38 64 aa d3 31 46 56 30 87 76 e3 0f d2 0b f6 6f 40 c1 23 34 a2 99 8b 0d eb 67 27 a5 18 a2 76 7c 1a b8 16 79 47 aa 71 4b 06 10 09 e7 32 31 74 8e a0 35 af 5c 10 e6 e4 26 78 28 73 c7 8f df d0 a3 f5 82 b9 c7 09 27 5f 5a fc ee a5 5e 37 74 92 4d e6 ce 0e c0 7c 5e 0c ab fe 3d e7 ad ee d6 da 77 03 c1 90 5d 69 d7 20 d5 94 35 60 24 bb 10 f5 02 40 69 24 91 d3 2a Data Ascii: OSexJw< fcyn6X\|#Lyc 1N-,r@wwLm1`3_i'&eG=Wg]D&CqKqnD,14j7OL8d1FV0vo@#4g'v\|yGqK21t5\&x(s'_Z^7tM\|^=w]i 5`$@i$*
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 99 3a d6 a0 27 85 c1 08 70 7a f7 40 31 d9 72 eb 07 17 94 b6 31 f0 c6 c7 0e 21 93 bd e0 fe 5f 06 73 fe 8a 1b 2a 1e b4 f5 1b c6 c5 3a 4a 98 6a cd d1 73 7c 05 8b 22 c7 c7 9a a2 67 e3 bc b9 95 f3 a6 19 c6 6e 47 9d 00 83 62 5b cd 6b d9 66 20 72 31 80 d4 7b d6 c3 4a dd 97 ed 09 77 06 9f 4d fe 34 58 87 b6 f9 1d 1d ce b5 32 3a 13 de 24 1b be 72 61 a7 3d d1 af a9 89 6c 39 98 bc 68 79 88 f6 66 98 77 6d d0 0a 14 13 58 0d b9 53 5b d8 8e a5 f5 87 e3 44 14 80 6d 91 0c 3e b4 43 c0 ee 55 2d 72 3e f6 ec 2d a7 ed c8 a5 cd 60 f5 60 9a a5 23 3c b4 b0 53 75 f6 b8 26 f6 30 c8 40 80 63 70 8e a9 70 60 0c 84 e2 05 59 64 88 45 cd 1e 5b d0 19 15 90 d4 ff e4 9c 96 3d bb 7d d4 ab 3d 36 07 ee ac e1 3a 9c b8 f6 c7 35 d6 e1 e2 f2 27 e2 1c b4 f1 1d d6 61 d7 1b ed 30 58 df 49 73 2c 03 ff Data Ascii: :'pz@1r1!_s*:Jjs\|"gnGb[kf r1{JwM4X2:$ra=l9hyfwmXS[Dm>CU-r>-``#<Su&0@cpp`YdE[=}=6:5'a0XIs,
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 05 72 85 9a cd 17 07 9b 52 6f a3 87 a2 50 c9 9f 3f 12 21 6e 7c 27 7b eb 3f 2c c0 66 15 91 73 0c 21 b1 e8 bc 14 02 17 21 88 b3 74 fe b8 57 a4 24 cd ee 9d 36 df ca d3 72 7f 0c 70 71 8d a8 fa 42 3f 29 b3 35 ad 6c 1b ae ce 7a 64 c1 6d 17 11 e9 a3 e7 49 6d cf b9 12 8f c6 62 83 f4 d6 8a 03 69 f5 c8 f7 2d c7 c5 02 d3 27 16 90 5f 0a 8e ec 44 f8 bb 79 4c c5 0a ca 9d 81 bb 80 1c d9 0d 6c a6 cf a0 8d f1 58 4d 5e b9 dd 13 49 af a4 ed 0a 45 da 06 45 8e 52 e9 55 64 77 57 8e e8 21 9d c9 3a 41 c2 9d 25 b1 b8 0d aa bb f5 6b ce 23 9b 62 7c ce e9 e8 94 5a 45 72 c3 2a 75 07 61 ad bf be e6 37 8e 3d 2a dc b9 fa bc 27 65 3f 7e 47 f3 6d 1e 12 dd 1f 26 a0 48 a8 73 67 5e 31 87 a1 14 df 44 39 fa 45 dc 34 f6 dd 97 9c 84 50 26 f3 2d db fb d4 66 c7 32 c7 0f 1e 53 dd e3 15 a9 64 ba e6 Data Ascii: rRoP?!n\|'{?,fs!!tW$6rpqB?)5lzdmImbi-'_DyLlXM^IEERUdwW!:A%k#b\|ZErua7='e?~Gm&Hsg^1D9E4P&-f2Sd
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 63 e9 c0 15 0a f1 68 b9 1b d9 7e 4a a6 c7 ca d3 67 fd 87 6e 75 74 01 e4 97 66 94 85 44 73 d3 dd 2a 05 05 53 84 18 fe 07 4b c3 e7 d0 bd 98 f1 dd b6 dc d4 3c 95 e0 b0 6f 73 03 d0 51 65 ff 0f 48 37 fd bd 7c a5 62 90 fd ec f2 90 6f c3 ff 19 26 20 55 f7 3d c3 03 2f 7d bf 21 23 3c d0 78 d5 e6 bb 2c a0 46 97 c8 be 65 bd ff 77 0b 41 19 5a b3 0b d4 e5 5a 66 35 a7 81 1b 5d 2a d7 c9 c9 23 b8 7b a8 ff 5c dc fa ee 93 ad 3d 5a a8 7f 4b 0c 49 ec 31 30 89 26 22 c7 90 bc 03 e8 a4 6f ff 09 85 ce 98 e7 69 97 79 99 78 9e f0 cd 3e 42 77 3f 73 08 16 69 a7 de 93 10 85 c4 30 a3 e8 95 e7 a9 58 7e 33 32 45 31 ce 35 96 ef 92 ea 9b 1b ad 85 32 8e b1 a7 ab e6 e3 d1 d1 6a e9 2f 90 99 18 2a 5b 4c 43 d9 a8 b3 0c 12 39 70 fd 7b a2 64 72 b8 9f 74 f1 c2 29 b5 2b 8e 4a b6 4e 0e c8 00 8b 57 Data Ascii: ch~JgnutfDsSK<osQeH7\|bo& U=/}!#<x,FewAZZf5]#{\=ZKI10&"oiyx>Bw?si0X~32E152j/*[LC9p{drt)+JNW
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 73 0d c8 df 36 88 0d 87 cb 88 ea 13 45 30 fd 43 67 5c 52 e9 af d9 37 0d 3c bd a2 c2 19 b9 0f a3 be fc 93 03 89 19 e9 98 1b b7 a4 14 e6 a8 a7 9e 61 67 20 57 27 49 07 4b d3 c8 50 72 41 ab 5c e0 ee 29 92 ab aa 78 66 20 03 af 17 83 03 ac 1e 72 ad cb 76 58 91 b0 d4 b5 a8 45 b0 d5 df b8 00 c7 aa c8 eb 8f c5 11 ad b7 ce d8 d2 f1 a5 68 74 be 90 d2 d2 26 4f d7 5c 8f 07 d6 a6 37 04 c7 7b ff c0 07 07 e7 25 71 e2 97 fe c6 85 62 b4 f5 cb 1f 41 32 46 f0 a7 c1 1e 68 1e 1f fb 47 8e a0 04 da 54 58 ad 35 e9 93 72 8c f0 ca ee 59 ba ef c9 f9 3b 85 9d 29 db a6 11 ab 38 37 f7 c4 27 b7 ca b4 6e f2 52 f3 f8 8e 6f 54 8d 25 cb 27 1c c7 9b 29 11 14 88 c9 12 1e 0e 5c ff d4 46 07 df c9 8e 2a 73 a9 f8 52 bf 3e 4f 23 7a cb ac 1d 49 dd fd e3 8c 05 c8 fc 92 dc 10 f4 47 37 e8 f1 97 d8 e2 Data Ascii: s6E0Cg\R7<ag W'IKPrA\)xf rvXEht&O\7{%qbA2FhGTX5rY;)87'nRoT%')\F*sR>O#zIG7
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 2e cc 9f e6 41 e0 80 e2 f3 ba c0 54 5f 68 65 d7 2a e6 34 4d 80 ae 37 2c ae 6d cc b9 ff db f7 ec 8c 93 31 4c e5 48 d8 4e e8 ca 82 c3 0f 56 9f 7c 47 dd 6d 62 39 8b 6d 51 27 b6 12 7b 61 57 54 6d 63 ee cb fb 82 44 f5 25 17 39 17 b8 07 31 f8 2e b3 0e 44 8e 37 50 a0 51 c6 4e 8d 98 5f 09 c6 19 4a 1b ec 34 62 6f 26 b9 ad 45 c7 85 28 3a d9 21 ed 96 2c fc 62 5c ad 3e 4c 0d 64 31 8e 96 db ad 7b 29 4b 87 e4 2a b3 c5 74 eb 75 f5 cb 9e e2 2e ba a2 80 35 35 cf ce 34 0f a2 87 92 bb 22 74 b5 a2 da fc d0 fc 5c 82 ac 30 70 c9 0c 5b 68 27 b0 7d ea b9 0e 5b 1e e2 10 c7 75 51 cf 2a 23 9f 34 c7 39 ae 72 66 3d 96 8a 81 cb ac f5 de 2b 55 36 c3 66 a2 df f1 28 ee 88 3a 32 d2 56 48 ea 6c fb 09 f8 b8 5e 6e 64 0f ab f0 79 d1 ea ce 5b f9 58 38 e9 9a 23 d5 f1 cd 7e 1b 7a c1 7f 61 76 e6 Data Ascii: .AT_he4M7,m1LHNV\|Gmb9mQ'{aWTmcD%91.D7PQN_J4bo&E(:!,b\>Ld1{)Ktu.554"t\0p[h'}[uQ*#49rf=+U6f(:2VHl^ndy[X8#~zav
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: fe 43 1e 1c 9a 30 ed 58 d7 20 c5 25 02 a4 ad b8 66 95 8b 5c 46 f6 f2 b4 cc 2a d5 05 0b 20 74 77 16 ff 69 2c b0 5d 24 0c cd 35 94 89 98 52 d9 7e da ec a8 32 7a c3 5c 3d f2 9f 3a 11 97 d0 06 95 12 4d b6 84 96 36 e6 04 32 6f c6 f6 7b 84 c4 e2 e7 7c 77 97 7e 7a 49 29 5a 45 4a 67 36 20 b9 f0 29 47 2a 82 64 13 96 69 25 f2 4c 35 03 b5 fb 95 a8 ef b8 42 ef 32 97 ce 7b 41 7c 11 98 e7 ec c7 e0 58 73 43 cc e4 93 13 6d 85 4a de da 27 aa 70 b1 08 2a aa aa aa aa aa aa 3e 7e 35 4c 11 8e dd 40 1e fd 38 ef e0 11 44 87 50 6f 63 0c 03 b0 9c 06 01 4e 59 b4 9d 34 76 ac aa b8 96 ec a5 d8 ea 66 b1 7d d2 26 0f d0 66 0e 5d 43 c9 49 e4 2c 9b 0c e1 45 39 44 62 86 9c ae 43 6b b3 da 45 56 8e c4 61 cb f1 80 22 22 9a 87 ac 74 d1 87 44 3e 4d 46 fa c1 be ff ff 9b 10 de ff 0c 4a e7 57 ff Data Ascii: C0X %f\F* twi,]$5R~2z\=:M62o{\|w~zI)ZEJg6 )Gdi%L5B2{A\|XsCmJ'p>~5L@8DPocNY4vf}&f]CI,E9DbCkEVa""tD>MFJW
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 75 f2 ec 7a 11 03 6f 1d 41 df 3f 33 fe ec 4c 5e 4c 78 a1 75 9e 07 f5 cb 79 26 05 fb 6b 27 f4 d9 47 27 43 7b 01 b1 7e 4d df 60 10 a5 6d 8f d8 63 9c 03 46 7d e0 e1 de 03 07 b5 7d 59 f9 c3 8d 7c 19 91 7b 2b 41 b6 e9 8e 5f da 5b 1e eb 4f 19 a2 da 44 28 ab 14 d0 f0 7a 2b e8 4c a9 09 c2 df 0f 46 46 74 d7 b2 9c 9e e0 ce 65 08 79 0d 14 08 36 c0 dd f9 da bf 91 b8 d6 8c a4 af 23 94 25 33 45 2e 1f 3e f5 f8 a8 84 89 00 f5 31 de b4 b6 06 22 ba ba ab d5 53 da 25 47 52 59 fe c6 76 87 e1 a4 30 97 88 0b 6f 3d 20 09 f2 b0 40 ea 09 be 1f 7c 5b 14 6e 2b d9 af 8c 0f e8 6e a2 ee 2d c3 4a 09 ac 89 32 e1 2c 85 30 55 41 de 61 15 f8 6a 21 8b 9f 80 a0 4e dc c8 cd cc 8c dc c9 da 0c 10 bc 78 c0 bc 06 b8 d0 20 54 14 f3 90 9f 89 2f 9d 5e 46 de 3e 5b 77 53 fc 87 5c 45 70 a6 44 b0 16 b7 Data Ascii: uzoA?3L^Lxuy&k'G'C{~M`mcF}}Y\|{+A_[OD(z+LFFtey6#%3E.>1"S%GRYv0o= @\|[n+n-J2,0UAaj!Nx T/^F>[wS\EpD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50103	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:55 UTC	593	OUT	GET /media/New%20navigation_Rebrand%203.0/Stocks.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:55 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:55 GMT Content-Type: image/svg+xml Content-Length: 1007 Connection: close Last-Modified: Wed, 29 Dec 2021 09:14:37 GMT ETag: "2de2b6150938e51e42ae5b3d7aa395db" Cache-Control: public, max-age=36000 x-amz-version-id: KDtf8KZt8KqaWwJ3IjHpetKCWi8lQAUy X-Cache: Hit from cloudfront Via: 1.1 eb083428a00073810c04a8eb17b6bb24.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: PwDaYmuMHk-i5byPhY0CR6XEJBzLX81ESW6BHmjw__bFl2-14jwJ0Q== Age: 20499 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:55 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8841f5a746d-MIA
2024-04-26 18:32:55 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 70 78 22 20 68 65 69 67 68 74 3d 22 33 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 49 63 6f 6e 73 41 73 73 65 74 43 6c 61 73 73 2f 53 74 6f 63 6b 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 76 32 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36px" height="36px" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>IconsAssetClass/Stocks</title> <g id="v2" stroke="none"
2024-04-26 18:32:55 UTC	389	IN	Data Raw: 22 20 78 3d 22 39 2e 33 38 33 33 33 33 33 33 22 20 79 3d 22 31 36 22 20 77 69 64 74 68 3d 22 33 2e 39 31 36 36 36 36 36 37 22 20 68 65 69 67 68 74 3d 22 31 31 2e 37 35 22 20 72 78 3d 22 31 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 2d 43 6f 70 79 2d 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 78 3d 22 31 36 2e 30 34 31 36 36 36 37 22 20 79 3d 22 31 32 2e 31 32 35 22 20 77 69 64 74 68 3d 22 33 2e 39 31 36 36 36 36 36 37 22 20 68 65 69 67 68 74 3d 22 31 33 2e 34 37 32 33 30 36 32 22 20 72 78 3d 22 31 22 3e 3c 2f 72 65 63 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 2d 43 6f 70 79 2d 31 30 Data Ascii: " x="9.38333333" y="16" width="3.91666667" height="11.75" rx="1"></rect> <rect id="Rectangle-Copy-7" fill="#FFFFFF" x="16.0416667" y="12.125" width="3.91666667" height="13.4723062" rx="1"></rect> <rect id="Rectangle-Copy-10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50104	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:55 UTC	594	OUT	GET /media/New%20navigation_Rebrand%203.0/Cryptos.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:55 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:55 GMT Content-Type: image/svg+xml Content-Length: 10401 Connection: close Last-Modified: Wed, 29 Dec 2021 09:14:37 GMT ETag: "164f494b4f642eefecb7bc6967dd3dd8" Cache-Control: public, max-age=36000 x-amz-version-id: YEWPFbMe5uNPPmPQ6ABTQlrxEYqH04T7 X-Cache: Hit from cloudfront Via: 1.1 221c16f6368b9673111421e368023144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: T_1f8iiTY7OcBRwf_sMtvyx9C5wDPz95-g66hKtzOn2g9Z0obneGiw== Age: 20499 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:55 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8841e465c79-MIA
2024-04-26 18:32:55 UTC	617	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 70 78 22 20 68 65 69 67 68 74 3d 22 33 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 49 63 6f 6e 41 73 73 65 74 43 6c 61 73 73 2f 43 72 79 70 74 6f 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 76 32 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36px" height="38px" viewBox="0 0 36 38" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>IconAssetClass/Cryptos</title> <g id="v2" stroke="none"
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 31 38 2e 35 22 20 72 78 3d 22 31 38 22 20 72 79 3d 22 31 38 2e 35 22 3e 3c 2f 65 6c 6c 69 70 73 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 38 2e 35 36 30 34 39 38 37 2c 31 32 2e 37 39 35 31 33 38 33 20 4c 32 38 2e 35 36 30 34 39 38 37 2c 31 32 2e 37 39 35 31 33 38 33 20 43 32 38 2e 34 32 38 34 39 38 37 2c 31 30 2e 37 31 35 37 33 38 33 20 32 34 2e 35 34 37 36 39 38 37 2c 39 2e 31 34 39 34 30 34 39 36 20 31 39 2e 35 33 34 30 39 38 37 2c 39 2e 31 34 39 34 30 34 39 36 20 43 31 34 2e 35 32 30 34 39 38 37 2c 39 2e 31 34 39 34 30 34 39 36 20 31 30 2e 36 35 34 30 39 38 37 2c 31 30 2e 37 31 35 37 33 38 33 20 31 30 2e 35 31 30 30 39 38 37 2c 31 32 2e 37 37 37 38 37 31 36 20 43 31 30 2e 35 30 37 38 34 39 39 Data Ascii: 18.5" rx="18" ry="18.5"></ellipse> <path d="M28.5604987,12.7951383 L28.5604987,12.7951383 C28.4284987,10.7157383 24.5476987,9.14940496 19.5340987,9.14940496 C14.5204987,9.14940496 10.6540987,10.7157383 10.5100987,12.7778716 C10.5078499
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 33 38 33 20 32 37 2e 37 34 32 30 39 38 37 2c 31 31 2e 34 30 33 39 33 38 33 20 32 37 2e 38 33 35 36 39 38 37 2c 31 32 2e 38 33 39 35 33 38 33 20 43 32 37 2e 38 33 36 38 35 36 38 2c 31 32 2e 38 35 33 34 39 30 37 20 32 37 2e 38 33 36 38 35 36 38 2c 31 32 2e 38 36 37 35 31 39 32 20 32 37 2e 38 33 35 36 39 38 37 2c 31 32 2e 38 38 31 34 37 31 36 20 43 32 37 2e 38 33 35 36 39 38 37 2c 31 33 2e 34 39 38 31 33 38 33 20 32 37 2e 32 33 33 32 39 38 37 2c 31 34 2e 31 32 37 31 33 38 33 20 32 36 2e 31 33 38 38 39 38 37 2c 31 34 2e 36 35 35 30 30 35 20 43 32 34 2e 35 32 38 34 39 38 37 2c 31 35 2e 34 33 39 34 30 35 20 32 32 2e 31 32 31 32 39 38 37 2c 31 35 2e 38 38 38 33 33 38 33 20 31 39 2e 35 33 31 36 39 38 37 2c 31 35 2e 38 38 38 33 33 38 33 20 43 31 36 2e 39 34 32 30 Data Ascii: 383 27.7420987,11.4039383 27.8356987,12.8395383 C27.8368568,12.8534907 27.8368568,12.8675192 27.8356987,12.8814716 C27.8356987,13.4981383 27.2332987,14.1271383 26.1388987,14.655005 C24.5284987,15.439405 22.1212987,15.8883383 19.5316987,15.8883383 C16.9420
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 38 37 2c 32 30 2e 32 35 36 38 30 35 20 31 34 2e 36 34 30 34 39 38 37 2c 32 30 2e 33 31 31 30 37 31 36 20 31 34 2e 38 34 36 38 39 38 37 2c 32 30 2e 33 36 32 38 37 31 36 20 4c 31 34 2e 38 39 39 36 39 38 37 2c 32 30 2e 33 36 32 38 37 31 36 20 43 31 35 2e 31 30 31 32 39 38 37 2c 32 30 2e 34 31 32 32 30 35 20 31 35 2e 33 31 30 30 39 38 37 2c 32 30 2e 34 35 36 36 30 35 20 31 35 2e 35 32 31 32 39 38 37 2c 32 30 2e 34 39 38 35 33 38 33 20 4c 31 35 2e 36 31 30 30 39 38 37 2c 32 30 2e 35 31 35 38 30 35 20 43 31 35 2e 38 31 36 34 39 38 37 2c 32 30 2e 35 35 35 32 37 31 36 20 31 36 2e 30 33 30 30 39 38 37 2c 32 30 2e 35 39 32 32 37 31 36 20 31 36 2e 32 34 36 30 39 38 37 2c 32 30 2e 36 32 36 38 30 35 20 4c 31 36 2e 33 35 34 30 39 38 37 2c 32 30 2e 36 34 34 30 37 31 36 Data Ascii: 87,20.256805 14.6404987,20.3110716 14.8468987,20.3628716 L14.8996987,20.3628716 C15.1012987,20.412205 15.3100987,20.456605 15.5212987,20.4985383 L15.6100987,20.515805 C15.8164987,20.5552716 16.0300987,20.5922716 16.2460987,20.626805 L16.3540987,20.6440716
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 2e 33 39 32 34 36 35 33 20 32 34 2e 35 36 31 34 33 38 32 2c 32 30 2e 34 33 37 37 36 34 33 20 32 34 2e 35 33 30 38 39 38 37 2c 32 30 2e 34 38 31 32 37 31 36 20 43 32 34 2e 35 31 36 36 31 33 37 2c 32 30 2e 35 30 37 38 35 35 35 20 32 34 2e 35 30 30 35 37 36 33 2c 32 30 2e 35 33 33 34 30 34 20 32 34 2e 34 38 32 38 39 38 37 2c 32 30 2e 35 35 37 37 33 38 33 20 43 32 34 2e 34 33 31 39 32 39 2c 32 30 2e 36 32 37 39 32 32 38 20 32 34 2e 33 37 36 36 31 34 35 2c 32 30 2e 36 39 34 36 36 30 39 20 32 34 2e 33 31 37 32 39 38 37 2c 32 30 2e 37 35 37 35 33 38 33 20 4c 32 34 2e 32 35 37 32 39 38 37 2c 32 30 2e 38 31 31 38 30 35 20 43 32 34 2e 32 30 37 33 36 37 32 2c 32 30 2e 38 36 34 32 38 37 31 20 32 34 2e 31 35 34 34 37 35 39 2c 32 30 2e 39 31 33 37 30 35 37 20 32 34 2e Data Ascii: .3924653 24.5614382,20.4377643 24.5308987,20.4812716 C24.5166137,20.5078555 24.5005763,20.533404 24.4828987,20.5577383 C24.431929,20.6279228 24.3766145,20.6946609 24.3172987,20.7575383 L24.2572987,20.811805 C24.2073672,20.8642871 24.1544759,20.9137057 24.
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 37 34 38 39 38 37 2c 32 32 2e 38 35 31 37 33 38 33 20 31 36 2e 34 37 36 34 39 38 37 2c 32 32 2e 38 35 31 37 33 38 33 20 43 31 34 2e 33 31 36 34 39 38 37 2c 32 32 2e 38 35 31 37 33 38 33 20 31 32 2e 32 37 31 36 39 38 37 2c 32 32 2e 35 33 33 35 33 38 33 20 31 30 2e 37 31 36 34 39 38 37 2c 32 31 2e 39 37 31 31 33 38 33 20 43 31 30 2e 34 32 36 39 35 39 39 2c 32 31 2e 38 36 39 31 35 30 36 20 31 30 2e 31 34 32 36 30 30 31 2c 32 31 2e 37 35 32 32 34 37 31 20 39 2e 38 36 34 34 39 38 37 31 2c 32 31 2e 36 32 30 38 37 31 36 20 43 39 2e 36 35 37 36 35 35 38 38 2c 32 31 2e 35 31 39 39 39 39 20 39 2e 34 35 36 35 33 34 32 31 2c 32 31 2e 34 30 37 31 37 34 31 20 39 2e 32 36 32 30 39 38 37 31 2c 32 31 2e 32 38 32 39 33 38 33 20 43 38 2e 36 34 30 34 39 38 37 31 2c 32 30 2e Data Ascii: 748987,22.8517383 16.4764987,22.8517383 C14.3164987,22.8517383 12.2716987,22.5335383 10.7164987,21.9711383 C10.4269599,21.8691506 10.1426001,21.7522471 9.86449871,21.6208716 C9.65765588,21.519999 9.45653421,21.4071741 9.26209871,21.2829383 C8.64049871,20.
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 32 33 2e 36 32 36 32 37 31 36 20 31 37 2e 39 38 33 36 39 38 37 2c 32 33 2e 36 30 39 30 30 35 20 31 38 2e 31 36 31 32 39 38 37 2c 32 33 2e 35 39 34 32 30 35 20 43 31 38 2e 34 32 30 34 39 38 37 2c 32 33 2e 35 37 32 30 30 35 20 31 38 2e 37 30 36 30 39 38 37 2c 32 33 2e 35 34 34 38 37 31 36 20 31 38 2e 39 37 32 34 39 38 37 2c 32 33 2e 35 31 32 38 30 35 20 4c 31 39 2e 31 33 35 36 39 38 37 2c 32 33 2e 34 39 35 35 33 38 33 20 4c 31 39 2e 31 38 31 32 39 38 37 2c 32 33 2e 34 39 35 35 33 38 33 20 4c 31 39 2e 36 31 38 30 39 38 37 2c 32 33 2e 34 33 31 34 30 35 20 4c 31 39 2e 37 39 33 32 39 38 37 2c 32 33 2e 34 30 34 32 37 31 36 20 4c 31 39 2e 38 30 35 32 39 38 37 2c 32 33 2e 34 30 34 32 37 31 36 20 43 31 39 2e 39 39 32 34 39 38 37 2c 32 33 2e 33 37 34 36 37 31 36 20 Data Ascii: 23.6262716 17.9836987,23.609005 18.1612987,23.594205 C18.4204987,23.572005 18.7060987,23.5448716 18.9724987,23.512805 L19.1356987,23.4955383 L19.1812987,23.4955383 L19.6180987,23.431405 L19.7932987,23.4042716 L19.8052987,23.4042716 C19.9924987,23.3746716
2024-04-26 18:32:55 UTC	1369	IN	Data Raw: 33 32 37 36 38 2c 31 39 2e 38 39 39 33 35 32 32 20 32 31 2e 33 38 34 39 37 35 36 2c 32 30 2e 31 36 36 33 33 33 35 20 31 39 2e 35 32 39 32 39 38 37 2c 32 30 2e 31 34 33 33 33 38 33 20 43 31 35 2e 30 37 32 34 39 38 37 2c 32 30 2e 31 34 33 33 33 38 33 20 31 31 2e 38 33 32 34 39 38 37 2c 31 38 2e 38 32 38 36 30 35 20 31 31 2e 33 30 32 30 39 38 37 2c 31 37 2e 34 38 36 37 33 38 33 20 43 31 31 2e 32 37 31 30 31 30 33 2c 31 37 2e 34 30 37 36 33 34 35 20 31 31 2e 32 35 30 30 33 35 33 2c 31 37 2e 33 32 34 37 32 30 37 20 31 31 2e 32 33 39 36 39 38 37 2c 31 37 2e 32 34 30 30 37 31 36 20 43 31 31 2e 32 33 39 36 39 38 37 2c 31 37 2e 32 34 30 30 37 31 36 20 31 31 2e 32 33 39 36 39 38 37 2c 31 37 2e 32 34 30 30 37 31 36 20 31 31 2e 32 33 39 36 39 38 37 2c 31 37 2e 32 34 Data Ascii: 32768,19.8993522 21.3849756,20.1663335 19.5292987,20.1433383 C15.0724987,20.1433383 11.8324987,18.828605 11.3020987,17.4867383 C11.2710103,17.4076345 11.2500353,17.3247207 11.2396987,17.2400716 C11.2396987,17.2400716 11.2396987,17.2400716 11.2396987,17.24
2024-04-26 18:32:55 UTC	201	IN	Data Raw: 36 2e 37 32 32 30 39 38 37 2c 31 38 2e 37 39 31 36 30 35 20 32 35 2e 30 31 30 38 39 38 37 2c 31 39 2e 33 35 31 35 33 38 33 20 5a 22 20 69 64 3d 22 53 68 61 70 65 22 20 73 74 72 6f 6b 65 3d 22 23 46 46 46 46 46 46 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 30 2e 35 22 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e Data Ascii: 6.7220987,18.791605 25.0108987,19.3515383 Z" id="Shape" stroke="#FFFFFF" stroke-width="0.5" fill="#FFFFFF" fill-rule="nonzero"></path> </g> </g> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50107	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:55 UTC	772	OUT	GET /712087.gif?cparams=197059634fe141449898fb53dec95bfd-7e8eb141692d47379bb430dc67014cab-2-269-api5137 HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=SHC2Pha8gAiOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAA
2024-04-26 18:32:55 UTC	804	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://ecf.d41.co/sync/3?RampID=Xc6491Vm-1pzA1iTVLXhV9SS2mgbcdWTy-hA8Ju5KWnd-fmds&197059634fe141449898fb53dec95bfd-7e8eb141692d47379bb430dc67014cab-2-269-api5137 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=4gcQgc4F+lGOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 18:32:55 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYImLsrEBo=; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 18:32:55 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:32:55 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50105	18.239.225.4	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:55 UTC	640	OUT	GET /spacer.gif HTTP/1.1 Host: static.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3AvrUVPPddecJuOYpnw9f4xj%2FF%2FkDRVGai
2024-04-26 18:32:55 UTC	455	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Wed, 11 Jul 2018 17:39:22 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 26 Apr 2024 07:41:48 GMT ETag: "db04c7b378cb2db912c3ba8a5a774ee3" X-Cache: Hit from cloudfront Via: 1.1 e38c1ef061e266e85e51b355cc1da5aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P8 X-Amz-Cf-Id: OHeaJK80R1VLYN2AJNsf8uAW-f9tDWUuKc6nRbBh_OBI77duau8E8w== Age: 39068
2024-04-26 18:32:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50110	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	834	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%201306.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:56 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:56 GMT Content-Type: image/svg+xml Content-Length: 1529 Connection: close Last-Modified: Mon, 20 Dec 2021 10:14:56 GMT ETag: "870f0382dea95c8dc1965cd5b89f6583" Cache-Control: public, max-age=36000 x-amz-version-id: cL8nO1S.LQA6MSqnI47By1THBOP5stVZ X-Cache: Miss from cloudfront Via: 1.1 dcccf6c408219d8b851fcd12a0068cea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: F6sK8t-G6-tmVWJQZKyBapNW0p2xy_Frg7IJzl3ca6a3eybGjcpwGA== CF-Cache-Status: HIT Age: 20500 Expires: Sat, 27 Apr 2024 04:32:56 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8876ddaa686-MIA
2024-04-26 18:32:56 UTC	617	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 30 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 33 30 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 30 33 20 2d 31 39 39 29 22 3e 0a 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 72 78 3d 22 31 38 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_1306" data-name="Group 1306" transform="translate(-203 -199)"> <rect id="Rectangle" width="36" height="36" rx="18
2024-04-26 18:32:56 UTC	912	IN	Data Raw: 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 31 33 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 31 33 22 20 78 32 3d 22 31 2e 39 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 37 2e 33 34 34 20 31 34 2e 33 33 37 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 31 34 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 31 34 22 20 78 32 3d 22 31 2e 39 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 Data Ascii: ="none" stroke="#27d17f" stroke-width="1"/> <line id="Line_213" data-name="Line 213" x2="1.96" transform="translate(7.344 14.337)" fill="none" stroke="#27d17f" stroke-width="1"/> <line id="Line_214" data-name="Line 214" x2="1.96" transform="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50111	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	841	OUT	GET /media/New%20navigation_Rebrand%203.0/spotlight_icon_menu.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:56 UTC	790	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:56 GMT Content-Type: image/svg+xml Content-Length: 49750 Connection: close Last-Modified: Wed, 01 Mar 2023 19:04:44 GMT ETag: "cad941af7a899a4b48019eab7ec22124" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: r8P6nXCYxJFE.jngs.GMHy0HSrlEMzto X-Cache: Hit from cloudfront Via: 1.1 0bca35acf826729de8b75fb344bf9f44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 2wivHm0LEsodcNSHluHdROclWYrM5e1E2qH3AyDh7SFNd0sG2wqX0Q== Age: 20499 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:56 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88779bfa4c1-MIA
2024-04-26 18:32:56 UTC	579	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 22 20 68 65 69 67 68 74 3d 22 35 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 35 36 22 20 68 65 69 67 68 74 3d 22 35 36 22 20 72 78 3d 22 32 38 22 20 66 69 6c 6c 3d 22 23 46 32 46 41 46 36 22 2f 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 34 33 2e 30 33 31 33 20 31 39 2e 34 35 38 34 43 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56" height="56" viewBox="0 0 56 56" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="56" height="56" rx="28" fill="#F2FAF6"/><path fill-rule="evenodd" clip-rule="evenodd" d="M43.0313 19.4584C
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 33 20 34 30 2e 37 36 33 36 48 31 37 2e 37 30 31 31 43 32 30 2e 33 33 32 31 20 34 31 2e 36 31 36 36 20 32 33 2e 30 36 37 37 20 34 32 2e 30 33 32 35 20 32 35 2e 38 31 34 33 20 34 31 2e 39 39 37 31 43 33 32 2e 39 32 36 36 20 34 31 2e 39 39 37 31 20 33 38 2e 34 35 33 38 20 33 39 2e 36 35 39 34 20 33 38 2e 36 35 38 37 20 33 36 2e 35 35 37 32 56 33 36 2e 35 30 39 32 56 33 36 2e 33 37 36 33 56 33 30 2e 32 31 36 32 43 34 31 2e 33 37 37 39 20 32 39 2e 31 39 33 33 20 34 32 2e 39 31 38 36 20 32 37 2e 37 35 33 20 34 33 2e 30 33 31 33 20 32 36 2e 31 35 33 39 56 32 36 2e 31 32 34 33 43 34 33 2e 30 33 32 39 20 32 36 2e 31 30 37 31 20 34 33 2e 30 33 32 39 20 32 36 2e 30 38 39 38 20 34 33 2e 30 33 31 33 20 32 36 2e 30 37 32 36 56 31 39 2e 36 32 34 35 56 31 39 2e 35 30 36 Data Ascii: 3 40.7636H17.7011C20.3321 41.6166 23.0677 42.0325 25.8143 41.9971C32.9266 41.9971 38.4538 39.6594 38.6587 36.5572V36.5092V36.3763V30.2162C41.3779 29.1933 42.9186 27.753 43.0313 26.1539V26.1243C43.0329 26.1071 43.0329 26.0898 43.0313 26.0726V19.6245V19.506
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 34 2e 31 31 34 35 4c 33 30 2e 37 38 34 37 20 33 34 2e 31 31 34 35 43 33 30 2e 39 31 32 36 20 33 34 2e 30 38 38 31 20 33 31 2e 30 34 31 34 20 33 34 2e 30 36 31 35 20 33 31 2e 31 38 30 37 20 33 34 2e 30 33 38 43 33 31 2e 34 34 33 37 20 33 33 2e 39 39 33 37 20 33 31 2e 36 39 33 31 20 33 33 2e 39 33 38 33 20 33 31 2e 39 33 32 32 20 33 33 2e 38 37 39 32 48 33 31 2e 39 35 39 36 4c 33 32 2e 32 34 39 39 20 33 33 2e 38 31 32 37 4c 33 32 2e 33 36 36 31 20 33 33 2e 37 38 33 32 4c 33 32 2e 37 30 37 37 20 33 33 2e 36 39 30 39 4c 33 32 2e 38 35 31 32 20 33 33 2e 36 34 36 36 4c 33 33 2e 31 39 32 38 20 33 33 2e 35 33 39 35 4c 33 33 2e 32 34 37 34 20 33 33 2e 34 35 34 35 43 33 33 2e 35 36 31 33 20 33 33 2e 33 35 35 33 20 33 33 2e 38 34 34 33 20 33 33 2e 32 34 37 37 20 33 Data Ascii: 4.1145L30.7847 34.1145C30.9126 34.0881 31.0414 34.0615 31.1807 34.038C31.4437 33.9937 31.6931 33.9383 31.9322 33.8792H31.9596L32.2499 33.8127L32.3661 33.7832L32.7077 33.6909L32.8512 33.6466L33.1928 33.5395L33.2474 33.4545C33.5613 33.3553 33.8443 33.2477 3
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 35 2e 30 38 31 37 20 33 31 2e 30 39 39 35 43 33 34 2e 39 33 33 38 20 33 31 2e 31 32 34 36 20 33 34 2e 37 39 32 20 33 31 2e 31 34 38 37 20 33 34 2e 36 38 32 32 20 33 31 2e 31 36 38 35 43 33 34 2e 35 39 37 37 20 33 31 2e 31 38 33 37 20 33 34 2e 35 32 37 34 20 33 31 2e 31 39 33 38 20 33 34 2e 34 34 35 34 20 33 31 2e 32 30 35 36 43 33 34 2e 33 38 38 33 20 33 31 2e 32 31 33 38 20 33 34 2e 33 32 35 35 20 33 31 2e 32 32 32 38 20 33 34 2e 32 34 38 34 20 33 31 2e 32 33 35 43 33 34 2e 31 31 37 39 20 33 31 2e 32 35 35 35 20 33 33 2e 39 38 37 34 20 33 31 2e 32 37 32 35 20 33 33 2e 38 35 35 38 20 33 31 2e 32 38 39 36 4c 33 33 2e 38 35 35 37 20 33 31 2e 32 38 39 36 4c 33 33 2e 38 35 35 36 20 33 31 2e 32 38 39 36 43 33 33 2e 37 39 37 38 20 33 31 2e 32 39 37 31 20 33 33 Data Ascii: 5.0817 31.0995C34.9338 31.1246 34.792 31.1487 34.6822 31.1685C34.5977 31.1837 34.5274 31.1938 34.4454 31.2056C34.3883 31.2138 34.3255 31.2228 34.2484 31.235C34.1179 31.2555 33.9874 31.2725 33.8558 31.2896L33.8557 31.2896L33.8556 31.2896C33.7978 31.2971 33
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 31 20 32 37 2e 34 34 32 32 4c 31 37 2e 37 32 31 33 20 32 37 2e 33 39 34 32 43 31 37 2e 36 34 32 34 20 32 37 2e 32 35 31 39 20 31 37 2e 35 37 32 38 20 32 37 2e 31 30 33 38 20 31 37 2e 35 31 32 39 20 32 36 2e 39 35 31 5a 4d 32 35 2e 38 32 34 36 20 34 30 2e 38 39 30 31 43 32 33 2e 31 38 36 39 20 34 30 2e 39 32 35 38 20 32 30 2e 35 35 39 34 20 34 30 2e 35 32 37 33 20 31 38 2e 30 33 32 35 20 33 39 2e 37 30 38 34 48 31 38 2e 30 30 31 38 43 31 35 2e 35 38 33 32 20 33 38 2e 38 37 37 34 20 31 34 2e 30 39 30 34 20 33 37 2e 36 36 39 38 20 31 34 2e 30 31 35 32 20 33 36 2e 34 38 30 36 43 31 34 2e 30 31 36 39 20 33 36 2e 34 34 39 39 20 31 34 2e 30 31 36 39 20 33 36 2e 34 31 39 20 31 34 2e 30 31 35 32 20 33 36 2e 33 38 38 33 56 33 32 2e 33 33 37 4c 31 34 2e 31 32 31 31 Data Ascii: 1 27.4422L17.7213 27.3942C17.6424 27.2519 17.5728 27.1038 17.5129 26.951ZM25.8246 40.8901C23.1869 40.9258 20.5594 40.5273 18.0325 39.7084H18.0018C15.5832 38.8774 14.0904 37.6698 14.0152 36.4806C14.0169 36.4499 14.0169 36.419 14.0152 36.3883V32.337L14.1211
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 33 38 35 20 33 36 2e 33 34 32 38 20 33 33 2e 34 32 32 38 4c 33 36 2e 35 30 36 37 20 33 33 2e 33 31 39 33 4c 33 36 2e 35 36 39 34 20 33 33 2e 32 37 37 35 4c 33 36 2e 35 36 39 34 20 33 33 2e 32 37 37 35 43 33 36 2e 36 39 31 20 33 33 2e 31 39 36 33 20 33 36 2e 38 30 39 37 20 33 33 2e 31 31 37 20 33 36 2e 39 32 33 35 20 33 33 2e 30 33 35 4c 33 37 2e 30 38 30 36 20 33 32 2e 39 31 33 31 43 33 37 2e 32 30 33 36 20 33 32 2e 38 31 37 31 20 33 37 2e 33 31 39 38 20 33 32 2e 37 32 31 31 20 33 37 2e 34 32 32 32 20 33 32 2e 36 32 31 34 4c 33 37 2e 35 35 38 39 20 33 32 2e 34 39 35 38 43 33 37 2e 35 37 34 33 20 33 32 2e 34 37 39 32 20 33 37 2e 35 39 32 32 20 33 32 2e 34 36 33 35 20 33 37 2e 36 31 30 31 20 33 32 2e 34 34 37 38 43 33 37 2e 36 32 38 31 20 33 32 2e 34 33 32 Data Ascii: 385 36.3428 33.4228L36.5067 33.3193L36.5694 33.2775L36.5694 33.2775C36.691 33.1963 36.8097 33.117 36.9235 33.035L37.0806 32.9131C37.2036 32.8171 37.3198 32.7211 37.4222 32.6214L37.5589 32.4958C37.5743 32.4792 37.5922 32.4635 37.6101 32.4478C37.6281 32.432
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 2e 33 37 39 32 20 32 36 2e 30 39 30 36 20 31 38 2e 33 37 39 32 20 32 36 2e 31 30 31 37 20 31 38 2e 33 37 37 38 20 32 36 2e 31 31 32 38 43 31 38 2e 33 39 32 35 20 32 36 2e 32 33 39 35 20 31 38 2e 34 32 32 33 20 32 36 2e 33 36 33 36 20 31 38 2e 34 36 36 36 20 32 36 2e 34 38 32 31 43 31 39 2e 32 32 31 35 20 32 38 2e 34 39 31 31 20 32 33 2e 38 33 33 33 20 33 30 2e 34 35 39 35 20 33 30 2e 31 37 36 39 20 33 30 2e 34 35 39 35 5a 22 20 66 69 6c 6c 3d 22 23 32 37 44 31 37 46 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 33 2e 30 33 31 33 20 31 39 2e 34 35 38 34 48 34 33 2e 34 30 36 33 56 31 39 2e 34 34 37 4c 34 33 2e 34 30 35 36 20 31 39 2e 34 33 35 38 4c 34 33 2e 30 33 31 33 20 31 39 2e 34 35 38 34 5a 4d 31 37 2e 33 33 39 20 31 39 2e 34 33 32 35 4c 31 36 2e 39 36 Data Ascii: .3792 26.0906 18.3792 26.1017 18.3778 26.1128C18.3925 26.2395 18.4223 26.3636 18.4666 26.4821C19.2215 28.4911 23.8333 30.4595 30.1769 30.4595Z" fill="#27D17F"/><path d="M43.0313 19.4584H43.4063V19.447L43.4056 19.4358L43.0313 19.4584ZM17.339 19.4325L16.96
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 38 37 48 34 31 2e 39 39 39 35 5a 4d 33 39 2e 35 38 34 34 20 32 32 2e 32 34 32 33 4c 33 39 2e 34 31 34 37 20 32 31 2e 39 30 37 39 4c 33 39 2e 34 31 33 34 20 32 31 2e 39 30 38 36 4c 33 39 2e 35 38 34 34 20 32 32 2e 32 34 32 33 5a 4d 32 30 2e 37 37 35 34 20 32 32 2e 32 34 32 33 4c 32 30 2e 39 34 36 20 32 31 2e 39 30 38 34 4c 32 30 2e 39 34 35 34 20 32 31 2e 39 30 38 4c 32 30 2e 37 37 35 34 20 32 32 2e 32 34 32 33 5a 4d 31 38 2e 33 36 33 37 20 31 39 2e 35 38 37 48 31 38 2e 37 33 38 37 4c 31 38 2e 30 30 35 33 20 31 39 2e 34 37 36 35 4c 31 38 2e 33 36 33 37 20 31 39 2e 35 38 37 5a 4d 31 38 2e 33 36 33 37 20 31 39 2e 35 32 34 32 56 31 39 2e 31 34 39 32 48 31 38 2e 30 31 32 36 4c 31 37 2e 39 38 39 35 20 31 39 2e 34 39 39 35 4c 31 38 2e 33 36 33 37 20 31 39 2e 35 Data Ascii: 87H41.9995ZM39.5844 22.2423L39.4147 21.9079L39.4134 21.9086L39.5844 22.2423ZM20.7754 22.2423L20.946 21.9084L20.9454 21.908L20.7754 22.2423ZM18.3637 19.587H18.7387L18.0053 19.4765L18.3637 19.587ZM18.3637 19.5242V19.1492H18.0126L17.9895 19.4995L18.3637 19.5
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 36 34 20 33 34 2e 32 31 35 33 4c 33 30 2e 32 33 35 34 20 33 34 2e 35 38 35 36 4c 33 30 2e 32 33 37 34 20 33 34 2e 35 38 35 33 4c 33 30 2e 31 37 36 34 20 33 34 2e 32 31 35 33 5a 4d 33 30 2e 33 37 37 39 20 33 34 2e 31 38 32 56 33 33 2e 38 30 37 48 33 30 2e 33 34 37 32 4c 33 30 2e 33 31 36 39 20 33 33 2e 38 31 32 4c 33 30 2e 33 37 37 39 20 33 34 2e 31 38 32 5a 4d 33 30 2e 34 33 39 34 20 33 34 2e 31 38 32 56 33 34 2e 35 35 37 48 33 30 2e 34 37 32 4c 33 30 2e 35 30 34 32 20 33 34 2e 35 35 31 34 4c 33 30 2e 34 33 39 34 20 33 34 2e 31 38 32 5a 4d 33 30 2e 37 38 34 36 20 33 34 2e 31 31 34 35 4c 33 30 2e 37 31 31 20 33 33 2e 37 34 36 38 4c 33 30 2e 37 30 38 38 20 33 33 2e 37 34 37 32 4c 33 30 2e 37 38 34 36 20 33 34 2e 31 31 34 35 5a 4d 33 30 2e 37 38 34 36 20 33 Data Ascii: 64 34.2153L30.2354 34.5856L30.2374 34.5853L30.1764 34.2153ZM30.3779 34.182V33.807H30.3472L30.3169 33.812L30.3779 34.182ZM30.4394 34.182V34.557H30.472L30.5042 34.5514L30.4394 34.182ZM30.7846 34.1145L30.711 33.7468L30.7088 33.7472L30.7846 34.1145ZM30.7846 3
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 33 35 38 31 4c 33 34 2e 35 39 33 31 20 33 33 2e 33 35 32 34 4c 33 34 2e 34 32 35 34 20 33 33 2e 30 31 36 39 5a 4d 33 34 2e 34 32 35 34 20 33 33 2e 30 31 36 39 4c 33 34 2e 32 36 37 32 20 33 32 2e 36 37 36 38 4c 33 34 2e 32 35 37 37 20 33 32 2e 36 38 31 35 4c 33 34 2e 34 32 35 34 20 33 33 2e 30 31 36 39 5a 4d 33 34 2e 35 35 32 34 20 33 32 2e 39 35 39 36 4c 33 34 2e 36 39 39 20 33 33 2e 33 30 34 38 4c 33 34 2e 37 30 33 32 20 33 33 2e 33 30 33 4c 33 34 2e 35 35 32 34 20 33 32 2e 39 35 39 36 5a 4d 33 34 2e 36 30 39 36 20 33 32 2e 39 33 34 36 4c 33 34 2e 34 36 30 31 20 33 32 2e 35 39 30 37 4c 33 34 2e 34 36 30 31 20 33 32 2e 35 39 30 37 4c 33 34 2e 36 30 39 36 20 33 32 2e 39 33 34 36 5a 4d 33 34 2e 37 30 34 33 20 33 32 2e 38 39 33 36 4c 33 34 2e 38 35 33 31 20 Data Ascii: 3581L34.5931 33.3524L34.4254 33.0169ZM34.4254 33.0169L34.2672 32.6768L34.2577 32.6815L34.4254 33.0169ZM34.5524 32.9596L34.699 33.3048L34.7032 33.303L34.5524 32.9596ZM34.6096 32.9346L34.4601 32.5907L34.4601 32.5907L34.6096 32.9346ZM34.7043 32.8936L34.8531

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50108	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	840	OUT	GET /media/New%20navigation_Rebrand%203.0/BitpandaClub_36x36.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:56 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:56 GMT Content-Type: image/svg+xml Content-Length: 1363 Connection: close Last-Modified: Fri, 16 Jun 2023 08:12:51 GMT ETag: "876891301cde864081e9e069564258ed" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: QJeHkL8fmLwsfdv4vt9yj1x3mKfZsuw7 X-Cache: Hit from cloudfront Via: 1.1 221c16f6368b9673111421e368023144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: BBx1ySB9WyNMmNaEiEvu7DjoB9YNfeE8HSnw6Rbt3gMN874vD64Diw== Age: 20500 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:56 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8877e957436-MIA
2024-04-26 18:32:56 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 34 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 27.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-26 18:32:56 UTC	783	IN	Data Raw: 09 09 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 22 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 32 33 2c 32 39 37 4c 32 32 33 2c 32 39 37 63 39 2e 39 2c 30 2c 31 38 2c 38 2e 31 2c 31 38 2c 31 38 6c 30 2c 30 63 30 2c 39 2e 39 2d 38 2e 31 2c 31 38 2d 31 38 2c 31 38 6c 30 2c 30 63 2d 39 2e 39 2c 30 2d 31 38 2d 38 2e 31 2d 31 38 2d 31 38 6c 30 2c 30 0a 09 09 09 43 32 30 35 2c 33 30 35 2e 31 2c 32 31 33 2e 31 2c 32 39 37 2c 32 32 33 2c 32 39 37 7a 22 2f 3e 0a 09 3c 2f 67 3e 0a 3c 2f 67 3e 0a 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 32 33 34 34 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 2e 32 34 33 20 31 29 22 3e 0a 09 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 39 22 20 63 6c 61 73 73 3d 22 73 74 31 22 20 Data Ascii: <path id="Rectangle" class="st0" d="M223,297L223,297c9.9,0,18,8.1,18,18l0,0c0,9.9-8.1,18-18,18l0,0c-9.9,0-18-8.1-18-18l0,0C205,305.1,213.1,297,223,297z"/></g></g><g id="Group_2344" transform="translate(1.243 1)"><path id="Path_29" class="st1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50112	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	834	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%201307.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:56 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:56 GMT Content-Type: image/svg+xml Content-Length: 995 Connection: close Last-Modified: Mon, 20 Dec 2021 10:19:06 GMT ETag: "5d6e0eab88b3def1a2615330a1b41a9d" Cache-Control: public, max-age=36000 x-amz-version-id: 1zkB5Deth2DvOYBqni3imXlc8YTIE6lJ X-Cache: Hit from cloudfront Via: 1.1 4c3d8e28c41258b22a9e9534d51ead58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: MzFHZPjWKBM4kks5PTV-51nJIF1PezIiSqR-PGCf2CRSXyFOv7KT5Q== Age: 20499 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:56 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8877dbfb3cd-MIA
2024-04-26 18:32:56 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 30 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 33 30 37 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 30 33 20 2d 32 39 30 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 32 37 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 32 37 30 22 20 74 72 61 6e 73 66 6f 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_1307" data-name="Group 1307" transform="translate(-203 -290)"> <g id="Group_1270" data-name="Group 1270" transfor
2024-04-26 18:32:56 UTC	376	IN	Data Raw: 2e 37 39 33 2d 31 2e 37 39 33 56 31 32 2e 39 41 31 2e 37 39 33 2c 31 2e 37 39 33 2c 30 2c 30 2c 30 2c 32 30 2e 38 32 34 2c 31 31 2e 31 48 38 2e 34 31 41 31 2e 37 39 33 2c 31 2e 37 39 33 2c 30 2c 30 2c 30 2c 36 2e 36 31 37 2c 31 32 2e 39 76 32 2e 30 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 32 39 2e 38 36 20 32 31 33 2e 31 33 35 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 30 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 30 39 22 20 78 31 3d 22 31 2e 32 31 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 34 Data Ascii: .793-1.793V12.9A1.793,1.793,0,0,0,20.824,11.1H8.41A1.793,1.793,0,0,0,6.617,12.9v2.05" transform="translate(329.86 213.135)" fill="none" stroke="#27d17f" stroke-width="1"/> <line id="Line_209" data-name="Line 209" x1="1.215" transform="translate(34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50109	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	834	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%201308.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:56 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:56 GMT Content-Type: image/svg+xml Content-Length: 1236 Connection: close Last-Modified: Mon, 20 Dec 2021 10:19:26 GMT ETag: "12fdfc21ae7e8110d9da60325a48662d" Cache-Control: public, max-age=36000 x-amz-version-id: WYeRWEVlMwxIDvmiUShPJSyvVc_KaWVt X-Cache: Hit from cloudfront Via: 1.1 8a771ca27e5a3c9e06b12b7af5d25aa4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: NTbXacy7upwdT0dB4L3z1IypTx8WRBLxSG90d2C-_9EMHHdciWKWkw== Age: 20500 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:56 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8877955da8b-MIA
2024-04-26 18:32:56 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 30 38 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 33 30 38 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 30 33 20 2d 33 34 33 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 37 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 30 37 39 22 20 74 72 61 6e 73 66 6f 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_1308" data-name="Group 1308" transform="translate(-203 -343)"> <g id="Group_1079" data-name="Group 1079" transfor
2024-04-26 18:32:56 UTC	618	IN	Data Raw: 2e 31 38 2c 30 2c 35 2e 33 31 36 2c 31 2e 38 37 38 2c 35 2e 33 31 36 2c 34 2e 36 37 32 61 34 2e 30 30 37 2c 34 2e 30 30 37 2c 30 2c 30 2c 31 2d 2e 37 32 39 2c 32 2e 33 36 38 6c 2d 2e 34 30 38 2e 35 2e 32 33 33 2e 32 36 38 61 33 2e 39 31 33 2c 33 2e 39 31 33 2c 30 2c 30 2c 31 2c 2e 38 39 31 2c 32 2e 35 38 33 63 2e 30 31 32 2c 32 2e 37 30 38 2d 31 2e 39 34 37 2c 34 2e 35 33 34 2d 34 2e 39 39 31 2c 34 2e 36 35 32 6c 2d 2e 33 31 36 2e 30 30 37 5a 6d 31 30 2e 36 33 36 2d 36 2e 31 30 38 63 2d 2e 39 30 35 2e 35 34 34 2d 32 2e 33 30 38 2e 37 34 36 2d 35 2e 33 36 2e 37 37 31 6c 2d 33 2e 33 2e 30 30 35 2d 2e 37 39 2c 34 2e 33 34 38 2c 35 2e 39 38 31 2e 30 31 34 63 32 2e 36 31 39 2c 30 2c 34 2e 33 31 2d 31 2e 34 34 38 2c 34 2e 33 31 2d 33 2e 36 39 31 61 33 2e 32 34 Data Ascii: .18,0,5.316,1.878,5.316,4.672a4.007,4.007,0,0,1-.729,2.368l-.408.5.233.268a3.913,3.913,0,0,1,.891,2.583c.012,2.708-1.947,4.534-4.991,4.652l-.316.007Zm10.636-6.108c-.905.544-2.308.746-5.36.771l-3.3.005-.79,4.348,5.981.014c2.619,0,4.31-1.448,4.31-3.691a3.24

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50113	172.64.154.69	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	839	OUT	GET /MultiPlatformDownload?clt=Web&redirect=aHR0cHM6Ly9hcHAucGx1czUwMC5jb20vdHJhZGU/SXNSZWFsTW9kZT1UcnVlJmhsPWRlJmlkPTEyNzEwOA==&id=127108&tags=lp0ai49b7tf5&pl=2 HTTP/1.1 Host: www.plus500.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://onlinetopchoice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:57 UTC	1129	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Length: 0 Connection: close Cache-Control: private Location: https://www.plus500.com/multiplatformdownload?clt=Web&redirect=aHR0cHM6Ly9hcHAucGx1czUwMC5jb20vdHJhZGU%2fSXNSZWFsTW9kZT1UcnVlJmhsPWRlJmlkPTEyNzEwOA%3d%3d&id=127108&tags=lp0ai49b7tf5&pl=2 x-frame-options: Deny Set-Cookie: InAppView=False; path=/; SameSite=None; secure; HttpOnly Strict-Transport-Security: max-age=31536000 CF-Cache-Status: DYNAMIC expect-ct: max-age=86400, enforce x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: origin-when-cross-origin Access-Control-Allow-Origin: * Set-Cookie: IP=!0bn/xwi1K9mdJj/0UUWQT2jIv4XvHVvabLcBW3O0fPT5DcNgAsedoieCm5WV8gp7bcD9DlccdSpP8x6hKXcOs4AF5G9J7PS1Mo+lHB+rDfx6L73DwVAP0GNl71ZcpzKb+OdR1UTKWcs/MR78ToyIBQYEDLuNI6M=; path=/; Httponly; Secure; SameSite=none Set-Cookie: _cfuvid=.ZLCGAswrtSeIPop225MZwozKgjgqUSKKyn0i106XKA-1714156377022-0.0.1.1-604800000; path=/; domain=.plus500.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a8892dd73346-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50115	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	834	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%201311.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:56 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:56 GMT Content-Type: image/svg+xml Content-Length: 2375 Connection: close Last-Modified: Mon, 20 Dec 2021 10:20:20 GMT ETag: "b005acfcc0895f307855373dab78301f" Cache-Control: public, max-age=36000 x-amz-version-id: tiOzUFmyuGdi.y3c.EZr_VROeE2Z2jfJ X-Cache: Miss from cloudfront Via: 1.1 bb707a876db211940a3cb07991cacbdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 8_jlf3aleyPCSWmxmMnlvM4MfGcwdLOD92jhr06-vtUnlLuZKfWujw== CF-Cache-Status: HIT Age: 20499 Expires: Sat, 27 Apr 2024 04:32:56 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8897ddaa687-MIA
2024-04-26 18:32:56 UTC	617	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 31 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 33 31 31 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 31 20 2d 32 39 31 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 32 37 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 32 37 32 22 20 74 72 61 6e 73 66 6f 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_1311" data-name="Group 1311" transform="translate(-611 -291)"> <g id="Group_1272" data-name="Group 1272" transfor
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 39 2c 32 2e 38 34 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 2e 38 32 36 20 2d 35 2e 34 33 33 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 35 35 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 35 35 22 20 79 31 3d 22 32 2e 34 38 37 22 20 78 32 3d 22 32 2e 36 33 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 35 2e 36 38 20 36 2e 35 37 37 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 Data Ascii: 9,2.843" transform="translate(-3.826 -5.433)" fill="none" stroke="#27d17f" stroke-width="1"/> <line id="Line_255" data-name="Line 255" y1="2.487" x2="2.632" transform="translate(15.68 6.577)" fill="none" stroke="#27d17f" stroke-width="1"/>
2024-04-26 18:32:56 UTC	389	IN	Data Raw: 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 63 69 72 63 6c 65 20 69 64 3d 22 45 6c 6c 69 70 73 65 5f 34 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 45 6c 6c 69 70 73 65 20 34 37 22 20 63 78 3d 22 31 2e 30 35 37 22 20 63 79 3d 22 31 2e 30 35 37 22 20 72 3d 22 31 2e 30 35 37 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 35 2e 33 34 34 20 31 32 2e 34 30 39 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 63 69 72 63 6c 65 20 69 64 3d 22 45 6c 6c 69 70 73 65 5f 34 38 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 45 6c 6c 69 70 73 65 20 34 38 22 20 63 78 3d 22 31 2e 30 35 37 22 20 63 79 3d 22 Data Ascii: e-width="1"/> <circle id="Ellipse_47" data-name="Ellipse 47" cx="1.057" cy="1.057" r="1.057" transform="translate(5.344 12.409)" fill="none" stroke="#27d17f" stroke-width="1"/> <circle id="Ellipse_48" data-name="Ellipse 48" cx="1.057" cy="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50116	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	834	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%201312.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:56 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:56 GMT Content-Type: image/svg+xml Content-Length: 1204 Connection: close Last-Modified: Mon, 20 Dec 2021 10:20:39 GMT ETag: "cbd65eb6c7f2e56be4230dd47e55f6af" Cache-Control: public, max-age=36000 x-amz-version-id: n14Vu01bCO4pbbNr4xtQ0cTZiOkf9qwH X-Cache: Hit from cloudfront Via: 1.1 344d3cc6f132c3533d8a58d054dcf1da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: gOE8tTzlvH40hUXl1Vm3_LEKd14rnQItmKp8r_Fn0qlX452P4PSIcQ== Age: 20499 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:56 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88b0b77a674-MIA
2024-04-26 18:32:56 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 31 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 33 31 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 31 20 2d 33 34 31 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 32 37 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 32 37 31 22 20 74 72 61 6e 73 66 6f 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_1312" data-name="Group 1312" transform="translate(-611 -341)"> <g id="Group_1271" data-name="Group 1271" transfor
2024-04-26 18:32:56 UTC	586	IN	Data Raw: 2d 2e 37 32 36 63 2d 34 2e 34 31 38 2c 30 2d 38 2c 32 2e 33 33 31 2d 38 2c 35 2e 32 30 37 61 34 2e 35 31 35 2c 34 2e 35 31 35 2c 30 2c 30 2c 30 2c 32 2e 33 30 38 2c 33 2e 36 35 36 4c 35 2e 32 33 2c 32 30 2e 31 37 33 6c 33 2e 36 2d 31 2e 39 39 32 61 31 31 2e 36 32 35 2c 31 31 2e 36 32 35 2c 30 2c 30 2c 30 2c 33 2e 34 2e 35 63 34 2e 34 31 38 2c 30 2c 38 2d 32 2e 33 33 31 2c 38 2d 35 2e 32 30 37 61 33 2e 38 2c 33 2e 38 2c 30 2c 30 2c 30 2d 2e 38 35 32 2d 32 2e 33 34 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 31 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 31 Data Ascii: -.726c-4.418,0-8,2.331-8,5.207a4.515,4.515,0,0,0,2.308,3.656L5.23,20.173l3.6-1.992a11.625,11.625,0,0,0,3.4.5c4.418,0,8-2.331,8-5.207a3.8,3.8,0,0,0-.852-2.341" fill="none" stroke="#27d17f" stroke-width="1"/> <line id="Line_210" data-name="Line 21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50117	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	834	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%2043-2.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:56 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:56 GMT Content-Type: image/svg+xml Content-Length: 837 Connection: close Last-Modified: Mon, 20 Dec 2021 10:21:35 GMT ETag: "cce584b0ba1fb7c2d326fcd3c0767ecd" Cache-Control: public, max-age=36000 x-amz-version-id: 6f9dVjkAEvxfXPo4SfzdHZu9o0pz48ef X-Cache: Hit from cloudfront Via: 1.1 8f99d698624c0704470547731241e282.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: qoCnKVvn3P1iDgZ27Zu0D2Oz8pnT325yEMaj35mB-raqmssuEBK9uw== Age: 20500 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:56 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88b0ab3daed-MIA
2024-04-26 18:32:56 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 34 33 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 34 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 32 20 2d 31 36 37 2e 35 29 22 3e 0a 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 72 78 3d 22 31 38 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_43" data-name="Group 43" transform="translate(-612 -167.5)"> <rect id="Rectangle" width="36" height="36" rx="18"
2024-04-26 18:32:56 UTC	218	IN	Data Raw: 22 50 61 74 68 20 38 33 39 22 20 64 3d 22 4d 31 36 2e 39 33 34 2c 37 2e 34 33 2c 31 31 2e 35 34 39 2c 34 2e 36 31 37 6c 2d 39 2e 32 2c 34 2e 38 34 37 2c 39 2e 32 2c 34 2e 38 34 37 2c 35 2e 34 2d 32 2e 38 37 33 76 35 2e 35 61 37 2e 32 31 39 2c 37 2e 32 31 39 2c 30 2c 30 2c 31 2d 31 30 2e 38 38 32 2e 30 34 38 6c 2d 2e 30 34 32 2d 2e 30 34 38 76 2d 33 2e 33 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: "Path 839" d="M16.934,7.43,11.549,4.617l-9.2,4.847,9.2,4.847,5.4-2.873v5.5a7.219,7.219,0,0,1-10.882.048l-.042-.048v-3.36" transform="translate(0)" fill="none" stroke="#27d17f" stroke-width="1"/> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50119	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	839	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%20302%20new.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:56 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:56 GMT Content-Type: image/svg+xml Content-Length: 1369 Connection: close Last-Modified: Mon, 20 Dec 2021 10:23:01 GMT ETag: "ab90eb82c6f6c36057b3c382987cf5f4" Cache-Control: public, max-age=36000 x-amz-version-id: FNV1PTXQFj9OpUZa8.2ok9Us.TAH1ryz X-Cache: Miss from cloudfront Via: 1.1 41958139e7d828579c6466c1ce1c7b26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: CXt1srhNJV46pHuTcMsFt7DataXN1TFAmxJznRKoL1bJZ89xD1_V_g== CF-Cache-Status: HIT Age: 20500 Expires: Sat, 27 Apr 2024 04:32:56 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88b1d056db9-MIA
2024-04-26 18:32:56 UTC	617	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 33 30 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 33 30 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 32 20 2d 31 36 37 2e 35 29 22 3e 0a 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 72 78 3d 22 31 38 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_302" data-name="Group 302" transform="translate(-612 -167.5)"> <rect id="Rectangle" width="36" height="36" rx="18
2024-04-26 18:32:56 UTC	752	IN	Data Raw: 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 36 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 36 30 22 20 78 32 3d 22 36 2e 30 37 31 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 30 2e 38 39 39 20 39 2e 39 32 36 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 36 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 36 31 22 20 78 32 3d 22 36 2e 30 37 31 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 30 2e 38 39 39 20 31 32 2e 35 31 36 Data Ascii: " stroke-width="1"/> <line id="Line_260" data-name="Line 260" x2="6.071" transform="translate(10.899 9.926)" fill="none" stroke="#27d17f" stroke-width="1"/> <line id="Line_261" data-name="Line 261" x2="6.071" transform="translate(10.899 12.516

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50118	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	822	OUT	GET /media/BTC-halving/spotlight_icon_menu.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:56 UTC	790	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:56 GMT Content-Type: image/svg+xml Content-Length: 49750 Connection: close Last-Modified: Mon, 18 Dec 2023 18:40:48 GMT ETag: "cad941af7a899a4b48019eab7ec22124" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: 6B2kvn9iByVRL_rJn.1GUdJV1ltMuNYv X-Cache: Hit from cloudfront Via: 1.1 8f99d698624c0704470547731241e282.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: zbc6MLQ4MC0nocBeYCz390hjqRSG-_YtwlGrZ234F_UO1NzyUXAGeQ== Age: 20499 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:56 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88b1bafa69b-MIA
2024-04-26 18:32:56 UTC	579	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 22 20 68 65 69 67 68 74 3d 22 35 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 35 36 22 20 68 65 69 67 68 74 3d 22 35 36 22 20 72 78 3d 22 32 38 22 20 66 69 6c 6c 3d 22 23 46 32 46 41 46 36 22 2f 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 34 33 2e 30 33 31 33 20 31 39 2e 34 35 38 34 43 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56" height="56" viewBox="0 0 56 56" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="56" height="56" rx="28" fill="#F2FAF6"/><path fill-rule="evenodd" clip-rule="evenodd" d="M43.0313 19.4584C
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 33 20 34 30 2e 37 36 33 36 48 31 37 2e 37 30 31 31 43 32 30 2e 33 33 32 31 20 34 31 2e 36 31 36 36 20 32 33 2e 30 36 37 37 20 34 32 2e 30 33 32 35 20 32 35 2e 38 31 34 33 20 34 31 2e 39 39 37 31 43 33 32 2e 39 32 36 36 20 34 31 2e 39 39 37 31 20 33 38 2e 34 35 33 38 20 33 39 2e 36 35 39 34 20 33 38 2e 36 35 38 37 20 33 36 2e 35 35 37 32 56 33 36 2e 35 30 39 32 56 33 36 2e 33 37 36 33 56 33 30 2e 32 31 36 32 43 34 31 2e 33 37 37 39 20 32 39 2e 31 39 33 33 20 34 32 2e 39 31 38 36 20 32 37 2e 37 35 33 20 34 33 2e 30 33 31 33 20 32 36 2e 31 35 33 39 56 32 36 2e 31 32 34 33 43 34 33 2e 30 33 32 39 20 32 36 2e 31 30 37 31 20 34 33 2e 30 33 32 39 20 32 36 2e 30 38 39 38 20 34 33 2e 30 33 31 33 20 32 36 2e 30 37 32 36 56 31 39 2e 36 32 34 35 56 31 39 2e 35 30 36 Data Ascii: 3 40.7636H17.7011C20.3321 41.6166 23.0677 42.0325 25.8143 41.9971C32.9266 41.9971 38.4538 39.6594 38.6587 36.5572V36.5092V36.3763V30.2162C41.3779 29.1933 42.9186 27.753 43.0313 26.1539V26.1243C43.0329 26.1071 43.0329 26.0898 43.0313 26.0726V19.6245V19.506
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 34 2e 31 31 34 35 4c 33 30 2e 37 38 34 37 20 33 34 2e 31 31 34 35 43 33 30 2e 39 31 32 36 20 33 34 2e 30 38 38 31 20 33 31 2e 30 34 31 34 20 33 34 2e 30 36 31 35 20 33 31 2e 31 38 30 37 20 33 34 2e 30 33 38 43 33 31 2e 34 34 33 37 20 33 33 2e 39 39 33 37 20 33 31 2e 36 39 33 31 20 33 33 2e 39 33 38 33 20 33 31 2e 39 33 32 32 20 33 33 2e 38 37 39 32 48 33 31 2e 39 35 39 36 4c 33 32 2e 32 34 39 39 20 33 33 2e 38 31 32 37 4c 33 32 2e 33 36 36 31 20 33 33 2e 37 38 33 32 4c 33 32 2e 37 30 37 37 20 33 33 2e 36 39 30 39 4c 33 32 2e 38 35 31 32 20 33 33 2e 36 34 36 36 4c 33 33 2e 31 39 32 38 20 33 33 2e 35 33 39 35 4c 33 33 2e 32 34 37 34 20 33 33 2e 34 35 34 35 43 33 33 2e 35 36 31 33 20 33 33 2e 33 35 35 33 20 33 33 2e 38 34 34 33 20 33 33 2e 32 34 37 37 20 33 Data Ascii: 4.1145L30.7847 34.1145C30.9126 34.0881 31.0414 34.0615 31.1807 34.038C31.4437 33.9937 31.6931 33.9383 31.9322 33.8792H31.9596L32.2499 33.8127L32.3661 33.7832L32.7077 33.6909L32.8512 33.6466L33.1928 33.5395L33.2474 33.4545C33.5613 33.3553 33.8443 33.2477 3
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 35 2e 30 38 31 37 20 33 31 2e 30 39 39 35 43 33 34 2e 39 33 33 38 20 33 31 2e 31 32 34 36 20 33 34 2e 37 39 32 20 33 31 2e 31 34 38 37 20 33 34 2e 36 38 32 32 20 33 31 2e 31 36 38 35 43 33 34 2e 35 39 37 37 20 33 31 2e 31 38 33 37 20 33 34 2e 35 32 37 34 20 33 31 2e 31 39 33 38 20 33 34 2e 34 34 35 34 20 33 31 2e 32 30 35 36 43 33 34 2e 33 38 38 33 20 33 31 2e 32 31 33 38 20 33 34 2e 33 32 35 35 20 33 31 2e 32 32 32 38 20 33 34 2e 32 34 38 34 20 33 31 2e 32 33 35 43 33 34 2e 31 31 37 39 20 33 31 2e 32 35 35 35 20 33 33 2e 39 38 37 34 20 33 31 2e 32 37 32 35 20 33 33 2e 38 35 35 38 20 33 31 2e 32 38 39 36 4c 33 33 2e 38 35 35 37 20 33 31 2e 32 38 39 36 4c 33 33 2e 38 35 35 36 20 33 31 2e 32 38 39 36 43 33 33 2e 37 39 37 38 20 33 31 2e 32 39 37 31 20 33 33 Data Ascii: 5.0817 31.0995C34.9338 31.1246 34.792 31.1487 34.6822 31.1685C34.5977 31.1837 34.5274 31.1938 34.4454 31.2056C34.3883 31.2138 34.3255 31.2228 34.2484 31.235C34.1179 31.2555 33.9874 31.2725 33.8558 31.2896L33.8557 31.2896L33.8556 31.2896C33.7978 31.2971 33
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 31 20 32 37 2e 34 34 32 32 4c 31 37 2e 37 32 31 33 20 32 37 2e 33 39 34 32 43 31 37 2e 36 34 32 34 20 32 37 2e 32 35 31 39 20 31 37 2e 35 37 32 38 20 32 37 2e 31 30 33 38 20 31 37 2e 35 31 32 39 20 32 36 2e 39 35 31 5a 4d 32 35 2e 38 32 34 36 20 34 30 2e 38 39 30 31 43 32 33 2e 31 38 36 39 20 34 30 2e 39 32 35 38 20 32 30 2e 35 35 39 34 20 34 30 2e 35 32 37 33 20 31 38 2e 30 33 32 35 20 33 39 2e 37 30 38 34 48 31 38 2e 30 30 31 38 43 31 35 2e 35 38 33 32 20 33 38 2e 38 37 37 34 20 31 34 2e 30 39 30 34 20 33 37 2e 36 36 39 38 20 31 34 2e 30 31 35 32 20 33 36 2e 34 38 30 36 43 31 34 2e 30 31 36 39 20 33 36 2e 34 34 39 39 20 31 34 2e 30 31 36 39 20 33 36 2e 34 31 39 20 31 34 2e 30 31 35 32 20 33 36 2e 33 38 38 33 56 33 32 2e 33 33 37 4c 31 34 2e 31 32 31 31 Data Ascii: 1 27.4422L17.7213 27.3942C17.6424 27.2519 17.5728 27.1038 17.5129 26.951ZM25.8246 40.8901C23.1869 40.9258 20.5594 40.5273 18.0325 39.7084H18.0018C15.5832 38.8774 14.0904 37.6698 14.0152 36.4806C14.0169 36.4499 14.0169 36.419 14.0152 36.3883V32.337L14.1211
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 33 38 35 20 33 36 2e 33 34 32 38 20 33 33 2e 34 32 32 38 4c 33 36 2e 35 30 36 37 20 33 33 2e 33 31 39 33 4c 33 36 2e 35 36 39 34 20 33 33 2e 32 37 37 35 4c 33 36 2e 35 36 39 34 20 33 33 2e 32 37 37 35 43 33 36 2e 36 39 31 20 33 33 2e 31 39 36 33 20 33 36 2e 38 30 39 37 20 33 33 2e 31 31 37 20 33 36 2e 39 32 33 35 20 33 33 2e 30 33 35 4c 33 37 2e 30 38 30 36 20 33 32 2e 39 31 33 31 43 33 37 2e 32 30 33 36 20 33 32 2e 38 31 37 31 20 33 37 2e 33 31 39 38 20 33 32 2e 37 32 31 31 20 33 37 2e 34 32 32 32 20 33 32 2e 36 32 31 34 4c 33 37 2e 35 35 38 39 20 33 32 2e 34 39 35 38 43 33 37 2e 35 37 34 33 20 33 32 2e 34 37 39 32 20 33 37 2e 35 39 32 32 20 33 32 2e 34 36 33 35 20 33 37 2e 36 31 30 31 20 33 32 2e 34 34 37 38 43 33 37 2e 36 32 38 31 20 33 32 2e 34 33 32 Data Ascii: 385 36.3428 33.4228L36.5067 33.3193L36.5694 33.2775L36.5694 33.2775C36.691 33.1963 36.8097 33.117 36.9235 33.035L37.0806 32.9131C37.2036 32.8171 37.3198 32.7211 37.4222 32.6214L37.5589 32.4958C37.5743 32.4792 37.5922 32.4635 37.6101 32.4478C37.6281 32.432
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 2e 33 37 39 32 20 32 36 2e 30 39 30 36 20 31 38 2e 33 37 39 32 20 32 36 2e 31 30 31 37 20 31 38 2e 33 37 37 38 20 32 36 2e 31 31 32 38 43 31 38 2e 33 39 32 35 20 32 36 2e 32 33 39 35 20 31 38 2e 34 32 32 33 20 32 36 2e 33 36 33 36 20 31 38 2e 34 36 36 36 20 32 36 2e 34 38 32 31 43 31 39 2e 32 32 31 35 20 32 38 2e 34 39 31 31 20 32 33 2e 38 33 33 33 20 33 30 2e 34 35 39 35 20 33 30 2e 31 37 36 39 20 33 30 2e 34 35 39 35 5a 22 20 66 69 6c 6c 3d 22 23 32 37 44 31 37 46 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 33 2e 30 33 31 33 20 31 39 2e 34 35 38 34 48 34 33 2e 34 30 36 33 56 31 39 2e 34 34 37 4c 34 33 2e 34 30 35 36 20 31 39 2e 34 33 35 38 4c 34 33 2e 30 33 31 33 20 31 39 2e 34 35 38 34 5a 4d 31 37 2e 33 33 39 20 31 39 2e 34 33 32 35 4c 31 36 2e 39 36 Data Ascii: .3792 26.0906 18.3792 26.1017 18.3778 26.1128C18.3925 26.2395 18.4223 26.3636 18.4666 26.4821C19.2215 28.4911 23.8333 30.4595 30.1769 30.4595Z" fill="#27D17F"/><path d="M43.0313 19.4584H43.4063V19.447L43.4056 19.4358L43.0313 19.4584ZM17.339 19.4325L16.96
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 38 37 48 34 31 2e 39 39 39 35 5a 4d 33 39 2e 35 38 34 34 20 32 32 2e 32 34 32 33 4c 33 39 2e 34 31 34 37 20 32 31 2e 39 30 37 39 4c 33 39 2e 34 31 33 34 20 32 31 2e 39 30 38 36 4c 33 39 2e 35 38 34 34 20 32 32 2e 32 34 32 33 5a 4d 32 30 2e 37 37 35 34 20 32 32 2e 32 34 32 33 4c 32 30 2e 39 34 36 20 32 31 2e 39 30 38 34 4c 32 30 2e 39 34 35 34 20 32 31 2e 39 30 38 4c 32 30 2e 37 37 35 34 20 32 32 2e 32 34 32 33 5a 4d 31 38 2e 33 36 33 37 20 31 39 2e 35 38 37 48 31 38 2e 37 33 38 37 4c 31 38 2e 30 30 35 33 20 31 39 2e 34 37 36 35 4c 31 38 2e 33 36 33 37 20 31 39 2e 35 38 37 5a 4d 31 38 2e 33 36 33 37 20 31 39 2e 35 32 34 32 56 31 39 2e 31 34 39 32 48 31 38 2e 30 31 32 36 4c 31 37 2e 39 38 39 35 20 31 39 2e 34 39 39 35 4c 31 38 2e 33 36 33 37 20 31 39 2e 35 Data Ascii: 87H41.9995ZM39.5844 22.2423L39.4147 21.9079L39.4134 21.9086L39.5844 22.2423ZM20.7754 22.2423L20.946 21.9084L20.9454 21.908L20.7754 22.2423ZM18.3637 19.587H18.7387L18.0053 19.4765L18.3637 19.587ZM18.3637 19.5242V19.1492H18.0126L17.9895 19.4995L18.3637 19.5
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 36 34 20 33 34 2e 32 31 35 33 4c 33 30 2e 32 33 35 34 20 33 34 2e 35 38 35 36 4c 33 30 2e 32 33 37 34 20 33 34 2e 35 38 35 33 4c 33 30 2e 31 37 36 34 20 33 34 2e 32 31 35 33 5a 4d 33 30 2e 33 37 37 39 20 33 34 2e 31 38 32 56 33 33 2e 38 30 37 48 33 30 2e 33 34 37 32 4c 33 30 2e 33 31 36 39 20 33 33 2e 38 31 32 4c 33 30 2e 33 37 37 39 20 33 34 2e 31 38 32 5a 4d 33 30 2e 34 33 39 34 20 33 34 2e 31 38 32 56 33 34 2e 35 35 37 48 33 30 2e 34 37 32 4c 33 30 2e 35 30 34 32 20 33 34 2e 35 35 31 34 4c 33 30 2e 34 33 39 34 20 33 34 2e 31 38 32 5a 4d 33 30 2e 37 38 34 36 20 33 34 2e 31 31 34 35 4c 33 30 2e 37 31 31 20 33 33 2e 37 34 36 38 4c 33 30 2e 37 30 38 38 20 33 33 2e 37 34 37 32 4c 33 30 2e 37 38 34 36 20 33 34 2e 31 31 34 35 5a 4d 33 30 2e 37 38 34 36 20 33 Data Ascii: 64 34.2153L30.2354 34.5856L30.2374 34.5853L30.1764 34.2153ZM30.3779 34.182V33.807H30.3472L30.3169 33.812L30.3779 34.182ZM30.4394 34.182V34.557H30.472L30.5042 34.5514L30.4394 34.182ZM30.7846 34.1145L30.711 33.7468L30.7088 33.7472L30.7846 34.1145ZM30.7846 3
2024-04-26 18:32:56 UTC	1369	IN	Data Raw: 33 35 38 31 4c 33 34 2e 35 39 33 31 20 33 33 2e 33 35 32 34 4c 33 34 2e 34 32 35 34 20 33 33 2e 30 31 36 39 5a 4d 33 34 2e 34 32 35 34 20 33 33 2e 30 31 36 39 4c 33 34 2e 32 36 37 32 20 33 32 2e 36 37 36 38 4c 33 34 2e 32 35 37 37 20 33 32 2e 36 38 31 35 4c 33 34 2e 34 32 35 34 20 33 33 2e 30 31 36 39 5a 4d 33 34 2e 35 35 32 34 20 33 32 2e 39 35 39 36 4c 33 34 2e 36 39 39 20 33 33 2e 33 30 34 38 4c 33 34 2e 37 30 33 32 20 33 33 2e 33 30 33 4c 33 34 2e 35 35 32 34 20 33 32 2e 39 35 39 36 5a 4d 33 34 2e 36 30 39 36 20 33 32 2e 39 33 34 36 4c 33 34 2e 34 36 30 31 20 33 32 2e 35 39 30 37 4c 33 34 2e 34 36 30 31 20 33 32 2e 35 39 30 37 4c 33 34 2e 36 30 39 36 20 33 32 2e 39 33 34 36 5a 4d 33 34 2e 37 30 34 33 20 33 32 2e 38 39 33 36 4c 33 34 2e 38 35 33 31 20 Data Ascii: 3581L34.5931 33.3524L34.4254 33.0169ZM34.4254 33.0169L34.2672 32.6768L34.2577 32.6815L34.4254 33.0169ZM34.5524 32.9596L34.699 33.3048L34.7032 33.303L34.5524 32.9596ZM34.6096 32.9346L34.4601 32.5907L34.4601 32.5907L34.6096 32.9346ZM34.7043 32.8936L34.8531

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50120	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	837	OUT	GET /media/white-label/menu/230120_bts_ShortLogo_black_V1.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	788	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:56 GMT Content-Type: image/svg+xml Content-Length: 598 Connection: close Last-Modified: Thu, 26 Jan 2023 09:03:32 GMT ETag: "a207797be5f060e5f2f560c88d345309" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: dOqfAxUWqGXHjQLR5nK4cyV.R2n4TEX8 X-Cache: Hit from cloudfront Via: 1.1 813798c6f06431d5dd58aa438e312b3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 5knwK3qcUw7a7jrCfhB5E7kWY3dNhs9se5WMrVK_19BF7Jkn0L05fg== Age: 20500 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:56 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88bef557425-MIA
2024-04-26 18:32:57 UTC	581	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 61 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 30 31 22 20 68 65 69 67 68 74 3d 22 35 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 31 20 35 30 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 62 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 36 36 62 39 65 38 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="a" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="501" height="500" viewBox="0 0 501 500"> <defs> <style> .b { fill: #66b9e8; } </style> </defs> <circle cx="2
2024-04-26 18:32:57 UTC	17	IN	Data Raw: 22 2f 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e Data Ascii: "/> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50121	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	592	OUT	GET /media/New%20navigation_Rebrand%203.0/etf-1.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/svg+xml Content-Length: 1383 Connection: close Last-Modified: Mon, 20 Dec 2021 10:02:37 GMT ETag: "22abcbd4023d3936f8bf954ca64c0645" Cache-Control: public, max-age=36000 x-amz-version-id: TXfWyeZsFzQeIDPQ54v1xtQbi5HVD8Rf X-Cache: Hit from cloudfront Via: 1.1 dce51d45ef5ad8611b405be0de5fb2da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: SNq2ukvylTdRPP-WWXppXGbqPaDVqRhAVRr4mUDI-Hz2pxhIpOTiaQ== Age: 20501 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88c3bbbd9e9-MIA
2024-04-26 18:32:57 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 70 78 22 20 68 65 69 67 68 74 3d 22 33 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 2f 65 74 66 73 2f 67 6c 6f 62 61 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 61 73 73 65 74 73 2f 65 74 66 73 2f 67 6c 6f 62 61 6c 22 20 73 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36px" height="36px" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>assets/etfs/global</title> <g id="assets/etfs/global" st
2024-04-26 18:32:57 UTC	765	IN	Data Raw: 35 39 35 32 37 36 2c 31 34 2e 36 32 35 20 32 39 2e 34 37 32 39 32 33 33 2c 31 34 2e 36 32 35 20 32 39 2e 32 31 35 31 38 37 31 2c 31 34 2e 36 32 35 20 43 32 37 2e 34 37 32 39 32 33 33 2c 31 34 2e 36 32 35 20 32 34 2e 38 35 39 35 32 37 36 2c 31 34 2e 36 32 35 20 32 31 2e 33 37 35 2c 31 34 2e 36 32 35 20 43 32 31 2e 33 37 35 2c 31 31 2e 31 32 32 39 32 34 38 20 32 31 2e 33 37 35 2c 38 2e 34 39 36 33 36 38 34 31 20 32 31 2e 33 37 35 2c 36 2e 37 34 35 33 33 30 38 31 20 43 32 31 2e 33 37 35 2c 36 2e 34 39 36 33 36 38 34 31 20 32 31 2e 33 37 35 2c 36 2e 31 32 32 39 32 34 38 20 32 31 2e 33 37 35 2c 35 2e 36 32 35 20 5a 22 20 69 64 3d 22 50 61 74 68 22 20 66 69 6c 6c 3d 22 23 46 46 46 46 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 2f Data Ascii: 595276,14.625 29.4729233,14.625 29.2151871,14.625 C27.4729233,14.625 24.8595276,14.625 21.375,14.625 C21.375,11.1229248 21.375,8.49636841 21.375,6.74533081 C21.375,6.49636841 21.375,6.1229248 21.375,5.625 Z" id="Path" fill="#FFFFFF" fill-rule="nonzero"></

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50123	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	590	OUT	GET /media/New%20navigation_Rebrand%203.0/BCI.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/svg+xml Content-Length: 1731 Connection: close Last-Modified: Wed, 29 Dec 2021 09:33:15 GMT ETag: "af2bdc3d5d19d82d96339842b52193c5" Cache-Control: public, max-age=36000 x-amz-version-id: ifNoMTnJAGsCRtyICtCHz4I2HjCjT0e. X-Cache: Hit from cloudfront Via: 1.1 96ec34ce0a0b54341f66006912ddc5d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: yzEdXDMRppHcNpvaONzoSbG2Z6niwSFLqIX7YLd5AwMCz8R-Ko-1Dg== Age: 20501 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88c6cb7749a-MIA
2024-04-26 18:32:57 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 76 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 35 2e 37 39 35 22 20 68 65 69 67 68 74 3d 22 33 35 2e 37 39 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 2e 37 39 35 20 33 35 2e 37 39 35 22 3e 0a 20 20 3c 67 20 69 64 3d 22 42 69 74 70 61 6e 64 61 2d 44 65 73 69 67 6e 2d 53 79 73 74 65 6d 2d 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 33 39 20 2d 37 39 36 32 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 33 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="v2" xmlns="http://www.w3.org/2000/svg" width="35.795" height="35.795" viewBox="0 0 35.795 35.795"> <g id="Bitpanda-Design-System-" transform="translate(-139 -7962)"> <g id="Group-33" transform="transla
2024-04-26 18:32:57 UTC	1113	IN	Data Raw: 36 61 31 32 2e 38 34 39 2c 31 32 2e 38 34 39 2c 30 2c 30 2c 30 2c 2e 31 33 31 2c 31 2e 35 33 32 6c 31 2e 34 38 37 2d 2e 33 33 34 2c 31 30 2e 34 31 37 2d 32 2e 33 33 35 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 38 22 20 64 3d 22 4d 35 2e 37 35 32 2c 32 32 2e 34 36 35 41 31 33 2e 30 31 36 2c 31 33 2e 30 31 36 2c 30 2c 30 2c 31 2c 35 2e 33 2c 32 31 2e 30 30 36 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 31 30 22 20 64 3d 22 4d 39 2e 38 31 37 2c 32 36 2e 30 33 33 61 31 31 2e 34 31 38 2c 31 31 2e 34 31 38 2c 30 2c 30 2c 31 2d 32 2e 35 38 2d 33 2e 39 31 39 6c 38 2e 32 34 35 2d 31 2e 39 34 34 2e 30 32 34 2c 38 2e 39 33 32 61 Data Ascii: 6a12.849,12.849,0,0,0,.131,1.532l1.487-.334,10.417-2.335Z" fill="#fff"/> <path id="Fill-8" d="M5.752,22.465A13.016,13.016,0,0,1,5.3,21.006" fill="#fff"/> <path id="Fill-10" d="M9.817,26.033a11.418,11.418,0,0,1-2.58-3.919l8.245-1.944.024,8.932a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50125	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	602	OUT	GET /media/BTC-halving/bitpanda-bitcoin-halving-countdown.jpg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	842	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/jpeg Content-Length: 335543 Connection: close Age: 20500 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=370843 ETag: "abbc6cd668a860bda8f7ece840a7a077" Last-Modified: Wed, 06 Dec 2023 12:38:05 GMT Via: 1.1 d7db6b9cdf796f6ea0cdbe5b3a75c84a.cloudfront.net (CloudFront) X-Amz-Cf-Id: dKGmxKxvkdVolDxeGmP_ahoLPyeF9L90FAtjR8wSHPve2QPl9PmJWQ== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-server-side-encryption: AES256 x-amz-version-id: PEhjySaprsRhDANZgzKEwNBzJsgTWUaK CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88c7caaa570-MIA
2024-04-26 18:32:57 UTC	527	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 64 00 64 00 00 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 01 02 02 02 02 02 02 02 02 02 02 01 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 ff c2 00 11 08 04 38 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 3a 00 01 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b 01 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 02 03 01 04 05 06 07 08 09 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f8 2f d8 d7 00 00 00 00 Data Ascii: JFIFdd8:/
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d9 0d 0f 2b f5 13 e5 7f 31 7b ab c5 f8 de 52 70 94 2c 21 32 72 a3 70 b2 8a 35 31 2a e9 d1 43 e7 4f ad ef 3e 49 fd bf ee 69 2c b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 ff 00 ab ca fa 46 f3 5f 9b 3e 8f bc ef c0 b7 8c ea 44 a8 94 57 15 c1 18 a4 57 04 ea a7 06 2a 2c 9d 9d 7e be 4f c2 57 b4 fd 61 e6 4f a0 fd 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: +1{Rp,!2rp51CO>Ii,F_>DWW,~OWaO
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 cf 5a 3e 6f ea 13 cb 7e 63 f7 9b 87 f1 3c ac a1 36 71 55 29 93 83 10 57 32 c8 a5 55 93 34 51 25 31 2a 24 ab 02 8a 15 93 04 49 11 95 9d a6 7d 5b 0c 6a 79 fb ce fc df e5 96 ae a7 18 4b b5 d1 4f 47 fa 7f c6 df 7f fb ee 95 b7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 37 7d 6e 6f d1 5f 9a fc e7 f4 a5 e7 3f 3c f2 36 75 22 18 89 51 29 d6 53 55 3a 70 46 64 a2 9d 46 45 32 9a 31 4a 72 a0 00 a6 4a 8d 4c 4b 39 9d ec a4 f6 ba f3 ab f2 7f 39 34 7e 45 d1 9a f7 75 f8 ee f4 f3 bb fa 27 c5 0f a2 7f 43 f0 5b 5d 30 00 00 Data Ascii: Z>o~c<6qU)W2U4Q%1*$I}[jyKOG7}no_?<6u"Q)SU:pFdFE21JrJLK994~Eu'C[]0
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 26 df f6 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1f 52 fe 33 f2 6f d3 37 03 e0 89 46 a2 54 d0 ad 8b 99 cc 15 c5 38 31 16 20 c1 98 23 32 ca a9 18 32 00 02 8a 19 76 e6 76 7d 1e 10 d6 f9 a7 41 f4 7e 2b d0 da 1a 0e 36 23 2c f5 73 a9 f7 6f 29 3d b7 ee 2e af fa 0f af 4a b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 e4 73 35 e2 aa 54 ec 54 af 12 58 9c e6 7d 3e 77 ae df 39 ec 7a c5 f2 6f a1 7a a7 f2 af 71 d8 5f 03 f4 ab 1e 7f 6a da 8b d9 52 8c e4 86 61 14 90 b2 5a a5 34 65 63 5c d9 cc 90 94 99 85 95 78 9a 55 d2 c4 21 1a a5 c5 52 d9 ad 6f 66 ad 4b f4 21 9d 2a fd 0e 44 9b 7c 8a 9b 7c 7b 8d ce 1d 3d ae 24 bb fc 29 f7 fc fc 3a 7e 6d bd e7 28 ef 79 a9 37 7c dd 3e 8f 9d 74 39 38 Data Ascii: &2R3o7FT81 #22vv}A~+6#,so)=.Js5TTX}>w9zozq_jRaZ4ec\xU!RofK!*D\|\|{=$):~m(y7\|>t98
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: f2 80 2a 65 1a b1 09 e6 58 e2 b5 91 9a ba aa 57 1a ca 6e e1 a5 92 a7 47 25 56 96 c1 1e 0e e3 57 93 de 35 7c 2f 36 6b fe 7e e6 79 fc 07 b4 fc af 25 cf 1a dc 8e 63 ab d8 ef b1 f6 db 16 7b 99 78 f5 2f f1 b9 77 8d ab 9c 5b 5e 76 75 ee fb bc 5b f4 7f a0 3c 3c ef fe a6 ef 47 2f c6 fd 5e f9 8f c8 9d 82 af cf 48 cc c9 31 1d 82 7d 1a e9 f5 b3 4f e3 be 78 68 fc b7 a6 55 6f 6b f0 bb 1d 66 ff 00 44 bd 1f ea 3f 2e bd af ec ee 26 ea 7b 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 ad db ee 7c 7e c5 fc 76 d7 a9 9f 9f fe e1 a4 f8 ef a1 dd d7 66 7f 52 ed 87 5e cc a5 16 df 53 9b b8 e6 e6 99 54 ae c9 a1 28 d3 65 de 31 4e bb a9 57 6d 48 62 85 73 92 39 92 a9 c2 bc c9 29 c2 0b 3c 66 9d 79 a7 8b Data Ascii: *eXWnG%VW5\|/6k~y%c{x/w[^vu[<<G/^H1}OxhUokfD?.&{`U\|~vfR^ST(e1NWmHbs9)<fy
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: ef d3 46 77 f2 ae ea 2a b5 5b 52 ac cb 14 ec d3 aa 72 c2 c8 b1 2d 79 a3 55 94 63 65 b6 27 1a e5 41 3b 64 ad 63 9a 55 91 cd b2 36 51 9d 04 e8 67 16 31 5a 33 6e c5 85 90 c6 57 8c 7a bc 7c a3 46 ca ad 33 46 2e ea 31 ca 6c e1 af 63 bb a3 65 6e 9e 36 cd 4b 5b 34 29 59 a1 6b 2d 7b 1d be 54 b9 d3 b5 b7 4a 8d bc c9 f6 79 b6 db 7c 79 6f d1 8e c7 2a 4b 39 73 5f cf ab b3 cd a3 b7 c8 a1 6e 94 fb 5c ba 17 e8 63 76 74 b1 fb 3c dc 3e ce be bd 7c 75 2d 99 71 7e d5 fc 39 bb d4 e1 0e 97 a0 e1 9e 9f a9 e2 ed ce f7 1e ef 75 75 4d 8d dc 25 db 58 ab b6 6c 6e d8 b5 4a d6 78 a1 9c c9 66 64 c6 24 24 c8 23 94 8a f1 46 cb 25 46 bd 71 96 51 9e 35 55 ae 15 d4 5d 62 9b c8 6a 64 29 e6 65 69 e7 ec f8 f2 dc 8f a9 e1 b9 27 53 e5 5c ad 9f 85 73 fd 3f 19 ec 8f 3f cd f3 66 be 9e ff 00 5f a3 Data Ascii: Fw[Rr-yUce'A;dcU6Qg1Z3nWz\|F3F.1lcen6K[4)Yk-{TJy\|yoK9s_n\cvt<>\|u-q~9uuM%XlnJxfd$$#F%FqQ5U]bjd)ei'S\s??f_
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 73 a7 5c a4 d8 41 2a 71 8d 4c c2 6c 8c 42 28 67 11 c6 20 c5 48 d3 3c 31 3c 6b ad 9a 6f 23 a9 90 8e 96 4f 5f 9d 9a af 8b b4 43 ce f2 06 9f 83 e4 2d 7f 98 72 76 3e 27 c8 51 f9 a7 29 ea 79 7e 47 d7 e7 ed b0 e7 65 f1 45 c6 10 cc 71 79 b3 17 1b b5 d9 ee e8 16 ef e9 36 f4 f8 fa ef 5f a8 cb da e9 97 7d 47 a6 de 9f fa 1f d6 da ed ea 77 53 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d8 de 4e 8f d5 af e2 ff 00 b2 7d 11 7e 3c fd 45 b7 51 e8 b3 3d 2e 75 ef 67 4f 21 bb a9 7b bf 5d c6 fe 9d d6 c4 2d 76 21 f1 ab fb 23 f1 1f d6 4f e7 2f d5 fc 9b cf ea 51 66 28 cc c4 d6 46 9e 73 47 2a 54 ca 9e 73 6e cd 96 33 6b 95 94 b3 8f c2 cf 0c 4c a1 af c9 85 9d 7a fe 2a c0 ec 51 ad db ad ad 67 5f 5c bb 57 Data Ascii: s\AqLlB(g H<1<ko#O_C-rv>'Q)y~GeEqy6_}GwSdN}~<EQ=.ugO!{]-v!#O/Qf(FsGTsn3kLz*Qg_\W
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 6f 5f 83 fd 2f 13 e5 7b f5 a7 e1 7f a7 1f cc ff 00 b5 b9 d7 4b ad 42 c5 b5 90 a3 98 d9 4f 18 d9 42 c6 ea f0 b3 af 5d 9b 5b 96 be a7 6e b6 9f 3a 74 bd 8d 3d 43 63 9f a4 4f 53 49 b3 4b 52 d9 d2 d6 2e d3 d3 f6 b4 35 79 eb 6b 96 e9 e2 a7 af 88 bf 56 c2 70 c4 d9 ab 8b be 9c 6d ba 58 cb b5 70 d7 42 d6 75 5c c2 14 73 5d ae 63 86 d9 a6 0a d2 ae 84 e1 69 99 50 95 70 ce bb 39 a5 9a 25 c6 2d ec 8f 72 37 ee fa b1 f7 5e a3 d3 be e7 4b 89 f5 e9 f8 ed f0 1e 4b ca 2e 4f 26 52 9c b0 9d b4 92 b7 b2 74 ec 95 b5 f7 5b d9 2b 4b 53 4a 52 db 8b 49 d9 61 75 96 16 df 8b d8 b3 03 b1 b1 83 d8 da c5 6c 59 87 bb 67 1b 7c ec 2c c5 85 f7 5b 25 23 12 33 49 75 0b 25 2d 68 10 96 23 2c cb 66 29 62 99 71 91 18 c5 14 22 96 ec cd 1c 4a 46 cc 4f 45 73 e2 15 8a f1 a2 e7 15 dd e3 4e e2 1a b7 d1 Data Ascii: o_/{KBOB][n:t=CcOSIKR.5ykVpmXpBu\s]ciPp9%-r7^KK.O&Rt[+KSJRIaulYg\|,[%#3Iu%-h#,f)bq"JFOEsN
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: f5 0d ec bd 2f d4 17 ae f5 1e 6b f3 39 fc 3d 45 1e ae 76 7a 9f 98 cf cb be 75 90 bf 67 f4 1a fa 17 ba f9 d1 e1 f2 f9 f7 6a ee e8 ef ee 75 8a b8 f1 c4 a5 99 9e 7a c3 1c 7b 81 bb b3 e6 75 34 f5 ca 53 f7 f7 6e ff 00 10 a9 af 3d 39 7a ed 75 9e 32 57 1e 09 9b e9 3a c9 fc cf 46 3d 85 4f d5 a9 cb e1 92 ba ba 44 b6 58 a1 98 c9 98 d3 b6 c9 72 83 11 66 4c 21 84 b0 4b 98 4f 8c 46 69 23 0a 72 4b 28 cc cc 15 ce 4d 5c 50 cc 50 89 14 6b c6 aa a8 56 cd 75 a3 5d 68 d3 3e 21 52 11 95 54 15 cd 99 4f 8a a5 cc e0 b6 5c 5b 0c c6 8c a7 6b 6e cd 15 97 90 ab b3 f6 6e 70 af 2f af e6 8f a3 d7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ee 57 9f e7 fd b3 7f 38 7f 48 fa 07 f8 d3 f6 15 1d 4d e9 ea b5 89 55 92 e7 31 b9 b6 Data Ascii: /k9=Evzugjuz{u4Sn=9zu2W:F=ODXrfL!KOFi#rK(M\PPkVu]h>!RTO\[knnp/W8HMU1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50126	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	596	OUT	GET /media/New%20navigation_Rebrand%203.0/corn%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/png Content-Length: 1283 Connection: close Age: 19240 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=2616 ETag: "d3c910513c2e02a766ef2fbc4e6e4aa5" Last-Modified: Tue, 30 Aug 2022 08:01:16 GMT Via: 1.1 ef3100c3f2434fd3889627d60775da30.cloudfront.net (CloudFront) X-Amz-Cf-Id: hVx-vpyVs7YZaCOIXjVWN3ZNfolRHPgIqbN_GYuQ5KYCrVDuQt_vWA== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: lDYz5oHjmBwefPWyrFklMmL3QF_sb9uC CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88c7983da1f-MIA
2024-04-26 18:32:57 UTC	570	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 f6 50 4c 54 45 00 00 00 ff df 40 ef df 40 f7 df 40 f7 d7 40 fa da 45 fa da 40 f4 da 40 fa d5 45 f7 db 44 f9 d9 43 f5 d9 46 f5 d9 43 f7 da 42 f8 dd 43 f8 db 42 f6 db 42 f6 d8 44 f9 db 44 f7 db 44 f7 d9 44 f8 db 44 f6 da 44 f8 da 43 f6 da 45 f6 da 43 f8 db 44 f6 d9 44 f6 d9 43 f8 da 44 f7 da 44 f8 da 45 f8 da 44 f6 db 44 f6 da 44 f7 da 45 f7 da 43 f7 d9 45 f8 da 44 f6 da 44 ff ff ff ff fd f3 fe fd f4 fe fb e8 fe fa e8 fe f8 dd fe f8 dc fd f6 d0 fd f4 c4 fc f4 c5 fc f2 b9 fc f1 b9 fc f1 b8 fc ef ad fb ef ad fc ee ae fc ee ad fb ed a2 fb ed a1 fb ec a2 fb ec a1 fb eb Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTE@@@@E@@EDCFCBCBBDDDDDDCECDDCDDEDDDECEDD
2024-04-26 18:32:57 UTC	713	IN	Data Raw: 4c 75 89 65 31 7f 7f 74 42 15 bf ad c9 6d d5 79 78 5a 6c 9e 95 c9 7d c3 75 7a f5 1b 96 45 bf 00 fc e3 29 25 0b 9c d1 25 71 75 57 5a b5 01 ed d3 4f c2 a3 de 2d 64 44 8c 69 22 f4 6a 2b c4 e8 1e 20 4a 3c 84 60 c4 9f d2 98 8b cc 21 6d da 27 47 b4 48 8a 72 a4 c3 14 98 c7 23 2e ff 66 d9 94 1d d8 88 a5 82 67 34 46 26 ea 94 81 23 3e 55 19 c8 52 db 9b 45 a5 e8 33 65 a2 5a 1c 36 03 66 94 9e 42 a3 e5 cc 6c 5f 89 f2 b3 05 d2 b2 f1 e2 69 06 3d 37 57 66 05 53 22 95 a4 24 05 86 a2 fe c6 dc 1c a5 56 22 a1 3a 96 cf 09 c0 54 07 0d 7d eb 38 7a 2f 00 2e a4 55 0c 77 8e 9f 7c a4 b8 b8 28 50 e1 3e e9 3a 03 52 79 4c 52 20 df 8f 52 64 94 4d b9 e6 28 da 2b b4 22 f5 dd 01 c5 4a c9 32 55 aa 91 d4 f0 cf 55 d1 b6 ad d6 65 9f 0e 01 b5 ac 47 e0 cc e5 b9 24 93 ac f0 8a bc 73 06 44 4f d5 Data Ascii: Lue1tBmyxZl}uzE)%%quWZO-dDi"j+ J<`!m'GHr#.fg4F&#>URE3eZ6fBl_i=7WfS"$V":T}8z/.Uw\|(P>:RyLR RdM(+"J2UUeG$sDO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50124	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	595	OUT	GET /media/New%20navigation_Rebrand%203.0/metals-1.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/svg+xml Content-Length: 875 Connection: close Last-Modified: Wed, 29 Dec 2021 09:33:15 GMT ETag: "8e997b7e5b9cd25f29f1a81ee8fd285c" Cache-Control: public, max-age=36000 x-amz-version-id: jupUmD15ehY6.s3a99r6.rNNOjl53rY0 X-Cache: Hit from cloudfront Via: 1.1 8a771ca27e5a3c9e06b12b7af5d25aa4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Kur3cV4YKxt4uRqp5zF9lSXkHWypYlUxoEfjVCFvdfmhxCiUJFuFFg== Age: 20501 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88c7e3c5c6a-MIA
2024-04-26 18:32:57 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 76 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 42 69 74 70 61 6e 64 61 2d 44 65 73 69 67 6e 2d 53 79 73 74 65 6d 2d 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 33 39 20 2d 37 39 30 36 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 53 68 61 70 65 2d 67 6f 6c 64 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 33 39 20 37 39 30 36 29 22 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="v2" xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Bitpanda-Design-System-" transform="translate(-139 -7906)"> <g id="Shape-gold" transform="translate(139 7906)">
2024-04-26 18:32:57 UTC	256	IN	Data Raw: 31 2e 36 38 37 2d 34 2e 35 41 31 2e 31 32 35 2c 31 2e 31 32 35 2c 30 2c 30 2c 30 2c 32 37 2e 35 36 33 2c 31 38 5a 6d 2d 36 2e 37 35 2d 39 48 31 35 2e 31 38 38 61 31 2e 31 32 35 2c 31 2e 31 32 35 2c 30 2c 30 2c 30 2d 31 2e 30 35 33 2e 37 33 68 30 6c 2d 31 2e 36 38 37 2c 34 2e 35 41 31 2e 31 32 35 2c 31 2e 31 32 35 2c 30 2c 30 2c 30 2c 31 33 2e 35 2c 31 35 2e 37 35 68 39 61 31 2e 31 32 35 2c 31 2e 31 32 35 2c 30 2c 30 2c 30 2c 31 2e 30 35 33 2d 31 2e 35 32 68 30 6c 2d 31 2e 36 38 37 2d 34 2e 35 41 31 2e 31 32 35 2c 31 2e 31 32 35 2c 30 2c 30 2c 30 2c 32 30 2e 38 31 33 2c 39 5a 22 20 66 69 6c 6c 3d 22 23 62 36 38 65 34 36 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e Data Ascii: 1.687-4.5A1.125,1.125,0,0,0,27.563,18Zm-6.75-9H15.188a1.125,1.125,0,0,0-1.053.73h0l-1.687,4.5A1.125,1.125,0,0,0,13.5,15.75h9a1.125,1.125,0,0,0,1.053-1.52h0l-1.687-4.5A1.125,1.125,0,0,0,20.813,9Z" fill="#b68e46" fill-rule="evenodd"/> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50122	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	616	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/leveraged_token-menu.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/svg+xml Content-Length: 4072 Connection: close Last-Modified: Tue, 11 Apr 2023 16:29:34 GMT ETag: "1ff45187322fe8a144d1cab5f34602cc" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: 8RxqRsFo7wFfGYO7GBjtL6LCyrnYj7SD X-Cache: Hit from cloudfront Via: 1.1 4c3d8e28c41258b22a9e9534d51ead58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Wts0UbPbB_RAAwJxivEMtcfO92oUx1cYN9XY_ustUFH2OnU9n_49ug== Age: 19949 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88c7d9767c8-MIA
2024-04-26 18:32:57 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 65 6c 6c 69 70 73 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 37 2e 39 39 39 38 22 20 72 78 3d 22 31 38 22 20 72 79 3d 22 31 37 2e 35 31 33 35 22 20 66 69 6c 6c 3d 22 23 37 39 32 31 45 41 22 2f 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 30 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg"><ellipse cx="18" cy="17.9998" rx="18" ry="17.5135" fill="#7921EA"/><path fill-rule="evenodd" clip-rule="evenodd" d="M10
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 2e 34 33 35 36 20 32 32 2e 38 38 37 35 20 32 34 2e 30 33 32 38 20 32 32 2e 34 38 36 39 20 32 34 2e 34 32 39 33 20 32 32 2e 30 36 37 31 43 32 34 2e 38 32 33 33 20 32 31 2e 36 35 20 32 35 20 32 31 2e 32 33 37 20 32 35 20 32 30 2e 38 34 32 31 43 32 35 20 32 30 2e 35 36 35 39 20 32 35 2e 32 32 33 39 20 32 30 2e 33 34 32 31 20 32 35 2e 35 20 32 30 2e 33 34 32 31 43 32 35 2e 37 37 36 31 20 32 30 2e 33 34 32 31 20 32 36 20 32 30 2e 35 36 35 39 20 32 36 20 32 30 2e 38 34 32 31 43 32 36 20 32 30 2e 39 34 36 35 20 32 35 2e 39 39 33 31 20 32 31 2e 30 34 39 35 20 32 35 2e 39 37 39 36 20 32 31 2e 31 35 30 38 43 32 35 2e 39 39 32 39 20 32 31 2e 31 39 35 38 20 32 36 20 32 31 2e 32 34 33 33 20 32 36 20 32 31 2e 32 39 32 35 56 32 35 2e 32 39 32 35 43 32 36 20 32 35 2e 39 Data Ascii: .4356 22.8875 24.0328 22.4869 24.4293 22.0671C24.8233 21.65 25 21.237 25 20.8421C25 20.5659 25.2239 20.3421 25.5 20.3421C25.7761 20.3421 26 20.5659 26 20.8421C26 20.9465 25.9931 21.0495 25.9796 21.1508C25.9929 21.1958 26 21.2433 26 21.2925V25.2925C26 25.9
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 32 2e 37 31 37 38 20 31 30 2e 37 36 30 33 43 31 31 2e 35 33 32 34 20 31 31 2e 34 32 32 33 20 31 31 20 31 32 2e 31 36 37 35 20 31 31 20 31 32 2e 38 34 32 31 43 31 31 20 31 33 2e 32 33 37 31 20 31 31 2e 31 37 36 37 20 31 33 2e 36 35 30 31 20 31 31 2e 35 37 30 37 20 31 34 2e 30 36 37 32 43 31 31 2e 39 36 37 32 20 31 34 2e 34 38 36 39 20 31 32 2e 35 36 34 34 20 31 34 2e 38 38 37 36 20 31 33 2e 33 34 30 34 20 31 35 2e 32 33 35 43 31 34 2e 38 39 31 20 31 35 2e 39 32 39 33 20 31 37 2e 30 36 38 34 20 31 36 2e 33 37 31 35 20 31 39 2e 35 20 31 36 2e 33 37 31 35 43 32 31 2e 39 33 31 36 20 31 36 2e 33 37 31 35 20 32 34 2e 31 30 39 20 31 35 2e 39 32 39 33 20 32 35 2e 36 35 39 36 20 31 35 2e 32 33 35 43 32 36 2e 34 33 35 36 20 31 34 2e 38 38 37 36 20 32 37 2e 30 33 32 Data Ascii: 2.7178 10.7603C11.5324 11.4223 11 12.1675 11 12.8421C11 13.2371 11.1767 13.6501 11.5707 14.0672C11.9672 14.4869 12.5644 14.8876 13.3404 15.235C14.891 15.9293 17.0684 16.3715 19.5 16.3715C21.9316 16.3715 24.109 15.9293 25.6596 15.235C26.4356 14.8876 27.032
2024-04-26 18:32:57 UTC	754	IN	Data Raw: 2e 36 33 38 34 20 31 36 2e 39 31 31 38 20 31 32 2e 39 33 31 37 20 31 36 2e 31 34 37 37 43 31 32 2e 31 36 32 31 20 31 35 2e 38 30 33 31 20 31 31 2e 34 39 39 39 20 31 35 2e 33 38 38 37 20 31 31 20 31 34 2e 39 31 30 39 56 31 37 2e 32 39 32 36 5a 22 20 66 69 6c 6c 3d 22 23 42 43 39 30 46 35 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 32 35 36 31 20 31 32 2e 36 34 32 36 48 32 31 2e 35 37 36 37 56 31 31 2e 36 33 34 48 31 38 2e 39 33 37 56 31 31 2e 35 33 38 36 4c 32 30 2e 30 34 35 32 20 31 30 2e 35 30 35 31 43 32 31 2e 31 33 36 37 20 39 2e 34 39 36 35 38 20 32 31 2e 34 38 39 35 20 38 2e 39 33 32 31 33 20 32 31 2e 34 38 39 35 20 38 2e 32 35 31 34 36 56 38 2e 32 33 39 30 31 43 32 31 2e 34 38 39 35 20 37 2e 32 30 35 35 37 20 32 30 2e 36 32 36 32 20 36 2e 35 Data Ascii: .6384 16.9118 12.9317 16.1477C12.1621 15.8031 11.4999 15.3887 11 14.9109V17.2926Z" fill="#BC90F5"/><path d="M17.2561 12.6426H21.5767V11.634H18.937V11.5386L20.0452 10.5051C21.1367 9.49658 21.4895 8.93213 21.4895 8.25146V8.23901C21.4895 7.20557 20.6262 6.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50127	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	855	OUT	GET /media/New%20navigation_Rebrand%203.0/bpc%20b%20logo%20rounded%20square.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	803	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/png Content-Length: 616848 Connection: close Age: 20501 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=751591 ETag: "695a9db4ed155460a0de9301862b8d62" Last-Modified: Thu, 06 Oct 2022 14:45:00 GMT Via: 1.1 dcaec0b05596b42ef5dab9e145ac961e.cloudfront.net (CloudFront) X-Amz-Cf-Id: -JlhZBAXXY9WvqCi6SMDq41964Ssriuov-N_wIYG5m2FvpyvhESmEQ== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: l_.nCNDdArISJEY86AJMtQ_2FzYimppG CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88d1e5f3dd9-MIA
2024-04-26 18:32:57 UTC	566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 04 00 08 06 00 00 00 7f 1d 2b 83 00 09 69 57 49 44 41 54 78 da ec 97 b1 8e 1d 45 10 45 cf 09 90 6c 84 ac 05 84 70 00 42 20 7f 16 09 1f 43 c4 8f 11 f3 15 46 08 d9 96 03 3b b0 7c 2d 79 67 df 9d ee 9e d9 75 64 39 78 37 e9 ee aa 99 ba 55 5d 55 d3 d3 fe f9 f7 ef 5c 71 c5 17 82 6f 91 a7 84 1f 80 a7 c8 8f c0 f7 c0 0d e4 86 78 03 3c 51 9e 40 1e 01 8f 03 df 80 5f 01 48 1e 03 8f 00 40 6e 11 c0 6d 5c a7 08 09 20 23 56 19 66 53 39 9a 92 62 51 a4 32 2b ab 78 13 26 01 41 bc d5 1b 8c 60 0d 14 29 ef 09 6a 1b 12 51 20 21 88 6c 72 bc 7b a6 cf 11 90 91 33 b9 27 d8 8a 36 eb eb 36 1a 88 40 40 49 40 d3 3d c8 e9 fe ad cb 6c 3c 42 70 e2 86 b0 8f 15 aa 17 09 19 f2 e0 94 58 40 ca 23 b8 4d c2 bc 07 02 a0 9b 28 81 cb Data Ascii: PNGIHDR+iWIDATxEElpB CF;\|-ygud9x7U]U\qox<Q@_H@nm\ #VfS9bQ2+x&A`)jQ !lr{3'66@@I@=l<BpX@#M(
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: ff 22 cf 81 ff 48 9e 03 2f b8 e2 8a 2f 10 fe f5 cf 1f 5c 71 c5 67 c2 77 c2 b3 c0 33 e1 b7 c8 af 86 9f 91 9f 08 bf 20 5f 4f e7 55 87 40 a8 6c bc 2a 09 e9 e1 04 52 1d f8 29 3f 87 2e d3 f2 27 c4 f9 77 b4 b6 e7 2b 94 64 30 78 2f 3d c1 ec 2f 2a 92 70 e1 c0 b2 4e 28 ff f1 ef ed b0 79 46 36 f4 ae 41 ee 78 2b 07 1c af 53 eb 7e 55 b2 46 5a 49 ed 28 00 e6 f4 60 7e f0 82 d1 43 39 04 0e 3d ab c6 fa 6e 28 95 b0 f7 21 d5 4f a8 2e 80 63 ec e6 03 7b ef 15 b2 6b d7 b5 67 9d 47 62 82 f9 4d 0c 88 d8 15 dd 10 42 f4 17 45 b0 77 37 54 c4 82 8a 5d c1 8e 5d b7 54 04 7b d7 0d 2b 28 a2 82 5d 54 d4 60 0b 18 7b 17 4b ec 82 bd 20 0a ba 63 41 04 ff 43 e4 5f ef 33 ae 71 ce 79 3d eb 8d 26 26 df f7 ad b9 78 d6 7d df 57 99 63 96 d1 e7 98 63 7e 37 86 04 32 73 de 05 12 bd f7 23 cf 7e 0c 2c Data Ascii: "H//\qgw3 _OU@lR)?.'w+d0x/=/pN(yF6Ax+S~UFZI(`~C9=n(!O.c{kgGbMBEw7T]]T{+(]T`{K cAC_3qy=&&x}Wcc~72s#~,
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 5b e7 49 21 68 4e cf 88 eb fb e2 7f 6c 4a 61 be cf 6b 38 d3 71 d4 f3 26 1a f6 36 1b c8 5e 4d 0e 71 78 7d 39 a9 fc 7c 42 ef db ed c6 e8 d7 22 07 62 8d 26 b7 86 63 36 db 3a 83 b3 52 7a 4a b2 f8 eb e0 14 ae 0a 1c 28 9f 17 1c f8 8f 96 03 63 df e2 d4 f5 ce 8c ee db f8 68 3a 30 0d 6d 64 e3 e0 e5 54 ff e6 29 7e c7 83 be 41 fc d2 0e 82 fb 99 83 eb bf b1 34 a6 cb d2 a0 fc 78 a0 35 33 e2 aa c7 4b 77 34 ff 03 c9 bf 1d f2 ef c4 fc db 49 fe e5 24 ff 6d be 95 6f e5 17 53 e1 af f8 85 df 1c 00 df ca f7 2e 3f 15 f2 1b 26 f9 6d 62 7e eb 90 df 9a e4 d7 f1 50 86 f3 16 a0 bb 8c 4b 9e 0a 43 fc ca 22 cd 84 49 1a 96 13 1a bc fa 58 b9 e7 02 38 a3 ba b9 cb 08 cc 52 2a c3 c5 c8 d0 dd 60 b6 90 27 be 4b c3 56 9d a8 6e bb c3 e8 67 a5 f8 1e 12 f9 79 b9 8f 48 0b 50 b6 71 32 0a cd 59 d3 Data Ascii: [I!hNlJak8q&6^Mqx}9\|B"b&c6:RzJ(ch:0mdT)~A4x53Kw4I$moS.?&mb~PKC"IX8R*`'KVngyHPq2Y
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 61 f5 0d 77 f2 47 af b9 3e d7 c5 93 0e 6a 6c da ca 5e 8e a3 0c 4f 6c 9a 6a 71 34 f7 06 94 46 da f1 d4 5c 9d 15 b5 b7 b6 45 71 36 f9 3e 8d 97 98 2a ca f1 ed 95 b1 bd 3a a5 fa e9 c6 74 2b a1 2e d7 04 92 5f cf 29 5c 95 dd 19 99 59 d7 aa 3d 77 5c dd 59 fa 6b bb 9a d3 bc 45 e7 8b ef bd 8e 7d 8e 9f 63 e0 0f a9 3a 20 df b0 9a 7c b5 70 cc c1 83 7e cc f0 55 08 f3 c8 a2 8f 45 a9 36 ec 33 ef 42 ef 29 23 6e 38 de f3 87 c8 e4 69 fa fa c9 10 ad 08 1a 96 13 b7 8a e9 13 80 2e ac bc 50 e6 75 40 fd 5f 13 7e 41 c8 3f 19 f3 4f 26 f9 2f f3 ad 7c 2b df 22 00 be 95 97 f2 cb 07 7f bb c8 ef 1a f2 bb 11 7f ce 12 4a bd c7 d1 ac d5 a7 2a 4b f1 98 2b 9e 0a e5 ca 44 5f b2 fb 90 09 2f 89 a1 0e 6b 73 7b d8 ef fb ca 7a 45 88 1c 9b 9e 39 17 83 d0 11 09 1c ea e4 86 e7 54 eb 7b 12 9a ea d3 Data Ascii: awG>jl^Oljq4F\Eq6>:t+._)\Y=w\YkE}c: \|p~UE63B)#n8i.Pu@_~A?O&/\|+"JK+D_/ks{zE9T{
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: e0 a9 83 8e d2 48 2b 6b 84 4b 22 c0 f9 cd b1 9f 97 12 eb 5d a4 92 4c 49 a2 c1 2f 6f cb 86 61 c3 25 5a be ae 95 48 cd 58 c6 0c 47 db 8c d4 2a f8 47 ff 49 60 00 d8 09 30 9d e3 8b 64 9c 43 ba 56 b6 9b 58 b4 d5 ba 4d 3b 90 59 79 c5 a7 be 1e 35 2e 74 35 e8 0e 89 97 bc 15 b2 c7 11 99 55 d5 85 1d 44 bf fc e1 97 6a 1d 45 72 68 ba 14 9f 6d 95 f6 0d c2 c3 de 76 e8 87 cc 98 15 ff 61 5e d8 3a 7a 3b 04 dc c7 48 b5 31 1b a8 c8 a0 d7 2d 19 35 f7 06 18 5a 1a 15 b1 77 a4 af 15 7f 93 7b 42 4f b3 f9 e9 90 73 82 33 4e 24 98 0f ba 70 29 b3 63 3a cd 75 96 31 d4 db b7 d1 c0 6c 21 01 22 86 70 6e 04 c7 4e c2 36 cf 84 bb e5 d9 b9 50 64 8d e5 a0 28 09 f6 a8 15 a1 3b 38 e3 ed 1c da 61 20 38 30 0d 67 2e 91 78 8e 7b 3b 5b 5d 90 67 6e 19 7a d7 31 96 f8 d2 19 fd b8 31 38 5f 65 9b 15 6d Data Ascii: H+kK"]LI/oa%ZHXG*GI`0dCVXM;Yy5.t5UDjErhmva^:z;H1-5Zw{BOs3N$p)c:u1l!"pnN6Pd(;8a 80g.x{;[]gnz118_em
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: ff c4 18 96 31 28 cf 17 1c e3 8f 9d 96 87 27 4a f9 62 ca 39 2b ad 2c fa 7d 3f 26 d3 f9 be 7e 50 de 61 4e 89 f6 35 49 54 11 78 43 41 32 4e 21 73 cd 61 d4 da c3 38 b3 74 35 fe 3d 91 b1 7b eb 55 e7 01 08 07 4e 7e b5 58 64 fd e5 87 78 e6 53 d0 e9 9f 67 ef a2 07 5c e6 57 6d 0f 3d 9d 0c ca b0 f0 bd 97 30 7e c0 7f 93 43 b4 bb 7e 7e 33 90 36 3e 57 12 57 ea 80 fe 1b 28 dd 71 99 9c 3d e6 31 97 16 36 80 95 67 83 d7 fd 22 c2 86 fe e4 ff 79 ca 16 3f 78 a3 d8 ee 93 eb 16 4e 16 ba d1 84 5d c4 ca c8 19 0d 7b a3 e0 af 90 f0 07 26 f9 07 93 fc f7 49 fe 26 c8 6f 99 6f e5 87 be 7c 73 00 fc 90 14 cd af 92 e4 cf 88 f9 8f 30 ff 32 e1 8f 25 fc ec 2d 64 cf 0c e5 7d 72 be b2 c2 f4 71 56 78 b9 c9 58 e7 e2 75 3f 6b 3f 46 af 92 4e f3 d0 81 a1 d1 7a cf e9 43 7b 95 31 4f 80 b3 1f 36 44 Data Ascii: 1('Jb9+,}?&~PaN5ITxCA2N!sa8t5={UN~XdxSg\Wm=0~C~~36>WW(q=16g"y?xN]{&I&oo\|s02%-d}rqVxXu?k?FNzC{1O6D
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 76 5e e9 6b e9 5b d6 1e 72 65 ae 56 ae 15 f4 be 82 e9 fa bc 16 e6 a1 c7 31 6d c7 5e a8 7d 0c 61 96 82 b5 85 f9 54 37 b7 a9 5d 7f 3a 2b b9 d7 46 b7 14 f5 3a 8e fd 7b ae b9 cf 13 37 2b 93 ff 86 d8 df ec b1 bb 8d fb dc 6b 43 12 43 7b b6 b1 4e 34 ab d5 99 1a ca 99 97 9d f8 0c b2 f0 cc 50 75 5a 4d e5 b3 e3 22 4f 58 83 50 d3 1f 76 a8 39 6b c5 c2 03 d7 ae 90 4d e0 a9 2e b0 b0 6b d5 53 78 25 ab da 6a 97 e7 99 bf ce bc ef f7 69 f8 6b 24 ee 38 50 f3 5d f8 0d 83 1f f2 3c 12 f2 9e 9b 9e af 1a 82 e7 50 9a 0d 10 b3 c7 66 fa be 94 d6 4f 09 66 ee be e2 05 97 dd bd e0 d3 58 19 e2 5e d7 4d b8 72 b2 7d b4 a2 75 34 a0 26 37 67 86 cf 81 79 1d a4 b9 7e 35 bb 37 ac e8 97 2b bb 1f e2 6a fa 1d 06 d3 2e 3c 98 2d 6b ce ed b3 da df 99 7e c1 05 63 cf e6 4c fa c6 e0 3a d2 f1 5a 7a 4c Data Ascii: v^k[reV1m^}aT7]:+F:{7+kCC{N4PuZM"OXPv9kM.kSx%jik$8P]<PfOfX^Mr}u4&7gy~57+j.<-k~cL:ZzL
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: e2 79 a3 8c f3 9d f0 32 30 d5 7e b9 ad 03 4b 87 e7 99 3d 2f 03 86 a9 ff 39 66 6e dc c4 ea 8e 3b 09 e9 f0 06 0e 5a 27 86 b7 03 f4 99 e1 65 d9 c2 fb 04 12 5a 86 c0 c8 d7 ae fa 36 ff 45 db 3b 66 a1 e9 81 b8 24 03 0f dd cc 3d 5f 32 97 de a2 44 18 ba 35 e9 a8 c7 4b 9c fd 5b 87 f8 1e aa 96 21 06 88 cc e8 03 f3 94 96 5c 6e e3 ff 0e 65 df 22 ca b1 33 8f 45 06 1e 47 3d 1b 1a 40 35 80 3e d5 e8 0a 1f db b5 c0 19 b1 68 42 51 17 5f 5b 69 d1 c2 f1 dd b7 64 eb 6e de f5 d1 5f 89 e4 cf 48 f2 9f f1 93 d1 00 3f 9e 6f e5 07 ae 7c 73 00 fc 32 5c 4c 7e 5b e3 3f 4a f2 0b 93 fc a1 89 3f 2d f0 60 ec 84 c7 ea 0e 9c e1 3f e8 19 2a 8e 2b 99 cf 6b 0e 1b 47 48 e8 5e 15 92 54 56 57 7b ef ed dc 62 d5 3f 9f 4e 45 1e 6a b2 e1 96 a9 2e 63 e8 bc 6c a8 de 9f 3c e0 30 75 e2 16 f0 89 f1 ba e7 Data Ascii: y20~K=/9fn;Z'eZ6E;f$=_2D5K[!\ne"3EG=@5>hBQ_[idn_H?o\|s2\L~[?J?-`?*+kGH^TVW{b?NEj.cl<0u
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: e3 f5 fc 7c db cf e5 a7 9f 9d 70 a9 db 3e ec 54 22 b7 bc 04 f7 4d a7 f7 6c f5 35 6e 26 b0 07 c2 67 1b a4 92 bc 9c fd 63 aa aa d2 7b 69 5d 8a 0d 64 15 57 f2 c0 7c ad 7c 9e 14 8b c9 9a 1c 08 af 67 49 ef 97 df d5 5e 4e 3c 9b 5f 85 71 9b 26 d6 24 39 c2 13 4f 74 37 85 0f 7e a9 9b 9e 99 f9 7d 4f 36 f7 3e 5e 72 49 5a 97 4a 78 a6 91 4e 68 94 82 ec bb 09 c5 18 1d dd b0 27 12 c0 91 f5 7f 14 8a ef b9 af b4 e7 23 24 3e 71 5b 63 16 d8 d0 84 c7 93 ce 2e ca ce 99 8d e1 4c 6e 37 6d da b9 48 3a 21 c9 2b 2f 99 c2 2d 7d d3 95 67 f2 92 df e2 1d bf 29 7e 46 12 d9 3d 33 ae 07 e9 3c 00 58 79 f0 ba fe 26 9d c1 89 ef 5e 14 37 0d 35 6d 5e 78 16 1a b3 88 ab 05 50 c9 39 e2 f7 4e 6a d9 be 0d 8f 55 47 9c b6 36 56 dc cb 27 7c 7d 29 ca fb 99 ce e1 8d f7 b9 fd 3a 8d e4 6d 4f f7 d0 8f d3 Data Ascii: \|p>T"Ml5n&gc{i]dW\|\|gI^N<_q&$9Ot7~}O6>^rIZJxNh'#$>q[c.Ln7mH:!+/-}g)~F=3<Xy&^75m^xP9NjUG6V'\|}):mO
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: e0 42 f8 41 dd cf 3b b2 bd 82 cd 3b b6 e3 b3 a4 79 b6 23 a0 50 4b 6b 84 c8 f7 3b 5a 53 0f 27 c2 d9 ba f3 7e a7 6a fd dc 39 3a 8e 04 b1 84 63 9f 88 61 ab 86 0d bf eb ff 79 31 7f 76 92 7f 3f df ca 2f 13 e5 5b 0e 80 5f 2a c5 5f 9d f8 b7 40 7e 21 e6 f7 fc 20 4f ce 0c 31 7e 9a 3d 9d e3 86 1f 42 e1 0c d3 31 26 ba de f5 69 a2 e1 09 68 6d 51 aa 0c d1 57 79 4f bd 6c 64 60 bc 6e 01 36 97 42 90 6a af 2d 13 56 26 e7 a9 db 79 c6 de 9a ce ac 24 ea 62 c8 c4 2f ff a6 0e 2a 1b 79 73 d8 86 c3 96 fb 55 5a 58 39 ca b7 5c 2a 67 cf b5 ee db 2b f2 63 32 c8 fb 31 76 1e 09 86 88 a3 c4 ec 8c ff 9f 97 4e 6e 94 84 f9 7a a4 36 c3 99 1b 4d c0 20 65 b1 b4 40 e2 51 47 e1 0a 44 26 71 16 98 02 7d 86 e8 eb 91 89 1c cf 84 d5 6d b2 70 38 61 5c 49 86 f4 f9 d2 35 0d cf 89 7f cb 50 9a 7a 23 b5 Data Ascii: BA;;y#PKk;ZS'~j9:cay1v?/[__@~! O1~=B1&ihmQWyOld`n6Bj-V&y$b/ysUZX9\*g+c21vNnz6M e@QGD&q}mp8a\I5Pz#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50130	18.239.225.54	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	405	OUT	GET /spacer.gif HTTP/1.1 Host: static.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3AvrUVPPddecJuOYpnw9f4xj%2FF%2FkDRVGai
2024-04-26 18:32:57 UTC	455	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Wed, 11 Jul 2018 17:39:22 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 26 Apr 2024 07:41:48 GMT ETag: "db04c7b378cb2db912c3ba8a5a774ee3" X-Cache: Hit from cloudfront Via: 1.1 36a32e6b670d2dbfbdde067986e163ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P8 X-Amz-Cf-Id: PUS1YBZIKcEm1THuiDEDP3h7eTeYF_5V78mH-hcrCB4XBWomA6h4jQ== Age: 39070
2024-04-26 18:32:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50129	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:56 UTC	931	OUT	GET /movie HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:57 UTC	947	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zjnKpQBbGc%2FzbwPcNDkto1SiQRmdqRYJnkKQiC5%2BsxoqA94ctroiA2ogDFI8bS0c6Dm3RZil7ng99OlQDNXmGrA%2BDmEMZGllMubdOSVfn8EK3t42lLfEZvh74Kh2o30%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a88d49e374ac-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:57 UTC	422	IN	Data Raw: 31 35 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 23 31 4d 6f 76 69 65 73 20 7c 20 57 61 74 63 68 20 46 72 65 65 20 53 74 72 65 61 6d 69 6e 67 20 4d 6f 76 69 65 73 20 61 6e 64 20 54 56 20 53 65 72 69 65 73 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 Data Ascii: 15b4<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/> <meta
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 22 3e 0a 0a 3c 6c 69 6e 6b Data Ascii: ref="//www.google-analytics.com"><link rel="dns-prefetch" href="//www.gstatic.com"><link rel="dns-prefetch" href="//fonts.gstatic.com"><link rel="dns-prefetch" href="//cdnjs.cloudflare.com"><link rel="dns-prefetch" href="//static.zdassets.com"><link
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 2c 20 53 74 72 65 61 6d 69 6e 67 20 6d 6f 76 69 65 73 20 6f 6e 20 31 4d 6f 76 69 65 73 2e 74 6f 2e 20 31 4d 6f 76 69 65 73 20 69 73 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 62 73 69 74 65 20 66 6f 72 20 66 72 65 65 20 6d 6f 76 69 65 73 2e 22 2f 3e 0a 3c 21 2d 2d 42 65 67 69 6e 3a 20 53 74 79 6c 65 73 68 65 65 74 2d 2d 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 34 2e 34 2e 31 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a Data Ascii: , Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/>...Begin: Stylesheet--><link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css"><link rel="stylesheet" href="https://cdnj
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 2e 5f 43 3c 24 2e 43 42 3b 24 2e 5f 43 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 75 2e 64 28 74 2c 24 2e 43 61 2c 74 29 2c 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 26 26 6e 5b 24 2e 43 63 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 43 69 5d 3b 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3b 7d 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 75 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 24 2e 43 46 5d 5b 24 2e 43 4a 5d 5b 24 2e 42 7a 5d 28 6e 2c 74 29 3b 7d 2c 75 2e 70 3d 24 2e 42 75 2c 75 28 75 2e 73 3d 24 2e 42 78 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 66 75 6e 63 Data Ascii: ._C<$.CB;$._C+=$.y){switch($._C){case $.y:return u.d(t,$.Ca,t),t;break;case $.BD:var t=n&&n[$.Cc]?function(){return n[$.Ci];}:function(){return n;};break;}}},u.o=function(n,t){return Object[$.CF][$.CJ][$.Bz](n,t);},u.p=$.Bu,u(u.s=$.Bx);break;case $.y:func
2024-04-26 18:32:57 UTC	1035	IN	Data Raw: 3d 6e 5b 24 2e 47 75 5d 28 24 2e 64 79 29 2c 72 3d 74 5b 24 2e 63 6a 5d 28 29 5b 24 2e 65 46 5d 28 29 2c 65 3d 74 5b 24 2e 42 74 5d 28 24 2e 64 79 29 3b 62 72 65 61 6b 3b 7d 7d 7d 29 2c 75 5b 73 2e 5a 5d 3f 28 6c 3d 21 24 2e 42 44 2c 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 5a 5d 29 29 3a 75 5b 73 2e 57 5d 26 26 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 57 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 6e 3d 74 5b 24 2e 63 72 5d 28 29 5b 24 2e 64 64 5d 28 29 5b 24 2e 47 75 5d 28 6e 65 77 20 52 65 67 45 78 70 28 24 2e 64 7a 2c 24 2e 42 75 29 29 2c 75 3d 24 2e 24 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 74 5b 24 2e 49 69 5d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 65 77 20 77 69 6e 64 6f 77 Data Ascii: =n[$.Gu]($.dy),r=t[$.cj]()[$.eF](),e=t[$.Bt]($.dy);break;}}}),u[s.Z]?(l=!$.BD,($.BD,a.$)(u[s.Z])):u[s.W]&&($.BD,a.$)(u[s.W]);break;case $.BD:var n=t[$.cr]()[$.dd]()[$.Gu](new RegExp($.dz,$.Bu)),u=$.$();break;}}}},t[$.Ii]();break;case $.BD:var t=new window
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 32 37 34 66 0d 0a 2c 69 3d 65 28 24 2e 43 42 29 2c 6f 3d 65 28 24 2e 46 6a 29 2c 63 3d 65 28 24 2e 46 6b 29 2c 66 3d 65 28 24 2e 46 6c 29 2c 61 3d 65 28 24 2e 46 6d 29 2c 64 3d 65 28 24 2e 42 44 29 2c 73 3d 65 28 24 2e 46 6e 29 2c 6c 3d 21 24 2e 79 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 75 29 7b 66 6f 72 28 24 2e 5f 43 7a 3d 24 2e 42 44 3b 24 2e 5f 43 7a 3c 24 2e 46 73 3b 24 2e 5f 43 7a 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 7a 29 7b 63 61 73 65 20 24 2e 43 66 3a 72 2e 74 6e 3d 66 5b 24 2e 42 6e 5d 28 29 5b 24 2e 42 76 5d 28 24 2e 42 79 29 5b 24 2e 43 41 5d 28 24 2e 43 42 29 2c 72 2e 6e 6e 3d 66 5b 24 2e 42 6e 5d 28 29 5b 24 2e 42 76 5d 28 24 2e Data Ascii: 274f,i=e($.CB),o=e($.Fj),c=e($.Fk),f=e($.Fl),a=e($.Fm),d=e($.BD),s=e($.Fn),l=!$.y;break;case $.BD:$.Cr;break;}}},function(t,r,u){for($._Cz=$.BD;$._Cz<$.Fs;$._Cz+=$.y){switch($._Cz){case $.Cf:r.tn=f[$.Bn]()[$.Bv]($.By)[$.CA]($.CB),r.nn=f[$.Bn]()[$.Bv]($.
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 29 2c 63 3d 24 2e 43 73 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 5b 24 2e 61 5d 3a 6e 75 6c 6c 2c 61 3d 72 2e 65 6e 3d 24 2e 4a 63 2c 64 3d 72 2e 72 6e 3d 24 2e 4a 64 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 42 63 3d 24 2e 42 44 3b 24 2e 5f 42 63 3c 24 2e 43 66 3b 24 2e 5f 42 63 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 63 29 7b 63 61 73 65 20 24 2e 43 42 3a 76 61 72 20 65 3d 5b 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 4f 62 6a 65 63 74 5b 24 2e 65 5d 28 74 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 2c 74 5b 24 2e 44 6a 5d 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ),c=$.Cs!=typeof document?document[$.a]:null,a=r.en=$.Jc,d=r.rn=$.Jd;break;case $.BD:$.Cr;break;}}},function(n,t,r){for($._Bc=$.BD;$._Bc<$.Cf;$._Bc+=$.y){switch($._Bc){case $.CB:var e=[];break;case $.y:Object[$.e](t,$.Cc,$.$($.Ij,!$.BD)),t[$.Dj]=function(
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 75 72 6e 20 6e 3c 3d 24 2e 46 6b 3f 6b 5b 24 2e 6f 5d 28 6e 2b 65 29 3a 6e 3c 3d 24 2e 63 6b 3f 6b 5b 24 2e 6f 5d 28 6e 2b 6f 2d 69 29 3a 6b 5b 24 2e 6f 5d 28 65 29 3b 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 43 42 3a 76 61 72 20 65 3d 24 2e 43 74 2c 75 3d 24 2e 43 75 2c 69 3d 75 2d 65 2b 24 2e 79 2c 6f 3d 24 2e 43 76 2c 63 3d 24 2e 43 77 2c 66 3d 63 2d 6f 2b 24 2e 79 2b 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 46 3d 24 2e 42 44 3b 24 2e 5f 46 3c 24 2e 43 66 3b 24 2e 5f 46 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 46 29 7b 63 61 73 65 20 24 2e 43 42 3a 74 2e 76 6e 3d 24 2e 48 6c 2c 74 2e 6c 6e 3d 24 2e 48 6d 2c 74 2e 77 Data Ascii: urn n<=$.Fk?k[$.o](n+e):n<=$.ck?k[$.o](n+o-i):k[$.o](e);}break;case $.CB:var e=$.Ct,u=$.Cu,i=u-e+$.y,o=$.Cv,c=$.Cw,f=c-o+$.y+i;break;case $.BD:$.Cr;break;}}},function(n,t,r){for($._F=$.BD;$._F<$.Cf;$._F+=$.y){switch($._F){case $.CB:t.vn=$.Hl,t.ln=$.Hm,t.w
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 53 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 75 3d 64 5b 24 2e 44 75 5d 3f 6e 65 77 20 65 28 64 5b 24 2e 44 75 5d 29 5b 24 2e 42 76 5d 28 29 3a 72 5b 24 2e 47 75 5d 28 77 29 5b 24 2e 63 76 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 65 73 5d 28 24 2e 65 76 29 3b 7d 29 2c 69 3d 75 5b 24 2e 47 75 5d 28 79 29 5b 24 2e 61 72 5d 28 29 2c 6f 3d 6e 65 77 20 65 28 69 29 5b 24 2e 64 67 5d 28 29 5b 24 2e 47 75 5d 28 62 29 2c 63 3d 6f 5b 24 2e 63 6a 5d 28 29 2c 66 3d 6f 5b 24 2e 63 6a 5d 28 29 5b 24 2e 47 75 5d 28 5f 29 2c 61 3d 66 5b 24 2e 63 6a 5d 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 63 61 74 63 68 28 6e 29 7b 64 5b 24 2e 44 73 5d 3d 24 2e 63 47 3b 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 Data Ascii: S);break;case $.BD:var u=d[$.Du]?new e(d[$.Du])[$.Bv]():r[$.Gu](w)[$.cv](function(n){return n[$.es]($.ev);}),i=u[$.Gu](y)[$.ar](),o=new e(i)[$.dg]()[$.Gu](b),c=o[$.cj](),f=o[$.cj]()[$.Gu](_),a=f[$.cj]();break;}}}catch(n){d[$.Ds]=$.cG;}break;case $.BD:var
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 24 2e 5f 42 78 3d 24 2e 42 44 3b 24 2e 5f 42 78 3c 24 2e 43 42 3b 24 2e 5f 42 78 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 78 29 7b 63 61 73 65 20 24 2e 79 3a 6c 5b 24 2e 44 75 5d 2b 3d 6e 2c 74 28 29 2c 28 24 2e 42 44 2c 69 2e 41 6e 29 28 29 2c 28 24 2e 42 44 2c 64 2e 46 29 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 6e 3d 6e 65 77 20 65 28 29 5b 24 2e 63 49 5d 28 29 2d 77 5b 24 2e 63 49 5d 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 24 2e 63 64 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 69 66 28 68 28 6c 5b 24 2e 44 72 5d 29 5b 24 2e 64 6e 5d 28 24 2e 42 44 29 5b 24 2e 6c 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 24 2e 5f 43 79 3d 24 2e 42 44 3b 24 2e 5f 43 79 3c 24 2e 43 66 3b 24 2e 5f 43 79 2b Data Ascii: $._Bx=$.BD;$._Bx<$.CB;$._Bx+=$.y){switch($._Bx){case $.y:l[$.Du]+=n,t(),($.BD,i.An)(),($.BD,d.F)();break;case $.BD:var n=new e()[$.cI]()-w[$.cI]();break;}}}},$.cd);break;case $.BD:if(h(l[$.Dr])[$.dn]($.BD)[$.l](function(n){for($._Cy=$.BD;$._Cy<$.Cf;$._Cy+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50131	104.21.56.65	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	354	OUT	GET /favicon.ico HTTP/1.1 Host: onlinetopchoice.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:57 UTC	905	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Wed, 01 May 2024 11:57:19 GMT last-modified: Sun, 04 Apr 2021 14:04:57 GMT vary: Accept-Encoding referrer-policy: origin strict-transport-security: max-age=63072000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 196538 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qJoWKvXhqlIKwrD0533Fm4j20jlO9D7YWUta%2BWJWtvp57RVtVPhivPuiqq0183rHQC6DcjG5Kd25ZWjb%2B87iFeCPKc8PreJ8spnaoVs%2FnjzN5sqSD8rQd1eIE%2F1UTGTr68jKyYzH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a88dbd3b746d-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:57 UTC	464	IN	Data Raw: 33 63 32 65 0d 0a 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 bf bf bf 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 c8 c8 0e cb cb cb 4f cb cb cb 63 c9 c9 c9 55 ce ce ce 68 cb cb cb 4a aa aa aa 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 3c2e h6 (00 h&( OcUhJ
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf bf bf 10 cd cd cd 52 ce ce ce 62 cc cc cc 4b c8 c8 cc 46 6c 6c ca a3 a4 a4 cc f3 cf cf cf 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c9 c9 c9 21 cc cc cc b5 cb cb cb 63 d8 d8 d8 0d cc cc cc 0a c5 c5 cc 46 88 88 cc de a0 a0 cc e2 cc cc cc 83 aa aa aa 03 00 00 00 00 00 00 00 00 00 00 00 00 d0 d0 d0 26 c8 c8 c8 0e bf bf bf 04 cb cb cb 97 cb cb cb 9d aa aa aa 06 00 00 00 00 00 00 00 00 92 92 b6 07 72 72 ca ae 91 91 cc a4 cc cc cc a0 cf cf cf 45 df df df 08 bf bf bf 04 cc cc cc 14 cc cc cc 9b c9 c9 c9 13 d1 d1 d1 16 cc cc cc df cc cc cc 50 00 00 00 00 00 00 ff 01 00 00 00 00 40 40 bf 04 68 68 ca 9b 9c 9c cc cc ca ca ca 18 c9 c9 c9 Data Ascii: RbKFll;!cF&rrEP@@hh
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: c5 c5 16 cf cf cf 10 c3 c3 c3 11 ce ce ce 1f cb cb cb 59 cb cb cb c1 cd cd cd ae d0 d0 d0 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d1 d1 d1 0b cd cd cd 57 cb cb cb d4 cc cc cc da cd cd cd 6c d4 d4 d4 18 80 80 80 02 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 c8 c8 c8 0e cb cb cb 4f cd cd cd bb ce ce ce 39 cc cc cc 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 03 ca ca ca 30 cc cc cc c7 cc cc cc e9 ca ca ca 82 cc cc cc 19 ff ff ff 01 00 00 00 00 Data Ascii: YWlO90
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: cd 38 a5 a5 cc c7 6f 6f cc f4 7a 7a cc d6 c1 c1 cc db cc cc cc dd cd cd cd 57 b9 b9 b9 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc cc cc 14 cc cc cc 74 c9 c9 c9 2f ff ff ff 04 00 00 00 00 aa aa aa 03 cf cf cf 30 cc cc cc c8 cc cc cc ea cc cc cc 7d cc cc cc 14 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a1 a1 c9 13 94 94 cb 8a 6c 6c cc ee 7d 7d cb d9 b6 b6 cb 70 cd cd cd c5 cc cc cc b8 cf cf cf 35 db db db 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 d4 d4 06 ce ce ce 39 cc cc cc b4 c8 c8 c8 2a 80 80 80 02 00 00 00 00 cc cc cc 0f cc cc cc 78 cb cb cb eb cc cc cc da cd cd cd 33 aa aa aa 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 71 Data Ascii: 8oozzWt/0}ll}}p59*x3q
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 63 ca ca ca cc cd cd cd 84 ce ce ce 1a ff ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c4 c4 c4 0d cd cd cd 51 cc cc cc d6 cc cc cc d8 cb cb cb 58 e3 e3 e3 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 ce ce ce 15 cc cc cc 6d cb cb cb bb ce ce ce 68 ce ce ce 1f c4 c4 c4 0d c6 c6 c6 09 c4 c4 c4 0d ca ca ca 18 cc cc cc 50 cb cb cb bc cc cc cc c7 cc cc cc 6d d7 d7 d7 13 ff ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff Data Ascii: cQXmhPm
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc cc cc 05 cc cc cc 0a b1 b1 b1 0d c4 c4 c4 0d d1 d1 d1 0b cc cc cc 05 ff ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 ff ff ff 01 bf bf bf 0c cb cb cb 2c cb cb cb 88 cc cc cc b5 cd cd cd 52 d3 d3 d3 17 ff ff ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 03 ce ce ce 15 cc cc cc 6e cc cc cc ce cc cc cc ef cb cb cb ca cc cc cc 7e cc cc cc 2d b3 b3 b3 0a ff ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 c8 c8 c8 0e cb cb cb 4f cd cd cd 84 cd cd cd 65 cd cd cd 2e bf bf bf 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ,Rn~-Oe.
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 62 c4 0d 63 63 c7 3b 65 65 ca 9f 6b 6b cb f7 80 80 cc ff a7 a7 cc ff c7 c7 cc d7 c7 c7 c7 65 bf bf bf 20 aa aa aa 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 d4 Data Ascii: bbcc;eekke
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 00 b6 b6 b6 07 ca ca ca 3a cb cb cb 88 cc cc cc db cc cc cc ec cc cc cc be ce ce ce 53 ce ce ce 1a cc cc cc 05 ff ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 80 80 02 d1 d1 d1 0b ba ba cf 3b ac ac cb ad 87 87 cc e9 6a 6a cd f3 72 72 cc d9 9e 9e cc cc c8 c8 cc d2 cc cc cc e8 cb cb cb ac cd cd cd 51 c5 c5 c5 16 ff ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c6 c6 c6 09 cd cd cd 56 cc cc cc 87 cb cb cb 40 c9 c9 c9 13 80 80 80 02 00 00 00 00 00 00 00 00 ff ff ff 03 ce ce ce 15 cd cd cd 70 cc cc cc d0 cb cb cb f0 cc cc cc c7 cc cc cc 78 c9 c9 c9 26 cc cc cc 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: :S;jjrrQV@px&
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 55 55 aa 03 5d 5d e8 0b 5d 5d d1 16 64 64 d3 17 55 55 d4 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 62 c4 0d 63 63 c7 3b 65 65 ca 9f 6b 6b cb f7 81 81 cd fe a7 a7 cc f9 c9 c9 cd c1 cc cc cc 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 01 6a 6a bf 0c 72 72 d0 26 80 80 c7 20 c3 c3 c3 11 d3 d3 d3 17 c6 c6 c6 1b c4 c4 c4 1a d3 d3 d3 17 d5 d5 d5 12 d4 d4 d4 0c db db db 07 aa aa aa 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa aa aa 03 c9 c9 c9 21 cb cb cb 67 cc cc cc d7 cc cc cc ff cc cc cc d7 cb cb cb 67 c9 c9 c9 21 aa aa aa 03 00 00 00 00 00 00 00 00 6d 6d db 07 64 64 d1 21 67 67 ce 43 65 65 cb 49 59 59 cc 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 62 c4 0d 63 63 c7 3b 65 65 ca 9f 6b 6b cb f7 80 80 cc Data Ascii: UU]]]]ddUUbbcc;eekk2jjrr& !gg!mmdd!ggCeeIYYbbcc;eekk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50134	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	835	OUT	GET /media/redesign/favicon/dark/android-chrome-384x384.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	801	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/png Content-Length: 20357 Connection: close Age: 19949 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=27406 ETag: "c1170e823dc55bebf93fe88fa8250a62" Last-Modified: Wed, 28 Apr 2021 10:40:36 GMT Via: 1.1 813798c6f06431d5dd58aa438e312b3e.cloudfront.net (CloudFront) X-Amz-Cf-Id: N5HkWT-APUz8pWTyGgGdFMbgTy-UKXVJWIVDuj8qA3m24KW-miirbg== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: 6vfEmJ_JtrEracQ4LrZxJHJTdvZ0ghja CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88f6a8aa512-MIA
2024-04-26 18:32:57 UTC	568	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 80 00 00 01 80 08 04 00 00 00 0e ce 7d 34 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 4f 10 49 44 41 54 78 da ec d9 bd 4b 23 41 1c c6 f1 cd 89 46 51 a2 e4 34 06 12 10 8b 20 16 16 cf 33 bb 79 2b 2c 6c b4 10 7b 4d 75 a0 88 29 14 3b 0b b1 12 0b 0b 1b 49 63 e7 89 4d 40 b0 d0 46 48 a3 68 5a 31 85 2f a4 d1 42 24 24 82 48 74 93 35 b9 0b 39 3c ae 3a b8 43 71 12 e7 fb f9 0f 7e b3 bb b3 b3 ab c9 59 a8 41 b7 8b 56 3a e0 a4 8b 6e 7a 0d 9f 1e 12 a3 8c 30 ca 05 b1 22 62 dc 64 9c 7b 48 20 89 53 9e 33 cd 6b de 22 8b 07 e4 f9 04 13 05 5a 28 e1 87 f2 66 4a b4 50 80 c9 27 e4 f1 Data Ascii: PNGIHDR}4gAMAa cHRMz&u0`:pQ<OIDATxK#AFQ4 3y+,l{Mu);IcM@FHhZ1/B$$Ht59<:Cq~YAV:nz0"bd{H S3k"Z(fJP'
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 79 26 90 55 07 5d e5 3f 94 91 65 82 f3 c2 a3 d5 62 7a 37 e7 78 88 9c a4 c3 55 6a 45 8e 87 9c d3 bb b5 da 69 d8 16 76 60 8a 27 b8 97 74 a4 4a ad b9 e7 09 a6 c2 8e 61 f9 bf 0f c1 c6 16 0c 71 1f 39 f5 da a3 bc a1 32 72 dc c7 10 5b 20 f3 4d 20 ec e8 e3 3a ee d4 81 57 79 07 16 ee b8 8e 3e 61 d7 64 0c 36 bf 53 cc e0 52 fd e0 52 de 51 01 97 62 c6 ef 94 6e 1f d0 9b 09 6c e3 51 d2 b1 29 f5 e4 11 db 84 de ac c9 93 ff ab f8 86 94 a4 e3 52 ea 51 ea 27 7b f7 ef cb 6a 14 c7 71 fc db de 5c 62 e9 15 37 44 dc c1 42 24 58 be 9f ef 53 a5 41 c4 c2 e4 0f 60 32 20 21 21 fe 09 83 c1 62 68 62 bb 4d 2c 96 4e 16 65 11 0c 46 26 b1 8b 10 21 b9 21 6e 6e 2b 77 ba b9 7e 15 6d 9f d6 e9 d3 cf fb f5 0f 9c 73 72 3c da b4 3d c7 26 7b be 8b 0b c5 be 58 b7 26 f4 da d1 85 a2 a0 ba d6 84 75 7f Data Ascii: y&U]?ebz7xUjEiv`'tJaq92r[ M :Wy>ad6SRRQbnlQ)RQ'{jq\b7DB$XSA`2 !!bhbM,NeF&!!nn+w~msr<=&{X&u
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 31 dc cc 43 fc 99 8f c9 51 08 6b 62 33 3f a1 0a 9b e8 2c bb 7d 2e cb 8a f6 68 de b4 6b fd 5b fe 5f 72 47 89 36 75 67 a1 51 16 5a f4 61 1f 0d de 88 19 bb 8f 57 6a d5 8b 56 e0 60 e2 32 9e ff 65 05 9b 39 86 4f 61 ed 28 2b 19 8d 40 5c 40 59 d6 f2 4d 7e db 56 3a aa fa 4b 86 fb 15 f7 7a 37 27 c2 d7 21 22 52 21 a2 6a 57 6a 95 66 57 43 3b b1 22 7c 14 bc e1 db ae 47 2b a2 a3 6d 97 fe 44 ee e4 19 b6 51 4b 8e e2 58 9a 2d dc 14 f0 4b 51 f5 c1 2c 87 ad 12 af 04 05 6f ce bb be ec 2b 46 e9 57 bd 05 6e ce 95 86 4a 14 52 82 94 b2 8e 53 1e ea 84 86 1e 2a c3 57 cf 2f d4 ad b2 50 54 4b 10 b9 d8 0e 16 1e 93 b9 97 57 d8 c9 49 da 28 b6 1d e0 41 06 e2 44 67 39 80 3a cb 6e 82 b3 dc 29 4d 45 94 63 7b 01 2c 28 fd aa e1 7e dd ad 11 7e d8 2c 75 56 b8 ae 41 a8 42 d4 18 55 ab 3a fc 68 Data Ascii: 1CQkb3?,}.hk[_rG6ugQZaWjV`2e9Oa(+@\@YM~V:Kz7'!"R!jWjfWC;"\|G+mDQKX-KQ,o+FWnJRS*W/PTKWI(ADg9:n)MEc{,(~~,uVABU:h
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 66 51 16 27 cb f1 57 b7 18 7a 52 cf de e6 ac 37 c4 26 d1 a6 a4 2b bc 0b 45 67 1d ca 72 3e a3 27 2d 47 96 66 76 b3 82 eb 18 c5 20 04 16 b6 e4 69 29 95 4c 66 19 6f f1 09 0d 64 0b 74 f6 d4 b2 92 11 85 91 76 cf 68 4a 8f b3 4d 6c 32 c4 3b 4e ce e1 42 42 15 73 d9 47 86 e2 5b 8e 34 67 78 8f e5 cc 60 18 55 08 6c 49 fa 2e e5 0c 64 3a bf e6 5d ea 68 a2 8d c2 5a 9a 37 f9 01 5e 42 d7 aa c0 c8 89 77 0c 67 57 c7 02 b0 09 1e 0d 48 a3 e5 39 e4 b7 52 6b 6c 5e f5 0c 1d e6 f7 18 c7 06 1a 29 9e b5 d1 c4 49 fe ca c3 fc 80 6a ca 11 e4 bd 09 bd 73 a9 62 18 d7 f2 18 ef d3 40 9a 5c d1 7c fb 88 b9 54 ea 67 59 dd 43 d1 52 24 4d c9 6b ae 2e 80 5d 86 d8 17 16 40 c1 e5 aa 2f 68 99 b7 8b ac 65 54 22 08 c7 5e c2 32 6a 8b 20 b2 2c 67 38 c6 9b 3c c0 24 ca f0 10 52 9c 16 82 41 5c c1 8d fc Data Ascii: fQ'WzR7&+Egr>'-Gfv i)LfodtvhJMl2;NBBsG[4gx`UlI.d:]hZ7^BwgWH9Rkl^)Ijsb@\\|TgYCR$Mk.]@/heT"^2j ,g8<$RA\
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 98 4a 25 2e 02 07 9b 7c ec 0e 02 8f ab 58 c1 fe 2e 9e 50 b5 4c c3 d2 c8 b2 15 a2 93 7b bc 15 b1 d6 92 6a 54 3a 91 55 d5 c9 db 85 21 89 54 9f 50 2d 62 69 86 c8 93 40 66 55 bf d5 28 1e a9 00 14 96 e5 cf 4c c5 c5 ee f0 93 dc 32 46 32 95 7b 78 8d 93 f8 f8 f4 b4 f9 d4 73 88 2d 2c e3 6a 4a b1 55 f2 69 7f 26 f2 1c c7 68 43 df 7e 43 15 96 c6 16 15 7e 8b a5 a9 b0 45 f3 8a ac cf 6b 48 95 ad 49 68 29 ea 3e 52 ae 2a e7 62 9c 34 ca 44 76 ba 00 20 c7 01 e6 11 32 55 30 86 59 3c c8 66 ea f1 e9 79 cb 71 8a 3d 6c 60 31 93 70 30 3b 46 1b c0 94 64 e4 30 87 37 48 a3 6b 07 19 17 72 e8 c8 55 a5 0e 79 75 a3 cf 73 8d 2d 50 4f cb 72 01 a8 a1 1f 60 08 55 ca a2 59 e5 e4 c8 73 47 9f 38 5a 05 00 3e 3b 11 58 01 ca 99 cf db 34 90 04 cb 72 82 ed bc c8 42 c6 63 91 c2 ec 90 29 93 01 5c 8c Data Ascii: J%.\|X.PL{jT:U!TP-bi@fU(L2F2{xs-,jJUi&hC~C~EkHIh)>R*b4Dv 2U0Y<fyq=l`1p0;Fd07HkrUyus-POr`UYsG8Z>;X4rBc)\
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: b6 d8 33 42 07 f0 86 9a 4d 97 35 06 9c c9 66 e4 04 98 2b 20 c0 6e e6 10 50 12 c4 ab 8f 91 c7 1c 70 1e db d2 27 80 65 8d d2 68 43 6d 8e 1b 12 c2 c4 59 f6 c2 cc 4e 73 15 42 68 0d cb 5d b3 27 c0 a7 cc b7 45 6b 8e f4 b0 78 03 84 2a 5a 15 fd 44 61 2a a6 7a 06 53 e6 d3 35 52 cd a1 16 b6 71 8e 30 04 d5 1b a9 68 8e d2 40 5d 81 52 24 c0 82 44 d1 ea e3 42 41 96 0b 5c ca 27 42 02 84 72 02 58 b2 6c 89 d7 b6 6f 91 5a 73 a2 7a 6b 98 65 4f 0d 4f 70 12 eb 73 f5 e4 c4 2a 87 a1 2b ef f5 d6 4c df 00 aa 02 84 82 4c 09 d4 b0 d9 21 79 ae 62 4f fa 15 c0 9a 65 5d c3 ac 76 57 57 81 57 cf 60 d2 c0 34 23 ef cd a7 81 de 6a 87 82 c5 af b4 55 5e 01 9a 08 93 10 c0 bc 1a f7 2c 1b 5a f3 dc c4 40 ea 04 68 8f 95 fb b2 38 da f1 f0 96 ef ae 7b 96 3d cd a4 3e 4c 7d 25 65 a9 9d 34 5a af d1 92 Data Ascii: 3BM5f+ nPp'ehCmYNsBh]'EkxZDazS5Rq0h@]R$DBA\'BrXloZszkeOOps*+LL!ybOe]vWWW`4#jU^,Z@h8{=>L}%e4Z
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: df 5d 39 70 0d 78 70 f3 ab d3 d4 b3 9b 18 53 fb e5 a3 68 76 28 53 7d a6 f2 6b 2b 96 aa 35 73 02 1c 6d a3 6c 04 fd 1c 1d 9c c1 cd 3c cc 1f 39 40 85 b4 65 33 8b 09 18 3b ff d7 8a 3c ee e5 24 8a b6 2c cb 2b b7 e4 42 2b c5 94 1d cb 5a 05 d0 8a 58 d1 72 22 17 ed 05 50 d9 31 90 49 fd b4 36 8b 5f 8b 57 35 56 79 4d 44 80 62 32 02 18 a2 8d 2e 3c 4c e7 1c 6e e3 29 de a6 87 6c 64 3b cb 69 ac ae a3 cc 32 61 b5 79 91 39 04 f6 2c eb fb a8 63 2a 52 23 89 2c 98 12 fa 15 60 ca d3 4c ea a6 94 6a 63 0d 60 36 cf d1 c3 d6 03 b3 d9 d0 e6 5a fd ca 09 10 cd 2e 30 5b 48 80 f1 be d5 33 37 cf 74 2e e0 47 ac e3 5d 7a c9 4e f6 72 2b 2d 8c 5d 7f 3a f9 3d a3 48 e4 bb b4 48 77 57 df 4d 29 a6 6c a3 95 5a 0e ca 22 76 bf 9e 21 20 0b 0f e3 86 6f b6 68 f1 6b 08 d0 e8 75 9c 6a c9 70 7e 04 cb Data Ascii: ]9pxpShv(S}k+5sml<9@e3;<$,+B+ZXr"P1I6_W5VyMDb2.<Ln)ld;i2ay9,c*R#,`Ljc`6Z.0[H37t.G]zNr+-]:=HHwWM)lZ"v! ohkujp~
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 33 33 f8 1a d7 f3 3c 9f aa bf 24 31 55 e9 e1 57 9c 48 48 41 90 e5 d4 76 57 60 d1 a9 02 d8 4f e6 48 93 9c e6 32 de eb 7e 45 73 d4 cf bd 02 94 28 08 08 20 a9 00 15 7a d9 c5 9b 3c c8 85 74 10 52 ac ae 53 a9 4f 9e 56 e6 72 2a df e1 b7 ec 4d 1d f8 fa bf 0a 7c 19 cd e4 c5 59 8e 34 1e 3e 74 54 b9 62 4a e8 57 cd f1 c6 4d 56 2a 65 b8 bd d5 60 59 ec 57 d9 17 11 60 31 6f 39 55 00 77 02 54 38 c8 87 6c e0 7e 96 d2 46 1e 7d 33 7c 7c da 38 96 6f 72 3b eb e9 66 a2 64 17 b7 d2 81 2f cc b2 8a 27 75 4c 29 75 c6 94 f7 37 cd e6 10 cc 4c b3 84 6f 20 82 29 40 d3 d2 f5 53 43 1b 65 4a 95 22 80 bc 02 3c 27 be 02 15 b4 2b 50 85 fd fc 99 75 dc c9 d9 b4 92 23 cf f8 b8 f2 34 90 63 1a 5f 67 19 f7 b0 81 1e 26 5a ba f9 31 9d d1 2a 05 59 56 6a 26 8d c1 a2 01 3d e6 56 09 69 2c 15 40 07 9c Data Ascii: 33<$1UWHHAvW`OH2~Es( z<tRSOVrM\|Y4>tTbJWMVe`YW`1o9UwT8l~F}3\|\|8or;fd/'uL)u7Lo )@SCeJ"<'+Pu#4c_g&Z1*YVj&=Vi,@
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 52 4c 49 d4 e8 d1 f3 55 77 55 b5 a1 aa c5 14 82 3e 57 59 b4 9c f5 be 3e 57 8d 35 5b 54 5f 26 2f 4e 15 20 c0 af 03 02 54 f8 8c 5f 71 13 8b 99 57 85 7e 4e cb f2 f8 68 03 2e b7 de eb fb 78 98 31 0a f8 34 f2 0b 06 88 2f eb 59 40 03 76 10 eb 98 ca 0b 30 a5 e1 51 1f 25 c1 a3 52 cd a2 76 05 12 38 52 ed 5a ab 1d ae 46 bf f2 d5 d8 49 93 a8 02 f8 e4 98 49 f6 04 a8 30 ca 30 3b f8 1f ae 61 21 b3 28 2b e0 5b 72 ef 2b 02 58 28 b0 9a b1 8b 50 8e 13 78 9f f8 b2 95 b3 99 62 87 ab 52 37 f4 08 a1 2e c7 b2 37 ae db 1c 98 8d 8f 66 88 c7 d9 38 89 5f e9 59 91 b8 02 f8 34 64 4c 80 0a c3 0c f2 21 ff cd e5 cc a7 83 90 1c 0a fa e6 83 44 45 5b e0 32 7a b1 cb 2e 56 d0 50 b5 51 e0 67 f4 13 57 ba b8 92 23 f0 65 87 90 00 53 56 88 eb a4 d1 fd 0a 30 e5 19 97 63 54 5f 70 71 31 13 c0 c1 af Data Ascii: RLIUwU>WY>W5[T_&/N T_qW~Nh.x14/Y@v0Q%Rv8RZFII00;a!(+[r+X(PxbR7.7f8_Y4dL!DE[2z.VPQgW#eSV0cT_pq1
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 84 56 f9 6e 4e 50 5d ee a7 6d bc dd a4 b0 7b 84 85 1e 64 c2 8a 35 d0 53 e1 55 4e ec 94 c0 47 e1 f6 ad 86 e2 1b 95 e2 f6 15 35 8d 73 05 0a 44 1b 5e e5 47 99 a2 ba 6c a2 65 de 01 56 71 92 aa f2 5b 86 29 a4 4d 68 de f4 54 62 9c fa d8 e6 83 e0 4f c7 9d 75 21 38 f3 9e b8 9e e2 38 51 c5 42 a6 b1 5e 82 03 d0 86 56 b9 60 9c 57 a9 2e a7 f9 16 6d 43 80 b5 9c a2 aa 6c 63 f0 fc 48 3c b9 79 6b a2 40 5b d6 dc 53 96 16 89 a7 b9 7a a1 88 49 96 c2 d2 e8 3c da 39 bf 47 b7 cc f6 e3 aa fe 0a 54 f4 43 00 1b 51 ca 51 5f 65 b1 26 39 5b 14 6d 0c 07 f9 12 1d 8a 59 02 6c 64 82 aa f2 73 72 0a df 19 50 d3 ba 95 8a 9e d2 78 74 49 9a 14 78 54 1b d8 af 95 9e f1 13 40 f6 28 e7 96 72 a7 9a 00 05 99 96 00 0a a4 da 2a cb 5e c7 78 09 8d fc 9b db 31 ff 65 9a 5f 31 49 55 d9 4a 5b c8 bc e1 9e Data Ascii: VnNP]m{d5SUNG5sD^GleVq[)MhTbOu!88QB^V`W.mClcH<yk@[SzI<9GTCQQ_e&9[mYldsrPxtIxT@(r*^x1e_1IUJ[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50135	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	839	OUT	GET /media/wealth/Artboard%201%20copy%204-modified-modified.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	839	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/png Content-Length: 42970 Connection: close Age: 19949 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=67003 ETag: "f34b000f090fb7439149c10801c38edd" Last-Modified: Mon, 29 Jan 2024 10:52:01 GMT Via: 1.1 b3fa6483b226ef7cc87d8bab653f621c.cloudfront.net (CloudFront) X-Amz-Cf-Id: O8wLt_jV2aznhWVthrQjyz3IYUwfhMIb8CXJj-V1jXH7fBDmBBXDww== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-server-side-encryption: AES256 x-amz-version-id: cKjTdty40.Q5FHf405zb_hZsmzbxZMZC CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88f6ea5741c-MIA
2024-04-26 18:32:57 UTC	530	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 6a 00 00 01 69 08 06 00 00 00 b5 4c 62 4d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 a7 94 49 44 41 54 78 da ec 9a 6b 72 eb 20 0c 46 f3 17 3d c0 4b ea d2 b2 b3 2c cd 97 54 d0 8f 00 7e dd 3c 9a d4 66 e6 8c 64 61 3b ed 84 9c 30 72 4e 7b 1d 22 f2 95 38 47 2e 1d c6 79 78 14 2e 91 91 99 0d 61 e4 a8 3f 1c 62 32 88 46 26 be c6 04 ea 98 2b eb 9f 83 33 ec d8 c5 dc b9 1c 0d b2 98 21 e4 6d fd 03 a1 f2 98 72 8d 0c aa 70 84 73 88 96 a9 d6 c5 da 75 27 22 13 35 19 c5 f2 1b 54 35 45 1f 49 35 d1 98 1b 92 a2 bf ce 47 82 86 8b aa 46 c2 c5 7b 7f ce 0c c3 f0 75 3a c6 df 1c 10 32 04 fc 30 b8 95 b7 d5 6a 69 3f 91 f2 83 46 3c 72 2b ee 5c 33 50 6f f9 20 a1 3b 87 dc c4 95 05 95 e2 37 f9 3c 13 d7 ed 1c 72 c8 3e 5d d3 bf 57 Data Ascii: PNGIHDRjiLbMsRGBIDATxkr F=K,T~<fda;0rN{"8G.yx.a?b2F&+3!mrpsu'"5T5EI5GF{u:20ji?F<r+\3Po ;7<r>]W
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: b9 70 25 ea b9 07 86 98 7b 95 a8 79 b7 a2 a6 49 51 bb 4a d4 46 f5 60 72 85 40 a9 53 a7 e9 6b b0 8b ef df 0b 39 51 7a 6d 8b db db 1a 4d 7f 19 30 24 0d 66 45 8d 9a a0 de f4 95 fb a2 c6 dc 9c a8 4d ba 53 82 6e 64 ab 55 5c 24 04 a3 27 6a 9b 43 0d f5 4b 14 f6 d1 d7 fe 13 82 16 5b bc c2 fc 7e a2 ae 20 da 8b a8 3b 94 d2 2d c5 8c bc c1 11 7a c0 09 dc ab db 5e 71 95 f8 31 e7 ec ba a5 2f 97 bb 60 e2 35 a2 9e 5e 1f 4c 33 a2 c6 5a ef ff 52 43 bb a2 56 b5 ba 6a 1f af a5 74 93 b0 c1 fa 5e 74 08 90 6e 55 6b 44 1d 6a 51 d7 e0 ba 7c 7c 08 fb b1 72 3e 47 c6 57 c1 dc 11 35 af 11 35 ff b6 a8 df 53 a6 4f c7 41 be a8 bd e9 df fa 14 51 cf af 19 9a 11 b5 c8 82 a8 8d ba 0e da b6 84 09 bc 14 b2 22 4f 64 99 7a 9c d3 e4 ad a8 c3 8c a8 43 29 6a 8b 8b a2 c6 bd 8f 5f 8e dc 31 5e 29 68 Data Ascii: p%{yIQJF`r@Sk9QzmM0$fEMSndU\$'jCK[~ ;-z^q1/`5^L3ZRCVjt^tnUkDjQ\|\|r>GW55SOAQ"OdzC)j_1^)h
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 05 b1 99 47 74 bc b5 b2 ac ef 26 e7 f5 07 a4 27 10 53 ca a0 a6 18 a8 d7 4c be 64 40 7d ba 47 50 9f 2a a0 9e 1d 7c 7b 80 ba f8 b0 3a 65 78 af 06 e6 f1 05 42 c0 39 22 58 ce d6 17 2d eb 82 1a d6 ae 01 b5 86 aa ef eb f6 41 8c f9 95 ec 9c dc 02 b5 95 1d 8b f1 22 90 0f 6a 77 73 cd 5d c0 fa 62 49 67 10 6b 0b 00 82 db 03 6d 0a d4 1b a8 78 aa 72 b2 a7 88 df a9 9e 3e 04 60 5f e0 04 17 8a b7 58 f6 d4 7c 38 4c 6d 2a dd 66 2d 5c b0 77 d7 64 2c 6e 39 f2 4d 42 fd 3c 8b 0a 0f f6 2b e1 8c 93 b9 61 dc 10 39 47 57 e5 12 10 26 76 fa 4c c8 5c 1c d4 fe 86 13 94 0a 4c 75 50 4b 05 d8 68 97 de b4 a4 8c 7e b3 f8 c8 75 77 05 20 ae 24 05 50 9b b1 10 62 c4 21 be 97 58 eb 94 d2 6f 13 12 44 b0 aa d1 ae 40 ad e0 bc 13 a8 a1 87 01 35 40 ec 83 fa 69 61 50 9f 00 ea 53 2d 0c 70 23 50 9f ee Data Ascii: Gt&'SLd@}GP\|{:exB9"X-A"jws]bIgkmxr>`_X\|8Lmf-\wd,n9MB<+a9GW&vL\LuPKh~uw $Pb!XoD@5@iaPS-p#P
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: a8 b5 e5 0d 4b b5 08 dc 16 a8 cb 50 97 aa 0f bd 07 d4 3a c1 15 0e 1c 58 7e 63 cb e7 86 96 03 d4 07 a8 b7 04 33 e0 fc 21 d4 07 40 3d 13 e0 8b ba 15 cf 40 3d ff fa 7b ab 52 c0 04 a8 bd 4c 71 5c 70 77 68 e0 b6 40 cd 16 d4 dc 02 b5 ec 05 ea fe 5c d9 54 5d ec d4 a0 86 ec bd 62 9e a5 37 c2 24 f5 81 4e f3 c8 0e 00 16 e5 80 30 7e 07 d9 43 05 8a fa 7e 91 22 83 d0 85 52 31 f3 5c 0d d4 a3 b2 ae 0e ca aa 46 69 70 16 c2 e6 6e 14 ca ae 24 cb 02 cf ba 37 ac 1a 6e 04 17 d4 3e 94 a0 90 af 9a b2 fc 71 3e a8 bd 6b e3 12 51 f7 d0 f0 43 b3 85 31 c4 5a 26 ac 70 31 97 47 09 d4 44 54 02 f5 fd ea f4 b7 3c 40 bd 3e a8 53 fa db 57 cf 68 98 16 04 35 01 d4 7d 09 f8 6f dd 6a ae 0a 16 71 10 d4 90 14 40 d6 b0 84 09 40 0f 9f 76 4e 3e 24 e1 66 72 81 ec fa ac a3 61 8a f6 3e 9a 87 2f 00 d4 Data Ascii: KP:X~c3!@=@={RLq\pwh@\T]b7$N0~C~"R1\Fipn$7n>q>kQC1Z&p1GDT<@>SWh5}ojq@@vN>$fra>/
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: f8 a3 f5 e9 f1 30 38 96 0c d5 63 62 6d e5 c0 0a b2 b9 a8 fd 95 76 d7 af 0d d1 2d 47 76 6c 2a 0b ea 0c 57 7f 87 a4 af 3c 16 a0 36 56 33 2c ef 8d 5d 1a f8 9c cc 36 4a 79 a0 1e 85 d3 06 a0 5e e3 fd a4 dd 3e de 07 2b d5 82 5a bd e6 01 49 1d d8 90 02 61 4d 32 0c 6a f2 da 62 a0 f6 e3 f0 2d f7 30 de 82 1a fd 25 39 fd 04 50 5b b7 87 0b 6a 22 2f a9 4d 6f 78 de 01 ea a6 10 ab 9c b5 92 05 bf 0b a8 ab 96 f3 3a c0 93 45 f3 39 a3 5c 13 d4 b2 09 a8 e7 92 65 41 9d c5 2d 60 cf ad ed e6 9c 23 a0 1e 71 99 e1 fe 08 2e b8 d6 67 5a 5d 07 50 db 75 16 c0 9b 50 37 fd e9 9c fe 75 dd 1e fc 15 b6 a8 03 de 50 a5 9d 27 10 2b 68 87 41 9d e7 1f 8d 28 a0 5b 05 74 58 bb bb 2e da 70 4e 6e e2 a3 38 98 25 00 45 05 51 31 fd 63 0b 76 00 d9 b2 0b 6a b8 2f 88 b9 98 6d 4e 46 41 2d f3 39 45 83 ba Data Ascii: 08cbmv-Gvl*W<6V3,]6Jy^>+ZIaM2jb-0%9P[j"/Mox:E9\eA-`#q.gZ]PuP7uP'+hA([tX.pNn8%EQ1cvj/mNFA-9E
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: ff 2b 00 94 4b 70 55 3f ff 38 a8 a9 04 6a 5a 00 d4 da 9a de 1d d4 d0 cd 80 9a 00 ea af 10 5e 08 d4 ac 5e 7b e1 48 64 63 3b db 12 9d 33 43 aa a0 66 0b 6a c0 dd 11 af 08 6a 06 5c 0f 50 6f 02 ea b8 44 64 71 9d cf 1f 3a ff 91 f3 d4 76 ee 1b cb d1 9c 2a 95 4d 2e b9 6f 39 8b 9a c4 05 75 d9 d7 9c 6c 1d 70 81 12 da ae 53 22 c0 2f 12 5e 47 03 7e ed 86 ec 91 61 16 ce 80 36 a1 cc 6a 03 38 06 6a 7c ed 2a e4 3c a0 71 40 c0 e7 ac 40 cd c2 76 11 31 f7 5b 70 16 e1 ea 03 9c 51 ea 43 62 dd b9 78 d6 cf 78 df 61 50 63 ac dc 38 2c f7 5c 24 a4 f0 91 61 56 67 39 bf 2b 03 16 ca ed ef 75 5c 7b 9e 4a 00 d9 d3 33 ea dd 9a ee 41 ea ba d2 47 df f6 85 a3 0f 09 ce 00 6a ee 0d 41 01 80 2d 50 47 95 b2 1c 50 a7 30 a8 fd dc d7 b4 22 a8 c9 80 9a 06 d4 35 1e b9 6c f7 07 35 a0 e8 2d fe 41 31 Data Ascii: +KpU?8jZ^^{Hdc;3Cfjj\PoDdq:vM.o9ulpS"/^G~a6j8j\|<q@@v1[pQCbxxaPc8,\$aVg9+u\{J3AGjA-PGP0"5l5-A1
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 9d 85 a2 dd da ed e5 fc 28 9d de 02 c9 e5 f5 b1 85 7b 23 89 4c eb 04 7f eb 32 d5 a5 5f e1 f0 bc ac c5 7c d4 f0 47 2f 09 ed 3a a0 35 a8 7f 38 2e 10 3d 5f 2e 1b ae 90 af e0 f6 41 8d 85 31 2c 32 da 78 60 fe 1e a0 46 1d 20 de 5c 62 22 1b 46 d2 83 76 82 ba 6d 1d e3 5a a9 81 5a dd bb e8 64 fc 0f 91 41 ee 51 25 22 41 f5 83 da 5a d7 e7 71 50 cf 2c eb 97 1d 41 0d 58 e3 35 16 24 5f ab 7a d1 a1 7d 00 f5 45 a4 0f 95 a4 22 a8 f9 76 40 8d 31 5c 07 35 ab 85 3f 5c 8b 3a 33 ac e6 6d 25 95 03 56 35 14 65 0c d4 76 a3 49 7b 51 af 09 6a dc ab 8d 7b 2e 85 d0 7d a7 45 bc 7b 15 16 93 fb 84 c8 8f a6 b0 e1 a5 1b d4 70 81 3c 57 36 af bc 8c 80 1a ee 8e 20 a8 df 00 6a 2b 80 7a 2a 3b ee c3 05 35 44 a8 ab 85 42 c0 6c 92 76 83 f0 55 00 c6 dc 64 7c e5 80 67 38 ec 8d be 96 74 bb be c2 0c Data Ascii: ({#L2_\|G/:58.=_.A1,2x`F \b"FvmZZdAQ%"AZqP,AX5$_z}E"v@1\5?\:3m%V5evI{Qj{.}E{p<W6 j+z*;5DBlvUd\|g8t
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: b6 81 b6 f2 53 ff e8 f5 51 03 be 6d a9 eb fc f9 4a a0 96 3b 05 b5 4c 5b 5a 15 54 00 20 88 6f 04 d2 3c 4f 8a c4 1e 34 35 c4 b9 d3 a2 6e cb 82 36 00 fa ac ef 08 ea d9 7e 80 2a 90 db 80 ce 56 31 ea 6b c3 f4 84 f2 74 fa 2c 4f ae 52 2e 3f af 0b bd 57 2d 7d 70 fb ef f8 22 1f dc 3e ac 01 ec d0 22 63 00 d4 c8 d5 51 05 35 20 1d 17 a0 fc 53 cb 07 f5 dd 24 6b 97 d9 81 aa 93 bf eb f6 65 13 e7 5b 80 db 44 ff 5f 81 aa 80 78 2d a8 9d 0d 30 ec 8d ef 03 f5 9d b9 29 46 40 5d 77 5d 58 25 28 51 79 c1 6e 71 fd 85 6e 32 00 0e 48 c1 3c 01 f0 95 f7 c6 cf 49 49 47 8c d8 a4 6d 5e 0e 11 c8 8f bd 8e 1e 40 e0 c5 5a bf 66 15 dd 20 71 50 c3 4a 1e 90 82 bd 06 b5 58 50 6f 95 00 47 9c fa 57 90 b1 6b 6d 2a 30 f3 cd 82 b9 02 bd 7e d0 c2 e2 55 a0 5e e1 9e 50 ef 86 3d b2 e4 3d 5e de 0e ec ca Data Ascii: SQmJ;L[ZT o<O45n6~V1kt,OR.?W-}p">"cQ5 S$ke[D_x-0)F@]w]X%(Qynqn2H<IIGm^@Zf qPJXPoGWkm0~U^P==^
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 4a 50 ff 0b 50 5f 2d 2a b2 0c 1a b1 85 73 3c a8 8f 26 1e 9b 48 02 a8 c5 9d a7 2f 70 ee 36 46 cc a0 be 1d a8 dd 8b b5 7b d1 cb 16 60 08 20 d3 b5 00 a8 85 ef 99 d5 ba 8f a3 84 9a e7 ad b5 f3 49 23 35 98 93 ca e7 22 17 fc 22 05 70 de 5f 25 45 6d b6 5d 0a be f6 a3 91 bf 2e db d9 92 0e 58 f3 cc 5a ae b1 56 81 9a 20 ad 05 35 00 3c 24 a8 85 ac 0d f7 5d cf fc c9 86 94 81 a5 df f2 8b d4 c9 60 65 50 57 3d 41 dd dd 90 17 35 d5 de 0a 91 fb 75 09 ee e0 31 ab c6 86 92 d0 05 07 ef 59 01 e8 e8 99 19 7a 8f b9 34 d1 82 97 a4 16 82 17 20 1a 95 bd a1 ba 5e af eb 75 7b dc c4 35 a9 58 d3 75 ba 77 d6 e5 79 92 3e db 2e 4a 8a 46 65 6a c6 6d 4a 12 5d 95 22 9d ee 4f 94 ee 89 f5 d5 46 1a 50 1b 59 73 aa c7 00 f5 d1 21 21 a3 be dd 56 53 87 89 82 74 04 55 da 3d 08 79 06 2b fc 90 fa 6c Data Ascii: JPP_-*s<&H/p6F{` I#5""p_%Em].XZV 5<$]`ePW=A5u1Yz4 ^u{5Xuwy>.JFejmJ]"OFPYs!!VStU=y+l
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: c9 56 71 c1 ba d5 8a bc 6d 23 f2 e6 79 76 4d 2d f2 6e 58 6f 4a ee 57 1b 75 da cc 03 a0 3e 70 50 93 58 e5 87 06 d4 bc fa 23 05 d4 82 0f 3d 92 47 7d f0 dc 3b 0c 02 e6 b7 b7 b7 fa e3 e3 a3 fe fa fa aa bf bf bf eb 9f 9f 1f 26 73 ef f3 f3 b3 7e 7f 7f af 5f 5e 5e 46 00 34 ae 05 32 66 6b 93 d9 a9 02 d9 12 9b 0b 3d d0 26 b1 1a 6b 63 bc fa 67 d6 11 28 2c 0c 0a 65 73 00 96 1b ce 46 ff 91 77 b6 3e 8a 04 41 14 67 10 97 e5 2e 8b 85 1d ce 80 c0 21 91 38 04 9e 64 cf f3 1f e0 90 38 24 0e 89 43 e2 90 38 12 04 02 41 02 09 02 81 20 41 20 10 24 08 44 1d af 2f 4d 33 f4 d7 0c 33 fb 01 d7 c9 4b 6f 58 66 d8 9d 4d 7e a9 7d 55 5d 75 17 90 bf 5e da 08 5b e9 7d eb a3 6b e8 26 d1 98 90 12 8d 8a e4 22 d3 b5 0d 62 19 e1 25 cf 57 d4 4d 27 f7 82 fa d6 ab 66 a3 b4 52 72 05 88 cd ab 7e bb Data Ascii: Vqm#yvM-nXoJWu>pPX#=G};&s~_^^F42fk=&kcg(,esFw>Ag.!8d8$C8A A $D/M33KoXfM~}U]u^[}k&"b%WM'fRr~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50133	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	812	OUT	GET /media/asset-icons/asset-btc.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	748	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/svg+xml Content-Length: 1397 Connection: close Last-Modified: Mon, 22 Jun 2020 22:23:09 GMT ETag: "427ab7199692811acd421c088014c704" x-amz-version-id: Nlnk2.JorJZybR.o99cMJaeqL5DY30nF X-Cache: Hit from cloudfront Via: 1.1 d1c64d10e2bd86b43a04bfb63e7766c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Pk4r0WsbatIp1VUn44xjttoHNUlQvw9QgEcfCdGckAlhmQP19CQpWQ== Age: 6299 CF-Cache-Status: HIT Expires: Fri, 26 Apr 2024 18:37:57 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88f6c13a668-MIA
2024-04-26 18:32:57 UTC	621	IN	Data Raw: 3c 21 2d 2d 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 49 63 6f 4d 6f 6f 6e 2e 69 6f 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 3c 74 69 74 6c 65 3e 61 73 73 65 74 2d 62 74 63 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 37 39 33 31 61 22 20 64 3d 22 4d 31 36 20 30 63 2d 38 2e 38 33 36 20 30 2d 31 36 20 37 2e 31 36 33 2d 31 36 20 31 36 73 37 2e 31 36 33 20 31 36 20 31 36 20 31 36 63 38 2e 38 33 37 20 30 20 31 36 2d 37 2e 31 36 33 20 31 36 2d 31 36 73 2d 37 2e 31 36 33 2d Data Ascii: ... Generated by IcoMoon.io --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"><title>asset-btc</title><path fill="#f7931a" d="M16 0c-8.836 0-16 7.163-16 16s7.163 16 16 16c8.837 0 16-7.163 16-16s-7.163-
2024-04-26 18:32:57 UTC	776	IN	Data Raw: 2e 39 37 39 20 33 2e 37 34 39 20 31 2e 30 30 35 20 30 2e 38 31 39 2d 33 2e 30 35 35 20 31 2e 39 30 36 20 30 2e 35 31 31 2d 30 2e 38 31 39 20 33 2e 30 35 35 20 31 2e 34 35 32 20 30 2e 33 38 39 20 30 2e 38 31 39 2d 33 2e 30 35 35 20 31 2e 39 30 36 20 30 2e 35 31 31 2d 30 2e 38 32 38 20 33 2e 30 39 31 63 31 2e 33 39 38 20 30 2e 34 36 39 20 32 2e 33 38 33 20 31 2e 30 32 33 20 33 2e 31 32 33 20 31 2e 39 35 33 20 30 2e 39 35 37 20 31 2e 32 30 31 20 30 2e 34 38 34 20 32 2e 37 31 36 20 30 2e 33 36 20 33 2e 30 37 35 2d 30 2e 31 32 35 20 30 2e 33 35 38 2d 30 2e 34 37 34 20 31 2e 30 31 38 2d 30 2e 39 31 36 20 31 2e 33 38 36 73 2d 31 2e 33 34 38 20 30 2e 36 31 33 2d 31 2e 33 34 38 20 30 2e 36 31 33 20 30 2e 38 37 33 20 30 2e 34 34 34 20 31 2e 33 39 33 20 31 2e 31 30 Data Ascii: .979 3.749 1.005 0.819-3.055 1.906 0.511-0.819 3.055 1.452 0.389 0.819-3.055 1.906 0.511-0.828 3.091c1.398 0.469 2.383 1.023 3.123 1.953 0.957 1.201 0.484 2.716 0.36 3.075-0.125 0.358-0.474 1.018-0.916 1.386s-1.348 0.613-1.348 0.613 0.873 0.444 1.393 1.10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50136	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	818	OUT	GET /media/asset-icons/asset-shiba-inu.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/svg+xml Content-Length: 4191 Connection: close Last-Modified: Thu, 29 Feb 2024 16:46:52 GMT ETag: "c8f537075552778951ff474d65fabc15" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: FPb4EnneUdkZ_gbVnbEyx9K7cvTVmaGY X-Cache: Hit from cloudfront Via: 1.1 221c16f6368b9673111421e368023144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: b1ZaaaNLIQkptoBdSEncLBiV4dX4DTsCOYj02_aRwQYLqd5WFx-nPw== Age: 19949 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88f7ede31ea-MIA
2024-04-26 18:32:57 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 20 36 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 3c 72 65 63 74 20 78 3d 22 30 2e 37 39 39 39 38 38 22 20 79 3d 22 30 2e 38 31 32 30 31 32 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 74 74 65 72 6e 30 29 22 2f Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="32" height="32" viewBox="0 0 51 61" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><rect x="0.799988" y="0.812012" width="50" height="60" fill="url(#pattern0)"/
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 45 77 45 41 6d 70 77 59 41 41 41 41 41 58 4e 53 52 30 49 41 72 73 34 63 36 51 41 41 41 41 52 6e 51 55 31 42 41 41 43 78 6a 77 76 38 59 51 55 41 41 41 70 4a 53 55 52 42 56 48 67 42 37 56 70 72 62 42 54 58 46 54 35 33 5a 74 66 72 74 63 48 73 68 6b 64 49 65 47 32 6b 4a 46 42 42 77 52 57 31 4a 61 64 46 47 43 45 52 6f 6c 51 4b 70 46 4c 6f 55 7a 67 6f 53 58 2b 6b 4c 61 62 4a 6a 34 61 30 67 6c 52 52 53 31 4c 55 6d 4b 4a 45 45 55 4b 46 70 47 70 54 61 49 4a 4e 66 71 54 51 4e 44 77 55 42 56 49 51 78 55 6c 41 55 43 6b 71 61 77 78 4a 47 6f 68 33 62 57 4e 37 58 33 4e 76 7a 72 6e 7a 32 4a 6d 64 6d 66 58 73 32 70 41 2f 66 50 4c 31 7a 4e 79 35 6a 2f 50 64 63 38 36 39 35 39 35 5a 67 4a 75 34 69 65 73 43 56 70 70 78 37 62 58 70 62 63 44 45 4c 67 44 52 72 54 4b 6c 49 37 72 Data Ascii: EwEAmpwYAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAApJSURBVHgB7VprbBTXFT53ZtfrtcHshkdIeG2kJFBBwRW1JadFGCERolQKpFLoUzgoSX+kLabJj4a0glRRS1LUmKJEEUKFpGpTaIJNfqTQNDwUBVIQxUlAUCkqawxJGoh3bWN7X3Nvzrnz2JmdmfXs2pA/fPL1zNy5j/Pdc869595ZgJu4iesCVppx7bXpbcDELgDRrTKlI7r
2024-04-26 18:32:57 UTC	1369	IN	Data Raw: 73 78 4d 4e 43 2f 39 35 65 51 63 33 43 69 77 63 49 50 2f 75 37 67 75 76 4b 6b 4e 45 37 52 31 73 4f 37 6c 66 38 31 70 62 2f 7a 64 44 4a 52 44 2b 4f 37 48 6f 47 37 31 66 36 48 2b 6f 55 2b 68 5a 76 36 54 4d 42 61 45 45 6d 74 6b 57 35 52 71 6d 6a 71 38 43 52 6b 7a 4b 44 63 47 32 41 51 4e 66 73 71 49 77 43 55 52 74 4c 65 31 6a 68 4b 6b 77 6e 4d 35 33 34 35 72 47 70 2b 78 4f 67 7a 50 66 77 4a 43 64 7a 30 4b 31 55 43 70 6e 77 57 52 35 71 4c 77 34 54 76 57 51 4f 68 75 2f 37 62 45 75 58 78 70 56 6b 78 56 64 61 30 6f 42 71 4e 57 56 36 32 72 33 67 36 75 54 6d 73 4a 6c 42 63 45 58 67 4e 41 41 2b 57 4c 59 66 64 4b 4b 52 52 64 64 67 57 6a 4c 64 64 75 43 2f 63 63 4d 6f 6a 7a 67 76 62 35 63 56 63 65 54 35 32 46 61 73 44 54 5a 7a 33 61 50 2b 5a 62 58 72 6d 33 7a 70 55 6e Data Ascii: sxMNC/95eQc3CiwcIP/u7guvKkNE7R1sO7lf81pb/zdDJRD+O7HoG71f6H+oU+hZv6TMBaEEmtkW5Rqmjq8CRkzKDcG2AQNfsqIwCURtLe1jhKkwnM5345rGp+xOgzPfwJCdz0K1UCpnwWR5qLw4TvWQOhu/7bEuXxpVkxVda0oBqNWV62r3g6uTmsJlBcEXgNAA+WLYfdKKRRddgWjLdduC/ccMojzgvb5cVceT52FasDTZz3aP+ZbXrm3zpUn
2024-04-26 18:32:57 UTC	873	IN	Data Raw: 30 32 6d 65 62 50 6e 53 74 32 37 74 6a 68 57 35 5a 6e 30 34 48 37 48 56 79 2b 56 42 6a 79 58 6e 43 78 78 4d 7a 44 39 48 4a 77 63 57 50 67 42 6f 4f 6b 69 7a 30 39 6f 71 57 70 53 66 53 6e 30 31 58 56 4c 30 33 5a 33 58 38 79 53 59 67 42 74 62 68 46 74 79 5a 6a 77 58 55 56 61 52 39 32 51 2b 62 4a 44 54 42 65 6d 44 56 4c 4e 35 57 47 68 67 59 59 4b 77 52 2b 6b 63 34 2b 61 2f 6c 6b 55 74 4f 4b 45 35 57 31 41 6a 36 48 69 38 6f 76 56 58 6b 6b 46 4e 4e 4f 2f 42 76 55 52 59 74 41 6e 54 73 50 4b 67 47 74 48 57 39 32 64 65 48 47 36 78 4c 55 52 69 4c 79 65 65 66 4f 6e 66 44 50 67 77 66 6c 34 54 71 52 6f 72 7a 6a 4f 43 32 66 50 6e 55 4b 35 69 39 59 55 46 48 37 6d 61 65 66 67 73 4c 62 42 2b 55 39 4c 6f 49 64 4d 51 36 57 55 7a 73 69 74 4a 51 4b 71 2f 41 7a 63 71 64 38 45 Data Ascii: 02mebPnSt27tjhW5Zn04H7HVy+VBjyXnCxxMzD9HJwcWPgBoOkiz09oqWpSfSn01XVL03Z3X8ySYgBtbhFtyZjwXUVaR92Q+bJDTBemDVLN5WGhgYYKwR+kc4+a/lkUtOKE5W1Aj6Hi8ovVXkkFNNO/BvURYtAnTsPKgGtHW92deHG6xLURiLyeefOnfDPgwfl4TqRorzjOC2fPnUK5i9YUFH7maefgsLbB+U9LoIdMQ6WUzsitJQKq/Azcqd8E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50137	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	812	OUT	GET /media/asset-icons/asset-eth.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/svg+xml Content-Length: 410 Connection: close Last-Modified: Mon, 22 Jun 2020 22:23:12 GMT ETag: "46a990311976549a778e1263866506d8" x-amz-version-id: f_V0wD52VQX007vyrVBzYtGgm.koikCq X-Cache: Hit from cloudfront Via: 1.1 177fd0f8c3e2c78883d72714aa07183a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: AYMVp5gNDavLuRIsZkmKR5y5j7aClUFh9rjF5sVDLV6rztYFsZ6TTQ== Age: 5332 CF-Cache-Status: HIT Expires: Fri, 26 Apr 2024 18:37:57 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88f9e602275-MIA
2024-04-26 18:32:57 UTC	410	IN	Data Raw: 3c 21 2d 2d 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 49 63 6f 4d 6f 6f 6e 2e 69 6f 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 3c 74 69 74 6c 65 3e 61 73 73 65 74 2d 65 74 68 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 39 34 39 34 39 22 20 64 3d 22 4d 31 36 20 30 63 38 2e 38 33 37 20 30 20 31 36 20 37 2e 31 36 33 20 31 36 20 31 36 73 2d 37 2e 31 36 33 20 31 36 2d 31 36 20 31 36 63 2d 38 2e 38 33 37 20 30 2d 31 36 2d 37 2e 31 36 33 2d 31 36 2d 31 36 73 37 2e 31 36 33 2d Data Ascii: ... Generated by IcoMoon.io --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"><title>asset-eth</title><path fill="#494949" d="M16 0c8.837 0 16 7.163 16 16s-7.163 16-16 16c-8.837 0-16-7.163-16-16s7.163-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50140	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	607	OUT	GET /media/New%20navigation_Rebrand%203.0/Crypto%20Index%20new.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/svg+xml Content-Length: 1015 Connection: close Last-Modified: Mon, 20 Dec 2021 10:14:20 GMT ETag: "dd691ba6977370e6d0cdbd36d889fe83" Cache-Control: public, max-age=36000 x-amz-version-id: l5Q2Ny6ZrQvDvoiKB_s343by8Xmr3v7r X-Cache: Hit from cloudfront Via: 1.1 177fd0f8c3e2c78883d72714aa07183a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 7Hh38wyr237vdIoPKRlJ9WAyaOTCOjDt-f9pcBDadp4pbN4-NhH5uw== Age: 20501 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a88fe8ed8df4-MIA
2024-04-26 18:32:57 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 43 72 79 70 74 6f 5f 49 6e 64 65 78 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 43 72 79 70 74 6f 20 49 6e 64 65 78 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 72 78 3d 22 31 38 22 20 66 69 6c 6c 3d 22 23 66 32 66 61 66 36 22 2f 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 38 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Crypto_Index" data-name="Crypto Index" xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <rect id="Rectangle" width="36" height="36" rx="18" fill="#f2faf6"/> <g id="Group_138
2024-04-26 18:32:57 UTC	397	IN	Data Raw: 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 39 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 32 39 37 22 20 64 3d 22 4d 32 33 34 2e 38 33 31 2d 37 30 35 2e 33 39 61 37 2e 31 2c 37 2e 31 2c 30 2c 30 2c 31 2d 37 2e 31 2c 37 2e 31 2c 37 2e 31 2c 37 2e 31 2c 30 2c 30 2c 31 2d 37 2e 31 2d 37 2e 31 2c 37 2e 31 2c 37 2e 31 2c 30 2c 30 2c 31 2c 37 2e 31 2d 37 2e 31 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 20 2d 31 2e 39 34 31 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 39 38 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 32 39 Data Ascii: > <path id="Path_297" data-name="Path 297" d="M234.831-705.39a7.1,7.1,0,0,1-7.1,7.1,7.1,7.1,0,0,1-7.1-7.1,7.1,7.1,0,0,1,7.1-7.1" transform="translate(0 -1.941)" fill="none" stroke="#27d17f" stroke-width="1"/> <path id="Path_298" data-name="Path 29

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50114	172.64.154.69	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	1121	OUT	GET /multiplatformdownload?clt=Web&redirect=aHR0cHM6Ly9hcHAucGx1czUwMC5jb20vdHJhZGU%2fSXNSZWFsTW9kZT1UcnVlJmhsPWRlJmlkPTEyNzEwOA%3d%3d&id=127108&tags=lp0ai49b7tf5&pl=2 HTTP/1.1 Host: www.plus500.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://onlinetopchoice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: InAppView=False; IP=!0bn/xwi1K9mdJj/0UUWQT2jIv4XvHVvabLcBW3O0fPT5DcNgAsedoieCm5WV8gp7bcD9DlccdSpP8x6hKXcOs4AF5G9J7PS1Mo+lHB+rDfx6L73DwVAP0GNl71ZcpzKb+OdR1UTKWcs/MR78ToyIBQYEDLuNI6M=; _cfuvid=.ZLCGAswrtSeIPop225MZwozKgjgqUSKKyn0i106XKA-1714156377022-0.0.1.1-604800000
2024-04-26 18:32:57 UTC	780	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private Location: /en/multiplatformdownload?clt=Web&redirect=aHR0cHM6Ly9hcHAucGx1czUwMC5jb20vdHJhZGU%2fSXNSZWFsTW9kZT1UcnVlJmhsPWRlJmlkPTEyNzEwOA%3d%3d&id=127108&tags=lp0ai49b7tf5&pl=2 x-frame-options: Deny Set-Cookie: InAppView=False; path=/; SameSite=None; secure; HttpOnly Strict-Transport-Security: max-age=31536000 CF-Cache-Status: DYNAMIC expect-ct: max-age=86400, enforce x-content-type-options: nosniff x-xss-protection: 1; mode=block referrer-policy: origin-when-cross-origin Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 87a8a88f0ad1257d-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:32:57 UTC	306	IN	Data Raw: 31 32 62 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 65 6e 2f 6d 75 6c 74 69 70 6c 61 74 66 6f 72 6d 64 6f 77 6e 6c 6f 61 64 3f 63 6c 74 3d 57 65 62 26 61 6d 70 3b 72 65 64 69 72 65 63 74 3d 61 48 52 30 63 48 4d 36 4c 79 39 68 63 48 41 75 63 47 78 31 63 7a 55 77 4d 43 35 6a 62 32 30 76 64 48 4a 68 5a 47 55 25 32 66 53 58 4e 53 5a 57 46 73 54 57 39 6b 5a 54 31 55 63 6e 56 6c 4a 6d 68 73 50 57 52 6c 4a 6d 6c 6b 50 54 45 79 4e 7a 45 77 4f 41 25 33 64 25 33 64 26 61 6d 70 3b 69 64 3d 31 32 37 31 30 38 26 61 6d 70 3b 74 61 67 73 3d 6c 70 30 61 69 34 Data Ascii: 12b<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/en/multiplatformdownload?clt=Web&redirect=aHR0cHM6Ly9hcHAucGx1czUwMC5jb20vdHJhZGU%2fSXNSZWFsTW9kZT1UcnVlJmhsPWRlJmlkPTEyNzEwOA%3d%3d&id=127108&tags=lp0ai4
2024-04-26 18:32:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50142	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	599	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%201306.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/svg+xml Content-Length: 1529 Connection: close Last-Modified: Mon, 20 Dec 2021 10:14:56 GMT ETag: "870f0382dea95c8dc1965cd5b89f6583" Cache-Control: public, max-age=36000 x-amz-version-id: cL8nO1S.LQA6MSqnI47By1THBOP5stVZ X-Cache: Miss from cloudfront Via: 1.1 dcccf6c408219d8b851fcd12a0068cea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: F6sK8t-G6-tmVWJQZKyBapNW0p2xy_Frg7IJzl3ca6a3eybGjcpwGA== CF-Cache-Status: HIT Age: 20501 Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8903f3d8754-MIA
2024-04-26 18:32:57 UTC	617	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 30 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 33 30 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 30 33 20 2d 31 39 39 29 22 3e 0a 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 72 78 3d 22 31 38 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_1306" data-name="Group 1306" transform="translate(-203 -199)"> <rect id="Rectangle" width="36" height="36" rx="18
2024-04-26 18:32:57 UTC	912	IN	Data Raw: 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 31 33 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 31 33 22 20 78 32 3d 22 31 2e 39 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 37 2e 33 34 34 20 31 34 2e 33 33 37 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 31 34 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 31 34 22 20 78 32 3d 22 31 2e 39 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 Data Ascii: ="none" stroke="#27d17f" stroke-width="1"/> <line id="Line_213" data-name="Line 213" x2="1.96" transform="translate(7.344 14.337)" fill="none" stroke="#27d17f" stroke-width="1"/> <line id="Line_214" data-name="Line 214" x2="1.96" transform="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50141	104.22.51.98	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	1044	OUT	GET /mw?google_gid=CAESEH572_eSjRp97nTOhZn8BNs&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=1a1f3838-e54f-4c21-6419-351f87b95f28&reqId=c6201517-1960-426a-5eed-0fdae320a0a6&zcluid=293f006c26e11ff7&zdid=1332 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=1a1f3838-e54f-4c21-6419-351f87b95f28; zsc=%B6Y%AFD%13%E1%7Du%C3%40%7B%CEg%3FY%8Cz%EA%99%81Y+%18e%23%25t%FC%09%C1p%F3%A3%92%A2%27M%FD%0C%B1%0D%9C%BB%D19%26%1F%98HLp%D9%C7%2Fg%CD%F7%2BzA%1D%AE%D89%A3%3AX%A5%E3%BB%C3%00%86%BEt~%EBX%A4%EB%B0%7DH
2024-04-26 18:32:57 UTC	581	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/png Content-Length: 95 Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://t.sharethis.com set-cookie: zc=1a1f3838-e54f-4c21-6419-351f87b95f28; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8901e0cdb15-MIA
2024-04-26 18:32:57 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50144	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	599	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%201307.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/svg+xml Content-Length: 995 Connection: close Last-Modified: Mon, 20 Dec 2021 10:19:06 GMT ETag: "5d6e0eab88b3def1a2615330a1b41a9d" Cache-Control: public, max-age=36000 x-amz-version-id: 1zkB5Deth2DvOYBqni3imXlc8YTIE6lJ X-Cache: Hit from cloudfront Via: 1.1 4c3d8e28c41258b22a9e9534d51ead58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: MzFHZPjWKBM4kks5PTV-51nJIF1PezIiSqR-PGCf2CRSXyFOv7KT5Q== Age: 20500 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8903ae50a3e-MIA
2024-04-26 18:32:57 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 30 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 33 30 37 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 30 33 20 2d 32 39 30 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 32 37 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 32 37 30 22 20 74 72 61 6e 73 66 6f 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_1307" data-name="Group 1307" transform="translate(-203 -290)"> <g id="Group_1270" data-name="Group 1270" transfor
2024-04-26 18:32:57 UTC	376	IN	Data Raw: 2e 37 39 33 2d 31 2e 37 39 33 56 31 32 2e 39 41 31 2e 37 39 33 2c 31 2e 37 39 33 2c 30 2c 30 2c 30 2c 32 30 2e 38 32 34 2c 31 31 2e 31 48 38 2e 34 31 41 31 2e 37 39 33 2c 31 2e 37 39 33 2c 30 2c 30 2c 30 2c 36 2e 36 31 37 2c 31 32 2e 39 76 32 2e 30 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 32 39 2e 38 36 20 32 31 33 2e 31 33 35 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 30 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 30 39 22 20 78 31 3d 22 31 2e 32 31 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 34 Data Ascii: .793-1.793V12.9A1.793,1.793,0,0,0,20.824,11.1H8.41A1.793,1.793,0,0,0,6.617,12.9v2.05" transform="translate(329.86 213.135)" fill="none" stroke="#27d17f" stroke-width="1"/> <line id="Line_209" data-name="Line 209" x1="1.215" transform="translate(34

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50143	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	599	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%201308.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/svg+xml Content-Length: 1236 Connection: close Last-Modified: Mon, 20 Dec 2021 10:19:26 GMT ETag: "12fdfc21ae7e8110d9da60325a48662d" Cache-Control: public, max-age=36000 x-amz-version-id: WYeRWEVlMwxIDvmiUShPJSyvVc_KaWVt X-Cache: Hit from cloudfront Via: 1.1 8a771ca27e5a3c9e06b12b7af5d25aa4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: NTbXacy7upwdT0dB4L3z1IypTx8WRBLxSG90d2C-_9EMHHdciWKWkw== Age: 20501 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a89039f6a65d-MIA
2024-04-26 18:32:57 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 30 38 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 33 30 38 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 32 30 33 20 2d 33 34 33 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 37 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 30 37 39 22 20 74 72 61 6e 73 66 6f 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_1308" data-name="Group 1308" transform="translate(-203 -343)"> <g id="Group_1079" data-name="Group 1079" transfor
2024-04-26 18:32:57 UTC	618	IN	Data Raw: 2e 31 38 2c 30 2c 35 2e 33 31 36 2c 31 2e 38 37 38 2c 35 2e 33 31 36 2c 34 2e 36 37 32 61 34 2e 30 30 37 2c 34 2e 30 30 37 2c 30 2c 30 2c 31 2d 2e 37 32 39 2c 32 2e 33 36 38 6c 2d 2e 34 30 38 2e 35 2e 32 33 33 2e 32 36 38 61 33 2e 39 31 33 2c 33 2e 39 31 33 2c 30 2c 30 2c 31 2c 2e 38 39 31 2c 32 2e 35 38 33 63 2e 30 31 32 2c 32 2e 37 30 38 2d 31 2e 39 34 37 2c 34 2e 35 33 34 2d 34 2e 39 39 31 2c 34 2e 36 35 32 6c 2d 2e 33 31 36 2e 30 30 37 5a 6d 31 30 2e 36 33 36 2d 36 2e 31 30 38 63 2d 2e 39 30 35 2e 35 34 34 2d 32 2e 33 30 38 2e 37 34 36 2d 35 2e 33 36 2e 37 37 31 6c 2d 33 2e 33 2e 30 30 35 2d 2e 37 39 2c 34 2e 33 34 38 2c 35 2e 39 38 31 2e 30 31 34 63 32 2e 36 31 39 2c 30 2c 34 2e 33 31 2d 31 2e 34 34 38 2c 34 2e 33 31 2d 33 2e 36 39 31 61 33 2e 32 34 Data Ascii: .18,0,5.316,1.878,5.316,4.672a4.007,4.007,0,0,1-.729,2.368l-.408.5.233.268a3.913,3.913,0,0,1,.891,2.583c.012,2.708-1.947,4.534-4.991,4.652l-.316.007Zm10.636-6.108c-.905.544-2.308.746-5.36.771l-3.3.005-.79,4.348,5.981.014c2.619,0,4.31-1.448,4.31-3.691a3.24

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50145	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	605	OUT	GET /media/New%20navigation_Rebrand%203.0/BitpandaClub_36x36.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:57 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/svg+xml Content-Length: 1363 Connection: close Last-Modified: Fri, 16 Jun 2023 08:12:51 GMT ETag: "876891301cde864081e9e069564258ed" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: QJeHkL8fmLwsfdv4vt9yj1x3mKfZsuw7 X-Cache: Hit from cloudfront Via: 1.1 221c16f6368b9673111421e368023144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: BBx1ySB9WyNMmNaEiEvu7DjoB9YNfeE8HSnw6Rbt3gMN874vD64Diw== Age: 20501 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:57 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a89048496db0-MIA
2024-04-26 18:32:57 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 34 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 27.4.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-26 18:32:57 UTC	783	IN	Data Raw: 09 09 3c 70 61 74 68 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 22 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 32 33 2c 32 39 37 4c 32 32 33 2c 32 39 37 63 39 2e 39 2c 30 2c 31 38 2c 38 2e 31 2c 31 38 2c 31 38 6c 30 2c 30 63 30 2c 39 2e 39 2d 38 2e 31 2c 31 38 2d 31 38 2c 31 38 6c 30 2c 30 63 2d 39 2e 39 2c 30 2d 31 38 2d 38 2e 31 2d 31 38 2d 31 38 6c 30 2c 30 0a 09 09 09 43 32 30 35 2c 33 30 35 2e 31 2c 32 31 33 2e 31 2c 32 39 37 2c 32 32 33 2c 32 39 37 7a 22 2f 3e 0a 09 3c 2f 67 3e 0a 3c 2f 67 3e 0a 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 32 33 34 34 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 2e 32 34 33 20 31 29 22 3e 0a 09 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 32 39 22 20 63 6c 61 73 73 3d 22 73 74 31 22 20 Data Ascii: <path id="Rectangle" class="st0" d="M223,297L223,297c9.9,0,18,8.1,18,18l0,0c0,9.9-8.1,18-18,18l0,0c-9.9,0-18-8.1-18-18l0,0C205,305.1,213.1,297,223,297z"/></g></g><g id="Group_2344" transform="translate(1.243 1)"><path id="Path_29" class="st1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50132	141.94.171.214	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	744	OUT	GET /?partner=138&gdpr=0&gdpr_consent=&mapped=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=293f006c26e11ff7; done_redirects147=1; done_redirects104=1; done_redirects219=1
2024-04-26 18:32:57 UTC	232	IN	HTTP/1.1 200 OK set-cookie: cookie=293f006c26e11ff7; Max-Age=31536000; Expires=Sat, 26 Apr 2025 18:32:57 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None content-type: image/gif content-length: 35 connection: close
2024-04-26 18:32:57 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50139	52.200.221.249	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	822	OUT	GET /sync/3?RampID=Xc6491Vm-1pzA1iTVLXhV9SS2mgbcdWTy-hA8Ju5KWnd-fmds&197059634fe141449898fb53dec95bfd-7e8eb141692d47379bb430dc67014cab-2-269-api5137 HTTP/1.1 Host: ecf.d41.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D41ID=v3\|v4\|197059634fe141449898fb53dec95bfd\|https://d41.co; D41IDT=7e8eb141692d47379bb430dc67014cab
2024-04-26 18:32:57 UTC	881	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:57 GMT Content-Type: image/gif; charset=ISO-8859-1 Content-Length: 43 Connection: close access-control-allow-origin: https://t.sharethis.com access-control-allow-credentials: true Cache-control: no-store Pragma: no-cache X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Referrer-Policy: no-referrer-when-downgrade Expect-CT: max-age=30, report-uri="https://a54b4ab95d40a8b116fae47033b75682.report-uri.com/r/d/ct/reportOnly" Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; frame-ancestors 'self'; form-action 'self'; Set-Cookie: D41ID=v3\|v4\|197059634fe141449898fb53dec95bfd\|https://d41.co; path=/; expires=Sat, 26 Apr 2025 18:32:57 GMT; domain=.d41.co; samesite=none; secure
2024-04-26 18:32:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50138	54.146.132.60	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	604	OUT	GET /cookie-sync/id5?us_privacy= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:32:57 UTC	380	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 18:32:57 GMT location: https://match.prod.bidr.io/cookie-sync/id5?us_privacy=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Fri, 26 Apr 2024 18:42:57 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50128	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:57 UTC	807	OUT	HEAD /movie HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/movie Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:32:58 UTC	834	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:58 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hBIbaaM2jaf0BWioe0C1E5YbqoCW3nqRy67ZY3kRa5ZBP4D31eK4K9%2F3SWKLg2PwtSkKSQ3B7b%2FbfI4jwRXAZRzRA9XEV2zIs5Em%2Fqz0r7CWsWeU6gEBInyNAdcQIE8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a891bee309aa-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50150	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:59 UTC	606	OUT	GET /media/New%20navigation_Rebrand%203.0/spotlight_icon_menu.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:59 UTC	790	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:59 GMT Content-Type: image/svg+xml Content-Length: 49750 Connection: close Last-Modified: Wed, 01 Mar 2023 19:04:44 GMT ETag: "cad941af7a899a4b48019eab7ec22124" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: r8P6nXCYxJFE.jngs.GMHy0HSrlEMzto X-Cache: Hit from cloudfront Via: 1.1 0bca35acf826729de8b75fb344bf9f44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 2wivHm0LEsodcNSHluHdROclWYrM5e1E2qH3AyDh7SFNd0sG2wqX0Q== Age: 20502 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:32:59 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a89c0f07030a-MIA
2024-04-26 18:32:59 UTC	579	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 22 20 68 65 69 67 68 74 3d 22 35 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 35 36 22 20 68 65 69 67 68 74 3d 22 35 36 22 20 72 78 3d 22 32 38 22 20 66 69 6c 6c 3d 22 23 46 32 46 41 46 36 22 2f 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 34 33 2e 30 33 31 33 20 31 39 2e 34 35 38 34 43 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56" height="56" viewBox="0 0 56 56" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="56" height="56" rx="28" fill="#F2FAF6"/><path fill-rule="evenodd" clip-rule="evenodd" d="M43.0313 19.4584C
2024-04-26 18:32:59 UTC	1369	IN	Data Raw: 33 20 34 30 2e 37 36 33 36 48 31 37 2e 37 30 31 31 43 32 30 2e 33 33 32 31 20 34 31 2e 36 31 36 36 20 32 33 2e 30 36 37 37 20 34 32 2e 30 33 32 35 20 32 35 2e 38 31 34 33 20 34 31 2e 39 39 37 31 43 33 32 2e 39 32 36 36 20 34 31 2e 39 39 37 31 20 33 38 2e 34 35 33 38 20 33 39 2e 36 35 39 34 20 33 38 2e 36 35 38 37 20 33 36 2e 35 35 37 32 56 33 36 2e 35 30 39 32 56 33 36 2e 33 37 36 33 56 33 30 2e 32 31 36 32 43 34 31 2e 33 37 37 39 20 32 39 2e 31 39 33 33 20 34 32 2e 39 31 38 36 20 32 37 2e 37 35 33 20 34 33 2e 30 33 31 33 20 32 36 2e 31 35 33 39 56 32 36 2e 31 32 34 33 43 34 33 2e 30 33 32 39 20 32 36 2e 31 30 37 31 20 34 33 2e 30 33 32 39 20 32 36 2e 30 38 39 38 20 34 33 2e 30 33 31 33 20 32 36 2e 30 37 32 36 56 31 39 2e 36 32 34 35 56 31 39 2e 35 30 36 Data Ascii: 3 40.7636H17.7011C20.3321 41.6166 23.0677 42.0325 25.8143 41.9971C32.9266 41.9971 38.4538 39.6594 38.6587 36.5572V36.5092V36.3763V30.2162C41.3779 29.1933 42.9186 27.753 43.0313 26.1539V26.1243C43.0329 26.1071 43.0329 26.0898 43.0313 26.0726V19.6245V19.506
2024-04-26 18:32:59 UTC	1369	IN	Data Raw: 34 2e 31 31 34 35 4c 33 30 2e 37 38 34 37 20 33 34 2e 31 31 34 35 43 33 30 2e 39 31 32 36 20 33 34 2e 30 38 38 31 20 33 31 2e 30 34 31 34 20 33 34 2e 30 36 31 35 20 33 31 2e 31 38 30 37 20 33 34 2e 30 33 38 43 33 31 2e 34 34 33 37 20 33 33 2e 39 39 33 37 20 33 31 2e 36 39 33 31 20 33 33 2e 39 33 38 33 20 33 31 2e 39 33 32 32 20 33 33 2e 38 37 39 32 48 33 31 2e 39 35 39 36 4c 33 32 2e 32 34 39 39 20 33 33 2e 38 31 32 37 4c 33 32 2e 33 36 36 31 20 33 33 2e 37 38 33 32 4c 33 32 2e 37 30 37 37 20 33 33 2e 36 39 30 39 4c 33 32 2e 38 35 31 32 20 33 33 2e 36 34 36 36 4c 33 33 2e 31 39 32 38 20 33 33 2e 35 33 39 35 4c 33 33 2e 32 34 37 34 20 33 33 2e 34 35 34 35 43 33 33 2e 35 36 31 33 20 33 33 2e 33 35 35 33 20 33 33 2e 38 34 34 33 20 33 33 2e 32 34 37 37 20 33 Data Ascii: 4.1145L30.7847 34.1145C30.9126 34.0881 31.0414 34.0615 31.1807 34.038C31.4437 33.9937 31.6931 33.9383 31.9322 33.8792H31.9596L32.2499 33.8127L32.3661 33.7832L32.7077 33.6909L32.8512 33.6466L33.1928 33.5395L33.2474 33.4545C33.5613 33.3553 33.8443 33.2477 3
2024-04-26 18:32:59 UTC	1369	IN	Data Raw: 35 2e 30 38 31 37 20 33 31 2e 30 39 39 35 43 33 34 2e 39 33 33 38 20 33 31 2e 31 32 34 36 20 33 34 2e 37 39 32 20 33 31 2e 31 34 38 37 20 33 34 2e 36 38 32 32 20 33 31 2e 31 36 38 35 43 33 34 2e 35 39 37 37 20 33 31 2e 31 38 33 37 20 33 34 2e 35 32 37 34 20 33 31 2e 31 39 33 38 20 33 34 2e 34 34 35 34 20 33 31 2e 32 30 35 36 43 33 34 2e 33 38 38 33 20 33 31 2e 32 31 33 38 20 33 34 2e 33 32 35 35 20 33 31 2e 32 32 32 38 20 33 34 2e 32 34 38 34 20 33 31 2e 32 33 35 43 33 34 2e 31 31 37 39 20 33 31 2e 32 35 35 35 20 33 33 2e 39 38 37 34 20 33 31 2e 32 37 32 35 20 33 33 2e 38 35 35 38 20 33 31 2e 32 38 39 36 4c 33 33 2e 38 35 35 37 20 33 31 2e 32 38 39 36 4c 33 33 2e 38 35 35 36 20 33 31 2e 32 38 39 36 43 33 33 2e 37 39 37 38 20 33 31 2e 32 39 37 31 20 33 33 Data Ascii: 5.0817 31.0995C34.9338 31.1246 34.792 31.1487 34.6822 31.1685C34.5977 31.1837 34.5274 31.1938 34.4454 31.2056C34.3883 31.2138 34.3255 31.2228 34.2484 31.235C34.1179 31.2555 33.9874 31.2725 33.8558 31.2896L33.8557 31.2896L33.8556 31.2896C33.7978 31.2971 33
2024-04-26 18:32:59 UTC	1369	IN	Data Raw: 31 20 32 37 2e 34 34 32 32 4c 31 37 2e 37 32 31 33 20 32 37 2e 33 39 34 32 43 31 37 2e 36 34 32 34 20 32 37 2e 32 35 31 39 20 31 37 2e 35 37 32 38 20 32 37 2e 31 30 33 38 20 31 37 2e 35 31 32 39 20 32 36 2e 39 35 31 5a 4d 32 35 2e 38 32 34 36 20 34 30 2e 38 39 30 31 43 32 33 2e 31 38 36 39 20 34 30 2e 39 32 35 38 20 32 30 2e 35 35 39 34 20 34 30 2e 35 32 37 33 20 31 38 2e 30 33 32 35 20 33 39 2e 37 30 38 34 48 31 38 2e 30 30 31 38 43 31 35 2e 35 38 33 32 20 33 38 2e 38 37 37 34 20 31 34 2e 30 39 30 34 20 33 37 2e 36 36 39 38 20 31 34 2e 30 31 35 32 20 33 36 2e 34 38 30 36 43 31 34 2e 30 31 36 39 20 33 36 2e 34 34 39 39 20 31 34 2e 30 31 36 39 20 33 36 2e 34 31 39 20 31 34 2e 30 31 35 32 20 33 36 2e 33 38 38 33 56 33 32 2e 33 33 37 4c 31 34 2e 31 32 31 31 Data Ascii: 1 27.4422L17.7213 27.3942C17.6424 27.2519 17.5728 27.1038 17.5129 26.951ZM25.8246 40.8901C23.1869 40.9258 20.5594 40.5273 18.0325 39.7084H18.0018C15.5832 38.8774 14.0904 37.6698 14.0152 36.4806C14.0169 36.4499 14.0169 36.419 14.0152 36.3883V32.337L14.1211
2024-04-26 18:32:59 UTC	1369	IN	Data Raw: 33 38 35 20 33 36 2e 33 34 32 38 20 33 33 2e 34 32 32 38 4c 33 36 2e 35 30 36 37 20 33 33 2e 33 31 39 33 4c 33 36 2e 35 36 39 34 20 33 33 2e 32 37 37 35 4c 33 36 2e 35 36 39 34 20 33 33 2e 32 37 37 35 43 33 36 2e 36 39 31 20 33 33 2e 31 39 36 33 20 33 36 2e 38 30 39 37 20 33 33 2e 31 31 37 20 33 36 2e 39 32 33 35 20 33 33 2e 30 33 35 4c 33 37 2e 30 38 30 36 20 33 32 2e 39 31 33 31 43 33 37 2e 32 30 33 36 20 33 32 2e 38 31 37 31 20 33 37 2e 33 31 39 38 20 33 32 2e 37 32 31 31 20 33 37 2e 34 32 32 32 20 33 32 2e 36 32 31 34 4c 33 37 2e 35 35 38 39 20 33 32 2e 34 39 35 38 43 33 37 2e 35 37 34 33 20 33 32 2e 34 37 39 32 20 33 37 2e 35 39 32 32 20 33 32 2e 34 36 33 35 20 33 37 2e 36 31 30 31 20 33 32 2e 34 34 37 38 43 33 37 2e 36 32 38 31 20 33 32 2e 34 33 32 Data Ascii: 385 36.3428 33.4228L36.5067 33.3193L36.5694 33.2775L36.5694 33.2775C36.691 33.1963 36.8097 33.117 36.9235 33.035L37.0806 32.9131C37.2036 32.8171 37.3198 32.7211 37.4222 32.6214L37.5589 32.4958C37.5743 32.4792 37.5922 32.4635 37.6101 32.4478C37.6281 32.432
2024-04-26 18:32:59 UTC	1369	IN	Data Raw: 2e 33 37 39 32 20 32 36 2e 30 39 30 36 20 31 38 2e 33 37 39 32 20 32 36 2e 31 30 31 37 20 31 38 2e 33 37 37 38 20 32 36 2e 31 31 32 38 43 31 38 2e 33 39 32 35 20 32 36 2e 32 33 39 35 20 31 38 2e 34 32 32 33 20 32 36 2e 33 36 33 36 20 31 38 2e 34 36 36 36 20 32 36 2e 34 38 32 31 43 31 39 2e 32 32 31 35 20 32 38 2e 34 39 31 31 20 32 33 2e 38 33 33 33 20 33 30 2e 34 35 39 35 20 33 30 2e 31 37 36 39 20 33 30 2e 34 35 39 35 5a 22 20 66 69 6c 6c 3d 22 23 32 37 44 31 37 46 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 33 2e 30 33 31 33 20 31 39 2e 34 35 38 34 48 34 33 2e 34 30 36 33 56 31 39 2e 34 34 37 4c 34 33 2e 34 30 35 36 20 31 39 2e 34 33 35 38 4c 34 33 2e 30 33 31 33 20 31 39 2e 34 35 38 34 5a 4d 31 37 2e 33 33 39 20 31 39 2e 34 33 32 35 4c 31 36 2e 39 36 Data Ascii: .3792 26.0906 18.3792 26.1017 18.3778 26.1128C18.3925 26.2395 18.4223 26.3636 18.4666 26.4821C19.2215 28.4911 23.8333 30.4595 30.1769 30.4595Z" fill="#27D17F"/><path d="M43.0313 19.4584H43.4063V19.447L43.4056 19.4358L43.0313 19.4584ZM17.339 19.4325L16.96
2024-04-26 18:32:59 UTC	1369	IN	Data Raw: 38 37 48 34 31 2e 39 39 39 35 5a 4d 33 39 2e 35 38 34 34 20 32 32 2e 32 34 32 33 4c 33 39 2e 34 31 34 37 20 32 31 2e 39 30 37 39 4c 33 39 2e 34 31 33 34 20 32 31 2e 39 30 38 36 4c 33 39 2e 35 38 34 34 20 32 32 2e 32 34 32 33 5a 4d 32 30 2e 37 37 35 34 20 32 32 2e 32 34 32 33 4c 32 30 2e 39 34 36 20 32 31 2e 39 30 38 34 4c 32 30 2e 39 34 35 34 20 32 31 2e 39 30 38 4c 32 30 2e 37 37 35 34 20 32 32 2e 32 34 32 33 5a 4d 31 38 2e 33 36 33 37 20 31 39 2e 35 38 37 48 31 38 2e 37 33 38 37 4c 31 38 2e 30 30 35 33 20 31 39 2e 34 37 36 35 4c 31 38 2e 33 36 33 37 20 31 39 2e 35 38 37 5a 4d 31 38 2e 33 36 33 37 20 31 39 2e 35 32 34 32 56 31 39 2e 31 34 39 32 48 31 38 2e 30 31 32 36 4c 31 37 2e 39 38 39 35 20 31 39 2e 34 39 39 35 4c 31 38 2e 33 36 33 37 20 31 39 2e 35 Data Ascii: 87H41.9995ZM39.5844 22.2423L39.4147 21.9079L39.4134 21.9086L39.5844 22.2423ZM20.7754 22.2423L20.946 21.9084L20.9454 21.908L20.7754 22.2423ZM18.3637 19.587H18.7387L18.0053 19.4765L18.3637 19.587ZM18.3637 19.5242V19.1492H18.0126L17.9895 19.4995L18.3637 19.5
2024-04-26 18:32:59 UTC	1369	IN	Data Raw: 36 34 20 33 34 2e 32 31 35 33 4c 33 30 2e 32 33 35 34 20 33 34 2e 35 38 35 36 4c 33 30 2e 32 33 37 34 20 33 34 2e 35 38 35 33 4c 33 30 2e 31 37 36 34 20 33 34 2e 32 31 35 33 5a 4d 33 30 2e 33 37 37 39 20 33 34 2e 31 38 32 56 33 33 2e 38 30 37 48 33 30 2e 33 34 37 32 4c 33 30 2e 33 31 36 39 20 33 33 2e 38 31 32 4c 33 30 2e 33 37 37 39 20 33 34 2e 31 38 32 5a 4d 33 30 2e 34 33 39 34 20 33 34 2e 31 38 32 56 33 34 2e 35 35 37 48 33 30 2e 34 37 32 4c 33 30 2e 35 30 34 32 20 33 34 2e 35 35 31 34 4c 33 30 2e 34 33 39 34 20 33 34 2e 31 38 32 5a 4d 33 30 2e 37 38 34 36 20 33 34 2e 31 31 34 35 4c 33 30 2e 37 31 31 20 33 33 2e 37 34 36 38 4c 33 30 2e 37 30 38 38 20 33 33 2e 37 34 37 32 4c 33 30 2e 37 38 34 36 20 33 34 2e 31 31 34 35 5a 4d 33 30 2e 37 38 34 36 20 33 Data Ascii: 64 34.2153L30.2354 34.5856L30.2374 34.5853L30.1764 34.2153ZM30.3779 34.182V33.807H30.3472L30.3169 33.812L30.3779 34.182ZM30.4394 34.182V34.557H30.472L30.5042 34.5514L30.4394 34.182ZM30.7846 34.1145L30.711 33.7468L30.7088 33.7472L30.7846 34.1145ZM30.7846 3
2024-04-26 18:32:59 UTC	1369	IN	Data Raw: 33 35 38 31 4c 33 34 2e 35 39 33 31 20 33 33 2e 33 35 32 34 4c 33 34 2e 34 32 35 34 20 33 33 2e 30 31 36 39 5a 4d 33 34 2e 34 32 35 34 20 33 33 2e 30 31 36 39 4c 33 34 2e 32 36 37 32 20 33 32 2e 36 37 36 38 4c 33 34 2e 32 35 37 37 20 33 32 2e 36 38 31 35 4c 33 34 2e 34 32 35 34 20 33 33 2e 30 31 36 39 5a 4d 33 34 2e 35 35 32 34 20 33 32 2e 39 35 39 36 4c 33 34 2e 36 39 39 20 33 33 2e 33 30 34 38 4c 33 34 2e 37 30 33 32 20 33 33 2e 33 30 33 4c 33 34 2e 35 35 32 34 20 33 32 2e 39 35 39 36 5a 4d 33 34 2e 36 30 39 36 20 33 32 2e 39 33 34 36 4c 33 34 2e 34 36 30 31 20 33 32 2e 35 39 30 37 4c 33 34 2e 34 36 30 31 20 33 32 2e 35 39 30 37 4c 33 34 2e 36 30 39 36 20 33 32 2e 39 33 34 36 5a 4d 33 34 2e 37 30 34 33 20 33 32 2e 38 39 33 36 4c 33 34 2e 38 35 33 31 20 Data Ascii: 3581L34.5931 33.3524L34.4254 33.0169ZM34.4254 33.0169L34.2672 32.6768L34.2577 32.6815L34.4254 33.0169ZM34.5524 32.9596L34.699 33.3048L34.7032 33.303L34.5524 32.9596ZM34.6096 32.9346L34.4601 32.5907L34.4601 32.5907L34.6096 32.9346ZM34.7043 32.8936L34.8531

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50146	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:59 UTC	640	OUT	GET /5/4724866/?oo=1&aab=1 HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156372
2024-04-26 18:32:59 UTC	1297	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:32:59 GMT Content-Type: application/json Content-Length: 2885 Connection: close X-Trace-Id: 96d2de8c94135e05327320ee0043ce1f Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:32:59 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156372; expires=Sat, 26 Apr 2025 18:32:59 GMT; path=/; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-04-26 18:32:59 UTC	2885	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 3f 72 62 3d 4a 76 4e 5f 37 41 31 4a 73 46 6e 35 48 67 6f 7a 4d 77 79 76 54 50 70 73 43 6e 4e 68 75 73 69 41 77 63 52 31 4b 73 74 58 2d 66 6b 2d 33 43 49 4e 2d 67 4e 73 4e 37 41 4a 39 41 59 47 33 46 78 65 48 65 44 42 72 65 32 44 42 58 48 44 6f 6b 56 64 79 77 61 58 54 72 6a 30 56 47 65 76 37 76 33 47 35 55 58 43 4a 43 79 69 5f 4e 39 57 32 54 47 58 36 4a 7a 45 59 38 69 70 33 53 49 45 73 6c 4b 67 6a 67 44 51 39 79 4e 30 4e 43 75 4f 63 37 39 66 6b 44 54 43 73 7a 6c 70 4c 43 37 32 4d 39 5f 48 32 58 69 73 70 51 44 6d 55 70 30 69 50 37 6d 31 48 37 7a 4b 51 59 6e 46 47 5f 46 41 51 66 6b 30 44 4c 56 62 71 58 72 42 30 6d 59 38 31 77 50 55 34 55 7a 4a 33 6b 70 64 63 2d 76 68 78 38 65 63 57 46 45 37 Data Ascii: {"url":"//eephaush.com/?rb=JvN_7A1JsFn5HgozMwyvTPpsCnNhusiAwcR1KstX-fk-3CIN-gNsN7AJ9AYG3FxeHeDBre2DBXHDokVdywaXTrj0VGev7v3G5UXCJCyi_N9W2TGX6JzEY8ip3SIEslKgjgDQ9yN0NCuOc79fkDTCszlpLC72M9_H2XispQDmUp0iP7m1H7zKQYnFG_FAQfk0DLVbqXrB0mY81wPU4UzJ3kpdc-vhx8ecWFE7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50149	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:59 UTC	812	OUT	GET /media/asset-icons/asset-xrp.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:59 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:59 GMT Content-Type: image/svg+xml Content-Length: 560 Connection: close Last-Modified: Mon, 22 Jun 2020 22:23:18 GMT ETag: "9615c833564a3c0ac121899045b74baa" x-amz-version-id: ktNwnzei2mWkdX.x2B_1C5fi8Oqke_nI X-Cache: Hit from cloudfront Via: 1.1 d63b9ed947b87984f3825316a5ec0b1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: j71TAbTiCEr4_dff1pz5VFr9MSUvPHlN3is-1C7Ap9GK3446ncSaRg== Age: 4936 CF-Cache-Status: HIT Expires: Fri, 26 Apr 2024 18:37:59 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a89c0f8a749e-MIA
2024-04-26 18:32:59 UTC	560	IN	Data Raw: 3c 21 2d 2d 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 49 63 6f 4d 6f 6f 6e 2e 69 6f 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 3c 74 69 74 6c 65 3e 61 73 73 65 74 2d 78 72 70 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 32 32 32 22 20 64 3d 22 4d 31 36 20 30 63 38 2e 38 33 37 20 30 20 31 36 20 37 2e 31 36 33 20 31 36 20 31 36 73 2d 37 2e 31 36 33 20 31 36 2d 31 36 20 31 36 63 2d 38 2e 38 33 36 20 30 2d 31 36 2d 37 2e 31 36 33 2d 31 36 2d 31 36 73 37 2e 31 36 33 2d 31 36 20 Data Ascii: ... Generated by IcoMoon.io --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"><title>asset-xrp</title><path fill="#222" d="M16 0c8.837 0 16 7.163 16 16s-7.163 16-16 16c-8.836 0-16-7.163-16-16s7.163-16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50148	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:59 UTC	813	OUT	GET /media/asset-icons/asset-best.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:59 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:59 GMT Content-Type: image/svg+xml Content-Length: 931 Connection: close Last-Modified: Mon, 22 Jun 2020 22:23:09 GMT ETag: "5d3aed92faa60b62d172b36205ee2958" x-amz-version-id: 1XbRlhdAbgll4yZuYgsnRQpVcJKdI8d2 X-Cache: Hit from cloudfront Via: 1.1 b3fa6483b226ef7cc87d8bab653f621c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: FB0136tyNAe-5_iAf9_J4UOLBXPOI2RFO4JFVkBIjcgMnsl_2gSXEg== Age: 5335 CF-Cache-Status: HIT Expires: Fri, 26 Apr 2024 18:37:59 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a89c0f925c79-MIA
2024-04-26 18:32:59 UTC	622	IN	Data Raw: 3c 21 2d 2d 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 49 63 6f 4d 6f 6f 6e 2e 69 6f 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 3c 74 69 74 6c 65 3e 61 73 73 65 74 2d 62 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 65 38 33 33 35 35 22 20 64 3d 22 4d 31 36 20 33 32 63 2d 38 2e 38 33 37 20 30 2d 31 36 2d 37 2e 31 36 33 2d 31 36 2d 31 36 73 37 2e 31 36 33 2d 31 36 20 31 36 2d 31 36 20 31 36 20 37 2e 31 36 33 20 31 36 20 31 36 2d 37 2e 31 36 33 20 31 36 2d 31 36 20 31 Data Ascii: ... Generated by IcoMoon.io --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"><title>asset-best</title><path fill="#e83355" d="M16 32c-8.837 0-16-7.163-16-16s7.163-16 16-16 16 7.163 16 16-7.163 16-16 1
2024-04-26 18:32:59 UTC	309	IN	Data Raw: 20 30 20 32 2e 31 34 36 2d 31 2e 35 35 31 20 33 2e 34 38 33 2d 34 2e 30 35 37 20 33 2e 34 38 33 6c 2d 35 2e 37 32 2d 30 2e 30 31 34 7a 4d 31 33 2e 31 35 37 20 31 36 2e 35 31 38 6c 30 2e 33 30 35 2d 31 2e 36 37 32 68 31 2e 35 32 33 63 34 2e 30 38 35 20 30 20 35 2e 31 36 35 20 30 2e 32 35 31 20 36 2e 30 32 34 20 30 2e 38 33 36 2d 30 2e 36 35 31 20 30 2e 36 34 31 2d 32 2e 30 36 33 20 30 2e 38 33 36 2d 36 2e 30 32 34 20 30 2e 38 33 36 68 2d 31 2e 38 32 38 7a 4d 31 33 2e 37 39 34 20 31 32 2e 38 39 35 6c 30 2e 36 36 35 2d 33 2e 37 36 32 68 33 2e 34 32 31 63 32 2e 35 33 34 20 30 20 34 2e 30 35 37 20 31 2e 32 39 36 20 34 2e 30 35 37 20 33 2e 34 38 33 20 30 20 30 2e 34 34 36 2d 30 2e 30 36 39 20 30 2e 38 36 34 2d 30 2e 32 32 31 20 31 2e 32 31 32 2d 31 2e 32 38 38 Data Ascii: 0 2.146-1.551 3.483-4.057 3.483l-5.72-0.014zM13.157 16.518l0.305-1.672h1.523c4.085 0 5.165 0.251 6.024 0.836-0.651 0.641-2.063 0.836-6.024 0.836h-1.828zM13.794 12.895l0.665-3.762h3.421c2.534 0 4.057 1.296 4.057 3.483 0 0.446-0.069 0.864-0.221 1.212-1.288

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50147	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:59 UTC	599	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%201311.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:32:59 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:32:59 GMT Content-Type: image/svg+xml Content-Length: 2375 Connection: close Last-Modified: Mon, 20 Dec 2021 10:20:20 GMT ETag: "b005acfcc0895f307855373dab78301f" Cache-Control: public, max-age=36000 x-amz-version-id: tiOzUFmyuGdi.y3c.EZr_VROeE2Z2jfJ X-Cache: Miss from cloudfront Via: 1.1 bb707a876db211940a3cb07991cacbdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 8_jlf3aleyPCSWmxmMnlvM4MfGcwdLOD92jhr06-vtUnlLuZKfWujw== CF-Cache-Status: HIT Age: 20502 Expires: Sat, 27 Apr 2024 04:32:59 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a89c08dba570-MIA
2024-04-26 18:32:59 UTC	617	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 31 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 33 31 31 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 31 20 2d 32 39 31 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 32 37 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 32 37 32 22 20 74 72 61 6e 73 66 6f 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_1311" data-name="Group 1311" transform="translate(-611 -291)"> <g id="Group_1272" data-name="Group 1272" transfor
2024-04-26 18:32:59 UTC	1369	IN	Data Raw: 39 2c 32 2e 38 34 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 33 2e 38 32 36 20 2d 35 2e 34 33 33 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 35 35 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 35 35 22 20 79 31 3d 22 32 2e 34 38 37 22 20 78 32 3d 22 32 2e 36 33 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 35 2e 36 38 20 36 2e 35 37 37 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 Data Ascii: 9,2.843" transform="translate(-3.826 -5.433)" fill="none" stroke="#27d17f" stroke-width="1"/> <line id="Line_255" data-name="Line 255" y1="2.487" x2="2.632" transform="translate(15.68 6.577)" fill="none" stroke="#27d17f" stroke-width="1"/>
2024-04-26 18:32:59 UTC	389	IN	Data Raw: 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 63 69 72 63 6c 65 20 69 64 3d 22 45 6c 6c 69 70 73 65 5f 34 37 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 45 6c 6c 69 70 73 65 20 34 37 22 20 63 78 3d 22 31 2e 30 35 37 22 20 63 79 3d 22 31 2e 30 35 37 22 20 72 3d 22 31 2e 30 35 37 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 35 2e 33 34 34 20 31 32 2e 34 30 39 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 63 69 72 63 6c 65 20 69 64 3d 22 45 6c 6c 69 70 73 65 5f 34 38 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 45 6c 6c 69 70 73 65 20 34 38 22 20 63 78 3d 22 31 2e 30 35 37 22 20 63 79 3d 22 Data Ascii: e-width="1"/> <circle id="Ellipse_47" data-name="Ellipse 47" cx="1.057" cy="1.057" r="1.057" transform="translate(5.344 12.409)" fill="none" stroke="#27d17f" stroke-width="1"/> <circle id="Ellipse_48" data-name="Ellipse 48" cx="1.057" cy="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50151	172.64.154.69	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:32:59 UTC	1124	OUT	GET /en/multiplatformdownload?clt=Web&redirect=aHR0cHM6Ly9hcHAucGx1czUwMC5jb20vdHJhZGU%2fSXNSZWFsTW9kZT1UcnVlJmhsPWRlJmlkPTEyNzEwOA%3d%3d&id=127108&tags=lp0ai49b7tf5&pl=2 HTTP/1.1 Host: www.plus500.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://onlinetopchoice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: InAppView=False; IP=!0bn/xwi1K9mdJj/0UUWQT2jIv4XvHVvabLcBW3O0fPT5DcNgAsedoieCm5WV8gp7bcD9DlccdSpP8x6hKXcOs4AF5G9J7PS1Mo+lHB+rDfx6L73DwVAP0GNl71ZcpzKb+OdR1UTKWcs/MR78ToyIBQYEDLuNI6M=; _cfuvid=.ZLCGAswrtSeIPop225MZwozKgjgqUSKKyn0i106XKA-1714156377022-0.0.1.1-604800000
2024-04-26 18:33:00 UTC	1318	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:33:00 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: private Location: https://app.plus500.com/trade?IsRealMode=True&hl=de&id=127108&tags=lp0ai49b7tf5&pl=2 Set-Cookie: referralUrl=https%3a%2f%2fonlinetopchoice.com%2f; expires=Sun, 26-May-2024 18:33:00 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: referralId=127108; expires=Sun, 26-May-2024 18:33:00 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: referralPlan=2; expires=Sun, 26-May-2024 18:33:00 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: referralTags=lp0ai49b7tf5; expires=Sun, 26-May-2024 18:33:00 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: innerTags=uswsv; expires=Sun, 26-May-2024 18:33:00 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: webvisitid=3375f0f0-b0d3-481a-834f-5a54be4f1c99; expires=Sun, 26-May-2024 18:33:00 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: referralTimeStamp=2024-04-26T18:33:00.4086499+00:00; expires=Sun, 26-May-2024 18:33:00 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: VisitDetailsHash=2025184242; path=/; SameSite=None; secure; HttpOnly Set-Cookie: ASP.NET_SessionId=ei4kxga3dd52gsor0skk4e2q; path=/; secure; HttpOnly; SameSite=None
2024-04-26 18:33:00 UTC	521	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 49 6e 41 70 70 56 69 65 77 3d 46 61 6c 73 65 3b 20 70 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 0d 0a 58 2d 41 73 70 4e 65 74 4d 76 63 2d 56 65 72 73 69 6f 6e 3a 20 35 2e 32 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 2a 0d 0a 41 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 78 2d 66 72 61 6d 65 2d 6f 70 74 69 6f 6e 73 3a 20 44 65 6e 79 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 44 Data Ascii: Set-Cookie: InAppView=False; path=/; SameSite=None; secure; HttpOnlyX-AspNetMvc-Version: 5.2Access-Control-Allow-Headers: *Access-control-allow-credentials: truex-frame-options: DenyStrict-Transport-Security: max-age=31536000CF-Cache-Status: D
2024-04-26 18:33:00 UTC	223	IN	Data Raw: 64 39 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 70 6c 75 73 35 30 30 2e 63 6f 6d 2f 74 72 61 64 65 3f 49 73 52 65 61 6c 4d 6f 64 65 3d 54 72 75 65 26 61 6d 70 3b 68 6c 3d 64 65 26 61 6d 70 3b 69 64 3d 31 32 37 31 30 38 26 61 6d 70 3b 74 61 67 73 3d 6c 70 30 61 69 34 39 62 37 74 66 35 26 61 6d 70 3b 70 6c 3d 32 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: d9<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://app.plus500.com/trade?IsRealMode=True&hl=de&id=127108&tags=lp0ai49b7tf5&pl=2">here</a>.</h2></body></html>
2024-04-26 18:33:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50156	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	826	OUT	GET /media/New%20navigation_Rebrand%203.0/aapl.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:00 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:00 GMT Content-Type: image/svg+xml Content-Length: 1923 Connection: close Last-Modified: Mon, 20 Dec 2021 10:00:17 GMT ETag: "208b36d307f2516ba3fc7c641f504f6f" Cache-Control: public, max-age=36000 x-amz-version-id: gq_Q5jLbgi5tAOswgVcxolV4u1xyCPbb X-Cache: Hit from cloudfront Via: 1.1 ef3100c3f2434fd3889627d60775da30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Ngb6Y1vmI99ZIIbkaU7j5ZNUgy68OpVsQw2-dzGzJbXGgvkTcFOmuw== Age: 20504 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:00 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8a32f2a748d-MIA
2024-04-26 18:33:00 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 70 78 22 20 68 65 69 67 68 74 3d 22 33 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 2f 73 74 6f 63 6b 73 2f 61 61 70 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 61 73 73 65 74 73 2f 73 74 6f 63 6b 73 2f 61 61 70 6c 22 20 73 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36px" height="36px" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>assets/stocks/aapl</title> <g id="assets/stocks/aapl" st
2024-04-26 18:33:00 UTC	1305	IN	Data Raw: 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 61 70 70 6c 65 2d 62 6c 61 63 6b 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 38 2e 30 30 30 30 30 30 2c 20 36 2e 30 30 30 30 30 30 29 22 20 66 69 6c 6c 3d 22 23 30 30 30 30 30 30 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 32 39 32 37 39 31 34 2c 31 32 2e 37 32 38 35 31 33 34 20 43 31 36 2e 33 32 36 34 35 39 39 2c 31 36 2e 33 35 34 32 36 37 34 20 31 39 2e 34 37 33 34 39 37 33 2c 31 37 2e 35 36 30 38 31 32 38 20 31 39 2e 35 30 38 33 36 33 36 2c 31 37 2e 35 37 36 31 37 31 31 20 43 31 39 2e 34 38 31 37 35 34 2c 31 37 2e 36 36 31 32 31 Data Ascii: path> </g> <g id="apple-black" transform="translate(8.000000, 6.000000)" fill="#000000" fill-rule="nonzero"> <path d="M16.2927914,12.7285134 C16.3264599,16.3542674 19.4734973,17.5608128 19.5083636,17.5761711 C19.481754,17.66121

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50158	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	826	OUT	GET /media/New%20navigation_Rebrand%203.0/tsla.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:00 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:00 GMT Content-Type: image/svg+xml Content-Length: 800 Connection: close Last-Modified: Mon, 20 Dec 2021 10:00:39 GMT x-amz-version-id: h1BKCulbEqyYiNj1EK1jW8YPt9JUtU4U Cache-Control: public, max-age=36000 ETag: "18cb43d2469c45ae6bcec43993f35cbb" X-Cache: Hit from cloudfront Via: 1.1 5a334f8291e38975c678834100b052f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: FzbWO4O64fQ5MircehmWRfOaSjHiRcJm68mcCEeKUbEHYkwHAkUAzw== Age: 11107 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:00 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8a33de3a570-MIA
2024-04-26 18:33:00 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 63 32 2e 38 33 37 20 30 20 35 2e 35 32 2e 36 35 36 20 37 2e 39 30 37 20 31 2e 38 32 35 43 33 31 2e 38 38 34 20 34 2e 37 35 33 20 33 36 20 31 30 2e 38 39 35 20 33 36 20 31 38 63 30 20 39 2e 39 34 32 2d 38 2e 30 35 38 20 31 38 2d 31 38 20 31 38 2d 39 2e 39 34 20 30 2d 31 38 2d 38 2e 30 35 37 2d 31 38 2d 31 38 43 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="nonzero"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C
2024-04-26 18:33:00 UTC	181	IN	Data Raw: 35 33 20 32 2e 32 37 38 2e 35 33 37 2d 2e 39 36 35 2e 36 37 34 2d 31 2e 33 39 31 2e 36 37 34 2d 31 2e 33 39 31 43 32 35 2e 36 37 20 37 2e 36 30 39 20 32 31 2e 35 36 34 20 37 2e 30 31 34 20 31 38 2e 30 32 37 20 37 63 2d 33 2e 35 33 36 2e 30 31 35 2d 37 2e 36 34 32 2e 36 30 39 2d 31 32 2e 30 32 37 20 32 2e 33 34 34 20 30 20 30 20 2e 31 39 36 2e 35 32 35 2e 36 37 34 20 31 2e 33 39 31 20 34 2e 30 31 2d 31 2e 37 34 38 20 37 2e 39 33 2d 32 2e 33 30 34 20 31 31 2e 33 35 33 2d 32 2e 32 37 38 7a 22 2f 3e 3c 2f 67 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: 53 2.278.537-.965.674-1.391.674-1.391C25.67 7.609 21.564 7.014 18.027 7c-3.536.015-7.642.609-12.027 2.344 0 0 .196.525.674 1.391 4.01-1.748 7.93-2.304 11.353-2.278z"/></g></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50159	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	826	OUT	GET /media/New%20navigation_Rebrand%203.0/pypl.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:00 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:00 GMT Content-Type: image/svg+xml Content-Length: 1800 Connection: close Last-Modified: Mon, 20 Dec 2021 10:01:36 GMT ETag: "9ddec95c944d67575408645eb7254ed0" Cache-Control: public, max-age=36000 x-amz-version-id: SK3mx2RxNZpoewV6L0bw_KfuuSUwex3C X-Cache: Hit from cloudfront Via: 1.1 d63b9ed947b87984f3825316a5ec0b1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: YwUoFsCUjiLTZOKHFno74jBCKVUwkfJJSnc-PNN1LKVoblyDgg9J5Q== Age: 20504 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:00 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8a33c87a4d0-MIA
2024-04-26 18:33:00 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 63 32 2e 38 33 37 20 30 20 35 2e 35 32 2e 36 35 36 20 37 2e 39 30 37 20 31 2e 38 32 35 43 33 31 2e 38 38 34 20 34 2e 37 35 33 20 33 36 20 31 30 2e 38 39 35 20 33 36 20 31 38 63 30 20 39 2e 39 34 32 2d 38 2e 30 35 38 20 31 38 2d 31 38 20 31 38 2d 39 2e 39 34 20 30 2d 31 38 2d 38 2e 30 35 37 2d 31 38 2d 31 38 43 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="nonzero"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C
2024-04-26 18:33:00 UTC	1182	IN	Data Raw: 35 33 20 31 2e 36 37 37 20 36 2e 32 31 20 36 2e 32 31 20 30 20 30 20 31 2d 32 2e 30 36 32 2e 39 33 63 2d 2e 37 36 2e 31 39 38 2d 31 2e 36 32 36 2e 32 39 38 2d 32 2e 35 37 36 2e 32 39 38 68 2d 2e 36 31 33 63 2d 2e 34 33 37 20 30 2d 2e 38 36 33 2e 31 35 37 2d 31 2e 31 39 36 2e 34 34 2d 2e 33 33 34 2e 32 38 36 2d 2e 35 35 35 2e 36 38 2d 2e 36 32 34 20 31 2e 31 31 34 6c 2d 2e 30 34 37 2e 32 35 2d 2e 37 37 35 20 34 2e 39 31 31 2d 2e 30 33 35 2e 31 38 63 2d 2e 30 30 39 2e 30 35 38 2d 2e 30 32 35 2e 30 38 36 2d 2e 30 34 38 2e 31 30 35 61 2e 31 33 2e 31 33 20 30 20 30 20 31 2d 2e 30 38 2e 30 33 68 2d 33 2e 37 38 31 7a 22 20 66 69 6c 6c 3d 22 23 32 35 33 42 38 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 37 2e 33 33 20 31 32 2e 34 33 63 2d 2e 30 32 33 2e 31 35 2d Data Ascii: 53 1.677 6.21 6.21 0 0 1-2.062.93c-.76.198-1.626.298-2.576.298h-.613c-.437 0-.863.157-1.196.44-.334.286-.555.68-.624 1.114l-.047.25-.775 4.911-.035.18c-.009.058-.025.086-.048.105a.13.13 0 0 1-.08.03h-3.781z" fill="#253B80"/><path d="M27.33 12.43c-.023.15-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50157	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	808	OUT	GET /media/development/GOOGL.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:00 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:00 GMT Content-Type: image/png Content-Length: 4443 Connection: close Age: 20503 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=6259 ETag: "cbbded98a3c3d8e18f11724abcb51ae9" Last-Modified: Fri, 06 Aug 2021 08:05:51 GMT Via: 1.1 903a82370ff225ae16b374d8f5cbc5a6.cloudfront.net (CloudFront) X-Amz-Cf-Id: 5KK9zjhgrfd9DkIims0_019etmiGyftbGEUti03GV4YA14Kv68aiww== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: FCt42m_66_HNuwk3W76oGDVm4ZGPdFkg CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:00 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8a33faca4c7-MIA
2024-04-26 18:33:00 UTC	570	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 87 00 00 00 87 08 06 00 00 00 3c e7 4a 0a 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 10 e6 49 44 41 54 78 da ec da bb 6b 54 41 14 06 f0 55 51 13 21 46 c4 17 fe 03 82 a5 44 ac b4 d1 a0 22 22 11 b1 b0 30 45 6c ac 04 11 b4 b0 54 21 44 d0 08 16 e9 04 45 8d e2 03 45 34 85 62 a1 a9 8c 44 0b 93 54 06 43 54 d8 dd 7b ef 9c 73 66 ce 44 cc 7e 0e 9b 80 82 82 46 f2 d8 c7 7c f0 6b ee ee 56 df e1 de d9 b9 93 ab f5 58 6b 37 8a f8 5d 64 f5 98 61 3d 47 a2 d7 59 f4 19 8b 7f 43 a2 a3 24 3e 99 a2 df 03 04 df 7e b9 f6 71 fa 7b 4f 82 6b c1 05 b2 da c1 ac 3b 44 64 43 2e a6 7a c2 cc Data Ascii: PNGIHDR<JgAMAa cHRMz&u0`:pQ<IDATxkTAUQ!FD""0ElT!DEE4bDTCT{sfD~F\|kVXk7]da=GYC$>~q{Ok;DdC.z
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 19 63 56 13 6b 7f 2c 70 1e 58 7d 95 24 68 ae 9e 03 37 e2 06 63 71 f3 bb 69 46 44 6b 2a fe 48 1e 89 0e c5 c2 16 c4 7b 11 59 5f b1 77 8c 38 18 0b 6e 98 43 0f b9 4a 4a 9a a6 ab aa ee cc 45 31 85 19 19 46 d6 ff 1a 69 df 53 64 8f 1e 20 bd d7 8b f4 ee 4d a4 f7 ef 4c 5d 7b f9 a2 fc b9 19 19 01 65 54 2d 87 8a de a5 a1 8f 8a 39 b6 57 e9 8b 4f 33 fa 09 d9 e3 87 48 ae 74 a1 78 f2 38 0a 6d ad c8 ef dc 3a 33 ad db 50 38 b2 bf fc fb e4 52 67 79 78 cc d8 0f 72 ae e7 b5 89 28 08 83 07 2f 8a e0 5f 21 1e bd a8 a8 50 c1 6a 6d eb 8f b6 a4 c4 36 0d a6 52 a9 58 6c 85 42 45 7a a9 56 a1 55 11 a1 6a 13 51 10 29 88 14 3c 15 ab 34 78 30 1a 15 e9 0f 9a 78 2a 6d 94 1a d3 26 6f 77 df ee 4b 76 e3 69 84 39 78 f1 d0 34 dd 9d f7 42 0e 73 d9 d3 32 f3 bd 37 33 df 7c f3 d2 aa 76 31 51 64 53 Data Ascii: cVk,pX}$h7cqiFDkH{Y_w8nCJJE1FiSd ML]{eT-9WO3Htx8m:3P8Rgyxr(/_!Pjm6RXlBEzVUjQ)<4x0xm&owKvi9x4Bs273\|v1QdS
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: f3 0c c5 a6 0a e7 d1 eb b3 07 e1 68 23 db a5 e4 7f df 1d 38 7a 6f 77 a7 f7 de ee 5a 13 62 84 e3 cc 51 bd 84 c6 18 fb 2e d5 43 d4 b6 12 74 f6 a0 65 ec 1f 05 ed 33 27 f6 ac 35 a6 82 6c 91 85 e3 cc 12 56 27 c4 86 bc 64 eb 8d ea 7d 43 82 03 d5 99 f4 18 58 96 8d 07 cb ae 2d c2 61 26 0a f3 6a 31 2f 65 25 d9 7a a3 74 f5 90 e1 70 6e 77 6f 64 08 a7 99 ab 65 12 b6 f0 a6 7a 40 67 e1 38 3e 70 e4 3d 0d 8a 6a ce 35 fc be 2c 1d 16 ec d5 7c 42 1f 64 d0 8d 09 d6 56 97 b0 b7 3b d9 62 34 77 14 17 38 8c 2b 21 a6 80 81 da 79 82 c1 d4 77 35 9f d0 9f 0e e9 b4 09 d7 aa 66 64 90 90 67 a9 e1 02 06 8a dd da 2d e0 e8 43 33 77 51 e6 d6 b2 13 18 4c 7c 91 e6 3e e5 0c 2f 38 f0 6e 46 c0 e1 42 75 ad 74 f5 d4 25 6c 57 49 b2 53 a9 4b e0 06 87 2a 37 09 38 5c e8 7c 05 a3 1a 8b 0a 84 a3 83 04 Data Ascii: h#8zowZbQ.Cte3'5lV'd}CX-a&j1/e%ztpnwodez@g8>p=j5,\|BdV;b4w8+!yw5fdg-C3wQL\|>/8nFBut%lWISK*78\\|
2024-04-26 18:33:00 UTC	1135	IN	Data Raw: 7f 40 60 e2 92 41 3f 6b 72 ec 6a 98 b2 b3 94 c3 69 28 89 ea d1 df ee f6 b1 7f db 8c d9 a3 b4 b9 ca b9 fe f0 67 4d 88 9d 0f 01 91 49 6e 81 b1 28 52 87 16 0b 23 f6 01 db e0 d5 bd ec b3 6b 8a f0 ae c4 ef 01 41 05 44 ed 82 c0 ed 1d 03 ba 5c 2b bb 4d 0d 86 d1 d6 d6 06 8f 4b 83 31 45 63 6f 9a b5 15 8c b9 9e 86 3b 8c e1 01 48 cc 3a 98 12 5e dd 2f 1c 29 17 99 19 9d a8 d7 49 83 b5 3b 00 8f 29 9a 71 c7 24 40 f0 3d 3f 2c e0 40 3d 1b b7 10 9e 7b ef 34 fd b6 d5 b5 1a b0 55 ac 34 14 53 34 63 b9 89 87 49 18 a7 31 6c 66 10 fc 9e 01 fb 0f 75 03 a1 38 c1 d8 7d 52 37 2b 64 71 b1 34 54 03 80 af 2a 9a 71 c1 4c 40 f0 fc 60 c2 d1 e1 b1 06 41 05 44 ff 0d 02 43 1b 9d a9 06 d4 c2 e4 79 f4 ab c4 c3 14 85 4d 72 96 87 32 49 59 d5 85 78 99 36 6c 00 d9 9e 9f 08 b2 39 63 fb 5f 99 b1 f1 Data Ascii: @`A?krji(gMIn(R#kAD\+MK1Eco;H:^/)I;)q$@=?,@={4U4S4cI1lfu8}R7+dq4T*qL@`ADCyMr2IYx6l9c_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50160	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	833	OUT	GET /media/New%20navigation_Rebrand%203.0/eurostoxx50.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:00 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:00 GMT Content-Type: image/svg+xml Content-Length: 954 Connection: close Last-Modified: Mon, 20 Dec 2021 10:03:30 GMT ETag: "7bce84e41a8ce73920a3ee78b3946590" Cache-Control: public, max-age=36000 x-amz-version-id: OwV5D_59msiSseeg6CsnZy34dN.zE.4y X-Cache: Hit from cloudfront Via: 1.1 5dd2304368effbad5413134075a82ff0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 9KOBziftyxmUL04TmCUqEKC6Ef-L-C2Y90KWvCiRRIsnaKlltK5nCg== Age: 20504 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:00 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8a34f605c66-MIA
2024-04-26 18:33:00 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 77 69 64 74 68 3d 22 33 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 38 20 30 63 32 2e 38 33 36 37 34 37 31 20 30 20 35 2e 35 32 30 31 37 31 2e 36 35 36 31 39 35 33 37 20 37 2e 39 30 36 38 30 32 20 31 2e 38 32 35 30 35 32 39 32 20 35 2e 39 37 37 34 36 34 31 20 32 2e 39 32 37 34 37 35 35 35 20 31 30 2e 30 39 33 31 39 38 20 39 2e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg height="36" viewBox="0 0 36 36" width="36" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="nonzero"><path d="m18 0c2.8367471 0 5.520171.65619537 7.906802 1.82505292 5.9774641 2.92747555 10.093198 9.
2024-04-26 18:33:00 UTC	335	IN	Data Raw: 31 31 2e 39 37 34 34 31 33 36 39 7a 6d 32 2e 30 35 31 31 37 32 37 20 38 2e 31 34 39 32 35 33 36 39 76 2d 31 30 2e 32 30 30 34 32 36 34 6c 2e 34 35 37 31 32 30 34 2e 30 31 37 36 33 33 31 38 2e 33 38 34 38 33 35 36 2e 30 32 31 38 31 31 36 31 63 2e 30 35 38 31 31 35 36 2e 30 30 33 39 38 33 34 37 2e 31 31 33 32 31 39 33 2e 30 30 38 31 34 31 30 34 2e 31 36 35 33 31 31 31 2e 30 31 32 34 37 32 37 31 6c 2e 32 37 36 34 30 38 36 2e 30 32 38 30 37 39 32 36 63 34 2e 36 32 30 32 34 33 36 2e 35 38 30 31 33 30 32 37 20 38 2e 32 37 39 30 37 30 34 20 34 2e 32 35 30 34 36 38 34 32 20 38 2e 38 34 31 36 32 33 38 20 38 2e 38 37 36 31 35 37 39 34 6c 2e 30 32 36 33 37 36 35 2e 32 36 38 30 32 39 39 2e 30 32 32 34 34 37 31 2e 33 33 38 30 31 31 2e 30 31 38 35 31 37 39 2e 34 30 37 Data Ascii: 11.97441369zm2.0511727 8.14925369v-10.2004264l.4571204.01763318.3848356.02181161c.0581156.00398347.1132193.00814104.1653111.01247271l.2764086.02807926c4.6202436.58013027 8.2790704 4.25046842 8.8416238 8.87615794l.0263765.2680299.0224471.338011.0185179.407

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50161	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	929	OUT	GET /xxrz/250x400/793/0a/a9/0aa95e98d17d7e708b1d9ab1086189f5/0aa95e98d17d7e708b1d9ab1086189f5.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:00 UTC	716	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:00 GMT Content-Type: image/jpeg Content-Length: 73660 Connection: close Last-Modified: Fri, 26 Apr 2024 17:02:26 GMT Vary: Accept-Encoding ETag: W/"662bde22-fba1" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1775 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZowYkqRVnisyu7nTEqmb4jGf0PSF1EcCLkcrm0oGBHTsqGprdL7cL2VtyZ2CgU51i5RpPiW8UNxcp8nqyo3wtQsbbcL4CcjJal%2F0nX2LsXKvvW9tyd4c3UB9GcpkZGOQ5VBT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a398420a2e-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:00 UTC	653	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 71 05 95 95 56 7d c4 38 b0 a5 39 6a f8 a2 74 c6 b2 62 34 c7 8a 41 b0 2d 29 30 f2 35 6b 8d 06 ec 59 ed 6d f6 cb e9 0a f8 4a 0f d5 c8 2d d4 ea ae e2 0a d0 6c 38 eb 43 c4 d0 bf e7 11 00 6f 3b 73 6a af 5d f3 64 d3 27 ad 69 9d 0e fa 96 55 a2 94 71 8d f0 be 24 52 cf 34 7a 56 ef b0 da 51 bf fa 75 c8 8c 66 17 cd 4a 95 6f c6 ef a8 f2 e3 de 1b 4e 94 f3 94 52 42 59 5d 55 c1 6f 74 dc 2d 12 d8 8b 0d 8d ab 93 d3 85 3f 6d 66 4f 7e 93 7e 74 7e 92 67 64 c8 15 21 da 99 52 29 4a 34 18 d6 c3 08 44 da ed 07 c2 52 d9 e6 de 55 ee f6 d3 de 4a 6d 0f 99 a1 21 fb c8 85 98 79 1a 00 24 4b 3c 8d 88 75 2a 29 ca ba fc b0 06 32 69 9d 43 90 4d 16 6a 34 09 89 b2 b8 07 3d 57 4a e5 1a 06 29 06 42 46 d2 33 0e ef 28 c5 a0 cb 6f 2d 59 58 48 24 04 c8 60 65 63 a7 44 7f 46 55 bb 61 f3 7a 34 2d 44 Data Ascii: qV}89jtb4A-)05kYmJ-l8Co;sj]d'iUq$R4zVQufJoNRBY]Uot-?mfO~~t~gd!R)J4DRUJm!y$K<u*)2iCMj4=WJ)BF3(o-YXH$`ecDFUaz4-D
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: ae db a4 1c be c5 aa 72 e0 c7 6d c2 8c e6 ec e4 57 cd db 67 a0 f1 b2 00 a2 50 90 8f 15 47 f7 cc a9 ac ce 5e 24 13 70 36 5e 20 60 7e c6 53 50 bb 9d 6c 64 fe 2a 6d c4 ae 38 0e 65 28 ec eb e6 2a d3 2b 53 3b 72 10 d4 bb 5c 55 62 f4 db cd a1 57 e9 9e 62 be db 6e 7b 7b c1 7e 5c be a4 fe 63 af 8a f9 18 a3 4a aa fb 2e 99 5a af 50 eb 52 c0 8e 80 d4 26 2f da a1 d3 ce 58 1d 5f 46 54 5c 98 4c 57 36 44 72 5d 06 df 0e 94 3b 96 1e cf c1 75 37 e6 67 27 18 2c f3 ce ae e3 3b 0d f1 de c6 f1 31 a4 bf 7a 73 e7 8b da 6d d9 c7 cc 05 a6 28 a5 c5 78 d3 3a 9c 65 61 f7 cc c1 b7 19 b7 3d 94 df cf 9e 6f a1 9a 52 b6 04 6b cd c1 6e cd bb 76 94 73 15 6d f3 84 60 08 ab 51 00 3b 9a 1f 2c dc 5f 2d bc 83 64 64 ab 57 06 46 c4 a9 13 4a 51 83 03 91 7c cd 67 21 0c 0d 06 1a cc 43 e8 79 d4 e5 56 Data Ascii: rmWgPG^$p6^ `~SPldm8e(+S;r\UbWbn{{~\cJ.ZPR&/X_FT\LW6Dr];u7g',;1zsm(x:ea=oRknvsm`Q;,_-ddWFJQ\|g!CyV
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 50 40 8e 1c 00 f5 31 7c b3 37 5a 89 92 3e a6 96 80 77 2c 8e 3b 4d aa bd 4b 28 40 0e 5c a6 0a b7 c1 0f 87 f5 e5 68 73 eb 65 4a 7e 5c 52 9c 76 28 eb ad f4 e1 c7 ab 8f d9 6d bb 8c cd 81 f4 3c 70 2c 8d f5 5f 21 3d 99 98 19 52 4d 07 42 57 16 86 59 5b df 4b 73 f7 40 0a e0 a2 61 21 3d 48 28 43 10 da 46 c2 46 12 b4 94 4d ed f6 e3 9b 2a ad c1 08 e2 87 de 38 4f a1 6c 10 ce 3c e4 1c 83 26 2a 75 f6 cf c8 2d 00 bf a7 a5 39 72 05 ca f9 85 64 6e f1 c9 39 65 2c c9 46 2f 38 c3 10 48 56 a6 02 1f 55 89 64 2b 30 a9 f5 b0 9e 1f c6 75 87 75 7b da c7 56 53 af f4 26 3d 58 54 cc 18 e5 22 b8 42 a4 df d5 25 ae 1f 1a 46 ab 63 29 97 75 0e bf 53 80 fe f2 4c 9d 2b 79 71 e7 7f 7d e9 e0 e4 40 c9 83 be 91 51 92 a6 2d 62 4d b2 a6 ca ac a0 f5 d9 12 4c ed f6 04 77 43 a2 07 56 70 92 86 02 74 Data Ascii: P@1\|7Z>w,;MK(@\hseJ~\Rv(m<p,_!=RMBWY[Ks@a!=H(CFFM8Ol<&u-9rdn9e,F/8HVUd+0uu{VS&=XT"B%Fc)uSL+yq}@Q-bMLwCVpt
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: b5 a2 18 e0 e6 63 a5 35 d5 1c 13 60 e0 8f db a7 ca 2c dc 7c a9 74 59 4b 9b 8a dd 22 ab 5b 47 79 57 a3 13 8c d0 b2 6d 92 57 d6 38 f5 1b 35 ea 8e 2e 3a d6 e7 5e 80 4a 68 53 9f 96 71 b9 21 23 57 46 ea d5 dd 95 d3 90 4d d3 37 1d cc 8c 30 f6 c8 a7 38 53 67 56 18 78 c3 9f 14 53 0e ae 5c e2 18 cc 32 64 a8 16 0a 45 7e 02 bd 2d de 81 b6 fd bc 36 33 62 bc 83 b7 6c 18 a4 12 75 37 0c 71 36 8d 93 13 45 20 f4 5c b3 72 c9 5d 69 7c 84 85 83 96 d9 32 75 d6 eb 6f 38 89 b2 54 27 35 44 b5 82 d3 b3 6e 10 f6 3b 0c d0 4d 48 26 af 19 19 6f 92 97 63 6a 0e d4 94 43 67 66 ae 3b 70 9b a5 9a 28 0e d6 45 6c 45 5c 21 bc 94 1c 54 d8 78 e6 bf c2 9a 46 34 5a 91 55 8c 87 33 2d cf 56 69 58 76 bc 46 bf d3 f5 37 1f c0 6e f7 b9 cd 3c de c9 bc ee 34 48 eb 95 ee a3 a9 6a 4a 6b d6 14 d8 1a de a8 Data Ascii: c5`,\|tYK"[GyWmW85.:^JhSq!#WFM708SgVxS\2dE~-63blu7q6E \r]i\|2uo8T'5Dn;MH&ocjCgf;p(ElE\!TxF4ZU3-ViXvF7n<4HjJk
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 93 26 17 0b 81 f3 1c dd 2f 45 cd de 9c d8 cb cc 5c db c0 29 54 4d 9b d4 d4 a9 dc 1d 1d 78 b9 83 c3 0d e3 64 b5 84 b0 47 c9 03 19 97 1b f6 2a 41 bf f2 09 72 48 3f 90 7b 24 e7 9c 8b 76 92 4e 25 63 58 cb c4 21 09 55 8c 31 ee 92 65 89 78 65 9e 28 8b 55 08 15 bb 1c 25 be 1b 57 b8 b6 ea c7 57 17 e3 34 d6 22 4a 2e 75 81 03 03 03 03 38 f3 01 c1 c3 66 c1 7b ee 16 62 20 43 0b 75 d4 04 d0 1e d9 48 ab 52 65 63 69 c9 d4 1c bf bd 6a cb 31 bf 83 42 cf 8c c6 a9 b5 45 e3 a8 b1 6a 63 34 48 0c 8b 72 09 a1 6b b6 a5 f2 42 03 d1 0a b3 15 a6 b8 bb d2 bf 54 89 22 38 9a 7f 8b 5e e3 73 41 4c 34 da 30 30 16 8b ae 90 b8 33 b7 a1 66 be d7 6c 6d 2c ad c3 03 03 3e fe 2a 8f 41 65 95 3a ab b6 e4 b8 89 8d 8c ce 61 4c 52 5f 08 47 84 38 02 de 96 42 31 92 80 c2 52 7a 09 41 dc 3b 89 89 15 df Data Ascii: &/E\)TMxdGArH?{$vN%cX!U1exe(U%WW4"J.u8f{b CuHRecij1BEjc4HrkBT"8^sAL4003flm,>Ae:aLR_G8B1RzA;
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 81 10 14 32 42 91 a1 b1 23 33 52 62 c1 d1 07 72 82 f0 15 20 24 34 e1 43 63 83 b2 92 a2 c2 ff da 00 08 01 03 01 01 3f 01 f4 01 34 54 94 66 a3 15 b5 ef 52 ab 62 94 aa 37 92 94 a4 7b e0 44 92 35 09 9e a3 3a e5 1c ff 00 e6 6b b2 ce 60 bd 50 ea 04 f9 1a 41 e1 48 8f 78 0c fb eb b5 04 14 09 8e 1e 9f 9a 3f 6a 19 1f fc 9f 58 a6 d5 80 05 7e 05 83 f2 03 f4 ab 37 80 b6 41 56 49 c4 50 92 72 9e 7e 03 5e b5 92 b3 06 88 8f 46 2f 46 94 94 6f 26 4e 14 e9 de a9 e4 3e 15 81 96 9a 71 69 6b 78 e0 18 50 3d a5 ad 6a 80 94 c9 9c c9 3d 34 ab bb 55 b0 e2 db 7b db 42 b0 40 32 9e 3e 30 07 48 c5 1e 20 d2 4f 1a 8f 87 e8 2b b2 56 4a b9 7a e5 c4 a8 05 34 1a 50 07 53 2a 06 07 8c 11 48 65 38 27 90 ce 6b b5 cf 37 01 09 50 2a f6 94 3e 9f ad 1e 2c e2 25 4d e9 de 2a 3e c8 8f ef 23 5b 3d 1b cd Data Ascii: 2B#3Rbr $4Cc?4TfRb7{D5:k`PAHx?jX~7AVIPr~^F/Fo&N>qikxP=j=4U{B@2>0H O+VJz4PSHe8'k7P>,%M*>#[=
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 47 09 cc 8c f4 ee ad 9a dd ab 6c b0 fd b6 15 63 6d 25 4e 21 59 39 29 4f 11 8c b1 1e 75 da 41 eb 4c 23 85 40 b6 a2 a1 c3 ae 5a 78 1a 73 10 3a 41 04 47 59 3d 29 b2 54 84 a8 e4 4a 52 48 3a 83 02 69 a7 d6 c2 b1 22 33 c8 cf 4a 63 68 b4 a5 00 ea 0a 27 2c 43 88 49 f0 ab cb 96 da b4 7a e1 44 ee 9b 6d 4b 9f 01 31 a6 a7 20 3b eb 64 8f f5 42 e6 e0 41 7d 69 51 11 9a 12 08 2d b2 3b 90 08 27 9e 23 9e 95 b4 2c de bb 69 db f6 9f 52 4d ab 70 db 4a 12 db 98 d4 06 02 15 9c ab f1 03 95 3f 71 c2 9c 4d a4 2f de 09 33 9e 59 46 74 6d 9e 7d c4 a1 6c b7 68 f2 9b 4e e5 90 a9 2f 98 d4 0c 44 24 91 df 86 41 d2 9e 2a 69 c5 b4 e0 c2 b6 d4 50 a1 23 25 0c 88 30 4e 62 82 ca f8 71 61 2a c8 28 fb a7 ae 79 56 c7 b0 61 8f 58 17 77 6d 21 26 5d 75 f2 12 e9 50 1d 00 33 9f 4c 34 ad a9 6f bc dd 31 Data Ascii: Glcm%N!Y9)OuAL#@Zxs:AGY=)TJRH:i"3Jch',CIzDmK1 ;dBA}iQ-;'#,iRMpJ?qM/3YFtm}lhN/D$AiP#%0Nbqa(yVaXwm!&]uP3L4o1
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 19 53 18 55 ed 83 89 26 33 93 00 a4 e7 9a 48 ab 67 77 0e ef 49 48 4a 33 02 3d a2 08 23 5c a2 45 6d 6d b7 73 b5 50 d2 1f 8c 0c 88 6c 0f 74 4a 49 1a 49 92 39 93 15 66 76 85 e3 8d 58 b0 f9 fb a7 d0 80 a5 61 4a 59 08 53 ae 82 7f 0c 23 e3 02 8e be 15 b5 1f b7 70 5a 04 4a ee 1b 61 b4 dc 38 08 29 57 0f 08 11 3c 68 91 e4 45 58 de fa 93 8a 79 0e ad a7 07 b0 5b 12 a9 8f a6 64 1f 8d 6d 7d b6 f5 da 96 ab eb c7 ee 5c 69 38 02 9d 52 d6 52 9c 88 4a 4a b2 00 49 e9 5d 8d 07 68 df a1 2e 28 04 23 15 ca 1a 3e fe e4 80 dc f7 02 b9 f2 8a 5a 00 a3 ad 2a 95 42 b6 bb fe af b3 6f 5e e6 8b 77 08 8d 64 a6 07 cc d6 ce da cc a5 f3 6d bd c2 bd e1 dc e3 84 e7 3e c7 2d 4c c5 58 5e 07 52 06 21 3a 53 8b fb 3f ef ba 94 53 a4 fc ab b2 fb 3d f7 98 db bb 4d 08 4e e6 c3 65 5c b6 1d 72 02 05 cd Data Ascii: SU&3HgwIHJ3=#\EmmsPltJII9fvXaJYS#pZJa8)W<hEXy[dm}\i8RRJJI]h.(#>Z*Bo^wdm>-LX^R!:S?S=MNe\r
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: e2 11 96 ba c4 d3 ae 29 44 85 c0 88 83 a4 cf c7 4a 51 51 24 82 3f 2e 7a 0d 2b f8 63 62 ab 9d bc c3 85 32 9b 74 a9 e3 f9 70 26 07 88 2a 23 97 a1 f6 9b b9 6d 4d 3a 90 a4 2b 50 7e a3 98 23 91 19 83 57 fb 1a e6 d5 ec 2d a1 6f 34 a9 28 5a 52 55 97 e1 50 03 25 0f 82 84 11 dc 0c d1 11 e8 db b6 c6 d3 68 dd 35 10 03 cb 52 7f 91 67 1a 7e 4a ad a6 c1 38 c8 1a f4 ab 94 09 2a 03 38 29 82 4e 83 a8 e7 4f e9 99 26 bf 84 c8 0a ed 05 d4 9c 91 61 73 8b 21 98 2c b9 d7 c2 b6 82 02 e7 90 e3 f3 f2 ab b4 90 0f 0c 77 01 e6 07 7d 3c 65 47 2e fc b9 65 a1 f8 69 47 67 bc cd bd ad d3 82 11 76 5c dc a0 7b 58 5b 20 29 7e 67 21 5f c2 7b 10 da 2f ae d4 81 90 6d 90 a9 cf 8a 14 a0 3c 92 3f 6f 42 6a 45 01 35 8a 88 9a ed ad 9e 1b 86 6e 00 c9 e6 e1 5d c5 b8 02 3f a4 a6 af db 3b a5 41 98 39 f8 Data Ascii: )DJQQ$?.z+cb2tp&#mM:+P~#W-o4(ZRUP%h5Rg~J88)NO&as!,w}<eG.eiGgv\{X[ )~g!_{/m<?oBjE5n]?;A9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50163	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	929	OUT	GET /xxrz/250x400/793/f5/70/f5706571721222f8411fe7ab58e9b5e9/f5706571721222f8411fe7ab58e9b5e9.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:00 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:00 GMT Content-Type: image/jpeg Content-Length: 78624 Connection: close Last-Modified: Fri, 26 Apr 2024 17:01:54 GMT Vary: Accept-Encoding ETag: W/"662bde02-e290" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1775 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WGIydwCrL9zvt5lKpuOEZO2DqF8Av%2BR91RRykdn%2BDrCYedq0UElJGaQrCOdbAC9beoCq4zRAGE1tD3JvDM1eN7f96KzcFVH%2FqiALX%2FDgXPQmgR5%2BzdwJdRU6sw1mtogdN0Jx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a39a80571e-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:00 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 56 69 b3 c2 0d dd 62 66 28 83 41 65 40 f9 76 0a 6d 3d f5 03 e4 94 c6 4b df 33 ea 43 43 22 ce 5a 63 bb ce 7f 49 10 8a 61 61 72 ae dc fb e6 eb cb 58 f9 35 ee e6 a0 9f ea 68 cb ba e9 0c 6b 79 b6 b9 e7 5b 6b 6d 7b 5c a7 43 83 48 4a 51 7c 6d 34 0e 06 bd 4a d7 6f f5 ae 2e 09 19 89 5d de ca ef 1e 76 f6 ba 7d ec 18 59 69 d5 3e 64 08 a8 37 6e c6 fc 5c 4d b2 29 77 8a 1c 6b 7c 0f 93 ac 5d ee 40 a8 3f 39 de 90 2b 0d 0a 41 e3 0e 53 5a d5 41 cd 3f cd ad ef 98 df 53 6b 6d 6a d4 ec 07 3a ad 97 be 87 ab 75 79 17 ea d7 6a ad e4 fb 96 e9 10 f8 c8 1a 14 1c 51 7f 5c 5b 75 4d 82 d5 27 de b4 59 59 c9 af 66 ea a7 f7 a3 32 f6 ff 00 4d 35 ea bc 9d e2 e8 8d 7d cd ae c8 48 ed 46 46 56 fa 17 3b 42 d3 a4 2e 59 04 31 e4 8e 2a 64 ce e7 8e f3 84 f9 f0 c4 d6 89 20 e6 44 12 2e 84 0b 9a a5 Data Ascii: Vibf(Ae@vm=K3CC"ZcIaarX5hky[km{\CHJQ\|m4Jo.]v}Yi>d7n\M)wk\|]@?9+ASZA?Skmj:uyjQ\[uM'YYf2M5}HFFV;B.Y1*d D.
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 33 5c 60 84 d9 f7 99 6d 36 ed c5 f6 49 e4 23 66 15 84 23 2e d0 d9 32 11 21 33 84 b6 c7 e1 fd 0f f0 a4 cb 82 5d 42 91 26 33 96 c2 f8 44 92 a4 17 d5 f3 e6 84 70 55 e7 eb 01 d3 78 47 aa be 99 46 4c d4 4f 2c a5 91 34 b5 82 7f a5 a8 48 33 1c c6 58 e8 3a 4d 20 b0 b3 46 0a 6a 90 47 f2 11 4a 07 1a 4a 29 24 eb 9f ea ee 34 0e a3 21 f0 0c 6e 9a 97 25 be 56 f9 39 72 7d 9e 85 ca 2e 4d 77 fe 8d d1 30 91 10 32 18 a6 c5 d0 b4 6b 8c 01 14 98 9d 53 c2 b3 30 96 12 42 6c 17 fc a5 ed 99 c1 3d e6 60 42 79 56 ee 8b f7 a9 a7 50 40 f6 8a 30 a4 32 31 97 fe a5 cd db b7 17 fa 7d 48 4c a0 1a 8c c1 b1 1d 3c 74 06 17 5e 8b 82 4c 36 7c 82 ab a9 5d 36 19 b0 17 f2 e4 7d e2 d5 4f d7 bf 32 5f f9 f6 df ba 7d a6 9f 9e e1 93 87 72 c6 fc 73 25 a6 22 e4 c1 5c c2 c0 73 78 f5 2b c6 17 4d ba d0 72 Data Ascii: 3\`m6I#f#.2!3]B&3DpUxGFLO,4H3X:M FjGJJ)$4!n%V9r}.Mw02kS0Bl=`ByVP@021}HL<t^L6\|]6}O2_}rs%"\sx+Mr
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 79 dc 7f 54 98 19 33 f6 e1 9e 14 41 05 bb 8e 20 9e 76 80 88 35 31 0a 66 80 7c 52 37 b8 c5 8d 14 42 4e 61 dd 7a 11 36 8a c2 89 4e ec b9 01 18 a1 a5 5a c6 34 91 af 42 a0 76 a8 ef ca a2 ae 2b 71 32 66 6e aa 70 cd d7 27 b3 b5 0c 3c 77 66 53 98 82 32 dd 99 d8 39 da 39 c6 71 9c 60 71 93 04 50 65 81 31 38 03 50 03 19 0c f0 61 1a 93 82 25 e3 ce 4e 6c 2b 63 e3 74 54 e1 24 44 00 50 2e 28 cc c6 c9 78 01 7e d6 52 b6 e9 84 c4 b5 70 4f 60 7d 34 fa 19 06 5b 26 30 f3 f4 39 56 6e b2 f9 1a 59 6a ac 8b 77 88 21 00 82 ab 44 1e 39 43 0a 4c c5 31 aa a5 fd 77 6e 76 06 76 06 78 40 70 c8 71 9e 3c 4c bf 12 4d 7b a4 fd 08 93 3c 06 2e 09 4e 51 e0 0d 85 4c a7 14 d0 20 62 2d 92 39 01 a8 61 39 c2 95 63 0a 44 ec 14 c4 0c 1d 84 31 2f 0d 14 88 7a 74 41 08 c0 6c 67 d2 14 b8 d7 73 0d eb d4 Data Ascii: yT3A v51f\|R7BNaz6NZ4Bv+q2fnp'<wfS299q`qPe18Pa%Nl+ctT$DP.(x~RpO`}4[&09VnYjw!D9CL1wnvvx@pq<LM{<.NQL b-9a9cD1/ztAlgs
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: bb aa d8 94 9e d2 9e 26 bc 9b 6d 36 9a 4e 24 dc 95 32 93 aa b8 d4 11 af d1 e5 b9 51 b7 f2 8d 5d 38 78 fe 33 c7 92 b1 ea fb a0 b6 ec 51 02 76 13 59 07 63 bb a9 40 66 24 0a 23 1f aa be da ab 9f fb 22 f8 dd 57 15 58 6d 87 59 65 13 af 5d b6 7d 25 6c 87 f7 3b 6e e1 91 f6 cd 6f 6e 78 0c e9 e0 39 1a d8 89 b3 da 01 fd cc d2 85 37 f0 a6 35 35 03 ab 4e a2 d3 03 69 e8 14 c3 d8 b4 51 7f bb 3d 52 2f e9 a8 ca a2 2d 1e e8 d6 62 9c 9d 8a 47 d2 5b ba aa 8a 6e 7d 77 00 e5 46 cb 55 97 49 e3 38 43 78 97 e7 00 03 25 0c 51 96 31 89 88 89 4e 96 b1 30 99 e5 e0 dc 4c ca 01 7d bb 53 a9 df 54 d9 33 0b c0 5c 21 27 23 ac 2c ef 9a f3 c6 1a 59 43 1d 03 37 21 9c 75 32 f9 76 d4 ab c3 ce e2 80 e3 2f f6 9b 3f a7 7d 77 ec fa 4f ed d4 90 9f fa e7 a8 90 12 69 e8 30 e6 0b 5a 6b b9 8a 85 cf aa Data Ascii: &m6N$2Q]8x3QvYc@f$#"WXmYe]}%l;nonx9755NiQ=R/-bG[n}wFUI8Cx%Q1N0L}ST3\!'#,YC7!u2v/?}wOi0Zk
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: e6 92 48 cc e9 1b 51 d8 c7 eb 92 ae 8b b6 88 76 a0 da 88 7f 35 3b 7d 26 03 aa 7a 3e 68 00 73 a9 da 5d 14 ab c1 7a aa 45 59 3d 04 d9 78 bd de 3f 6e 46 c8 02 f2 c6 8c 29 27 be ee 2d c5 ed ba d4 98 b2 55 3a da 4d d1 5c 11 43 80 58 43 1f 4d 33 23 f6 76 08 1e 59 3a 45 6c d9 de e6 9d 76 90 b3 a7 15 99 63 9c 22 69 06 59 48 60 03 86 39 4d 63 9e a0 55 09 10 28 95 6c ae 91 53 4b e8 47 ce 9c 52 f6 f9 bb b5 56 ab 90 f7 7d 71 b1 25 06 1a 8b a5 d6 55 6d 4f d4 d3 d7 0d 34 f7 47 8c 7b 29 0b a6 0b 21 4f a2 33 a8 bb 07 02 26 a8 c2 83 2e a2 d3 39 16 c8 a9 02 13 69 aa 71 28 f9 f8 09 d1 f2 db e0 52 5e 3d 78 a5 51 7a dc 8e c3 b0 ca 9c f9 24 6f d5 92 0e 55 45 da a0 b6 cd 97 7b 1d 59 a3 c8 16 4e b7 30 a8 34 88 a1 3d 07 d1 3f e5 c3 e2 82 b5 23 82 f1 1f b6 6a 48 c2 20 eb a6 67 20 Data Ascii: HQv5;}&z>hs]zEY=x?nF)'-U:M\CXCM3#vY:Elvc"iYH`9McU(lSKGRV}q%UmO4G{)!O3&.9iq(R^=xQz$oUE{YN04=?#jH g
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 8d 63 0b 32 73 d6 dd 10 fe 9c 33 60 1d 44 e5 6b cc ce b3 b5 10 6a c6 46 c8 06 44 a4 3f ac 3b 27 2a 34 67 07 13 03 2e a5 cc 8d 96 b4 a9 4b b4 1a 31 18 26 ee 31 8b 26 d1 e5 51 ca 7e 9e 4f fd ef e5 1c a7 32 4d e4 8a e8 1d b2 dc e1 47 0b f1 88 e3 7c 47 e3 20 fb 4e e6 9c f4 e8 24 33 0c e2 50 6d 69 44 ed c0 d9 77 20 2c b3 07 8d d5 56 39 dc 05 64 26 66 46 41 06 83 c2 a8 94 de 13 48 b9 ac c1 4d 2f 22 ee 6a 26 62 44 ed 8a a1 fb d5 57 80 f2 09 99 cb 00 7a dc 0c ff 00 1f 5a 3a 3e 3c b6 33 f1 2d 81 85 36 27 8d cc 1c 26 6e 32 30 44 ce d9 9d cd 4d b5 b5 c1 fd 99 83 42 fa 1f f0 f7 c6 13 56 76 1e cb 36 45 97 38 28 9a eb 89 0c 44 8e cd ca 66 42 fc 83 74 68 a9 36 4c ec 08 66 84 4d 75 53 05 55 fb b0 aa 70 da c6 d0 50 5c 30 3f 20 06 55 f9 41 9c cb 2f 70 82 0c 0c 4f f7 48 40 Data Ascii: c2s3`DkjFD?;'*4g.K1&1&Q~O2MG\|G N$3PmiDw ,V9d&fFAHM/"j&bDWzZ:><3-6'&n20DMBVv6E8(DfBth6LfMuSUpP\0? UA/pOH@
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 5f 1c 55 04 8c 52 2a 74 55 79 24 89 52 6b b2 a4 0b a1 5a 49 0b 26 f7 b9 1a 2d da bd ec 77 c6 7d 4d 4f 4d 47 5d 46 27 a6 76 a9 8a 4a b3 a2 16 86 4e 7a de 44 62 d6 21 99 99 a4 ec 97 e8 c7 b3 d3 19 0b fa bd 20 a5 78 da 46 9e a4 34 65 48 00 34 b1 aa be b0 7f c4 52 a0 5c 93 dd 8a 77 96 2a 68 af 26 f1 c6 91 f6 96 e5 99 55 47 5c 71 33 4a f9 4d 76 ae 9c 87 d4 7c b6 ee c0 16 fe c0 17 c7 01 e9 8e ae ba e7 63 04 77 1e e7 3f c7 c7 11 cf 12 8b 05 5e ee ef dd 6c 45 51 6e c9 41 6c 4a f1 39 1d 8d d8 d8 ee 0e 26 08 47 6b 71 7e e1 be d6 fb 3e 78 59 29 a1 6d 4e 39 9a 6d 6b 91 7c 57 55 d2 4c 80 22 95 6f 2f 2c 51 54 35 3d 42 4c 08 60 b7 0c a4 6c c8 e0 ab 03 e4 54 91 8c c6 b6 a2 5c b2 a2 af 97 db 86 42 1b 43 24 81 91 48 e5 ce 34 db 4e a4 61 a9 0a a9 56 04 58 8b 31 ac 57 cc 63 Data Ascii: _URtUy$RkZI&-w}MOMG]F'vJNzDb! xF4eH4R\wh&UG\q3JMv\|cw?^lEQnAlJ9&Gkq~>xY)mN9mk\|WUL"o/,QT5=BL`lT\BC$H4NaVX1Wc
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 48 c4 58 0b 01 7e d7 df f7 e0 69 96 3b 1d cf 76 29 18 b5 3c 77 ea a3 41 f7 ae df 86 3d 12 a3 ad 76 6c 50 80 0d 24 1a cd ae 74 89 4f 4d fc f1 f9 42 c8 c5 b8 4c 1b ff 00 da c0 f9 8d 54 25 7f 1c 57 af fd 20 ce 3f f2 e3 ff 00 e5 af 8a 41 ab 82 f3 b3 dc 33 cc 90 7d b4 99 bf ee c5 7e 5f 99 65 54 3c 13 c5 ab 01 9e 81 69 69 2d 22 86 e5 a5 4e 5f 98 d4 3f ab ce e0 5a 3e 68 01 a3 3f 58 6a ea 50 8c 66 59 6f 0a 4b c0 b9 ff 00 12 70 ed 5d 74 95 35 b2 65 f1 66 54 55 92 c6 cf 45 34 d9 a5 3d 43 46 51 21 4b 0d 5f aa 95 49 47 8c 1d 27 ad b2 65 15 59 b6 51 04 9e c2 55 42 0d cf b4 ab 27 35 be 42 d8 e2 8a e1 55 9a 95 07 b3 4d 4f 0c 0a 07 41 61 72 3e 78 cb ea 12 09 9c be af a5 d2 a3 48 bf d6 5c 6a fa 7a d3 ff 00 77 3f cd c6 09 fd 12 2f 39 e6 ff 00 76 2c 51 83 2e 67 4c 63 ed 85 Data Ascii: HX~i;v)<wA=vlP$tOMBLT%W ?A3}~_eT<ii-"N_?Z>h?XjPfYoKp]t5efTUE4=CFQ!K_IG'eYQUB'5BUMOAar>xH\jzw?/9v,Q.gLc
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: fb 2e 87 e1 a8 62 66 d7 2c af d7 54 8c 7e 17 c5 33 aa e5 75 40 f5 2e 40 f7 90 83 11 45 7a 4a c7 fd 8e 47 c3 54 96 c6 53 26 9a 2c c9 4f 4e 4b db de 62 20 9f 96 01 c4 f2 73 a5 e6 f7 b4 71 5f df a0 63 2b e8 83 c9 3f dd 1f bf 0d 8f 47 b1 fa d5 56 64 b0 73 0b 25 34 25 95 45 88 bc 96 1a af d0 13 df be 3d 3b c3 32 be 40 64 a6 aa 8c 22 66 0a cf 32 e9 0d 63 49 7d 07 70 e3 6d c8 f1 18 9b 87 44 7c 29 49 c5 1e b5 1b 8a ac de a3 2b 6a 2d 48 64 8f 93 09 98 4e 52 fc dd 0d ec 89 3d 9b f7 e2 8e a2 51 c0 b9 dd 2a 94 e4 49 9e e5 12 48 ba 97 51 78 a0 a8 08 74 5f 51 01 4e ec 06 9b 9d fc fd 14 e6 35 59 64 f9 d1 a6 97 95 ce 86 88 39 ef b4 6f 50 cb f3 26 fb 1b 7c 71 c5 32 bc bc 49 9d 4b 23 6b 79 33 1a 96 67 fd a2 5c dc ef 8a f8 84 59 02 b3 03 cc 9e b2 1b 6d b6 88 e1 93 a1 ef dc Data Ascii: .bf,T~3u@.@EzJGTS&,ONKb sq_c+?GVds%4%E=;2@d"f2cI}pmD\|)I+j-HdNR=Q*IHQxt_QN5Yd9oP&\|q2IK#ky3g\Ym

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50166	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	929	OUT	GET /xxrz/250x400/793/b8/b9/b8b9b67aad5b4627db15b960e8b956fa/b8b9b67aad5b4627db15b960e8b956fa.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:00 UTC	720	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:00 GMT Content-Type: image/jpeg Content-Length: 66851 Connection: close Last-Modified: Fri, 26 Apr 2024 17:01:21 GMT Vary: Accept-Encoding ETag: W/"662bdde1-bada" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1774 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9MINvBnhdVc%2BIkZE91BtoJ8WsWM6a5H6lQiKApA%2BflkjkCEAHN6csEnNQi9Q9k6NiKmer1fVMeSHLmXfSm3A6RaESEvB4deF5Md2wutBi4YislwqZc1iyO1G6P%2FUp77I2Ya9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a39ff2b3e9-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:00 UTC	649	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 9b ef f6 e8 1d b7 cb e3 f4 78 9d 97 9d 7a 54 75 56 df 37 8f 2f 54 e1 da b4 b6 a8 56 4f 5e 76 c9 97 49 3a 95 f3 4f dd 5f 11 5d ec 20 56 1f 25 5c bd f8 d7 8b b1 2c 80 68 64 b2 00 17 87 50 d5 b3 3b 79 35 b4 7b ab 33 9f 54 43 3a 52 6d 42 25 b1 5f ae 8c 5b e9 38 3a 6d a9 98 a1 8b ec 66 16 84 8b 1e be a4 6a fd e8 f5 bc ea d1 f2 ed 1d bd bb 33 70 6e 3c ee 1b e8 67 d7 df be 22 d5 57 f4 4e 4f 64 95 75 95 d1 1a 17 d0 0c d5 ef 55 b1 ad 5f 2f 75 0c f8 b2 a1 c1 20 cc da 28 32 f7 ac 8b 43 bf 5b 7b 1b fa dc fb d4 de df b5 ce 1a bf 73 c6 d0 b6 fd e5 9f 49 b6 12 99 dc b7 4d 2a 95 71 75 c5 53 36 07 b4 33 3c 57 a1 44 d1 97 a6 f9 bd b1 56 f8 32 f8 d6 5e 6f a0 29 b9 a1 2a bb 89 7f 57 f9 49 f5 15 60 ae 7e cb d5 2a 82 a0 9d 6b d6 cf 3e 37 98 42 94 9f 2e ca fa b0 e7 c0 e4 c0 52 Data Ascii: xzTuV7/TVO^vI:O_] V%\,hdP;y5{3TC:RmB%_[8:mfj3pn<g"WNOduU_/u (2C[{sIMquS63<WDV2^o)WI`~*k>7B.R
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: fa 3f 52 bd 34 ce 7e cc e9 d4 fe b0 d9 9a eb eb 5d f2 4b 90 ea 2d d1 65 c6 39 f5 fb b5 4d 79 ed 9a 2e e8 cf ba fa 9b a5 80 a8 d6 3d 9c f6 2f cb cd af 50 e9 d3 2f 17 31 7c 63 9f 4f f7 1c 64 eb 8d 6a 15 de 40 65 14 a4 ad 26 45 e5 2f 2e c6 68 d4 66 98 54 a8 8c 82 8e bd 58 48 36 db 39 ce ac 13 0c 59 ec ef 45 dc 19 6e 9b c8 f8 be 6a c8 6d ef 8e f9 6c 81 6c a6 d7 c3 cd bb 3f c6 d0 9b 5e 48 6b 61 4b 1b 19 f2 44 e9 42 7a 43 5f 62 59 e8 99 6e c9 0a c7 25 54 1e b3 06 96 52 46 13 ec d7 2d 6f 3e 45 42 9a 48 d5 e6 ac 5d 0b 42 42 7c 5e ec b8 9f a4 c1 93 0e 84 a2 30 02 54 46 31 ac cd 63 1f 83 62 3a 29 0a 34 f3 48 20 00 04 60 92 90 ac 81 58 94 08 89 66 95 11 a8 88 10 06 40 03 0a 48 22 25 18 23 c7 97 1b a2 30 93 6a a0 46 01 98 23 00 c8 92 02 c8 00 08 94 90 08 96 60 63 0b Data Ascii: ?R4~]K-e9My.=/P/1\|cOdj@e&E/.hfTXH69YEnjmll?^HkaKDBzC_bYn%TRF-o>EBH]BB\|^0TF1cb:)4H `Xf@H"%#0jF#`c
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 44 20 32 d3 d9 6b 00 b4 d1 15 5c 62 3a 5f 1b 18 6a 9c 3b 28 95 f7 3f cb 8e db 4b 32 70 f8 92 87 00 34 78 1d 9a 1d 96 31 80 1c 9a d4 2f 7f 09 a7 34 0b 2b 7b 24 cb 40 2c a5 22 1a cb 0d 64 d4 c5 96 4a b6 9a 4a ac 3d ca 26 5c 54 6a ba 42 52 e9 84 5f 88 fc 8d fa 51 93 6c e5 d0 16 1a 3a 37 3f cb e1 1a 2c d2 fd 00 62 ab 17 4c 99 08 1a ea 6c 97 2b 01 68 bd 81 b2 a8 21 5f 8d b4 05 9f 6e 70 df 2d f9 e0 15 ff 00 69 53 38 7c 0b 2c 56 fc a6 82 bc 5a 0a 94 1c 3c 91 01 08 d5 da b0 72 e1 38 b4 00 fa 9a ba 65 a7 69 8c c8 c4 4b 48 b5 74 d8 2a 91 64 9b 95 7f 04 c0 ed e8 b0 4e 22 da 17 b9 4a 91 78 b1 30 7e b2 36 17 36 68 72 69 f5 22 d1 75 ab c0 3f 90 f1 6b 32 b2 ac dd 1e c4 d5 8a 4e 35 52 55 f3 82 ca 96 65 a8 6e 3f 3f bd 9d 8f 0d 99 00 8c 92 7e 6f 08 aa ca e5 7c a9 1a 4a 69 Data Ascii: D 2k\b:_j;(?K2p4x1/4+{$@,"dJJ=&\TjBR_Ql:7?,bLl+h!_np-iS8\|,VZ<r8eiKHt*dN"Jx0~66hri"u?k2N5RUen??~o\|Ji
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 07 21 e6 ce ba 33 d3 69 47 1d 27 08 2f 83 9e db 4c cb 30 82 64 9e a0 40 de 6c 09 d6 2b 89 66 b0 1c 88 c5 57 66 c6 1e db 7e 9e 3d a2 c1 ff 00 1e 1a be fc 8e 58 34 fa 39 c1 6f 0d a5 2b d6 5d 2d 97 7f 3d 73 28 00 06 07 6d c7 61 cd 5e 85 eb 6f 4b 97 42 46 be a2 00 70 8d 7a 27 c9 69 56 70 ac 61 ac 51 d3 67 b8 d8 20 e1 2b 30 5a a3 1a d1 05 ed 36 05 2b 55 78 c9 f8 e2 97 91 2e da a4 bb 12 52 f4 6d 48 88 1b 48 82 1e 1e a3 35 08 db 29 e4 16 76 d5 44 ba c3 46 ee 33 09 ba 27 5f 46 5f 34 6e 46 e3 3b a5 74 87 b1 97 d0 f4 7d ef 60 8b 4e 66 16 21 89 50 9c 12 98 a3 e1 0f 32 72 85 e8 3d a2 7a 36 4a 7e d1 67 96 3d b9 66 4a a7 a3 ae 64 1c 69 c3 c5 53 42 47 79 aa a3 c7 8d ea 71 70 5a a3 03 3a 13 74 79 77 0f de 5c 59 b5 6f e5 8f 07 a5 90 72 4c 63 db 59 ab 37 82 8f 88 4c 64 3d Data Ascii: !3iG'/L0d@l+fWf~=X49o+]-=s(ma^oKBFpz'iVpaQg +0Z6+Ux.RmHH5)vDF3'_F_4nF;t}`Nf!P2r=z6J~g=fJdiSBGyqpZ:tyw\YorLcY7Ld=
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 89 6a 04 b2 37 22 28 cf 81 73 dd 85 74 d8 59 14 6e c7 cf 7b 93 d4 e0 9a 83 ff 00 6b 1f a7 67 5b 7e ab ff 00 1c 55 56 d3 50 d3 2b 56 c8 aa da 6e 5d 06 93 21 b7 74 ac 20 91 7b 7d df 3d f1 51 c5 a5 5b f6 78 03 2f 9c 9d 48 da de 3e b8 aa e2 ac ca 51 a6 25 8e 9d 0f 4d 23 53 f8 7d a6 ff 00 4c 27 11 e6 e8 2d da b5 0f de 44 27 f3 b6 32 ae 2f a9 59 44 75 c0 04 75 2a 67 8c 59 94 7e f2 f4 23 ce c3 10 57 51 e6 08 ae 93 ab 92 00 e6 29 d5 e4 06 a4 d9 94 f9 fb 09 b6 3a e1 7d d1 e8 3f 4a fd 09 ae 74 42 a7 fb 50 5e 43 e3 a3 6b 28 f8 b6 df ec 62 ba 59 a1 11 41 4d a1 26 96 f6 26 d6 44 50 2e 40 37 b9 dc 0e 9b 5f d3 12 66 19 9d 05 40 e7 3f 35 4f 83 77 91 c6 dd 2d 6b 1f 4f e3 8c d7 30 9a b2 ad e5 a8 62 4f d8 51 ee c6 96 16 55 1e 00 0f c4 db 7c 31 ee 5c 8e bf fd 60 85 b6 d7 27 Data Ascii: j7"(stYn{kg[~UVP+Vn]!t {}=Q[x/H>Q%M#S}L'-D'2/YDuu*gY~#WQ):}?JtBP^Ck(bYAM&&DP.@7_f@?5Ow-kO0bOQU\|1\`'
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: c6 b1 3c 4e 8e dd d1 d7 4b 1b 7c 77 c5 67 04 d4 d0 f1 0e 63 92 8a e4 a8 cb a8 66 7d 35 71 3d da ba 14 61 a2 3a 68 05 f9 d5 92 06 00 47 d0 1b c9 70 aa d8 ce b8 7e 4a 7c ce 14 92 9b 90 05 1d 3c 66 97 63 d9 0c 68 23 ec ec e0 59 a4 44 54 69 7a b7 31 db 51 b9 b0 e4 f2 d1 5e 25 b3 a8 17 5e 82 40 a0 02 08 e8 1f 4f ba 40 be a0 07 42 46 12 75 51 7f 07 0a 54 ff 00 bf 5c 1e c3 53 cb ed 30 d3 d4 34 6d ae 36 92 24 90 a3 79 8d 60 d8 f4 e9 6c 1e 5a 8b 8d 3e 03 bb d0 7e 18 cc f2 4a 2c cf 91 53 2d 39 79 a2 96 35 b1 95 e3 46 89 5b 50 be 85 6d c3 00 6c 34 ea f3 f2 55 54 50 aa 34 85 d8 01 e1 80 09 e8 09 f4 17 c2 8b aa fa 0f d2 30 45 f1 44 f6 2f 11 dd 64 1b fa 11 a4 9f e2 30 36 62 86 d7 b8 1a 57 60 2d b6 ff 00 85 ff 00 3c 67 e2 3a 64 bc 10 16 96 a0 4d f5 a2 5e 5b ac 87 4e 87 Data Ascii: <NK\|wgcf}5q=a:hGp~J\|<fch#YDTiz1Q^%^@O@BFuQT\S04m6$y`lZ>~J,S-9y5F[Pml4UTP40ED/d06bW`-<g:dM^[N
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 51 ab 5f 33 42 b8 56 b1 41 64 5f 1b ed 96 bc af 47 0f 3e 51 34 f1 8e 4c f2 8e 92 4d 11 31 c8 fd 07 bc 57 57 4e a4 e0 f0 71 8b 2c c9 72 fa 66 6a 74 9e b7 2b cc 6a da 03 2c c9 2c d3 d0 d4 32 44 fc d6 ee 24 ad c8 56 65 b2 8b 5c 6e 31 57 c1 1c 2b f2 55 c1 15 35 c9 ae af 35 cd 9e 58 e8 05 4b 42 d5 15 55 b3 7f de 24 d0 0a c3 4b 48 8b cd 48 a1 b5 f4 28 92 46 79 4d 89 24 dc ee 49 24 93 d4 93 b9 fe 37 c1 17 f6 70 58 ff 00 88 78 77 89 38 45 cd e5 96 94 e6 39 68 3d 45 4d 32 87 b2 f8 ef a6 fe 3d 49 c4 10 8a 7a 87 59 46 97 04 a6 fe 0c 0d 88 3f 1b df 00 df 1c 4f 55 59 45 93 55 cf 97 86 6a b0 aa b1 69 4d 65 75 b0 56 70 3a 5d 14 92 09 b8 07 c3 1c 3b c5 39 b5 16 67 0c 4c 64 a9 8c b3 8a a8 04 41 a5 96 22 4c b2 38 3e f6 b4 ef b8 b5 bc be 22 19 a3 a8 89 26 89 d6 48 e4 1a 91 Data Ascii: Q_3BVAd_G>Q4LM1WWNq,rfjt+j,,2D$Ve\n1W+U55XKBU$KHH(FyM$I$7pXxw8E9h=EM2=IzYF?OUYEUjiMeuVp:];9gLdA"L8>"&H
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 3e dc ba 91 b3 1a fa 3a 14 6d 0d 57 53 05 38 7e ba 4c d2 ac 7a ad b5 ed aa f6 b8 bd ad 71 86 f9 38 47 96 9c 51 e6 fc f8 5e 5c c6 92 a1 9a 94 89 61 ae cb 62 79 64 87 48 60 19 5c 46 dd f0 7b b6 bf 7f 6c 54 64 5d 9f 87 f2 fc f8 4e 5b b6 d7 d4 51 1a 7e 5d 84 5c 8e 8f cc d4 49 26 db a9 51 d4 6f e7 92 45 4a 99 a5 7f 69 d0 20 3c 29 90 99 af 7d 3c b2 d5 89 26 af dd 2a 2c 7e 0d 81 97 ae 4f 9f 70 46 5a b6 65 87 e7 ea 74 7b 1b 98 9a 99 9d 14 df c4 25 81 f8 83 8c 9f bf 17 07 b4 ed cd 95 2a 38 a6 8f 53 12 cd cb 89 6a d5 54 b1 24 90 04 6b a7 ca c3 cb 1c 39 1c c6 97 84 5a 31 31 a7 8d 78 8e 9e af 46 be 5a de 49 16 06 98 0e e9 3a 90 85 2c 0e e7 6c 70 ff 00 02 51 67 b4 93 d6 d4 66 73 51 c9 2e 6d 5d 96 d2 44 90 07 46 92 08 1a a0 34 8d ab 50 1a 11 8d bb be ed 85 cb 5b 11 7c Data Ascii: >:mWS8~Lzq8GQ^\abydH`\F{lTd]N[Q~]\I&QoEJi <)}<&,~OpFZet{%8SjT$k9Z11xFZI:,lpQgfsQ.m]DF4P[\|
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: f0 b5 3f ef 0f 07 f6 f1 e9 c6 7e 5c 54 d9 42 83 dc 60 ad 20 10 b2 29 01 83 5b 9c 3b d4 0e a4 6d 68 ea c1 1c 96 99 0f 95 ec 3d 75 91 59 47 6f 08 f9 02 bf 3e 6a ba 8d fd 6e 49 e4 d2 b4 b1 14 b7 12 37 6f 68 bd 6a d3 3f 4a 23 2f 76 44 61 1c 8f 2b 7d a2 00 45 c1 3c 58 f0 6b c3 4d 6b 4c f6 48 b4 18 69 6d 5d 89 66 99 68 6f 42 c3 d1 cc bb 98 c8 df f6 dd 45 6c 7d fc 72 97 24 e8 dc a7 a5 0a 5a 5d 55 8f 76 1a c5 82 07 5e d4 8a 02 09 26 71 dd 88 50 15 17 ec a2 f6 5c 7b c2 32 9e de 83 88 58 fe ce 32 c3 df db df c0 60 4e 07 1a a6 91 a5 eb 35 5e 96 ad a7 d4 d4 2a ca 0a bc 16 a0 49 63 20 8c 7a 38 38 3e f0 cb 86 07 d0 f1 e2 37 e0 dd 42 68 ec ea bc 8a de c5 34 51 c9 2b e8 93 33 cb 0c e5 7c f8 a7 33 b6 f8 5b 00 85 8d f7 a9 38 00 8c f1 34 72 43 23 c1 32 34 53 42 ef 1c b1 38 Data Ascii: ?~\TB` )[;mh=uYGo>jnI7ohj?J#/vDa+}E<XkMkLHim]fhoBEl}r$Z]Uv^&qP\{2X2`N5^*Ic z88>7Bh4Q+3\|3[84rC#24SB8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50162	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	929	OUT	GET /xxrz/250x400/793/60/f8/60f86e3cde437250c3cc15d1b6da4b14/60f86e3cde437250c3cc15d1b6da4b14.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:00 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:00 GMT Content-Type: image/jpeg Content-Length: 49540 Connection: close Last-Modified: Fri, 26 Apr 2024 17:03:56 GMT Vary: Accept-Encoding ETag: W/"662bde7c-7a5d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1775 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y2gmbzr9L2qXa2HZO5uxFr7TPuao0nF7WLO1esg7L7ei1PL2QUM3wkRGJY6oqqLrZOFOOvtCxMCebkek3HV3XLeZJlWL3dRBQYnGBRUgN28%2BjcHXwwXOG%2BpbuJqkq8pEaE05"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a39dcda569-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:00 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: b6 3e 72 d9 2c ef b8 c8 22 e4 e9 eb d7 c8 f3 30 f8 41 70 e7 73 f3 98 9b 27 ae 5d 92 55 0f 99 ed b1 87 8a b2 5b ad d9 66 6f 77 bb 32 66 58 da 51 65 79 56 de 30 2d 7d 56 de 33 5c 54 e2 d2 23 96 e9 1c 45 4b 9b 25 cd 56 db 66 2a 63 cd cf ed ef 56 59 92 ba e1 79 3b c8 fe 90 83 8b de 54 90 a7 23 8b 91 bd ff 00 1b ec 61 fe 3b 29 b4 29 bf 9e 28 c8 d8 37 d2 58 dd 65 d6 c8 d7 ea aa ec cf 16 5e e2 da bc 76 52 46 c2 1b 95 3d bb 0e d8 da d3 0b da 65 8d dc a0 98 15 44 61 db 0a 18 b7 f5 cb 74 75 be 6a 36 18 95 b4 8d ad ea 2b 1a 37 94 ee eb 7c c8 90 92 70 ce 9e bc 91 09 24 4c a2 a2 0c 24 20 9f 70 f1 f4 12 2c f7 cf e8 b1 38 f7 a8 ea ac f8 d6 61 26 3f 1e 7a 70 cd b9 11 af 3c 8a 2c 74 a4 e0 ca 28 88 89 e2 4f c8 38 71 d3 b1 6e 54 33 80 ce 90 56 ec 79 d3 c1 91 91 f2 72 7a 39 Data Ascii: >r,"0Aps']U[fow2fXQeyV0-}V3\T#EK%Vf*cVYy;T#a;))(7Xe^vRF=eDatuj6+7\|p$L$ p,8a&?zp<,t(O8qnT3Vyrz9
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: b2 57 88 97 0f ac ba 73 72 25 e3 2a 98 7c 99 60 d2 d1 5e 22 56 36 54 31 99 34 36 44 d7 39 2b 9b 78 de 4c 36 fa fd be 5d 4e 26 e5 29 94 a7 76 2a c1 91 b7 1e cf 01 08 44 c7 d6 85 0e 0d b8 89 63 93 63 0a 5a 75 12 9c 36 f6 da b3 44 c8 6a 13 93 f0 de b8 8c 4d 57 25 68 c0 2d 05 80 3d c6 cc d7 9d 8a 73 c2 86 8c ed 38 f6 b5 83 30 f9 b1 e6 fa e4 7a 8b 3e bd c2 ef a0 36 43 e4 f4 42 98 5d 6e 41 c6 26 8b 36 5a 43 15 3e e9 4c e6 76 42 c9 db 46 cb 6b 0c e6 3e e7 98 30 b0 6d bc 91 e2 e0 47 1c cd 99 d7 c3 6d 71 41 8f ea c4 f2 24 77 16 bc 68 9f 15 3e 0a c6 ea b7 12 4c 89 fa 9a 3d 47 5a e5 1d aa 4e b9 4d 7f 8c 7b 4b f3 5c 8d 76 3f 52 65 c9 25 a3 f8 21 d5 a1 fd 93 91 37 4b 0f a6 75 2b 5f 31 7a 0b c9 1e ac 6b 5c e4 50 f8 63 9a df ad 15 92 36 41 2e 34 f0 b3 b5 1c 4f 46 75 97 Data Ascii: Wsr%\|`^"V6T146D9+xL6]N&)vDccZu6DjMW%h-=s80z>6CB]nA&6ZC>LvBFk>0mGmqA$wh>L=GZNM{K\v?Re%!7Ku+_1zk\Pc6A.4OFu
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 8f d9 32 f1 51 0a 8c 54 20 a3 15 10 7d c6 08 01 7a 8a b5 24 50 48 8d 3f bc 32 78 ac 4c b1 bb d5 ac 26 23 59 c1 41 0f 92 8e af 98 bc 1f 11 3c 4d 30 63 a8 91 cd b9 65 ae d9 c8 eb 98 d1 b7 62 d4 df 96 47 8f f3 af 8f b0 75 2d 65 e3 8a c4 86 c8 c5 18 ae 94 42 a2 1e d4 22 a2 15 08 28 83 ea 28 d7 a9 22 1f ea b2 82 91 ba 45 ed d2 e9 41 39 c4 b1 39 b2 11 af 91 8e 65 59 d8 da 98 f8 a7 a3 1c 8d 10 c7 5c 31 21 19 cd c8 ba e0 14 1a d0 14 74 82 5a b3 b6 bb 6a 1a 76 b6 fd 4a b6 3e b7 4d fe 9b 91 91 b2 26 5d 28 59 42 ca 16 50 8a 84 54 20 a1 8d 73 fe 03 25 63 3d 6a ab 82 9d 91 0f 5e cc dd af 8c 99 33 b8 a8 e6 76 58 8b 9f dd 89 99 cc 6b 13 0a 1e 9a 3b 11 fc d5 f5 fb ae d7 f7 0b f0 63 87 91 c2 3a d4 83 ca 39 59 98 87 1a 43 93 e3 4b 31 7c 18 33 64 48 9b da 26 50 b2 85 94 0c Data Ascii: 2QT }z$PH?2xL&#YA<M0cebGu-eB"(("EA99eY\1!tZjvJ>M&](YBPT s%c=j^3vXk;c:9YCK1\|3dH&P
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 90 79 64 fc a9 50 12 02 41 22 03 41 22 09 10 ca 9a 4f af 99 d9 72 38 95 8c 45 96 6f 95 ff 00 58 24 70 7f 37 35 62 b0 78 9f 71 df bb f0 5b 28 7b 72 8a c7 47 4c c8 54 56 46 36 f9 84 e7 ae 6f e5 aa e5 c7 57 d3 36 09 32 bb 4e 43 52 1b f8 dc 54 53 af ca 74 24 80 90 49 d2 19 10 1a 19 10 48 9a 57 5f 2a d9 46 2b 18 cc 8c 6f 15 9f d5 9f a7 69 1a 71 92 1f 96 9c d2 95 99 6b 58 01 5e 3d 4d 43 f1 89 41 20 44 ab 5c 8e c8 0b 9b d8 a7 24 b2 86 c5 37 e2 e0 f1 98 2b 65 7e 09 5c 9c 2c 32 fc 94 24 84 d0 c8 9a 44 32 21 93 e8 64 fa 69 51 93 81 5c 92 03 a3 b0 0f fb 93 fb 77 ee 0e de 35 a2 16 a9 4a c4 3f 19 0c 0d 64 a1 ea 6b 2e e5 08 cc 24 53 d8 f0 18 e5 1f 18 63 31 3c 74 7f 34 bb fb c1 7e d6 06 3c 85 50 af 2f 84 2f 65 9e 3f cc 42 68 4d 09 a1 34 d2 26 91 34 89 a4 5f 27 93 cd f8 Data Ascii: ydPA"A"Or8EoX$p75bxq[({rGLTVF6oW62NCRTSt$IHW_*F+oiqkX^=MCA D\$7+e~\,2$D2!diQ\w5J?dk.$Sc1<t4~<P//e?BhM4&4_'
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 79 26 4e eb b5 da 67 5e 4b b5 e4 bc d7 92 73 5f 73 e3 0d 1a 27 fb fd 99 33 f6 c4 bb 42 bb 46 5e 48 1b ed 76 bb 5d a7 7f 7f 25 da ed 76 bb 5e 4c 88 d5 43 17 b1 60 4a 33 34 5f ca ef d9 93 7b 33 fe 8c 9c 97 f2 87 f6 ed 76 bb 5d ae d7 6b c9 76 88 97 9f 4f 92 91 e5 b8 5f c7 e8 c9 99 3b 3a 66 4c de fd a3 74 de dd fe 9d fb 76 bf ff c4 00 3e 11 00 01 03 02 04 03 05 05 04 08 07 01 00 00 00 00 01 02 03 11 00 04 05 12 21 31 41 51 61 10 13 22 71 81 06 14 32 91 a1 42 52 d1 f0 15 20 23 33 72 b1 c1 e1 07 16 43 53 62 92 f1 b2 ff da 00 08 01 03 01 01 3f 01 29 1c 75 ac 80 ef f8 56 52 9a 4a 6a d0 0c bc b6 a4 ed 1c a8 88 a4 89 9a 41 d2 39 52 94 28 10 29 4a d2 20 54 1e 5f 9d 2b 6a 4b 82 83 a2 bb b3 41 03 ce bb bf 5a 4b 7c aa d9 11 c7 95 03 34 9a 66 d2 e1 c3 28 6c 91 cf 6f e6 Data Ascii: y&Ng^Ks_s'3BF^Hv]%v^LC`J34_{3v]kvO_;:fLtv>!1AQa"q2BR #3rCSb?)uVRJjA9R()J T_+jKAZK\|4f(lo
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: e9 58 43 9d cb 8d 91 bc d6 1b 7e b0 b4 b4 bd 42 fc 22 3e 95 ed db 05 9c 7e f2 47 ef 14 1c 1f c2 a0 22 ae 32 82 22 7a cf 33 4a 31 1f 9e 54 c1 fe 94 d2 a7 48 ec 4e f3 ca 80 fd 2b 80 5d e1 6c bf ee d7 41 d4 bc 35 23 de 12 11 19 24 0d 4f 4e b4 e3 4a b7 79 6d 39 f1 b6 a2 95 0e a0 d2 15 1c 2b 34 fc 27 b3 35 37 f1 03 ca ad 12 51 95 c4 9d 04 19 ac 31 c5 38 12 55 f1 24 83 3e 71 5e de 60 0a bf b2 4e 2c c3 6b 53 ec a2 16 94 a0 a8 ad 04 a6 3f eb 57 28 52 0a 92 41 91 a1 9d 08 23 4d a9 69 d6 79 d3 4b 20 e9 48 5e 93 1b f5 a4 2a 46 d4 9a c3 fc 6f b6 26 3c 49 32 37 81 06 b1 70 95 e2 57 6a e0 2e 1c 23 fe df da 94 a1 a4 6b 49 d4 4d 0d 04 76 34 67 f3 e5 56 4e 85 b7 93 49 4e bc a4 69 3f 2a c2 94 b4 ac 34 a2 0a 57 b7 4d 45 59 21 b7 6c 72 b8 00 46 53 98 ab 60 34 d6 b1 8f 67 30 Data Ascii: XC~B">~G"2"z3J1THN+]lA5#$ONJym9+4'57Q18U$>q^`N,kS?W(RA#MiyK H^Fo&<I27pWj.#kIMv4gVNINi?4WMEY!lrFS`4g0
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: ad 26 de 35 5a b3 2b a0 d1 23 e0 2b 2e 5d 06 df c8 a4 83 2a d9 5d 47 3a 9f c6 81 9a 0a 81 b5 01 34 f3 db eb 4e bf bd 2e e2 0c 7d 72 a4 dc 6b 3c c5 60 ed bb 7c f0 6d bf 0a 50 02 9f 77 60 84 92 3c 3f ef 72 08 4f c4 f9 53 4d 21 94 84 20 00 90 00 d3 cb 99 f3 a2 26 88 8a cb 44 c7 76 5a 71 20 82 79 e9 1e 54 0c c7 9d 26 92 62 69 e7 88 1a f3 a7 1e d0 99 de 95 71 94 4e ff 00 42 8d c8 1b d7 65 ec c5 ae 12 c2 c8 87 6e 80 b8 74 f3 95 8f 0a 09 fe c4 40 fc f9 f7 11 3d ca 55 29 55 c4 e9 5c 58 de 82 c9 a5 82 87 7d 40 a4 aa 92 a8 a7 5c de 69 e7 b7 d6 96 e9 26 6a e5 e0 86 1d 50 dc 21 51 ea 44 0f c4 c5 61 48 e1 61 b6 4d eb e0 b6 64 19 de 78 48 a0 26 89 9a 2a 8e 54 a5 f9 7e 7f b5 29 79 44 aa 8b e4 ed ca 9d b8 00 c9 3f bd 33 74 14 41 4a a9 6b 0a 4a 55 f5 ac 52 55 e1 15 9a 9d Data Ascii: &5Z+#+.]]G:4N.}rk<`\|mPw`<?rOSM! &DvZq yT&biqNBent@=U)U\X}@\i&jP!QDaHaMdxH&T~)yD?3tAJkJURU
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 8e 94 e2 01 1f 5e 54 e2 60 c4 d2 9b 33 06 88 8a ba 21 2c 2e 44 f2 1a 13 af c2 b0 32 af e1 18 71 5c 95 7b 23 12 49 24 93 c3 4e a4 9d 64 d6 5a 52 69 cf 7b eb a0 ae 29 2a 5b 71 a8 81 d2 af 5b dc 83 94 13 06 b1 0b 72 db dc 4f 11 cc ac a7 4e 71 a7 e3 58 b8 4a 9a 53 a9 6c 80 80 0a 86 a4 15 1e b5 7e 5e 18 a8 53 00 a9 c2 a6 e1 b4 89 2b 2a 22 10 00 92 49 3a 0a ec ff 00 68 ae 6d b1 56 b0 bb 97 6e 78 4b b6 6d 19 1d 4e 67 6c ee c2 02 b8 6a df 3b 70 20 a8 eb ac d6 13 7c 8b db 62 be 23 65 6d b8 a6 97 94 83 aa 34 9c a2 4a 7d 15 06 9c 49 1f 0a 71 b4 c8 3d 67 e5 4e 36 33 51 40 ab 1b 41 73 7f 64 ca c8 c8 bb 84 05 7a 6f 1f 18 ab 56 d2 d3 2d a1 3e e8 42 40 1d 00 11 44 c5 11 34 77 70 74 00 d3 85 49 50 5f 50 99 f3 d0 50 87 9a 39 c6 bb 19 1f f1 57 ec ac ca 4e 55 26 36 e7 99 30 Data Ascii: ^T`3!,.D2q\{#I$NdZRi{)[q[rONqXJSl~^S+"I:hmVnxKmNglj;p \|b#em4J}Iq=gN63Q@AsdzoV->B@D4wptIP_PP9WNU&60
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 0f 85 be a0 34 4e 47 b3 bb 1a 1c aa 4d e1 f7 bd 83 fb bf d4 4e 0e 24 9a 67 58 e2 8c 5d e4 73 60 a0 90 a3 f1 2c 00 03 73 87 87 2c 5d 03 a1 aa 6f 5f ff 00 a4 bd 14 78 31 df d8 30 64 9a 47 96 46 f5 9d c9 66 3f 13 f5 7a 95 8a b0 e8 47 5c 2d 35 51 b4 d6 b4 72 77 4b fb 27 f6 bf 7f d6 f4 f9 ce 25 ad a9 6d 30 c7 61 fb 4c ed 7d 11 a0 bf 33 3d 8d 80 f0 27 bb 0c f2 b1 8e 9c 13 c1 a7 52 42 2a f7 12 3a 33 f8 93 f0 b0 fa e0 45 c1 1b 83 e0 46 38 52 9f d2 61 03 55 fe da f7 37 bf c7 ea 2f e6 74 f9 8e 24 96 56 08 91 ab 3b b3 6c 15 10 6a 66 3e c0 06 24 10 16 5c b2 95 de 3a 38 cf db 17 b3 54 3e c3 9a 5b 5c 03 fa b4 22 3e aa 49 fa f8 aa 17 a2 b5 9c 77 32 13 cc 0f c3 09 2c 67 5a 3a 86 04 7b 7e b4 e2 0c a2 03 a6 a7 34 d6 f3 91 eb 0a 14 6d 3e 3b 71 65 56 5f 16 55 7b ed d7 eb fa Data Ascii: 4NGMN$gX]s`,s,]o_x10dGFf?zG\-5QrwK'%m0aL}3='RB*:3EF8RaU7/t$V;ljf>$\:8T>[\">Iw2,gZ:{~4m>;qeV_U{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50164	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	929	OUT	GET /xxrz/250x400/793/4a/6a/4a6a22f7a0595822396fb0b553e99be9/4a6a22f7a0595822396fb0b553e99be9.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:00 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:00 GMT Content-Type: image/jpeg Content-Length: 61147 Connection: close Last-Modified: Fri, 26 Apr 2024 14:12:51 GMT Vary: Accept-Encoding ETag: W/"662bb663-eb32" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1775 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x25y51qqHscaco5tjpQWBCbHOy8QWIt6pMAj%2FYHjrDibkBWNLQ%2BYwnWjbv49x2Gy4kQ7SbFkczfIr2wm3pvxmgsXGxV78YMRv%2FX8TykNbXDnSp2QPDxG%2Bxyb6v%2BXRiVuDY2%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a3ac185c6d-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:00 UTC	643	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 78 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 05 05 01 00 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCx"
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 0c f5 11 e5 47 d5 01 b8 45 2b a1 2d d4 88 6d 12 da 09 b1 d4 14 9d 62 71 29 2a 8f 38 cb c7 ce c4 f2 44 c2 68 8a db a2 39 8d b2 66 bd 89 36 e7 7f f9 bc 6a b6 ce ed 3f 5b 8f 34 dd 66 d3 0d ee 38 9f dd fe 0b f7 fc e0 2e 7a d5 3f 4d 27 05 3b 83 c4 5e e1 9c 02 f4 f9 e5 d7 d4 19 bb 34 41 a5 0c b1 03 b5 84 17 61 88 01 6a 2c 14 2b 94 71 8f 8f 1d 83 e3 98 47 58 39 43 e9 d8 f3 a9 af dd 10 e6 91 ea 73 81 1e 82 fc f1 1d 73 eb 27 9b ee 8a 1c da dc ce 72 f4 64 f3 f7 e9 3f cd 3f a4 a3 ce d7 b4 3f 14 5e 92 8e 0a 77 ff 00 cf af 5d 4e 47 7a 7c f3 71 ea 08 d9 33 52 9e 5c 22 a2 f4 22 c3 44 48 83 0b b1 41 f6 01 c7 1a b9 a1 eb 06 c7 8f 5f 4c db 46 03 95 7c 44 f5 89 91 cd 4c e0 a7 a9 62 8f 22 d9 ef d3 52 a3 c6 9f 6b fb 04 98 f1 47 e9 0f a3 66 9e 32 f7 ff 00 d1 b5 1e 3f 22 fe cb Data Ascii: GE+-mbq)*8Dh9f6j?[4f8.z?M';^4Aaj,+qGX9Css'rd???^w]NGz\|q3R\""DHA_LF\|DLb"RkGf2?"
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 31 25 04 e8 15 40 ad 54 36 6b cd 57 3e 9c 5e 96 d5 6b 05 e2 9a ab e6 9a aa 8a aa a2 85 54 55 55 14 2a a2 e0 aa 03 b3 35 47 48 36 be a8 71 aa a0 c2 2a 81 8e a8 ff c4 00 2f 10 00 00 05 04 01 04 02 01 04 02 03 01 01 00 00 00 01 02 03 04 05 00 06 07 11 12 08 10 13 21 14 31 22 15 16 20 41 23 32 17 18 24 26 27 ff da 00 08 01 01 00 01 05 02 36 b9 00 01 ab 75 a2 88 28 91 04 84 1d 14 6b ea b9 0d 1c 0f 42 63 96 b9 fb de a8 de eb 85 6b 46 00 0a 1d f6 1f 55 cc 2b 61 42 6a 28 6a bf 3e 41 bd d0 08 52 80 53 18 78 80 10 a3 ad 0d 1c bc 80 4d c6 93 13 8d 7f ad 01 7d eb 40 60 f4 20 5a f4 4a 54 80 62 17 95 0f 22 d7 23 00 28 73 1d 2e 46 d1 47 54 53 08 d6 e8 d4 02 1b 31 68 40 74 1f ed c4 2b 95 73 29 68 ba 11 fc 28 40 29 50 31 8a 51 54 6b 91 eb 47 1a 20 0f 20 00 a1 4f 46 00 10 Data Ascii: 1%@T6kW>^kTUU5GH6q/!1" A#2$&'6u(kBckFU+aBj(j>ARSxM}@` ZJTb"#(s.FGTS1h@t+s)h(@)P1QTkG OF
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 3a 5d 2a 27 b3 9b 1b f5 16 85 cf 3b 90 39 9a ff 00 e9 df 2a d8 98 ff 00 1b a3 e2 59 ce 22 63 f0 31 a1 6b ee b7 fc 83 55 ba fb 0f 75 d6 24 6c 9c 85 bd 86 6d 1b 80 2f f9 c8 0b 92 3a ee c3 04 76 9e 31 c8 56 a9 5a f5 07 21 66 5c 47 9c c2 6c 15 8f c5 59 aa df 93 71 96 a2 ec e9 c5 8d 9c ad e9 25 25 db c7 4c 20 bf 4e b1 4e d1 b3 23 6d 8b 8d 75 ec a8 97 8d 3a 68 6f 6b cc 18 70 8d a5 30 d3 22 5e 96 bd d0 ef 22 0d 97 75 11 c6 38 c1 57 cd d2 fd 16 c8 b3 6c 51 af ae c3 db 74 51 ad 76 1d d1 40 42 84 bb ad 76 00 0a dd 5c 16 ea 13 8f 03 d8 9c a3 be 26 af 18 9a 8b 43 aa 0d 0d 68 c0 05 a0 f4 60 13 00 89 eb d8 80 17 41 ba 2f e4 3a 0a fb ec 03 b1 e5 45 38 56 f7 40 21 42 05 a3 fa af 62 3e c2 83 7b f7 45 29 8a 51 00 ae 41 b7 2f 1b 35 14 e7 62 8c 98 c8 b7 f9 09 cc b6 39 4c f8 Data Ascii: :]';9Y"c1kUu$lm/:v1VZ!f\GlYq%%L NN#mu:hokp0"^"u8WlQtQv@Bv\&Ch`A/:E8V@!Bb>{E)QA/5b9L
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: c9 4e ae 95 55 b9 dd 21 31 33 6d c1 2b 2c fe e3 b9 3e 58 2f f8 8a 82 26 a3 35 20 91 33 02 54 40 25 28 a8 96 95 31 96 17 1a 07 4f 39 35 78 2b 15 42 ae f8 01 bb 84 05 66 cd 64 25 1a 02 5f 0d f1 91 97 73 0e fd e5 df 11 78 62 f8 c7 80 fe 3f fa fa ad d0 6e b7 ef dd 72 ae 43 b3 1b 42 02 23 40 3a 0c cf 91 a3 98 3b 64 ca 4a e0 93 b8 c6 32 cf 8b 05 03 99 c7 9d 0a 47 0a 39 74 1c ff 00 30 74 6d 7c 82 2a 5d f0 23 f6 ae 53 13 b8 15 96 2e d1 39 13 4d 43 82 fe 2a 49 57 48 91 13 aa dd 42 2c 69 32 db 8f dd 32 88 19 78 96 4c e2 e6 62 e6 53 ad f6 8a 0f 3b ea f5 46 ff 00 6d 05 00 55 f7 79 34 b2 a0 17 89 77 2a 83 af 81 8b e2 1c 3c 55 53 94 e3 b4 b4 73 2a 87 11 59 33 18 a7 20 85 28 05 a0 2a a7 39 0d e9 72 b9 3a a9 a0 ec ca 91 a1 3e 2b 53 0b 43 39 41 2d 26 55 bc 65 33 b0 a7 92 Data Ascii: NU!13m+,>X/&5 3T@%(1O95x+Bfd%_sxb?nrCB#@:;dJ2G9t0tm\|]#S.9MCIWHB,i22xLbS;FmUy4w<USsY3 (*9r:>+SC9A-&Ue3
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: f2 0d 09 eb cb b1 15 40 6a f8 8a 19 58 e9 39 25 d9 ae 63 1c ea c7 49 b5 45 18 44 07 83 d9 3f 9a b9 8e 26 3a eb a4 88 ab 30 4d 1e 49 c1 e8 ee 57 3d 72 1a e4 21 46 50 e7 a0 70 70 a1 70 03 44 3f 01 22 94 8b 82 d7 ca 04 e8 16 31 0a 43 3d 7c e3 1f 5a c9 5a f6 d7 97 90 79 7d 82 9e b9 1a 80 de f9 e8 79 0f 2e 61 40 3c 82 75 50 f8 b7 2b c2 8c e4 5c 62 d2 0b 29 6a 35 72 69 c4 dd 37 41 db d8 26 20 e6 64 ca 81 94 31 eb 7d f7 df 5d 80 44 a2 55 0c 06 40 e7 af 92 00 b5 b5 60 dc f7 9b 8b 0f 1a c1 59 29 0a be c1 50 01 e6 00 3e 43 05 7c 82 57 20 d7 21 1a e5 c4 40 c6 1a 5d da 6d 12 94 ba 23 66 a1 9f 31 6c b4 b3 bb c6 2e 29 39 3b c2 41 f8 28 b2 aa 8f f1 dd 6e b7 5b ed ba 1e d6 26 36 97 bd 12 80 c4 36 7c 29 90 3a 69 17 e4 00 57 c8 f7 f2 7d 03 9a 33 81 2d 02 a5 d7 ff c4 00 34 Data Ascii: @jX9%cIED?&:0MIW=r!FPpppD?"1C=\|ZZy}y.a@<uP+\b)j5ri7A& d1}]DU@`Y)P>C\|W !@]m#f1l.)9;A(n[&66\|):iW}3-4
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: e3 b7 56 df bf 7f e4 7e 7c 01 ff 00 2f d6 2c 76 ec 3f 01 c0 16 ff 00 53 df 7f 1f cd ef c7 d6 e3 67 ed 6d c0 1d be db f0 40 dc b6 23 25 b2 f8 8d fb 5b 6b b1 1e 7e 3d f8 ea 65 b7 74 20 f7 04 02 2f b7 95 b7 17 07 c0 f1 f9 3c 1e df 2f bf e3 f2 fe bc 5b c0 71 ee 83 f3 fe 76 3c 5b 1f bb 23 db e4 38 3b 90 3f e6 36 fb 0f e1 c7 70 a7 7b 13 b7 e1 71 ef 7f 5e 36 ee 6d f5 af db 3f 8f fc 3f eb dc 10 be 16 c5 4e de 16 fb 36 b0 e3 2e 51 fb 07 0d 85 fb 15 ef df 21 b9 25 6f 8a 0c ad 7e 93 b7 71 b5 c6 6b 25 ad 7b 6f 7f 1f 26 17 df 1b 00 bd ec 38 dc 6f 8f ff 00 f4 7f a1 fc 38 dc 1f e7 b9 fe 5c 79 70 38 ef 7f cf cf 8f 0d be 1f 77 1e 1b f8 77 f9 71 63 bf f0 fc 8e 3f 3e 5b f0 3f 3f 9e fc 6e 6d c5 fe 5f 9f e7 c7 97 c3 e6 76 e2 f6 fc ed c6 c0 31 bf d6 fb ff 00 64 f9 7f 51 c5 8a Data Ascii: V~\|/,v?Sgm@#%[k~=et /</[qv<[#8;?6p{q^6m??N6.Q!%o~qk%{o&8o8\yp8wwqc?>[??nm_v1dQ
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 35 c8 d7 f4 ac 7e 92 47 a7 88 b4 e9 63 6a 3f ed 2e a7 43 a9 d5 7a f4 8b a9 65 5f ea ed a7 41 1d 30 87 d4 39 61 e6 93 23 23 a9 8f 47 d4 6a b5 bc e6 d2 93 49 8d e0 48 75 39 69 6b c6 97 af cf ad af ad 9d 47 5b af ad 9f a5 d1 60 35 15 95 06 9a b6 08 aa 94 b5 38 f5 2e 0d 6c 35 f0 d3 d3 d5 47 e8 f4 3a 85 3c 94 66 69 9a 3f 46 b5 aa ad 6a 8c d1 54 2d 54 02 9e 49 e5 ad 9e 0a 87 96 1a 9c 17 93 3c 1c a9 22 22 5a b9 46 a9 34 be b7 aa e9 da ab 2c e9 51 51 ea c7 4f f4 e6 6f 4c 9a 0a 15 92 b5 92 96 1a c4 95 74 fa 98 e0 44 8c cd 4d 4d 5a 23 be 54 ec b0 4b ac ac 94 54 93 e8 be a3 0a d0 c9 90 87 48 f4 9e 8f 5f 8f d6 9f d7 65 57 a9 92 2a 55 d3 e6 a9 86 38 23 95 dd f5 0a 88 9d b1 a7 87 54 9e 8f 59 9a 91 75 8a 3f 4a e9 6a e2 86 91 3d 9c de 96 6b 74 15 f5 5a 9d 1b 34 e4 41 5d Data Ascii: 5~Gcj?.Cze_A09a##GjIHu9ikG[`58.l5G:<fi?FjT-TI<""ZF4,QQOoLtDMMZ#TKTH_eW*U8#TYu?Jj=ktZ4A]
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: 2a 4a a9 26 5c 73 29 59 4a db 74 04 86 46 92 0a dd 8f b2 c4 b9 54 62 ae 9b 74 f4 98 fe af fb 1f 8a a1 56 76 8b 4c f4 96 40 c4 e1 cc 35 3e 93 54 4a 00 ba e7 6c 4c 6a 06 3e d1 88 65 f7 2f c4 e2 08 69 e6 f5 96 80 b4 b2 28 60 a4 c1 29 33 8f 67 ca 2c 64 68 b1 72 1d 84 78 2d c3 bb fa b6 b0 b4 b0 46 b2 a7 a2 be 9b 34 38 a2 a3 31 fe c5 fa 46 24 dc 6f 8e 25 54 31 bd da 38 c2 f2 fb f0 1e a2 a1 c2 fa db c5 22 a0 53 8a 98 a2 6e 60 36 c1 8d db 26 b5 d5 93 60 54 15 c3 d0 56 8f eb 6b 29 7b 15 eb 40 92 b3 9e b6 18 ed 8d c1 f2 e9 b9 20 71 e9 95 33 65 1a cd e9 36 bb ce ea 7e bc 2b f5 09 7d e1 b9 5b ae 76 21 b2 f0 ee dc 54 6a 74 9e 8f 6b 55 3a 35 13 e1 55 a9 52 e9 75 f3 e9 d0 13 0c 53 98 67 ad a7 84 c1 19 44 92 27 62 f3 45 ec e4 42 48 e8 66 fd 2b a4 54 49 a6 6a f4 15 82 68 Data Ascii: *J&\s)YJtFTbtVvL@5>TJlLj>e/i(`)3g,dhrx-F481F$o%T18"Sn`6&`TVk){@ q3e6~+}[v!TjtkU:5URuSgD'bEBHf+TIjh
2024-04-26 18:33:00 UTC	1369	IN	Data Raw: d2 14 32 14 16 0e db 6f e9 24 ba 2e a7 41 a8 c2 74 ad 46 9c d5 69 f5 54 f5 f0 c7 37 aa b3 72 dd a0 95 a3 12 22 3a 3b 21 65 70 ac ad 6d c5 d0 07 90 1c 9e f6 25 8f 71 f0 6f 26 27 3c 48 0d 7d c5 c9 d5 46 23 6f 47 7d 2a 27 33 b3 5e 5a e7 c9 cf 6b 75 62 ff 00 f0 9e 29 a4 57 e5 ba 60 f2 46 d7 df da e7 1f 8a b6 c2 4b 83 9d ce 36 1b 95 3c 68 f4 31 eb da 44 f5 95 34 b4 91 c5 4d 4d a8 d0 cb 31 9f 90 8b 82 c2 93 19 58 86 ba e1 8e 6b be 63 b9 e3 d2 c8 d9 9b 21 e9 2e b2 a4 dc 1d ff 00 49 54 a8 20 75 58 b1 3e ed 80 d8 59 af b8 d6 65 73 98 fe d6 6b 52 14 26 f7 55 d2 74 5d be 17 1f bf 81 2d 2d 0c 34 22 4c 6f 1c 66 72 2d f5 48 e7 c9 51 ef 14 2e bf 53 27 7e 9f 0e 3d 09 00 df fc 2e a8 77 f3 3a fe ab 71 f6 1b 8f 8d af f4 76 e3 b6 ff 00 47 61 f9 b7 d1 fb bf 3e 3c 7e 7e 1e 5c Data Ascii: 2o$.AtFiT7r":;!epm%qo&'<H}F#oG}*'3^Zkub)W`FK6<h1D4MM1Xkc!.IT uX>YeskR&Ut]--4"Lofr-HQ.S'~=.w:qvGa><~~\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50167	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	902	OUT	GET /ajax/login-state HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/movie Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"d8-R6JFTYCzz9JLwYU4VIqVMGUySyY"
2024-04-26 18:33:01 UTC	910	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:33:01 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"d8-R6JFTYCzz9JLwYU4VIqVMGUySyY" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lgeEVKAoBv5e7PmWZ1GdNWthG3uzb1S7ZggKOAj4K%2FxhO244lMa0rO3DrrCkMnv6%2BfklIl5LYaXuI8g%2FEq5B4ulVvQcwICVfsPmtucYacaFEQc1oI6N%2FAutY4DMZj7U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a50c5f8df7-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50168	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	916	OUT	GET /ajax/verify?domain=1movieshd.cc HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/movie Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"f-NQVRlQfKHCoInEbhALgECMonhCE"
2024-04-26 18:33:01 UTC	909	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:33:01 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"f-NQVRlQfKHCoInEbhALgECMonhCE" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6hLSqv%2B5LEOuCATheoOEfXkcA4%2FqMZnbd2%2FwTw8q9T2NbHMNZLZ7CoyDj7X49WqG9HQj6idK7KzJ8hH38t74u%2B7SbYAGBbymLSvExSc6wAfeH1Tt8vzuuK2JYKzxVkM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a51985221e-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50153	52.218.29.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	646	OUT	GET /static/cryptocoin/usdc.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:01 UTC	432	IN	HTTP/1.1 200 OK x-amz-id-2: BCTAu+DfnmmakAM9rd0LQUxY2CF2a9GzxXDVCa8//t0HavTj1hmzuINndP/Ymz22fi5FzPf7X2w= x-amz-request-id: HTEYJQ5WY0Y48CSJ Date: Fri, 26 Apr 2024 18:33:02 GMT Last-Modified: Wed, 16 Dec 2020 17:58:30 GMT ETag: "7254fa7385a48a72be30661bfb3a9615" x-amz-version-id: XJxdHXTtqa7cts73yW0xRo77pJk7bSKN Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 1438 Connection: close
2024-04-26 18:33:01 UTC	1438	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 32 37 37 35 43 41 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d 38 2e 30 35 39 20 31 38 2d 31 38 20 31 38 53 30 20 32 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#2775CA" fill-rule="nonzero" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50154	52.218.29.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	645	OUT	GET /static/cryptocoin/bnb.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:01 UTC	431	IN	HTTP/1.1 200 OK x-amz-id-2: MFiEeET80YoKMrpUCvGj6U7EbuNePejv+jI1HbFiJCIt31o0k6682f0O4S8GgwgNnPBsoEFxWL0= x-amz-request-id: HTEZZHCXHS8DPSWP Date: Fri, 26 Apr 2024 18:33:02 GMT Last-Modified: Wed, 16 Dec 2020 17:58:30 GMT ETag: "784f2aadcc5b3da45da5f62d282f95b0" x-amz-version-id: mayjX_Z706_6Lt5QlMCZkuC.Httquj1_ Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 615 Connection: close
2024-04-26 18:33:01 UTC	615	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 33 42 41 32 46 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d 38 2e 30 35 39 20 31 38 2d 31 38 20 31 38 53 30 20 32 37 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 30 20 31 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#F3BA2F" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50155	52.218.29.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	645	OUT	GET /static/cryptocoin/xrp.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:01 UTC	431	IN	HTTP/1.1 200 OK x-amz-id-2: 9vQyU2ICKKUFc1ZLZpu6DZ58t4ERenuuX65aUnRsKGXNBvuUteXzBkLesEE+i3ZBcgz8tkvZhy0= x-amz-request-id: HTEHB6KAC4RY1AFN Date: Fri, 26 Apr 2024 18:33:02 GMT Last-Modified: Wed, 16 Dec 2020 17:58:30 GMT ETag: "61a7c4963a9d50becbe6039a24fba386" x-amz-version-id: GsBqXt2pKi2.ig3mzQqw1Wsr4PM6ucge Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 547 Connection: close
2024-04-26 18:33:01 UTC	547	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 32 37 32 44 33 33 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d 38 2e 30 35 39 20 31 38 2d 31 38 20 31 38 53 30 20 32 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#272D33" fill-rule="nonzero" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50165	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	929	OUT	GET /xxrz/250x400/793/5e/87/5e870a75dad1edbca0a3c113ea470ad3/5e870a75dad1edbca0a3c113ea470ad3.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:01 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/jpeg Content-Length: 52963 Connection: close Last-Modified: Fri, 26 Apr 2024 17:03:06 GMT Vary: Accept-Encoding ETag: W/"662bde4a-834e" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1776 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sM2h3NXYQGeoBRemmfzF86ZhEAJGX5fePmu5K6IBT%2Bku3UklJc2qtvpJBzWaFgiOib4JcJSctnMuVxebdfDsCK8%2FBEA4dsoH4imkPwAZ%2B%2FEFdDcDBllaT%2B2JeuuI8AlXHPNN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a54c63a540-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:01 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 72 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCr"
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 39 28 8d 0a 89 c0 dd 95 8a f9 7e f9 8d f2 b4 ae 4f 3a 23 72 0e 61 28 88 94 d8 36 87 97 2e 8f dd 56 7a 45 60 74 5a b8 6f 91 95 c8 b0 e9 46 ef 07 a8 49 76 b3 ad 0d 48 24 a6 f0 ac 7d 8b 0e 55 04 14 b4 08 24 1a b4 0c 24 37 2d 38 b8 46 28 da ae e4 df a9 51 4a 0f cf b7 6a c7 95 93 67 22 10 98 8c db c4 8e 31 ab 25 5c 3b f2 5e 89 95 20 75 c5 9b ce 91 a9 a3 a6 ae b2 fb 16 b9 98 94 c5 e9 ce 76 be 87 2f 29 1e ee 3c fc 67 31 ed 99 d2 7c 83 3c 94 8d 91 e8 b8 46 33 2b b0 a9 a9 f2 32 fa 8e 36 ac b7 5f 06 bd ac 6e ea 42 ad 71 d8 27 cc ea dd 76 ab 57 ce cd 47 ec 7a f5 e4 d8 a2 2e e1 b2 bb 31 d5 78 81 7c 64 37 3f ce 41 e1 fa 4e 3a 6a e8 6d 66 b9 bd 3b 64 f4 0e e5 55 a6 df df ad be 41 aa da 91 83 b9 2b 64 ad f9 21 91 93 71 42 eb a6 5c 1d 30 a2 64 41 1d d0 44 73 d4 08 d7 40 Data Ascii: 9(~O:#ra(6.VzE`tZoFIvH$}U$$7-8F(QJjg"1%\;^ uv/)<g1\|<F3+26_nBq'vWGz.1x\|d7?AN:jmf;dUA+d!qB\0dADs@
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 04 51 cf f4 39 eb 06 9f 42 62 5a 6d ab b2 48 c7 61 46 d0 02 ed d9 c0 d2 88 c8 21 71 bb 08 62 bd f1 77 af da d5 a6 ea 2a 2d 18 5b ac 23 54 9c 86 ac 0f ed 3b 71 b9 89 0e b2 e7 f9 55 0c a1 94 ed b4 06 40 dc 8d 6e cf a4 bc 1a cb d5 ad 24 85 56 d1 c7 33 8b 85 77 56 8c 9a 04 84 73 04 54 8a 6e 76 cc 94 65 75 ee cc cd 06 1e f9 69 d5 e3 04 cf c3 ea ab f6 e5 11 c2 74 10 8b 48 cf dd 9f 57 78 22 0e 89 f6 2b fa b3 2c cf b4 22 80 bd 34 8f c4 62 f5 02 1e 96 04 ed d5 a4 ee ac 70 46 65 9b 1e 02 fe 51 8d 9a f3 ee b2 25 d3 8d 75 31 66 bd 47 4c cc 19 4d 7b 42 d0 27 dd 09 cf ca a3 a9 ba dd 16 1c fd a0 2e a1 71 dc 48 d9 33 4d bc 4b 09 11 cc 7b 13 17 a9 a6 55 55 e0 95 5a 1c ff 00 a2 b6 54 74 10 59 31 b8 ce 17 64 cf e7 48 8f 93 87 33 16 bf 97 34 79 60 ec f7 02 99 02 92 28 37 8f Data Ascii: Q9BbZmHaF!qbw*-[#T;qU@n$V3wVsTnveuitHWx"+,"4bpFeQ%u1fGLM{B'.qH3MK{UUZTtY1dH34y`(7
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 84 44 ec f9 1b 8f 5e 0f 56 fa f5 fa 78 4b bd 0a de 9c 25 d3 52 76 23 be cd cb 7f 02 64 3b 50 be d6 3a 37 39 6b 60 1f 59 7c 37 05 28 38 2b 0c e8 9b 6b b6 fb 8c b8 aa df 36 b2 3f 38 61 33 71 af 24 31 13 f1 1c 8d 8e f4 be ad f5 c1 48 0f bf 4c 4c fe 64 8d 85 13 21 55 dd 5a 3e 4d b7 d8 8a 6a cc ec 15 24 67 e9 da 67 24 f0 47 13 c1 9b c4 f7 43 39 48 ea cf 33 6c 78 a7 65 1c 4e 4f 0b 30 43 39 37 3c 2d 8e c5 ec a6 33 1f 76 96 5c 1e ab 6f 7e 8c db 5d bf 0c 3e 38 a7 04 60 40 ea 33 78 8f dc 34 a0 44 b7 b5 19 bb 28 23 69 63 92 a9 b1 43 5c f5 0d 73 54 31 13 4e 55 31 b1 63 6b 65 33 d6 bd c5 2e ae c9 d7 b1 11 d5 ce 45 94 e9 8e d3 4d 83 b4 c9 f0 d6 19 e0 e9 f9 5c 6c 54 08 c2 e5 47 15 83 80 25 b1 94 ca d4 86 1e aa ba 33 4b e9 04 4e cd c3 c7 6d 44 6d 2b 71 da b3 01 18 ae 3b Data Ascii: D^VxK%Rv#d;P:79k`Y\|7(8+k6?8a3q$1HLLd!UZ>Mj$gg$GC9H3lxeNO0C97<-3v\o~]>8`@3x4D(#icC\sT1NU1cke3.EM\lTG%3KNmDm+q;
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 2b cc c8 7c 2e db b9 e2 e7 39 60 cc d3 55 5f f2 84 3c 9a 06 71 5d 5b 04 87 5e bb f0 52 1f cd 89 13 29 22 3a d3 f4 b5 ac 81 c5 96 b4 f0 d7 86 bb da b2 2d 1d 68 b3 65 66 c5 8e 2c 2d e9 85 f9 63 9d 96 52 2f cd e0 66 e5 32 2e 2e 38 68 7f b4 8c 35 13 32 b0 fc ac b2 65 55 b7 35 99 1e 9d 38 a4 87 21 52 68 4a ac f5 2c 33 84 52 46 4b a9 e4 73 0b f5 9e 9d a3 7d 9e fe 53 3e 8b 27 4c 6c e2 b0 13 70 c7 e5 ad f3 2c 35 2e cc 36 b2 03 36 4f 3a 3a 27 f5 e9 d7 dd 1e 2b 27 1f ce 78 c8 6e 7c 51 8f 11 c3 c7 aa ac 2b e9 8b c9 b7 db 2a 4d b9 f2 8d fd 86 16 fb d1 9f 31 57 b9 0d 69 1d 94 37 21 69 6c 4c 2f 99 ea 19 39 65 1d fc 17 f9 19 6d 43 7a 16 e9 cc 6c ef 0c 35 ab bd db 79 7b ed 8f ad 89 67 fe a1 9c 1f c6 fe bd 33 ff 00 af a5 7c 3c 64 d9 83 24 cd e2 ce d9 b1 f1 71 0e 2a c7 c6 Data Ascii: +\|.9`U_<q][^R)":-hef,-cR/f2..8h52eU58!RhJ,3RFKs}S>'Llp,5.66O::'+'xn\|Q+M1Wi7!ilL/9emCzl5y{g3\|<d$q
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 99 dd 97 37 4d 21 b2 6b 32 b2 92 63 97 d6 20 76 76 72 77 63 52 f9 26 66 4e cc 99 1b 33 2f d7 e8 19 93 fd 1f 83 fd d8 46 cd ed c1 1f db b3 7f cb 1b 36 df c3 3f fd 6b ff c4 00 48 11 00 02 01 02 04 02 07 03 07 0a 04 04 07 00 00 00 01 02 03 04 11 00 12 21 31 05 41 13 22 32 51 61 71 81 06 14 91 23 42 52 a1 b1 c1 f0 10 15 24 33 62 72 82 92 d1 e1 a2 b2 c2 f1 20 25 43 53 30 34 44 63 73 74 d2 ff da 00 08 01 03 01 01 3f 01 ff 00 c3 b8 3b 62 e3 99 03 fe 19 26 48 ed 7d 49 da df 8f 1c 4b 5a ca 34 03 f1 6c 43 51 23 ca 0b be 9c ef a0 b6 9c f0 1d 58 d8 32 9f 00 ca 4f c0 1b 9f c8 f3 e5 9b 2e 60 34 be a4 7d e4 61 1e f7 b1 56 e5 a1 1b fa 63 7d ce 16 cd b1 07 6d 88 3b eb c8 f7 6b e5 86 d8 dc db 9d f6 f8 93 a5 b1 9a 2f a6 bf ce b8 c8 25 d6 fa 02 2c 77 f3 c2 76 6d dd f9 4d 7c Data Ascii: 7M!k2c vvrwcR&fN3/F6?kH!1A"2Qaq#BR$3br %CS04Dcst?;b&H}IKZ4lCQ#X2O.`4}aVc}m;k/%,wvmM\|
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: fa 63 89 d6 98 a3 e8 e2 ed c9 75 bf 76 da db d7 bf 06 9b 34 f9 9d b3 1e 7a 6f f5 e3 83 51 0a 1a 28 e3 b7 5d fe 55 ef bd dc 68 bf c2 b6 fc 97 be 27 88 4d 14 91 9f 9c a4 79 78 fa 1c 2f 52 e8 7b 48 48 61 dd 6d 3e ec 48 f2 22 75 37 ff 00 6c 48 ef 24 cb 1c 9c 8d fc 8e 98 8c 90 2c 79 62 74 be 97 db ef b6 2b 2a e1 a6 20 c8 6d a7 c4 e9 8a 2a c8 a7 02 48 f5 f0 fe ff 00 db 10 cb 99 34 c4 a4 db a8 75 ff 00 6c 51 12 b5 12 ae 6b 66 37 61 e2 48 c7 13 78 8e 44 05 4c 97 d0 9f 1b 7d 98 e1 54 3e f5 56 84 af c9 a5 9a 4f e1 db e3 f9 2e 06 16 a8 86 1a fe 34 c2 b0 65 0c 0d ee 31 c5 69 99 2a 56 78 fb 13 6b 25 b6 ce 37 3e b8 19 b2 e2 6b 47 2e 76 c0 a9 8c ae 60 47 ae 27 af 58 d4 96 71 6f 3c 54 a4 9c 76 a4 f4 27 2c 71 5f 52 34 27 6e 58 8d 2b 38 2c a0 c8 81 a9 4d bb 26 e4 5e c0 ee Data Ascii: cuv4zoQ(]Uh'Myx/R{HHam>H"u7lH$,ybt+* mH4ulQkf7aHxDL}T>VO.4e1iVxk%7>kG.v`G'Xqo<Tv',q_R4'nX+8,M&^
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 1e ad 1e 3d a6 a6 eb 53 4f b8 fd 5f f3 8c c3 e0 41 f8 e3 82 d2 74 95 2a 48 ba c6 33 b7 98 d1 47 99 27 4f 2c 71 aa b9 2a ea a2 e1 b4 bd 63 9f 29 b7 39 2d ad fc 17 ef c7 0e a3 4e 19 48 94 f1 d9 a5 61 79 64 fa 4e 40 fb 36 03 96 3d a9 d6 9a 99 b6 cb 33 0f e6 43 fd 31 c0 a7 48 ea 17 2e 9a 29 63 f4 9b 3a fe 3d 71 9b 53 e9 8e 33 27 45 c3 ce b6 2d 2a 28 ef d2 e7 12 c9 9a 46 3c cb 1f ac e2 9c 5a 08 14 fc d8 63 5f 82 81 f5 e2 79 0c 50 c8 e2 da 21 3a ec 7f 17 c2 49 25 25 4a 71 28 93 2d 3c 93 c9 14 81 74 50 d7 eb a5 b9 2b 03 99 3d 46 38 8a 89 02 54 47 d6 49 14 11 6f 21 97 fa 7a 63 86 21 f7 f8 ce c0 66 26 fd d9 75 c5 0e 56 a9 e9 57 e7 c7 70 7c 09 03 fb e2 a8 fc a2 0d ba a7 ee c7 11 91 6a 78 7b 35 83 3a ca b0 3d fe 63 06 e5 cf 35 ac 6f cb c7 11 b8 e1 3c 35 a6 da 69 b4 Data Ascii: =SO_AtH3G'O,qc)9-NHaydN@6=3C1H.)c:=qS3'E-*(F<Zc_yP!:I%%Jq(-<tP+=F8TGIo!zc!f&uVWp\|jx{5:=c5o<5i
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 6b ea a4 0f 8e 3f 39 b2 aa 97 8f b5 b7 46 74 e5 7e cd fb f9 e0 70 2c d7 6a 86 32 13 da 55 b9 1f cc e4 9c 25 2c 50 c3 d1 8e 8d 15 35 0b da b6 dc 80 3f 1c 49 5b 0c 57 f9 c7 c7 ee 45 b9 bf ef b4 78 a8 e2 27 52 91 db f7 ac 3f c2 bf ea 66 18 96 ae 79 88 ce e4 81 d9 5f 9a bf ba a2 c0 5e da db 7c 53 71 1a ba 63 68 58 80 c4 5d 4a 86 52 74 eb 58 83 af 8f 8e 22 af a8 53 17 bc d4 d1 bc 8c e9 9a 1b 05 78 d4 9b 31 bf 78 f0 18 96 b5 26 82 38 16 6b c6 99 af 91 be 99 d7 51 df 97 96 b8 99 a9 32 45 2b 9c a1 9b 2a b9 06 c0 9b 1d 6d b6 d6 1e 38 5c 92 2e 65 60 ca 79 db 71 cc 61 b8 45 2b 36 6e 8c a9 3a 90 8c 40 be 98 5e 1f 91 7a af 75 d0 08 e5 57 96 31 e1 90 c9 94 fa 8c 41 46 90 b6 60 91 ab fd 24 8f 28 b6 97 b0 b9 b6 2a 29 63 a8 49 01 5d 58 6a dc f7 0c 0d b6 3a eb ad f0 78 54 Data Ascii: k?9Ft~p,j2U%,P5?I[WEx'R?fy_^\|SqchX]JRtX"Sx1x&8kQ2E+m8\.e`yqaE+6n:@^zuW1AF`$()cI]Xj:xT
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 5e 56 b0 12 07 bd c9 cd b4 9c c2 d3 9a 72 00 9d e8 02 2f cf 0e 96 d2 9b cd c1 69 6f d5 d2 b2 31 7d dd 97 4f 4e 85 53 1a 64 fe 66 fa 8e 83 54 ce ce 19 e6 80 7b f8 c2 22 0a 63 a5 aa 38 a2 cc fa 05 e6 24 76 a7 34 b5 53 6d b7 4c 75 7d 51 00 62 b4 aa ba ca ae c9 bb 23 b3 7f 41 04 2a 6f d5 bd af 1b 95 c6 f0 71 83 de 10 63 09 92 ae 68 29 f1 88 54 4d dc fa 5e c0 db c6 ff 00 4f fa 9b 13 7a a9 d5 9c 95 06 9b cf 25 a4 d5 14 69 1f a9 db 2d e6 6e e8 b2 72 4e a6 1c 08 56 4c c1 b9 68 b5 25 86 9b b1 a7 87 16 ee 57 03 39 ad c4 2b 19 ab 01 11 6b 82 12 31 bc 66 88 94 29 6d 4a a8 c2 02 a6 1d 0c f1 ca cd d3 76 fe 0b 4d 70 7d 5b 23 06 5d db 77 e8 a9 b6 d9 8d d9 ab 01 51 8a 8c 9d fb d5 7a 45 bb 40 6e bf d1 30 90 43 bb 0f 22 81 82 13 5c 66 7e e0 6e 77 a8 08 18 4e 74 f0 55 6a d9 Data Ascii: ^Vr/io1}ONSdfT{"c8$v4SmLu}Qb#A*oqch)TM^Oz%i-nrNVLh%W9+k1f)mJvMp}[#]wQzE@n0C"\f~nwNtUj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50152	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:00 UTC	603	OUT	GET /tag.min.js HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156372
2024-04-26 18:33:01 UTC	942	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:33:00 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 89125 Connection: close X-Trace-Id: e44e019dfc5f3d36863065e18d8d095f Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Accept-Ranges: bytes Last-Modified: Fri, 26 Apr 2024 13:40:44 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:33:01 UTC	15442	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 71 77 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 71 77 2e 71 3b 76 61 72 20 65 3d 71 77 2e 56 28 29 2c 74 3d 71 77 2e 53 79 5b 71 77 2e 44 79 5d 28 71 77 2e 76 29 5b 71 77 2e 76 65 5d 28 29 5b 71 77 2e 42 5d 28 71 77 2e 76 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 74 3d 65 5b 71 77 2e 48 5d 3b 74 72 79 7b 65 5b 71 77 2e 75 74 5d 3d 74 5b 71 77 2e 75 74 5d 7d 63 61 74 63 68 28 72 29 7b 76 61 72 20 6e 3d 5b 5d 5b 71 77 2e 56 70 5d 5b 71 77 2e 4e 65 5d 28 74 5b 71 77 2e 59 61 5d 28 71 77 2e 6f 77 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 77 2e 6e 65 3d 3d 3d 65 5b 71 77 2e 63 5d 7d 29 3b 65 5b 71 77 2e 75 74 5d 3d 6e 26 26 6e 5b 71 77 2e 59 79 5d 5b 71 77 2e 75 74 5d 7d 7d 71 77 2e 77 21 3d Data Ascii: (function(qw){!function(){qw.q;var e=qw.V(),t=qw.Sy[qw.Dy](qw.v)[qw.ve]()[qw.B](qw.v);function n(){var t=e[qw.H];try{e[qw.ut]=t[qw.ut]}catch(r){var n=[][qw.Vp][qw.Ne](t[qw.Ya](qw.ow),function(e){return qw.ne===e[qw.c]});e[qw.ut]=n&&n[qw.Yy][qw.ut]}}qw.w!=
2024-04-26 18:33:01 UTC	16384	IN	Data Raw: 77 2e 66 75 5d 7c 7c 65 5b 71 77 2e 61 6f 5d 26 26 65 5b 71 77 2e 70 72 5d 5b 71 77 2e 64 77 5d 26 26 21 61 5b 71 77 2e 64 77 5d 29 26 26 61 5b 71 77 2e 46 65 5d 28 6f 5b 71 77 2e 43 65 5d 29 2c 55 65 28 29 26 26 61 5b 71 77 2e 46 65 5d 28 55 65 28 29 29 3b 74 3b 29 7b 69 66 28 65 74 28 74 2c 69 29 29 72 65 74 75 72 6e 21 71 77 2e 6b 3b 69 66 28 65 74 28 74 2c 61 29 29 72 65 74 75 72 6e 21 71 77 2e 6a 3b 74 3d 74 5b 71 77 2e 67 75 5d 7d 72 65 74 75 72 6e 21 71 77 2e 6b 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3f 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 65 5b 71 77 2e 64 75 5d 3d 3d 3d 74 3f 65 3a 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3f 69 74 28 65 Data Ascii: w.fu]\|\|e[qw.ao]&&e[qw.pr][qw.dw]&&!a[qw.dw])&&a[qw.Fe](o[qw.Ce]),Ue()&&a[qw.Fe](Ue());t;){if(et(t,i))return!qw.k;if(et(t,a))return!qw.j;t=t[qw.gu]}return!qw.k}function it(e,t){return e?e instanceof HTMLElement&&e[qw.du]===t?e:e instanceof HTMLElement?it(e
2024-04-26 18:33:01 UTC	16384	IN	Data Raw: 2e 76 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 5b 71 77 2e 5a 67 5d 5b 71 77 2e 44 79 5d 28 71 77 2e 47 6a 29 5b 71 77 2e 41 74 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 71 77 2e 50 6b 5d 28 29 5b 71 77 2e 44 79 5d 28 71 77 2e 6a 75 29 7d 29 5b 71 77 2e 4b 72 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 71 77 2e 6a 5d 3d 3d 65 7d 29 5b 71 77 2e 6a 5d 3b 69 66 28 74 29 72 65 74 75 72 6e 20 74 5b 71 77 2e 6b 5d 7d 2c 65 5b 71 77 2e 67 72 5d 5b 71 77 2e 62 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 71 77 2e 6a 3d 3d 3d 74 26 26 28 74 3d 21 71 77 2e 6b 29 2c 76 6f 69 64 20 71 77 2e 6a 3d 3d 3d 74 68 69 73 5b 71 77 2e 6c Data Ascii: .vp]=function(e){var t=document[qw.Zg][qw.Dy](qw.Gj)[qw.At](function(e){return e[qw.Pk]()[qw.Dy](qw.ju)})[qw.Kr](function(t){return t[qw.j]==e})[qw.j];if(t)return t[qw.k]},e[qw.gr][qw.bp]=function(e,t){return void qw.j===t&&(t=!qw.k),void qw.j===this[qw.l
2024-04-26 18:33:01 UTC	16384	IN	Data Raw: 2c 64 65 6c 65 74 65 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 63 5d 29 3a 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 5b 63 5d 3d 68 2b 71 77 2e 6b 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 63 5d 3d 68 2b 71 77 2e 6b 29 29 7d 74 68 69 73 5b 71 77 2e 71 64 5d 5b 71 77 2e 59 77 5d 3d 6e 65 77 20 44 61 74 65 28 29 5b 71 77 2e 4f 77 5d 28 29 2c 74 68 69 73 5b 71 77 2e 47 70 5d 28 65 29 2c 6f 5b 71 77 2e 47 5d 5b 71 77 2e 4c 68 5b 71 77 2e 51 77 5d 28 6e 29 5d 3d 21 71 77 2e 6a 7d 2c 65 5b 71 77 2e 67 72 5d 5b 71 77 2e 47 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 65 5b 71 77 2e 57 69 5d 2c 72 3d 65 5b 71 77 2e 7a 65 5d 2c 69 3d 65 5b 71 77 2e 45 61 5d 2c 61 3d 43 6e 5b 71 77 2e 41 74 5d 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ,delete localStorage[c]):(sessionStorage[c]=h+qw.k,localStorage[c]=h+qw.k))}this[qw.qd][qw.Yw]=new Date()[qw.Ow](),this[qw.Gp](e),o[qw.G][qw.Lh[qw.Qw](n)]=!qw.j},e[qw.gr][qw.Gp]=function(e){var t=this,n=e[qw.Wi],r=e[qw.ze],i=e[qw.Ea],a=Cn[qw.At](function(
2024-04-26 18:33:01 UTC	16384	IN	Data Raw: 29 7b 50 65 28 71 77 2e 6e 67 29 2c 6f 5b 71 77 2e 47 5d 5b 71 77 2e 53 5d 28 65 29 7d 29 3a 71 77 2e 6e 67 20 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 6e 61 76 69 67 61 74 6f 72 5b 71 77 2e 6e 67 5d 5b 71 77 2e 4e 6b 5d 26 26 28 50 65 28 71 77 2e 6e 67 29 2c 6f 5b 71 77 2e 47 5d 5b 71 77 2e 53 5d 28 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 71 77 2e 79 68 29 29 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 72 28 65 29 7b 76 61 72 20 74 3d 65 5b 71 77 2e 42 72 5d 2c 6e 3d 65 5b 71 77 2e 4e 72 5d 2c 72 3d 65 5b 71 77 2e 4d 72 5d 2c 6f 3d 65 5b 71 77 2e 48 65 5d 2c 69 3d 65 5b 71 77 2e 71 74 5d 2c 61 3d 65 5b 71 77 2e 77 74 5d 2c 63 3d 65 5b 71 77 2e 65 74 5d 2c 73 3d 65 5b 71 Data Ascii: ){Pe(qw.ng),o[qw.G][qw.S](e)}):qw.ng in navigator&&setInterval(function(){try{navigator[qw.ng][qw.Nk]&&(Pe(qw.ng),o[qw.G][qw.S]())}catch(e){}},qw.yh))}}}}function nr(e){var t=e[qw.Br],n=e[qw.Nr],r=e[qw.Mr],o=e[qw.He],i=e[qw.qt],a=e[qw.wt],c=e[qw.et],s=e[q
2024-04-26 18:33:01 UTC	8147	IN	Data Raw: 66 27 2c 27 6f 78 61 65 71 4f 61 67 7a 66 27 5d 2c 5b 27 6d 66 27 2c 27 62 62 67 50 75 65 6d 6e 78 71 46 64 75 73 73 71 64 27 5d 2c 5b 27 51 66 27 2c 27 5f 5f 42 42 47 5f 42 44 52 32 27 5d 2c 5b 27 57 66 27 2c 27 4d 4d 4e 27 5d 2c 5b 27 45 66 27 2c 27 65 71 66 27 5d 2c 5b 27 52 66 27 2c 27 61 7a 45 77 75 7a 4f 78 75 6f 77 46 64 75 73 73 71 64 27 5d 2c 5b 27 54 66 27 2c 27 47 44 58 27 5d 2c 5b 27 59 66 27 2c 27 69 75 70 73 71 66 41 62 66 75 61 7a 65 27 5d 2c 5b 27 55 66 27 2c 27 66 6d 73 41 62 66 75 61 7a 65 27 5d 2c 5b 27 49 66 27 2c 27 70 71 7a 71 66 65 67 77 2e 6f 61 79 27 5d 2c 5b 27 4f 66 27 2c 27 61 62 66 75 61 7a 65 42 6d 64 65 71 52 6d 75 78 27 5d 2c 5b 27 50 66 27 2c 31 35 5d 2c 5b 27 41 66 27 2c 27 7a 61 20 69 75 7a 70 61 69 27 5d 2c 5b 27 53 66 Data Ascii: f','oxaeqOagzf'],['mf','bbgPuemnxqFdussqd'],['Qf','__BBG_BDR2'],['Wf','MMN'],['Ef','eqf'],['Rf','azEwuzOxuowFdussqd'],['Tf','GDX'],['Yf','iupsqfAbfuaze'],['Uf','fmsAbfuaze'],['If','pqzqfegw.oay'],['Of','abfuazeBmdeqRmux'],['Pf',15],['Af','za iuzpai'],['Sf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50170	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	825	OUT	GET /media/New%20navigation_Rebrand%203.0/dax.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:01 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/svg+xml Content-Length: 567 Connection: close Last-Modified: Mon, 20 Dec 2021 10:03:52 GMT ETag: "bbd13c60676e3e326a2c079b57c3e761" Cache-Control: public, max-age=36000 x-amz-version-id: v5SUeh3C7nn1Z._fIgSMj7crTZgiPRMb X-Cache: Hit from cloudfront Via: 1.1 50d46662b214cb2923f288d3ad4f9dec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Z7MFejrASnKd0gU26z999g4iYpa6aHOjYNNmwWfVCRMJiU4KsTy7mQ== Age: 20505 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:01 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8a6ebf0a662-MIA
2024-04-26 18:33:01 UTC	567	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 63 32 2e 38 33 37 20 30 20 35 2e 35 32 2e 36 35 36 20 37 2e 39 30 37 20 31 2e 38 32 35 43 33 31 2e 38 38 34 20 34 2e 37 35 33 20 33 36 20 31 30 2e 38 39 35 20 33 36 20 31 38 63 30 20 39 2e 39 34 32 2d 38 2e 30 35 38 20 31 38 2d 31 38 20 31 38 2d 39 2e 39 34 20 30 2d 31 38 2d 38 2e 30 35 37 2d 31 38 2d 31 38 43 30 20 38 2e 30 36 20 38 2e 30 36 20 30 20 31 38 20 30 7a 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50169	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	829	OUT	GET /media/New%20navigation_Rebrand%203.0/ftse100.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:01 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/svg+xml Content-Length: 567 Connection: close Last-Modified: Mon, 20 Dec 2021 10:04:14 GMT ETag: "a35c32ec06f2a3dd54b0f95c86c6c02f" Cache-Control: public, max-age=36000 x-amz-version-id: wRdhA84KSpeEmWuKCcAcyZX_CnSFJzyq X-Cache: Hit from cloudfront Via: 1.1 dcaec0b05596b42ef5dab9e145ac961e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 4iXn0RNtxcDtvz3Ok5lS1TgqnZznpdzFmHJuFJjTVLlPDpdPWnBtNg== Age: 20505 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:01 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8a6ee6874c2-MIA
2024-04-26 18:33:01 UTC	567	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 63 32 2e 38 33 37 20 30 20 35 2e 35 32 2e 36 35 36 20 37 2e 39 30 37 20 31 2e 38 32 35 43 33 31 2e 38 38 34 20 34 2e 37 35 33 20 33 36 20 31 30 2e 38 39 35 20 33 36 20 31 38 63 30 20 39 2e 39 34 32 2d 38 2e 30 35 38 20 31 38 2d 31 38 20 31 38 2d 39 2e 39 34 20 30 2d 31 38 2d 38 2e 30 35 37 2d 31 38 2d 31 38 43 30 20 38 2e 30 36 20 38 2e 30 36 20 30 20 31 38 20 30 7a 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50172	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	829	OUT	GET /media/New%20navigation_Rebrand%203.0/msci-em.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:01 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/svg+xml Content-Length: 567 Connection: close Last-Modified: Mon, 20 Dec 2021 10:04:44 GMT ETag: "36d4cc2b83b63ac0e2d16ee4dfab5be4" Cache-Control: public, max-age=36000 x-amz-version-id: 1Ddl5eaK..P.X_ACvLZdQEgbkXX0RtJy X-Cache: Hit from cloudfront Via: 1.1 5dd2304368effbad5413134075a82ff0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: M-XeItdcB1aceu2KfXLQdVpkegG8Vlp1oK4yEQsKSqoVDnH-xkrgWg== Age: 20504 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:01 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8a6ed4b4c04-MIA
2024-04-26 18:33:01 UTC	567	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 63 32 2e 38 33 37 20 30 20 35 2e 35 32 2e 36 35 36 20 37 2e 39 30 37 20 31 2e 38 32 35 43 33 31 2e 38 38 34 20 34 2e 37 35 33 20 33 36 20 31 30 2e 38 39 35 20 33 36 20 31 38 63 30 20 39 2e 39 34 32 2d 38 2e 30 35 38 20 31 38 2d 31 38 20 31 38 2d 39 2e 39 34 20 30 2d 31 38 2d 38 2e 30 35 37 2d 31 38 2d 31 38 43 30 20 38 2e 30 36 20 38 2e 30 36 20 30 20 31 38 20 30 7a 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50171	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	859	OUT	GET /media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%20Infra_36x36.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:01 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/svg+xml Content-Length: 3095 Connection: close Last-Modified: Mon, 20 Jun 2022 12:10:07 GMT ETag: "7ab3b4bc1d71846008b13761be884585" Cache-Control: public, max-age=36000 x-amz-version-id: KgIfi4SRNEVK.on4Oua9_SwV3kpiB3lG X-Cache: Hit from cloudfront Via: 1.1 96ec34ce0a0b54341f66006912ddc5d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: SBHcdBZzM3SJB8yRIoM8VZg32Deut6tSo_eXb6UPE1iDDP9U0qkxUQ== Age: 20505 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:01 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8a6f9a2a671-MIA
2024-04-26 18:33:01 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 33 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 2e 33 33 37 2c 36 2e 33 35 2c 31 2e 35 36 2c 31 32 2e 38 34 2c 37 2e 31 38 2c 31 36 2e 30 38 35 63 30 2e 34 37 36 2c 30 2e 32 37 39 2c 30 2e 36 33 36 2c 30 2e 38 39 32 2c 30 2e 33 35 37 2c 31 2e 33 36 38 63 2d 30 2e 32 37 37 2c 30 2e 34 37 32 2d 30 2e 38 38 31 2c 30 2e 36 33 34 2d 31 2e 33 35 37 2c 30 2e 33 36 34 0a 09 09 43 33 2e 31 33 32 2c 32 39 2e 30 34 33 2d 30 2e 31 35 31 2c 32 31 2e 36 38 37 2c 31 2e 33 36 35 2c 31 34 2e 34 39 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 33 2e 30 30 34 2c 33 34 2e 32 34 39 63 2d 30 2e 35 32 38 2d 30 2e 31 36 33 2d 30 2e 38 32 33 2d 30 2e 37 32 33 2d 30 2e 36 36 2d 31 2e 32 35 73 30 2e 37 32 33 2d 30 2e 38 32 33 2c 31 2e 32 35 2d 30 2e 36 36 0a 09 09 63 36 2e 39 31 36 2c 32 Data Ascii: .337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364C3.132,29.043-0.151,21.687,1.365,14.49z"/><path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66c6.916,2
2024-04-26 18:33:01 UTC	1108	IN	Data Raw: 3c 67 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 35 22 20 64 3d 22 4d 39 2e 32 32 2c 32 31 68 30 2e 37 39 76 2d 36 2e 30 33 35 48 39 2e 32 32 56 32 31 7a 20 4d 31 31 2e 34 39 38 2c 32 31 68 30 2e 37 33 76 2d 32 2e 38 32 32 63 30 2e 31 37 2d 30 2e 34 39 33 2c 30 2e 35 37 39 2d 30 2e 38 34 31 2c 31 2e 31 37 34 2d 30 2e 38 34 31 0a 09 09 09 63 30 2e 36 35 34 2c 30 2c 31 2e 30 36 32 2c 30 2e 34 32 34 2c 31 2e 30 36 32 2c 31 2e 31 36 34 56 32 31 68 30 2e 37 32 33 76 2d 32 2e 36 31 63 30 2d 31 2e 30 36 32 2d 30 2e 36 35 35 2d 31 2e 37 32 35 2d 31 2e 36 31 35 2d 31 2e 37 32 35 63 2d 30 2e 35 33 36 2c 30 2d 31 2e 30 34 36 2c 30 2e 31 39 35 2d 31 2e 33 34 33 2c 30 2e 36 32 56 31 36 2e 37 35 68 2d 30 2e 37 33 31 0a 09 09 09 56 32 31 7a 20 4d 31 36 2e Data Ascii: <g><path class="st5" d="M9.22,21h0.79v-6.035H9.22V21z M11.498,21h0.73v-2.822c0.17-0.493,0.579-0.841,1.174-0.841c0.654,0,1.062,0.424,1.062,1.164V21h0.723v-2.61c0-1.062-0.655-1.725-1.615-1.725c-0.536,0-1.046,0.195-1.343,0.62V16.75h-0.731V21z M16.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50173	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	858	OUT	GET /media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%20DeFi_36x36.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:01 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/svg+xml Content-Length: 2885 Connection: close Last-Modified: Mon, 20 Jun 2022 12:10:07 GMT ETag: "8811878ee283d7a3beadc5b9af9eb36e" Cache-Control: public, max-age=36000 x-amz-version-id: dCpt0.cbpUpCz320sjVOeOcK0LSHnNRN X-Cache: Hit from cloudfront Via: 1.1 8f99d698624c0704470547731241e282.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: jKBe5DTaisbx_CJkQXaXI_4wWohf_9Blc5w4booHKpTw1UacLksC3g== Age: 20505 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:01 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8a71fc33352-MIA
2024-04-26 18:33:01 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 33 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 2e 33 33 37 2c 36 2e 33 35 2c 31 2e 35 36 2c 31 32 2e 38 34 2c 37 2e 31 38 2c 31 36 2e 30 38 35 63 30 2e 34 37 36 2c 30 2e 32 37 39 2c 30 2e 36 33 36 2c 30 2e 38 39 32 2c 30 2e 33 35 37 2c 31 2e 33 36 38 63 2d 30 2e 32 37 37 2c 30 2e 34 37 32 2d 30 2e 38 38 31 2c 30 2e 36 33 34 2d 31 2e 33 35 37 2c 30 2e 33 36 34 0a 09 09 43 33 2e 31 33 32 2c 32 39 2e 30 34 33 2d 30 2e 31 35 31 2c 32 31 2e 36 38 37 2c 31 2e 33 36 35 2c 31 34 2e 34 39 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 33 2e 30 30 34 2c 33 34 2e 32 34 39 63 2d 30 2e 35 32 38 2d 30 2e 31 36 33 2d 30 2e 38 32 33 2d 30 2e 37 32 33 2d 30 2e 36 36 2d 31 2e 32 35 73 30 2e 37 32 33 2d 30 2e 38 32 33 2c 31 2e 32 35 2d 30 2e 36 36 0a 09 09 63 36 2e 39 31 36 2c 32 Data Ascii: .337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364C3.132,29.043-0.151,21.687,1.365,14.49z"/><path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66c6.916,2
2024-04-26 18:33:01 UTC	898	IN	Data Raw: 3c 67 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 35 22 20 64 3d 22 4d 39 2e 39 35 2c 32 31 68 31 2e 37 33 35 63 31 2e 38 35 32 2c 30 2c 33 2e 32 31 33 2d 31 2e 32 39 32 2c 33 2e 32 31 33 2d 33 2e 30 31 37 63 30 2d 31 2e 37 32 36 2d 31 2e 33 36 2d 33 2e 30 31 38 2d 33 2e 32 31 33 2d 33 2e 30 31 38 48 39 2e 39 35 56 32 31 7a 20 4d 31 30 2e 37 34 31 2c 32 30 2e 32 36 0a 09 09 09 76 2d 34 2e 35 35 36 68 30 2e 39 34 34 63 31 2e 34 35 33 2c 30 2c 32 2e 34 31 33 2c 30 2e 39 37 2c 32 2e 34 31 33 2c 32 2e 32 37 39 63 30 2c 31 2e 33 30 38 2d 30 2e 39 36 2c 32 2e 32 37 37 2d 32 2e 34 31 34 2c 32 2e 32 37 37 48 31 30 2e 37 34 31 7a 20 4d 31 37 2e 38 33 38 2c 32 31 2e 30 38 35 0a 09 09 09 63 30 2e 38 38 34 2c 30 2c 31 2e 35 33 2d 30 2e 33 39 31 2c 31 2e Data Ascii: <g><path class="st5" d="M9.95,21h1.735c1.852,0,3.213-1.292,3.213-3.017c0-1.726-1.36-3.018-3.213-3.018H9.95V21z M10.741,20.26v-4.556h0.944c1.453,0,2.413,0.97,2.413,2.279c0,1.308-0.96,2.277-2.414,2.277H10.741z M17.838,21.085c0.884,0,1.53-0.391,1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50174	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	929	OUT	GET /xxrz/250x400/793/25/36/25369637a43bd670ec087ed2046e8737/25369637a43bd670ec087ed2046e8737.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:01 UTC	716	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/jpeg Content-Length: 75568 Connection: close Last-Modified: Fri, 26 Apr 2024 14:11:18 GMT Vary: Accept-Encoding ETag: W/"662bb606-e6c3" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5334 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mz5LdKBdgSnA6LHk3sAopRKxWAhFV0wRs750%2BTPw8gWX0oqGa3aYLuglMcPxFykbfJxvii17q5oxzWn83zj5DxRCYOA5Gu7mNf4ilgD4abhlC9xYG3sbfzzMSB7V83LkTN1f"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a73a53749f-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:01 UTC	653	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: a5 3a dd 8b e9 1c b9 c9 aa 91 8f d1 53 56 2f 34 e0 40 fd 11 8e fc 1f 3b 69 f7 7c db 6d a1 37 9d 36 eb 29 36 23 66 74 da ed c0 1b 62 85 b0 03 49 82 e5 92 7e 30 96 92 e3 d7 d6 3e 81 4b b3 55 0f 1c c0 2d a9 ca 65 0b 95 6e 45 77 16 d0 7c 3b df 5e 75 16 3b ac 23 af dd 3c 4f 84 2b 08 13 2f 72 3b c0 66 e6 a7 6b bb da bb 8a 8c a4 94 b2 fe 08 d2 db 07 86 74 d6 32 f5 cd b3 9f 71 d8 46 45 46 9d 36 da 5f 3c ef e8 99 31 70 57 a3 49 c1 e0 20 c8 59 48 25 1d 0e 37 71 82 91 86 67 32 61 13 ec a3 d8 84 04 f6 8a 7f 3a 84 97 aa 2e 68 7c 80 2a 88 2a 5d 45 16 2c c9 c7 9c 4c f2 37 2e 80 50 26 a2 38 c2 95 c7 9f 4d 60 bd cb cd b5 88 e0 ac 1b ec b8 41 04 08 15 2d 90 a2 7b 99 cb 85 c8 d3 a1 b4 e0 e0 4c 47 1b 90 10 58 25 46 68 48 2a 5d 42 a4 61 46 3c fd 16 c2 e4 fe 45 a2 4e 9f 22 5a Data Ascii: :SV/4@;i\|m76)6#ftbI~0>KU-enEw\|;^u;#<O+/r;fkt2qFEF6_<1pWI YH%7qg2a:.h\|*]E,L7.P&8M`A-{LGX%FhH]BaF<EN"Z
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: d7 cd aa 15 c9 b4 e5 aa 98 df 23 e3 64 91 fd 5c 54 dc a4 f9 4a eb 1b a4 f9 e1 99 6a 4a f7 8a 16 a1 4f 41 76 e3 93 80 1f 62 c7 e3 e3 8c ce bd 36 9a df 46 8d 0c ee 8c 9c a1 68 c7 35 f5 79 e3 6f 42 a5 2f aa 89 7b 0b 14 5d 68 81 5d bb 43 8f a5 0f 9b 7f a2 7b 3d 3d ea f9 d3 bf 5f 9e 86 24 5b a5 68 ce ca 96 9a 3e 3e 18 16 ab 4b 00 76 13 4b b2 7a 76 bc de 2f 4d c6 9b a1 e9 19 a5 7c 51 98 29 d2 3d 3d 3a 71 b6 c1 c4 43 94 da 84 3e e9 86 a8 0d a5 b7 cb 91 0a c2 c9 51 43 b5 13 aa 4c 0f 6a a7 4c 8f fb 8e 3a d2 91 89 e3 41 2c a0 9f ac 7d f1 50 b4 4a b5 86 66 ed 42 fa ee df 5d 30 dc 81 01 63 a8 5e e9 28 f9 82 13 a2 a5 ec 96 b9 08 04 23 53 a6 4c 67 0b 98 89 94 c8 5a 06 e8 9b 16 b7 45 1d a4 a8 d8 87 19 ed 21 5c 2c 0d 1f 39 4e 1c 74 72 48 3b 66 cf f9 67 81 2c 4d a8 9e 96 Data Ascii: #d\TJjJOAvb6Fh5yoB/{]h]C{==_$[h>>KvKzv/M\|Q)==:qC>QCLjL:A,}PJfB]0c^(#SLgZE!\,9NtrH;fg,M
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 31 5a 49 f5 d6 4d 0a 8d 0b 4e 45 03 bb 3d da 41 e3 fb 66 c0 70 a2 f1 37 89 02 43 54 aa ad d1 ad 54 35 b2 07 6f 5f d3 69 2b 33 2d bd e7 46 6e fd 44 68 db 58 ea 2a 0c 3b 9d 89 b3 fa 9b ba 39 a9 6b 5d 3c 7b 4e c3 d8 f2 73 be 8a 77 ac 89 e7 6c ab fd b9 db 9d b9 db 82 19 db 9c 60 07 c0 03 3a 7c d5 f2 17 c9 13 69 9b 38 1a 47 45 4a 4a 37 94 d2 72 b2 4c d8 68 04 2b cb cd 69 4f 78 39 34 7b 08 f5 e4 b5 a3 a9 14 69 b4 e4 2a ed e8 71 c6 b3 dd 8d 10 69 ad 91 6c a0 85 83 2f a5 70 48 9b 62 c4 af d1 68 f5 e6 ba fb 58 6b b8 57 17 fd 9f d4 cd 80 61 35 e7 48 75 41 77 61 db 7a 4d ae d9 5f a7 dd 5d 19 4e bb c1 ca fc c7 bf 3a c7 92 f3 dd fe 1c 67 19 c6 71 9c 60 06 71 9c 65 1b 72 5b b5 e4 3f e6 5b 63 0e 7e 64 b6 28 e0 f5 13 b0 0d 86 df d7 a3 61 b7 9d cc f8 7d cf 6d 3e 0e dd b4 Data Ascii: 1ZIMNE=Afp7CTT5o_i+3-FnDhX;9k]<{Nswl`:\|i8GEJJ7rLh+iOx94{iqil/pHbhXkWa5HuAwazM_]N:gq`qer[?[c~d(a}m>
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 4e ce 70 6a 58 f0 ea 31 f3 96 7a f4 b2 8d 25 a1 37 0a b7 16 e6 90 94 76 e8 22 56 27 bd 31 b0 b9 80 93 3c 9a 12 ac a4 b8 33 78 01 e2 6f 64 c7 48 a2 86 a0 a8 b2 bc 5c 26 75 7d 3b c7 2a d2 aa e2 87 4b b0 31 8e b4 d6 17 93 8b 88 25 b6 da fd d4 fb 53 0c b7 b4 3c 53 3d 8a 47 22 2c 07 6b 92 36 96 6b 0b 7b 20 f9 1f c5 27 39 35 13 2f 5b 81 6f 10 c9 c1 59 3f 7c 83 59 6d de cd d2 60 f0 c9 b6 ab d3 6b 36 7b 6b e8 fd 55 09 dc 65 d3 4d 47 29 a6 ba 5b 75 a9 a7 75 ad 6a e9 72 a9 46 49 d9 5c 4b 9e c5 06 b4 f3 8d 3b ad 21 a4 64 ef d5 3f 68 93 05 ec 11 60 56 60 f0 89 b1 51 37 d2 91 a4 91 57 59 4c c7 d7 2e 93 0f d6 32 57 d7 ad fd a3 59 44 a4 ea 42 66 1d a2 2f 66 5a db 2b e9 4d a8 a3 d9 66 a6 53 b7 e6 77 f8 52 8a 25 82 63 0e e2 ba dd a2 4e 0d 19 5a 54 a9 b6 99 b1 b7 55 fc 87 Data Ascii: NpjX1z%7v"V'1<3xodH\&u};*K1%S<S=G",k6k{ '95/[oY?\|Ym`k6{kUeMG)[uujrFI\K;!d?h`V`Q7WYL.2WYDBf/fZ+MfSwR%cNZTU
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 47 b2 7d c8 ee 49 d4 42 84 dd e8 1e a5 3c d3 c2 bb e1 03 ba 02 81 72 ba e8 e5 0d 71 23 c3 89 2e d5 05 66 95 bb 9d 7e 31 58 cd 53 23 b1 f6 62 f1 e1 39 78 9d 9d 38 98 e7 0f 2a 58 2e 5c 8a 09 f6 15 bb 73 f2 47 a0 a3 c6 ad 10 70 dd 03 9d 2e 1f 37 5d 96 bf b5 04 8a 4d 5d a4 b3 37 3d 38 a6 67 b4 44 3f 42 5b e1 cf 9e de 9a a3 21 a4 2e 76 92 6b fd 58 63 18 e6 ca fa 9f b1 2c ba 29 37 ba 59 cf 2f 52 64 a0 84 7d a8 39 8a ee c1 1e 72 01 73 02 b1 76 84 6b d3 4e 95 22 84 b4 cc 49 2e 68 7d a1 1b 3f 9b 06 a8 d5 86 22 d1 7e f9 09 07 0a 2a 84 59 0c 8f b2 4f 1c 16 61 20 d1 cb 28 f7 4a 2e ba c0 2a 48 d8 16 36 68 48 75 27 ef 97 f9 94 21 2a f2 db 4a 59 d2 4b 3c 2b f5 34 bb 70 88 d7 ea 2b da 86 de 54 16 b5 6b 33 04 9e 9f ea 8e cc 2b 49 61 3e f9 17 dc 8a 52 ce 7c 98 99 0c ba 5e Data Ascii: G}IB<rq#.f~1XS#b9x8X.\sGp.7]M]7=8gD?B[!.vkXc,)7Y/Rd}9rsvkN"I.h}?"~YOa (J.H6hHu'!JYK<+4p+Tk3+Ia>R\|^
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 93 e3 a4 e9 cb f6 84 2a 1e 02 86 47 48 bd 8b 6e 67 a0 0c a5 5e c4 be 49 9b 96 6d a3 fd 02 8f d5 01 0e 03 8e 3b 79 ca 31 3c 75 b7 6a f2 32 8a 07 32 83 c9 18 7d dd 4e 7e a7 df fe fd 5d a3 e3 87 fd c0 4f 1b 88 26 92 e6 f2 2c 41 fb 83 81 44 b0 92 11 88 2e dc e4 93 76 92 00 98 10 92 c0 49 a7 89 48 4a f6 1d 43 92 2c e9 38 56 30 ed 95 6b 12 d9 cd 61 ca 1e 05 b8 f8 55 ca 08 d7 5d 07 19 20 55 0c b4 e9 bf 52 23 c2 d2 c0 3c 0f f7 f4 86 2b f6 42 14 7b 5f 2e 8f 81 e1 d6 ec 6f ce 24 03 8b 2b ce 35 28 02 0d 8a 0c 5e 24 ef bc 3d f1 50 c5 ce 2a 0b 35 4a 92 c0 8c 6b b5 8c 9f 73 82 ae 09 d6 e5 88 e0 ae c7 fb fe c6 04 9f c2 3d ee 1c 7e 1f e4 4c f2 2b 13 ff 00 a9 42 f2 c4 c1 fa fe 01 f1 27 f6 af fd 78 e1 e1 79 92 76 c8 aa 3c 25 c6 27 c6 2a 0d 8c 8a 6d 04 e4 16 a4 40 11 0f 52 Data Ascii: GHng^Im;y1<uj22}N~]O&,AD.vIHJC,8V0kaU] UR#<+B{_.o$+5(^$=P5Jks=~L+B'xyv<%'*m@R
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 60 44 9f 65 7e 18 9e a7 42 96 37 b5 b9 0e 7d 31 57 5f 34 bc 42 93 c6 96 ef 85 78 9a ec 2e a3 42 73 bb 6f 7d ec 2d 7d f6 c1 a9 93 5f 7d f5 02 bd 13 4f 3f c7 0f c4 98 95 8b 49 60 a5 ac d2 24 7b 0e 8b ad 94 16 3c 95 41 2c 4f 21 88 68 2b 25 a8 8b 8b 48 dc 0e 22 ab 96 65 52 35 ab 95 21 43 86 65 52 bd e3 62 ab b6 ab 5c 62 9e 81 6d 72 b6 ef 05 b8 52 45 cf 8f b8 13 8e c7 44 d9 85 1a 51 42 ca 67 a5 5b 14 24 29 e1 73 52 a0 da e0 5c 83 6e a3 14 fd 9f ae 21 d8 a3 a1 8c 97 3a c3 0d 4a 2d 6d 36 bd ef d0 75 df 19 da 49 4d 4f e7 62 2b 24 01 49 0c 8c 2e ba 91 6f af d1 b7 7a e3 d9 8c f6 18 ea ea 01 56 0e 16 25 43 be ca db dc 01 f9 e5 8c d3 26 8d d6 45 b1 01 c5 b6 36 23 97 5c 65 59 6f 94 9a 96 f2 a1 0a d3 4e f1 68 d2 d2 15 e1 ca b1 92 ed 71 b5 8e be e8 63 6e 9b ed 15 04 f4 Data Ascii: `De~B7}1W_4Bx.Bso}-}_}O?I`${<A,O!h+%H"eR5!CeRb\bmrREDQBg[$)sR\n!:J-m6uIMOb+$I.ozV%C&E6#\eYoNhqcn
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 8d 88 01 24 5f ae 05 c8 16 de f6 1e 3d 0e 32 c8 e0 aa 49 1d a2 47 b3 28 05 ba 0b 0e 5a 49 c6 67 45 c3 55 28 af 2b b0 b4 88 14 2f 0e 4d 43 4a 5c b1 d4 19 40 3a ac 39 da db 5f 19 a6 58 4c 0a 10 b0 90 c6 ad 2a 4a 53 4a c8 09 b0 4b 36 ea 16 db b3 5c 9b f8 63 b1 95 bd ae a3 ed 2e 5d 45 47 52 5b 2b 15 46 5c ce 89 2a 7f 55 14 ae a5 65 99 a2 d4 c1 5d 49 53 1e 95 ef 48 14 1d b1 5f 5f 25 73 c5 12 5d 69 e3 b2 45 17 c8 c8 c7 ab 93 bf 80 1b 01 cc e2 3a 63 0d 22 ed b0 37 27 c5 76 df e3 7c 02 52 44 8d 4e dc 35 1e fb 02 4f cf 13 8f 36 37 e4 6f f0 b6 3b 2b 5a b5 fd 9f ca e6 1d 29 92 16 bd af ae 0b c4 d7 b7 ad 2f ec 23 1f 48 87 fa 04 fa eb 29 3f d3 20 3f 88 07 0c 55 fc a9 1b 7b d9 97 c5 48 b7 23 8c b6 69 e1 7a c7 0e 56 28 e9 4b 08 cf 79 4c cc 5f 87 b7 b4 5f 1d 86 ec c4 5d Data Ascii: $_=2IG(ZIgEU(+/MCJ\@:9_XLJSJK6\c.]EGR[+F\Ue]ISH__%s]iE:c"7'v\|RDN5O67o;+Z)/#H)? ?U{H#izV(KyL__]
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: de 2a 5a 40 b2 92 a4 93 f5 59 af 6d 3f 64 1b 7b f1 72 24 93 81 29 e1 49 76 29 d2 e1 80 dc 1e 57 c5 38 f3 75 47 c4 05 f8 e2 ae a3 81 46 c3 93 19 09 1e d2 81 57 f1 38 8c 6a 70 3a fd 5f bd 71 6c 1c c4 d1 f6 72 35 6f db 79 3e 90 58 6d 7e 1d bf 8e 29 d9 ea 2a 67 a8 20 85 30 84 f7 84 b1 fc 2f ef c6 6c 2d 52 0f 49 22 8a 41 fd e8 a3 07 e6 31 95 d2 ce 5b ca ee 91 c1 1d c3 b3 1b 5f 61 dd 51 cc b1 e8 06 3e 8b 33 d6 a5 8e 1c 9a b5 84 71 34 6c 68 19 cd 80 b3 b6 98 1c b1 d2 8c d0 98 f4 a8 b0 0c 8c a2 e5 b1 da 6e da c5 47 9e 4f 0c 32 2d 5d 12 d4 fe b5 ad 44 e4 14 b8 31 51 ee 38 2c a7 bb c4 0d e9 01 76 60 2c 7b 59 9e b0 d1 99 c1 96 b4 10 e6 75 2f 4f 02 cb 2d ef 2c 28 8f 34 ae fa 47 20 dc 82 e9 d4 74 83 7b db ce c8 88 c2 4b 16 ef b1 b3 6f aa d6 b6 90 76 1e bc 1a 7e 14 44 Data Ascii: Z@Ym?d{r$)Iv)W8uGFW8jp:_qlr5oy>Xm~)g 0/l-RI"A1[_aQ>3q4lhnGO2-]D1Q8,v`,{Yu/O-,(4G t{Kov~D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50175	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	929	OUT	GET /xxrz/250x400/793/f0/6b/f06bf9152cca69ecc543586569563320/f06bf9152cca69ecc543586569563320.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:01 UTC	723	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/jpeg Content-Length: 64208 Connection: close Last-Modified: Fri, 26 Apr 2024 14:12:31 GMT Vary: Accept-Encoding ETag: W/"662bb64f-109af" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4115 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0RTOxx1icsq3%2FEmZWX5K8I09PEj0Do%2B0dhr4cFA50Upom4Q%2B4MgT6QIUJL2QT0RcnKVqr9PMhTbNjFieAdyJDy%2BnSvBvp8NHIB30BKvQiwi7vcKGyWTJZRqO4v7V4AQF5m6M"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a74e2c5c66-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:01 UTC	646	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 74 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCt"
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 88 d4 2c df 15 33 68 e7 cf 20 66 69 f4 a9 5f 59 29 a2 95 69 1f 5a 49 f9 1c a7 a7 ad 6d c7 df 3d f5 f6 79 ef 9d d8 c9 3d b1 8a 63 73 8c 60 5a 61 a5 c3 04 ba aa 76 bb 75 2e e7 de 66 2d d3 e6 66 77 7b e7 be 77 50 45 44 dd 6d 3b 39 cd 36 c1 54 25 06 b2 2c d0 3c 20 86 83 d0 2b e0 29 af dd 04 13 b8 7e 7c c9 e5 61 e4 88 62 ad 9c c2 87 6c 4f 13 92 b5 96 90 cb 5a d8 4f be 7a 63 9f 33 df 3b b1 3c 67 19 ba 8a 24 68 1f 14 26 8f 10 b2 bd da 28 b3 64 cd ec f7 13 4a 50 f4 b9 99 92 97 be 7b e7 75 3a 53 7d c9 d3 e3 0c db 58 9a 59 26 1c 44 a4 08 e0 70 6e 03 40 90 ab cb 75 5f 76 1d f3 b5 17 b2 01 9d 90 a0 72 dd e8 67 1d 71 b9 7f 20 58 a9 10 8d b4 e0 f7 e7 d7 45 fc c3 c2 ca a2 25 23 80 d3 e8 4f b3 cf fd 24 cf 0e ee a5 57 24 a3 23 d8 a4 f9 9b 26 ab a1 e6 4e d6 c7 37 c5 79 4e Data Ascii: ,3h fi_Y)iZIm=y=cs`Zavu.f-fw{wPEDm;96T%,< +)~\|ablOZOzc3;<g$h&(dJP{u:S}XY&Dpn@u_vrgq XE%#O$W$#&N7yN
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 94 a6 ac 8b 17 ae d6 a1 d5 f2 2d 64 9a df d3 21 7e 67 3d b2 e3 9b f3 0c a0 e8 b5 57 11 e9 0e 39 d9 c2 61 6f b5 82 94 b3 08 06 f0 56 e8 b5 46 40 d3 d2 dd 5b 42 da 7a 1c f5 3e 7c bc b1 06 1a 55 27 8a 19 48 2c cf d5 e5 c2 4d 37 01 7f 40 47 51 fc c7 e3 91 86 75 e1 70 94 e9 f5 f5 c9 ff 00 93 eb 91 34 d9 40 68 ee b7 bf 24 3c be 02 d8 5b 3c e4 4a 01 28 3e 21 fa da fb 37 b9 9e 54 3a 5b c6 9a af 59 e2 b7 22 65 7b b3 b3 a9 15 7f b0 ea 3f d8 4c 62 8d 90 0d 00 f6 b7 4f 60 dc 93 b9 20 4f 84 64 3b 4f 1e 16 71 e9 a9 28 d6 43 1e 8b 27 37 f0 15 a1 91 1a e1 35 d6 8a 77 29 81 23 ae 21 d3 d7 49 54 4a da b8 f3 d5 ef 36 dd 36 c0 ed 48 e9 1c 79 8b 26 2a 26 a6 86 2f f3 99 8a da ea 07 9c 2f ae 29 b9 1b 62 8e d3 9b 32 c9 b7 36 5d 7d 01 7c 60 44 b8 0d f8 54 b7 31 9e 57 c6 eb ec af Data Ascii: -d!~g=W9aoVF@[Bz>\|U'H,M7@GQup4@h$<[<J(>!7T:[Y"e{?LbO` Od;Oq(C'75w)#!ITJ66Hy&*&//)b26]}\|`DT1W
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: cc e1 b7 ea a3 e8 49 84 9f 06 83 2b da fd 29 e8 a9 2a b1 3d 90 45 17 23 08 96 48 6f fa 6e d6 07 46 7e 89 12 63 c5 6f 56 ee 2d 7d 7c 1d 53 39 cb 2b 76 5d e1 63 3a e2 ae da 5f 48 a3 6a 05 b4 3b 01 fa 77 f5 d5 4b e9 ca bd de e7 1c 4c 5c 5c 2f 84 7f 4c ad 11 36 ac 19 e6 54 20 54 0a e2 54 28 85 8f 0f 7a fd b8 6f cb 1f 82 aa 0e 6b 5d d6 af a3 cb 8d 53 77 77 22 6d 95 8a a7 5f 9a c3 1f d6 a8 af 6a 2a d0 bc 44 95 d6 26 0b 57 aa 08 d5 b7 01 d1 f8 11 20 e7 88 22 fe e5 98 9e e7 51 51 5d 5f 55 fb 12 61 fc 18 fb 55 ff 00 a6 f1 22 ca 8a d7 2d c4 0e 16 12 fa 02 7f 94 d1 03 e5 fc 77 6f 56 c8 a6 49 32 08 b0 9f c7 25 27 3d 59 57 14 1e 57 a1 43 65 f2 81 2d 88 a3 0a d7 20 59 a6 69 5d 44 21 23 e1 2f 95 1f 10 47 d7 55 49 e1 4d f1 5e 1d 55 e7 ff 00 c9 61 fc 1a ca b5 fd 27 87 b3 Data Ascii: I+)=E#HonF~coV-}\|S9+v]c:_Hj;wKL\\/L6T TT(zok]Sww"m_jD&W "QQ]_UaU"-woVI2%'=YWWCe- Yi]D!#/GUIM^Ua'
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 70 e4 50 7a ce 04 ec 9f 4f 14 92 5d 4c 86 11 e6 88 54 be 02 b8 d4 97 18 75 97 91 f4 8c ef 0b 1d ee 16 23 e4 59 1e 40 c7 66 25 b1 3c e7 89 eb 34 9d ba fe 10 35 3d 65 46 bd d5 d6 cd d5 69 b9 0f 91 bc aa b8 a4 bc ce 77 f4 a2 aa 22 97 3d 5d 54 43 2c 07 38 77 c3 e1 0a 58 78 81 a7 7e e7 6f 50 8c 97 69 a1 d8 d6 ed d6 f3 ba a7 b8 a6 ea 8b 3d 88 14 dd 92 d9 fe 2d 20 51 d9 ed bb 8e f9 4a bc 26 26 2f dd a1 71 a4 69 ec 8e e7 2b 10 c4 01 fb 05 36 e9 5e ec 7b f6 46 bb bb b7 52 a4 51 eb bd eb 27 9c db 45 73 b1 7f df b7 99 6b dd da 5a c9 d6 e7 db d8 e1 21 08 9f 60 37 04 0f c3 cc 9e d7 5e 29 ed 25 57 68 40 25 07 20 3c 12 6b b7 79 3b 6e 11 8a aa 23 1f 2e 12 db f5 71 3d 0b 0b e0 38 2d f6 5f 4c 65 79 26 0d 05 7e 6b b6 79 df a3 46 f7 0b e2 36 17 ca 6e bd 36 85 5d c2 da eb a8 Data Ascii: pPzO]LTu#Y@f%<45=eFiw"=]TC,8wXx~oPi=- QJ&&/qi+6^{FRQ'EskZ!`7^)%Wh@% <ky;n#.q=8-_Ley&~kyF6n6]
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 7c 94 c4 87 20 72 f5 bf ea 0a d8 e5 c4 65 51 d4 70 7c e8 4a d0 24 89 c8 24 f1 8e 70 bf 06 57 da 1f 71 4f 51 54 e5 85 f5 8e aa b9 05 8f 3e c2 76 d5 dd 48 78 76 ab 50 26 48 db 9b 68 4d ee 47 e6 79 9a 9f 6b 6b a6 4c dc 9a dd 27 45 1b 22 37 55 04 7e 6e 3e 7c dc 7c f9 b8 f9 e2 6a 5d 6b fb 5a b1 dc 36 bc 3e 5c cd 91 b6 48 fb 6b 9e 60 e7 74 cb df f7 22 2e 32 5c 80 eb 72 f8 88 da 70 2f 48 6d 0b 1f 4e b9 ca 62 63 3f 64 5f 54 55 c1 fb b3 8c 17 a5 64 94 62 ca 25 fd 43 f1 c2 6c 17 73 c4 26 bf bf a9 35 4e 70 7d ab a3 f7 cb 5b e9 56 f4 a5 f4 4d 4f 45 ed c2 75 38 df bd cf 93 56 26 a4 5f 0d 9d d2 12 35 71 d4 bd 55 45 05 9b 3a f7 44 25 47 2c ba 46 0a 54 d7 1a 6f 2c 65 2e 5a c8 55 4b 6e 09 d7 39 c9 01 db 3a 62 7d 99 e7 ad 53 2c 3b 30 20 69 df 22 4c 0a 21 8e cd 2d 6f 62 8b Data Ascii: \| reQp\|J$$pWqOQT>vHxvP&HhMGykkL'E"7U~n>\|\|j]kZ6>\Hk`t".2\rp/HmNbc?d_TUdb%Cls&5Np}[VMOEu8V&_5qUE:D%G,FTo,e.ZUKn9:b}S,;0 i"L!-ob
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: bd fb 3e d8 04 18 06 17 d6 ed 87 11 5a 6e d6 10 dd f8 9f 85 a2 51 04 7e da 3d fe 77 dd 69 b4 2b a5 22 84 50 a2 d5 50 3b b2 ef ac 34 b4 b6 f2 94 94 05 27 ae 02 55 b8 13 6e 5a 72 ee 8c 35 c4 b6 ee 65 0f 58 11 fa 35 f7 f0 80 42 85 52 41 07 78 f3 ce 7f 58 76 9f 5a 25 d4 a0 aa 0d e3 e2 98 68 9e 37 3c 87 9d 6d 54 03 db f0 84 36 41 89 74 75 0f e9 00 7c 3c d8 86 22 a6 d4 a6 19 b2 85 33 af 78 a8 ad 13 df ac 2d 4b 59 24 a8 92 75 24 d6 bd f0 51 5b 8b 2a a2 bc 0f 6d 21 83 4a 6e a4 32 f9 4d d2 ae d1 b8 f6 c3 4e 87 53 98 6b bc 70 3f 67 0f 34 e7 e1 dc fd 2f b2 18 fc 20 ec f8 a6 1b 56 bb 8e 6f f0 f9 8a a8 79 46 a8 49 07 8f cf c6 1b 50 36 22 87 5a ee 3f 3c a1 90 42 6f 6b 8f 9f 75 f7 c2 8e 50 54 74 00 93 ec 89 87 3a 57 dd 5f d6 5f cf 70 8c a7 81 1e c3 68 cb 43 7a 8b 7d 55 Data Ascii: >ZnQ~=wi+"PP;4'UnZr5eX5BRAxXvZ%h7<mT6Atu\|<"3x-KY$u$Q[*m!Jn2MNSkp?g4/ VoyFIP6"Z?<BokuPTt:W__phCz}U
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 91 b4 4f 3b e8 e0 cc 92 95 25 b2 b5 38 12 a0 ac 1b 6e 31 5d 8b c4 66 5c 90 67 0e c4 24 f1 1c 3d 58 6e 2f 83 63 12 be 9d 84 62 d2 0e 29 2e 19 69 e9 5c ed 2c e4 71 28 75 97 99 79 97 d9 71 35 6d d0 95 38 95 e3 1b 79 88 ed 5b 12 38 6a 70 dc 0f 66 f6 6f 01 5c c4 e4 a6 cf ec e4 9b d2 92 0a 9e 9d 6c b7 31 88 4d 19 89 89 c9 a9 d9 e5 b4 80 cf 4f 33 32 be 89 94 86 d8 43 69 53 99 ff 00 94 ed a1 6f 1b d8 6c 6e 55 12 52 73 1b 01 87 c8 e1 98 33 72 ad be 86 5f 96 93 9a 99 9a 78 e2 01 53 0e 29 e7 b1 3f 4b 7d 9c 44 b2 a9 76 dd 65 79 1b 69 ad 61 1b 71 8d a7 09 db 3c 26 63 d1 a7 91 b7 73 d8 6e 27 8d ce 4d a1 e5 ce a7 11 c3 31 09 8c 45 b9 c9 37 10 fb 6d 34 ec c3 d3 73 0d cd 17 59 7c 2d 87 0a 11 d1 9e b4 63 7b 61 8a 63 b8 6e cc e1 0e a2 56 47 0d d9 4c 29 58 5e 19 29 87 26 61 Data Ascii: O;%8n1]f\g$=Xn/cb).i\,q(uyq5m8y[8jpfo\l1MO32CiSolnURs3r_xS)?K}Dveyiaq<&csn'M1E7m4sY\|-c{acnVGL)X^)&a
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 54 1c db 86 62 77 76 70 89 84 07 26 97 9a 80 27 2d 6a ac 95 21 29 14 0a a2 85 6b 5d d1 24 e3 0d a3 31 4b 88 ad 2e b7 3a 41 d8 90 00 a0 d3 f1 6a 7d 91 5a de 31 0f ea c7 92 d0 7c 62 49 6b 4a c2 42 b2 f4 99 4a cd 2b 7a 7a d7 f0 ed d2 0b 8a 4a 8a 49 cd 4d e7 5d 07 0a 7b a1 c6 fa 43 98 ac 8f 60 3d c4 c2 db ab 8b b9 ba 8f 3b fb 48 85 a1 48 3d 61 ed dd f3 c8 d0 ef d2 f0 d9 a1 ed 84 0b 41 87 dc 52 13 d5 4e 63 a7 78 ac 17 1c 51 a2 88 48 e0 35 f0 eb 42 3d 52 2f a8 35 ec 84 3a 6f 5f 8f f1 89 84 14 bc a5 29 40 b6 b2 15 95 6a aa 33 53 ad 54 07 10 e1 36 d5 15 d7 48 96 5a 96 e2 10 96 2c 4d 4b c5 b5 86 db 4a 45 7a a9 2d 37 7a d0 27 ae a3 7a de 90 a4 91 6c b4 03 4e 7b c9 89 96 fa 46 1c 4d 72 da b5 23 4c a4 2a fc ad 78 97 b1 eb 38 dd 05 6e 85 15 15 e9 a2 28 16 69 7b e9 0d Data Ascii: Tbwvp&'-j!)k]$1K.:Aj}Z1\|bIkJBJ+zzJIM]{C`=;HH=aARNcxQH5B=R/5:o_)@j3ST6HZ,MKJEz-7z'zlN{FMr#L*x8n(i{
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 48 3a 53 3e 52 43 54 ac 0f d7 87 d7 fa d6 21 c8 9e 3f ad 73 0f 54 18 7d e7 69 b4 4f d5 03 8b 58 eb 7e 83 e7 d6 d4 91 a2 fe aa fd 78 5a 83 5a e3 91 1e ee 1f 0a c5 29 6b fe b7 97 2f cb 5a 65 78 cd d6 e3 e5 ee a8 df 38 d4 58 8e 23 f1 1d c6 a5 73 1a 16 02 e4 7e 75 81 27 74 a4 f3 b9 f8 d2 9b 8a 3a 8a 96 f9 b8 0a 75 be 97 f7 54 c4 02 41 a9 cb 2e ab 72 bd 3e b8 f8 1a 91 c3 ca 87 8f 01 fb c2 fe 07 d5 87 40 b0 a9 3c 92 fe 1a 9b f7 f9 d6 75 e4 54 df 85 88 f8 1f 9d ab 3d f9 6b fd 64 27 5f 3f 0f 7f 95 35 bf 64 5c f2 ba 5e fe fe bf 3a 92 28 c9 1a a9 bf 87 ca f5 34 3b 80 64 b5 c0 f6 ad d3 91 e9 f4 6a 66 32 46 58 1b 0e 20 6b af 0e 97 f8 d6 07 f4 09 f5 ce 93 87 9d 72 e9 df 52 7b 54 e6 d7 d3 dd cc d6 24 f6 d8 d4 ce aa a5 d9 95 51 01 66 66 21 55 40 d4 96 27 40 00 d4 93 4c Data Ascii: H:S>RCT!?sT}iOX~xZZ)k/Zex8X#s~u't:uTA.r>@<uT=kd'_?5d\^:(4;djf2FX krR{T$Qff!U@'@L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50179	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	807	OUT	HEAD /movie HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/movie Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:01 UTC	838	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gk8sX9jAupqRHjy%2BKd9cbLr2%2BwjIFXnWN5qN4MwFzVmJJkJgBn0aLiKUmMA3J1dPybzkOgM4qCVjhg3tdcPiqd02abI%2Bc6%2B7pS72c%2BCCUn2CuzMVi6DgoxuadCIu6YE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a7dee68d97-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50178	3.232.64.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	689	OUT	GET /pixel?pid=m4omg6v&t=gif&call=2&gdpr=0&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18f1bae1d9d-42c70000010a45f6; SERVERID=17910~DM
2024-04-26 18:33:01 UTC	466	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=17910~DM; Domain=eyeota.net; Path=/; Expires=Fri, 26 Apr 2024 18:43:01 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=eyeota&ttd_tpi=1&gdpr=0&gdpr_consent= Content-Length: 0 Date: Fri, 26 Apr 2024 18:33:01 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50177	54.146.132.60	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	646	OUT	GET /cookie-sync/id5?us_privacy=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-04-26 18:33:01 UTC	654	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 18:33:01 GMT location: https://id5-sync.com/k/155.gif?puid=AAGbQU7MV-cAABTrRdAf4w&id5AccountNum=155&numCascadesAllowed=9 Server: gunicorn set-cookie: bito=AAGbQU7MV-cAABTrRdAf4w; Domain=bidr.io; expires=Mon, 26 May 2025 14:33:01 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Mon, 26 May 2025 14:33:01 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50181	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	853	OUT	GET /ajax/banners?page= HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/movie Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:01 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: application/json; charset=utf-8 Content-Length: 60 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"3c-DFz73KHXVYZHM3DcVRSxkH+OTqg" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YUpwKmadbXgiJHAu3db5qo8a%2BAJZSMm%2FuoLYI5o4RGWrfvZ5i7jidEBLACN6Q4F84H3XrFGNmF6actmNiy18INdvrpaSCnU3s9aEwLmCSTQWo6RQ3Q%2B%2BbbaRW4JwLk8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a80f8a336b-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:01 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 62 61 6e 6e 65 72 73 22 3a 7b 22 74 6f 70 22 3a 22 22 2c 22 6d 69 64 64 6c 65 22 3a 22 22 2c 22 62 6f 74 74 6f 6d 22 3a 22 22 7d 7d Data Ascii: {"status":true,"banners":{"top":"","middle":"","bottom":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50185	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	929	OUT	GET /xxrz/250x400/793/68/22/68223cf08a407a8c5107c603202618c9/68223cf08a407a8c5107c603202618c9.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:01 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/jpeg Content-Length: 41383 Connection: close Last-Modified: Fri, 26 Apr 2024 13:53:10 GMT Vary: Accept-Encoding ETag: W/"662bb1c6-5c94" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1757 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fWnecYSYFlsYmJc%2FfbgpvHAv3sbIHq%2Fz2zDdnl4%2BemKzKyhLX68ih60UCTrTum3hRtyNqiCiy22%2BrvYWImOISEfvW3kSvt9uNxImpkVaVNNRb9pjHtXDunsog65T17D3GHie"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a81eeda546-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:01 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 30 da 65 95 55 fc 03 19 d6 70 b3 60 9f b7 77 cc 36 27 6e 19 39 1c 42 f1 4b af da ad be 68 7e 51 d1 5e 7f 7a 91 d5 fa fe e3 3b da 42 86 c2 75 bf 78 bc 1e aa ca 33 02 e8 56 a4 c6 fc 3b 7a 74 c3 7c ea ac b9 b2 2f 56 6f b6 d7 79 e4 7f a8 f8 b9 4c dd 8d 3c db 64 ea fb 7e a1 37 db 3f 12 d9 6a 7d 77 54 32 c9 a9 d9 83 ee 36 ad ed 90 36 b8 fc 7e 4d 17 53 75 8c 33 9a 8c 90 6f 68 9a c5 9f e8 77 99 33 b8 39 4a fa 9e 7b 44 f4 bc fb 76 99 cd 47 7d 27 90 8c 6e 65 5b a8 af 22 1f 96 97 ea 71 54 7c ac 5f 57 1e 60 7e 4d 0f ad a6 4d e4 5b 7e be 0d eb 8f 0d 3b 10 ca 42 f8 fe 1e b9 44 4c 6f 28 9b f5 7e a4 9f 92 c0 eb 34 61 93 f2 ae ba 8e da 62 bc 6f 28 ca 59 6b 7b 8e 07 11 e8 71 4c 75 e7 71 19 76 97 95 be c7 27 a9 03 9a 92 84 91 a9 a7 91 5b 89 61 6b e3 5d c8 13 03 81 da 9c 21 Data Ascii: 0eUp`w6'n9BKh~Q^z;Bux3V;zt\|/VoyL<d~7?j}wT266~MSu3ohw39J{DvG}'ne["qT\|_W`~MM[~;BDLo(~4abo(Yk{qLuqv'[ak]!
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: ee cf 2d fd 0e b8 19 3e 65 7b ca ca 15 30 c2 a1 36 c1 4a 1d d3 29 51 78 fe 41 8f da cb 39 23 13 20 1e 5d 2c 2a 1e 32 50 ab 03 2d 68 bb 44 29 06 66 c2 eb 4d 37 37 46 77 cd 03 d6 b6 83 50 f6 f2 95 d7 55 cf a2 ec 60 1b d1 63 00 e7 17 49 39 63 d9 39 fe 8b b2 96 3f b9 fc cd df f4 48 47 fc cd f7 60 52 a1 bc e5 dc 77 c1 4b 12 c2 e2 98 41 4c 43 db 4d 22 fe 25 fc 2a 41 6d c8 18 eb ab 19 a1 d2 dc 1a 30 9b 9c cc d8 24 87 3f 77 53 98 bd 8b 96 ed b6 e6 f3 a3 7a e9 df 9b b9 e6 03 f8 d9 d3 01 69 fc d6 b9 69 b4 fc 46 db be 6a fa 03 96 b7 90 65 27 e8 be 5b df 16 6c 9d 7c de f6 90 80 fd bc 56 ad 53 25 8d 4c 5c 9b 79 28 dc 1d 19 09 37 05 66 7c ab ee 4d 7b 37 62 e4 3b eb 8e f1 b7 30 db 74 de b4 eb 4e 9c f9 75 dd 3f a3 6d b7 3c 6b a2 73 7e 8a eb 2f 81 de 19 b6 83 54 4f 1d b0 Data Ascii: ->e{06J)QxA9# ],2P-hD)fM77FwPU`cI9c9?HG`RwKALCM"%Am0$?wSziiFje'[l\|VS%L\y(7f\|M{7b;0tNu?m<ks~/TO
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: eb ed 64 76 bd d6 8f af 35 a3 eb c5 64 fa ef 57 52 de aa c5 ae d0 d5 88 a4 68 47 11 17 23 55 50 64 45 1a f1 22 28 91 9c 75 d5 06 c7 12 32 88 fc 99 11 ca 35 e8 bb a2 18 38 8a 39 07 c3 1d 94 39 6c e6 8f 6a 8a 3b 23 9a 2c 31 f0 ce 82 10 e2 60 63 90 41 a3 17 23 5b 93 a2 24 27 08 d1 04 db 0e 18 e5 39 19 32 64 51 c8 28 e6 a2 8f 84 83 bf 88 8f 43 dc 56 8a d1 50 54 1c 88 60 62 a8 d7 28 c8 a3 1e 8e 1a 32 22 a0 c8 a8 a2 61 4e 27 03 82 08 98 18 87 49 aa 74 8e 9b 8e 26 0c 18 c8 e6 0e 6a 8a 3d 88 a3 db c5 51 f8 39 0a 28 e1 c6 4e 27 b0 91 06 c5 54 21 cd f1 19 30 c7 8d 56 90 dc a3 1e 22 98 31 81 aa 35 e2 39 0c 64 56 21 c4 c1 81 50 73 10 7c 31 cc 54 1c d1 f0 f0 2f a1 c8 c8 a3 d3 7c 0a d3 d5 04 73 90 6c 4f 58 73 0a 84 29 bc 10 66 9a f1 b1 06 c4 11 e7 23 23 a6 a1 cb 33 50 Data Ascii: dv5dWRhG#UPdE"(u25899lj;#,1`cA#[$'92dQ(CVPT`b(2"aN'It&j=Q9(N'T!0V"159dV!Ps\|1T/\|slOXs)f##3P
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 18 ce 36 86 f8 31 b6 bc 40 56 d7 a3 7e c4 af f8 6b df 1b d8 68 86 7b d0 43 5e 58 bf 06 d0 f6 2b 6c ac 18 31 ba 1a fc c6 e2 32 67 68 1f e2 29 93 26 77 52 2e cd 13 6c 99 33 ba 08 21 ae fc 7e 55 d1 b4 fe c1 ee d7 e8 8b e6 5c 70 f5 86 de 30 17 6c f6 29 17 64 10 45 33 d8 82 08 21 af 8b fe 89 a2 31 15 f6 30 88 60 c0 a8 22 1a f3 33 d4 b9 5c 98 12 17 ab d3 08 bd b9 15 48 9b 35 44 5e e4 d9 10 6a 1e 20 23 b7 a3 a1 7e b6 52 34 46 2a 9d 25 3a 67 03 a6 a6 aa 54 5b 53 bf 26 13 0e 46 b0 fd 98 a8 2a 18 31 ba a9 11 4c 88 20 8b b6 04 63 94 82 d4 8d 0f a7 83 89 2d 39 21 35 1e 7a e7 a4 d2 eb 1a db 5b 93 ab 5d ba 63 7a 51 ac cb 22 99 77 db b5 29 2b 8b 5d aa 93 72 74 8f 10 35 78 71 ec 9d 5e 65 75 df 5c 6c bf 3b f5 fa 04 57 c6 7f 98 9f 99 6a ac 65 e9 f1 8f 3d 2f 4f b7 29 b3 12 Data Ascii: 61@V~kh{C^X+l12gh)&wR.l3!~U\p0l)dE3!10`"3\H5D^j #~R4F%:gT[S&F1L c-9!5z[]czQ"w)+]rt5xq^eu\l;Wje=/O)
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: f1 16 3b 67 92 2f c9 9a 84 26 50 cb b5 65 9d 51 a2 04 12 18 7a 50 a8 3d 3a 6e 1e 15 6d 2e af 1c f7 92 b6 9d 38 6b bb 6b 18 db d2 81 81 6b 6b 6d 93 7f 4a 08 dc c7 6a 10 0f 5e d1 d6 bc c6 f2 ef 4f 4b 49 ad 24 8d ed ec f4 ee 5b 33 46 54 cf 65 71 2b 32 0d ac 7f a2 72 41 38 1d 4f bc c5 70 35 4d 37 55 8a d2 4e 70 d4 2e 96 ec f3 17 f9 23 46 d6 e8 c4 17 c6 36 a4 44 6d c6 70 73 5a c5 ac f7 3a 84 bc a8 8b c1 a8 2d 84 73 cb 90 04 1e 65 73 cd 62 f9 eb 87 85 8a a6 3b 5b a7 4a d0 1e 7b 63 a8 f3 61 68 39 ba 8c f3 c5 b8 a9 e6 45 26 dd 8c 36 93 8e ce ff 00 df 57 4b 79 3f e5 f5 4b 49 5c df de e9 ef 01 dd 10 0e 90 f2 56 47 fb 79 01 79 4c dd 9d 84 7b 9a 3d 4a 0d 44 4e 9a 6d c4 d0 c3 c4 17 1a 8e f8 de dc 09 2d e4 b5 58 57 6f 32 65 eb b8 9c 03 db 8a bf 8a 7d 4f 41 78 64 4f e3 Data Ascii: ;g/&PeQzP=:nm.8kkkkmJj^OKI$[3FTeq+2rA8Op5M7UNp.#F6DmpsZ:-sesb;[J{cah9E&6WKy?KI\VGyyL{=JDNm-XWo2e}OAxdO
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 07 3c 36 1c 0d be 8e 14 f4 18 cf 4a f2 3d 7a f3 e8 17 56 6c bd 2c af 9b 64 99 19 65 b8 51 26 d2 bf 68 6c 20 f5 3d 1b 3e 8f 61 ad b5 b6 b6 d6 da 6a 75 ec f7 fe 14 eb 9c 75 a0 33 4b 5b 4d 79 5c bc 9e e3 8a da 09 70 23 b2 b2 b6 8e 10 3f 56 50 66 66 3e b2 ce 7d c0 7d 08 ef 1b a4 91 b3 23 c6 ea ea ca 4a b0 64 21 81 0c 30 41 c8 ab fd 5e ef 57 be 7b db f9 9e 42 f3 19 cc 7b d8 46 84 2a 28 58 d7 38 50 56 28 d3 20 6e e8 09 27 b2 a4 91 e5 91 e5 91 8b bc 8c ce ec 7b 4b 31 c9 35 c3 9c 71 75 c3 da 0d f5 95 a2 42 97 4f 34 46 d2 65 85 77 03 26 79 b2 dc 33 1f ad 2a 36 88 54 fa 2b d7 a7 8e 97 e5 66 e2 2d 39 62 bb 50 6f 6d fd 2d d3 06 92 3d 45 73 e9 a7 31 30 6d ae 00 f4 a3 ca 34 4d 8d 84 0e 8c 34 0d 72 cf 88 34 d8 35 0b 29 03 24 8a 37 c7 91 cc 82 5c 0d f0 ca 07 d9 74 3f 78 Data Ascii: <6J=zVl,deQ&hl =>ajuu3K[My\p#?VPff>}}#Jd!0A^W{B{F(X8PV( n'{K15quBO4Few&y36T+f-9bPom-=Es10m4M4r45)$7\t?x
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 46 7d 79 1d d5 07 96 87 9e ee e1 65 b6 58 6d 84 3a 83 c0 48 de 4b 45 09 92 c4 13 9c fd 74 89 89 01 27 00 8c 66 b8 83 ca 6c 97 71 da 2d ac 8d 1f 33 4f 9b 9b ca 61 1e cb 89 11 e3 52 70 4e 70 c7 24 74 c7 bf a6 9b c5 fa e6 96 8f 1d bd f4 a2 36 1b 55 5d 8c 8a 83 7a 39 da 1b 23 ae d0 3b 3a 02 6a 4e 35 d6 6e 2e 74 b9 ee 6e 1a 63 a6 cc 64 4e e6 76 73 93 bf a8 dd 9c 95 3d be 87 4a d5 75 7b bd 56 7b a9 67 93 72 dc 5d 3d ce d3 92 15 9b 1d 06 7b 80 00 7b a8 dd cd 85 f4 88 28 81 01 04 fd 95 ec 15 cc 35 cf 6c 01 b9 b0 3b 06 e3 81 d9 dc 73 5c c3 5c c6 a1 a8 df 86 32 2d e5 c8 90 a7 2c b8 9a 40 db 3f 53 21 81 0b fd 90 40 f5 55 be b9 aa 41 cb 09 7b 70 16 19 d6 e1 17 9c fb 44 cb d8 f8 cf 6f 8f 88 e9 53 f1 16 b5 73 2d b4 d3 ea 37 32 49 68 e2 4b 72 d2 b1 11 38 25 b7 28 3d 33 Data Ascii: F}yeXm:HKEt'flq-3OaRpNp$t6U]z9#;:jN5n.tncdNvs=Ju{V{gr]={{(5l;s\\2-,@?S!@UA{pDoSs-72IhKr8%(=3
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: e0 b9 6e 80 a8 39 20 5b 71 0e 9b f9 13 5c d1 66 d6 2d bd 0c e8 3a 6b e9 b0 08 66 cf e5 65 71 7b 71 10 3e 8e 18 b8 b8 69 a2 91 e4 6e 50 25 0c 67 1b ab 87 38 9b 4c b5 d1 e1 7b ab b4 b7 bd e1 f9 f5 7b 9b 1b 52 ae 5e f8 6a da 67 a2 44 90 6d 52 bb a2 bc 0a d2 ef 2b b6 3c b6 4f 97 14 ea 5a 7d c7 e4 16 b2 d4 22 bd 30 e8 56 56 b7 5c a4 99 79 57 30 ee de ad cc 44 cf df f5 48 cf 63 9c 74 ad 27 5b d1 61 7e 10 96 5d 5a d4 7e 4d d3 75 65 bc 5d 97 39 86 5b 8f 48 78 22 fd 07 ae ce 67 09 ea e4 02 ad d7 18 cc 5a a6 89 73 a6 18 4e bb 65 6d 3c dc 21 69 a4 f2 e7 4b ac c3 79 1d e9 ba 7d e6 38 1c 15 58 d4 7d c2 c7 2f db db a4 6a f6 9a 5f 12 47 34 57 0a d6 36 d7 37 2b 1d c7 5d ad 0f 2e 54 56 f5 95 4e 18 7a c3 20 1c 1e a2 b4 6e 22 b0 6b ce 18 f4 bb e8 ad e2 d3 ac 2f 56 77 70 ed Data Ascii: n9 [q\f-:kfeq{q>inP%g8L{{R^jgDmR+<OZ}"0VV\yW0DHct'[a~]Z~Mue]9[Hx"gZsNem<!iKy}8X}/j_G4W67+].TVNz n"k/Vwp
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 87 46 e2 1b 3d 42 2e 65 a3 de 58 91 8e 8d cd 8e 1b be b9 ff 00 a2 e7 23 a7 be b5 6f 05 ac 65 8d 4e 91 a9 cf 0c ca b8 db 78 a9 2a 4a dd 02 e6 48 c4 4d 18 c9 cb 10 b2 1e 9d 16 b8 a3 80 38 93 86 4c 93 dc 5a fa 5d 82 0d cd a8 59 e6 58 11 7a 75 95 70 25 8b 1e 7b d3 1e fe f5 e1 c7 05 69 7c 45 6f a9 df eb 86 5f 41 82 dc f2 63 81 8a 4e 0a 31 69 2e 94 ae 5b 09 cb 78 a3 5d 8e 24 71 37 fc d7 5d 1a 1b 08 34 9d 36 3d 2b fc 1a b6 56 e6 cb ef 64 db 34 61 a3 66 2e 03 16 70 77 36 ec 1c 9e c2 bc 6e b1 16 dc 45 65 7c af 96 bf b0 45 78 f6 90 10 da b1 45 21 be eb 6e 52 3a 03 95 db eb 63 22 96 40 bd fc ea 39 07 f5 52 c9 f2 a1 2e 7b d0 6c 79 52 39 07 22 9e 6e dd 8f c7 e5 f4 69 9a 9e 52 46 05 4a e4 12 07 9f f6 0a f0 7e da 08 78 3a 1b 98 f2 d2 df 5e dd cb 70 c7 f9 70 b0 b7 54 1e Data Ascii: F=B.eX#oeNx*JHM8LZ]YXzup%{i\|Eo_AcN1i.[x]$q7]46=+Vd4af.pw6nEe\|ExE!nR:c"@9R.{lyR9"niRFJ~x:^ppT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50176	192.178.50.68	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	939	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3&co=aHR0cHM6Ly8xbW92aWVzaGQuY2M6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=dp7hb5zdowth HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:01 UTC	845	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Security-Policy: script-src 'report-sample' 'nonce-OjfQH6RJulGwMwc7ant2_w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Date: Fri, 26 Apr 2024 18:33:01 GMT Expires: Fri, 26 Apr 2024 18:33:01 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:33:01 UTC	410	IN	Data Raw: 31 63 36 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 Data Ascii: 1c6d<!DOCTYPE HTML><html dir="ltr"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><style type="text/css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-st
2024-04-26 18:33:01 UTC	1255	IN	Data Raw: 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 Data Ascii: U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unic
2024-04-26 18:33:01 UTC	1255	IN	Data Raw: 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 Data Ascii: ; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720
2024-04-26 18:33:01 UTC	1255	IN	Data Raw: 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 Data Ascii: t-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500
2024-04-26 18:33:01 UTC	1255	IN	Data Raw: 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c Data Ascii: (//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212,
2024-04-26 18:33:01 UTC	1255	IN	Data Raw: 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 Data Ascii: -range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.wof
2024-04-26 18:33:01 UTC	600	IN	Data Raw: 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 4f 6a 66 51 48 36 52 4a 75 6c 47 77 4d 77 63 37 61 6e 74 32 5f 77 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 73 63 72 69 70 Data Ascii: ecaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js" nonce="OjfQH6RJulGwMwc7ant2_w"> </script></head><body><scrip
2024-04-26 18:33:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50184	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	901	OUT	GET /ajax/banner/vpn HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/movie Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"10-UiecVLFvCojUPVe0y7mBPqPMOas"
2024-04-26 18:33:01 UTC	904	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:33:01 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"10-UiecVLFvCojUPVe0y7mBPqPMOas" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gVNAsgELSc2HxR3Y0Cp7eOWsB336Pt36m7IyEfPslx8g9YWuL3LsJpDTjKykbzlPoQkc5AK0FFz6L%2BDBvDeAXaaHMB4Ek8f8xn0MSDKYZc3zDQoasEip7Gef2JyOMtU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a82b3fa4d3-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50183	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	929	OUT	GET /xxrz/250x400/793/88/4a/884a49f9f49a5f6a6eb4fe7485db01ac/884a49f9f49a5f6a6eb4fe7485db01ac.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:01 UTC	723	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/jpeg Content-Length: 92164 Connection: close Last-Modified: Fri, 26 Apr 2024 14:10:43 GMT Vary: Accept-Encoding ETag: W/"662bb5e3-15765" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5528 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jHtZpsJhi9Lc4dWUZRgVQk%2BVyDUeh9UjliKRvamx3OCkzAoUGNOqdwhIYqj8Ao3Z3Xb3DYk2KwZCXwn1YiAReuw3f7%2FkYdnwN%2F7O2T7YZbPZL2VtIUIksNdwc09nAdABcV%2F7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8a82dfaa4f8-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:01 UTC	646	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 75 a9 d6 35 f6 41 f3 74 23 b1 22 c2 f7 3b d2 f5 84 58 a9 85 e7 1c 3e 7d f2 0d 8a 00 66 63 67 e7 eb d4 3e de 97 23 d2 23 01 45 7d 94 9e 70 c2 2d cc f0 2b 5c 6e eb c7 66 24 a2 33 49 f7 18 26 e8 c6 e3 eb 4a 4d 45 a6 a7 ea e9 35 cb a7 e0 e5 27 52 ac b2 b2 56 25 91 ad 99 1a 00 8b f9 8d 83 a4 ee e8 f2 bc 9b 09 4a ad b1 62 f0 92 42 48 d6 a3 73 84 dd b5 ba 60 da 6a a7 bd b8 f2 8e 41 53 34 87 5d 13 41 8e db 18 91 ff 00 42 34 c2 17 96 b1 cf 5a eb a3 ba 16 0d d3 de f3 6e 58 01 e6 9d d0 89 b7 7a f1 ea b2 25 50 b9 b3 52 51 c0 6f 9c fe cf 66 e5 3a 9c 72 0a 8e 7b 8c bb 11 54 d3 c1 f6 2b c9 a5 a3 d5 e6 f4 fe a1 0d 26 60 94 4d 92 2d 81 59 b0 c4 d2 20 e5 92 74 7c cd b5 7a 76 b4 3a eb 93 26 98 27 5d 29 d8 04 45 24 d9 62 dc d0 fc 13 b1 58 d7 2f 00 d9 0f 75 35 67 b4 b0 cb ca Data Ascii: u5At#";X>}fcg>##E}p-+\nf$3I&JME5'RV%JbBHs`jAS4]AB4ZnXz%PRQof:r{T+&`M-Y t\|zv:&'])E$bX/u5g
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 08 30 e6 9f 15 b2 57 a1 1e b5 7c 10 fa 4d 46 89 17 6b ca 63 88 c9 4e ae 1d 62 83 1f 5f ce 90 24 58 13 72 1c 99 05 17 2e 92 97 c1 98 c3 b1 a1 8a d9 5c fb fd c3 f3 d4 e6 fd d7 55 e7 53 f3 ec fe 25 5f 19 94 3e d9 ee 6d df cf b6 3a ea 58 49 59 8d 34 78 e2 73 7d 75 2b af 3d 12 48 03 98 cb 20 79 90 0a c3 1c 7c dc 41 85 14 e0 49 8f 45 21 d3 bf 59 8a a5 16 9c ad 96 1c 99 8d 5b 16 6e 94 86 ea 4f 23 16 e0 61 03 ee 41 e4 7a 55 36 fb 3e 0d 8b 32 da cb a4 ae 85 6a e4 fd ca da b2 7c ad 6c 33 ed 0d 9c b8 11 dd 35 64 bf ae f8 88 4e 1d 18 06 14 f8 df 50 49 19 3f 29 34 64 7c 08 54 70 71 60 3c c4 1d 8f bb bf 73 c6 4d 66 12 b7 ef 7f ee 02 6a d1 14 60 e0 85 62 c3 05 6c 36 05 de 2b 03 8d ed 2c f7 8a b6 fd ad d4 6c a7 a8 59 40 23 3b 53 ac a2 90 1a fb e8 2e 7b 10 7f 95 3d 15 c8 Data Ascii: 0W\|MFkcNb_$Xr.\US%_>m:XIY4xs}u+=H y\|AIE!Y[nO#aAzU6>2j\|l35dNPI?)4d\|Tpq`<sMfj`bl6+,lY@#;S.{=
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: d4 59 b7 75 7a 2d 16 55 f4 85 6a 99 fc 70 ea 4a 36 2b 7a dc c9 e5 43 62 58 94 ac d5 9d c7 a8 91 db 37 1e ad 23 cf cc 04 b2 ac 23 95 90 5c ca 49 14 ee 2a ee 9c 42 2e 55 9c 1e c1 b2 24 23 87 f2 2a 56 c9 23 0c f1 ab 82 22 ad 7e 62 54 b1 2d 9f 43 95 d1 3c b8 dc a7 8b 51 64 5d e3 fe 71 c7 3d be 71 56 aa 03 74 62 ba 98 86 6c 86 3d 40 1e b3 b0 77 22 d3 d6 95 23 31 06 b3 56 63 69 d9 33 46 c6 16 02 31 a9 8c 64 44 b6 69 c7 6d 65 35 7d 8d cc 82 fb 49 4f c9 3e 95 8f 3a 8a 36 6c 60 32 0c 92 55 28 18 e7 5e 0a f4 7b 78 c6 d1 f2 13 6e 4f ee 8a c1 dc 23 98 b8 47 a1 32 b3 67 c5 4d 33 38 b3 b9 f0 cc ae 29 33 54 d1 e9 ba c7 f1 5e d1 2a 75 5e bf 31 66 67 13 5d 6c 64 db d1 27 9d 59 b4 be bb 59 c9 fd 2f 10 e7 3d a9 a3 76 43 75 79 20 10 72 67 4c ac df 24 a1 76 7c 2a 2d a7 25 aa Data Ascii: Yuz-UjpJ6+zCbX7##\IB.U$#V#"~bT-C<Qd]q=qVtbl=@w"#1Vci3F1dDime5}IO>:6l`2U(^{xnO#G2gM38)3T^u^1fg]ld'YY/=vCuy rgL$v\|-%
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 88 5f a7 1a b4 05 ca 40 19 06 dc aa ec 9d 25 5e 8a a8 59 66 d0 51 95 9d e8 37 46 5e 47 cc ba 20 3c f6 c5 7e 0c 70 c1 c5 3e a7 57 80 14 c4 38 6c dd 77 6b ea 4d 48 8e c0 14 1b 2d 5c d1 55 f9 a5 6c da 66 d3 b6 69 00 ca 2a 83 b3 b7 7b eb ac 00 53 ad 6e ca 70 00 32 2a 95 b2 fe dd d1 ce 18 1c 1b 19 26 f5 07 d6 07 cd d7 1e eb 2a ab 2a d5 99 57 93 b0 8e 60 71 77 e7 cf 70 6c 5d f1 0a b3 97 09 2e b5 c6 51 bb 49 a9 f7 e2 e4 ca 08 70 4f 83 75 c3 86 1d 30 1c 02 87 2b a1 f4 02 f7 6d ac 34 ec cd fd 1a c4 43 2d 39 b0 eb b5 26 f5 cb 05 67 6e 46 50 0f 78 da d6 5b a1 74 b3 88 64 36 34 8c 7b a7 ae bd 4d 53 5a 47 24 23 e7 4b 91 29 dc 01 81 46 8e 3c a9 88 8e 42 9c ee 56 ac ea 0b 16 c6 69 ae f5 0d 23 5f 13 62 cb d4 11 99 9f a4 c3 c8 c6 3e 41 dc 7b ff 00 6c e4 71 a4 52 40 ad a5 Data Ascii: _@%^YfQ7F^G <~p>W8lwkMH-\Ulfi{Snp2&**W`qwpl].QIpOu0+m4C-9&gnFPx[td64{MSZG$#K)F<BVi#_b>A{lqR@
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 1b e0 c6 0e 0b c6 14 47 0b db 00 dc e4 68 28 57 20 02 60 d8 37 04 58 37 d4 d5 90 b9 dc a4 10 49 c9 f7 f5 a2 db fc 92 8f b4 2d ba e0 b4 fd 2d b2 f6 fb dd e3 a7 d8 ea 84 c8 a3 77 b1 1b cf 63 db 35 e5 3e 9d b4 67 eb f7 ad 95 bc ad 3b 09 62 89 88 2a e7 7e c4 2e 68 db 9a d7 1d 7b 65 88 42 4d 38 1f 4a 4e d8 c8 57 62 20 e0 e0 fd 45 ee 48 57 71 a8 ab 82 6c 2f 61 11 0e 82 61 03 01 be 05 23 13 b8 80 26 a8 72 38 5c 27 99 23 26 8b 8f 1c 98 02 e3 e9 f2 79 28 8b 91 d2 f9 f5 85 52 f6 cf e3 24 0f 14 fd 93 d4 e4 99 7a a7 33 22 ea 88 1d 91 52 ac ea 3d c5 bf 0d b1 9a 90 dc 94 c3 86 28 08 08 67 f9 1e 78 cf 4a 9b 01 38 49 43 38 6d ce c8 dd 5a fe 9e 17 bd dd 71 bd e0 8f c7 f9 39 4c 51 ce 4b c0 9c 14 ce 4c 18 26 0c 6e 92 67 32 ec 57 6d 9d 30 a9 93 af 05 0c 2b e6 fc 4b a4 b1 e7 Data Ascii: Gh(W `7X7I--wc5>g;b*~.h{eBM8JNWb EHWql/aa#&r8\'#&y(R$z3"R=(gxJ8IC8mZq9LQKL&ng2Wm0+K
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 08 b8 c6 9c c3 89 a9 c6 58 a3 5b ac d9 c8 22 51 fe e3 9d b9 13 e0 ec 91 0c ab de 10 9e 82 34 44 d1 5d 78 d3 ec 60 f9 f1 70 26 02 f5 8c 39 9a e4 9c 93 77 ad 8a d4 f8 55 54 47 1c 19 c3 a5 11 ea 06 76 88 97 3c 27 2a 90 6a 72 b3 56 ef 5e 41 c1 c1 4a 91 b8 54 8c 59 28 b8 05 8c af b0 4c b9 25 b3 f5 ad d2 bf 7c 54 8c 56 89 9b b3 44 2b 39 39 3d 63 76 d4 0e c1 66 52 de e5 24 0e a9 91 85 33 85 57 db b5 f6 70 93 67 29 8d 8d 0b c0 7d 4d 87 12 86 6b 6b 43 97 95 eb 04 79 e3 67 fc 67 13 2c 4e 80 dc c5 5f 0a ed db 73 b9 90 44 ab 24 af dc 13 44 e9 74 3a 6a 94 c6 eb 1c 99 5d 03 6a 8b 35 8b 5e a1 3d 34 ca 7a c1 ab 53 c6 c0 fb 94 d1 8a 02 60 21 d4 55 86 90 15 41 da 68 b2 6c b0 38 7e 79 07 0d 8a 7f 32 42 84 8a 2a 0c 64 78 aa a3 76 ca 36 51 94 43 43 66 d3 a1 27 66 a9 8a 7d 71 Data Ascii: X["Q4D]x`p&9wUTGv<'jrV^AJTY(L%\|TVD+99=cvfR$3Wpg)}MkkCygg,N_sD$Dt:j]j5^=4zS`!UAhl8~y2Bdxv6QCCf'f}q
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 0b 54 2b 60 fe 21 0b c1 f5 a2 77 1f a5 68 e1 63 3a a8 79 63 66 07 6d a9 e3 e5 f2 3f c7 51 e0 45 fc 38 fc c7 7d 0e 95 1b 87 28 d6 07 3c d1 dd db 80 3d be 7f cb 4f d1 dc a9 65 23 75 1a 50 6c f6 bd 3e 30 91 0c 12 a0 78 fd 8f 75 3f b4 87 ba 37 cc 57 ef 6e 1c 69 be f9 84 16 23 88 9d 5b 1a bf c3 34 d1 3c 92 40 be b1 1d 9e 65 af d9 37 19 f8 a3 ab 61 ae b9 9d e2 e3 c9 87 1a 62 48 60 58 5f 2b 35 59 04 b2 7f f9 26 f1 bd a9 be 22 85 ae 86 e5 1d 8c 2b 14 d2 46 24 2e 8b 4d e2 14 f3 35 f7 4d a0 9e 49 3b 45 05 1a e8 df 65 f1 70 62 80 ca 14 e4 b4 21 a6 b1 c8 96 41 ba 81 f6 8d 48 41 f3 b3 df 5d 47 a4 60 c5 13 3b 23 f8 be 9b 6d bd b8 a1 7f ed ae b1 d2 9b c1 7c 98 62 7a 88 fe 2f a9 55 be 1c d5 d7 7e dd f4 55 95 55 d9 48 0f 61 7e 64 55 8f 91 16 3d 35 8f 10 c9 f0 f1 d7 bf 2d Data Ascii: T+`!whc:ycfm?QE8}(<=Oe#uPl>0xu?7Wni#[4<@e7abH`X_+5Y&"+F$.M5MI;Eepb!AHA]G`;#m\|bz/U~UUHa~dU=5-
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 3a 23 2b ec 08 ac c4 ee 36 3e 16 a2 3b df d7 59 03 cc 3d 4f af 3f d7 8d 50 b3 e5 17 7c f6 3e de 84 11 7e e4 72 7d 6e 86 bf e9 fe 59 bc 09 63 99 ca a8 da 0e d9 42 b1 3f aa c7 d4 ad 9a 37 40 e8 64 e4 e3 d4 6f b9 d5 4e d2 1e ed 48 e3 8f 50 3e 46 c6 b2 e4 9b c3 13 22 82 f0 8b 65 e4 4c 15 bb 2f ec ec 6e cc 92 06 47 ec c3 50 64 63 7d e7 c5 c9 45 18 d9 43 c3 99 6a c2 dd 6d 9a 3d f6 e8 62 71 6c a4 ee 40 0a 8d d1 95 a9 ba 24 7e 31 f0 5f 72 13 6a 41 b0 41 a2 0d f6 a2 35 f6 7b a6 f8 19 24 30 a6 ab 88 d7 62 28 1f e5 db 5f 6d f2 e0 8f 17 1f 0c 90 d9 2d 2a 3e c5 20 95 41 76 ce 3b 8b 07 cb 7d f9 f6 d6 ee 7b 70 7b fc 87 be 85 8f 9e 99 ab f3 d6 f3 ae 9d d4 7e f5 00 8a 62 59 e1 51 4e 4f 99 95 6a 95 87 a9 f4 07 4e d2 8d ac 87 6c 55 b9 b9 f3 29 1b 6f cc 77 03 ef 41 18 8f cf Data Ascii: :#+6>;Y=O?P\|>~r}nYcB?7@doNHP>F"eL/nGPdc}ECjm=bql@$~1_rjAA5{$0b(_m-*> Av;}{p{~bYQNOjNlU)owA
2024-04-26 18:33:01 UTC	1369	IN	Data Raw: 93 6a 6d 72 cc 57 78 20 5d 6b 37 aa c9 d4 f2 ce 44 eb 1a 39 45 5f c3 5d ab 49 40 71 64 f6 f5 bd 4c 49 73 fc b5 ba fb 0e 3f 42 9a 20 e9 ce e5 b5 e6 bf 95 ea 23 c9 1e fc ea 51 4d f5 ff 00 4d 47 f0 83 f3 3f e9 af 09 8b 71 d8 1b fe 43 5d 17 ad 37 dc d3 a7 4a c3 72 de cb 1c 91 f5 27 bf f5 d6 48 66 7b af ef 8f a6 a3 c0 5e 9b 87 0c cd 25 c9 8f 10 db 43 6c 7e 21 da 00 24 f2 ea 0b 79 6c 0e 38 f9 9e b5 34 83 a8 e3 65 3c a0 c8 ad b8 cc b6 40 2b 2f 88 0d 10 bf 05 f0 2f b0 1c eb aa f5 e9 32 a5 c8 87 16 42 98 4c f2 14 f2 22 cc 56 7d ad 3a 78 82 dc 45 24 bb 9f c3 be cc 2e f8 d3 1b fc b5 ca d1 d1 70 54 1d a0 b7 03 e9 fe fa dc cc 2b db d8 57 f4 d5 7e 88 fe 2a fd ae 34 0e d6 bf 6d 79 e4 3d bf e2 fd f4 23 da 28 1f f4 d2 9d 46 cc 8c 1d 4d 32 90 41 1a 87 23 c5 89 24 e5 8b 0f Data Ascii: jmrWx ]k7D9E_]I@qdLIs?B #QMMG?qC]7Jr'Hf{^%Cl~!$yl84e<@+//2BL"V}:xE$.pT+W~*4my=#(FM2A#$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50180	3.16.63.45	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	1576	OUT	GET /pview?event=pview&hostname=1movieshd.cc&location=%2Fmovie&product=inline-share-buttons&url=https%3A%2F%2F1movieshd.cc%2Fmovie&source=platform&fcmp=false&fcmpv2=false&has_segmentio=false&title=%231Movies%20%7C%20Watch%20Free%20Streaming%20Movies%20and%20TV%20Series%20Online&cms=unknown&publisher=6433be364f61b7001240a339&sop=true&version=st_sop.js&lang=en&fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA&description=1Movies%20Watch%20Movies%20online%20for%20free%2C%20Streaming%20movies%20on%201Movies.to.%201Movies%20is%20the%20biggest%20website%20for%20free%20movies.&ua=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&ua_mobile=false&ua_platform=Windows&ua_full_version_list=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&ua_platform_version=10.0.0&uuid=17beb744-db97-4194-9492-d4a188d44158 HTTP/1.1 Host: l.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:01 UTC	512	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Expose-Headers: stid Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain; charset=utf-8 Date: Fri, 26 Apr 2024 18:33:01 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 67 Connection: Close
2024-04-26 18:33:01 UTC	67	IN	Data Raw: 7b 22 6c 6f 74 61 6d 65 22 3a 22 74 72 75 65 22 2c 22 73 74 61 74 75 73 22 3a 22 74 72 75 65 22 2c 22 73 74 69 64 22 3a 22 5a 47 6b 41 43 57 59 72 38 7a 4d 41 41 41 41 49 41 39 38 59 41 77 3d 3d 22 7d Data Ascii: {"lotame":"true","status":"true","stid":"ZGkACWYr8zMAAAAIA98YAw=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50186	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	836	OUT	GET /trade?IsRealMode=True&hl=de&id=127108&tags=lp0ai49b7tf5&pl=2 HTTP/1.1 Host: app.plus500.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://onlinetopchoice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=.ZLCGAswrtSeIPop225MZwozKgjgqUSKKyn0i106XKA-1714156377022-0.0.1.1-604800000
2024-04-26 18:33:01 UTC	786	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate Content-Type: text/html; charset=utf-8 Date: Fri, 26 Apr 2024 18:33:01 GMT Expires: -1 Location: /trade?IsRealMode=True&id=127108&tags=lp0ai49b7tf5&pl=2 Pragma: no-cache Server: Microsoft-IIS/10.0 Set-Cookie: ASP.NET_SessionId=bvutk4rfjhfganereq3s1h4g; path=/; secure; HttpOnly; SameSite=Lax Set-Cookie: IP=!cGj9nTlJQFIgZ8v0UUWQT2jIv4XvHV+mSxOQhQhwvju0137O545CLLVzUxZLhzVsMISrmeCFrpQKBfI3TPxKrAUkWU10gCR6C8vt5fvz3k9eGXFbScdzpCcgUE491CqzyAigcH0fL4p1fKvFiBq2xq0MKw==; path=/; Httponly; Secure; SameSite=none Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 184 Connection: close
2024-04-26 18:33:01 UTC	184	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 74 72 61 64 65 3f 49 73 52 65 61 6c 4d 6f 64 65 3d 54 72 75 65 26 61 6d 70 3b 69 64 3d 31 32 37 31 30 38 26 61 6d 70 3b 74 61 67 73 3d 6c 70 30 61 69 34 39 62 37 74 66 35 26 61 6d 70 3b 70 6c 3d 32 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/trade?IsRealMode=True&id=127108&tags=lp0ai49b7tf5&pl=2">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50188	34.36.216.150	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	730	OUT	GET /connectors/sharethis/usersync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.sharethis.com%2Fbasis%3Fuid%3D%7BuserId%7D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:01 UTC	545	IN	HTTP/1.1 302 Found set-cookie: ssi=febb0cc9-a867-4e01-8b79-fa3d8a253c66#1714156381801; Domain=.sitescout.com; Expires=Sat, 26-Apr-2025 18:33:01 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/connectors/sharethis/usersync?cookieQ=1&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.sharethis.com%2Fbasis%3Fuid%3D%7BuserId%7D%26gdpr%3D0%26gdpr_consent%3D Content-Length: 0 date: Fri, 26 Apr 2024 18:33:00 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50187	216.200.232.249	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	678	OUT	GET /sync/img?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.sharethis.com%2Fmediamath%3Fuid%3D%5BMM_UUID%5D HTTP/1.1 Host: pixel.mathtag.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:01 UTC	640	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/gif Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Server: MT3 1549 cea2cde master ord ord-pixel-x23 config_version:"2307" Cache-Control: no-cache P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" set-cookie: uuid=6e3f662b-f35d-4100-8a7a-d4dc11b8af80; domain=.mathtag.com; path=/; expires=Sat, 24-May-2025 18:33:01 GMT; SameSite=None; Secure location: https://sync.sharethis.com/mediamath?uid=6e3f662b-f35d-4100-8a7a-d4dc11b8af80&gdpr=0&gdpr_consent= Expires: Fri, 26 Apr 2024 18:33:00 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50192	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	820	OUT	GET /media/bci/navigation_icons/bcime-01.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:02 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:02 GMT Content-Type: image/svg+xml Content-Length: 3363 Connection: close Last-Modified: Tue, 09 Aug 2022 09:54:08 GMT ETag: "d272987f843f0984a81025c1e367a721" Cache-Control: public, max-age=36000 x-amz-version-id: sH3j2VGGOZ4lvSJZV_VHIiBXdic.yQ0G X-Cache: Hit from cloudfront Via: 1.1 dcccf6c408219d8b851fcd12a0068cea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 4LcH2-oN77xaHive9ZO0tdm2QxWlSC2hhsj8iucwY7UdrN7DyTT4qA== Age: 20506 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:02 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8ab68e12576-MIA
2024-04-26 18:33:02 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 37 39 37 39 37 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 66 66 36 62 64 62 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 61 33 31 62 62 37 3b 7d 2e 63 6c 73 2d 35 7b 66 69 6c 6c 3a 23 33 66 65 61 37 33 3b 7d 2e 63 6c 73 2d 36 7b 66 69 6c 6c 3a 23 32 37 36 65 62 36 3b 7d 3c 2f 73 74 79 6c 65 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><defs><style>.cls-1{fill:#f79797;}.cls-2{fill:#fff;}.cls-3{fill:#ff6bdb;}.cls-4{fill:#a31bb7;}.cls-5{fill:#3fea73;}.cls-6{fill:#276eb6;}</style>
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 31 2c 36 2e 33 32 2c 2e 39 38 2c 39 2e 32 31 73 33 2e 34 36 2c 35 2e 33 2c 36 2e 32 2c 36 2e 38 38 63 2e 32 33 2c 2e 31 33 2c 2e 33 39 2c 2e 33 35 2c 2e 34 36 2c 2e 36 31 73 2e 30 33 2c 2e 35 33 2d 2e 31 2c 2e 37 36 2d 2e 33 35 2c 2e 34 2d 2e 36 2c 2e 34 37 2d 2e 35 33 2c 2e 30 33 2d 2e 37 36 2d 2e 31 63 2d 33 2e 31 31 2d 31 2e 37 39 2d 35 2e 35 36 2d 34 2e 35 32 2d 37 2e 30 33 2d 37 2e 38 2d 31 2e 34 36 2d 33 2e 32 37 2d 31 2e 38 35 2d 36 2e 39 33 2d 31 2e 31 31 2d 31 30 2e 34 33 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 33 2c 33 34 2e 32 35 63 2d 2e 32 35 2d 2e 30 38 2d 2e 34 37 2d 2e 32 35 2d 2e 35 39 2d 2e 34 39 2d 2e 31 32 2d 2e 32 33 2d 2e 31 35 2d 2e 35 31 2d 2e 30 37 2d 2e 37 36 73 2e 32 35 2d 2e 34 37 Data Ascii: 1,6.32,.98,9.21s3.46,5.3,6.2,6.88c.23,.13,.39,.35,.46,.61s.03,.53-.1,.76-.35,.4-.6,.47-.53,.03-.76-.1c-3.11-1.79-5.56-4.52-7.03-7.8-1.46-3.27-1.85-6.93-1.11-10.43Z"/><path class="cls-1" d="M13,34.25c-.25-.08-.47-.25-.59-.49-.12-.23-.15-.51-.07-.76s.25-.47
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 31 2e 32 63 2e 31 33 2c 2e 30 32 2c 2e 32 36 2c 2e 30 36 2c 2e 33 38 2c 2e 31 33 2c 2e 31 32 2c 2e 30 37 2c 2e 32 32 2c 2e 31 36 2c 2e 33 2c 2e 32 36 2c 2e 30 38 2c 2e 31 31 2c 2e 31 34 2c 2e 32 33 2c 2e 31 37 2c 2e 33 36 2c 2e 30 33 2c 2e 31 33 2c 2e 30 34 2c 2e 32 36 2c 2e 30 32 2c 2e 34 2d 2e 30 32 2c 2e 31 33 2d 2e 30 37 2c 2e 32 36 2d 2e 31 34 2c 2e 33 37 73 2d 2e 31 36 2c 2e 32 31 2d 2e 32 37 2c 2e 32 39 2d 2e 32 33 2c 2e 31 33 2d 2e 33 36 2c 2e 31 36 63 2d 2e 31 33 2c 2e 30 33 2d 2e 32 36 2c 2e 30 33 2d 2e 34 2c 30 2d 33 2e 32 31 2d 2e 34 39 2d 36 2e 34 39 2c 2e 30 37 2d 39 2e 33 35 2c 31 2e 36 2d 32 2e 38 36 2c 31 2e 35 33 2d 35 2e 31 35 2c 33 2e 39 35 2d 36 2e 35 32 2c 36 2e 38 39 2d 2e 31 31 2c 2e 32 34 2d 2e 33 32 2c 2e 34 32 2d 2e 35 37 2c 2e Data Ascii: 1.2c.13,.02,.26,.06,.38,.13,.12,.07,.22,.16,.3,.26,.08,.11,.14,.23,.17,.36,.03,.13,.04,.26,.02,.4-.02,.13-.07,.26-.14,.37s-.16,.21-.27,.29-.23,.13-.36,.16c-.13,.03-.26,.03-.4,0-3.21-.49-6.49,.07-9.35,1.6-2.86,1.53-5.15,3.95-6.52,6.89-.11,.24-.32,.42-.57,.
2024-04-26 18:33:02 UTC	7	IN	Data Raw: 3e 3c 2f 73 76 67 3e Data Ascii: ></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50193	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	859	OUT	GET /media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%20Smart_36x36.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:02 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:02 GMT Content-Type: image/svg+xml Content-Length: 3733 Connection: close Last-Modified: Mon, 20 Jun 2022 12:10:08 GMT ETag: "6fc27648d52718b6656f9ab05442ca95" Cache-Control: public, max-age=36000 x-amz-version-id: AgumetpTyH4I8GAek1ENvlcJhFsIf4jX X-Cache: Hit from cloudfront Via: 1.1 04a7e6061ff44278cba30d4bada61a54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Fy_AQINACJhsSj4hMRuyCgRGqm2fNRHIF0fMWOZA8i4bxlOzI7YcOw== Age: 20505 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:02 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8ab685d7473-MIA
2024-04-26 18:33:02 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 33 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 2e 33 33 37 2c 36 2e 33 35 2c 31 2e 35 36 2c 31 32 2e 38 34 2c 37 2e 31 38 2c 31 36 2e 30 38 35 63 30 2e 34 37 36 2c 30 2e 32 37 39 2c 30 2e 36 33 36 2c 30 2e 38 39 32 2c 30 2e 33 35 37 2c 31 2e 33 36 38 63 2d 30 2e 32 37 37 2c 30 2e 34 37 32 2d 30 2e 38 38 31 2c 30 2e 36 33 34 2d 31 2e 33 35 37 2c 30 2e 33 36 34 0a 09 09 43 33 2e 31 33 32 2c 32 39 2e 30 34 33 2d 30 2e 31 35 31 2c 32 31 2e 36 38 37 2c 31 2e 33 36 35 2c 31 34 2e 34 39 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 33 2e 30 30 34 2c 33 34 2e 32 34 39 63 2d 30 2e 35 32 38 2d 30 2e 31 36 33 2d 30 2e 38 32 33 2d 30 2e 37 32 33 2d 30 2e 36 36 2d 31 2e 32 35 73 30 2e 37 32 33 2d 30 2e 38 32 33 2c 31 2e 32 35 2d 30 2e 36 36 0a 09 09 63 36 2e 39 31 36 2c 32 Data Ascii: .337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364C3.132,29.043-0.151,21.687,1.365,14.49z"/><path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66c6.916,2
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 3c 67 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 35 22 20 64 3d 22 4d 38 2e 38 35 37 2c 32 31 2e 31 30 32 63 31 2e 31 33 2c 30 2c 31 2e 39 33 2d 30 2e 36 34 36 2c 31 2e 39 33 2d 31 2e 36 37 35 63 30 2d 30 2e 38 39 32 2d 30 2e 35 31 2d 31 2e 34 30 32 2d 31 2e 34 31 32 2d 31 2e 37 34 32 6c 2d 30 2e 37 32 32 2d 30 2e 32 38 0a 09 09 09 63 2d 30 2e 36 32 2d 30 2e 32 33 2d 30 2e 39 31 2d 30 2e 34 36 2d 30 2e 39 31 2d 30 2e 39 37 63 30 2d 30 2e 35 30 31 2c 30 2e 34 39 33 2d 30 2e 38 33 32 2c 31 2e 30 38 38 2d 30 2e 38 33 32 63 30 2e 35 31 39 2c 30 2c 30 2e 38 38 34 2c 30 2e 32 32 39 2c 31 2e 31 39 39 2c 30 2e 35 39 34 6c 30 2e 35 37 2d 30 2e 35 31 0a 09 09 09 63 2d 30 2e 33 36 36 2d 30 2e 34 38 34 2d 30 2e 39 39 35 2d 30 2e 38 32 34 2d 31 2e 37 35 Data Ascii: <g><path class="st5" d="M8.857,21.102c1.13,0,1.93-0.646,1.93-1.675c0-0.892-0.51-1.402-1.412-1.742l-0.722-0.28c-0.62-0.23-0.91-0.46-0.91-0.97c0-0.501,0.493-0.832,1.088-0.832c0.519,0,0.884,0.229,1.199,0.594l0.57-0.51c-0.366-0.484-0.995-0.824-1.75
2024-04-26 18:33:02 UTC	377	IN	Data Raw: 34 33 2d 30 2e 33 37 34 2d 30 2e 30 34 33 63 2d 30 2e 35 31 2c 30 2d 30 2e 39 37 37 2c 30 2e 33 32 33 2d 31 2e 31 34 37 2c 30 2e 36 37 32 56 31 36 2e 37 35 68 2d 30 2e 37 33 31 43 32 34 2e 36 36 37 2c 31 36 2e 37 35 2c 32 34 2e 36 36 37 2c 32 31 2c 32 34 2e 36 36 37 2c 32 31 7a 0a 09 09 09 20 4d 32 39 2e 35 33 37 2c 32 31 2e 30 34 33 63 30 2e 34 33 34 2c 30 2c 30 2e 37 34 2d 30 2e 31 31 31 2c 30 2e 39 31 38 2d 30 2e 31 39 36 6c 2d 30 2e 32 32 2d 30 2e 36 32 63 2d 30 2e 31 38 36 2c 30 2e 31 30 39 2d 30 2e 33 39 38 2c 30 2e 31 36 34 2d 30 2e 36 31 33 2c 30 2e 31 36 31 63 2d 30 2e 33 38 32 2c 30 2d 30 2e 36 38 2d 30 2e 31 39 36 2d 30 2e 36 38 2d 30 2e 37 34 0a 09 09 09 76 2d 32 2e 32 32 37 68 31 2e 33 31 38 56 31 36 2e 37 35 68 2d 31 2e 33 31 38 76 2d 31 2e Data Ascii: 43-0.374-0.043c-0.51,0-0.977,0.323-1.147,0.672V16.75h-0.731C24.667,16.75,24.667,21,24.667,21z M29.537,21.043c0.434,0,0.74-0.111,0.918-0.196l-0.22-0.62c-0.186,0.109-0.398,0.164-0.613,0.161c-0.382,0-0.68-0.196-0.68-0.74v-2.227h1.318V16.75h-1.318v-1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50191	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	856	OUT	GET /media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%2010_36x36.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:02 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:02 GMT Content-Type: image/svg+xml Content-Length: 3253 Connection: close Last-Modified: Mon, 20 Jun 2022 12:10:07 GMT ETag: "f80071b260fe4d3032349d75f41379eb" Cache-Control: public, max-age=36000 x-amz-version-id: yB47V7xIJmffa0.f_tu4C3PUY3oWJUnr X-Cache: Miss from cloudfront Via: 1.1 d1c64d10e2bd86b43a04bfb63e7766c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: M0QP4MxXsw4KIQ9OrAc5VsFJANijcZzvcOGGM5kuEM9Rl1Hz2En-Wg== CF-Cache-Status: HIT Age: 20506 Expires: Sat, 27 Apr 2024 04:33:02 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8ab6f56dae9-MIA
2024-04-26 18:33:02 UTC	617	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 33 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 31 2e 33 33 37 2c 36 2e 33 35 2c 31 2e 35 36 2c 31 32 2e 38 34 2c 37 2e 31 38 2c 31 36 2e 30 38 35 63 30 2e 34 37 36 2c 30 2e 32 37 39 2c 30 2e 36 33 36 2c 30 2e 38 39 32 2c 30 2e 33 35 37 2c 31 2e 33 36 38 63 2d 30 2e 32 37 37 2c 30 2e 34 37 32 2d 30 2e 38 38 31 2c 30 2e 36 33 34 2d 31 2e 33 35 37 2c 30 2e 33 36 34 0a 09 09 43 33 2e 31 33 32 2c 32 39 2e 30 34 33 2d 30 2e 31 35 31 2c 32 31 2e 36 38 37 2c 31 2e 33 36 35 2c 31 34 2e 34 39 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 33 2e 30 30 34 2c 33 34 2e 32 34 39 63 2d 30 2e 35 32 38 2d 30 2e 31 36 33 2d 30 2e 38 32 33 2d 30 2e 37 32 33 2d 30 2e 36 36 2d 31 2e 32 35 73 30 2e 37 32 33 2d 30 2e 38 32 33 2c 31 2e 32 35 2d 30 2e 36 36 0a 09 09 63 36 2e 39 31 36 2c Data Ascii: 1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364C3.132,29.043-0.151,21.687,1.365,14.49z"/><path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66c6.916,
2024-04-26 18:33:02 UTC	1267	IN	Data Raw: 09 3c 67 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 35 22 20 64 3d 22 4d 37 2e 37 35 33 2c 32 31 68 32 2e 31 36 63 31 2e 32 32 33 2c 30 2c 32 2e 30 32 32 2d 30 2e 37 35 37 2c 32 2e 30 32 32 2d 31 2e 37 36 63 30 2d 30 2e 38 30 37 2d 30 2e 34 35 39 2d 31 2e 32 33 32 2d 31 2e 30 34 35 2d 31 2e 34 34 34 0a 09 09 09 63 30 2e 33 38 32 2d 30 2e 32 33 38 2c 30 2e 36 34 36 2d 30 2e 36 33 38 2c 30 2e 36 34 36 2d 31 2e 32 33 33 63 30 2d 30 2e 38 35 2d 30 2e 36 38 2d 31 2e 35 39 38 2d 31 2e 38 30 32 2d 31 2e 35 39 38 68 2d 31 2e 39 38 56 32 31 48 37 2e 37 35 33 7a 20 4d 38 2e 35 34 33 2c 31 37 2e 35 35 38 76 2d 31 2e 38 37 39 68 31 2e 31 39 0a 09 09 09 63 30 2e 36 34 37 2c 30 2c 31 2e 30 33 2c 30 2e 34 33 34 2c 31 2e 30 33 2c 30 2e 39 34 33 63 30 2c 30 Data Ascii: <g><path class="st5" d="M7.753,21h2.16c1.223,0,2.022-0.757,2.022-1.76c0-0.807-0.459-1.232-1.045-1.444c0.382-0.238,0.646-0.638,0.646-1.233c0-0.85-0.68-1.598-1.802-1.598h-1.98V21H7.753z M8.543,17.558v-1.879h1.19c0.647,0,1.03,0.434,1.03,0.943c0,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50194	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	856	OUT	GET /media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%2025_36x36.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:02 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:02 GMT Content-Type: image/svg+xml Content-Length: 3531 Connection: close Last-Modified: Mon, 20 Jun 2022 12:10:07 GMT ETag: "d805465c3e3a81327e19e15a83b2632f" Cache-Control: public, max-age=36000 x-amz-version-id: dLp82pYSkccgZjy4URAy9C.U0ckuz4.e X-Cache: Miss from cloudfront Via: 1.1 0bca35acf826729de8b75fb344bf9f44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Mbxo-VpbKFjJca3ESsnnQubqeHTmZmFOat1bAIwRVY9vAEC2FdXG2g== CF-Cache-Status: HIT Age: 20505 Expires: Sat, 27 Apr 2024 04:33:02 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8aba87aa540-MIA
2024-04-26 18:33:02 UTC	617	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 33 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 31 2e 33 33 37 2c 36 2e 33 35 2c 31 2e 35 36 2c 31 32 2e 38 34 2c 37 2e 31 38 2c 31 36 2e 30 38 35 63 30 2e 34 37 36 2c 30 2e 32 37 39 2c 30 2e 36 33 36 2c 30 2e 38 39 32 2c 30 2e 33 35 37 2c 31 2e 33 36 38 63 2d 30 2e 32 37 37 2c 30 2e 34 37 32 2d 30 2e 38 38 31 2c 30 2e 36 33 34 2d 31 2e 33 35 37 2c 30 2e 33 36 34 0a 09 09 43 33 2e 31 33 32 2c 32 39 2e 30 34 33 2d 30 2e 31 35 31 2c 32 31 2e 36 38 37 2c 31 2e 33 36 35 2c 31 34 2e 34 39 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 33 2e 30 30 34 2c 33 34 2e 32 34 39 63 2d 30 2e 35 32 38 2d 30 2e 31 36 33 2d 30 2e 38 32 33 2d 30 2e 37 32 33 2d 30 2e 36 36 2d 31 2e 32 35 73 30 2e 37 32 33 2d 30 2e 38 32 33 2c 31 2e 32 35 2d 30 2e 36 36 0a 09 09 63 36 2e 39 31 36 2c Data Ascii: 1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364C3.132,29.043-0.151,21.687,1.365,14.49z"/><path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66c6.916,
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 09 3c 67 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 35 22 20 64 3d 22 4d 36 2e 39 36 37 2c 32 31 68 32 2e 31 35 39 63 31 2e 32 32 34 2c 30 2c 32 2e 30 32 33 2d 30 2e 37 35 37 2c 32 2e 30 32 33 2d 31 2e 37 36 63 30 2d 30 2e 38 30 37 2d 30 2e 34 35 39 2d 31 2e 32 33 32 2d 31 2e 30 34 35 2d 31 2e 34 34 34 0a 09 09 09 63 30 2e 33 38 32 2d 30 2e 32 33 38 2c 30 2e 36 34 36 2d 30 2e 36 33 38 2c 30 2e 36 34 36 2d 31 2e 32 33 33 63 30 2d 30 2e 38 35 2d 30 2e 36 38 2d 31 2e 35 39 38 2d 31 2e 38 30 33 2d 31 2e 35 39 38 68 2d 31 2e 39 38 43 36 2e 39 36 37 2c 31 34 2e 39 36 35 2c 36 2e 39 36 37 2c 32 31 2c 36 2e 39 36 37 2c 32 31 7a 20 4d 37 2e 37 35 37 2c 31 37 2e 35 35 38 76 2d 31 2e 38 37 39 0a 09 09 09 68 31 2e 31 39 63 30 2e 36 34 36 2c 30 2c 31 2e Data Ascii: <g><path class="st5" d="M6.967,21h2.159c1.224,0,2.023-0.757,2.023-1.76c0-0.807-0.459-1.232-1.045-1.444c0.382-0.238,0.646-0.638,0.646-1.233c0-0.85-0.68-1.598-1.803-1.598h-1.98C6.967,14.965,6.967,21,6.967,21z M7.757,17.558v-1.879h1.19c0.646,0,1.
2024-04-26 18:33:02 UTC	176	IN	Data Raw: 63 30 2e 37 34 37 2c 30 2c 31 2e 32 36 36 2c 30 2e 35 37 38 2c 31 2e 32 36 36 2c 31 2e 33 63 30 2c 30 2e 37 31 34 2d 30 2e 35 32 37 2c 31 2e 32 39 32 2d 31 2e 32 34 31 2c 31 2e 32 39 32 63 2d 30 2e 37 32 33 2c 30 2d 31 2e 32 34 31 2d 30 2e 34 33 33 2d 31 2e 33 38 36 2d 31 2e 30 32 6c 2d 30 2e 37 33 39 2c 30 2e 32 35 35 0a 09 09 09 43 32 35 2e 35 39 39 2c 32 30 2e 35 30 37 2c 32 36 2e 35 35 31 2c 32 31 2e 30 38 35 2c 32 37 2e 35 30 33 2c 32 31 2e 30 38 35 7a 22 2f 3e 0a 09 3c 2f 67 3e 0a 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: c0.747,0,1.266,0.578,1.266,1.3c0,0.714-0.527,1.292-1.241,1.292c-0.723,0-1.241-0.433-1.386-1.02l-0.739,0.255C25.599,20.507,26.551,21.085,27.503,21.085z"/></g></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50190	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	929	OUT	GET /xxrz/250x400/793/81/a6/81a6f809123d73982bcf71dae330052f/81a6f809123d73982bcf71dae330052f.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:02 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/jpeg Content-Length: 66611 Connection: close Last-Modified: Fri, 26 Apr 2024 13:52:15 GMT Vary: Accept-Encoding ETag: W/"662bb18f-c41c" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1757 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2FppXCHHc6bkZG%2FkG1rgFT%2FZIHxARjEA9ZF4iKx4fsVr9vbugrrp5rfGIIRq3OM3EnUSPg9CYC%2FrsN8l6HfxZVIo5ZO24J%2F0wAIqWmiRmoIA0rjiIcmK78Xi0amzNlXy3GS%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8ab689f8ddc-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:02 UTC	643	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: da 6e 4c 01 39 11 d6 c4 d6 e9 2a 22 de 8a 2e 08 fe 77 59 a6 65 c8 53 11 e0 2d 1d 16 7e 41 e5 ab 3d f7 9b ea c3 76 f5 c5 ee 6d 2f 0a 68 be dc 35 26 c8 cb 20 e7 31 8a 4f ad b7 6f 62 96 f5 03 9b 7d 87 8a 6d 41 68 e1 42 a6 da 7a eb 1c 8b 37 86 36 a1 10 f7 92 5a 09 13 64 e3 bd dc 11 3c c5 63 9e 92 9d 42 c2 ac f6 e8 f1 af 9c ae d7 19 3b fe 24 03 49 c7 57 fc 6c 82 c2 83 63 c1 ec f2 fb e9 1e 62 9d 36 ed 6b 8f 2f 8d 12 35 24 19 23 83 7c 4e 73 fa 47 95 53 e8 6b 5e c7 b3 01 b4 f1 1e 9a d6 98 ed 75 a5 e8 b7 5c 44 20 35 9d 38 51 59 6c 43 da 47 42 22 b1 ce 8f 39 38 fd b2 46 4d 69 c9 26 95 c0 6c 04 3a 1e 7d 8b a5 57 c1 bc e4 72 a6 9e 47 28 a2 b5 98 f4 70 5b 68 75 14 7f 96 dc b6 6c d1 e5 db 15 2d 71 49 2b b7 cc d4 91 3d 13 a9 2f 1a 31 da 51 10 04 71 f2 e1 b1 c2 f3 fa 88 Data Ascii: nL9*".wYeS-~A=vm/h5& 1Oob}mAhBz76Zd<cB;$IWlcb6k/5$#\|NsGSk^u\D 58QYlCGB"98FMi&l:}WrG(p[hul-qI+=/1Qq
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: a0 1e bd cf 84 25 2f d7 02 28 43 03 72 8d 53 06 5c 75 d9 50 01 d5 f1 54 64 f1 3b e2 c7 1d 59 a8 7d ed 7f 52 7e f6 7a 12 71 91 47 24 e9 33 63 bb 5a 5d 01 23 41 8a 3e 41 f4 0f a1 8f 53 48 10 a8 27 74 29 7c 80 b9 d9 6a 91 30 b9 a1 e8 98 6a 38 44 d9 d2 72 fe f0 53 75 12 57 9f 6b bf 4b 79 b3 78 28 67 a9 9c 83 ec 47 63 a4 95 52 db d4 58 01 be d5 12 cc 12 09 26 a2 45 ca 75 86 11 6f e0 26 0f 67 25 9e a4 0f ae f5 3c 80 35 2c ef 8c 31 0e ba 4b 11 98 a4 da 93 34 a9 74 7a 45 16 d9 e4 be fc 40 26 0f 66 ed 8a 45 45 ca 42 c9 e9 c4 12 f8 63 25 f6 4c d9 23 61 1a 16 cb c1 5a 9b 35 dd 00 b8 6a 32 8f 59 d5 17 a5 30 46 d9 51 52 00 38 b1 a9 1a 20 d1 09 0c e4 8c 84 b2 3b 5b 18 b5 42 d4 0d 6a f3 5b 67 6b 64 7e 4b 14 0b 63 32 38 b3 63 55 28 88 49 52 d6 d6 bd 99 2e 89 b5 d6 67 ac Data Ascii: %/(CrS\uPTd;Y}R~zqG$3cZ]#A>ASH't)\|j0j8DrSuWkKyx(gGcRX&Euo&g%<5,1K4tzE@&fEEBc%L#aZ5j2Y0FQR8 ;[Bj[gkd~Kc28cU(IR.g
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 1d 05 48 91 a9 09 dd 99 65 d4 da 2a f2 c6 ea cd 33 d9 67 b7 ea f7 2c d7 49 e0 b9 30 91 e2 70 9f dc dc 76 22 a2 2c 92 05 c7 89 86 4f 82 2e 79 17 91 48 50 2b ee 65 70 e3 b9 71 0e ec a1 01 25 d8 ea f0 a1 02 9f 64 ae 8b 65 61 4d a0 24 4c b1 d5 8d 60 24 8b b6 02 45 ad fe df 6d 16 8a a7 66 33 bf 69 c7 9e d1 6a 6d 63 e5 d4 0a 4c 78 74 64 fd 32 2b 09 00 db 9e d1 25 5a 89 c2 89 8e 76 32 29 1c 90 cd 22 be 45 2e c0 b6 8e 65 58 95 89 8e cf eb 22 2f 6e 15 7e 1f 48 d0 0b 27 24 57 94 38 a9 c6 77 65 21 a4 9c 92 ad a3 56 eb da df ed 60 30 9c b8 45 95 29 55 4e 77 c7 8a 08 91 b1 35 c8 52 a4 9a 2b 1c b0 58 c1 24 d2 04 ab bf 6e 52 b5 c0 ed 1d 4a 8d b0 a0 a7 f7 aa b8 2e 50 06 17 03 00 3b 48 d4 22 e9 b5 cf 91 6a 2a a2 28 fb b9 c7 27 1f 4f 93 b2 28 d7 0e de 06 b9 ee b9 40 65 71 Data Ascii: He3g,I0pv",O.yHP+epq%deaM$L`$Emf3ijmcLxtd2+%Zv2)"E.eX"/n~H'$W8we!V`0E)UNw5R+X$nRJ.P;H"j('O(@eq
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 3d 40 b3 8c 80 77 a6 50 1a a8 86 68 08 8a ec 92 93 58 d9 2e 59 0d ad 3b 4e 3d b6 07 9e 08 49 e2 2c 22 b5 ca 0e 13 22 7c cd 1f 6b ae 5b 80 ce 8b 39 01 ee 9b 51 d6 25 16 a5 58 ca d8 1b 0c af fe c5 04 85 95 59 be 8d b0 9f 77 20 92 2d 63 76 3b 0c ff 00 1a 0d ce c8 48 83 44 7f ba 11 c9 93 c9 dc df 4e dc 67 08 84 6e 6d 91 db 13 66 b6 00 e4 c5 82 25 94 28 ed 20 44 5d aa 7d 45 a4 59 10 ef 21 59 c2 2d 7c 8d 26 65 94 8b 69 8e f2 47 b8 ad 79 5b 4a 71 87 03 60 d5 59 53 df 51 5d 45 4d 14 ec 8d 59 0e 23 23 37 2e 54 53 e5 4a 22 46 a9 ba 9f e4 9d a9 d9 23 eb f7 38 24 b4 ae db 2b 1f 14 91 d5 58 ef e4 a2 44 72 b5 fc aa 3f 9c 71 13 84 fb a5 46 7b 7a e8 42 1d 86 e9 44 07 ec 77 b5 97 50 eb 6c bd 5d 35 59 9a c9 0a e4 1c 5e a1 47 58 84 d5 f6 57 d7 cd b0 87 07 62 ac 91 10 b5 92 Data Ascii: =@wPhX.Y;N=I,""\|k[9Q%XYw -cv;HDNgnmf%( D]}EY!Y-\|&eiGy[Jq`YSQ]EMY##7.TSJ"F#8$+XDr?qF{zBDwPl]5Y^GXWb
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: cb e6 fa 3b f8 f3 9e f8 9c e3 51 79 c6 e2 67 91 7b 7b 5b 91 85 61 33 1a 36 46 49 71 d4 23 8d 10 14 f1 aa 01 ea a6 4a 8e a1 af d7 1c ef d3 4b fe ea 1d 78 7c f2 ba d0 04 1e e5 a7 ac 6f d4 77 da 71 eb 57 7b dd 15 33 75 ae a4 b0 a3 da 55 33 5f a4 97 b1 dc 6c 3a b6 bb 0a aa da d5 7f 4e 6f cb 0c ee d6 27 3d ae 7f b2 bf 38 c5 57 67 3c e3 31 7f 90 db ca a0 9a ad fe 2f e5 30 e5 0c 08 f1 40 80 63 18 18 51 8c b2 64 3f 5d f1 c5 85 50 57 5b d0 ea b6 08 b1 e2 9d 84 1c 36 a4 67 6f 9a 75 de d2 2b 0d 32 e3 54 8d d6 90 86 e7 58 12 ad c7 42 6d 24 db 6d 74 9a 64 68 f6 1b 74 da 68 fa d6 c1 ae 7f b9 d1 4e 47 11 dd 25 d6 81 b3 ee 37 d1 c5 16 e2 3c 16 1b 56 5c 77 e5 39 c7 2e 35 39 5e 38 c7 3b e6 27 fb a3 b0 ab f3 47 fb 43 11 24 c9 8c 2f 58 6b 47 35 1e c8 fd 85 96 07 c3 c9 f1 e5 Data Ascii: ;Qyg{{[a36FIq#JKx\|owqW{3uU3_l:No'=8Wg<1/0@cQd?]PW[6gou+2TXBm$mtdhthNG%7<V\w9.59^8;'GC$/XkG5
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 17 e3 dd ca 93 ad 63 16 50 e3 60 11 3c 6f fd 23 e7 41 c8 d4 56 37 10 77 d8 7d dc 65 d1 46 7d d9 e5 a9 f5 a5 af 3a 80 a4 25 59 13 d0 9e 44 f8 76 7b 52 2c 3d 8d 8e 8d 2e 11 06 99 80 13 f8 a3 d6 f5 88 54 41 ce 11 72 6f c6 d3 03 b6 de b4 db a5 21 26 26 40 fc eb 69 2a 77 6a ce 94 5c da 14 4a 8f 46 c0 01 e7 35 87 e9 b8 91 3c ab 6b 36 e2 f1 4d 6e d5 01 37 23 b2 51 eb 6a ce a5 5a 8e 1f 32 92 54 98 29 d0 da f4 86 42 b2 84 21 59 ed c2 94 b5 33 0d 2d 0a 94 8f 8f b4 5d 34 4c d3 46 13 14 e2 73 47 ef 95 61 52 dc 80 e6 48 03 de e3 11 a5 62 59 71 d2 32 12 84 85 19 22 f6 30 29 a0 51 94 04 e8 00 be 96 1c a8 b3 9b 28 5a 42 ac 4f 68 2a b1 8f 21 35 85 18 66 1c cf 89 6d d5 b6 02 82 43 4b c9 2a 8b 66 b1 24 03 16 11 a6 a2 99 c2 bb 8c 7e 01 93 cc 99 f4 ac 27 f0 c3 eb 85 97 82 13 Data Ascii: cP`<o#AV7w}eF}:%YDv{R,=.TAro!&&@iwj\JF5<k6Mn7#QjZ2T)B!Y3-]4LFsGaRHbYq2"0)Q(ZBOh!5fmCK*f$~'
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 96 41 2e 2b ce 86 25 c7 d6 01 51 8d 7b 7b 4d 15 a5 26 dc 34 ac 6e 25 4b 77 2b 6a b2 04 1e f2 6f 4d 2c 25 70 75 ad a0 02 90 c3 c9 3d 20 72 ab c8 41 f4 35 88 37 cb 6b 90 60 d6 19 bc 3e d3 c2 0c a1 0c e3 10 89 6d 68 84 a5 6a 4e 89 58 d0 4f 05 01 e0 69 b7 1c 5b 99 4b 8a 69 c6 42 da 75 93 d5 59 d2 fc 8a 4d c4 7c ec d1 43 84 a1 51 71 04 13 a8 f0 83 58 5c 4a 9a 60 49 4a 50 84 c9 51 16 01 20 73 34 ce 29 c7 f7 b8 85 9b 38 af b2 91 74 b6 3a ba cc 13 d6 23 99 a5 92 7a 13 d6 36 93 c6 9f 50 65 93 7b 7c ff 00 5a 6d c4 a9 19 75 0a fd 2b 69 61 32 cb 89 1c 7e 34 d2 e5 b0 0e 96 35 bd 08 16 a7 b1 3d b4 97 35 27 de ad a1 8c c0 6c c3 38 8b a9 44 41 4a 73 5b 99 b1 8a 40 6b 1d 85 de b2 4a 82 d2 56 df 78 82 3c e9 6c ca 52 a8 bc 90 7c 0d 60 02 d9 da 19 82 88 19 64 23 44 90 a3 3c Data Ascii: A.+%Q{{M&4n%Kw+joM,%pu= rA57k`>mhjNXOi[KiBuYM\|CQqX\J`IJPQ s4)8t:#z6Pe{\|Zmu+ia2~45=5'l8DAJs[@kJVx<lR\|`d#D<
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: ca c2 98 3d 12 b3 24 aa 6b a4 b7 0a 80 9b fa 70 a2 da b5 54 23 fa 8e bd d4 77 29 be f0 aa 3e e0 b7 a9 14 ea b0 b9 bf 96 ea e7 f1 84 8e 1c 32 9a de e1 bf e5 d7 ff 00 78 ff 00 f3 5b dc 37 f9 2e 5e 26 1e e4 47 e1 a0 70 84 4e 57 c7 6e 74 2b ff 00 51 51 86 50 8d fb ad f6 2d b0 53 e3 95 53 e9 5b 8c dd 47 d9 5f 61 59 42 bc 9c 03 e3 4b 6d 6d c6 71 13 a5 c1 04 76 10 4f d4 6e 97 7b 72 a4 12 94 90 38 26 2b 78 b0 20 28 8a 2b 51 33 34 e2 e4 01 1c fe 54 a5 5b da 0c 51 11 40 4f d5 06 05 44 28 f8 52 dd e8 91 59 ad 44 9a 57 0a 2a f6 81 1e d2 67 ea af 87 8f ca 96 65 0a f0 a5 28 c1 bf b1 46 23 da 9f f7 1f ff c4 00 3e 11 00 02 01 02 04 01 09 05 07 03 02 07 00 00 00 00 01 02 03 00 11 04 12 21 41 31 05 13 22 32 51 61 71 81 91 20 52 a1 b1 d1 10 14 23 42 62 c1 f0 72 e1 f1 30 82 Data Ascii: =$kpT#w)>2x[7.^&GpNWnt+QQP-SS[G_aYBKmmqvOn{r8&+x (+Q34T[Q@OD(RYDW*ge(F#>!A1"2Qaq R#Bbr0
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 6b 13 a8 71 c5 6f b7 87 ef 5f 7c 8f 36 55 c3 25 ef 6b b1 27 b2 81 25 8b 58 27 0d 07 f9 ab 06 53 be b5 20 b5 05 2f 1b 58 12 7a 34 ac 54 95 df e5 58 f3 7c 91 f1 25 85 c7 a5 23 98 a6 84 f0 b6 5f 2a c2 0e 70 f3 84 02 32 79 1b 81 f4 a9 b0 b0 b4 9a 46 b4 30 f1 c0 a7 22 28 62 36 14 16 b0 d1 05 4b 9b 74 b5 e1 4d 13 32 e9 51 e6 57 64 71 61 6d 3d 75 f9 d6 1c 74 b3 1d b8 d4 98 50 b6 96 2b e5 23 a4 09 bf 65 c8 a4 20 23 a1 5c d9 b2 14 7f 77 86 a3 c7 81 a5 25 0d c5 38 12 1b 91 52 bb 44 99 57 43 db 44 71 6f 36 3d c2 94 19 b1 49 b9 cc 2b 15 03 1e 1a 15 b5 72 26 3c e9 04 a7 50 00 1f 4a 61 d2 bf 65 18 c9 37 a4 c3 8d 34 a3 1f 00 36 15 85 83 13 8b 1f 85 a0 4d f4 17 3d 83 5d 6b 11 9f 0e e5 24 b5 d4 d8 fc 3e b4 24 b3 36 d7 15 83 98 3e 0f 23 0b eb c7 d3 6a 90 28 e0 7a ae 58 78 Data Ascii: kqo_\|6U%k'%X'S /Xz4TX\|%#_*p2yF0"(b6KtM2QWdqam=utP+#e #\w%8RDWCDqo6=I+r&<PJae746M=]k$>$6>#j(zXx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50189	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:01 UTC	929	OUT	GET /xxrz/250x400/793/05/d2/05d2af3ecc1a6d545c293968589b68fe/05d2af3ecc1a6d545c293968589b68fe.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:02 UTC	730	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:01 GMT Content-Type: image/jpeg Content-Length: 70571 Connection: close Last-Modified: Fri, 26 Apr 2024 13:51:26 GMT Vary: Accept-Encoding ETag: W/"662bb15e-d35c" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5528 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eonwHDMaGkETa%2Fi2y0dO%2FsTvDIic8VW7t0fFYxi7%2F9GHsj8%2Fek64Toqb3wjDTVRC7xP%2B9P%2BkdTO2Lt40xB5aEXNJhdyA3FJrSrYMVfw6CGUUE%2Fl%2Bx11oQpzY2iarHS3JVLgU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8ab4fdba67b-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:02 UTC	639	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 6c 07 5b 2a 10 b4 89 99 c3 1b 4d 48 cb 4a 3c 14 82 47 1a 51 72 ec 6d 58 30 d3 e0 5a 4f b5 59 17 53 e1 9f 74 8d b2 97 a6 c0 21 0c 67 0d 5c 4e 0b f6 58 45 cc f8 63 a9 c2 3c 18 93 19 d3 2e a4 1f 19 98 d6 97 8f e4 44 85 b8 1e 12 46 c0 28 f1 76 23 64 9d a7 61 f7 54 57 6f 1e 8f 0f 62 04 f4 3e 7e b6 15 37 02 ee 7c 5b 13 0c 19 10 d8 5d 96 da 8c 53 83 65 de d3 ca ed 03 82 8a 7e 76 fd 0a c1 09 2a 3c 28 eb f5 8b f4 43 d8 49 e3 ce 26 3d a3 c4 b4 b3 58 26 f5 16 15 61 8b ef 14 23 1d ac 42 24 67 8e b1 03 0b bb f3 8c f7 ab fa f2 d9 80 ef 62 57 81 65 03 bd 2f 9b 82 47 6c 30 0e 2b 5e b0 9a 01 7f 39 82 98 8b 1b 71 38 a4 9c 77 a1 f3 fd a5 c9 e2 9f 99 3f 4b a2 e5 77 d5 14 65 fe 2f ca 38 f0 89 20 a7 d3 10 89 a4 1b 44 37 c3 38 b8 90 7c 4d a4 50 88 78 e9 38 e7 c2 24 e1 d4 75 37 Data Ascii: l[MHJ<GQrmX0ZOYSt!g\NXEc<.DF(v#daTWob>~7\|[]Se~v<(CI&=X&a#B$gbWe/Gl0+^9q8w?Kwe/8 D78\|MPx8$u7
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 99 ee 45 a5 29 da ac ad 63 dc e5 d9 0b 8a b1 32 fc d8 7e 8a f4 c9 68 d3 8e e2 70 8f ba 85 9d 87 d5 1d 1d ea d6 b7 52 3c 6b df fb 01 58 e3 3e ad 76 84 3e 5d 79 15 bc 1a c1 fa b0 29 35 fb f3 0b db fe 1b 8e 7c db ca 67 72 0e b2 3a 19 1c fa 30 4e 01 25 16 11 6a d6 c5 85 c7 bc c4 10 b6 69 5c 66 6d 68 2b 4c c5 16 b7 ca a0 7d a6 c5 96 54 29 74 14 dc 9d 26 c2 f1 28 3b 5a b1 9b cf 51 88 b1 2d 8f d9 b4 68 d6 2f 30 96 d4 e4 6f 04 2e 0a 4e 42 b5 a6 55 d3 26 37 89 03 88 83 7a da 53 22 80 b7 a5 e5 0a 91 64 b0 45 7d 3a f3 a6 26 99 86 06 97 cc 09 37 af 16 45 83 c0 44 7f ce 9d b8 26 49 63 f6 fc 61 ab 8c d6 b8 e7 68 92 e8 40 61 5c 22 1a 06 9f 04 b5 e3 99 64 a3 75 4d e3 6f b5 9f 8c 1e 95 99 0e ba 8b d7 83 a8 dc 89 ba 48 cf 17 39 a5 65 31 82 90 e9 57 26 48 dc 72 08 ba c5 63 Data Ascii: E)c2~hpR<kX>v>]y)5\|gr:0N%ji\fmh+L}T)t&(;ZQ-h/0o.NBU&7zS"dE}:&7ED&Icah@a\"duMoH9e1W&Hrc
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 92 96 ac 7a bd 2b 9c f9 e7 a4 77 31 19 11 fa 31 eb 3a c4 0f a8 d8 1c 3c 91 c9 1c f5 cf 5c f5 9c f5 c8 5c ce 00 75 90 8c 60 fa 92 06 27 08 7a cb 7d 65 a0 89 c2 0e a4 c0 71 8b 8c 62 71 8b c6 2a 30 67 e7 0f 61 9c 31 39 f2 ce bf e8 33 8d 89 eb 3a ff 00 2d 12 ea 57 9e 99 23 d6 7a 67 a6 7c f3 e7 9e 9d 60 c7 ef af d3 87 ac a9 eb 8f eb 2c ff 00 a3 67 5d 1f ae 31 71 38 d5 e1 8e 1a f0 d5 84 9e f2 6b 16 1d 79 cf c7 cf 51 c8 5c 60 8f 58 71 1e a5 3f b1 ff 00 d5 9f f4 eb 3d 73 d6 73 ac f5 8c f5 8c f5 c8 ff 00 32 05 13 16 23 2a 26 67 2d f6 38 ff 00 fd 99 18 5e e5 86 87 4e 3d 3e 98 61 86 bc 35 e4 a6 27 25 7d 63 06 3b f4 8c eb 3f fa c8 9c 11 ec 3d 7d 8c a2 20 4e 7a ff 00 f0 eb 24 3b cf 48 cf 48 ce b2 47 2b 7a e5 81 82 9a cc 80 1b 2e f7 37 c7 78 79 ed eb 8c f7 9c 62 bb c3 Data Ascii: z+w11:<\\u`'z}eqbq0ga193:-W#zg\|`,g]1q8kyQ\`Xq?=ss2#&g-8^N=>a5'%}c;?=} Nz$;HHG+z.7xyb
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: db 7c 15 4a e1 6c 6e 4b ea ec 34 55 81 95 b0 59 57 e7 b1 b5 a7 da 6c 2b 6b 57 5a cd 8a 49 62 11 09 d6 5f d8 6e f5 7b 2b df 81 af cb 11 aa 51 32 cd 50 65 d0 16 e5 7e 2d ac 0b e1 71 10 0d af ab 5d 59 de ea 03 2b ed f4 4f 6d 6d de aa a2 a9 f3 3d 55 88 d8 58 3d 93 35 a8 b7 47 73 af a8 77 76 06 e6 3d ab 34 2b 2c 35 36 70 e9 69 22 05 75 a6 7e c6 f2 bf c6 8d 55 bd a4 a3 8c 21 f1 73 46 d8 af b0 2f 6f 97 d6 b8 b2 d5 c9 54 35 c8 36 c0 b4 2c b6 ff 00 a9 cd cf 71 0a f3 56 ef f6 db 5c 9d a6 ca c6 6b ec dc af 3f da f2 16 c9 72 4d 92 6a ff 00 69 c8 7e 5a fd b6 fc 82 6e ec ac 2c f6 5b 12 44 3d b2 76 2f 82 d5 73 92 6f 97 66 fd 86 15 4e 27 cf 23 6d 1b 5d be d4 77 4b df ef ce 3f b4 dd 85 91 db ef da 69 d8 6e 00 c3 68 f5 82 76 b6 49 bb 1a 35 7d 35 f6 2d d0 76 c4 e5 45 5b 71 Data Ascii: \|JlnK4UYWl+kWZIb_n{+Q2Pe~-q]Y+Omm=UX=5Gswv=4+,56pi"u~U!sF/oT56,qV\k?rMji~Zn,[D=v/sofN'#m]wK?inhvI5}5-vE[q
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: bf 1f f2 ef 29 79 12 97 35 f1 77 98 f6 5a 0e 77 e4 7f 0f 71 bf 2e e7 8f fc 67 c4 3c 19 a8 a1 e7 ba ea f3 77 92 bc 3f c5 3c d3 5b c7 1e 29 e2 9e 0f d7 78 a3 9f c7 91 7c d9 e4 2f 02 6b fc 85 c9 f9 1f 29 e0 ff 00 c7 fe 0b c1 3c 0f c5 39 bf 01 fe 38 94 c7 98 f9 3c ff 00 f3 47 f2 6f 93 6d 78 7f 93 7c 6f cf b5 3e 48 e2 fc 27 c9 ba de 2d e6 9f 23 7f 19 f4 bc e7 91 f9 93 c2 9e 30 e0 9c 03 90 ff 00 1d 78 76 ab c5 3e 3f e3 3f f7 c7 30 e2 5c 07 45 e3 ee 3f e5 4f 05 f3 2d c5 41 98 19 4c 4e 29 46 c7 a5 9e 85 11 5c a1 af 58 c8 1c 2d 96 2e 7f cd f7 f5 5e bb 98 72 7d 40 3e ed 87 d8 23 31 6e 9b 9c 72 ce 38 ad ef 28 e4 9c 99 ca 50 93 75 bc b3 93 71 5c da 72 cd e7 25 7d 0d d6 eb 4c d0 e7 dc f4 c9 96 59 68 b8 0f 9a f6 bc 0b 8c a3 63 7f 47 b0 77 3d e6 ad b7 b1 de ee b9 15 ad Data Ascii: )y5wZwq.g<w?<[)x\|/k)<98<Gomx\|o>H'-#0xv>??0\E?O-ALN)F\X-.^r}@>#1nr8(Puq\r%}LYhcGw=
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 73 6c d9 fb 84 71 b4 e5 dd 7b 6a 92 22 3c 95 5a 92 1b fa 50 20 09 8d 60 2a 14 cb 9d a7 75 52 85 46 e2 7b b2 ff 00 21 57 36 83 f7 92 68 0d 16 20 a7 d6 6b 4c 0d e7 65 d3 f9 41 cf 33 be 23 80 e7 08 d6 6e 46 c9 db 65 36 e8 e2 9c d4 5b 65 56 94 e4 13 e8 3b 98 46 99 46 98 29 f4 9a 01 30 34 d1 31 a1 e0 0d 01 c9 1a 70 e4 69 38 d3 06 25 6d 3b 33 30 12 59 07 f8 55 19 ce 13 d8 41 40 54 9b 30 d9 3f 63 da 6a 53 f6 8e c2 d2 04 b1 be 57 e5 f1 4d a3 88 bb db 38 b4 83 1d 51 a6 11 a6 13 69 b4 9e 4a b5 31 25 54 64 64 9c 11 6d 95 36 89 46 99 00 39 c2 ca 94 0a 62 6f 36 f4 5b 73 2c e0 1c 7e e1 38 11 9a aa 31 04 e7 39 b9 39 d6 e7 09 9b 7b 59 46 1e 5c f7 dc 65 96 56 55 ea ba ad 42 f2 07 41 60 11 6a b2 0c 3c 15 56 19 85 51 86 e9 d4 8c 2c 28 08 20 f3 0a a8 9a 78 84 38 2a 64 b3 65 Data Ascii: slq{j"<ZP `uRF{!W6h kLeA3#nFe6[eV;FF)041pi8%m;30YUA@T0?cjSWM8QiJ1%Tddm6F9bo6[s,~8199{YF\eVUBA`j<VQ,( x8de
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 16 1d 64 9f 9a 1b 5b c0 cc 67 38 73 81 dd 3f 6e 98 38 4c f2 38 47 92 1b 59 a9 51 ad 3b 8d 99 bf 28 2a a6 d2 cf 68 62 e2 c2 47 c7 c9 7e 65 84 41 c7 e4 8d 4e 18 fa f9 22 62 f7 9e a8 55 67 0a 97 ef 27 54 da ad 75 81 24 f2 4e a8 1a 31 3b 22 9c f0 4f 88 b6 6f fc af 6a d6 9f 1c f5 3f e1 36 a0 70 74 98 70 8d d3 6b 75 4e 7b 5e 22 27 a9 12 3a 2a 85 d4 c9 0d 71 c3 03 33 e2 b6 ab 10 40 c8 08 90 14 0d 0f 9a 76 e9 c3 32 79 75 ff 00 09 a4 de 1a e3 11 24 e4 db 81 f1 46 a6 1b 12 67 af 4e 28 55 6f 38 36 f8 82 85 5e 03 cc 81 ea 86 d5 58 07 06 53 68 6b 0e 27 44 78 a2 3a e9 36 55 2b d5 7e 9e 1b db 98 bf 70 bd a5 66 b4 e2 dd b5 bf ba 4b 7d 44 94 6a 1c 26 69 f4 7f f6 df 48 43 6b 7d 84 0c a3 16 6e b4 44 9f bb 74 4d a9 51 de e8 b7 9f 96 a9 f5 0d 40 49 68 f0 c6 5a 0b 7c 91 7b 9a Data Ascii: d[g8s?n8L8GYQ;(hbG~eAN"bUg'Tu$N1;"Ooj?6ptpkuN{^"':q3@v2yu$FgN(Uo86^XShk'Dx:6U+~pfK}Dj&iHCk}nDtMQ@IhZ\|{
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: 5c 64 0f 98 7d 6b 8c 95 4c 6f 47 55 f2 91 11 bc f9 d2 75 23 e5 b7 f7 14 d6 a5 58 cd 36 ff 00 a6 7a d3 6e 9e 74 45 c7 60 7d 69 21 a2 00 30 0f 9f b5 25 0c 24 4c 8f dc 52 f8 44 5c 0d 5b 71 a7 99 b4 5c 9c f9 73 e5 5a 61 dd 4f 76 df d8 a6 60 c0 a7 84 45 bf bd a9 0d 95 f4 fa d5 90 91 cb fe 45 38 8e 9f bd a9 28 57 43 43 14 cb 87 d6 9b 72 23 34 1d c0 cd 71 01 22 40 3e d4 9b 15 8e 54 1a 6f a7 e2 7f 2a 69 02 4f de 4e 70 27 97 4a 75 61 23 af a5 23 52 83 62 07 d7 e9 4c 6f 29 fa d1 70 9e 5f 8d 36 d1 5e 67 07 f1 ab 1b 81 29 3f d7 a5 70 8f 2d a9 1a 65 91 82 91 57 f5 a4 3d 69 cd 37 a9 4e 33 47 54 94 ef 1f b8 af 89 4a b6 c7 ec 52 5e 83 83 4d be 49 02 62 3c fd 29 6e 59 27 99 e7 41 e9 49 93 43 54 12 e7 4c c7 ad 69 75 8a bc 04 af bb 48 74 28 03 bf ad 36 e6 d4 17 fc 4a 14 de Data Ascii: \d}kLoGUu#X6zntE`}i!0%$LRD\[q\sZaOv`EE8(WCCr#4q"@>To*iONp'Jua##RbLo)p_6^g)?p-eW=i7N3GTJR^MIb<)nY'AICTLiuHt(6J
2024-04-26 18:33:02 UTC	1369	IN	Data Raw: b5 80 2b 8a 75 1a 75 ad b7 92 63 03 ba 48 54 99 c0 3b c1 c8 ad 02 f5 ec 29 2a 36 10 a3 2e 1e 0b a0 90 ad ed 94 cc c0 dc 03 fd 27 5e 9e 28 d3 2b 46 f8 70 f0 a1 fe 32 f8 50 ae e9 16 95 26 54 3b ca 1b 0b 62 8f da 46 1c 6c b4 3b 25 0d 36 a8 96 f8 cf 91 02 de e9 4a 07 84 ec 42 55 e1 c5 2f b7 34 85 48 52 bb 17 4b 6a 4d c1 0d bc eb 6d dd 11 3c 28 28 f5 84 f9 19 06 9c ed a4 be d9 42 7b 07 44 99 51 37 05 3a 20 ce 0f dd b6 95 4e 4f cc 01 c7 4a 5e b5 04 a3 fc 82 1b 4a 14 17 6f 17 52 41 52 84 14 84 a8 a8 6f 91 20 9e 54 5f d3 ae 14 86 96 14 20 db c7 5a 41 18 94 ed b1 8c 98 9e b3 cb ec 6f 6a dd ae f8 24 e8 74 fa 74 3b a7 2b 52 da 71 4a 52 d6 d4 65 60 a1 3f 29 22 4c 9e b5 f6 bb b5 5a 1a 4e cf 53 5a 34 6b 13 a9 2b 71 be 2b 9c 3e 10 09 45 c7 c0 b0 54 42 ed 82 30 6b 4f db Data Ascii: +uucHT;)*6.'^(+Fp2P&T;bFl;%6JBU/4HRKjMm<((B{DQ7: NOJ^JoRARo T_ ZAoj$tt;+RqJRe`?)"LZNSZ4k+q+>ETB0kO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50198	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:02 UTC	825	OUT	GET /media/New%20navigation_Rebrand%203.0/xau.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:02 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:02 GMT Content-Type: image/svg+xml Content-Length: 757 Connection: close Last-Modified: Mon, 20 Dec 2021 10:11:49 GMT ETag: "e250d8589dca206bbe024e3cbfb5ec77" Cache-Control: public, max-age=36000 x-amz-version-id: sa.9aXf65op0_MxZB9T9MGUkeoh_ijym X-Cache: Hit from cloudfront Via: 1.1 dcaec0b05596b42ef5dab9e145ac961e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: VWUushoUa5uR__9Gb6rkoMMVPc6wJWVG8MCHwus2oeqGZsM6JAkiMg== Age: 20506 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:02 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8adfd5e0362-MIA
2024-04-26 18:33:02 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 36 38 45 34 36 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#B68E46" d="M18 0c9.941 0 18 8.059 18 18s-
2024-04-26 18:33:02 UTC	138	IN	Data Raw: 2e 38 38 38 2e 32 39 2d 31 2e 30 35 33 2e 37 33 6c 2d 31 2e 36 38 37 20 34 2e 35 61 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 20 31 2e 30 35 33 20 31 2e 35 32 68 39 63 2e 37 38 35 20 30 20 31 2e 33 33 2d 2e 37 38 35 20 31 2e 30 35 33 2d 31 2e 35 32 6c 2d 31 2e 36 38 37 2d 34 2e 35 41 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 20 32 30 2e 38 31 33 20 39 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: .888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5A1.125 1.125 0 0 0 20.813 9z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50195	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:02 UTC	825	OUT	GET /media/New%20navigation_Rebrand%203.0/xag.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:02 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:02 GMT Content-Type: image/svg+xml Content-Length: 757 Connection: close Last-Modified: Mon, 20 Dec 2021 10:12:08 GMT ETag: "8a358fc27f7b244c296100ef34819eb2" Cache-Control: public, max-age=36000 x-amz-version-id: 013VGCLTANuKwKpVdSeSuIPvYBvi2Np0 X-Cache: Hit from cloudfront Via: 1.1 dcccf6c408219d8b851fcd12a0068cea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: XYR5TqIbYEngqWVQjtzD2AbBMn3a1Hxr6ZNVmS6dRH7g-c22SD6Bag== Age: 20505 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:02 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8adf9b7a545-MIA
2024-04-26 18:33:02 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 46 42 46 42 46 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#BFBFBF" d="M18 0c9.941 0 18 8.059 18 18s-
2024-04-26 18:33:02 UTC	138	IN	Data Raw: 2e 38 38 38 2e 32 39 2d 31 2e 30 35 33 2e 37 33 6c 2d 31 2e 36 38 37 20 34 2e 35 61 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 20 31 2e 30 35 33 20 31 2e 35 32 68 39 63 2e 37 38 35 20 30 20 31 2e 33 33 2d 2e 37 38 35 20 31 2e 30 35 33 2d 31 2e 35 32 6c 2d 31 2e 36 38 37 2d 34 2e 35 41 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 20 32 30 2e 38 31 33 20 39 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: .888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5A1.125 1.125 0 0 0 20.813 9z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50199	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:02 UTC	1036	OUT	GET /trade?IsRealMode=True&id=127108&tags=lp0ai49b7tf5&pl=2 HTTP/1.1 Host: app.plus500.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://onlinetopchoice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=.ZLCGAswrtSeIPop225MZwozKgjgqUSKKyn0i106XKA-1714156377022-0.0.1.1-604800000; ASP.NET_SessionId=bvutk4rfjhfganereq3s1h4g; IP=!cGj9nTlJQFIgZ8v0UUWQT2jIv4XvHV+mSxOQhQhwvju0137O545CLLVzUxZLhzVsMISrmeCFrpQKBfI3TPxKrAUkWU10gCR6C8vt5fvz3k9eGXFbScdzpCcgUE491CqzyAigcH0fL4p1fKvFiBq2xq0MKw==
2024-04-26 18:33:02 UTC	660	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate Content-Type: text/html; charset=utf-8 Date: Fri, 26 Apr 2024 18:33:01 GMT Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 Set-Cookie: LangDir=ltr; expires=Wed, 26-Apr-2034 18:33:02 GMT; path=/; secure Set-Cookie: Lang2CharsCode=de; expires=Wed, 26-Apr-2034 18:33:02 GMT; path=/; secure Set-Cookie: LangCultureCode=de; expires=Wed, 26-Apr-2034 18:33:02 GMT; path=/; secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 24645 Connection: close
2024-04-26 18:33:02 UTC	15742	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 6f 73 2d 31 35 22 20 6c 61 6e 67 3d 22 64 65 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 6c 75 73 35 30 30 20 57 65 62 54 72 61 64 65 72 20 7c 20 46 26 23 32 35 32 3b 68 72 65 6e 64 65 20 43 46 44 2d 50 6c 61 74 74 66 6f 72 6d 20 7c 20 4f 6e 6c 69 6e 65 68 61 6e 64 65 6c 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 61 70 70 2e 70 6c 75 73 35 30 30 2e 63 6f 6d 2f 31 31 37 34 30 35 2f 52 65 73 6f Data Ascii: <!doctype html><html class="no-js ios-15" lang="de"><head> <meta charset="utf-8" /> <title>Plus500 WebTrader \| Führende CFD-Plattform \| Onlinehandel</title> <link rel="apple-touch-icon" href="https://cdn-app.plus500.com/117405/Reso
2024-04-26 18:33:02 UTC	8903	IN	Data Raw: 77 72 61 70 70 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 6f 6e 2d 74 69 74 6c 65 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 6f 6e 2d 73 75 62 74 69 74 6c 65 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 6f 6e 2d 62 75 74 74 6f 6e 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 6f 6e 2d 62 74 6e 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: wrapper"> <div class="skeleton-title"></div> <div class="skeleton-subtitle"></div> <div class="skeleton-buttons"> <div class="skeleton-btn"></div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50197	52.218.29.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:03 UTC	644	OUT	GET /static/cryptocoin/sc.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:03 UTC	431	IN	HTTP/1.1 200 OK x-amz-id-2: yZ3i7+1dSMy9nzx+TtiktGaoX+/pebe2Q6SpHFiQIbcRyjGmi4chuCQtcuChS4M6yW9TvRiFYrM= x-amz-request-id: QS09SXDF05DCN35J Date: Fri, 26 Apr 2024 18:33:04 GMT Last-Modified: Tue, 07 Jun 2022 08:53:26 GMT ETag: "d3a90161a921a24b34dfd802b9f34d35" x-amz-version-id: 9OfiUAB6Ve5EbQVcwpqGE2Q6SMrnWSOj Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 760 Connection: close
2024-04-26 18:33:03 UTC	760	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 38 22 20 66 69 6c 6c 3d 22 23 46 32 46 34 46 37 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 32 2e 32 30 31 20 31 38 76 34 2e 32 68 2d 34 2e 32 61 34 2e 32 20 34 2e 32 20 30 20 31 20 31 20 34 2e 32 2d 34 2e 32 5a 6d 2d 34 2e 31 34 36 2d 37 2e 30 30 33 61 37 2e 30 30 33 20 37 2e 30 30 33 20 30 20 31 20 30 2d 2e 34 31 36 20 31 33 2e 39 39 39 63 2e 31 32 31 20 30 20 2e 32 34 32 2e 30 30 34 2e 33 36 34 20 30 68 37 76 2d 36 2e 39 31 32 63 30 2d 33 2e 38 36 2d Data Ascii: <svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#F2F4F7"/><path d="M22.201 18v4.2h-4.2a4.2 4.2 0 1 1 4.2-4.2Zm-4.146-7.003a7.003 7.003 0 1 0-.416 13.999c.121 0 .242.004.364 0h7v-6.912c0-3.86-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50196	52.218.29.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:03 UTC	646	OUT	GET /static/cryptocoin/vtho.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:03 UTC	431	IN	HTTP/1.1 200 OK x-amz-id-2: ANaqQTksSU9Q8oiPezMVZ51K7lFzcVg3x+chu+Xhb9d8k2B10uHsWCFiYFH3q2GyDGVdIZfdSMM= x-amz-request-id: QS07WT45H3VD55MD Date: Fri, 26 Apr 2024 18:33:04 GMT Last-Modified: Tue, 21 Jun 2022 08:13:40 GMT ETag: "b2dac216f60dc75b697e87483829e1b2" x-amz-version-id: czDAUJTQRekSMW1joJTnZNj6S48UxnxB Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 370 Connection: close
2024-04-26 18:33:03 UTC	370	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 38 22 20 66 69 6c 6c 3d 22 23 32 41 35 32 38 34 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 32 2e 38 30 36 20 35 2e 36 39 68 33 2e 34 6c 2d 36 2e 33 39 31 20 38 2e 35 33 32 68 35 2e 37 33 36 4c 31 31 2e 38 34 39 20 33 30 2e 33 31 6c 34 2e 34 33 32 2d 31 31 2e 33 36 37 68 2d 35 2e 30 30 36 4c 31 36 2e 33 32 33 20 35 2e 36 39 68 36 2e 34 38 33 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 2e 37 30 34 22 2f 3e 3c 70 Data Ascii: <svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#2A5284"/><path d="M22.806 5.69h3.4l-6.391 8.532h5.736L11.849 30.31l4.432-11.367h-5.006L16.323 5.69h6.483Z" fill="#fff" fill-opacity=".704"/><p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50201	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	825	OUT	GET /media/New%20navigation_Rebrand%203.0/xpd.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/svg+xml Content-Length: 762 Connection: close Last-Modified: Mon, 20 Dec 2021 10:13:10 GMT ETag: "58f10ef614a7c4c47a130b68568e17cc" Cache-Control: public, max-age=36000 x-amz-version-id: Z5jhskaBWQ_zMVkmgEGSkmk6JP7PcqJa X-Cache: Miss from cloudfront Via: 1.1 dcccf6c408219d8b851fcd12a0068cea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: mS3twdijYq8Jo_rOY9KHn1xEnRcE1O602QS_8JuAod2du9I1rZTK7g== CF-Cache-Status: HIT Age: 20508 Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8b99c89a53a-MIA
2024-04-26 18:33:04 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 35 41 42 41 30 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#B5ABA0" d="M18 0c9.941 0 18 8.059 18 18s-
2024-04-26 18:33:04 UTC	144	IN	Data Raw: 38 38 2e 32 39 2d 31 2e 30 35 33 2e 37 33 6c 2d 31 2e 36 38 37 20 34 2e 35 61 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 20 31 2e 30 35 33 20 31 2e 35 32 68 39 63 2e 37 38 35 20 30 20 31 2e 33 33 2d 2e 37 38 35 20 31 2e 30 35 33 2d 31 2e 35 32 6c 2d 31 2e 36 38 37 2d 34 2e 35 61 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 2d 31 2e 30 35 33 2d 2e 37 33 68 2d 35 2e 36 32 36 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: 88.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73h-5.626z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50204	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	825	OUT	GET /media/New%20navigation_Rebrand%203.0/xpt.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/svg+xml Content-Length: 762 Connection: close Last-Modified: Mon, 20 Dec 2021 10:12:27 GMT ETag: "681a635e9e3cfea14b58c3267ff59d89" Cache-Control: public, max-age=36000 x-amz-version-id: U9gngjRKc5FNXIbKddgIOC4Orqzu3aij X-Cache: Hit from cloudfront Via: 1.1 41958139e7d828579c6466c1ce1c7b26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: bxg6xZ5D4dNioQPe-szwMgC1HO3CUpDzOF_vYCcbHcRQnfQppmU0lQ== Age: 20508 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8b9ad846c88-MIA
2024-04-26 18:33:04 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 41 42 39 38 38 33 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#AB9883" d="M18 0c9.941 0 18 8.059 18 18s-
2024-04-26 18:33:04 UTC	143	IN	Data Raw: 38 2e 32 39 2d 31 2e 30 35 33 2e 37 33 6c 2d 31 2e 36 38 37 20 34 2e 35 61 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 20 31 2e 30 35 33 20 31 2e 35 32 68 39 63 2e 37 38 35 20 30 20 31 2e 33 33 2d 2e 37 38 35 20 31 2e 30 35 33 2d 31 2e 35 32 6c 2d 31 2e 36 38 37 2d 34 2e 35 61 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 2d 31 2e 30 35 33 2d 2e 37 33 68 2d 35 2e 36 32 36 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: 8.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73h-5.626z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50206	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	929	OUT	GET /xxrz/250x400/793/f4/3f/f43fe143bb66878a7be75d0fd23e06c1/f43fe143bb66878a7be75d0fd23e06c1.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:04 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/jpeg Content-Length: 83089 Connection: close Last-Modified: Thu, 25 Apr 2024 04:08:43 GMT Vary: Accept-Encoding ETag: W/"6629d74b-12b72" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 887 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cBYQUG5RMxqui7Bx24ALmmHO78%2BWxrtItOpRxSn5HuVIOvSFm9uJCgNwNrStVupLWUCRGIhVFKOcfbv4fZhUDVSjCV3kl%2FxMMVe8TYPfZ4M7cXvGa6Fam1QlV5ybotbyfVph"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8b9bf7bda87-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:04 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 10 12 e4 13 80 c5 c5 f5 0d ec 6e a1 6b e1 db f5 3f 32 85 82 6f ce 4c 86 c3 9a ab 0e bb 15 00 7d 64 54 2e 0a 6b 2d ab 66 eb 66 55 d7 56 97 2d 5f 7e 1c 04 07 a1 e2 fe 6d f9 b6 71 bc 6b 7f a8 6b 79 c9 b2 88 9c b6 75 25 cb 83 71 be 78 da a9 67 45 8c 5f 53 5e e7 79 ce c3 c2 28 72 2b 1f b4 05 11 ca 2b 1d a2 f5 53 62 49 37 3d 13 cf 19 a5 93 f2 e2 2f 65 0d 1a 29 7e c7 13 44 89 9c 75 4c 91 54 64 de 5b d7 09 3a ed 2d db b3 94 b7 63 c2 9c db 25 e7 83 95 9a d1 d7 bc e3 32 60 be ec b9 e7 0d d8 8c 1e ab e5 39 bb 56 6a b2 37 97 6f 75 03 6f f9 06 b1 0b 96 de a4 b9 6c 6e 2f bb 4a ab 3e 90 47 32 50 aa 8c 92 1e 63 e9 28 6d 5b 21 12 0d 0c 12 8b ae 43 69 ee fe 16 e3 49 a8 b0 77 1a 64 0b 9b 03 1d e8 ce 63 25 56 32 45 13 78 54 cb ce d8 7a 4d 4b c7 22 20 29 ec 9c b9 b1 fa fa 33 Data Ascii: nk?2oL}dT.k-ffUV-_~mqkkyu%qxgE_S^y(r++SbI7=/e)~DuLTd[:-c%2`9Vj7ouoln/J>G2Pc(m[!CiIwdc%V2ExTzMK" )3
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 86 26 73 5f d2 a7 32 0d c2 5d 80 56 37 0e 96 7c 72 1a a7 32 99 fb 06 76 4c 19 ab 86 36 40 c6 00 8f 72 d1 e9 6d 06 02 a4 33 4b f8 9f 24 bd 8b 54 b2 1c 12 7a 8f e7 d3 d3 45 45 c8 25 09 71 93 75 a0 44 84 df 64 76 6e f1 a6 ea 94 85 0a 22 f3 04 74 da 87 3d 16 52 f6 f5 4e 15 43 59 d7 89 65 b5 65 69 de 7f a9 88 fc c2 f4 f7 cb a3 31 de 20 44 85 4f d2 08 31 59 97 55 72 1d d8 64 5f 71 8b 23 6e a4 84 66 1d 86 e7 59 c6 46 a3 f5 13 d4 b2 f4 ce a2 c5 b2 6e 21 83 9c a4 66 27 94 29 16 fe 70 d2 9a c8 35 84 0c 87 e5 33 25 b0 9c 63 b2 c1 bc 1b c1 5e b4 e9 60 e3 81 5f 25 76 03 64 a1 1e 3d 32 a6 56 fa f1 2d 12 ad ad 2f 1a ee 25 73 21 d3 8d 0a 48 e6 3c e9 fb 29 1b d4 4a dc 84 72 80 94 2c 72 dd 34 b6 bc 31 04 ae 32 5f 37 ec 3a a2 5c ee 40 90 a9 b6 7d f6 9e 90 90 3b 82 56 ef e8 Data Ascii: &s_2]V7\|r2vL6@rm3K$TzEE%quDdvn"t=RNCYeei1 DO1YUrd_q#nfYFn!f')p53%c^`_%vd=2V-/%s!H<)Jr,r412_7:\@};V
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: d0 f8 2f 53 d2 e4 f2 cf 12 0a 59 dc d7 0d df b3 a4 5f b2 e7 3d 7e 23 fd 9a 7e a5 6b ba de e8 9a 3d 3e 81 43 22 cd ad c2 56 4d 90 89 44 d4 7a c2 8e 03 bb c7 c5 f1 c2 a3 20 eb da 06 18 06 94 b2 a2 f7 34 b0 57 46 e6 ce 76 6c d1 95 c5 33 c3 18 e7 75 26 9d b2 ec 96 5a bf 4d b6 51 6e 20 c5 10 5c 62 8a 44 99 e2 6c a0 f2 af 16 02 e2 1a b5 5a bf af 48 bf 65 ce 7a fc 49 fa 80 25 92 6e 11 e3 50 68 3a f5 84 b2 c8 34 18 ae 1a 1a c4 7e 98 ac 46 fc 9d c9 3a 8c 2c 9f b9 5c 9d bf e5 77 8c 48 bb f4 59 26 0d c5 33 47 be 73 66 bf aa 93 67 e4 dd d3 6c ce 38 e1 bb bd c0 b1 f8 63 8d ea 43 a5 57 6b 1a f8 dd 62 06 bf d2 ec 47 02 3b 9a 66 0a b4 1b 37 30 e9 15 0b b9 73 95 ad a2 97 5e d8 5f 5b fa 23 55 cb d2 4b 55 94 fd b3 9e 7f 12 7e bd 38 71 af be 5b 17 b2 a3 45 1a 0b 24 4c 3c 84 Data Ascii: /SY_=~#~k=>C"VMDz 4WFvl3u&ZMQn \bDlZHezI%nPh:4~F:,\wHY&3Gsfgl8cCWkbG;f70s^_[#UKU~8q[E$L<
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 4f c0 a3 6a 18 3c cd 09 1f 22 68 90 47 ce fd b0 7d de f8 10 c6 d2 93 e1 1a 7f 6e 80 d9 6a 7f 88 2c ab 4a e1 0e 44 f8 e5 30 24 a3 b1 a5 62 24 71 39 8e b3 59 eb 1b 5f e3 b9 ef b9 ac e2 3a 0f 6f 83 00 14 e0 8a 5f 49 b2 0e d9 c8 1e ed 11 fb 2a f2 dc d7 44 d1 d5 7b bb a4 6f b2 e7 3c 7e 25 ef 83 23 84 fa 4d 89 f6 74 a2 46 c8 62 c7 46 67 23 ed f4 02 db ae 3d 45 95 8d 6a bd 7c 09 1c b6 77 b4 c0 94 ed c2 5f 84 8b eb 49 58 4b 29 86 1d 7c 86 0c a7 1c 19 01 f4 82 b8 07 ab 9f 12 00 81 96 95 cc 34 3e 35 b8 81 7b aa 44 91 eb 38 b1 4a ae 24 35 18 c3 07 c1 ce f0 8c 39 d3 c8 d9 5d 44 db 16 be af 3a 46 fb 2e 73 c7 e2 5e d8 99 c1 57 a9 6b a9 a4 e5 88 7b da 5e 46 df 9b 27 89 69 68 6b 39 16 b4 92 07 02 85 c5 67 1d ef dc 69 aa 1e df 7e d3 65 5b 6c 7c 07 2e 78 b6 2d 1b 6e d4 87 Data Ascii: Oj<"hG}nj,JD0$b$q9Y_:o_I*D{o<~%#MtFbFg#=Ej\|w_IXK)\|4>5{D8J$59]D:F.s^Wk{^F'ihk9gi~e[l\|.x-n
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: f8 96 48 72 90 41 e9 19 9d a8 3b e7 37 2f 6e 2b d5 9a e2 d9 34 4a c9 7b 24 a7 92 e2 95 7b 47 90 0f 6e d3 5d fe ed 6e 6a b6 b3 ab 01 5d ca 53 86 3b fe 4b d8 ac 80 70 3f d0 a6 07 c4 1e 51 db 1e 27 13 6b 92 6d ed 2a 6b 92 00 f6 19 2e 25 c2 ff 00 c6 11 5a 29 93 17 b4 96 3d 5a bd 97 c5 ae ed 90 ed 0b 0b 0d da 4a d1 d9 be b2 65 90 04 37 44 9e 51 8e 09 d8 a5 99 eb 19 7a 52 1a 0a 87 be 73 a7 e2 7d 55 8e 5b 6b 0e ec 95 7e 8b ef 10 1c a7 5d 8e 60 49 46 66 20 d0 6d ee ba e7 79 35 b1 ea 9d 1e c5 d1 86 f7 df 4b 7c a2 0a 27 c3 c6 b2 90 39 d6 5c 27 6b 00 25 41 79 9b 74 d4 f6 2d 4e d8 71 9e e0 bd 8a d7 1d 55 cb 8b ff 00 04 46 ab 60 05 0a 2f 15 8f 8f 17 f3 e1 2e 4d 33 c2 82 af 0b dc b1 9c 65 18 fa 5d 62 7b 16 73 a7 6f 94 da 9b 98 fb fd 81 88 2b 9d 95 ef f7 ba 82 b8 33 1d Data Ascii: HrA;7/n+4J{${Gn]nj]S;Kp?Q'km*k.%Z)=ZJe7DQzRs}U[k~]`IFf my5K\|'9\'k%Ayt-NqUF`/.M3e]b{so+3
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 8f 35 e7 63 b8 de 97 1d c7 51 3d 67 f1 d9 e2 38 ba 95 b9 c1 5f a0 5d 40 97 26 af 7d 2a 97 50 d9 5f 93 68 2d 23 10 b0 81 15 e9 6c 51 36 49 4a 47 ae 74 8b f6 5e d9 ce c9 df 89 9c 8a 89 fc 62 23 7b 2b da b8 9e 3e cf b7 ca 43 5e 6a 9b 08 c9 6d ac 17 d0 99 38 89 65 0d bb 04 47 b6 b2 39 ee ec 5b 22 69 e7 c4 4d 6a b6 6f c4 2f 65 9a 81 c2 ec 82 1e 49 dc 44 a3 3e d5 29 ec f8 f1 95 8e b3 74 8c 73 b0 72 8d 19 05 68 35 68 ec 5a d4 92 61 39 d6 f1 a1 de c9 bb ae 04 24 f3 0a 64 87 fa 8c e9 2d 8a ca 6c e7 6f e3 89 95 1e ab e9 13 b3 44 76 a7 c1 11 1b ad c8 19 63 f9 96 2b 00 8a 54 b1 97 1a 92 92 aa d2 c0 39 07 63 8c 15 b1 b4 9e f2 3e 7f 8a 7b db d5 4f 6b 26 4a 21 4a 72 a4 63 e3 61 83 d3 46 56 c7 c6 5c 41 03 96 d1 5b 87 99 29 f8 b3 55 cb 1e cb e1 c7 ef 66 44 4b a2 aa a5 c2 Data Ascii: 5cQ=g8_]@&}*P_h-#lQ6IJGt^b#{+>C^jm8eG9["iMjo/eID>)tsrh5hZa9$d-loDvc+T9c>{Ok&J!JrcaFV\A[)UfDK
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 01 7c 50 e5 e6 7d 32 cf 74 87 e8 a8 3d f9 bc f4 f9 20 e4 5f d6 cb 7d f1 06 5f 50 d1 c7 c3 85 63 a6 be 95 6e ea 44 09 e7 bf 36 36 1b 93 72 71 4f 47 41 96 ac 66 40 b5 35 ef 1a 48 35 db 81 0a b1 b2 b9 47 d2 5b 60 d6 20 31 1e 58 ce 67 79 59 74 2e a2 ce 23 88 44 4e 9b 15 5f 0a 81 6e f1 b9 3c 88 3b 1c 2e 4d 18 86 49 65 aa 65 99 62 59 1a 3d 22 ea 09 1b 6e 6c 49 dc 01 b7 5c 2c fc 12 56 da f7 f1 5b 98 ff 00 7c c6 e3 cf 12 55 52 ab 16 96 45 5d af e3 17 5b 5b a5 f7 f7 6d 8a cc e9 5f bb 4c ac 4a 9d a7 90 2a de d6 e4 83 7f c5 b0 b4 35 f5 d3 09 a5 49 07 12 ce 64 74 22 e9 b5 9d 41 b6 a1 ea 0d 8e 2b 28 65 a3 7d 2f de 43 e0 91 47 75 bd 3f 85 bd 09 f7 12 37 fe d8 3e 6c 62 ab c6 bf 67 e2 7f b3 2e a4 f6 89 0c 8f f3 31 da ff 00 c6 fb 69 41 f7 f8 88 dc 01 eb 8a 7a 18 29 e0 15 Data Ascii: \|P}2t= _}_PcnD66rqOGAf@5H5G[` 1XgyYt.#DN_n<;.MIeebY="nlI\,V[\|URE][[m_LJ*5Idt"A+(e}/CGu?7>lbg.1iAz)
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 20 f9 b1 8a b3 67 5f b3 f1 38 ec 77 0e 35 e2 f0 c1 63 2c 9a 9c 8d d4 28 8c a8 d5 6b 81 bf 21 6e 58 cd bb 59 18 8c 52 53 a3 55 54 ad cf 0e 2d c2 1b 58 33 b8 24 01 73 b8 3b fb b1 5d 34 f5 15 92 cb 52 82 39 49 17 51 b8 1e 97 e7 83 e1 f5 16 17 3e 58 02 e2 f8 91 96 35 fa cc 7e 8f 33 eb 6c 24 f6 b0 d3 6e 47 7c 06 52 0e ab 83 70 76 e5 cc 5c 5b fd 70 8d 71 f5 7b cb 6e 97 df 7f c3 0a eb 30 68 9a 40 89 75 e7 d7 7b db fa e2 96 a8 54 49 ec cf 1a 54 40 d6 5d 27 6f 0d bd 7f 43 85 a3 58 78 62 34 44 4b 6a 54 1b 58 16 d8 37 ad b9 9e 46 d8 a9 ad e0 2b a1 8c 7c a2 0d ed 62 3c 87 3e 96 f2 c5 7b 6a 55 3e 73 cb f8 69 8f fa e2 0f 9b 18 aa f1 8f b3 f1 38 ec dc aa 15 a1 99 9b 80 d2 9d 51 ea d2 a7 ba be 22 2c c4 1f 2b fb c1 c4 39 2d 1b 7f cc 47 1a a2 94 03 44 5b 2d ad ce de 86 d7 Data Ascii: g_8w5c,(k!nXYRSUT-X3$s;]4R9IQ>X5~3l$nG\|Rpv\[pq{n0h@u{TIT@]'oCXxb4DKjTX7F+\|b<>{jU>si8Q",+9-GD[-
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 6b 68 94 6b 52 0f bb fa e2 9e 92 c7 5c 8d b7 40 3f 3d f0 1a cd e5 eb 8c b6 33 f3 a7 c0 2f b7 99 20 28 f7 f9 e3 7d 4e 4f d6 3f ae 0a 77 cf ad b0 10 5c dc 73 c4 f1 c9 b1 84 ee a6 e0 61 e7 92 28 8c c8 ba 8a a5 de 23 b9 61 6d c5 bc c7 31 ea 31 13 43 98 89 25 23 88 aa ca a6 fb 77 f6 36 f7 80 45 f1 c3 0b 22 a3 2a 24 43 41 2c fb 16 2a 75 28 07 62 37 17 b6 29 1b 5d 3c 6e 0d c3 02 47 e2 71 9a 7c dc c7 af 07 fa 9c 40 a4 8a 73 c8 b4 61 8f bb 4a df f3 38 80 69 77 8f fc 40 a3 ee 5e f7 e7 b6 02 12 d6 ea 71 3a d3 b6 55 4e 5e 40 d5 3c 32 a8 a0 f7 95 56 42 34 b8 e4 05 af cc dc 8b 6f b6 02 e8 0b d7 bb 7f d3 10 a3 48 c0 12 16 e7 af 2c 43 1f 0e 34 4b 06 22 db ae 2b a0 e0 37 75 f5 07 24 ff 00 10 df 70 7e 07 0e fa 42 df d1 7e 18 3d 31 59 23 24 4f c3 f1 02 bf ae 23 7b 2e ae 7b Data Ascii: khkR\@?=3/ (}NO?w\sa(#am11C%#w6E"$CA,u(b7)]<nGq\|@saJ8iw@^q:UN^@<2VB4oH,C4K"+7u$p~B~=1Y#$O#{.{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50202	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	832	OUT	GET /media/New%20navigation_Rebrand%203.0/brent%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/png Content-Length: 1147 Connection: close Age: 19246 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=2314 ETag: "9874e3fbea6efed1776c566dcf48a405" Last-Modified: Tue, 30 Aug 2022 08:01:15 GMT Via: 1.1 903a82370ff225ae16b374d8f5cbc5a6.cloudfront.net (CloudFront) X-Amz-Cf-Id: cJrwpb2tEDLjDYYnucmsjYq9s36vvkBfmnSV-b9kj5QHkgVS0B-Szg== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: hHgxTPsejbiAK2.7KTwCjtjaVafz5uTN CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8b9ac13a524-MIA
2024-04-26 18:33:04 UTC	570	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 f9 50 4c 54 45 00 00 00 10 10 10 00 10 10 08 10 08 05 15 05 0b 10 0b 05 10 05 08 14 08 04 14 08 0a 13 0a 06 13 0a 03 13 0a 08 13 0b 08 13 08 05 13 0b 05 13 08 07 12 09 07 14 09 09 12 09 07 12 09 05 12 09 08 14 0a 06 12 0a 08 14 0a 08 14 08 06 12 0a 06 12 08 05 14 09 07 12 09 07 13 0b 07 13 09 07 13 09 07 13 0a 07 13 09 08 14 09 07 14 09 07 13 09 07 14 0a 06 12 09 07 13 09 07 12 09 07 13 09 06 13 09 06 12 09 ff ff ff f0 f0 f0 ef f0 f0 ef f0 ef e0 e2 e0 e0 e1 e0 d1 d3 d1 d0 d3 d0 d1 d2 d1 d0 d2 d0 c1 c4 c1 c1 c3 c1 b2 b5 b2 b1 b5 b2 a2 a7 a3 a2 a6 a3 a2 a6 a2 93 98 Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTE
2024-04-26 18:33:04 UTC	577	IN	Data Raw: 20 c9 2b 3d 98 bc d1 bc b0 80 57 a4 b9 39 4b 1d 48 dd cc 03 12 8f 24 a0 b8 56 07 32 8f f4 02 8a 31 2f 39 23 24 70 48 a1 0a 14 03 0e 25 bf 80 2a cd d8 50 75 79 53 cb 7c e3 56 f4 66 b8 e5 1d 6e 60 de ad 02 d5 6a 16 5e 71 3c 69 d8 0d aa bf cb ea 65 e0 f0 5a 77 a4 eb 2d 8f d8 d2 1c 09 e0 37 27 fa f0 7b 54 44 6c 69 e3 45 e8 8d ef f0 9a 37 89 f9 48 65 20 e6 81 f8 08 0d b9 37 71 78 d3 4d 54 54 89 2a 88 20 7d 87 5d cc f9 fc a9 c5 0e 7b de 3a 2d 80 ea 3d 5d 22 da 70 ba 3e 29 7f c8 1e 10 dc f2 5c 53 42 25 48 40 cf 65 ee 43 f2 1d 66 c6 5e ec 33 16 04 83 eb b0 bd 7f dc c4 9c 8c 7d c6 04 bd 59 84 cb ec b7 f9 1e 73 ec 4a 64 0a 1a b3 0b 3f 3c f1 c9 32 08 d9 82 7e 71 6f 71 a0 81 29 48 40 cb e7 01 c6 1d 66 ee 69 83 cc ad 75 39 e8 33 77 7c f6 f4 41 1f e9 1d b4 c2 db 69 f9 Data Ascii: +=W9KH$V21/9#$pH%PuyS\|Vfn`j^q<ieZw-7'{TDliE7He 7qxMTT }]{:-=]"p>)\SB%H@eCf^3}YsJd?<2~qoq)H@fiu93w\|Ai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50203	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	833	OUT	GET /media/New%20navigation_Rebrand%203.0/natgas%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/png Content-Length: 1080 Connection: close Age: 19246 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=2126 ETag: "c48387db0b666ae8dee293727fb45d51" Last-Modified: Tue, 30 Aug 2022 08:01:16 GMT Via: 1.1 608f9d003f77a43bcd9df621763561a6.cloudfront.net (CloudFront) X-Amz-Cf-Id: 7nQ4ZTmpmWiRgB9TLzthIoTpCU0orIXQWHJti4Ji22Jr1v6cLoqMIg== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: wd_UNpB4m.gH83FD6oZQe4XIl2RXbvN3 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8b9ac873346-MIA
2024-04-26 18:33:04 UTC	570	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 e1 50 4c 54 45 00 00 00 cf 40 50 cf 40 40 bf 40 50 c7 40 50 c5 40 4a ca 3a 50 c5 3a 50 c7 40 4c c3 40 4c c7 3c 4c c3 3c 4c c6 40 4d c9 3d 4d c6 3d 4d c7 3d 4d c5 3d 4d c8 3e 4c c6 3d 4b c8 3b 4d c6 3b 4b c9 3e 4c c7 3e 4c c7 3e 4c c5 3e 4c c7 3c 4c c5 3c 4c c8 3e 4d c6 3e 4d c6 3e 4c c6 3c 4c c8 3d 4c c6 3d 4d c6 3d 4b c7 3d 4c c8 3e 4c c6 3e 4c c6 3e 4b c7 3d 4b c7 3d 4c c6 3d 4c ff ff ff fc f3 f4 fb f3 f4 fb f2 f4 f8 e7 e9 f8 e7 e8 f8 e6 e9 f8 e6 e8 f5 db de f5 db dd f4 db dd f5 da dd f4 da dd f1 ce d2 ee c2 c7 ed c2 c7 ea b6 bc e7 aa b0 e6 aa b1 e6 aa b0 e3 9e Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTE@P@@@P@P@J:P:P@L@L<L<L@M=M=M=M=M>L=K;M;K>L>L>L>L<L<L>M>M>L<L=L=M=K=L>L>L>K=K=L=L
2024-04-26 18:33:04 UTC	510	IN	Data Raw: a4 cd ca 5e b1 21 8c ed 96 73 94 b0 64 20 73 69 ff b2 28 b6 f4 1c 32 0f f6 1f b3 e2 e9 8d 21 33 da 09 4d a0 10 6f 8e 1a 65 92 d9 9f d0 d8 73 c9 e4 f9 70 65 d3 b3 c5 9a 21 4f 48 cd a6 1a f2 84 b4 ba 3d 51 0d 39 86 6b e1 31 24 f6 29 84 36 f8 8e ef 9b 2f 44 a5 90 22 48 cc ed 16 d7 da 13 79 33 45 ca 59 0f 6c 86 25 30 96 d7 c0 07 3a 83 c0 d4 66 99 02 03 b9 31 0d 19 3d 98 e3 1a 73 65 33 19 2a ae d8 60 6c 37 7c fb aa cd 0a 15 57 2c 4d bd 53 67 a1 c2 60 03 a0 9b 51 4a ab 08 8d 32 cf 39 7b f2 f8 92 29 36 84 55 57 ca a6 57 2d 63 61 e6 0c 6a cb f2 13 bd d7 4b d6 c3 9a 85 75 f0 cb 32 66 47 e4 21 f7 d0 4d d1 21 45 ec d0 4e 3d 43 de 29 0d d9 a1 7d 84 3c c3 7c 8a 3b eb b8 60 ef ed 7a 82 1c 7d cf 90 0b 27 96 8d 5f b5 bb 1c b7 d8 b1 ba 72 4a ec aa e5 0e 89 2d f4 9d 26 74 Data Ascii: ^!sd si(2!3Moespe!OH=Q9k1$)6/D"Hy3EYl%0:f1=se3*`l7\|W,MSg`QJ29{)6UWW-cajKu2fG!M!EN=C)}<\|;`z}'_rJ-&t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50210	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	929	OUT	GET /xxrz/250x400/793/71/92/7192237c81db41a3d14b7020d0c3cada/7192237c81db41a3d14b7020d0c3cada.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:04 UTC	720	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/jpeg Content-Length: 82625 Connection: close Last-Modified: Thu, 25 Apr 2024 04:07:32 GMT Vary: Accept-Encoding ETag: W/"6629d704-e513" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1720 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3MFtM7Ka1BE7yIUeSvP01whQj%2FXxW3qIIwmwu1DnGF8YZ6hhhZcalFtuA5VDW79sKnAi1cplN0CVa37bR%2FYoknb1m3Vmvdm5mkshdbjVClSYHquOauWAQsUby%2BplyYhLNdAe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8b9bdf8221e-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:04 UTC	649	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 44 94 14 91 1d 4c d2 76 5c 62 1a a2 52 f8 6c a8 1d 20 17 4a 40 d8 9f 9e a9 00 87 f4 47 1e 2b 98 cc 07 98 f5 47 f1 d3 79 d6 ba ab 0a e7 b5 5a a8 e7 2d 27 ea 49 d0 ba 8a c6 74 b3 89 dd 4f 95 62 17 a3 27 a3 1e 5c 04 f6 e7 ad e7 04 61 89 d7 d3 d4 bf 23 b0 a2 8a df 9b e3 d0 91 38 78 fd d9 c0 36 8b e5 e0 05 34 bd 7b 3f 8f 57 e6 79 2f 66 b3 56 5a f4 37 8b 75 83 9d 5d 42 0a ce 96 22 2d 1a 76 be 09 3e e9 9d b2 85 0a 14 fc d0 1d 45 53 82 91 5d 50 c6 0a 31 e1 2b da 49 d0 e4 2e ff 00 3f c3 7f 27 ba cf 1c 5b 1b cd 72 83 fb 0e 33 6b e3 20 29 f0 0b 31 f9 de 63 47 09 9f 61 d1 e9 54 7b 96 3e d0 be bc 1b 2e dd ad 19 8f 28 5c 5a 48 e3 98 18 93 62 8c fa cf 55 eb 19 32 6a 22 ca 39 43 d0 f4 da e0 14 d1 5b 53 24 8f df 11 29 f1 e2 19 66 6d b1 87 9d e5 ec 96 a1 4a c9 19 69 25 de Data Ascii: DLv\bRl J@G+GyZ-'ItOb'\a#8x64{?Wy/fVZ7u]B"-v>ES]P1+I.?'[r3k )1cGaT{>.(\ZHbU2j"9C[S$)fmJi%
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 0f 67 98 48 0f 4b 54 8e b8 8b ad f3 41 15 d7 89 2d d1 23 ab d2 ca d1 8f 6f ea be 15 9d 1b ae 62 b8 8d d0 95 52 e8 7e c8 81 c7 00 75 8f a7 c6 06 e2 d0 2b 25 58 a5 4c 42 52 ed d8 90 de 93 34 bf 63 c0 c5 8a 73 da 0c 64 46 41 ec f1 24 eb ca 02 85 1c 1a f8 90 97 d1 1e ea d7 12 5d ac a9 28 68 da f7 0e 91 0d 5f 95 0d 9a ba 75 cc 99 de b3 55 02 f5 e8 d8 73 90 c0 3b 8c b9 60 89 04 46 e1 09 04 ee 7c 32 a0 d6 17 93 57 2f f6 8b da 61 b7 7c 46 d7 06 a2 0a 16 44 48 96 52 59 09 3c c1 6c 29 7e 62 0e a9 3d da 96 24 49 93 19 be b4 73 40 91 78 75 a6 ea 46 9b e8 ad a8 8c 16 6d ef a6 61 5e a6 dd a0 be 58 8a 1a 98 11 0e 1f 0c 6d fd 61 42 fd 31 c6 fa ae c6 e2 a6 ed 5f 3d bb 2f 84 4d 61 f3 eb aa 0c ae 4f da 01 cb be 2a e4 34 88 de 9a cc 0a ef 33 e3 ca c8 b0 f4 3b d7 a1 8a c7 d8 Data Ascii: gHKTA-#obR~u+%XLBR4csdFA$](h_uUs;`F\|2W/a\|FDHRY<l)~b=$Is@xuFma^XmaB1_=/MaO*43;
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: fc 2c bf ac d7 35 30 56 45 4e 2e 28 8b 38 94 33 37 0f fa 17 38 cc b1 2e dc 9b 3d b3 98 c8 b2 5a 1e ae 1e 7d a1 f2 25 de 4c e6 11 13 b8 8f 35 66 46 75 f6 81 c9 74 dd 11 8b 31 a1 99 cc ab e0 3c 29 7c 39 99 f9 73 f3 cf ff 00 0e b0 e7 8b d0 61 79 12 78 99 42 cc 07 15 84 bc 56 e9 8c 69 a5 b0 fc fe 1d 57 b3 28 52 b9 27 53 f2 54 ee 7e 33 82 f7 e6 49 1e 3a 78 70 a6 c7 23 3c 70 d0 ff 00 60 3f 3c 14 bf 66 89 c8 12 32 e4 e5 89 40 04 c4 73 a9 b9 eb 73 66 b4 59 e0 1c e3 f6 1d 95 d2 59 c7 e7 92 ca 79 cf 33 b1 52 84 81 da aa 0a 51 91 73 c6 50 cc a3 b3 87 32 01 8f 98 4b 55 ad f3 92 22 67 e5 56 4f 35 9b 76 19 f2 c7 6e dc 24 7d 81 54 18 07 0a 32 ca 24 f3 8f 32 49 e7 86 8e 78 58 e3 9e 58 86 26 c6 25 11 18 bc 19 71 09 b6 6e 0c 9d a4 46 f1 0e 7b e3 ca 0b d0 56 b0 ce ef ab b5 Data Ascii: ,50VEN.(8378.=Z}%L5fFut1<)\|9sayxBViW(R'ST~3I:xp#<p`?<f2@ssfYYy3RQsP2KU"gVO5vn$}T2$2IxXX&%qnF{V
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 5c 63 6c d9 36 9b 4d ab 53 9d 18 fa 5b 71 0a f6 d5 bb ae bd 57 2b cf 55 4f 5d da 7a 82 57 98 d8 76 02 63 6c b3 1d 83 55 87 8d 55 22 ef 62 b6 cd 86 03 9c 95 fc f9 65 a2 4e 10 1c f3 94 52 c0 a0 fb 51 9f 23 db ba c1 ce 79 ff 00 bc 57 bf 7f 5c b8 46 bc 25 93 c3 82 2e 79 32 4b b6 70 13 64 a6 f0 8a 03 23 05 db be c0 8b ee ae 3d 75 c2 83 d9 07 d2 8e 38 90 be ac fb 5e dc 06 b5 cd 75 89 01 8a c6 27 9c f5 41 97 9c 0c 88 94 20 e3 f2 cc cb 89 95 80 84 6f d8 de 4f ce c3 25 24 64 01 36 d4 fe 1a eb c6 2e 2e b6 48 e3 0c 63 33 e2 ab 73 18 e4 71 c0 8e 70 c6 06 69 e0 b2 2c 64 36 25 3e 40 73 c8 a0 6f 1e 4f 18 cf 0d 82 e6 4a fb 7d d7 b2 3f b2 bf c1 bd 7d 88 45 90 da 55 c6 c7 9a ee 9c 07 53 b5 d3 10 c4 25 47 0a d8 53 e5 80 13 35 0b 6c f4 b6 c8 d9 d3 d9 e7 f5 e0 7f 0d 53 24 4c Data Ascii: \cl6MS[qW+UO]zWvclUU"beNRQ#yW\F%.y2Kpd#=u8^u'A oO%$d6..Hc3sqpi,d6%>@soOJ}?}EUS%GS5lS$L
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 5e d9 6c 15 d2 34 73 d6 7b 35 62 fd 5f 4c b4 ad 56 af 29 eb 0b 91 3b 34 23 a7 de 8a f8 b5 8f 0e 17 f7 54 d4 48 4f cb 19 f6 97 90 27 65 f3 db 39 50 02 39 74 be 99 dd 26 a6 e9 4d b0 53 9a d7 44 bd af d7 d5 dd b7 04 6b c5 57 6c d7 3e 82 d0 7c 52 a5 59 b4 3e 98 d3 07 92 4f a7 74 83 fe c1 57 86 ae 6d aa 2a 04 3d d6 5e 59 d9 3e a7 26 ea 1c b2 c2 bb 01 ef de d6 f4 0d d6 8d f2 a9 b4 cd e1 4c 80 5a f2 af 6e 36 63 d3 bd bf 69 5f 63 a2 da 35 9b 77 fa 2f b2 39 86 3a 2e f8 c5 fe 1a 84 47 69 a6 d9 83 6f cf 4b 4c 78 75 1f 51 a1 d2 d8 3c f1 df bf 25 9c e3 99 c6 79 a8 57 f9 16 c7 63 8e 1e 0d dc db c6 db b3 b9 b0 42 82 c8 55 76 84 df 69 17 e6 c5 65 f7 16 51 60 c1 e1 6c 1e 77 98 96 33 c0 62 18 cf f4 bd 30 7a 1e 35 2d 83 9b 0e 26 aa 4a cf cc bf c7 3d 23 24 e0 ac 58 35 e3 e5 Data Ascii: ^l4s{5b_LV);4#THO'e9P9t&MSDkWl>\|RY>OtWm*=^Y>&LZn6ci_c5w/9:.GioKLxuQ<%yWcBUvieQ`lw3b0z5-&J=#$X5
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: fa 6b 03 22 5d 00 51 cd fd 7b 88 43 4c 1b 2e a7 af 56 5b 6d 96 57 77 29 28 6a 3d 86 a9 c7 09 77 ab d7 5c 58 d1 ad bd 3f d2 dd 15 fd 7a 85 35 0c 13 df 3b 27 20 d9 ac a9 f8 f5 a4 ed 11 b7 d0 3a 87 b6 5b 38 5d 9a a1 bd 83 73 a8 75 3d da aa d1 69 ea 37 f5 f5 19 b3 dc 12 78 ba fd 96 bc 5a fa 4d 2a 9d e0 0a 83 48 19 75 fb 2a ca 8b e0 82 d2 0b e6 a9 f2 12 31 be f1 ff 00 21 6d 58 e7 f9 1f 72 e1 37 dd d0 d8 67 0d 32 7f 41 b9 ea 27 33 09 e3 30 41 d3 f2 ba ab 6e aa 6e c2 ff 00 ac 3b c0 56 e9 a6 92 b2 84 44 75 9c ac be dd 06 ed 68 f0 dd 50 ed 43 26 76 8d f1 5a d5 ed f7 ad a1 f4 a9 e8 76 a3 ad b0 bf b1 55 cd 7b 8d b5 72 ac f4 5e 06 c3 d2 64 6e 2c f6 b7 36 da f5 1b 39 73 2c 63 39 e6 02 c6 39 49 6f 7c 94 c8 e6 d8 15 54 cb 54 6f d1 f5 19 a8 15 7d fb 53 e7 f9 1b 5a cf 17 Data Ascii: k"]Q{CL.V[mWw)(j=w\X?z5;' :[8]su=i7xZMHu1!mXr7g2A'30Ann;VDuhPC&vZvU{r^dn,69s,c99Io\|TTo}SZ
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 46 5f 4f 3a 37 74 6e 3c 4b f2 fa 62 1a 49 a0 97 ee 23 53 a4 ed a8 5c 9e 5d 7a 62 95 e5 28 03 52 0e 27 9a ad c7 f2 c5 33 cb a9 63 78 59 5f 86 d2 00 74 01 a5 59 54 9d 98 f5 65 fa e2 aa ef a8 35 94 fa 60 47 61 a9 b9 5a f8 15 71 ae da b9 7f 6c 66 95 8b 29 36 dc 0e 46 ff 00 0e 96 c6 45 9d 57 d2 3b 9a 41 04 c0 94 0f 04 c4 86 63 ee e9 0b de f3 bd b9 6d 88 73 f8 f3 05 90 70 5e 96 aa cd a8 10 4c 7a d4 a8 36 66 d3 f8 bc b1 9c d2 d7 4b 2d a4 9e 46 d4 fe e7 75 00 3d 00 16 bf d7 19 66 4d 59 13 19 2a a2 a3 09 ee eb 8c cc ed 6f fe d5 d3 7f 9f e5 84 94 2a 85 55 51 61 be 91 a4 7d 37 c6 67 97 ad 63 c6 ce 47 35 26 fd 77 53 e7 e9 8c 8a 7a 78 ea 38 52 2a e9 48 d0 2f 4d 36 f4 16 1d 3c 86 3e d2 33 ef 63 a9 cb 28 a2 7b e8 82 59 99 43 85 d2 25 75 09 ca f7 b8 43 f4 f5 c4 73 31 37 Data Ascii: F_O:7tn<KbI#S\]zb(R'3cxY_tYTe5`GaZqlf)6FEW;Acmsp^Lz6fK-Fu=fMYoUQa}7gcG5&wSzx8R*H/M6<>3c({YC%uCs17
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: f3 88 ab a1 93 ee b4 aa b8 1b 0b 59 6f b6 de 97 c1 8a 76 e2 89 22 da f7 16 20 7d 1b 91 f9 60 23 c0 ae ec a3 44 68 ce cc c7 92 a0 b9 bf 53 b0 e8 09 f4 c4 3d a7 a7 cd 73 09 e8 e2 a6 61 4c b1 33 47 56 c3 4b bc 91 8e f3 08 c8 12 08 88 d4 03 1b 12 6d dd 18 a5 ae 8e 4a 1e fa 93 1d f8 52 21 06 fa bd c9 40 3d 6d 63 eb 6c 49 41 4a 66 72 21 8c bb f2 6b 6f 63 d4 e2 6c a8 a1 12 a4 57 23 c8 0b 81 b6 fc c5 f1 1c 2b 51 04 94 f2 0d 71 48 0a 32 b7 3d ff 00 43 e9 8c c7 2f 39 6d 5c 94 d6 b0 1d f4 27 c4 c8 de 12 7d 6d b7 cb 15 12 8b 05 b6 ec 76 fc b1 12 da 34 17 f7 47 e8 31 b4 7b 01 f1 3d 49 db 73 86 b5 ae 4e 27 92 f7 d3 cb cf 04 69 17 38 e2 70 f9 32 fc ed fc c6 28 9a 85 d8 6a 65 2f f8 b6 3f 96 25 78 47 f0 8c 6d 61 c8 73 38 ed 46 66 d4 39 70 8e 20 16 b2 b3 bb 15 b7 08 9e fc Data Ascii: Yov" }`#DhS=saL3GVKmJR!@=mclIAJfr!koclW#+QqH2=C/9m\'}mv4G1{=IsN'i8p2(je/?%xGmas8Ff9p
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 74 d4 cf 32 22 9d 0b 1d 99 a8 aa 91 5c 04 1a 53 bc c2 de 13 ce f2 f6 9b f6 78 5a 3a ba da 2e c0 55 55 a5 12 07 9f 52 d6 48 54 58 91 fc 4a e7 1b d9 ba 63 37 fd a5 3b 2f 94 76 42 4e cd 76 03 b3 15 99 6a d5 c7 34 31 41 1a 88 16 2f 6a da 7e 10 b9 2d 51 28 6d 02 49 24 ee 5f 89 cd 40 c4 f9 ce 76 b0 56 56 4b 93 56 fe f1 cc 33 08 dd d0 88 1a 14 86 49 a1 88 45 1b 48 e3 88 fc 37 75 44 22 c1 b7 3b 6f 8a ea a9 16 36 23 2f ae ab f6 c8 21 f6 9a 68 5e 28 65 a0 8d 51 9e d3 b7 10 05 d6 59 af 63 73 66 20 10 46 3f 7a e6 12 19 24 a9 ca 26 8a 9a ae 38 61 a5 b4 c0 3e 96 0c 6c bb 12 ed 26 b2 c6 c0 69 54 eb cf 14 f3 55 3c b7 14 d6 53 a3 b8 d2 8d 20 2b 77 89 b2 9b f2 4b 6c 2c 17 af 48 de 46 20 ca 8a 84 78 51 1e c2 fb 7b b6 fa 6f 87 76 1f 78 4e 85 1e f3 b5 ef 7e 82 ca 37 f4 eb 85 Data Ascii: t2"\SxZ:.UURHTXJc7;/vBNvj41A/j~-Q(mI$_@vVVKV3IEH7uD";o6#/!h^(eQYcsf F?z$&8a>l&iTU<S +wKl,HF xQ{ovxN~7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50208	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	929	OUT	GET /xxrz/250x400/793/73/e5/73e591c00ee5f6cfa061e6e4f5d56a92/73e591c00ee5f6cfa061e6e4f5d56a92.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:04 UTC	720	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/jpeg Content-Length: 66646 Connection: close Last-Modified: Thu, 25 Apr 2024 04:06:57 GMT Vary: Accept-Encoding ETag: W/"6629d6e1-98ee" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5531 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OrDgSUz%2FORaEKKJ2oPR8s7jsn4Cs23VmfWI%2BpWOmWQ4KBtjclef4j2c74ZKjDtaVHUBNOlNBYGzrUwPZofgWStIBEog8LNAdTpJbNkP8%2Bo9InRehnSBXN6kB0osvPC9wcdSZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8b9b9b84c32-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:04 UTC	649	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 2c 6f 3a fa 06 9b 1a 5e 6c d5 1a a8 71 0c d3 6b fd 12 3f ca d2 04 bd 02 fa df 39 cf 3f 37 4e 9f 94 b1 b1 46 7b 84 34 a9 4c fd e4 2d 9b 4d 51 d5 9f d8 ce 31 a8 9f 86 02 13 ea 51 aa c7 e6 02 e5 21 7e df 64 5a f6 c8 11 e8 68 58 e5 28 aa 0c 0e 0f 23 59 23 dd 48 a0 aa f6 1a 30 8a e3 49 3a 26 a7 94 02 17 69 8f 9a e7 ac 70 6c 45 2a d4 5c c4 1e bb da 96 cf ef c2 24 55 da 5c 1d e0 2a ca 6b 6b 6c c3 14 3b cb a3 cd 68 6f 03 6e 67 8f 4e fb f7 5c b9 0a 46 4e 11 0f 25 d1 49 11 b1 e0 ed 88 a6 79 31 7d b8 59 d8 20 4a d1 d2 1e 62 da 71 6c 99 0f 48 4e 37 70 b9 10 09 68 5c 19 ed 02 f4 72 02 2e d9 e3 e6 87 3c 9b 5b a7 9b 21 38 b6 91 b9 65 35 7a 94 68 07 f7 e6 61 c7 04 17 0e df 0b 4b 11 f1 cb 5c 41 8a 36 b4 52 29 e3 d7 9f 2c c5 29 5c 6a a8 91 8c bd 08 f4 6f 46 d2 d3 18 4e 77 Data Ascii: ,o:^lqk?9?7NF{4L-MQ1Q!~dZhX(#Y#H0I:&iplE\$U\kkl;hongN\FN%Iy1}Y JbqlHN7ph\r.<[!8e5zhaK\A6R),)\joFNw
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: e2 67 51 f9 61 d4 b9 38 0c 65 3b 8a eb 52 c1 50 cd ca 8c f3 0d 60 1f 3a a4 7c 46 8e 3a f8 ad 1d b5 78 fb e7 27 5e 7d f1 ea 75 96 6b 52 70 9f 6c dc 1d 35 45 fe aa 95 0e 96 02 cb a8 55 e5 28 f6 b9 e1 8f 12 1c 7d 30 eb 11 a2 23 19 31 66 23 56 dd d9 09 ca fd ef fc ea 77 ab 26 ee 62 fb e9 f7 2a de 2b e2 27 7d 78 79 ae 55 1e 36 28 6b df e6 54 31 b5 a3 1a 50 b8 8d c7 a6 78 9d 12 7f 99 f1 2b 1f 1f 3e 79 b0 6c 9a 61 65 74 d7 2c 0d a5 61 5b 74 aa d4 c6 9f d5 d6 53 a5 bc 59 bd 09 fa b7 33 7d 7c 7b db 73 67 c9 88 44 c7 6b 9f 64 74 66 47 75 66 ae 6d 47 16 f8 15 da ae 23 f5 d7 2e ea fa 91 8f 15 62 1f 09 71 af b4 1c 93 74 1d 44 17 76 16 e8 b9 36 07 68 b1 68 44 4b a9 47 4a ca aa b1 33 5d fa c3 9a 6f 1c f8 d9 ad 11 78 ea d5 be af 24 24 3e 85 6a bd 5b 5a cd be 81 ad e5 3b Data Ascii: gQa8e;RP`:\|F:x'^}ukRpl5EU(}0#1f#Vw&b*+'}xyU6(kT1Px+>ylaet,a[tSY3}\|{sgDkdtfGufmG#.bqtDv6hhDKGJ3]ox$$>j[Z;
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 13 24 11 db 4d ec 61 48 b2 0b 61 52 50 df 3e 04 33 d5 e9 d6 a7 6f 1c 69 56 4d b6 e0 dd ba 20 64 c3 93 0c cd fd 99 dc b8 88 ec ec 26 3a 0d 5a 2f 6c 10 a2 2b 7b a5 76 ac a6 61 32 a3 db 23 2f fc c8 4e ea 2d 8f fa 35 e7 fe 3d cd 7a 16 b9 7a 84 ca be 32 2a f4 23 fb de 8d 62 b4 a5 34 c9 37 31 98 05 d6 f7 19 b4 ad 9b c8 96 4e 1d 4d bb 16 64 fb 99 b6 b8 31 b7 c3 1a 74 88 ca 29 c7 54 8f b0 4b 8e dd 92 ed fb 42 58 41 f9 09 2c 23 5b 9d fd 8b de fc 59 32 17 3c c4 ce e5 c6 aa f7 0f f6 2e 55 a2 a6 0b fd b8 0b f6 46 d6 a5 ed 96 c5 d7 a6 ea 96 bb c7 f3 aa 77 e1 37 b8 ec 4f e1 63 1b f8 40 f6 f4 25 84 b9 13 ad 86 c3 99 f5 ce ea 1a e5 e9 5c 94 af 8f 18 64 6c 74 6e 38 7f 86 30 11 d8 30 94 cc 77 4e fb 78 bf 35 13 e5 0d 85 44 6a 7f f0 6f f2 0b 7b dc 87 aa 8f 82 71 0a 31 45 7a Data Ascii: $MaHaRP>3oiVM d&:Z/l+{va2#/N-5=zz2*#b471NMd1t)TKBXA,#[Y2<.UFw7Oc@%\dltn800wNx5Djo{q1Ez
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 87 a8 02 f8 b9 5e ac 13 d3 87 7d 62 a5 68 f4 ee 04 d9 63 6a 3c a1 b9 ea 53 b6 3b 08 7b 89 36 5e 6b f5 31 76 4d 73 65 0c 3a eb 39 9c e1 b2 ae d3 c8 a6 32 60 9c ae 91 e4 ec 49 93 5e 82 57 2a ae 3d bd 30 2c d6 9d 1f bb 54 6e 3f f4 de 2b 75 fe 9c 5b 00 16 fc 9d b6 54 eb d6 16 7c e1 5a ae d9 bd 41 dd 4f d7 f4 8e 69 00 89 0b 73 db 7f 4c 6c bc cf 21 91 e8 bd 5a 47 93 2b 8e 39 ea 40 c1 c6 de a0 a9 2d f6 2e 28 f4 91 4b 69 af 6a 9c 51 4f 64 0e 65 f5 22 e4 9f ce 76 12 f5 3f 4d bc 77 cc dc 31 0b 9b 63 71 1e bf 13 54 f5 3f 63 24 bc 75 ca bb 34 48 cd e5 6f 55 3a 8e db b4 1b 8d 6c a5 ff 00 e0 c9 92 51 c8 75 4e ea b6 77 cd 23 f2 c8 8b d7 e0 fe bd 24 87 a2 0c 6e 47 28 0c 56 a4 72 33 38 e7 6c 26 83 b8 72 27 36 9b 7f b6 dc fd 4e 1f 6b 8f c9 be a3 65 f2 66 b7 b7 7a a3 99 b7 Data Ascii: ^}bhcj<S;{6^k1vMse:92`I^W*=0,Tn?+u[T\|ZAOisLl!ZG+9@-.(KijQOde"v?Mw1cqT?c$u4HoU:lQuNw#$nG(Vr38l&r'6Nkefz
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: c7 18 07 b0 58 03 f2 92 bd ec 69 07 da d6 a7 de 44 fc 8c c3 7e d4 ed 5e f5 77 f9 38 3d 7b 51 d8 d7 47 02 82 1f 56 4c 84 27 e5 16 a1 71 62 61 5b db 47 af b0 d8 37 74 4d ea cb 68 af b8 ab 97 37 2c b5 89 3f 2c 18 92 12 2d 4c a4 69 0d 1c 52 c8 00 1e 5c ae 46 d5 a0 d0 eb c8 3a a6 60 3c 5d e2 e8 c5 0d 9c 31 b3 66 98 d4 8e c9 d1 8f 71 b6 4c 08 ee 63 cf 8e 39 07 b7 82 f1 f5 11 da ad 45 29 7f b4 78 5c a6 fe c7 7f d9 c0 72 b8 7e 4c 84 ff 00 06 32 15 92 b5 6b 26 28 f8 8a 57 d2 eb 6d b6 1b 11 49 7d f5 b1 f3 76 47 16 55 10 be 6e f8 56 6b 57 83 a2 8f d9 69 11 d1 4e cd a4 c0 66 8f 0a ea d9 79 27 64 8d b2 c7 91 57 11 d1 80 48 6c 46 c9 86 8a 42 43 29 ed 8b e4 89 af 43 ac 7d c6 f9 0e 85 1f 5a 78 60 33 ee 69 93 0f 73 5a 51 36 c6 1b 54 a5 1b cc cc 26 54 ff 00 61 1d d2 ca b9 Data Ascii: XiD~^w8={QGVL'qba[G7tMh7,?,-LiR\F:`<]1fqLc9E)x\r~L2k&(WmI}vGUnVkWiNfy'dWHlFBC)C}Zx`3isZQ6T&Ta
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: f7 0e 96 5e 3a b6 fa 85 a6 eb 3a 4d 5e b1 cb b2 d0 55 1c c7 3a 39 80 ad 88 a6 0b 7a 21 13 de 42 03 cf 00 31 4c 46 b0 4a ba e3 e2 86 dc 8a 2e b1 7a 2a 39 bd 8b d3 db c7 89 f4 d4 52 f8 7e 61 32 15 91 6b 4f ad 2c bb 42 42 7a 47 6c c2 77 b6 a5 b4 f4 73 dd 06 aa c2 10 64 c2 13 05 62 00 38 c5 5e d9 d3 a2 d7 45 6d cf 78 79 23 5e 65 e6 f7 1f 45 d7 ab 92 05 35 08 89 2c 65 b2 5d ce 96 d3 6b b2 2f 16 4f 3a dc f1 ff 00 d0 a0 85 13 ab 93 a2 ae 80 e7 e3 74 65 66 3b 4e 7b 55 75 63 37 1c 59 95 c5 8b 73 37 3e af 3d 51 b6 d6 0c 4f ad ce cf ff c4 00 4a 11 00 01 03 02 04 02 05 09 04 04 0b 09 01 00 00 00 01 02 03 11 00 04 05 12 21 31 41 51 13 22 32 61 71 06 14 81 91 a1 b1 c1 d1 f0 23 42 52 e1 10 15 33 62 16 24 25 43 53 72 73 83 a2 b2 b3 26 44 54 63 82 92 a3 c2 f1 d2 ff da 00 Data Ascii: ^::M^U:9z!B1LFJ.z*9R~a2kO,BBzGlwsdb8^Emxy#^eE5,e]k/O:tef;N{Uuc7Ys7>=QOJ!1AQ"2aq#BR3b$%CSrs&DTc
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 47 d4 ff 00 f2 88 93 97 84 89 ef 12 0c 51 10 26 b1 25 00 c1 1b 99 12 ae 7e 14 44 d2 88 54 28 71 13 e1 48 39 56 95 6f 95 49 31 ce 14 0f c2 b1 0c 45 ab a7 64 31 d1 e5 88 cb bc 77 88 f5 57 49 f8 69 85 2d a0 db 88 70 e7 42 82 bc 0f 0a 6b 10 0e 10 1e 5c 93 a4 70 0a d3 4f ce 92 46 50 46 a0 d2 54 7a 40 14 bd ce a9 3b 48 88 23 d6 66 b1 25 43 88 48 e0 9f ff 00 35 ad 11 15 68 ac d6 f1 c5 26 3d d4 17 91 c0 a5 49 e5 5d 22 88 db 31 e5 3a f0 f5 d6 25 ab 03 87 5d 34 44 d0 09 c8 98 20 c0 83 4d 7e d1 1f d6 4f f9 93 57 f8 5d 9d c1 0e 34 fb 4c 38 7a bb a7 29 1a 4c e5 3e fa b8 c3 9b b7 0d 86 ee 53 72 a5 48 59 4a 54 02 48 88 d5 51 33 27 6a c2 ad ac ba 6c f8 96 7e 84 27 40 dc c9 57 a2 af db 61 0f a9 56 45 5d 02 f5 4a 14 08 52 7b 8c 8a 6e f1 d6 c0 49 32 91 c3 6e 54 9b d0 e2 c6 Data Ascii: GQ&%~DT(qH9VoI1Ed1wWIi-pBk\pOFPFTz@;H#f%CH5h&=I]"1:%]4D M~OW]4L8z)L>SrHYJTHQ3'jl~'@WaVE]JR{nI2nT
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: ff 00 d6 ad 02 1e 09 71 04 29 01 19 67 f7 b4 d2 9b 37 19 00 e5 f9 54 bb f8 7d be 15 74 e3 a8 61 70 35 29 cb 96 75 20 c4 c5 79 30 cb 65 e0 97 51 f6 87 5c ab e0 38 c8 a4 5c 30 95 06 f2 49 26 04 23 42 7d 75 8c 94 b7 8c b8 a6 86 50 fb 1a 8e 45 07 78 ef 9a c3 8b bd 19 1a 89 75 cd c7 25 9a 75 4f 74 6a 8d 4c 68 38 93 a4 00 2a e2 f0 a1 d6 3a 66 54 d8 8e b4 90 4f 0e 03 6a 6a ed 97 8a d8 49 39 94 42 b5 1c 06 fe f1 44 2f 2b 40 69 d5 f8 d5 ca 7e c8 85 6b 3b 77 1d 29 f4 c6 14 78 ed ef 14 c9 22 c3 03 8f f8 c1 fe 9a 87 c6 b0 b0 57 68 dc eb 1f 95 5a 60 de 6e ca d2 d0 ea 15 48 8e 7c 78 d3 76 05 c7 1b b6 00 25 6e 29 29 93 b4 98 15 63 e4 95 95 b3 4b b8 c4 ae 18 5a 08 86 db ce 33 e6 49 12 72 25 66 46 d1 b5 63 5e 4e b5 69 e7 18 8d a3 ad 96 19 52 1c 69 a7 14 92 15 30 7e ea 8f Data Ascii: q)g7T}tap5)u y0eQ\8\0I&#B}uPExu%uOtjLh8*:fTOjjI9BD/+@i~k;w)x"WhZ`nH\|xv%n))cKZ3Ir%fFc^NiRi0~
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 28 68 40 cb af e2 48 34 e1 52 41 13 5e 47 dc 34 d3 97 0c b9 db 71 09 52 47 f5 74 22 97 7a c3 42 6e 1d 43 48 3d 5e ba c2 41 26 38 98 1e da f2 a3 0a 42 2e cd e5 99 65 eb 1b c3 9d b5 db b8 95 a5 2b 22 56 82 01 25 30 79 c6 fd d5 62 d2 6d db fd e5 76 bc 0f 0a 24 1a e9 05 5f b6 95 9c e9 ed 0d fc 2b c9 c3 65 65 82 25 cb 77 02 d2 a0 5c 74 ac 42 d4 ee c5 20 49 d8 c2 52 26 b1 9b ec f6 78 9b 32 90 1a 65 81 1b 75 de 02 7d 59 bf c3 df a6 52 93 ad 25 04 a9 30 46 86 75 ab 76 55 d2 f4 92 92 15 c2 74 d2 37 a7 cc 3c 9c c2 04 6c 38 ed 40 03 c2 95 06 35 fa d2 ae 4c a0 68 07 58 6d 48 75 c6 56 97 1a 51 42 c1 10 a1 b8 ac 4a f6 ed e7 15 d2 be e3 80 aa 72 a9 44 a6 44 70 f4 d5 b3 ee b7 72 d2 52 b3 95 46 0a 3e ec 69 c2 91 d8 49 e2 7f 2a 3d 93 e8 f7 fe 8b b7 dd 0e b8 90 b2 12 4e c3 Data Ascii: (h@H4RA^G4qRGt"zBnCH=^A&8B.e+"V%0ybmv$_+ee%w\tB IR&x2eu}YR%0FuvUt7<l8@5LhXmHuVQBJrDDprRF>iI*=N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50209	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	929	OUT	GET /xxrz/250x400/793/0a/d0/0ad0f66216e079931d172870692005c1/0ad0f66216e079931d172870692005c1.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:04 UTC	719	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/jpeg Content-Length: 58912 Connection: close Last-Modified: Wed, 24 Apr 2024 14:38:19 GMT Vary: Accept-Encoding ETag: W/"6629195b-8c9b" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 887 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7R2PQOswczVMJS0C%2B93e1eX2DzlN3KiN8xgFVvT0RwDXdrdgq6TGfifG6MTQQFI26XHvOvk4JOVEc9ny2AqutaqzsgyqssMQcOj69g%2FQUp7BYTF6ir0Lf3736XqsdbSAo%2BvH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8b9cda431f6-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:04 UTC	650	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 62 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCb"
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 53 8b 93 29 71 43 16 cd 37 a4 1f 2b ea 33 cd 20 48 11 31 93 b1 02 43 cd 0c f2 6e 14 fc 56 48 6f a8 81 e8 7c da 8f c5 de 88 73 73 a3 8c c2 9a 32 22 23 5c 48 71 23 d7 ab 7d e2 3d a5 54 a9 41 66 2b 3e 6e 67 90 1c ce be 21 30 5d be 74 dc 22 e6 a0 3c 15 c6 5b f5 b6 f7 41 20 4a 62 4d 49 b1 43 b7 e1 77 5b 12 64 4e e5 ac a1 c9 d1 1b ab 53 22 f3 74 a0 58 67 66 b3 b2 a6 7d b6 8f 27 21 f5 b4 3e be 21 21 f9 f6 b1 20 15 74 67 3a 15 5e ed 99 30 9a 9f e9 06 56 d3 d3 1e 09 e4 55 13 85 0b 11 0b 5a 82 d6 bb d9 0e 61 ea 55 4d 21 0b 7a 8d ea 5d 29 6b e4 bc 5f b4 96 ac 4d 7b 5e cc 23 42 26 fd 6e 92 c2 72 eb 73 9b 9d 16 b7 dc ee 7f 6f 63 a4 2e 6e 83 73 4b 9b 96 74 ad d7 5b 9a 3b 34 a5 bd c4 e5 a7 5a ba 54 e4 f5 a2 94 5a 5f 65 a3 be c0 ad 6e 51 3d 04 38 f0 75 13 8a 5b 05 cf b3 Data Ascii: S)qC7+3 H1CnVHo\|ss2"#\Hq#}=TAf+>ng!0]t"<[A JbMICw[dNS"tXgf}'!>!! tg:^0VUZaUM!z])k_M{^#B&nrsoc.nsKt[;4ZTZ_enQ=8u[
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 90 60 31 84 50 42 46 17 08 31 51 fd 16 3e 45 a7 3b 4d 45 69 99 e3 1c ca 8b 48 8d f7 03 4c 0b 74 f5 01 fd 29 da da 12 50 68 91 01 d0 3a c8 cc ac c3 ea 1f dc c5 4b eb 98 b0 3e e6 1e d7 1c c5 78 b0 c9 cc 5a 33 2f 98 c6 50 9e 60 57 dc c0 8b d7 31 65 0d 73 16 97 e5 9c c2 79 89 33 08 71 fb 98 74 ef 91 39 85 4a 03 30 77 bc 33 2c ff c4 00 31 10 00 01 03 04 02 02 01 03 02 05 05 01 01 00 00 00 03 01 02 04 00 05 06 11 07 12 13 21 14 10 22 31 15 41 08 23 32 33 34 16 17 20 24 25 42 35 ff da 00 08 01 01 00 01 05 02 fc a6 b4 8e 4d 2e 96 bd fd 3d 57 b4 a5 ec 95 a4 ae 95 d5 51 3d ad 22 ad 2b a9 7f 3b eb 4a 95 af 6a da f6 b5 a5 df 5a 23 d8 ca 7c b8 fd 49 73 86 3a 5b a3 15 43 35 86 6a 69 5a f6 b3 5e 15 54 ea ea d7 d3 d5 7e da f6 b5 e9 7e 8b bd 75 dd 2a 6a b5 5a 4a 54 f6 ac Data Ascii: `1PBF1Q>E;MEiHLt)Ph:K>xZ3/P`W1esy3qt9J0w3,1!"1A#234 $%B5M.=WQ="+;JjZ#\|Is:[C5jiZ^T~~u*jZJT
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 48 bd 88 5e 9e d6 2e d5 75 49 50 e3 47 30 5a 91 7e 4c e8 2c 8e d1 41 86 50 09 f0 95 c9 0e 2a 5c 67 46 8b 11 b1 e3 42 9b 52 21 92 29 2f f8 b8 33 5b c0 f2 3c 42 dd 72 0e 33 86 17 99 39 82 d1 86 71 fd a2 24 2e 2f cd b0 16 6f b4 7e 0e c7 1d c7 36 6b 09 26 9e 14 61 09 bb 55 4e 9d 94 8d 4a 57 69 0b 31 bb 43 b1 56 d8 00 aa 5a 40 e1 ba 0b fa d3 4e 46 9d 25 b5 cc 49 09 aa d6 aa dd fd 81 c4 72 ca b9 c9 ec b0 ff 00 c3 14 36 78 20 ff 00 97 79 fe dc 0d a4 bb d2 7f 22 dd 9f db 6d 3c 83 98 71 a6 25 9c b7 17 c4 2f 38 6f 37 7f 10 16 18 f9 04 7e 5c c4 ad fc 75 74 e3 7b 54 7b 8e 53 fc 3d e5 f3 b2 00 e7 18 f0 ec 19 70 51 3a fd eb 43 d3 45 36 47 8d f2 64 96 a5 4b 32 52 4f 93 56 ec a6 74 12 59 73 f8 8f 85 6a c9 c6 68 92 27 34 51 e0 49 7b c7 f2 8d 5b fa 5b d3 40 01 7c 53 2e 81 Data Ascii: H^.uIPG0Z~L,AP*\gFBR!)/3[<Br39q$./o~6k&aUNJWi1CVZ@NF%Ir6x y"m<q%/8o7~\ut{T{S=pQ:CE6GdK2ROVtYsjh'4QI{[[@\|S.
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: ea fb 51 7a 12 21 bb 09 1f f6 6f b5 31 15 1a e4 dd 2a ad 48 54 71 1f aa fb d6 b4 ba 81 14 45 5e 3b b8 63 77 0c 50 9c 4a e7 13 7e b7 ec 25 e8 49 4e 63 43 6c 37 f3 6e 8e 60 e9 c4 24 48 d6 e9 84 24 8b a8 57 cd 71 5f 1c bb 74 fe ed cd 6d f2 65 ff 00 11 d9 65 be 65 92 e5 c4 fc 90 2c da db 8f 5a a4 a6 6d 07 93 f3 70 cd e5 dc 6f fd 65 c7 7f 85 b6 99 55 96 b9 48 f1 05 ed f1 b6 95 51 c9 be d4 e5 7b 68 dd 91 15 fa 47 4d 8e 8f 9f 91 c5 8c 8b 78 95 25 d6 e9 d7 38 cf 07 23 de 84 0f 6b 4a 8f ae af a7 12 61 99 a3 84 85 7c 99 0f 39 66 9d b1 dc 68 ea b3 2e 0b 46 21 e4 ae 65 34 f6 bc 66 ff 00 c9 79 7d b3 24 be 5e 6e f9 95 94 77 7b 96 37 7a b0 72 36 5b 02 ca c2 f4 91 27 9d b9 2c 33 26 cb 24 e9 70 8a ac 75 be 6b 58 f8 32 3b 23 1c 8f 44 72 35 18 e4 a5 ec 8d 90 e4 44 9e 52 3e Data Ascii: Qz!o1*HTqE^;cwPJ~%INcCl7n`$H$Wq_tmeee,ZmpoeUHQ{hGMx%8#kJa\|9fh.F!e4fy}$^nw{7zr6[',3&$pukX2;#Dr5DR>
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 4a 22 aa a2 37 b1 15 59 48 fa ef d6 94 dd 51 1e 57 57 c8 52 44 14 97 31 63 11 16 a3 c9 78 a4 5a 6f 88 61 5c ed ff 00 f6 05 d8 95 70 9a 69 96 2c 73 e3 ce 3d a4 f2 63 ca 8b 04 f3 8f 70 ba 41 c5 e3 de 2e d2 6f 37 30 dd 64 1c 3a ad 52 af 5a 47 f6 a7 7e 1d f6 a7 65 5a db 96 9a c7 b9 79 0a ec 4b d6 53 25 fe c8 bd 88 aa 95 ba 7a ee bb 57 b5 a6 0d bb 28 9e 96 ff 00 21 18 80 78 dc 80 51 aa 0d 08 1a b4 c9 1c 87 de e2 3e 04 a7 4b 34 81 c4 b4 c7 91 0b 32 b3 dc 24 4f ba c4 1e 3f 63 ce b2 f2 e5 17 18 b6 d9 53 16 0d 82 45 2d 93 de dd 4a 9e d1 3e e5 4a 56 a2 d2 22 6f aa 56 45 72 6d 9e c5 28 ce d9 7d 47 7b d5 14 84 5f 1e da fa de a9 5d 4a fd d2 2e a9 c5 77 c0 53 ab 05 06 52 11 62 15 2a 1a 8d cf 87 17 c0 4b 8d d8 96 f3 99 07 14 ac 2a d9 2e f6 51 5b 67 8f 9e 72 11 12 15 5b Data Ascii: J"7YHQWWRD1cxZoa\pi,s=cpA.o70d:RZG~eZyKS%zW(!xQ>K42$O?cSE-J>JV"oVErm(}G{_]J.wSRbK.Q[gr[
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 01 27 4d f6 28 c0 d7 2c 4c 22 9a 34 cc c3 c8 cb 2c 21 93 c9 95 be 57 8c bc a9 9a 0d 94 9c d3 ab 1e 13 11 66 d4 ec 4f c3 11 30 82 45 91 b5 6a 69 c9 14 b7 6a 86 ab 7e bf bb c7 da 11 70 e7 2c 3d c9 46 b1 f5 c0 37 ec 38 4d 0c 02 47 76 45 9b c2 16 3f 79 94 0e a0 fa e3 2f 00 9b 4c 69 3c 81 59 59 c8 a1 6a ea 46 e2 c6 16 06 65 7c c0 9d 89 85 e9 ec 51 02 c5 90 6c ed e5 58 9e 16 56 85 5f 31 34 90 cc b6 5f 75 1c af cf 1a 99 09 11 c8 fa 75 ea 1c fc b6 3f e7 1a 9b 56 ab 3a ae f5 1e 66 fa e0 bb b5 6a 62 6b 6c 19 64 93 df 62 d5 b5 9b ab df fc 63 6f 61 98 fe 67 2f 97 78 ad 8c 40 a3 a0 f7 87 bb cf e5 8f b3 e3 e1 ce 85 9d 43 3c 6e 74 f5 03 95 5f ad e0 d4 b9 39 92 3d 28 e9 33 16 55 a0 64 00 df 5a df e5 86 24 fd 94 aa 7d e0 fa 6f aa ad 9e 43 b8 bd 80 57 78 0a c1 24 6d 8d f0 Data Ascii: 'M(,L"4,!WfO0Ejij~p,=F78MGvE?y/Li<YYjFe\|QlXV_14_uu?V:fjbkldbcoag/x@C<nt_9=(3UdZ$}oCWx$m
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 42 fe f4 99 08 e7 90 07 3d 77 35 b8 e8 77 b6 3f 24 b5 da c8 8b 12 d6 c4 50 ea 4c ae b1 ce 63 6e 3f 94 6d 2c da 1e 3e 9d 59 93 1b 94 ec ac c6 62 b2 a3 5b bb 09 92 f4 84 0f 22 58 57 8f f7 5f 75 48 c6 d1 1e 84 6a a3 53 c9 eb b6 a3 82 e6 33 b7 62 9b 1f 34 46 bd 11 7a 0c a9 f1 aa ac d0 4a aa 63 59 57 52 43 2b 92 e2 5d 01 50 74 52 41 d0 df b9 80 96 7c 7f 73 63 3e 2f 15 6b 20 f6 ab 66 62 d2 47 46 96 5d f1 c9 e4 d3 42 50 81 a2 16 49 15 46 83 54 f4 74 8c ae 8a e8 77 23 a8 65 61 ec ca ca 18 11 fa 10 7e 4c 34 b0 f9 bf 8f c4 58 ca 0c 84 c3 25 f8 93 c3 e3 10 cd 59 92 51 bd 17 51 cc 67 68 46 fb 06 f6 eb 31 8f c5 a7 72 41 71 f3 c2 8e 42 3a 7e 1a d4 d2 0f 29 48 7c 4e 81 bd f5 d4 0d 64 1a fb 6d e3 5e af c9 81 cb f6 dc 78 d3 9a 1f 0f 03 c3 1c b9 04 aa ec a6 58 58 6c d7 d0 Data Ascii: B=w5w?$PLcn?m,>Yb["XW_uHjS3b4FzJcYWRC+]PtRA\|sc>/k fbGF]BPIFTtw#ea~L4X%YQQghF1rAqB:~)H\|Ndm^xXXl
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 15 82 4a c2 43 a2 b8 85 ad 08 93 42 78 f1 b3 8d 75 53 af 07 91 fa fc c2 aa dc 32 86 1f 62 01 ff 00 9e b6 2f b6 d5 d3 e8 bb 57 41 fd 38 fd 3a 2a 0f b8 07 4f b8 07 fe 7a d0 7d bf cd 6b d7 ff c4 00 51 10 00 01 03 02 03 05 04 07 05 04 07 06 03 07 05 00 01 02 03 11 04 21 00 12 31 05 13 22 41 51 32 61 71 81 06 14 23 42 91 a1 b1 52 c1 d1 e1 f0 15 33 43 62 10 24 53 72 82 a2 f1 25 34 73 92 b2 c2 07 16 d2 20 30 44 54 83 a3 b3 35 63 64 74 93 ff da 00 08 01 01 00 06 3f 02 1a 9b fd 71 6e b1 3c b1 e3 a7 eb a0 c0 bd 87 5c 4c cc 6b cf cf 4c 75 3f af 86 35 f8 6b e7 8d 01 27 99 be 35 f9 7e 78 8e 91 ac db e7 8e d1 13 8b 73 06 7e 58 1f cb e2 31 98 4f 28 ef c7 3b 8d 7e be 18 3d c3 f4 71 af 7d cf e7 8f 33 7b f2 f3 c7 fa da 47 8e 04 19 d7 53 7c 19 9e f3 cf cb c7 16 d7 cc 62 39 Data Ascii: JCBxuS2b/WA8:*Oz}kQ!1"AQ2aq#BR3Cb$Sr%4s 0DT5cdt?qn<\LkLu?5k'5~xs~X1O(;~=q}3{GS\|b9
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 55 0e cf 41 9f 2f 6b c8 0e bd 31 50 90 b5 2c 10 83 39 37 5e d3 3a 72 00 82 53 2a 50 52 c0 09 99 eb 85 d3 86 f3 d4 29 23 79 c6 86 c8 4e 68 28 4a f7 95 09 81 23 7b c3 c6 78 2c 81 c4 5e 6d 28 79 6d 1f 67 4c c9 71 c1 52 ea 6e 5a 25 a0 87 03 68 41 df 3c a4 32 e2 0b 49 2d e7 41 70 2b 0d bb b4 36 9a bd 71 87 19 7d 3b 31 a7 59 15 65 9f 79 1e b6 54 52 d2 50 d9 de 29 b2 97 56 c3 77 ca 99 cb 86 e8 d9 a7 55 6b 4f ad 0c 3e e5 42 33 d1 ba d2 0f 13 a9 ab 55 35 26 f7 2a 08 53 ce a2 98 2d 6a 52 1d 41 4a 91 bc 2a d9 ec d2 bf b5 96 8f 6e dd 5a a9 91 47 44 ca 53 09 29 6d 6b ad f5 ca fc c9 50 1e de a1 b0 ac 81 49 4a a5 58 7c ae 81 da 54 53 46 f9 75 2a a3 a4 6d 80 b0 40 89 5b 4d 89 f7 50 95 b9 c9 49 27 b5 86 e9 44 d3 53 bc 95 b3 48 b7 1d 6d aa 6a 79 49 de 6e 97 9d 3e b0 5c de Data Ascii: UA/k1P,97^:rSPR)#yNh(J#{x,^m(ymgLqRnZ%hA<2I-Ap+6q};1YeyTRP)VwUkO>B3U5&S-jRAJnZGDS)mkPIJX\|TSFum@[MPI'DSHmjyIn>\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50212	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	832	OUT	GET /media/New%20navigation_Rebrand%203.0/wheat%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	800	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/png Content-Length: 1182 Connection: close Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=2385 ETag: "3a1fac4c518de242143d9dedfb584f57" Last-Modified: Tue, 30 Aug 2022 08:01:18 GMT Via: 1.1 dcaec0b05596b42ef5dab9e145ac961e.cloudfront.net (CloudFront) X-Amz-Cf-Id: Hn-VOGl2m23UExN-6CtjGh6d9xubJDGCHtrhyoMGpP746YeQwmUddA== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Miss from cloudfront x-amz-version-id: im_pbjtDDNV1131B0fy.Pecn6.NAjUEi CF-Cache-Status: HIT Age: 19246 Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8b9cc367497-MIA
2024-04-26 18:33:04 UTC	569	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 ea 50 4c 54 45 00 00 00 ef cf 80 df cf 80 ef bf 80 ef c7 80 e7 c7 80 ea ca 80 ea c5 80 eb c7 80 eb c3 80 ec c9 80 ec c6 80 ec c7 82 ec c7 80 ec c5 80 ef c8 83 ed c8 80 ed c6 82 ed c6 80 ea c6 80 ef c9 82 ef c7 82 eb c7 80 eb c5 80 ef c8 82 ed c6 82 ec c6 81 ec c6 80 ee c8 82 ec c6 81 ec c6 80 ee c7 81 ec c7 80 ee c8 81 ee c6 81 ed c6 81 ed c6 80 ee c7 81 ed c7 81 ed c7 80 ed c7 81 ed c6 81 ff ff ff fe fc f7 fe fb f8 fe fb f7 fd f8 ef fc f5 e7 fc f4 e7 fb f1 df fa ee d7 fa ed d8 f9 ed d8 f9 ea d0 f9 ea cf f8 ea d0 f8 e7 c8 f8 e7 c7 f7 e7 c8 f7 e6 c8 f6 e3 c0 f5 e0 Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTE
2024-04-26 18:33:04 UTC	613	IN	Data Raw: a6 43 e7 0b 4b e8 0d e6 ee 65 61 d2 45 cd 96 90 2c 27 c3 dc 62 8a 25 0e 1d 3b 34 52 ca 29 4f e9 0d 1a c9 39 cd d9 0c cb 75 81 eb 39 2e e0 5d bf 88 a8 ea 89 56 a3 d9 7d 3f 15 e9 84 94 6a 03 61 4d 56 66 33 a0 4b d3 a2 46 b5 36 6b 65 93 22 89 98 72 0f f9 ff 41 69 6d e6 06 f1 2c c4 93 cb 03 3c d2 a8 6c 6e 4d 34 b9 a3 94 ce c4 93 4b f2 73 09 52 54 ec 42 17 4d 78 87 c3 e2 49 6f e4 f5 97 34 c9 b3 b7 38 43 0c 96 8f 6b b9 55 2a cf d2 eb 40 54 c4 9f fd a9 ee fa 85 cf f0 15 b5 a6 88 43 9a 6f cf 64 9a a1 f0 53 73 2e 04 88 f1 34 e2 22 d0 ca 4c b7 93 04 8c 65 4d 1f f2 35 94 5b f8 07 35 c0 b4 42 f4 47 16 2d ff 32 9c c7 61 9f d2 e0 9a 21 56 0f c4 44 55 8b 80 06 cb 73 a3 85 78 8b 40 09 15 3b 94 06 49 4c 57 82 14 75 34 cd 9e f3 b7 2a af 0d 31 65 74 65 20 e3 b8 4e 6d 34 cc Data Ascii: CKeaE,'b%;4R)O9u9.]V}?jaMVf3KF6ke"rAim,<lnM4KsRTBMxIo48CkU@TCodSs.4"LeM5[5BG-2a!VDUsx@;ILWu41ete Nm4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50211	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	929	OUT	GET /xxrz/250x400/793/6c/f6/6cf634239aa04e254cc4f6e675b4ad8a/6cf634239aa04e254cc4f6e675b4ad8a.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:04 UTC	723	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/jpeg Content-Length: 82156 Connection: close Last-Modified: Wed, 24 Apr 2024 14:37:35 GMT Vary: Accept-Encoding ETag: W/"6629192f-1247e" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5335 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3MOkUB9ibBF9urCvzinvvdNAvj4l4OApvjzBgK3eJFvYQR4rPhEqjNs3BCR4RWBI8oE0AdyTIYrYWJwF7u%2F%2BrXR31OIF%2Bq0bFa9hIhNRVHC3JI93AiNpr93kWXlhK%2Fzqy8HD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8b9cdb4da6f-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:04 UTC	646	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 93 50 d3 47 04 90 89 79 85 5b a6 0c b8 83 3c f1 7d 77 13 9f 79 85 6e 73 b5 b8 6e b1 ec 89 30 09 f1 15 d4 95 56 d5 99 d7 d0 9e d5 57 2b 4b e7 6a 48 61 00 a4 07 71 17 c4 5a dc d0 ee ed e8 24 9a f1 fd a6 a2 f2 da 03 57 a5 73 36 b9 99 52 34 fd 7e 7e b2 43 9f f4 9a d0 dc e0 7c 04 fc 6c e2 9b 9f 35 89 79 d9 4c ac 8a 5f e5 46 83 e5 b4 2b 28 26 72 b0 90 87 b0 fc f1 9d 2c 59 45 5d e6 40 f5 1f 55 20 ac 24 fa 47 10 6b bc cf 7a be db ad af 21 cb a9 b2 c3 1e 87 13 2d c0 82 83 3b ca 12 bd dd 1e 92 79 44 30 20 a9 85 ac 59 e9 41 40 fe 6a 35 61 d3 b4 34 19 02 35 16 a7 13 7f 44 d1 e3 22 20 21 e5 c4 aa ec d7 24 71 8b c4 0a 0c 18 dc 98 3b d1 00 5a 55 19 f9 2e b1 bf dc b6 32 32 04 4d da ef cb 06 ab 90 aa 67 68 74 9d 6b 27 9d 9a 0d 08 8f ed 50 0e e1 77 b6 78 bc f7 e6 b2 5f 20 Data Ascii: PGy[<}wynsn0VW+KjHaqZ$Ws6R4~~C\|l5yL_F+(&r,YE]@U $Gkz!-;yD0 YA@j5a45D" !$q;ZU.22Mghtk'Pwx_
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: b9 de 3f 4d 4a 7d be 7c 9e 25 ed 41 42 3b 0a e3 1b 88 0b 13 2a 41 da df c4 7c 7d 68 2c 7a f8 f9 b3 bc e8 c6 d7 3a 9e 5a 19 1e bc 55 ec 59 e1 fb 90 18 70 d1 fa 4e 37 97 34 ee 9d 8a 8f 99 1e 22 82 21 16 2c 57 d7 33 13 df 2c 5f 57 91 e1 2a 27 cf a6 5e 36 d5 f0 f1 ae 55 e0 89 56 cb ea 79 68 89 ad 18 92 5e fc 6c 95 75 25 c4 26 c9 bc 33 26 fa e8 97 22 51 25 6b 9c be 46 0d b9 83 b6 5d dc af 7c f1 ed b4 e9 22 41 22 ef 37 9e cc 38 aa 2b cb 91 5b 71 ab 74 41 57 3d f3 5f a4 64 90 3b 59 19 5c 7f 33 b5 62 43 bf b1 af 93 de ec c7 7d c9 61 cb ed c9 47 d3 57 9a 66 e3 35 7c c0 2e 9d 26 bb e4 ed f9 66 b5 23 0b 70 28 a7 06 9a 2a 14 66 23 19 08 41 5f 50 b3 dd c7 2e 99 f3 8c a9 75 c6 d5 3c b0 29 33 6f 8d d3 3a dd 61 91 7e 24 f6 f0 5c 3f b5 b8 31 9d b9 1c 2e e5 c4 18 95 55 56 Data Ascii: ?MJ}\|%AB;A\|}h,z:ZUYpN74"!,W3,_W'^6UVyh^lu%&3&"Q%kF]\|"A"78+[qtAW=_d;Y\3bC}aGWf5\|.&f#p(*f#A_P.u<)3o:a~$\?1.UV
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 97 9e e1 62 87 65 db 53 c7 c9 bb 2f 51 27 1b d8 5a 66 a9 5a fb d2 e5 cf 6b ef 05 66 67 72 45 c9 3f 8e 42 93 e2 f8 66 91 8d 6b de ee 3b e0 7a f4 56 55 ac 6f 3c 7f 0e fe d4 fd b5 6c 90 7f ca ff 00 b7 78 f4 f6 42 0c 43 ed 96 52 b2 50 1f 7b 7d fb 39 ab 57 13 d3 7a 94 6a 74 ae db 8f e8 dd c3 dd fb 11 bd f3 65 91 4a eb eb 9c 90 34 e3 d6 d3 d0 ba 2b 8c 49 85 43 7b 46 65 35 9a b5 7c f5 de 43 f5 4d b6 b7 34 46 76 e3 ae aa e3 99 69 2a e6 0e 75 44 63 1d 2c 70 36 63 e0 6f 3f 24 c7 44 0d 64 f7 36 b4 95 42 d1 d4 f3 fb fa 94 54 00 8b b0 d5 c9 aa bb 20 ff 00 f3 49 66 9b 91 cc c8 e4 f7 78 97 05 d8 79 7e bf ae b2 f5 3b ab f6 cb de dd 8f 34 85 f6 d7 66 dc 4b 45 dd 1d 8c 3f 3a ef d4 0a da ae fe 98 aa bd 7d 6e 6e 3f 81 42 8a 26 d5 38 46 0d d8 7d 7a eb d9 ff 00 6b b4 e8 9d 7f Data Ascii: beS/Q'ZfZkfgrE?Bfk;zVUo<lxBCRP{}9WzjteJ4+IC{Fe5\|CM4Fvi*uDc,p6co?$Dd6BT Ifxy~;4fKE?:}nn?B&8F}zk
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 3e 98 49 25 2a fe 70 e0 13 25 25 6a 3f 70 34 e2 5c 81 2d 4c 82 1f 75 7d f9 7a 6c d4 b0 25 ba d8 d4 e6 23 44 e4 6c 5f 33 46 ae 15 af 57 32 25 54 74 ee f2 bc 6a f0 59 9a 8e ea db 19 ec fa f7 89 de 9d 86 f6 c9 df 3d 84 92 4b de bd 86 8a fe fe ec 86 f0 c5 5b 12 a0 6f c5 cb 3b 34 a6 ab 93 47 66 5b a9 89 7b 28 27 73 5b c5 82 29 52 55 46 4d 57 1c 0f 84 2f ec 91 52 08 23 0c 69 0e 7d f7 b5 66 16 49 27 7a da c0 fd 9c 31 ba 09 a4 af ad b2 a6 28 3f b3 b1 84 5f ea 41 bc 35 61 58 9d ed f1 37 b7 ca f8 5f 2a d5 4e 35 7f bf 4c 96 46 95 98 f3 c1 d3 d9 c7 0a d9 52 78 51 b1 36 24 96 46 81 33 da 34 7e 46 fc 4d 41 24 95 9c cb d2 dc eb 35 f4 bf 8b 6c 8e f8 2b 11 1f 29 10 ac 53 ce 47 da d2 35 ef 7c 91 46 3a 91 45 9f 86 c6 7b 82 11 d6 5f 70 9f 60 e0 7e e2 0c 46 a1 e4 08 39 55 97 Data Ascii: >I%p%%j?p4\-Lu}zl%#Dl_3FW2%TtjY=K[o;4Gf[{('s[)RUFMW/R#i}fI'z1(?_A5aX7_N5LFRxQ6$F34~FMA$5l+)SG5\|F:E{_p`~F9U
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 13 23 e7 3a 6e 8d 63 c8 ac 1c 1e 76 4b ef f1 b7 f9 18 5f da ba 48 03 63 1b ea 61 1a 9d 7d 9b b5 12 92 db 21 24 1a 0a b1 ab 15 e3 c1 ba ea f3 a6 3f b6 ba f6 65 d9 f6 25 4d a5 75 05 db 60 96 2d 35 6c 50 69 33 f5 d6 d1 56 d1 dc 25 d5 d9 20 60 b3 11 f7 59 10 0f 4b df 04 58 96 41 6c a4 a1 d6 55 0f 6b 7e b4 0e 1a 1c cd 69 e7 88 4a fd d1 f3 56 fd bc 50 c0 d9 39 97 eb b3 09 cd 27 9f af aa 0d 0a d9 6a 66 21 24 e7 a7 48 12 6a dd 36 96 0c 9d b6 d7 2b 36 87 33 d4 39 39 33 79 aa ed e4 77 1b cf 51 85 fc d8 80 02 22 c8 ec 75 6c 14 f5 7d cf da 53 67 ee 2b be 4d 55 a6 4b a4 6e ec 6c 3b 6f 17 8d c3 83 d4 ba fc a6 6a 1a de cb eb c8 86 da f6 dd 05 ad 16 23 4b 9a 18 9f dd 7e ae 46 8f db 5d 42 89 9e d5 e2 b4 69 dc dd 94 ea f9 e1 b8 18 d9 d6 a6 44 a3 a4 b3 75 6d 39 35 f2 82 54 Data Ascii: #:ncvK_Hca}!$?e%Mu`-5lPi3V% `YKXAlUk~iJVP9'jf!$Hj6+63993ywQ"ul}Sg+MUKnl;oj#K~F]BiDum95T
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: b1 ec 90 22 aa ba f4 af 3c d2 68 bc 7d 7c fd 7c 71 dc f5 21 a2 0a ab 0e e9 9c f7 2f 9e 46 c8 df c9 46 9e 09 3d a8 8c 7c ad 44 62 ff 00 9c 8c 45 73 87 58 65 86 3f 6c 39 41 e8 56 2c e9 50 ca 4d fd d2 66 2b 27 3d 74 f6 9a 4b c7 59 17 48 24 4d 5b 17 32 c0 ef b7 91 1d 80 d2 5a 5b 1f 52 b5 90 02 7a 84 5f 3b a6 b4 41 22 f4 d8 4b 5f a2 ff 00 a2 e2 92 9e fc 4b af 4d 9d 6e 74 b6 fe 99 46 1d f6 fd 27 6f 5c 81 f5 3e b8 c1 ad f0 fa 0a 57 b8 47 46 ab 1b 98 a1 49 01 03 a0 af f3 1c 5e 64 ac f7 b6 2c fa b8 71 f6 97 b6 f7 f6 e1 d8 4b 5d 4c d8 de 41 25 96 b1 70 36 a0 a9 24 4c 94 2c 0e 59 d3 10 15 bf b2 70 2c 5d 22 f6 9b 03 90 1e a5 d0 b2 8b b2 63 7f bb 89 f5 f3 f4 f3 f4 5e 48 df 28 70 de f4 3e 9e 22 0a 38 2c ec 13 ec 4b cc c8 cd 30 18 32 35 ec 8b ac ff 00 19 8d 76 44 4a 0d Data Ascii: "<h}\|\|q!/FF=\|DbEsXe?l9AV,PMf+'=tKYH$M[2Z[Rz_;A"K_KMntF'o\>WGFI^d,qK]LA%p6$L,Yp,]"c^H(p>"8,K025vDJ
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 49 c3 51 1d 5d 0e 90 3b e3 f1 26 65 30 2f 47 45 51 51 18 d8 b4 51 97 50 7e ad c7 43 e6 30 3c 3b 9d 15 df 2b ac bf ac 4d 84 f0 ee 76 0f fe d9 58 2f ff 00 49 bf 96 32 2c 97 39 4c 8a 96 a1 e3 48 d8 44 bc 58 d9 18 ca 81 00 16 65 21 46 a2 9a 5c aa b3 10 0e e2 f8 a3 fc 6d 4b 4d 19 8e 9e 92 a1 74 dc 15 92 44 7b 90 3d e5 20 ef 8a fc cb 37 69 5b 5c f5 30 1d 4e a6 38 d8 c6 80 ab 5a cb 6b 5e d6 b5 ce f8 96 2c d5 e8 05 74 92 d4 bd 23 4e 60 bb 48 e4 6a 0b be c4 f4 dc af eb 63 c6 59 56 5d 2e 41 51 57 25 24 06 a5 59 38 53 2a 22 4e 24 66 0a 09 9b 62 c9 6b ea 56 36 3b 77 df 12 65 ac ea 3d e7 ec a0 0e 9f cf 03 2b 9c d9 b8 6c 6d 61 63 b3 7c 77 ed b6 3f 06 5e 1c 15 39 93 66 b2 ab 35 3e 5c 2f 1a b8 b8 35 92 7b bd 47 bd 12 5d cf d5 62 b8 eb 8d 58 f1 3d 5f 1e a2 2a 08 cf 2c 67 Data Ascii: IQ];&e0/GEQQQP~C0<;+MvX/I2,9LHDXe!F\mKMtD{= 7i[\0N8Zk^,t#N`HjcYV].AQW%$Y8S"N$fbkV6;we=+lmac\|w?^9f5>\/5{G]bX=_,g
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 74 23 ad f1 24 30 33 42 d2 46 93 70 25 49 53 5a f4 74 65 23 bf a6 ff 00 66 29 73 5a 6a 81 62 78 32 7d 49 08 03 ec 6e 87 01 95 80 65 21 81 dc 10 6e 2d f1 1b 7c b3 17 00 14 5d 46 fe 76 b7 af 43 88 a4 d6 07 d6 fa 5e 9f cf a7 5c 57 51 c8 21 0b 32 3c 42 61 f3 2d 20 b2 49 e4 c0 86 bd bf 66 32 ca 8a 9a 79 6a 28 55 0b eb 0f a9 34 ea 00 aa f3 11 fa cb d3 cf 6f 3c 78 6e ba 96 38 78 7e df 0d 35 bd f8 9a 9d 78 da 05 b9 0c ef ea 07 c3 19 9f 89 62 81 a5 82 8c a1 57 61 71 18 03 8c d6 b3 5f c9 7a 06 3d 09 1b 5f 7c 7b 0b 53 b3 37 bc 84 92 3d d0 c1 ae 08 b1 f7 9a f8 4a 8a a5 a8 82 a5 c9 12 d3 b4 5c 23 60 74 18 98 32 6d f1 17 37 ea 7b e2 a7 c4 55 19 84 d4 b5 31 e5 9c 3a e8 c1 59 a5 86 66 65 ab a6 f7 f8 52 43 6b 80 b6 e4 2a f7 5d f1 9d d5 ad 5d 73 d4 70 cc 46 d6 70 de f3 bd Data Ascii: t#$03BFp%ISZte#f)sZjbx2}Ine!n-\|]FvC^\WQ!2<Ba- If2yj(U4o<xn8x~5xbWaq_z=_\|{S7=J\#`t2m7{U1:YfeRCk*]]spFp
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: cb e7 e2 01 04 8d 61 a7 6e 9d ed 6b 9f 4f e3 8c 99 bc 39 07 b5 4b 9c 42 8e c1 81 8d 99 a6 22 45 b6 93 18 8a 32 14 ba 91 7b 9e ba bd 31 3e 6d e1 03 97 c9 2d 15 15 22 b0 52 4c 53 41 27 18 bd f9 15 4a b0 95 83 7d 65 7b 2d f9 b6 c7 86 4d 2d 4e 6c cf 53 49 17 02 6a 19 64 10 30 92 58 90 99 a3 8e 35 4d 7a cd cd fe 97 bb aa e3 7c 78 a6 b7 2e a4 cc 4d 26 58 9c 1d 2b c2 a9 e1 86 5f 67 a9 0d a1 ca 96 5b 93 a6 c1 b7 1d fc f1 3b d0 97 11 e5 75 53 b0 45 1c 51 c2 91 d7 57 28 e2 03 21 04 17 b1 24 0d b6 da c3 6f 96 97 2c af ad a9 96 2c b6 92 6a b2 8c ed 2a c0 ba c8 0e d7 bb 22 f3 5a e6 d7 e9 f0 be 25 c8 f3 8a 5e 14 75 34 35 31 c9 28 bf ce 46 e1 47 43 ef 58 93 6d af e4 71 25 0e 77 5b 1f b3 45 4b 53 3c 74 ef f3 8b 18 e2 69 7f a3 ab ba f9 8d 40 5c 7c 30 f4 d5 74 d5 09 4b 3d Data Ascii: ankO9KB"E2{1>m-"RLSA'J}e{-M-NlSIjd0X5Mz\|x.M&X+_g[;uSEQW(!$o,,j*"Z%^u451(FGCXmq%w[EKS<ti@\\|0tK=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50214	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	929	OUT	GET /xxrz/250x400/793/52/7b/527bdc2908423dffab686f4838487577/527bdc2908423dffab686f4838487577.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:04 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/jpeg Content-Length: 88588 Connection: close Last-Modified: Fri, 26 Apr 2024 13:46:51 GMT Vary: Accept-Encoding ETag: W/"662bb04b-14b03" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 887 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7nl1NpyS%2B6wA43LzDk1jtF5lITzXEhX9cQlh2FS2IHSsEAz%2F14aoLa5yqBiXerCExzgmezR7SA55qvuA7ebACbq%2FtwP9borvAeVLvJkH60QWHcnAmcJSwamxJCd%2BsJ8T%2BSVH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8b9dae1746e-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:04 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 01 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: c0 8d 72 f3 c6 d9 e7 5d 7e d9 6a 8f 63 91 ec de c1 da 4d 10 1f 2b ca a7 0a 52 78 6a 35 80 ad 74 f4 06 d6 1a fc b5 e6 e2 9c c0 5f 7c 29 36 bf 14 24 85 1d 1d 5e 2d 13 49 89 8c 72 15 e9 87 95 5a 2a 53 1a 42 cc 40 e3 71 92 aa 9f 02 e5 b8 17 d0 aa 4a de be e6 bf cd ab f1 c2 ac 26 af 10 09 d7 ba d9 4a 6e ec a7 d1 fe 79 2c 3d ea a9 eb 5b 74 6d 8a 16 33 bb 1b 61 68 68 7d b4 a6 e4 70 15 8e 1e c5 68 fc 1c b5 cc 8c 11 56 1a e8 5c 10 f2 bd 91 0a ac 48 ff 00 2a 1c 44 42 92 3d 49 5c e3 36 28 78 59 69 97 1f 8a fe bb a1 01 63 a8 7d c5 7e 12 56 b9 45 33 8b 83 77 1e be 8e 42 e8 a9 73 f6 44 b7 d6 d7 1e 9c b9 0d f7 99 d2 bb 14 0e 1c 00 27 97 f5 cc bf 9c db 47 a0 59 d1 51 89 60 6d fb 0a 5a f3 e0 6c 70 2c f1 85 d3 28 e7 ed b8 e0 32 f0 fc 16 32 4d 3c 81 9e 65 30 66 b2 99 fd 1b Data Ascii: r]~jcM+Rxj5t_\|)6$^-IrZSB@qJ&Jny,=[tm3ahh}phV\HDB=I\6(xYic}~VE3wBsD'GYQ`mZlp,(22M<e0f
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 6c c5 cb ad 6a 91 84 b7 10 78 a1 cf f3 67 21 25 15 f6 39 22 d5 c9 0b 93 6a 51 20 4b 20 8e fc 11 59 23 bc 22 8d 97 85 d0 47 41 15 e9 e8 7e a7 dd 90 a4 06 cc cd 09 f6 75 de 9a f7 09 d4 3a d3 74 e0 17 2a 05 08 b2 29 01 c2 6b 83 d8 00 d2 77 b4 ea c3 e7 bd 9b a6 ef 7b 95 52 b0 06 5f 65 9e 21 89 7b 07 d3 be 6c b3 fa 1a fe 70 b6 c3 1f b1 d0 ba 92 be 6e 89 b6 29 6c de 7f 76 fa 0e 16 49 7e f3 ca f8 9b 3a df 1f 04 76 e7 2c cb 80 d1 55 69 4e bb 0c 5f e5 e9 0a 26 64 5c f4 5d e8 73 2c b0 39 4c 19 2b 0d 3b 51 43 cb 5c a0 6c ac 5d 73 8a d4 ce 07 4d ec be 42 7e f8 94 96 9d 6d b6 1f d7 f1 0b 84 72 6b 46 51 27 77 18 19 c1 f3 c1 e8 c7 1b 5a 7b 5a a5 cc a1 d0 59 5c ac 26 d9 46 49 2e ed 30 e9 04 76 98 b4 89 88 87 c8 14 98 61 d3 78 15 c2 43 1c 86 74 73 06 c8 7b 19 8b 35 ea 22 Data Ascii: ljxg!%9"jQ K Y#"GA~u:t*)kw{R_e!{lpn)lvI~:v,UiN_&d\]s,9L+;QC\l]sMB~mrkFQ'wZ{ZY\&FI.0vaxCts{5"
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 5b 2d d3 41 9a 15 91 10 cd 70 74 f9 4f 6b 98 c1 4b 3a cb 6c 02 ae 4b 4a 35 ab b5 2b 3d 22 ba de 5b 07 49 b2 11 5a d7 6e 7a bd 86 89 6f 4c f5 65 fd 8d 0a 79 30 fd 73 8f f3 c1 2c 41 4e 2c 1f 11 1d 62 e9 c2 50 57 e2 f5 7a 84 30 d0 84 55 7d 38 79 f4 c0 31 d5 04 17 55 ad 10 87 15 05 ef 9c c4 3f 81 97 1c a1 b9 75 57 bb 96 7f 7e 99 94 2e 1d 31 ab 2e 63 9d 5b a7 1e 11 d1 65 b9 0d 6a 78 60 81 db f4 f6 4a 9a 09 76 2a 1c dc ea ac 75 da 3d 7f b4 10 6d 6d 76 cb 2f 39 8b 00 2e 78 8c cc 47 7c d7 bf 29 4f d7 74 d6 ba ee ca f0 c2 cd d5 95 6c 45 2f af 8c cd 54 3f 9f a4 2e 49 16 49 c2 a8 7c f2 55 04 89 1f 10 be bb 41 21 a6 78 ac 30 51 58 66 4c d7 5b 20 54 d0 2f cb 0b 23 98 f2 11 07 ab d2 3c f3 7d d6 13 b6 4a ef 53 62 a4 94 39 ae 71 2e aa 94 90 b4 dc 16 90 9b d5 df 81 05 55 Data Ascii: [-AptOkK:lKJ5+="[IZnzoLey0s,AN,bPWz0U}8y1U?uW~.1.c[ejx`Jv*u=mmv/9.xG\|)OtlE/T?.II\|UA!x0QXfL[ T/#<}JSb9q.U
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: ab ec 9a be 75 6b 8a d7 29 4f 8c 55 ec aa e1 da 87 2c 0d 5d 02 6c 36 0e c8 57 2d 53 f3 6a b0 cb c2 4f a8 bb 05 c1 a1 7d 75 a4 d9 ea 3b 6a 5b 0a b5 ad 94 91 62 51 86 01 5f ee 96 13 2e 09 f5 18 e6 6b eb 9f 3d b7 5e d7 c5 ba a4 6f aa ad 49 4f 73 3d c2 9d d7 50 be be d8 58 a4 47 5a 1d 21 cb 69 5c fd ae eb b7 d4 6c 75 91 e9 fd 90 bb 3a ca d6 06 b0 a8 88 84 23 07 fa 98 da 68 31 71 7d a3 eb e2 a8 bc 1d 22 44 b3 6f d6 ba a5 a5 43 5d a5 d5 76 1c 1c 19 84 5b 53 67 58 48 6c 55 cb 2c 39 ed ee c4 4d e8 43 ac 9e cb ab ec 94 17 cb 77 cb 94 a6 d9 fa ab 71 12 17 d5 c7 08 a1 f0 34 c4 2c fc 39 02 28 49 7c 05 c6 19 af a9 41 1e d9 d8 36 25 2b 7b 1e 70 c3 37 da 8d a0 96 a3 a3 8c bb 80 f2 41 ab 1a c7 28 a3 d2 f1 a7 57 54 dc 13 41 bd 6b a9 27 ea b1 f6 2b 71 90 d7 81 51 da 86 0a Data Ascii: uk)OU,]l6W-SjO}u;j[bQ_.k=^oIOs=PXGZ!i\lu:#h1q}"DoC]v[SgXHlU,9MCwq4,9(I\|A6%+{p7A(WTAk'+qQ
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 6a fa 00 d6 99 ec 0e af a1 d3 dd ac 18 08 a5 8f 55 5e 55 31 fb 3c 28 cb f6 fc 2b e9 61 99 e5 33 cb 32 4c 59 9a eb 34 a9 31 36 25 62 a9 1f b2 7a e1 f5 ac ed 03 0c de 5c 4e 33 b0 78 d3 91 3e 5c 3c 43 18 95 8c c7 0b 7f 3c 5f 32 8f 16 99 0a 2d 2a c2 36 7a fa 5f 12 8c f8 88 b0 7f ec 5b 4a 13 bc 2a 31 9a 04 89 03 ea 64 15 09 64 dd 1d ab b0 5a ca 9b 4d 8d fd 3f 58 af d3 eb be 6c 11 66 f5 9a ed 87 9e 6a 68 c7 dc 2e 2a 45 19 b9 1b b2 4f 76 af 44 76 ef 47 11 57 13 6d 48 84 58 8c d5 f9 e1 a0 30 b9 57 86 65 c8 78 e6 99 7b 59 ae df 6b 55 aa ec 0f 03 11 c9 0c cb 40 0b 52 86 09 1c 1f 92 69 ac 97 5b fb 8d 3e 9d 2e df 1b c2 d9 6e b4 b5 b5 3b 46 5e 5d 22 45 88 00 11 5a 0f 82 36 19 8c 18 0c 76 2c a3 62 e0 be 5e aa 0d 6a ab 5d 44 08 fb ca e1 7e a9 2d 1c 12 60 d9 0f b3 5b ba Data Ascii: jU^U1<(+a32LY416%bz\N3x>\<C<_2-6z_[J1ddZM?Xlfjh.*EOvDvGWmHX0Wex{YkU@Ri[>.n;F^]"EZ6v,b^j]D~-`[
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: df c8 13 1c 61 ef c6 61 09 c7 2c 6c 72 f7 21 b0 d7 37 51 41 bb 5e 87 45 a9 dc 59 ff 00 eb 96 cd ca 12 b1 67 e4 d5 a0 8c 71 7e ad 33 16 97 50 ab 42 2b 88 12 9c a4 48 64 a3 73 22 65 29 8f 05 71 c6 b1 a8 27 9e 93 ea 7c 22 ed 8b 28 69 3b 1e af d2 a8 fe 9c 7b 29 d8 a9 d3 96 94 3d 5c 7d 31 2d 77 46 53 47 8e a1 ab bf ab df 50 83 6c d3 b6 fc b9 a5 6d 5a 56 ae 86 99 dd d8 fd c3 71 be ea c8 38 e5 d6 6d 4b 96 e6 09 7c ea b8 83 a3 39 27 6d e9 2a cd 60 b3 48 51 77 61 d9 e4 9e ad 63 79 64 c5 95 b6 e8 df 8a 4b f7 21 ec 70 df 22 75 45 06 76 2d b7 b1 f6 19 6f 56 15 50 91 17 51 57 20 37 b5 4b f0 6b 0c 18 41 e7 51 ea 9a 06 eb 61 ab 75 d7 e9 da c2 1b 07 ea 5b aa 0c ef 5f 77 c3 1b 96 c5 b5 7e a6 36 f3 5d 75 bf 61 6e 04 a3 da 77 3b cb c6 35 5d ef 6d de 2b f7 5d 6f 2f 6d 5d b9 Data Ascii: aa,lr!7QA^EYgq~3PB+Hds"e)q'\|"(i;{)=\}1-wFSGPlmZVq8mK\|9'm*`HQwacydK!p"uEv-oVPQW 7KkAQau[_w~6]uanw;5]m+]o/m]
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 8d 4c 19 ad d4 dd 77 2b e1 dc 61 39 6f 4c 7b 8d ff 00 6c 08 86 96 03 c8 57 a9 bc 64 f8 79 93 a2 f8 05 33 11 f7 89 ae b8 4e 4e 5a 30 a4 50 03 a8 5b 1f 3f 2c 72 f2 79 b5 fb 8f 7e 98 cc f0 28 1f dc 3a 0f ca bf bf e7 8c d7 0b cd 43 13 2d 07 8c ec 6b 7a c4 f0 ac 30 24 77 f7 07 7e ff 00 43 1a 38 26 f0 d6 7b e2 39 0d 81 d4 1c 4a 9c b6 bf 3d ff 00 4c 42 35 0f 76 ec 7f 6c 2a d3 06 06 88 ef ff 00 5d 08 f8 e2 0c c2 6a e5 b7 81 bb 37 dd 3f db 19 6d ef e2 07 e0 6f 1c 30 29 cb ed fe eb 6f 8f f2 bf 0c 66 e1 32 ab a2 cc f0 b1 23 4b a5 58 22 b7 de c1 f8 10 41 04 e3 2b 94 68 b9 60 bb 4b 25 f8 e5 d2 14 30 ed 6a bb 5e dd 46 33 99 9c b6 5d 39 99 89 44 69 ee d9 f7 6c 8d ac f4 1d 3b e3 31 9b d7 14 8a 00 a7 8c d7 ad d6 e0 f7 f9 63 88 6a f0 a9 ba f7 81 ed 64 51 af cb 17 a4 6f be Data Ascii: Lw+a9oL{lWdy3NNZ0P[?,ry~(:C-kz0$w~C8&{9J=LB5vl*]j7?mo0)of2#KX"A+h`K%0j^F3]9Dil;1cjdQo
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: f9 19 85 56 98 93 5d 73 1a 66 9a cf 73 aa fc b0 be d5 2c ec 65 ce f1 18 c4 4b 65 61 82 c9 73 fd 4e ed 67 b7 45 5c 7b 57 c7 3f c6 4a 44 80 ae 5b 2f a8 c7 b9 b2 e4 51 7f c3 a7 5e f8 89 a6 57 45 76 e6 44 cc 10 6b 26 d0 92 2a 8f fb 6e 85 7a e2 38 da 20 af a8 a1 1a 58 10 7a 30 aa 37 f1 f2 c6 4f 37 99 ce f0 b9 ce 67 35 13 f2 d1 fd d3 a6 45 d0 2e e5 4d af 5d 78 5b 4e e7 ae 23 8b 2b 9e c8 4f 1c 68 01 85 43 99 1a 00 ac 5c 8d 56 25 e6 4a 5a cf 55 b0 68 a9 d3 81 63 b0 f9 e3 59 18 a9 3c 8e 34 4b 44 f9 79 59 3f 96 23 cb fd 5b 86 c2 e1 a8 1d 0e 5b 41 57 e6 de e1 75 2d 95 41 ef 30 b0 4f 4c 47 ed 86 63 27 04 f9 2c a2 20 46 32 dc 8c a7 5b 16 00 12 2e c0 1d 2b 6c 70 9c 87 14 e3 13 a2 e5 32 b9 8c ec cc 40 d3 04 4d 26 9f ea 62 a2 91 6c d1 66 a5 1e 78 e0 f9 64 f6 0b 2b 3e 7f Data Ascii: V]sfs,eKeasNgE\{W?JD[/Q^WEvDk&*nz8 Xz07O7g5E.M]x[N#+OhC\V%JZUhcY<4KDyY?#[[AWu-A0OLGc', F2[.+lp2@M&blfxd+>
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 8c ae 56 5f ac a4 6a 92 f2 e2 cc 48 e3 99 cc 3a 50 23 85 26 47 d8 86 23 50 a6 27 70 2b 06 37 1b 91 b7 a1 bc 70 9e 21 38 cc 64 72 ad 2a 47 96 13 86 7a 54 8f 51 16 54 ca e2 8b 80 4e da 9a 86 d8 ce c5 16 5a 2f ac 93 24 d0 a6 ee 63 2a de 0d 42 d9 49 61 ab a9 a1 b5 d7 51 8c c3 46 f3 ca f1 6a d0 d2 3b 2e b0 03 69 2c 48 ba 24 5e e7 6b c7 b2 6b 96 78 b3 ab 22 a2 4a 0c 61 27 76 0b e0 6e b1 51 65 15 69 ab 6d bc eb 13 5e 87 fa ac e0 33 c7 27 21 e2 35 7a 18 53 2b 74 6a 61 5b 6e 41 c7 10 91 ca cd 98 95 8b 49 e1 32 48 dd 6c 8a 8d 7b 51 da cd 0c 64 d1 97 5c d2 1f 51 f1 c4 8c 5d 83 57 7e 98 6d 57 e2 f9 62 fd 31 ab 0b 88 76 1f 1f e7 ef 88 61 a1 a9 ba d5 fa 0f 4f 53 e9 b6 1a 62 09 01 57 e7 be 22 7e 63 69 21 43 1f 74 8e e7 c8 8e 94 71 22 81 a1 c6 da 81 35 eb b5 e1 b3 53 f2 Data Ascii: V_jH:P#&G#P'p+7p!8drGzTQTNZ/$cBIaQFj;.i,H$^kkx"Ja'vnQeim^3'!5zS+tja[nAI2Hl{Qd\Q]W~mWb1vaOSbW"~ci!Ctq"5S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50213	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	834	OUT	GET /media/New%20navigation_Rebrand%203.0/soybean%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/png Content-Length: 1065 Connection: close Age: 19246 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=2193 ETag: "f6d60680f212dc9a7395035f03760010" Last-Modified: Tue, 30 Aug 2022 08:01:17 GMT Via: 1.1 b3fa6483b226ef7cc87d8bab653f621c.cloudfront.net (CloudFront) X-Amz-Cf-Id: D4GCEeZgorVtvP-GEdDvKxxVxy7pGoUw5_oeZealR8nGWRBl5uBKew== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: aisZ.Zsh08Xj9ZChPlDs_L6cxQUqG47b CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8b9ee283376-MIA
2024-04-26 18:33:04 UTC	570	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 cc 50 4c 54 45 00 00 00 df bf 9f cf bf 9f d7 bf 9f d5 c5 9f d5 bf 9f d7 c3 9f d6 c2 9f d6 c2 9c d7 c2 9f d7 c2 9d d8 c6 9f d6 c4 9d d6 c1 9d d7 c5 9f d7 c3 9d d8 c6 9f d8 c4 9f d6 c5 9e d6 c3 9e d8 c5 9f d6 c4 9e d7 c4 9f d7 c4 9e d8 c4 9f d8 c4 9e d7 c5 9e d7 c3 9e d8 c4 9e d6 c4 9e ff ff ff fd fb f9 fa f8 f3 fa f8 f2 f8 f5 ed f7 f5 ed f8 f4 ed f8 f4 ec f5 f0 e7 f5 f0 e6 f0 e9 db f0 e9 da f0 e8 da ed e6 d4 ee e5 d5 ed e5 d5 ed e5 d4 eb e2 ce eb e1 cf eb e1 ce e9 de c8 e8 de c8 e9 dd c9 e9 dd c8 e8 dd c8 e6 da c3 e6 da c2 e4 d7 bc e3 d7 bc e3 d6 bc e1 d3 b6 e1 d2 Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTE
2024-04-26 18:33:04 UTC	495	IN	Data Raw: 46 d5 f5 f3 a8 d1 6a ab 4e 78 c3 0e 7e 60 43 e0 ee ec fb a9 20 21 17 57 0d 03 77 67 6b 79 52 b2 d3 19 6a 7a 43 bb 8f 22 68 a9 54 34 43 7a 6e 11 da 7d 10 41 79 2d cf 50 06 49 67 30 40 9b fa 51 bd c5 78 71 ac 8f 0e 69 62 cd b9 67 27 0f bf 39 5f 1d 97 fc 17 36 4d ec b3 16 39 44 81 c4 15 dc a2 d9 8a e9 7d 46 22 85 14 8d 38 33 17 44 83 ec 07 26 cc be 54 f3 42 e6 70 d4 b0 04 f1 82 09 d5 f3 d5 03 13 ee 39 b6 09 da 3e e6 8d 89 ec c5 1f 16 35 6a 81 69 7d 24 8e c2 52 5e 69 40 6a 68 8a 8e b6 22 41 f4 d4 68 8e 94 ab b7 af a1 b3 5b b8 32 9c 16 fd d5 28 65 7d d4 54 73 8b 3c 31 55 51 a3 dc ce 39 ea 4d 34 37 6d 79 6c 69 be 3e 2e 4f b1 95 e3 df a0 de 00 5e 18 f6 f9 fe 50 c7 7e c1 84 5c 9d 3c 15 41 2f d3 76 56 d4 b2 3c ba 0a 14 00 5c a3 6a a9 7c bd 6f 94 9c af 68 9c 35 90 Data Ascii: FjNx~`C !WwgkyRjzC"hT4Czn}Ay-PIg0@Qxqibg'9_6M9D}F"83D&TBp9>5ji}$R^i@jh"Ah[2(e}Ts<1UQ9M47myli>.O^P~\<A/vV<\j\|oh5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50217	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	690	OUT	GET /117405/Resources/dist/Resources/css/WinJS_4.4.4/ui-light-small.css HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=.ZLCGAswrtSeIPop225MZwozKgjgqUSKKyn0i106XKA-1714156377022-0.0.1.1-604800000
2024-04-26 18:33:04 UTC	531	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 814809 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: text/css Date: Fri, 26 Apr 2024 18:33:04 GMT Etag: "6b92e79c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:17 GMT Server: ECAcc (mic/9AAD) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 4866 Connection: close
2024-04-26 18:33:04 UTC	4866	IN	Data Raw: 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 6d 61 72 67 69 6e 3a 30 3b 20 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 20 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 3b 20 2d 6d 73 2d 73 63 72 6f 6c 6c 2d 74 72 61 6e 73 6c 61 74 69 6f 6e 3a 76 65 72 74 69 63 61 6c 2d 74 6f 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 7d 0d 0a 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 7d 0d 0a 68 74 6d 6c 3a 6c 61 6e 67 28 61 72 29 2c 20 68 74 6d 6c 3a 6c 61 6e 67 28 64 76 29 2c Data Ascii: html, body {width:100%; height:100%; margin:0; cursor:default; -webkit-touch-callout:none; -ms-scroll-translation:vertical-to-horizontal; -webkit-tap-highlight-color:rgba(0, 0, 0, 0);}html {overflow:hidden; direction:ltr;}html:lang(ar), html:lang(dv),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50216	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	676	OUT	GET /117405/Resources/dist/Resources/css/lang/lang-de.css HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=.ZLCGAswrtSeIPop225MZwozKgjgqUSKKyn0i106XKA-1714156377022-0.0.1.1-604800000
2024-04-26 18:33:04 UTC	531	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 804438 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: text/css Date: Fri, 26 Apr 2024 18:33:04 GMT Etag: "69f2b79c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:17 GMT Server: ECAcc (mic/9BB4) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 9440 Connection: close
2024-04-26 18:33:04 UTC	9440	IN	Data Raw: ef bb bf 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 33 38 65 6d 29 2c 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 36 65 6d 29 7b 2e 6c 61 6e 67 5f 64 65 20 64 69 76 2e 77 69 72 65 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 2e 37 35 65 6d 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 36 2e 30 36 33 65 6d 29 61 6e 64 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 33 38 2e 30 36 33 65 6d 29 7b 2e 6c 61 6e 67 5f 64 65 20 61 2e 77 69 72 65 7b 77 69 64 74 68 3a 31 30 2e 32 35 65 6d 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 33 2e 30 36 33 Data Ascii: @media only screen and (max-height:38em),only screen and (max-width:56em){.lang_de div.wire{flex-basis:10.75em}}@media only screen and (min-width:56.063em)and (min-height:38.063em){.lang_de a.wire{width:10.25em}}@media only screen and (min-width:73.063

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50215	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	610	OUT	GET /117405/Resources/js/WebCommon/Common/BrowserFeatureDetection.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:04 UTC	547	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 814821 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:04 GMT Etag: "ac2f914fc01ada1:0" Last-Modified: Sun, 19 Nov 2023 08:13:43 GMT Server: ECAcc (mic/9AD5) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 1836 Connection: close
2024-04-26 18:33:04 UTC	1836	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 73 45 53 36 53 75 70 70 6f 72 74 65 64 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2f 2f 63 68 65 63 6b 20 45 53 20 36 0d 0a 20 20 20 20 20 20 20 20 65 76 61 6c 28 22 63 6c 61 73 73 20 46 6f 6f 20 7b 7d 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 65 76 61 6c 28 22 76 61 72 20 62 61 72 20 3d 20 28 78 29 20 3d 3e 20 78 2b 31 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: (function () { "use strict"; function isES6Supported() { if (typeof Symbol == "undefined"){ return false; } //check ES 6 eval("class Foo {}"); eval("var bar = (x) => x+1");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50220	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	587	OUT	GET /media/BTC-halving/spotlight_icon_menu.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	790	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/svg+xml Content-Length: 49750 Connection: close Last-Modified: Mon, 18 Dec 2023 18:40:48 GMT ETag: "cad941af7a899a4b48019eab7ec22124" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: 6B2kvn9iByVRL_rJn.1GUdJV1ltMuNYv X-Cache: Hit from cloudfront Via: 1.1 8f99d698624c0704470547731241e282.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: zbc6MLQ4MC0nocBeYCz390hjqRSG-_YtwlGrZ234F_UO1NzyUXAGeQ== Age: 20507 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8bc08807476-MIA
2024-04-26 18:33:04 UTC	579	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 22 20 68 65 69 67 68 74 3d 22 35 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 35 36 22 20 68 65 69 67 68 74 3d 22 35 36 22 20 72 78 3d 22 32 38 22 20 66 69 6c 6c 3d 22 23 46 32 46 41 46 36 22 2f 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 34 33 2e 30 33 31 33 20 31 39 2e 34 35 38 34 43 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="56" height="56" viewBox="0 0 56 56" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="56" height="56" rx="28" fill="#F2FAF6"/><path fill-rule="evenodd" clip-rule="evenodd" d="M43.0313 19.4584C
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 33 20 34 30 2e 37 36 33 36 48 31 37 2e 37 30 31 31 43 32 30 2e 33 33 32 31 20 34 31 2e 36 31 36 36 20 32 33 2e 30 36 37 37 20 34 32 2e 30 33 32 35 20 32 35 2e 38 31 34 33 20 34 31 2e 39 39 37 31 43 33 32 2e 39 32 36 36 20 34 31 2e 39 39 37 31 20 33 38 2e 34 35 33 38 20 33 39 2e 36 35 39 34 20 33 38 2e 36 35 38 37 20 33 36 2e 35 35 37 32 56 33 36 2e 35 30 39 32 56 33 36 2e 33 37 36 33 56 33 30 2e 32 31 36 32 43 34 31 2e 33 37 37 39 20 32 39 2e 31 39 33 33 20 34 32 2e 39 31 38 36 20 32 37 2e 37 35 33 20 34 33 2e 30 33 31 33 20 32 36 2e 31 35 33 39 56 32 36 2e 31 32 34 33 43 34 33 2e 30 33 32 39 20 32 36 2e 31 30 37 31 20 34 33 2e 30 33 32 39 20 32 36 2e 30 38 39 38 20 34 33 2e 30 33 31 33 20 32 36 2e 30 37 32 36 56 31 39 2e 36 32 34 35 56 31 39 2e 35 30 36 Data Ascii: 3 40.7636H17.7011C20.3321 41.6166 23.0677 42.0325 25.8143 41.9971C32.9266 41.9971 38.4538 39.6594 38.6587 36.5572V36.5092V36.3763V30.2162C41.3779 29.1933 42.9186 27.753 43.0313 26.1539V26.1243C43.0329 26.1071 43.0329 26.0898 43.0313 26.0726V19.6245V19.506
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 34 2e 31 31 34 35 4c 33 30 2e 37 38 34 37 20 33 34 2e 31 31 34 35 43 33 30 2e 39 31 32 36 20 33 34 2e 30 38 38 31 20 33 31 2e 30 34 31 34 20 33 34 2e 30 36 31 35 20 33 31 2e 31 38 30 37 20 33 34 2e 30 33 38 43 33 31 2e 34 34 33 37 20 33 33 2e 39 39 33 37 20 33 31 2e 36 39 33 31 20 33 33 2e 39 33 38 33 20 33 31 2e 39 33 32 32 20 33 33 2e 38 37 39 32 48 33 31 2e 39 35 39 36 4c 33 32 2e 32 34 39 39 20 33 33 2e 38 31 32 37 4c 33 32 2e 33 36 36 31 20 33 33 2e 37 38 33 32 4c 33 32 2e 37 30 37 37 20 33 33 2e 36 39 30 39 4c 33 32 2e 38 35 31 32 20 33 33 2e 36 34 36 36 4c 33 33 2e 31 39 32 38 20 33 33 2e 35 33 39 35 4c 33 33 2e 32 34 37 34 20 33 33 2e 34 35 34 35 43 33 33 2e 35 36 31 33 20 33 33 2e 33 35 35 33 20 33 33 2e 38 34 34 33 20 33 33 2e 32 34 37 37 20 33 Data Ascii: 4.1145L30.7847 34.1145C30.9126 34.0881 31.0414 34.0615 31.1807 34.038C31.4437 33.9937 31.6931 33.9383 31.9322 33.8792H31.9596L32.2499 33.8127L32.3661 33.7832L32.7077 33.6909L32.8512 33.6466L33.1928 33.5395L33.2474 33.4545C33.5613 33.3553 33.8443 33.2477 3
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 35 2e 30 38 31 37 20 33 31 2e 30 39 39 35 43 33 34 2e 39 33 33 38 20 33 31 2e 31 32 34 36 20 33 34 2e 37 39 32 20 33 31 2e 31 34 38 37 20 33 34 2e 36 38 32 32 20 33 31 2e 31 36 38 35 43 33 34 2e 35 39 37 37 20 33 31 2e 31 38 33 37 20 33 34 2e 35 32 37 34 20 33 31 2e 31 39 33 38 20 33 34 2e 34 34 35 34 20 33 31 2e 32 30 35 36 43 33 34 2e 33 38 38 33 20 33 31 2e 32 31 33 38 20 33 34 2e 33 32 35 35 20 33 31 2e 32 32 32 38 20 33 34 2e 32 34 38 34 20 33 31 2e 32 33 35 43 33 34 2e 31 31 37 39 20 33 31 2e 32 35 35 35 20 33 33 2e 39 38 37 34 20 33 31 2e 32 37 32 35 20 33 33 2e 38 35 35 38 20 33 31 2e 32 38 39 36 4c 33 33 2e 38 35 35 37 20 33 31 2e 32 38 39 36 4c 33 33 2e 38 35 35 36 20 33 31 2e 32 38 39 36 43 33 33 2e 37 39 37 38 20 33 31 2e 32 39 37 31 20 33 33 Data Ascii: 5.0817 31.0995C34.9338 31.1246 34.792 31.1487 34.6822 31.1685C34.5977 31.1837 34.5274 31.1938 34.4454 31.2056C34.3883 31.2138 34.3255 31.2228 34.2484 31.235C34.1179 31.2555 33.9874 31.2725 33.8558 31.2896L33.8557 31.2896L33.8556 31.2896C33.7978 31.2971 33
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 31 20 32 37 2e 34 34 32 32 4c 31 37 2e 37 32 31 33 20 32 37 2e 33 39 34 32 43 31 37 2e 36 34 32 34 20 32 37 2e 32 35 31 39 20 31 37 2e 35 37 32 38 20 32 37 2e 31 30 33 38 20 31 37 2e 35 31 32 39 20 32 36 2e 39 35 31 5a 4d 32 35 2e 38 32 34 36 20 34 30 2e 38 39 30 31 43 32 33 2e 31 38 36 39 20 34 30 2e 39 32 35 38 20 32 30 2e 35 35 39 34 20 34 30 2e 35 32 37 33 20 31 38 2e 30 33 32 35 20 33 39 2e 37 30 38 34 48 31 38 2e 30 30 31 38 43 31 35 2e 35 38 33 32 20 33 38 2e 38 37 37 34 20 31 34 2e 30 39 30 34 20 33 37 2e 36 36 39 38 20 31 34 2e 30 31 35 32 20 33 36 2e 34 38 30 36 43 31 34 2e 30 31 36 39 20 33 36 2e 34 34 39 39 20 31 34 2e 30 31 36 39 20 33 36 2e 34 31 39 20 31 34 2e 30 31 35 32 20 33 36 2e 33 38 38 33 56 33 32 2e 33 33 37 4c 31 34 2e 31 32 31 31 Data Ascii: 1 27.4422L17.7213 27.3942C17.6424 27.2519 17.5728 27.1038 17.5129 26.951ZM25.8246 40.8901C23.1869 40.9258 20.5594 40.5273 18.0325 39.7084H18.0018C15.5832 38.8774 14.0904 37.6698 14.0152 36.4806C14.0169 36.4499 14.0169 36.419 14.0152 36.3883V32.337L14.1211
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 33 38 35 20 33 36 2e 33 34 32 38 20 33 33 2e 34 32 32 38 4c 33 36 2e 35 30 36 37 20 33 33 2e 33 31 39 33 4c 33 36 2e 35 36 39 34 20 33 33 2e 32 37 37 35 4c 33 36 2e 35 36 39 34 20 33 33 2e 32 37 37 35 43 33 36 2e 36 39 31 20 33 33 2e 31 39 36 33 20 33 36 2e 38 30 39 37 20 33 33 2e 31 31 37 20 33 36 2e 39 32 33 35 20 33 33 2e 30 33 35 4c 33 37 2e 30 38 30 36 20 33 32 2e 39 31 33 31 43 33 37 2e 32 30 33 36 20 33 32 2e 38 31 37 31 20 33 37 2e 33 31 39 38 20 33 32 2e 37 32 31 31 20 33 37 2e 34 32 32 32 20 33 32 2e 36 32 31 34 4c 33 37 2e 35 35 38 39 20 33 32 2e 34 39 35 38 43 33 37 2e 35 37 34 33 20 33 32 2e 34 37 39 32 20 33 37 2e 35 39 32 32 20 33 32 2e 34 36 33 35 20 33 37 2e 36 31 30 31 20 33 32 2e 34 34 37 38 43 33 37 2e 36 32 38 31 20 33 32 2e 34 33 32 Data Ascii: 385 36.3428 33.4228L36.5067 33.3193L36.5694 33.2775L36.5694 33.2775C36.691 33.1963 36.8097 33.117 36.9235 33.035L37.0806 32.9131C37.2036 32.8171 37.3198 32.7211 37.4222 32.6214L37.5589 32.4958C37.5743 32.4792 37.5922 32.4635 37.6101 32.4478C37.6281 32.432
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 2e 33 37 39 32 20 32 36 2e 30 39 30 36 20 31 38 2e 33 37 39 32 20 32 36 2e 31 30 31 37 20 31 38 2e 33 37 37 38 20 32 36 2e 31 31 32 38 43 31 38 2e 33 39 32 35 20 32 36 2e 32 33 39 35 20 31 38 2e 34 32 32 33 20 32 36 2e 33 36 33 36 20 31 38 2e 34 36 36 36 20 32 36 2e 34 38 32 31 43 31 39 2e 32 32 31 35 20 32 38 2e 34 39 31 31 20 32 33 2e 38 33 33 33 20 33 30 2e 34 35 39 35 20 33 30 2e 31 37 36 39 20 33 30 2e 34 35 39 35 5a 22 20 66 69 6c 6c 3d 22 23 32 37 44 31 37 46 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 33 2e 30 33 31 33 20 31 39 2e 34 35 38 34 48 34 33 2e 34 30 36 33 56 31 39 2e 34 34 37 4c 34 33 2e 34 30 35 36 20 31 39 2e 34 33 35 38 4c 34 33 2e 30 33 31 33 20 31 39 2e 34 35 38 34 5a 4d 31 37 2e 33 33 39 20 31 39 2e 34 33 32 35 4c 31 36 2e 39 36 Data Ascii: .3792 26.0906 18.3792 26.1017 18.3778 26.1128C18.3925 26.2395 18.4223 26.3636 18.4666 26.4821C19.2215 28.4911 23.8333 30.4595 30.1769 30.4595Z" fill="#27D17F"/><path d="M43.0313 19.4584H43.4063V19.447L43.4056 19.4358L43.0313 19.4584ZM17.339 19.4325L16.96
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 38 37 48 34 31 2e 39 39 39 35 5a 4d 33 39 2e 35 38 34 34 20 32 32 2e 32 34 32 33 4c 33 39 2e 34 31 34 37 20 32 31 2e 39 30 37 39 4c 33 39 2e 34 31 33 34 20 32 31 2e 39 30 38 36 4c 33 39 2e 35 38 34 34 20 32 32 2e 32 34 32 33 5a 4d 32 30 2e 37 37 35 34 20 32 32 2e 32 34 32 33 4c 32 30 2e 39 34 36 20 32 31 2e 39 30 38 34 4c 32 30 2e 39 34 35 34 20 32 31 2e 39 30 38 4c 32 30 2e 37 37 35 34 20 32 32 2e 32 34 32 33 5a 4d 31 38 2e 33 36 33 37 20 31 39 2e 35 38 37 48 31 38 2e 37 33 38 37 4c 31 38 2e 30 30 35 33 20 31 39 2e 34 37 36 35 4c 31 38 2e 33 36 33 37 20 31 39 2e 35 38 37 5a 4d 31 38 2e 33 36 33 37 20 31 39 2e 35 32 34 32 56 31 39 2e 31 34 39 32 48 31 38 2e 30 31 32 36 4c 31 37 2e 39 38 39 35 20 31 39 2e 34 39 39 35 4c 31 38 2e 33 36 33 37 20 31 39 2e 35 Data Ascii: 87H41.9995ZM39.5844 22.2423L39.4147 21.9079L39.4134 21.9086L39.5844 22.2423ZM20.7754 22.2423L20.946 21.9084L20.9454 21.908L20.7754 22.2423ZM18.3637 19.587H18.7387L18.0053 19.4765L18.3637 19.587ZM18.3637 19.5242V19.1492H18.0126L17.9895 19.4995L18.3637 19.5
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 36 34 20 33 34 2e 32 31 35 33 4c 33 30 2e 32 33 35 34 20 33 34 2e 35 38 35 36 4c 33 30 2e 32 33 37 34 20 33 34 2e 35 38 35 33 4c 33 30 2e 31 37 36 34 20 33 34 2e 32 31 35 33 5a 4d 33 30 2e 33 37 37 39 20 33 34 2e 31 38 32 56 33 33 2e 38 30 37 48 33 30 2e 33 34 37 32 4c 33 30 2e 33 31 36 39 20 33 33 2e 38 31 32 4c 33 30 2e 33 37 37 39 20 33 34 2e 31 38 32 5a 4d 33 30 2e 34 33 39 34 20 33 34 2e 31 38 32 56 33 34 2e 35 35 37 48 33 30 2e 34 37 32 4c 33 30 2e 35 30 34 32 20 33 34 2e 35 35 31 34 4c 33 30 2e 34 33 39 34 20 33 34 2e 31 38 32 5a 4d 33 30 2e 37 38 34 36 20 33 34 2e 31 31 34 35 4c 33 30 2e 37 31 31 20 33 33 2e 37 34 36 38 4c 33 30 2e 37 30 38 38 20 33 33 2e 37 34 37 32 4c 33 30 2e 37 38 34 36 20 33 34 2e 31 31 34 35 5a 4d 33 30 2e 37 38 34 36 20 33 Data Ascii: 64 34.2153L30.2354 34.5856L30.2374 34.5853L30.1764 34.2153ZM30.3779 34.182V33.807H30.3472L30.3169 33.812L30.3779 34.182ZM30.4394 34.182V34.557H30.472L30.5042 34.5514L30.4394 34.182ZM30.7846 34.1145L30.711 33.7468L30.7088 33.7472L30.7846 34.1145ZM30.7846 3
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 33 35 38 31 4c 33 34 2e 35 39 33 31 20 33 33 2e 33 35 32 34 4c 33 34 2e 34 32 35 34 20 33 33 2e 30 31 36 39 5a 4d 33 34 2e 34 32 35 34 20 33 33 2e 30 31 36 39 4c 33 34 2e 32 36 37 32 20 33 32 2e 36 37 36 38 4c 33 34 2e 32 35 37 37 20 33 32 2e 36 38 31 35 4c 33 34 2e 34 32 35 34 20 33 33 2e 30 31 36 39 5a 4d 33 34 2e 35 35 32 34 20 33 32 2e 39 35 39 36 4c 33 34 2e 36 39 39 20 33 33 2e 33 30 34 38 4c 33 34 2e 37 30 33 32 20 33 33 2e 33 30 33 4c 33 34 2e 35 35 32 34 20 33 32 2e 39 35 39 36 5a 4d 33 34 2e 36 30 39 36 20 33 32 2e 39 33 34 36 4c 33 34 2e 34 36 30 31 20 33 32 2e 35 39 30 37 4c 33 34 2e 34 36 30 31 20 33 32 2e 35 39 30 37 4c 33 34 2e 36 30 39 36 20 33 32 2e 39 33 34 36 5a 4d 33 34 2e 37 30 34 33 20 33 32 2e 38 39 33 36 4c 33 34 2e 38 35 33 31 20 Data Ascii: 3581L34.5931 33.3524L34.4254 33.0169ZM34.4254 33.0169L34.2672 32.6768L34.2577 32.6815L34.4254 33.0169ZM34.5524 32.9596L34.699 33.3048L34.7032 33.303L34.5524 32.9596ZM34.6096 32.9346L34.4601 32.5907L34.4601 32.5907L34.6096 32.9346ZM34.7043 32.8936L34.8531

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50222	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	599	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%201312.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/svg+xml Content-Length: 1204 Connection: close Last-Modified: Mon, 20 Dec 2021 10:20:39 GMT ETag: "cbd65eb6c7f2e56be4230dd47e55f6af" Cache-Control: public, max-age=36000 x-amz-version-id: n14Vu01bCO4pbbNr4xtQ0cTZiOkf9qwH X-Cache: Hit from cloudfront Via: 1.1 344d3cc6f132c3533d8a58d054dcf1da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: gOE8tTzlvH40hUXl1Vm3_LEKd14rnQItmKp8r_Fn0qlX452P4PSIcQ== Age: 20507 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8bc19cb4c15-MIA
2024-04-26 18:33:04 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 33 31 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 33 31 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 31 20 2d 33 34 31 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 32 37 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 32 37 31 22 20 74 72 61 6e 73 66 6f 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_1312" data-name="Group 1312" transform="translate(-611 -341)"> <g id="Group_1271" data-name="Group 1271" transfor
2024-04-26 18:33:04 UTC	586	IN	Data Raw: 2d 2e 37 32 36 63 2d 34 2e 34 31 38 2c 30 2d 38 2c 32 2e 33 33 31 2d 38 2c 35 2e 32 30 37 61 34 2e 35 31 35 2c 34 2e 35 31 35 2c 30 2c 30 2c 30 2c 32 2e 33 30 38 2c 33 2e 36 35 36 4c 35 2e 32 33 2c 32 30 2e 31 37 33 6c 33 2e 36 2d 31 2e 39 39 32 61 31 31 2e 36 32 35 2c 31 31 2e 36 32 35 2c 30 2c 30 2c 30 2c 33 2e 34 2e 35 63 34 2e 34 31 38 2c 30 2c 38 2d 32 2e 33 33 31 2c 38 2d 35 2e 32 30 37 61 33 2e 38 2c 33 2e 38 2c 30 2c 30 2c 30 2d 2e 38 35 32 2d 32 2e 33 34 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 31 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 31 Data Ascii: -.726c-4.418,0-8,2.331-8,5.207a4.515,4.515,0,0,0,2.308,3.656L5.23,20.173l3.6-1.992a11.625,11.625,0,0,0,3.4.5c4.418,0,8-2.331,8-5.207a3.8,3.8,0,0,0-.852-2.341" fill="none" stroke="#27d17f" stroke-width="1"/> <line id="Line_210" data-name="Line 21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50221	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	599	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%2043-2.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/svg+xml Content-Length: 837 Connection: close Last-Modified: Mon, 20 Dec 2021 10:21:35 GMT ETag: "cce584b0ba1fb7c2d326fcd3c0767ecd" Cache-Control: public, max-age=36000 x-amz-version-id: 6f9dVjkAEvxfXPo4SfzdHZu9o0pz48ef X-Cache: Hit from cloudfront Via: 1.1 8f99d698624c0704470547731241e282.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: qoCnKVvn3P1iDgZ27Zu0D2Oz8pnT325yEMaj35mB-raqmssuEBK9uw== Age: 20508 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8bc1c0f4c13-MIA
2024-04-26 18:33:04 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 34 33 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 34 33 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 32 20 2d 31 36 37 2e 35 29 22 3e 0a 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 72 78 3d 22 31 38 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_43" data-name="Group 43" transform="translate(-612 -167.5)"> <rect id="Rectangle" width="36" height="36" rx="18"
2024-04-26 18:33:04 UTC	218	IN	Data Raw: 22 50 61 74 68 20 38 33 39 22 20 64 3d 22 4d 31 36 2e 39 33 34 2c 37 2e 34 33 2c 31 31 2e 35 34 39 2c 34 2e 36 31 37 6c 2d 39 2e 32 2c 34 2e 38 34 37 2c 39 2e 32 2c 34 2e 38 34 37 2c 35 2e 34 2d 32 2e 38 37 33 76 35 2e 35 61 37 2e 32 31 39 2c 37 2e 32 31 39 2c 30 2c 30 2c 31 2d 31 30 2e 38 38 32 2e 30 34 38 6c 2d 2e 30 34 32 2d 2e 30 34 38 76 2d 33 2e 33 36 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 30 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 3c 2f 67 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: "Path 839" d="M16.934,7.43,11.549,4.617l-9.2,4.847,9.2,4.847,5.4-2.873v5.5a7.219,7.219,0,0,1-10.882.048l-.042-.048v-3.36" transform="translate(0)" fill="none" stroke="#27d17f" stroke-width="1"/> </g> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50223	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	604	OUT	GET /media/New%20navigation_Rebrand%203.0/Group%20302%20new.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/svg+xml Content-Length: 1369 Connection: close Last-Modified: Mon, 20 Dec 2021 10:23:01 GMT ETag: "ab90eb82c6f6c36057b3c382987cf5f4" Cache-Control: public, max-age=36000 x-amz-version-id: FNV1PTXQFj9OpUZa8.2ok9Us.TAH1ryz X-Cache: Miss from cloudfront Via: 1.1 41958139e7d828579c6466c1ce1c7b26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: CXt1srhNJV46pHuTcMsFt7DataXN1TFAmxJznRKoL1bJZ89xD1_V_g== CF-Cache-Status: HIT Age: 20508 Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8bc0b51a674-MIA
2024-04-26 18:33:04 UTC	617	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 33 30 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 33 30 32 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 36 31 32 20 2d 31 36 37 2e 35 29 22 3e 0a 20 20 20 20 3c 72 65 63 74 20 69 64 3d 22 52 65 63 74 61 6e 67 6c 65 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 72 78 3d 22 31 38 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"> <g id="Group_302" data-name="Group 302" transform="translate(-612 -167.5)"> <rect id="Rectangle" width="36" height="36" rx="18
2024-04-26 18:33:04 UTC	752	IN	Data Raw: 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 36 30 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 36 30 22 20 78 32 3d 22 36 2e 30 37 31 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 30 2e 38 39 39 20 39 2e 39 32 36 29 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 23 32 37 64 31 37 66 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 22 2f 3e 0a 20 20 20 20 20 20 3c 6c 69 6e 65 20 69 64 3d 22 4c 69 6e 65 5f 32 36 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 69 6e 65 20 32 36 31 22 20 78 32 3d 22 36 2e 30 37 31 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 30 2e 38 39 39 20 31 32 2e 35 31 36 Data Ascii: " stroke-width="1"/> <line id="Line_260" data-name="Line 260" x2="6.071" transform="translate(10.899 9.926)" fill="none" stroke="#27d17f" stroke-width="1"/> <line id="Line_261" data-name="Line 261" x2="6.071" transform="translate(10.899 12.516

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50200	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	570	OUT	GET /400/4724873 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072
2024-04-26 18:33:04 UTC	849	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: application/javascript Content-Length: 83831 Connection: close X-Trace-Id: 50f284a39789b5a3837e92804708e6c5 Timing-Allow-Origin: * Expires: Tue, 11 Jan 1994 10:00:00 GMT Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Pragma: no-cache Vary: Origin Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:33:04 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:33:04 UTC	15535	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 28 66 75 6e 63 74 69 6f 6e 28 65 69 29 7b 28 28 29 3d 3e 7b 65 69 2e 65 3b 76 61 72 20 74 3d 65 69 2e 6d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 65 69 2e 44 4e 5d 28 74 2c 65 69 2e 6a 41 29 2c 65 5b 65 69 2e 77 7a 5d 28 74 29 2c 65 5b 65 69 2e 4c 44 5d 28 74 29 2c 21 65 69 2e 71 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 65 69 2e 76 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 5b 65 69 2e 52 44 5d 3d 65 69 2e 50 28 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 65 69 2e 61 5d 28 74 5b 65 69 2e 76 44 5d 2c 65 69 2e 51 69 2c 65 69 2e 50 28 65 69 2e 4a 6d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: (function(options) {(function(ei){(()=>{ei.e;var t=ei.m,e=function(e){try{return e[ei.DN](t,ei.jA),e[ei.wz](t),e[ei.LD](t),!ei.q}catch(t){return!ei.v}},n=function(){function t(){this[ei.RD]=ei.P()}return Object[ei.a](t[ei.vD],ei.Qi,ei.P(ei.Jm,function(){r
2024-04-26 18:33:04 UTC	16384	IN	Data Raw: 65 69 2e 76 3f 78 74 3a 6e 65 77 20 44 61 74 65 28 29 5b 65 69 2e 66 5d 28 29 29 3a 6b 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 78 74 3d 2d 65 69 2e 76 7d 2c 65 69 2e 44 6d 29 7d 76 61 72 20 4d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 6e 7c 7c 65 69 2e 46 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 69 2e 51 69 5d 29 66 6f 72 28 76 61 72 20 6f 2c 72 3d 65 69 2e 71 2c 69 3d 65 5b 65 69 2e 51 69 5d 3b 72 3c 69 3b 72 2b 2b 29 21 6f 26 26 72 20 69 6e 20 65 7c 7c 28 6f 7c 7c 28 6f 3d 41 72 72 61 79 5b 65 69 2e 76 44 5d 5b 65 69 2e 4f 5d 5b 65 69 2e 77 63 5d 28 65 2c 65 69 2e 71 2c 72 29 29 2c 6f 5b 72 5d 3d 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 5b 65 69 2e 41 69 5d 28 6f 7c 7c 41 72 72 61 79 5b 65 69 2e 76 Data Ascii: ei.v?xt:new Date()[ei.f]()):kt=setTimeout(function(){xt=-ei.v},ei.Dm)}var Mt=function(t,e,n){if(n\|\|ei.F===arguments[ei.Qi])for(var o,r=ei.q,i=e[ei.Qi];r<i;r++)!o&&r in e\|\|(o\|\|(o=Array[ei.vD][ei.O][ei.wc](e,ei.q,r)),o[r]=e[r]);return t[ei.Ai](o\|\|Array[ei.v
2024-04-26 18:33:05 UTC	16384	IN	Data Raw: 69 2e 6d 63 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 69 5b 53 79 6d 62 6f 6c 5b 65 69 2e 58 44 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 69 3b 66 75 6e 63 74 69 6f 6e 20 63 28 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 65 69 2e 54 51 29 3b 66 6f 72 28 3b 61 3b 29 74 72 79 7b 69 66 28 6e 3d 65 69 2e 76 2c 6f 26 26 28 72 3d 65 69 2e 46 26 69 5b 65 69 2e 71 5d 3f 6f 5b 65 69 2e 79 55 5d 3a 69 5b 65 69 2e 71 5d 3f 6f 5b 65 69 2e 5a 55 5d 7c 7c 28 28 72 3d 6f 5b 65 69 2e 79 55 5d 29 26 26 72 5b 65 69 2e 77 63 5d 28 6f 29 2c 65 69 2e 71 29 3a 6f 5b 65 69 Data Ascii: i.mc==typeof Symbol&&(i[Symbol[ei.XD]]=function(){return this}),i;function c(i){return function(c){return function(i){if(n)throw new TypeError(ei.TQ);for(;a;)try{if(n=ei.v,o&&(r=ei.F&i[ei.q]?o[ei.yU]:i[ei.q]?o[ei.ZU]\|\|((r=o[ei.yU])&&r[ei.wc](o),ei.q):o[ei
2024-04-26 18:33:05 UTC	16384	IN	Data Raw: 6d 29 3b 74 72 79 7b 77 69 6e 64 6f 77 5b 65 69 2e 57 5d 5b 65 69 2e 72 5b 65 69 2e 41 69 5d 28 65 69 2e 71 62 29 5b 65 69 2e 41 69 5d 28 65 29 5d 3d 6e 65 77 20 44 61 74 65 28 29 5b 65 69 2e 66 5d 28 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 68 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 6f 3d 6e 65 77 20 44 61 74 65 28 29 5b 65 69 2e 66 5d 28 29 2c 72 3d 74 5b 65 69 2e 75 6d 5d 2c 69 3d 74 5b 65 69 2e 4f 45 5d 3b 69 66 28 69 29 76 61 72 20 61 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 69 66 28 21 65 7c 7c 65 5b 65 69 2e 6f 62 5d 29 74 68 72 6f 77 20 65 69 2e 51 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 65 28 29 5b 65 69 2e 66 5d 28 29 2d 6f 3b 63 6c 65 61 72 49 6e Data Ascii: m);try{window[ei.W][ei.r[ei.Ai](ei.qb)[ei.Ai](e)]=new Date()[ei.f]()}catch(t){}}(h),function(t,e,n){var o=new Date()[ei.f](),r=t[ei.um],i=t[ei.OE];if(i)var a=setInterval(function(){try{if(!e\|\|e[ei.ob])throw ei.Q}catch(e){var t=new Date()[ei.f]()-o;clearIn
2024-04-26 18:33:05 UTC	16384	IN	Data Raw: 61 27 5d 2c 5b 27 67 77 27 2c 27 70 79 76 70 78 27 5d 2c 5b 27 4b 77 27 2c 27 76 73 65 6e 7a 72 5f 79 6e 61 71 76 61 74 5f 68 65 79 27 5d 2c 5b 27 47 77 27 2c 27 6f 79 68 65 43 6e 74 72 27 5d 2c 5b 27 52 77 27 2c 27 62 68 67 66 76 71 72 50 79 62 66 72 27 5d 2c 5b 27 48 77 27 2c 27 7a 66 74 46 67 6e 67 72 27 5d 2c 5b 27 68 77 27 2c 27 66 72 66 66 76 62 61 27 5d 2c 5b 27 65 4e 27 2c 27 70 65 72 6e 67 72 5a 72 66 66 6e 74 72 27 5d 2c 5b 27 69 4e 27 2c 27 66 68 6f 70 62 61 67 6e 76 61 72 65 46 67 6c 79 72 66 27 5d 2c 5b 27 6d 4e 27 2c 27 76 73 65 6e 7a 72 46 67 6c 79 72 66 27 5d 2c 5b 27 7a 4e 27 2c 27 74 72 67 5a 6e 6b 4e 70 67 76 69 72 5a 72 66 66 6e 74 72 66 27 5d 2c 5b 27 77 4e 27 2c 27 70 62 79 79 72 70 67 52 65 65 62 65 5a 72 66 66 6e 74 72 27 5d 2c 5b Data Ascii: a'],['gw','pyvpx'],['Kw','vsenzr_ynaqvat_hey'],['Gw','oyheCntr'],['Rw','bhgfvqrPybfr'],['Hw','zftFgngr'],['hw','frffvba'],['eN','perngrZrffntr'],['iN','fhopbagnvareFglyrf'],['mN','vsenzrFglyrf'],['zN','trgZnkNpgvirZrffntrf'],['wN','pbyyrpgReebeZrffntr'],[
2024-04-26 18:33:05 UTC	2760	IN	Data Raw: 2e 4a 2e 6d 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 58 57 5a 2e 23 2e 4a 2e 54 2e 29 2e 55 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 28 28 2e 62 2e 23 2e 4a 2e 30 2e 78 2e 78 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 2c 36 6c 4d 6f 57 39 28 28 2e 62 2e 23 2e 4a 2e 5f 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 40 45 23 6c 36 3a 68 71 6c 4e 5a 6f 36 3a 2e 23 2e 4a 48 57 4d 23 6c 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 40 45 3a 6c 36 7d 57 4d 2e 23 2e 4a 2e 6d 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 2e 40 45 3a 6c 36 7d 57 4d 2e 7c 6f 35 71 4d 6c 2e 23 2e 4a 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 28 71 77 6c 6f 69 3a 2e 23 2e 4a 2e 5f 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 33 28 71 77 6c 6f 69 3a 2e 7c 6f 35 71 4d 6c 2e 23 2e 4a 2e 54 2e 56 2e 23 48 57 7e 6c 5a 69 23 Data Ascii: .J.m.V.#HW~lZi#3.XWZ.#.J.T.).U.V.#HW~lZi#3((.b.#.J.0.x.x.T.V.#HW~lZi#3.,6lMoW9((.b.#.J._.V.#HW~lZi#3.@E#l6:hqlNZo6:.#.JHWM#l.V.#HW~lZi#3.@E:l6}WM.#.J.m.V.#HW~lZi#3.@E:l6}WM.\|o5qMl.#.J.T.V.#HW~lZi#3(qwloi:.#.J._.T.V.#HW~lZi#3(qwloi:.\|o5qMl.#.J.T.V.#HW~lZi#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50224	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	602	OUT	GET /media/white-label/menu/230120_bts_ShortLogo_black_V1.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	788	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/svg+xml Content-Length: 598 Connection: close Last-Modified: Thu, 26 Jan 2023 09:03:32 GMT ETag: "a207797be5f060e5f2f560c88d345309" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: dOqfAxUWqGXHjQLR5nK4cyV.R2n4TEX8 X-Cache: Hit from cloudfront Via: 1.1 813798c6f06431d5dd58aa438e312b3e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 5knwK3qcUw7a7jrCfhB5E7kWY3dNhs9se5WMrVK_19BF7Jkn0L05fg== Age: 20508 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8bc99b13376-MIA
2024-04-26 18:33:04 UTC	581	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 61 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 30 31 22 20 68 65 69 67 68 74 3d 22 35 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 31 20 35 30 30 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 62 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 36 36 62 39 65 38 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="a" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="501" height="500" viewBox="0 0 501 500"> <defs> <style> .b { fill: #66b9e8; } </style> </defs> <circle cx="2
2024-04-26 18:33:04 UTC	17	IN	Data Raw: 22 2f 3e 0a 20 20 3c 2f 67 3e 0a 3c 2f 73 76 67 3e Data Ascii: "/> </g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50226	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	632	OUT	GET /movie HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:05 UTC	955	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LiZ4SdrYEzdaayYH%2BERXsR8xhq%2BwCpqltZupMI%2B8YcfXn6Qb%2Fz%2BDatFjs2UOE36WRUnt%2BCkc8YuCzjwURRxHZaAJKbiIF%2FvsE8yNFejDT8VmQquOabh6An2xxWQI9xg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8bcada45c82-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:05 UTC	414	IN	Data Raw: 37 62 66 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 23 31 4d 6f 76 69 65 73 20 7c 20 57 61 74 63 68 20 46 72 65 65 20 53 74 72 65 61 6d 69 6e 67 20 4d 6f 76 69 65 73 20 61 6e 64 20 54 56 20 53 65 72 69 65 73 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 Data Ascii: 7bf7<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/> <meta
2024-04-26 18:33:05 UTC	1369	IN	Data Raw: 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 22 Data Ascii: fetch" href="//www.google-analytics.com"><link rel="dns-prefetch" href="//www.gstatic.com"><link rel="dns-prefetch" href="//fonts.gstatic.com"><link rel="dns-prefetch" href="//cdnjs.cloudflare.com"><link rel="dns-prefetch" href="//static.zdassets.com"
2024-04-26 18:33:05 UTC	1369	IN	Data Raw: 66 6f 72 20 66 72 65 65 2c 20 53 74 72 65 61 6d 69 6e 67 20 6d 6f 76 69 65 73 20 6f 6e 20 31 4d 6f 76 69 65 73 2e 74 6f 2e 20 31 4d 6f 76 69 65 73 20 69 73 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 62 73 69 74 65 20 66 6f 72 20 66 72 65 65 20 6d 6f 76 69 65 73 2e 22 2f 3e 0a 3c 21 2d 2d 42 65 67 69 6e 3a 20 53 74 79 6c 65 73 68 65 65 74 2d 2d 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 34 2e 34 2e 31 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 Data Ascii: for free, Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/>...Begin: Stylesheet--><link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css"><link rel="stylesheet" href="http
2024-04-26 18:33:05 UTC	1369	IN	Data Raw: 43 3d 24 2e 42 44 3b 24 2e 5f 43 3c 24 2e 43 42 3b 24 2e 5f 43 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 75 2e 64 28 74 2c 24 2e 43 61 2c 74 29 2c 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 26 26 6e 5b 24 2e 43 63 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 43 69 5d 3b 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3b 7d 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 75 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 24 2e 43 46 5d 5b 24 2e 43 4a 5d 5b 24 2e 42 7a 5d 28 6e 2c 74 29 3b 7d 2c 75 2e 70 3d 24 2e 42 75 2c 75 28 75 2e 73 3d 24 2e 42 78 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 Data Ascii: C=$.BD;$._C<$.CB;$._C+=$.y){switch($._C){case $.y:return u.d(t,$.Ca,t),t;break;case $.BD:var t=n&&n[$.Cc]?function(){return n[$.Ci];}:function(){return n;};break;}}},u.o=function(n,t){return Object[$.CF][$.CJ][$.Bz](n,t);},u.p=$.Bu,u(u.s=$.Bx);break;case
2024-04-26 18:33:05 UTC	1369	IN	Data Raw: 42 44 3a 76 61 72 20 74 3d 6e 5b 24 2e 47 75 5d 28 24 2e 64 79 29 2c 72 3d 74 5b 24 2e 63 6a 5d 28 29 5b 24 2e 65 46 5d 28 29 2c 65 3d 74 5b 24 2e 42 74 5d 28 24 2e 64 79 29 3b 62 72 65 61 6b 3b 7d 7d 7d 29 2c 75 5b 73 2e 5a 5d 3f 28 6c 3d 21 24 2e 42 44 2c 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 5a 5d 29 29 3a 75 5b 73 2e 57 5d 26 26 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 57 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 6e 3d 74 5b 24 2e 63 72 5d 28 29 5b 24 2e 64 64 5d 28 29 5b 24 2e 47 75 5d 28 6e 65 77 20 52 65 67 45 78 70 28 24 2e 64 7a 2c 24 2e 42 75 29 29 2c 75 3d 24 2e 24 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 74 5b 24 2e 49 69 5d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 65 Data Ascii: BD:var t=n[$.Gu]($.dy),r=t[$.cj]()[$.eF](),e=t[$.Bt]($.dy);break;}}}),u[s.Z]?(l=!$.BD,($.BD,a.$)(u[s.Z])):u[s.W]&&($.BD,a.$)(u[s.W]);break;case $.BD:var n=t[$.cr]()[$.dd]()[$.Gu](new RegExp($.dz,$.Bu)),u=$.$();break;}}}},t[$.Ii]();break;case $.BD:var t=ne
2024-04-26 18:33:05 UTC	1369	IN	Data Raw: 5b 24 2e 43 41 5d 28 24 2e 43 42 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 4f 62 6a 65 63 74 5b 24 2e 65 5d 28 72 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 2c 72 2e 56 3d 72 2e 51 3d 72 2e 6e 6e 3d 72 2e 74 6e 3d 72 2e 72 6e 3d 72 2e 65 6e 3d 76 6f 69 64 20 24 2e 42 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 44 43 3a 63 26 26 28 63 5b 24 2e 42 5d 28 61 2c 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 63 5b 24 2e 43 5d 28 61 2c 74 29 2c 5b 28 24 2e 42 44 2c 69 2e 75 6e 29 28 6e 5b 24 2e 63 73 5d 29 2c 28 24 2e 42 44 2c 69 2e 69 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 42 5d 5b 24 2e 74 5d 29 2c 28 24 2e 42 44 2c 69 2e 63 6e 29 28 6e 65 77 20 65 28 29 29 2c 28 24 2e 42 44 2c 69 2e 66 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 72 5d Data Ascii: [$.CA]($.CB);break;case $.y:Object[$.e](r,$.Cc,$.$($.Ij,!$.BD)),r.V=r.Q=r.nn=r.tn=r.rn=r.en=void $.BD;break;case $.DC:c&&(c[$.B](a,function t(r){c[$.C](a,t),[($.BD,i.un)(n[$.cs]),($.BD,i.in)(window[$.bB][$.t]),($.BD,i.cn)(new e()),($.BD,i.fn)(window[$.br]
2024-04-26 18:33:05 UTC	1369	IN	Data Raw: 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 43 4a 3d 24 2e 42 44 3b 24 2e 5f 43 4a 3c 24 2e 46 73 3b 24 2e 5f 43 4a 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 4a 29 7b 63 61 73 65 20 24 2e 43 66 3a 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 66 6f 72 28 24 2e 5f 42 6b 3d 24 2e 42 44 3b 24 2e 5f 42 6b 3c 24 2e 43 42 3b 24 2e 5f 42 6b 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 6b 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 65 3c 3d 74 26 26 74 3c 3d 75 3f 74 2d 65 3a 6f 3c 3d 74 26 26 74 3c 3d 63 3f 74 2d 6f 2b 69 3a 24 2e 42 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 5b 24 2e 42 76 5d 28 29 5b 24 Data Ascii: case $.BD:$.Cr;break;}}},function(n,t,r){for($._CJ=$.BD;$._CJ<$.Fs;$._CJ+=$.y){switch($._CJ){case $.Cf:function a(n){for($._Bk=$.BD;$._Bk<$.CB;$._Bk+=$.y){switch($._Bk){case $.y:return e<=t&&t<=u?t-e:o<=t&&t<=c?t-o+i:$.BD;break;case $.BD:var t=n[$.Bv]()[$
2024-04-26 18:33:05 UTC	1369	IN	Data Raw: 2e 65 5d 28 74 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 44 64 3d 24 2e 42 44 3b 24 2e 5f 44 64 3c 24 2e 43 66 3b 24 2e 5f 44 64 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 44 64 29 7b 63 61 73 65 20 24 2e 43 42 3a 76 61 72 20 75 3d 72 28 24 2e 44 43 29 2c 76 3d 72 28 24 2e 46 6c 29 2c 6c 3d 72 28 24 2e 42 44 29 2c 66 3d 74 2e 70 6e 3d 6e 65 77 20 6a 28 24 2e 61 42 2c 24 2e 42 75 29 2c 69 3d 28 24 2e 43 73 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 3a 24 2e 24 28 24 2e 61 2c 6e 75 6c 6c 29 29 5b 24 2e 61 5d 2c 77 3d 24 2e 43 78 Data Ascii: .e](t,$.Cc,$.$($.Ij,!$.BD));break;case $.BD:$.Cr;break;}}},function(n,t,r){for($._Dd=$.BD;$._Dd<$.Cf;$._Dd+=$.y){switch($._Dd){case $.CB:var u=r($.DC),v=r($.Fl),l=r($.BD),f=t.pn=new j($.aB,$.Bu),i=($.Cs!=typeof document?document:$.$($.a,null))[$.a],w=$.Cx
2024-04-26 18:33:05 UTC	1369	IN	Data Raw: 6e 2c 74 29 7b 66 6f 72 28 24 2e 5f 65 3d 24 2e 42 44 3b 24 2e 5f 65 3c 24 2e 43 42 3b 24 2e 5f 65 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 65 29 7b 63 61 73 65 20 24 2e 79 3a 72 5b 24 2e 61 76 5d 3d 6e 2c 69 5b 24 2e 46 5d 28 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 72 3d 6e 65 77 20 45 76 65 6e 74 28 74 29 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 74 2e 4f 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 72 65 74 75 72 6e 20 68 5b 24 2e 43 67 5d 28 6e 75 6c 6c 2c 24 2e 24 28 24 2e 47 6f 2c 6e 29 29 5b 24 2e 61 61 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 28 24 2e 42 44 2c 75 2e 64 6e 29 28 72 2c 74 29 3b 7d 29 5b 24 2e 42 74 5d 28 24 2e 65 67 29 3b 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a Data Ascii: n,t){for($._e=$.BD;$._e<$.CB;$._e+=$.y){switch($._e){case $.y:r[$.av]=n,i[$.F](r);break;case $.BD:var r=new Event(t);break;}}},t.On=function(r,n){return h[$.Cg](null,$.$($.Go,n))[$.aa](function(n,t){return($.BD,u.dn)(r,t);})[$.Bt]($.eg);};break;case $.BD:
2024-04-26 18:33:05 UTC	1369	IN	Data Raw: 28 79 28 24 2e 43 76 2c 24 2e 43 77 29 29 3b 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 76 61 72 20 74 3d 79 28 24 2e 46 71 2c 24 2e 47 45 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 6c 5b 24 2e 42 6e 5d 3d 24 2e 42 75 3b 62 72 65 61 6b 3b 7d 7d 7d 29 2c 28 24 2e 42 44 2c 61 2e 6b 6e 29 28 29 29 72 65 74 75 72 6e 3b 62 72 65 61 6b 3b 7d 7d 7d 63 61 74 63 68 28 6e 29 7b 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 69 66 28 76 28 75 29 2c 77 69 6e 64 6f 77 5b 24 2e 43 5d 28 24 2e 47 6c 2c 6e 29 2c 24 2e 63 47 3d 3d 3d 6c 5b 24 2e 44 73 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6c 5b 24 2e 44 74 5d 3d 21 24 2e 42 44 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 24 2e 4a 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 77 3d 6e 65 77 Data Ascii: (y($.Cv,$.Cw));});break;case $.y:var t=y($.Fq,$.GE);break;case $.BD:l[$.Bn]=$.Bu;break;}}}),($.BD,a.kn)())return;break;}}}catch(n){}break;case $.BD:if(v(u),window[$.C]($.Gl,n),$.cG===l[$.Ds])return void(l[$.Dt]=!$.BD);break;}}}},$.Jj);break;case $.y:w=new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50225	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	577	OUT	GET /media/asset-icons/asset-btc.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	748	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/svg+xml Content-Length: 1397 Connection: close Last-Modified: Mon, 22 Jun 2020 22:23:09 GMT ETag: "427ab7199692811acd421c088014c704" x-amz-version-id: Nlnk2.JorJZybR.o99cMJaeqL5DY30nF X-Cache: Hit from cloudfront Via: 1.1 d1c64d10e2bd86b43a04bfb63e7766c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Pk4r0WsbatIp1VUn44xjttoHNUlQvw9QgEcfCdGckAlhmQP19CQpWQ== Age: 6306 CF-Cache-Status: HIT Expires: Fri, 26 Apr 2024 18:38:04 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8bcacc62269-MIA
2024-04-26 18:33:04 UTC	621	IN	Data Raw: 3c 21 2d 2d 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 49 63 6f 4d 6f 6f 6e 2e 69 6f 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 3c 74 69 74 6c 65 3e 61 73 73 65 74 2d 62 74 63 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 37 39 33 31 61 22 20 64 3d 22 4d 31 36 20 30 63 2d 38 2e 38 33 36 20 30 2d 31 36 20 37 2e 31 36 33 2d 31 36 20 31 36 73 37 2e 31 36 33 20 31 36 20 31 36 20 31 36 63 38 2e 38 33 37 20 30 20 31 36 2d 37 2e 31 36 33 20 31 36 2d 31 36 73 2d 37 2e 31 36 33 2d Data Ascii: ... Generated by IcoMoon.io --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"><title>asset-btc</title><path fill="#f7931a" d="M16 0c-8.836 0-16 7.163-16 16s7.163 16 16 16c8.837 0 16-7.163 16-16s-7.163-
2024-04-26 18:33:04 UTC	776	IN	Data Raw: 2e 39 37 39 20 33 2e 37 34 39 20 31 2e 30 30 35 20 30 2e 38 31 39 2d 33 2e 30 35 35 20 31 2e 39 30 36 20 30 2e 35 31 31 2d 30 2e 38 31 39 20 33 2e 30 35 35 20 31 2e 34 35 32 20 30 2e 33 38 39 20 30 2e 38 31 39 2d 33 2e 30 35 35 20 31 2e 39 30 36 20 30 2e 35 31 31 2d 30 2e 38 32 38 20 33 2e 30 39 31 63 31 2e 33 39 38 20 30 2e 34 36 39 20 32 2e 33 38 33 20 31 2e 30 32 33 20 33 2e 31 32 33 20 31 2e 39 35 33 20 30 2e 39 35 37 20 31 2e 32 30 31 20 30 2e 34 38 34 20 32 2e 37 31 36 20 30 2e 33 36 20 33 2e 30 37 35 2d 30 2e 31 32 35 20 30 2e 33 35 38 2d 30 2e 34 37 34 20 31 2e 30 31 38 2d 30 2e 39 31 36 20 31 2e 33 38 36 73 2d 31 2e 33 34 38 20 30 2e 36 31 33 2d 31 2e 33 34 38 20 30 2e 36 31 33 20 30 2e 38 37 33 20 30 2e 34 34 34 20 31 2e 33 39 33 20 31 2e 31 30 Data Ascii: .979 3.749 1.005 0.819-3.055 1.906 0.511-0.819 3.055 1.452 0.389 0.819-3.055 1.906 0.511-0.828 3.091c1.398 0.469 2.383 1.023 3.123 1.953 0.957 1.201 0.484 2.716 0.36 3.075-0.125 0.358-0.474 1.018-0.916 1.386s-1.348 0.613-1.348 0.613 0.873 0.444 1.393 1.10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50218	52.218.29.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	645	OUT	GET /static/cryptocoin/mbl.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:05 UTC	432	IN	HTTP/1.1 200 OK x-amz-id-2: Wb7FW2YdTIXPwQSB/usih1SW7thHvJvb99Wfu0VZr5atTd/2JQX3SfS28VmI0gMv27VITYJrkzs= x-amz-request-id: PCD2D2HVDKCYY9WH Date: Fri, 26 Apr 2024 18:33:05 GMT Last-Modified: Tue, 10 May 2022 16:21:36 GMT ETag: "8655b256a90dce02c744782b37c5bf98" x-amz-version-id: mJpKmk2sqsBypJsc9JfX2ga6E2Aoe9Jj Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 1242 Connection: close
2024-04-26 18:33:05 UTC	1242	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 38 22 20 66 69 6c 6c 3d 22 23 35 42 34 34 39 42 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 39 20 31 30 2e 38 35 38 76 31 34 2e 39 34 63 2d 2e 34 35 33 2d 2e 30 35 31 2d 2e 38 39 35 2d 2e 31 31 2d 31 2e 33 34 32 2d 2e 31 39 32 6c 2d 2e 31 39 32 2d 2e 30 33 34 2d 2e 36 32 31 2d 2e 31 31 34 2d 2e 32 31 38 2d 2e 30 34 63 2d 31 2e 30 39 34 2d 2e 32 2d 32 2e 31 38 36 2d 2e 34 30 39 2d 33 2e 32 37 38 2d 2e 36 32 34 61 31 39 38 2e 37 30 35 20 31 39 38 2e 37 30 Data Ascii: <svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#5B449B"/><path d="M29 10.858v14.94c-.453-.051-.895-.11-1.342-.192l-.192-.034-.621-.114-.218-.04c-1.094-.2-2.186-.409-3.278-.624a198.705 198.70

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50219	52.218.29.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	646	OUT	GET /static/cryptocoin/troy.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:05 UTC	432	IN	HTTP/1.1 200 OK x-amz-id-2: ED++o2t8VI/3bM18QIp4FjD/f2hifrOB2lgtmmAUT61dE6+wux774NmZNvUxdQq2pCuDi80z8Z0= x-amz-request-id: PCD5AVXHZBMQJHM6 Date: Fri, 26 Apr 2024 18:33:05 GMT Last-Modified: Tue, 28 Jun 2022 14:38:59 GMT ETag: "729a77746ed40f1771f20c4fa81d431a" x-amz-version-id: 7hBz1NxxmtxpB7qz1PGBJ2Owg6K6XWa. Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 4403 Connection: close
2024-04-26 18:33:05 UTC	4403	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 38 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 34 35 38 20 31 35 2e 30 30 35 68 2d 2e 31 34 63 2d 2e 33 33 32 20 30 2d 2e 35 39 35 2e 30 31 34 2d 2e 38 38 36 2e 31 39 31 6c 2d 2e 30 36 34 2e 30 35 35 2d 2e 30 36 34 2e 30 35 34 63 2d 2e 32 30 38 2e 32 35 31 2d 2e 32 34 37 2e 34 36 39 2d 2e 32 34 38 2e 37 38 37 76 2e 32 35 32 63 30 20 2e 31 33 34 20 30 20 2e 32 36 39 2e 30 30 32 2e 34 30 34 6c 2e 30 30 31 2e 34 35 Data Ascii: <svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#fff"/><path d="M12.458 15.005h-.14c-.332 0-.595.014-.886.191l-.064.055-.064.054c-.208.251-.247.469-.248.787v.252c0 .134 0 .269.002.404l.001.45

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50228	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	833	OUT	GET /media/New%20navigation_Rebrand%203.0/copper%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/png Content-Length: 1007 Connection: close Age: 19246 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=2072 ETag: "347ca61caadbe8d1a9a8d4f4d2615376" Last-Modified: Tue, 30 Aug 2022 08:01:15 GMT Via: 1.1 bb707a876db211940a3cb07991cacbdc.cloudfront.net (CloudFront) X-Amz-Cf-Id: ovpTBfTBRm_sF-mcY8Sn9ETEn_u5kW4X2YoM947VZuxQ99DEzsYFDg== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: C5yUR5wLkLtSKGOcSmybqYb4UuXXcI2x CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8bd5b58dae5-MIA
2024-04-26 18:33:04 UTC	570	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 e1 50 4c 54 45 00 00 00 af 80 30 bf 70 30 af 70 40 af 70 30 b7 70 38 b7 70 30 ba 70 35 b5 70 35 b5 70 30 b7 74 34 b7 74 30 b7 70 30 b9 73 33 b6 73 33 b9 70 30 b7 72 32 ba 73 33 b6 74 34 b8 72 32 b6 72 32 b9 74 32 b9 72 32 b7 74 34 b7 74 32 b7 72 34 b7 72 32 b9 74 34 b8 72 32 b6 73 33 b6 73 32 b6 71 32 b9 73 33 b8 72 33 b7 72 33 b8 74 33 b8 73 33 b8 74 34 b8 74 33 b9 73 34 b8 73 33 b8 73 33 b8 73 32 b8 72 33 b9 73 33 ff ff ff fb f7 f2 fb f6 f2 f7 ee e5 f6 ee e5 f2 e5 d9 f1 e5 d9 ee dc cc ed dc cc e9 d3 bf e8 d3 bf e5 ca b3 e5 ca b2 e4 ca b3 e0 c2 a6 e0 c1 a6 dc b9 Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTE0p0p@p0p8p0p5p5p0t4t0p0s3s3p0r2s3t4r2r2t2r2t4t2r4r2t4r2s3s2q2s3r3r3t3s3t4t3s4s3s3s2r3s3
2024-04-26 18:33:04 UTC	437	IN	Data Raw: ad e9 2c 81 ea ad e1 86 6d a6 b2 d4 2c 45 91 68 95 16 4a 23 69 30 2d ab 14 98 73 b8 a5 be 52 df 26 87 57 e2 37 e5 b2 6e 0e af 34 a4 ad 2e 14 ab a4 d2 12 8a 16 9b ac a1 01 9f 2c b9 b1 92 f0 d9 50 24 2d b1 bd 1d ec 24 08 fb e4 ed 26 68 40 ef b5 41 f3 b4 d4 2f 6d d0 3b f6 15 29 97 9c 8b b5 41 1f e8 93 36 e8 26 2d 35 d7 06 05 14 ec e6 8c 02 c2 6e 82 f0 1f 04 45 76 eb 8f a0 60 87 1d db ad 3f ae dc da bd dd fa 53 14 7d a1 8f 50 4c a5 85 09 14 43 76 45 70 27 2d 24 60 57 c4 83 62 7d 25 ab a5 fc 65 7b 8e 06 b3 fd 84 ca a5 b6 80 62 29 2b fd 81 2a 7b 6a 15 95 b3 45 00 f8 53 eb 41 75 5b 7f b2 3e 11 b5 a1 5a 5d 7f 33 9a a4 50 39 c4 66 b3 c3 27 63 b3 59 e2 93 91 ba b7 bb a8 da f5 02 79 21 65 de 20 af c1 2b 72 4a a4 a9 14 4b 0b 71 a1 90 43 ac 52 e6 87 7c 70 55 e8 f7 f8 Data Ascii: ,m,EhJ#i0-sR&W7n4.,P$-$&h@A/m;)A6&-5nEv`?S}PLCvEp'-$`Wb}%e{b)+*{jESAu[>Z]3P9f'cYy!e +rJKqCR\|pU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50233	172.67.40.173	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	809	OUT	GET /mw?google_gid=CAESEH572_eSjRp97nTOhZn8BNs&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=1a1f3838-e54f-4c21-6419-351f87b95f28&reqId=c6201517-1960-426a-5eed-0fdae320a0a6&zcluid=293f006c26e11ff7&zdid=1332 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=1a1f3838-e54f-4c21-6419-351f87b95f28; zsc=%B6Y%AFD%13%E1%7Du%C3%40%7B%CEg%3FY%8Cz%EA%99%81Y+%18e%23%25t%FC%09%C1p%F3%A3%92%A2%27M%FD%0C%B1%0D%9C%BB%D19%26%1F%98HLp%D9%C7%2Fg%CD%F7%2BzA%1D%AE%D89%A3%3AX%A5%E3%BB%C3%00%86%BEt~%EBX%A4%EB%B0%7DH
2024-04-26 18:33:04 UTC	431	IN	HTTP/1.1 403 Forbidden Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Fri, 26 Apr 2024 18:33:19 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8bd8ac0d9fd-MIA
2024-04-26 18:33:04 UTC	938	IN	Data Raw: 31 36 30 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1601<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d 61 6c 65 72 74 27 29 3b 0a 20 20 20 20 20 20 63 6f 6f 6b 69 65 45 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0a 20 20 20 20 7d 29 0a 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 63 66 2d 77 72 61 Data Ascii: r.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-alert'); cookieEl.style.display = 'block'; }) }</script>...<![endif]--></head><body> <div id="cf-wra
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 20 6f 6e 6c 69 6e 65 20 61 74 74 61 63 6b 73 2e 20 54 68 65 20 61 63 74 69 6f 6e 20 79 6f 75 20 6a 75 73 74 20 70 65 72 66 6f 72 6d 65 64 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 2e 20 54 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 74 68 61 74 20 63 6f 75 6c 64 20 74 72 69 67 67 65 72 20 74 68 69 73 20 62 6c 6f 63 6b 20 69 6e 63 6c 75 64 69 6e 67 20 73 75 62 6d 69 74 74 69 6e 67 20 61 20 63 65 72 74 61 69 6e 20 77 6f 72 64 20 6f 72 20 70 68 72 61 73 65 2c 20 61 20 53 51 4c 20 63 6f 6d 6d 61 6e 64 20 6f 72 20 6d 61 6c 66 6f 72 6d 65 64 20 64 61 74 61 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c Data Ascii: online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.</p> </div> <div cl
2024-04-26 18:33:04 UTC	1369	IN	Data Raw: 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 64 3d 22 62 72 61 6e 64 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 61 3e 3c Data Ascii: hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a><
2024-04-26 18:33:04 UTC	596	IN	Data Raw: 30 78 68 29 3b 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 72 28 29 20 7b 76 61 72 20 5f 30 78 69 20 3d 20 5f 30 78 68 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 20 7c 7c 20 5f 30 78 68 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 20 28 5f 30 78 69 29 20 7b 76 61 72 20 5f 30 78 6a 20 3d 20 5f 30 78 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5f 30 78 6a 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 6a 73 3b 5f 30 78 69 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 5f 30 78 6a 29 3b 7d 7d 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 21 3d 3d 20 27 6c 6f 61 64 69 6e 67 27 29 20 Data Ascii: 0xh);function handler() {var _0xi = _0xh.contentDocument \|\| _0xh.contentWindow.document;if (_0xi) {var _0xj = _0xi.createElement('script');_0xj.innerHTML = js;_0xi.getElementsByTagName('head')[0].appendChild(_0xj);}}if (document.readyState !== 'loading')
2024-04-26 18:33:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50229	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	833	OUT	GET /media/New%20navigation_Rebrand%203.0/nickel%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	798	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/png Content-Length: 965 Connection: close Age: 19246 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=1994 ETag: "8850c9e5b79b340c0b9a83bb7fb6ff90" Last-Modified: Tue, 30 Aug 2022 08:01:17 GMT Via: 1.1 130ce7c752c5865952ded89032560b32.cloudfront.net (CloudFront) X-Amz-Cf-Id: F_bbTi2V9ejUbWmfB6ceAEu7EAfUxDWZk4eRlzZsKjI0C5Y-_4ETqQ== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: Kkkk3bXoVf8dtkgJXAhjJrVvLEqjtsZv CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8bd69d574ac-MIA
2024-04-26 18:33:04 UTC	571	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 cc 50 4c 54 45 00 00 00 70 80 70 70 70 70 70 70 70 70 75 70 70 70 70 74 74 74 70 74 70 73 76 73 73 73 73 70 73 70 72 72 72 70 72 70 73 73 73 72 74 72 72 72 72 70 72 70 72 74 72 72 74 72 72 74 72 71 73 71 72 75 72 71 74 71 71 72 71 73 74 73 71 74 71 73 75 73 73 74 73 71 74 71 72 75 72 72 73 72 71 73 71 72 74 72 ff ff ff f6 f7 f6 f6 f6 f6 ee ee ee ed ee ed e5 e5 e5 dc dd dc dc dc dc d3 d4 d3 d3 d3 d3 ca cb ca c2 c3 c2 c2 c2 c2 c1 c2 c1 b9 ba b9 b8 ba b8 b9 b9 b9 b8 b9 b8 b0 b1 b0 b0 b0 b0 a8 a9 a8 a7 a9 a7 a7 a8 a7 9f a0 9f 9e 9f 9e 96 97 96 95 97 95 8d 8e 8d 8c 8e Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTEpppppppppupppptttptpsvsssspsprrrprpsssrtrrrrprprtrrtrrtrqsqrurqtqqrqstsqtqsusstsqtqrurrsrqsqrtr
2024-04-26 18:33:04 UTC	394	IN	Data Raw: fd 4e 19 f5 cd 91 25 25 b4 e3 83 f9 f5 bd d3 2d 98 03 d6 99 b3 33 d9 d9 66 61 65 23 7b 43 93 b2 24 e6 16 3c 4b 10 0e 29 7c 9e a0 33 8a b5 41 cb 87 56 0b 6d 50 4c 23 6d d0 0a ad 56 da a0 37 f4 5e 1b b4 a8 5a 2d b5 41 19 a5 6e 6b 24 83 e0 1a c4 fc 07 41 85 dd f8 0b 30 62 b1 57 76 e3 5f 77 4e ad b2 1b 7f 85 a6 4b 7a 0b 66 a6 2c 94 60 12 8a c1 dc 28 0b 1b 30 31 85 60 b6 63 d5 ad 92 27 db 0b 38 f4 b6 00 77 44 5e 0e e6 4e 75 fa 09 ae 3e 6a 99 ce de 0a 70 09 11 85 e0 3e f5 ef ec 15 11 79 e0 ee a7 85 d1 ac 02 e7 13 eb cd 51 42 c4 7a b3 26 3b 23 3e b7 9b a2 db b4 b9 d5 ae a8 16 39 9c 23 e2 b5 46 96 74 ad 2c 7c 69 14 e4 93 28 a9 36 57 4f 3e 00 68 d4 30 51 4f e6 68 8a 5a df b2 0b 55 ab 9a 41 95 aa 4d c0 56 68 2f d0 07 6d 81 fd 23 05 6c 55 6d 8a 86 c6 6d 2b d6 fd 07 Data Ascii: N%%-3fae#{C$<K)\|3AVmPL#mV7^Z-Ank$A0bWv_wNKzf,`(01`c'8wD^Nu>jp>yQBz&;#>9#Ft,\|i(6WO>h0QOhZUAMVh/m#lUmm+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50230	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	846	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/Bitcoin_2x_Long.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/svg+xml Content-Length: 1648 Connection: close Last-Modified: Tue, 11 Apr 2023 16:38:27 GMT ETag: "414b60894723fdf8853654bd54518b58" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: dovj.P84pEcRy5nLoslJDv2.xauAbEJ2 X-Cache: Hit from cloudfront Via: 1.1 dcccf6c408219d8b851fcd12a0068cea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: zz5uHyM_-rk3SjH6m6hVoKSA9uwuTdx3ZD06SBEaBdXtOlBob7uNkg== Age: 19956 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8bd7bb90335-MIA
2024-04-26 18:33:04 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 43 38 2e 30 36 20 30 20 30 20 38 2e 30 35 39 20 30 20 31 38 73 38 2e 30 35 39 20 31 38 20 31 38 20 31 38 20 31 38 2d 38 2e 30 35 39 20 31 38 2d 31 38 53 32 37 2e 39 34 31 20 30 20 31 38 20 30 5a 22 20 66 69 6c 6c 3d 22 23 46 37 39 33 31 41 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M18 0C8.06 0 0 8.059 0 18s8.059 18 18 18 18-8.059 18-18S27.941 0 18 0Z" fill="#F7931A"/><path fill-rule="evenodd" clip-rule="evenodd
2024-04-26 18:33:04 UTC	1068	IN	Data Raw: 39 32 37 20 33 2e 36 35 32 2e 39 37 38 4c 31 38 2e 31 32 33 20 37 6c 31 2e 38 35 36 2e 34 39 37 2d 2e 37 39 38 20 32 2e 39 37 35 20 31 2e 34 31 34 2e 33 37 39 2e 37 39 37 2d 32 2e 39 37 35 20 31 2e 38 35 36 2e 34 39 37 2d 2e 38 30 36 20 33 2e 30 31 31 63 31 2e 33 36 2e 34 35 37 20 32 2e 33 32 2e 39 39 36 20 33 2e 30 34 31 20 31 2e 39 30 32 2e 39 33 32 20 31 2e 31 37 2e 34 37 32 20 32 2e 36 34 35 2e 33 35 20 32 2e 39 39 34 2d 2e 31 32 2e 33 34 38 2d 2e 34 36 2e 39 39 32 2d 2e 38 39 31 20 31 2e 33 35 2d 2e 34 33 2e 33 36 2d 31 2e 33 31 33 2e 35 39 37 2d 31 2e 33 31 33 2e 35 39 37 73 2e 38 35 31 2e 34 33 32 20 31 2e 33 35 37 20 31 2e 30 38 63 2e 35 30 35 2e 36 34 36 2e 37 34 38 20 31 2e 36 31 33 2e 33 39 31 20 32 2e 38 33 37 2d 2e 33 35 35 20 31 2e 32 32 35 Data Ascii: 927 3.652.978L18.123 7l1.856.497-.798 2.975 1.414.379.797-2.975 1.856.497-.806 3.011c1.36.457 2.32.996 3.041 1.902.932 1.17.472 2.645.35 2.994-.12.348-.46.992-.891 1.35-.43.36-1.313.597-1.313.597s.851.432 1.357 1.08c.505.646.748 1.613.391 2.837-.355 1.225

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50234	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	847	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/Bitcoin_1x_Short.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:04 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/svg+xml Content-Length: 1465 Connection: close Last-Modified: Tue, 06 Jun 2023 07:53:39 GMT ETag: "fbce27c7963b12186e1adef88db8daab" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: Yciz_fbmLD3d23n.J40w_xjDPei998M5 X-Cache: Hit from cloudfront Via: 1.1 344d3cc6f132c3533d8a58d054dcf1da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: b1JfqvZyVDloGUC7kvNviqbX7-cZ9Vy4jSfpfwCPFZ1xAQBgrE7O-A== Age: 19956 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8bd9b27d9e1-MIA
2024-04-26 18:33:04 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 43 38 2e 30 36 20 30 20 30 20 38 2e 30 35 39 20 30 20 31 38 73 38 2e 30 35 39 20 31 38 20 31 38 20 31 38 20 31 38 2d 38 2e 30 35 39 20 31 38 2d 31 38 53 32 37 2e 39 34 31 20 30 20 31 38 20 30 5a 22 20 66 69 6c 6c 3d 22 23 46 37 39 33 31 41 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M18 0C8.06 0 0 8.059 0 18s8.059 18 18 18 18-8.059 18-18S27.941 0 18 0Z" fill="#F7931A"/><path fill-rule="evenodd" clip-rule="evenodd
2024-04-26 18:33:04 UTC	885	IN	Data Raw: 39 32 37 20 33 2e 36 35 32 2e 39 37 38 4c 31 38 2e 31 32 33 20 37 6c 31 2e 38 35 36 2e 34 39 37 2d 2e 37 39 38 20 32 2e 39 37 35 20 31 2e 34 31 34 2e 33 37 39 2e 37 39 37 2d 32 2e 39 37 35 20 31 2e 38 35 36 2e 34 39 37 2d 2e 38 30 36 20 33 2e 30 31 31 63 31 2e 33 36 2e 34 35 37 20 32 2e 33 32 2e 39 39 36 20 33 2e 30 34 31 20 31 2e 39 30 32 2e 39 33 32 20 31 2e 31 37 2e 34 37 32 20 32 2e 36 34 35 2e 33 35 20 32 2e 39 39 34 2d 2e 31 32 2e 33 34 38 2d 2e 34 36 2e 39 39 32 2d 2e 38 39 31 20 31 2e 33 35 2d 2e 34 33 2e 33 36 2d 31 2e 33 31 33 2e 35 39 37 2d 31 2e 33 31 33 2e 35 39 37 73 2e 38 35 31 2e 34 33 32 20 31 2e 33 35 37 20 31 2e 30 38 63 2e 35 30 35 2e 36 34 36 2e 37 34 38 20 31 2e 36 31 33 2e 33 39 31 20 32 2e 38 33 37 2d 2e 33 35 35 20 31 2e 32 32 35 Data Ascii: 927 3.652.978L18.123 7l1.856.497-.798 2.975 1.414.379.797-2.975 1.856.497-.806 3.011c1.36.457 2.32.996 3.041 1.902.932 1.17.472 2.645.35 2.994-.12.348-.46.992-.891 1.35-.43.36-1.313.597-1.313.597s.851.432 1.357 1.08c.505.646.748 1.613.391 2.837-.355 1.225

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50236	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	847	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/Ethereum_2x_Long.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:05 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:05 GMT Content-Type: image/svg+xml Content-Length: 823 Connection: close Last-Modified: Tue, 11 Apr 2023 16:38:27 GMT ETag: "2027c97aded45b9497802248686a2057" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: vXLV0QvIXa.IanBTJzaE8UDIPaFkTb5. X-Cache: Miss from cloudfront Via: 1.1 6c9274205f681e6532f5f293414b8d2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: pAQw0vrhUv6nwcB7v8ww-bkU8_Wf7kVSaijRudDTAOxSwS4hszhriw== CF-Cache-Status: HIT Age: 19956 Expires: Sat, 27 Apr 2024 04:33:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8be196774c2-MIA
2024-04-26 18:33:05 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d 38 2e 30 35 39 20 31 38 2d 31 38 20 31 38 53 30 20 32 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="17" fill="#fff"/><path fill-rule="evenodd" clip-rule="evenodd" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 2
2024-04-26 18:33:05 UTC	243	IN	Data Raw: 31 37 36 20 30 2d 32 2e 30 39 34 2e 37 34 36 2d 32 2e 33 30 34 20 31 2e 38 37 34 6c 31 2e 30 33 32 2e 32 33 63 2e 31 31 35 2d 2e 36 30 33 2e 36 31 32 2d 31 2e 30 37 31 20 31 2e 32 32 34 2d 31 2e 30 37 31 2e 36 35 20 30 20 31 2e 31 2e 34 37 38 20 31 2e 31 20 31 2e 30 36 31 20 30 20 2e 35 34 35 2d 2e 33 36 33 2e 39 37 35 2d 2e 37 35 35 20 31 2e 33 35 38 6c 2d 32 2e 36 34 20 32 2e 35 34 34 56 33 30 5a 6d 37 2e 39 30 34 20 30 68 2e 38 36 76 2d 35 2e 32 37 39 6c 31 2e 38 38 35 20 31 2e 38 39 34 2e 36 31 32 2d 2e 35 39 33 2d 32 2e 39 32 37 2d 32 2e 39 32 36 2d 32 2e 39 32 36 20 32 2e 39 32 36 2e 36 30 33 2e 35 39 33 20 31 2e 38 39 33 2d 31 2e 38 39 33 56 33 30 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 176 0-2.094.746-2.304 1.874l1.032.23c.115-.603.612-1.071 1.224-1.071.65 0 1.1.478 1.1 1.061 0 .545-.363.975-.755 1.358l-2.64 2.544V30Zm7.904 0h.86v-5.279l1.885 1.894.612-.593-2.927-2.926-2.926 2.926.603.593 1.893-1.893V30Z" fill="#fff"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50237	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	848	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/Ethereum_1x_Short.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:05 UTC	788	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:05 GMT Content-Type: image/svg+xml Content-Length: 640 Connection: close Last-Modified: Tue, 06 Jun 2023 07:53:39 GMT ETag: "2f598d9e8034d366caf7664286890a6d" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: hQY0OLFWYKHURAPqYJ256dqZwD7.QBnP X-Cache: Hit from cloudfront Via: 1.1 9abd3232e1a3776dc26ad56d2477147c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: GCRGG-03p99VwpqB0A27vJGgYJo_iqN_lggaTgiD7KtcW_l9kCIlyw== Age: 19957 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:05 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8be3ffab3d4-MIA
2024-04-26 18:33:05 UTC	581	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d 38 2e 30 35 39 20 31 38 2d 31 38 20 31 38 53 30 20 32 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="17" fill="#fff"/><path fill-rule="evenodd" clip-rule="evenodd" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 2
2024-04-26 18:33:05 UTC	59	IN	Data Raw: 32 37 38 6c 2d 31 2e 38 39 34 2d 31 2e 38 39 33 2d 2e 36 30 32 2e 35 39 33 20 32 2e 39 32 36 20 32 2e 39 32 36 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 278l-1.894-1.893-.602.593 2.926 2.926Z" fill="#fff"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50235	3.16.63.45	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	737	OUT	GET /panorama?uid=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1&stid=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:05 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:05 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:05 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50231	3.225.96.121	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	546	OUT	GET /sync/3?RampID=Xc6491Vm-1pzA1iTVLXhV9SS2mgbcdWTy-hA8Ju5KWnd-fmds&197059634fe141449898fb53dec95bfd-7e8eb141692d47379bb430dc67014cab-2-269-api5137 HTTP/1.1 Host: ecf.d41.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D41ID=v3\|v4\|197059634fe141449898fb53dec95bfd\|https://d41.co
2024-04-26 18:33:05 UTC	819	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:04 GMT Content-Type: image/gif; charset=ISO-8859-1 Content-Length: 43 Connection: close Access-Control-Allow-Origin: * Cache-control: no-store Pragma: no-cache X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Referrer-Policy: no-referrer-when-downgrade Expect-CT: max-age=30, report-uri="https://a54b4ab95d40a8b116fae47033b75682.report-uri.com/r/d/ct/reportOnly" Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; frame-ancestors 'self'; form-action 'self'; Set-Cookie: D41ID=v3\|v4\|197059634fe141449898fb53dec95bfd\|https://d41.co; path=/; expires=Sat, 26 Apr 2025 18:33:04 GMT; domain=.d41.co; samesite=none; secure
2024-04-26 18:33:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50232	141.94.171.215	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:04 UTC	509	OUT	GET /?partner=138&gdpr=0&gdpr_consent=&mapped=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=293f006c26e11ff7; done_redirects147=1; done_redirects104=1; done_redirects219=1
2024-04-26 18:33:05 UTC	232	IN	HTTP/1.1 200 OK set-cookie: cookie=293f006c26e11ff7; Max-Age=31536000; Expires=Sat, 26 Apr 2025 18:33:05 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None content-type: image/gif content-length: 35 connection: close
2024-04-26 18:33:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50243	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	600	OUT	GET /media/redesign/favicon/dark/android-chrome-384x384.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:06 UTC	801	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: image/png Content-Length: 20357 Connection: close Age: 19958 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=27406 ETag: "c1170e823dc55bebf93fe88fa8250a62" Last-Modified: Wed, 28 Apr 2021 10:40:36 GMT Via: 1.1 813798c6f06431d5dd58aa438e312b3e.cloudfront.net (CloudFront) X-Amz-Cf-Id: N5HkWT-APUz8pWTyGgGdFMbgTy-UKXVJWIVDuj8qA3m24KW-miirbg== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: 6vfEmJ_JtrEracQ4LrZxJHJTdvZ0ghja CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:06 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8c69cc6747e-MIA
2024-04-26 18:33:06 UTC	568	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 80 00 00 01 80 08 04 00 00 00 0e ce 7d 34 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 4f 10 49 44 41 54 78 da ec d9 bd 4b 23 41 1c c6 f1 cd 89 46 51 a2 e4 34 06 12 10 8b 20 16 16 cf 33 bb 79 2b 2c 6c b4 10 7b 4d 75 a0 88 29 14 3b 0b b1 12 0b 0b 1b 49 63 e7 89 4d 40 b0 d0 46 48 a3 68 5a 31 85 2f a4 d1 42 24 24 82 48 74 93 35 b9 0b 39 3c ae 3a b8 43 71 12 e7 fb f9 0f 7e b3 bb b3 b3 ab c9 59 a8 41 b7 8b 56 3a e0 a4 8b 6e 7a 0d 9f 1e 12 a3 8c 30 ca 05 b1 22 62 dc 64 9c 7b 48 20 89 53 9e 33 cd 6b de 22 8b 07 e4 f9 04 13 05 5a 28 e1 87 f2 66 4a b4 50 80 c9 27 e4 f1 Data Ascii: PNGIHDR}4gAMAa cHRMz&u0`:pQ<OIDATxK#AFQ4 3y+,l{Mu);IcM@FHhZ1/B$$Ht59<:Cq~YAV:nz0"bd{H S3k"Z(fJP'
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 79 26 90 55 07 5d e5 3f 94 91 65 82 f3 c2 a3 d5 62 7a 37 e7 78 88 9c a4 c3 55 6a 45 8e 87 9c d3 bb b5 da 69 d8 16 76 60 8a 27 b8 97 74 a4 4a ad b9 e7 09 a6 c2 8e 61 f9 bf 0f c1 c6 16 0c 71 1f 39 f5 da a3 bc a1 32 72 dc c7 10 5b 20 f3 4d 20 ec e8 e3 3a ee d4 81 57 79 07 16 ee b8 8e 3e 61 d7 64 0c 36 bf 53 cc e0 52 fd e0 52 de 51 01 97 62 c6 ef 94 6e 1f d0 9b 09 6c e3 51 d2 b1 29 f5 e4 11 db 84 de ac c9 93 ff ab f8 86 94 a4 e3 52 ea 51 ea 27 7b f7 ef cb 6a 14 c7 71 fc db de 5c 62 e9 15 37 44 dc c1 42 24 58 be 9f ef 53 a5 41 c4 c2 e4 0f 60 32 20 21 21 fe 09 83 c1 62 68 62 bb 4d 2c 96 4e 16 65 11 0c 46 26 b1 8b 10 21 b9 21 6e 6e 2b 77 ba b9 7e 15 6d 9f d6 e9 d3 cf fb f5 0f 9c 73 72 3c da b4 3d c7 26 7b be 8b 0b c5 be 58 b7 26 f4 da d1 85 a2 a0 ba d6 84 75 7f Data Ascii: y&U]?ebz7xUjEiv`'tJaq92r[ M :Wy>ad6SRRQbnlQ)RQ'{jq\b7DB$XSA`2 !!bhbM,NeF&!!nn+w~msr<=&{X&u
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 31 dc cc 43 fc 99 8f c9 51 08 6b 62 33 3f a1 0a 9b e8 2c bb 7d 2e cb 8a f6 68 de b4 6b fd 5b fe 5f 72 47 89 36 75 67 a1 51 16 5a f4 61 1f 0d de 88 19 bb 8f 57 6a d5 8b 56 e0 60 e2 32 9e ff 65 05 9b 39 86 4f 61 ed 28 2b 19 8d 40 5c 40 59 d6 f2 4d 7e db 56 3a aa fa 4b 86 fb 15 f7 7a 37 27 c2 d7 21 22 52 21 a2 6a 57 6a 95 66 57 43 3b b1 22 7c 14 bc e1 db ae 47 2b a2 a3 6d 97 fe 44 ee e4 19 b6 51 4b 8e e2 58 9a 2d dc 14 f0 4b 51 f5 c1 2c 87 ad 12 af 04 05 6f ce bb be ec 2b 46 e9 57 bd 05 6e ce 95 86 4a 14 52 82 94 b2 8e 53 1e ea 84 86 1e 2a c3 57 cf 2f d4 ad b2 50 54 4b 10 b9 d8 0e 16 1e 93 b9 97 57 d8 c9 49 da 28 b6 1d e0 41 06 e2 44 67 39 80 3a cb 6e 82 b3 dc 29 4d 45 94 63 7b 01 2c 28 fd aa e1 7e dd ad 11 7e d8 2c 75 56 b8 ae 41 a8 42 d4 18 55 ab 3a fc 68 Data Ascii: 1CQkb3?,}.hk[_rG6ugQZaWjV`2e9Oa(+@\@YM~V:Kz7'!"R!jWjfWC;"\|G+mDQKX-KQ,o+FWnJRS*W/PTKWI(ADg9:n)MEc{,(~~,uVABU:h
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 66 51 16 27 cb f1 57 b7 18 7a 52 cf de e6 ac 37 c4 26 d1 a6 a4 2b bc 0b 45 67 1d ca 72 3e a3 27 2d 47 96 66 76 b3 82 eb 18 c5 20 04 16 b6 e4 69 29 95 4c 66 19 6f f1 09 0d 64 0b 74 f6 d4 b2 92 11 85 91 76 cf 68 4a 8f b3 4d 6c 32 c4 3b 4e ce e1 42 42 15 73 d9 47 86 e2 5b 8e 34 67 78 8f e5 cc 60 18 55 08 6c 49 fa 2e e5 0c 64 3a bf e6 5d ea 68 a2 8d c2 5a 9a 37 f9 01 5e 42 d7 aa c0 c8 89 77 0c 67 57 c7 02 b0 09 1e 0d 48 a3 e5 39 e4 b7 52 6b 6c 5e f5 0c 1d e6 f7 18 c7 06 1a 29 9e b5 d1 c4 49 fe ca c3 fc 80 6a ca 11 e4 bd 09 bd 73 a9 62 18 d7 f2 18 ef d3 40 9a 5c d1 7c fb 88 b9 54 ea 67 59 dd 43 d1 52 24 4d c9 6b ae 2e 80 5d 86 d8 17 16 40 c1 e5 aa 2f 68 99 b7 8b ac 65 54 22 08 c7 5e c2 32 6a 8b 20 b2 2c 67 38 c6 9b 3c c0 24 ca f0 10 52 9c 16 82 41 5c c1 8d fc Data Ascii: fQ'WzR7&+Egr>'-Gfv i)LfodtvhJMl2;NBBsG[4gx`UlI.d:]hZ7^BwgWH9Rkl^)Ijsb@\\|TgYCR$Mk.]@/heT"^2j ,g8<$RA\
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 98 4a 25 2e 02 07 9b 7c ec 0e 02 8f ab 58 c1 fe 2e 9e 50 b5 4c c3 d2 c8 b2 15 a2 93 7b bc 15 b1 d6 92 6a 54 3a 91 55 d5 c9 db 85 21 89 54 9f 50 2d 62 69 86 c8 93 40 66 55 bf d5 28 1e a9 00 14 96 e5 cf 4c c5 c5 ee f0 93 dc 32 46 32 95 7b 78 8d 93 f8 f8 f4 b4 f9 d4 73 88 2d 2c e3 6a 4a b1 55 f2 69 7f 26 f2 1c c7 68 43 df 7e 43 15 96 c6 16 15 7e 8b a5 a9 b0 45 f3 8a ac cf 6b 48 95 ad 49 68 29 ea 3e 52 ae 2a e7 62 9c 34 ca 44 76 ba 00 20 c7 01 e6 11 32 55 30 86 59 3c c8 66 ea f1 e9 79 cb 71 8a 3d 6c 60 31 93 70 30 3b 46 1b c0 94 64 e4 30 87 37 48 a3 6b 07 19 17 72 e8 c8 55 a5 0e 79 75 a3 cf 73 8d 2d 50 4f cb 72 01 a8 a1 1f 60 08 55 ca a2 59 e5 e4 c8 73 47 9f 38 5a 05 00 3e 3b 11 58 01 ca 99 cf db 34 90 04 cb 72 82 ed bc c8 42 c6 63 91 c2 ec 90 29 93 01 5c 8c Data Ascii: J%.\|X.PL{jT:U!TP-bi@fU(L2F2{xs-,jJUi&hC~C~EkHIh)>R*b4Dv 2U0Y<fyq=l`1p0;Fd07HkrUyus-POr`UYsG8Z>;X4rBc)\
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: b6 d8 33 42 07 f0 86 9a 4d 97 35 06 9c c9 66 e4 04 98 2b 20 c0 6e e6 10 50 12 c4 ab 8f 91 c7 1c 70 1e db d2 27 80 65 8d d2 68 43 6d 8e 1b 12 c2 c4 59 f6 c2 cc 4e 73 15 42 68 0d cb 5d b3 27 c0 a7 cc b7 45 6b 8e f4 b0 78 03 84 2a 5a 15 fd 44 61 2a a6 7a 06 53 e6 d3 35 52 cd a1 16 b6 71 8e 30 04 d5 1b a9 68 8e d2 40 5d 81 52 24 c0 82 44 d1 ea e3 42 41 96 0b 5c ca 27 42 02 84 72 02 58 b2 6c 89 d7 b6 6f 91 5a 73 a2 7a 6b 98 65 4f 0d 4f 70 12 eb 73 f5 e4 c4 2a 87 a1 2b ef f5 d6 4c df 00 aa 02 84 82 4c 09 d4 b0 d9 21 79 ae 62 4f fa 15 c0 9a 65 5d c3 ac 76 57 57 81 57 cf 60 d2 c0 34 23 ef cd a7 81 de 6a 87 82 c5 af b4 55 5e 01 9a 08 93 10 c0 bc 1a f7 2c 1b 5a f3 dc c4 40 ea 04 68 8f 95 fb b2 38 da f1 f0 96 ef ae 7b 96 3d cd a4 3e 4c 7d 25 65 a9 9d 34 5a af d1 92 Data Ascii: 3BM5f+ nPp'ehCmYNsBh]'EkxZDazS5Rq0h@]R$DBA\'BrXloZszkeOOps*+LL!ybOe]vWWW`4#jU^,Z@h8{=>L}%e4Z
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: df 5d 39 70 0d 78 70 f3 ab d3 d4 b3 9b 18 53 fb e5 a3 68 76 28 53 7d a6 f2 6b 2b 96 aa 35 73 02 1c 6d a3 6c 04 fd 1c 1d 9c c1 cd 3c cc 1f 39 40 85 b4 65 33 8b 09 18 3b ff d7 8a 3c ee e5 24 8a b6 2c cb 2b b7 e4 42 2b c5 94 1d cb 5a 05 d0 8a 58 d1 72 22 17 ed 05 50 d9 31 90 49 fd b4 36 8b 5f 8b 57 35 56 79 4d 44 80 62 32 02 18 a2 8d 2e 3c 4c e7 1c 6e e3 29 de a6 87 6c 64 3b cb 69 ac ae a3 cc 32 61 b5 79 91 39 04 f6 2c eb fb a8 63 2a 52 23 89 2c 98 12 fa 15 60 ca d3 4c ea a6 94 6a 63 0d 60 36 cf d1 c3 d6 03 b3 d9 d0 e6 5a fd ca 09 10 cd 2e 30 5b 48 80 f1 be d5 33 37 cf 74 2e e0 47 ac e3 5d 7a c9 4e f6 72 2b 2d 8c 5d 7f 3a f9 3d a3 48 e4 bb b4 48 77 57 df 4d 29 a6 6c a3 95 5a 0e ca 22 76 bf 9e 21 20 0b 0f e3 86 6f b6 68 f1 6b 08 d0 e8 75 9c 6a c9 70 7e 04 cb Data Ascii: ]9pxpShv(S}k+5sml<9@e3;<$,+B+ZXr"P1I6_W5VyMDb2.<Ln)ld;i2ay9,c*R#,`Ljc`6Z.0[H37t.G]zNr+-]:=HHwWM)lZ"v! ohkujp~
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 33 33 f8 1a d7 f3 3c 9f aa bf 24 31 55 e9 e1 57 9c 48 48 41 90 e5 d4 76 57 60 d1 a9 02 d8 4f e6 48 93 9c e6 32 de eb 7e 45 73 d4 cf bd 02 94 28 08 08 20 a9 00 15 7a d9 c5 9b 3c c8 85 74 10 52 ac ae 53 a9 4f 9e 56 e6 72 2a df e1 b7 ec 4d 1d f8 fa bf 0a 7c 19 cd e4 c5 59 8e 34 1e 3e 74 54 b9 62 4a e8 57 cd f1 c6 4d 56 2a 65 b8 bd d5 60 59 ec 57 d9 17 11 60 31 6f 39 55 00 77 02 54 38 c8 87 6c e0 7e 96 d2 46 1e 7d 33 7c 7c da 38 96 6f 72 3b eb e9 66 a2 64 17 b7 d2 81 2f cc b2 8a 27 75 4c 29 75 c6 94 f7 37 cd e6 10 cc 4c b3 84 6f 20 82 29 40 d3 d2 f5 53 43 1b 65 4a 95 22 80 bc 02 3c 27 be 02 15 b4 2b 50 85 fd fc 99 75 dc c9 d9 b4 92 23 cf f8 b8 f2 34 90 63 1a 5f 67 19 f7 b0 81 1e 26 5a ba f9 31 9d d1 2a 05 59 56 6a 26 8d c1 a2 01 3d e6 56 09 69 2c 15 40 07 9c Data Ascii: 33<$1UWHHAvW`OH2~Es( z<tRSOVrM\|Y4>tTbJWMVe`YW`1o9UwT8l~F}3\|\|8or;fd/'uL)u7Lo )@SCeJ"<'+Pu#4c_g&Z1*YVj&=Vi,@
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 52 4c 49 d4 e8 d1 f3 55 77 55 b5 a1 aa c5 14 82 3e 57 59 b4 9c f5 be 3e 57 8d 35 5b 54 5f 26 2f 4e 15 20 c0 af 03 02 54 f8 8c 5f 71 13 8b 99 57 85 7e 4e cb f2 f8 68 03 2e b7 de eb fb 78 98 31 0a f8 34 f2 0b 06 88 2f eb 59 40 03 76 10 eb 98 ca 0b 30 a5 e1 51 1f 25 c1 a3 52 cd a2 76 05 12 38 52 ed 5a ab 1d ae 46 bf f2 d5 d8 49 93 a8 02 f8 e4 98 49 f6 04 a8 30 ca 30 3b f8 1f ae 61 21 b3 28 2b e0 5b 72 ef 2b 02 58 28 b0 9a b1 8b 50 8e 13 78 9f f8 b2 95 b3 99 62 87 ab 52 37 f4 08 a1 2e c7 b2 37 ae db 1c 98 8d 8f 66 88 c7 d9 38 89 5f e9 59 91 b8 02 f8 34 64 4c 80 0a c3 0c f2 21 ff cd e5 cc a7 83 90 1c 0a fa e6 83 44 45 5b e0 32 7a b1 cb 2e 56 d0 50 b5 51 e0 67 f4 13 57 ba b8 92 23 f0 65 87 90 00 53 56 88 eb a4 d1 fd 0a 30 e5 19 97 63 54 5f 70 71 31 13 c0 c1 af Data Ascii: RLIUwU>WY>W5[T_&/N T_qW~Nh.x14/Y@v0Q%Rv8RZFII00;a!(+[r+X(PxbR7.7f8_Y4dL!DE[2z.VPQgW#eSV0cT_pq1
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 84 56 f9 6e 4e 50 5d ee a7 6d bc dd a4 b0 7b 84 85 1e 64 c2 8a 35 d0 53 e1 55 4e ec 94 c0 47 e1 f6 ad 86 e2 1b 95 e2 f6 15 35 8d 73 05 0a 44 1b 5e e5 47 99 a2 ba 6c a2 65 de 01 56 71 92 aa f2 5b 86 29 a4 4d 68 de f4 54 62 9c fa d8 e6 83 e0 4f c7 9d 75 21 38 f3 9e b8 9e e2 38 51 c5 42 a6 b1 5e 82 03 d0 86 56 b9 60 9c 57 a9 2e a7 f9 16 6d 43 80 b5 9c a2 aa 6c 63 f0 fc 48 3c b9 79 6b a2 40 5b d6 dc 53 96 16 89 a7 b9 7a a1 88 49 96 c2 d2 e8 3c da 39 bf 47 b7 cc f6 e3 aa fe 0a 54 f4 43 00 1b 51 ca 51 5f 65 b1 26 39 5b 14 6d 0c 07 f9 12 1d 8a 59 02 6c 64 82 aa f2 73 72 0a df 19 50 d3 ba 95 8a 9e d2 78 74 49 9a 14 78 54 1b d8 af 95 9e f1 13 40 f6 28 e7 96 72 a7 9a 00 05 99 96 00 0a a4 da 2a cb 5e c7 78 09 8d fc 9b db 31 ff 65 9a 5f 31 49 55 d9 4a 5b c8 bc e1 9e Data Ascii: VnNP]m{d5SUNG5sD^GleVq[)MhTbOu!88QB^V`W.mClcH<yk@[SzI<9GTCQQ_e&9[mYldsrPxtIxT@(r*^x1e_1IUJ[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50244	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	577	OUT	GET /media/asset-icons/asset-eth.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:06 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: image/svg+xml Content-Length: 410 Connection: close Last-Modified: Mon, 22 Jun 2020 22:23:12 GMT ETag: "46a990311976549a778e1263866506d8" x-amz-version-id: f_V0wD52VQX007vyrVBzYtGgm.koikCq X-Cache: Hit from cloudfront Via: 1.1 177fd0f8c3e2c78883d72714aa07183a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: AYMVp5gNDavLuRIsZkmKR5y5j7aClUFh9rjF5sVDLV6rztYFsZ6TTQ== Age: 5341 CF-Cache-Status: HIT Expires: Fri, 26 Apr 2024 18:38:06 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8c699337428-MIA
2024-04-26 18:33:06 UTC	410	IN	Data Raw: 3c 21 2d 2d 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 49 63 6f 4d 6f 6f 6e 2e 69 6f 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 3c 74 69 74 6c 65 3e 61 73 73 65 74 2d 65 74 68 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 39 34 39 34 39 22 20 64 3d 22 4d 31 36 20 30 63 38 2e 38 33 37 20 30 20 31 36 20 37 2e 31 36 33 20 31 36 20 31 36 73 2d 37 2e 31 36 33 20 31 36 2d 31 36 20 31 36 63 2d 38 2e 38 33 37 20 30 2d 31 36 2d 37 2e 31 36 33 2d 31 36 2d 31 36 73 37 2e 31 36 33 2d Data Ascii: ... Generated by IcoMoon.io --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"><title>asset-eth</title><path fill="#494949" d="M16 0c8.837 0 16 7.163 16 16s-7.163 16-16 16c-8.837 0-16-7.163-16-16s7.163-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50239	15.197.193.217	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	781	OUT	GET /track/cmf/generic?ttd_pid=eyeota&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUYASABKAIyCwjky5i4wIrzPBAFOAFaB21zc20xMTVgAg..
2024-04-26 18:33:06 UTC	543	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Length: 191 Connection: close server: Kestrel location: https://ps.eyeota.net/match?uid=6f67744e-1091-4048-adba-e024cc18f2d2&bid=1e2n4ou set-cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; expires=Sat, 26 Apr 2025 18:33:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUYASABKAIyCwj669e8wYrzPBAFOAFaBmV5ZW90YWAC; expires=Sat, 26 Apr 2025 18:33:06 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 18:33:06 UTC	191	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 6d 61 74 63 68 3f 75 69 64 3d 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 26 62 69 64 3d 31 65 32 6e 34 6f 75 22 3e 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 6d 61 74 63 68 3f 75 69 64 3d 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 26 62 69 64 3d 31 65 32 6e 34 6f 75 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://ps.eyeota.net/match?uid=6f67744e-1091-4048-adba-e024cc18f2d2&bid=1e2n4ou">https://ps.eyeota.net/match?uid=6f67744e-1091-4048-adba-e024cc18f2d2&bid=1e2n4ou</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50241	34.36.216.150	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	804	OUT	GET /connectors/sharethis/usersync?cookieQ=1&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.sharethis.com%2Fbasis%3Fuid%3D%7BuserId%7D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=febb0cc9-a867-4e01-8b79-fa3d8a253c66#1714156381801
2024-04-26 18:33:06 UTC	773	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=febb0cc9-a867-4e01-8b79-fa3d8a253c66#1714156381801; Domain=.sitescout.com; Expires=Sat, 26-Apr-2025 18:33:06 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI4NCI6MTcxNDE1NjM4NjM3Nn0; Domain=.sitescout.com; Expires=Sun, 26-May-2024 18:33:06 GMT; Path=/; Secure; SameSite=None location: https://sync.sharethis.com/basis?uid=febb0cc9-a867-4e01-8b79-fa3d8a253c66-662bf35d-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Fri, 26 Apr 2024 18:33:05 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50242	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	583	OUT	GET /media/asset-icons/asset-shiba-inu.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:06 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: image/svg+xml Content-Length: 4191 Connection: close Last-Modified: Thu, 29 Feb 2024 16:46:52 GMT ETag: "c8f537075552778951ff474d65fabc15" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: FPb4EnneUdkZ_gbVnbEyx9K7cvTVmaGY X-Cache: Hit from cloudfront Via: 1.1 221c16f6368b9673111421e368023144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: b1ZaaaNLIQkptoBdSEncLBiV4dX4DTsCOYj02_aRwQYLqd5WFx-nPw== Age: 19958 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:06 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8c69f34a522-MIA
2024-04-26 18:33:06 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 20 36 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 3c 72 65 63 74 20 78 3d 22 30 2e 37 39 39 39 38 38 22 20 79 3d 22 30 2e 38 31 32 30 31 32 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 36 30 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 74 74 65 72 6e 30 29 22 2f Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="32" height="32" viewBox="0 0 51 61" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><rect x="0.799988" y="0.812012" width="50" height="60" fill="url(#pattern0)"/
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 45 77 45 41 6d 70 77 59 41 41 41 41 41 58 4e 53 52 30 49 41 72 73 34 63 36 51 41 41 41 41 52 6e 51 55 31 42 41 41 43 78 6a 77 76 38 59 51 55 41 41 41 70 4a 53 55 52 42 56 48 67 42 37 56 70 72 62 42 54 58 46 54 35 33 5a 74 66 72 74 63 48 73 68 6b 64 49 65 47 32 6b 4a 46 42 42 77 52 57 31 4a 61 64 46 47 43 45 52 6f 6c 51 4b 70 46 4c 6f 55 7a 67 6f 53 58 2b 6b 4c 61 62 4a 6a 34 61 30 67 6c 52 52 53 31 4c 55 6d 4b 4a 45 45 55 4b 46 70 47 70 54 61 49 4a 4e 66 71 54 51 4e 44 77 55 42 56 49 51 78 55 6c 41 55 43 6b 71 61 77 78 4a 47 6f 68 33 62 57 4e 37 58 33 4e 76 7a 72 6e 7a 32 4a 6d 64 6d 66 58 73 32 70 41 2f 66 50 4c 31 7a 4e 79 35 6a 2f 50 64 63 38 36 39 35 39 35 5a 67 4a 75 34 69 65 73 43 56 70 70 78 37 62 58 70 62 63 44 45 4c 67 44 52 72 54 4b 6c 49 37 72 Data Ascii: EwEAmpwYAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAApJSURBVHgB7VprbBTXFT53ZtfrtcHshkdIeG2kJFBBwRW1JadFGCERolQKpFLoUzgoSX+kLabJj4a0glRRS1LUmKJEEUKFpGpTaIJNfqTQNDwUBVIQxUlAUCkqawxJGoh3bWN7X3Nvzrnz2JmdmfXs2pA/fPL1zNy5j/Pdc869595ZgJu4iesCVppx7bXpbcDELgDRrTKlI7r
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 73 78 4d 4e 43 2f 39 35 65 51 63 33 43 69 77 63 49 50 2f 75 37 67 75 76 4b 6b 4e 45 37 52 31 73 4f 37 6c 66 38 31 70 62 2f 7a 64 44 4a 52 44 2b 4f 37 48 6f 47 37 31 66 36 48 2b 6f 55 2b 68 5a 76 36 54 4d 42 61 45 45 6d 74 6b 57 35 52 71 6d 6a 71 38 43 52 6b 7a 4b 44 63 47 32 41 51 4e 66 73 71 49 77 43 55 52 74 4c 65 31 6a 68 4b 6b 77 6e 4d 35 33 34 35 72 47 70 2b 78 4f 67 7a 50 66 77 4a 43 64 7a 30 4b 31 55 43 70 6e 77 57 52 35 71 4c 77 34 54 76 57 51 4f 68 75 2f 37 62 45 75 58 78 70 56 6b 78 56 64 61 30 6f 42 71 4e 57 56 36 32 72 33 67 36 75 54 6d 73 4a 6c 42 63 45 58 67 4e 41 41 2b 57 4c 59 66 64 4b 4b 52 52 64 64 67 57 6a 4c 64 64 75 43 2f 63 63 4d 6f 6a 7a 67 76 62 35 63 56 63 65 54 35 32 46 61 73 44 54 5a 7a 33 61 50 2b 5a 62 58 72 6d 33 7a 70 55 6e Data Ascii: sxMNC/95eQc3CiwcIP/u7guvKkNE7R1sO7lf81pb/zdDJRD+O7HoG71f6H+oU+hZv6TMBaEEmtkW5Rqmjq8CRkzKDcG2AQNfsqIwCURtLe1jhKkwnM5345rGp+xOgzPfwJCdz0K1UCpnwWR5qLw4TvWQOhu/7bEuXxpVkxVda0oBqNWV62r3g6uTmsJlBcEXgNAA+WLYfdKKRRddgWjLdduC/ccMojzgvb5cVceT52FasDTZz3aP+ZbXrm3zpUn
2024-04-26 18:33:06 UTC	873	IN	Data Raw: 30 32 6d 65 62 50 6e 53 74 32 37 74 6a 68 57 35 5a 6e 30 34 48 37 48 56 79 2b 56 42 6a 79 58 6e 43 78 78 4d 7a 44 39 48 4a 77 63 57 50 67 42 6f 4f 6b 69 7a 30 39 6f 71 57 70 53 66 53 6e 30 31 58 56 4c 30 33 5a 33 58 38 79 53 59 67 42 74 62 68 46 74 79 5a 6a 77 58 55 56 61 52 39 32 51 2b 62 4a 44 54 42 65 6d 44 56 4c 4e 35 57 47 68 67 59 59 4b 77 52 2b 6b 63 34 2b 61 2f 6c 6b 55 74 4f 4b 45 35 57 31 41 6a 36 48 69 38 6f 76 56 58 6b 6b 46 4e 4e 4f 2f 42 76 55 52 59 74 41 6e 54 73 50 4b 67 47 74 48 57 39 32 64 65 48 47 36 78 4c 55 52 69 4c 79 65 65 66 4f 6e 66 44 50 67 77 66 6c 34 54 71 52 6f 72 7a 6a 4f 43 32 66 50 6e 55 4b 35 69 39 59 55 46 48 37 6d 61 65 66 67 73 4c 62 42 2b 55 39 4c 6f 49 64 4d 51 36 57 55 7a 73 69 74 4a 51 4b 71 2f 41 7a 63 71 64 38 45 Data Ascii: 02mebPnSt27tjhW5Zn04H7HVy+VBjyXnCxxMzD9HJwcWPgBoOkiz09oqWpSfSn01XVL03Z3X8ySYgBtbhFtyZjwXUVaR92Q+bJDTBemDVLN5WGhgYYKwR+kc4+a/lkUtOKE5W1Aj6Hi8ovVXkkFNNO/BvURYtAnTsPKgGtHW92deHG6xLURiLyeefOnfDPgwfl4TqRorzjOC2fPnUK5i9YUFH7maefgsLbB+U9LoIdMQ6WUzsitJQKq/Azcqd8E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50240	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	700	OUT	GET /mediamath?uid=6e3f662b-f35d-4100-8a7a-d4dc11b8af80&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:06 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:06 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50238	141.95.33.120	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	818	OUT	GET /k/155.gif?puid=AAGbQU7MV-cAABTrRdAf4w&id5AccountNum=155&numCascadesAllowed=9 HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=ef3cddf5-ca0f-737b-a417-e2297a9c0d9f#1714156371003#2; 3pi=121#1714156372767#-1519022819\|124#1714156375753#1865358582; cf=gif; cip=121; cnac=0; car=3; gdpr=0\|
2024-04-26 18:33:06 UTC	1407	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=121#1714156372767#-1519022819\|155#1714156386397#-681916381#AAGbQU7MV-cAABTrRdAf4w\|124#1714156375753#1865358582; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:33:06 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure content-type: image/gif;charset=UTF-8 transfer-encoding: chunked date: Fri, 26 Apr 2024 18:33:05 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-26 18:33:06 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50245	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	604	OUT	GET /media/wealth/Artboard%201%20copy%204-modified-modified.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:06 UTC	839	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: image/png Content-Length: 42970 Connection: close Age: 19958 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=67003 ETag: "f34b000f090fb7439149c10801c38edd" Last-Modified: Mon, 29 Jan 2024 10:52:01 GMT Via: 1.1 b3fa6483b226ef7cc87d8bab653f621c.cloudfront.net (CloudFront) X-Amz-Cf-Id: O8wLt_jV2aznhWVthrQjyz3IYUwfhMIb8CXJj-V1jXH7fBDmBBXDww== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-server-side-encryption: AES256 x-amz-version-id: cKjTdty40.Q5FHf405zb_hZsmzbxZMZC CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:06 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8c69a267471-MIA
2024-04-26 18:33:06 UTC	530	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 6a 00 00 01 69 08 06 00 00 00 b5 4c 62 4d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 a7 94 49 44 41 54 78 da ec 9a 6b 72 eb 20 0c 46 f3 17 3d c0 4b ea d2 b2 b3 2c cd 97 54 d0 8f 00 7e dd 3c 9a d4 66 e6 8c 64 61 3b ed 84 9c 30 72 4e 7b 1d 22 f2 95 38 47 2e 1d c6 79 78 14 2e 91 91 99 0d 61 e4 a8 3f 1c 62 32 88 46 26 be c6 04 ea 98 2b eb 9f 83 33 ec d8 c5 dc b9 1c 0d b2 98 21 e4 6d fd 03 a1 f2 98 72 8d 0c aa 70 84 73 88 96 a9 d6 c5 da 75 27 22 13 35 19 c5 f2 1b 54 35 45 1f 49 35 d1 98 1b 92 a2 bf ce 47 82 86 8b aa 46 c2 c5 7b 7f ce 0c c3 f0 75 3a c6 df 1c 10 32 04 fc 30 b8 95 b7 d5 6a 69 3f 91 f2 83 46 3c 72 2b ee 5c 33 50 6f f9 20 a1 3b 87 dc c4 95 05 95 e2 37 f9 3c 13 d7 ed 1c 72 c8 3e 5d d3 bf 57 Data Ascii: PNGIHDRjiLbMsRGBIDATxkr F=K,T~<fda;0rN{"8G.yx.a?b2F&+3!mrpsu'"5T5EI5GF{u:20ji?F<r+\3Po ;7<r>]W
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: b9 70 25 ea b9 07 86 98 7b 95 a8 79 b7 a2 a6 49 51 bb 4a d4 46 f5 60 72 85 40 a9 53 a7 e9 6b b0 8b ef df 0b 39 51 7a 6d 8b db db 1a 4d 7f 19 30 24 0d 66 45 8d 9a a0 de f4 95 fb a2 c6 dc 9c a8 4d ba 53 82 6e 64 ab 55 5c 24 04 a3 27 6a 9b 43 0d f5 4b 14 f6 d1 d7 fe 13 82 16 5b bc c2 fc 7e a2 ae 20 da 8b a8 3b 94 d2 2d c5 8c bc c1 11 7a c0 09 dc ab db 5e 71 95 f8 31 e7 ec ba a5 2f 97 bb 60 e2 35 a2 9e 5e 1f 4c 33 a2 c6 5a ef ff 52 43 bb a2 56 b5 ba 6a 1f af a5 74 93 b0 c1 fa 5e 74 08 90 6e 55 6b 44 1d 6a 51 d7 e0 ba 7c 7c 08 fb b1 72 3e 47 c6 57 c1 dc 11 35 af 11 35 ff b6 a8 df 53 a6 4f c7 41 be a8 bd e9 df fa 14 51 cf af 19 9a 11 b5 c8 82 a8 8d ba 0e da b6 84 09 bc 14 b2 22 4f 64 99 7a 9c d3 e4 ad a8 c3 8c a8 43 29 6a 8b 8b a2 c6 bd 8f 5f 8e dc 31 5e 29 68 Data Ascii: p%{yIQJF`r@Sk9QzmM0$fEMSndU\$'jCK[~ ;-z^q1/`5^L3ZRCVjt^tnUkDjQ\|\|r>GW55SOAQ"OdzC)j_1^)h
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 05 b1 99 47 74 bc b5 b2 ac ef 26 e7 f5 07 a4 27 10 53 ca a0 a6 18 a8 d7 4c be 64 40 7d ba 47 50 9f 2a a0 9e 1d 7c 7b 80 ba f8 b0 3a 65 78 af 06 e6 f1 05 42 c0 39 22 58 ce d6 17 2d eb 82 1a d6 ae 01 b5 86 aa ef eb f6 41 8c f9 95 ec 9c dc 02 b5 95 1d 8b f1 22 90 0f 6a 77 73 cd 5d c0 fa 62 49 67 10 6b 0b 00 82 db 03 6d 0a d4 1b a8 78 aa 72 b2 a7 88 df a9 9e 3e 04 60 5f e0 04 17 8a b7 58 f6 d4 7c 38 4c 6d 2a dd 66 2d 5c b0 77 d7 64 2c 6e 39 f2 4d 42 fd 3c 8b 0a 0f f6 2b e1 8c 93 b9 61 dc 10 39 47 57 e5 12 10 26 76 fa 4c c8 5c 1c d4 fe 86 13 94 0a 4c 75 50 4b 05 d8 68 97 de b4 a4 8c 7e b3 f8 c8 75 77 05 20 ae 24 05 50 9b b1 10 62 c4 21 be 97 58 eb 94 d2 6f 13 12 44 b0 aa d1 ae 40 ad e0 bc 13 a8 a1 87 01 35 40 ec 83 fa 69 61 50 9f 00 ea 53 2d 0c 70 23 50 9f ee Data Ascii: Gt&'SLd@}GP\|{:exB9"X-A"jws]bIgkmxr>`_X\|8Lmf-\wd,n9MB<+a9GW&vL\LuPKh~uw $Pb!XoD@5@iaPS-p#P
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: a8 b5 e5 0d 4b b5 08 dc 16 a8 cb 50 97 aa 0f bd 07 d4 3a c1 15 0e 1c 58 7e 63 cb e7 86 96 03 d4 07 a8 b7 04 33 e0 fc 21 d4 07 40 3d 13 e0 8b ba 15 cf 40 3d ff fa 7b ab 52 c0 04 a8 bd 4c 71 5c 70 77 68 e0 b6 40 cd 16 d4 dc 02 b5 ec 05 ea fe 5c d9 54 5d ec d4 a0 86 ec bd 62 9e a5 37 c2 24 f5 81 4e f3 c8 0e 00 16 e5 80 30 7e 07 d9 43 05 8a fa 7e 91 22 83 d0 85 52 31 f3 5c 0d d4 a3 b2 ae 0e ca aa 46 69 70 16 c2 e6 6e 14 ca ae 24 cb 02 cf ba 37 ac 1a 6e 04 17 d4 3e 94 a0 90 af 9a b2 fc 71 3e a8 bd 6b e3 12 51 f7 d0 f0 43 b3 85 31 c4 5a 26 ac 70 31 97 47 09 d4 44 54 02 f5 fd ea f4 b7 3c 40 bd 3e a8 53 fa db 57 cf 68 98 16 04 35 01 d4 7d 09 f8 6f dd 6a ae 0a 16 71 10 d4 90 14 40 d6 b0 84 09 40 0f 9f 76 4e 3e 24 e1 66 72 81 ec fa ac a3 61 8a f6 3e 9a 87 2f 00 d4 Data Ascii: KP:X~c3!@=@={RLq\pwh@\T]b7$N0~C~"R1\Fipn$7n>q>kQC1Z&p1GDT<@>SWh5}ojq@@vN>$fra>/
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: f8 a3 f5 e9 f1 30 38 96 0c d5 63 62 6d e5 c0 0a b2 b9 a8 fd 95 76 d7 af 0d d1 2d 47 76 6c 2a 0b ea 0c 57 7f 87 a4 af 3c 16 a0 36 56 33 2c ef 8d 5d 1a f8 9c cc 36 4a 79 a0 1e 85 d3 06 a0 5e e3 fd a4 dd 3e de 07 2b d5 82 5a bd e6 01 49 1d d8 90 02 61 4d 32 0c 6a f2 da 62 a0 f6 e3 f0 2d f7 30 de 82 1a fd 25 39 fd 04 50 5b b7 87 0b 6a 22 2f a9 4d 6f 78 de 01 ea a6 10 ab 9c b5 92 05 bf 0b a8 ab 96 f3 3a c0 93 45 f3 39 a3 5c 13 d4 b2 09 a8 e7 92 65 41 9d c5 2d 60 cf ad ed e6 9c 23 a0 1e 71 99 e1 fe 08 2e b8 d6 67 5a 5d 07 50 db 75 16 c0 9b 50 37 fd e9 9c fe 75 dd 1e fc 15 b6 a8 03 de 50 a5 9d 27 10 2b 68 87 41 9d e7 1f 8d 28 a0 5b 05 74 58 bb bb 2e da 70 4e 6e e2 a3 38 98 25 00 45 05 51 31 fd 63 0b 76 00 d9 b2 0b 6a b8 2f 88 b9 98 6d 4e 46 41 2d f3 39 45 83 ba Data Ascii: 08cbmv-Gvl*W<6V3,]6Jy^>+ZIaM2jb-0%9P[j"/Mox:E9\eA-`#q.gZ]PuP7uP'+hA([tX.pNn8%EQ1cvj/mNFA-9E
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: ff 2b 00 94 4b 70 55 3f ff 38 a8 a9 04 6a 5a 00 d4 da 9a de 1d d4 d0 cd 80 9a 00 ea af 10 5e 08 d4 ac 5e 7b e1 48 64 63 3b db 12 9d 33 43 aa a0 66 0b 6a c0 dd 11 af 08 6a 06 5c 0f 50 6f 02 ea b8 44 64 71 9d cf 1f 3a ff 91 f3 d4 76 ee 1b cb d1 9c 2a 95 4d 2e b9 6f 39 8b 9a c4 05 75 d9 d7 9c 6c 1d 70 81 12 da ae 53 22 c0 2f 12 5e 47 03 7e ed 86 ec 91 61 16 ce 80 36 a1 cc 6a 03 38 06 6a 7c ed 2a e4 3c a0 71 40 c0 e7 ac 40 cd c2 76 11 31 f7 5b 70 16 e1 ea 03 9c 51 ea 43 62 dd b9 78 d6 cf 78 df 61 50 63 ac dc 38 2c f7 5c 24 a4 f0 91 61 56 67 39 bf 2b 03 16 ca ed ef 75 5c 7b 9e 4a 00 d9 d3 33 ea dd 9a ee 41 ea ba d2 47 df f6 85 a3 0f 09 ce 00 6a ee 0d 41 01 80 2d 50 47 95 b2 1c 50 a7 30 a8 fd dc d7 b4 22 a8 c9 80 9a 06 d4 35 1e b9 6c f7 07 35 a0 e8 2d fe 41 31 Data Ascii: +KpU?8jZ^^{Hdc;3Cfjj\PoDdq:vM.o9ulpS"/^G~a6j8j\|<q@@v1[pQCbxxaPc8,\$aVg9+u\{J3AGjA-PGP0"5l5-A1
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 9d 85 a2 dd da ed e5 fc 28 9d de 02 c9 e5 f5 b1 85 7b 23 89 4c eb 04 7f eb 32 d5 a5 5f e1 f0 bc ac c5 7c d4 f0 47 2f 09 ed 3a a0 35 a8 7f 38 2e 10 3d 5f 2e 1b ae 90 af e0 f6 41 8d 85 31 2c 32 da 78 60 fe 1e a0 46 1d 20 de 5c 62 22 1b 46 d2 83 76 82 ba 6d 1d e3 5a a9 81 5a dd bb e8 64 fc 0f 91 41 ee 51 25 22 41 f5 83 da 5a d7 e7 71 50 cf 2c eb 97 1d 41 0d 58 e3 35 16 24 5f ab 7a d1 a1 7d 00 f5 45 a4 0f 95 a4 22 a8 f9 76 40 8d 31 5c 07 35 ab 85 3f 5c 8b 3a 33 ac e6 6d 25 95 03 56 35 14 65 0c d4 76 a3 49 7b 51 af 09 6a dc ab 8d 7b 2e 85 d0 7d a7 45 bc 7b 15 16 93 fb 84 c8 8f a6 b0 e1 a5 1b d4 70 81 3c 57 36 af bc 8c 80 1a ee 8e 20 a8 df 00 6a 2b 80 7a 2a 3b ee c3 05 35 44 a8 ab 85 42 c0 6c 92 76 83 f0 55 00 c6 dc 64 7c e5 80 67 38 ec 8d be 96 74 bb be c2 0c Data Ascii: ({#L2_\|G/:58.=_.A1,2x`F \b"FvmZZdAQ%"AZqP,AX5$_z}E"v@1\5?\:3m%V5evI{Qj{.}E{p<W6 j+z*;5DBlvUd\|g8t
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: b6 81 b6 f2 53 ff e8 f5 51 03 be 6d a9 eb fc f9 4a a0 96 3b 05 b5 4c 5b 5a 15 54 00 20 88 6f 04 d2 3c 4f 8a c4 1e 34 35 c4 b9 d3 a2 6e cb 82 36 00 fa ac ef 08 ea d9 7e 80 2a 90 db 80 ce 56 31 ea 6b c3 f4 84 f2 74 fa 2c 4f ae 52 2e 3f af 0b bd 57 2d 7d 70 fb ef f8 22 1f dc 3e ac 01 ec d0 22 63 00 d4 c8 d5 51 05 35 20 1d 17 a0 fc 53 cb 07 f5 dd 24 6b 97 d9 81 aa 93 bf eb f6 65 13 e7 5b 80 db 44 ff 5f 81 aa 80 78 2d a8 9d 0d 30 ec 8d ef 03 f5 9d b9 29 46 40 5d 77 5d 58 25 28 51 79 c1 6e 71 fd 85 6e 32 00 0e 48 c1 3c 01 f0 95 f7 c6 cf 49 49 47 8c d8 a4 6d 5e 0e 11 c8 8f bd 8e 1e 40 e0 c5 5a bf 66 15 dd 20 71 50 c3 4a 1e 90 82 bd 06 b5 58 50 6f 95 00 47 9c fa 57 90 b1 6b 6d 2a 30 f3 cd 82 b9 02 bd 7e d0 c2 e2 55 a0 5e e1 9e 50 ef 86 3d b2 e4 3d 5e de 0e ec ca Data Ascii: SQmJ;L[ZT o<O45n6~V1kt,OR.?W-}p">"cQ5 S$ke[D_x-0)F@]w]X%(Qynqn2H<IIGm^@Zf qPJXPoGWkm0~U^P==^
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 4a 50 ff 0b 50 5f 2d 2a b2 0c 1a b1 85 73 3c a8 8f 26 1e 9b 48 02 a8 c5 9d a7 2f 70 ee 36 46 cc a0 be 1d a8 dd 8b b5 7b d1 cb 16 60 08 20 d3 b5 00 a8 85 ef 99 d5 ba 8f a3 84 9a e7 ad b5 f3 49 23 35 98 93 ca e7 22 17 fc 22 05 70 de 5f 25 45 6d b6 5d 0a be f6 a3 91 bf 2e db d9 92 0e 58 f3 cc 5a ae b1 56 81 9a 20 ad 05 35 00 3c 24 a8 85 ac 0d f7 5d cf fc c9 86 94 81 a5 df f2 8b d4 c9 60 65 50 57 3d 41 dd dd 90 17 35 d5 de 0a 91 fb 75 09 ee e0 31 ab c6 86 92 d0 05 07 ef 59 01 e8 e8 99 19 7a 8f b9 34 d1 82 97 a4 16 82 17 20 1a 95 bd a1 ba 5e af eb 75 7b dc c4 35 a9 58 d3 75 ba 77 d6 e5 79 92 3e db 2e 4a 8a 46 65 6a c6 6d 4a 12 5d 95 22 9d ee 4f 94 ee 89 f5 d5 46 1a 50 1b 59 73 aa c7 00 f5 d1 21 21 a3 be dd 56 53 87 89 82 74 04 55 da 3d 08 79 06 2b fc 90 fa 6c Data Ascii: JPP_-*s<&H/p6F{` I#5""p_%Em].XZV 5<$]`ePW=A5u1Yz4 ^u{5Xuwy>.JFejmJ]"OFPYs!!VStU=y+l
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: c9 56 71 c1 ba d5 8a bc 6d 23 f2 e6 79 76 4d 2d f2 6e 58 6f 4a ee 57 1b 75 da cc 03 a0 3e 70 50 93 58 e5 87 06 d4 bc fa 23 05 d4 82 0f 3d 92 47 7d f0 dc 3b 0c 02 e6 b7 b7 b7 fa e3 e3 a3 fe fa fa aa bf bf bf eb 9f 9f 1f 26 73 ef f3 f3 b3 7e 7f 7f af 5f 5e 5e 46 00 34 ae 05 32 66 6b 93 d9 a9 02 d9 12 9b 0b 3d d0 26 b1 1a 6b 63 bc fa 67 d6 11 28 2c 0c 0a 65 73 00 96 1b ce 46 ff 91 77 b6 3e 8a 04 41 14 67 10 97 e5 2e 8b 85 1d ce 80 c0 21 91 38 04 9e 64 cf f3 1f e0 90 38 24 0e 89 43 e2 90 38 12 04 02 41 02 09 02 81 20 41 20 10 24 08 44 1d af 2f 4d 33 f4 d7 0c 33 fb 01 d7 c9 4b 6f 58 66 d8 9d 4d 7e a9 7d 55 5d 75 17 90 bf 5e da 08 5b e9 7d eb a3 6b e8 26 d1 98 90 12 8d 8a e4 22 d3 b5 0d 62 19 e1 25 cf 57 d4 4d 27 f7 82 fa d6 ab 66 a3 b4 52 72 05 88 cd ab 7e bb Data Ascii: Vqm#yvM-nXoJWu>pPX#=G};&s~_^^F42fk=&kcg(,esFw>Ag.!8d8$C8A A $D/M33KoXfM~}U]u^[}k&"b%WM'fRr~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50227	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	442	OUT	GET /5/4724866/?oo=1&aab=1 HTTP/1.1 Host: eephaush.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156372
2024-04-26 18:33:06 UTC	1278	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: application/json Content-Length: 2842 Connection: close X-Trace-Id: 8199e219c7af4a0dd15d28bbbdcdc3fe Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:33:06 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156372; expires=Sat, 26 Apr 2025 18:33:06 GMT; path=/; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-04-26 18:33:06 UTC	2842	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 3f 72 62 3d 6f 72 34 35 75 35 52 39 4d 53 69 4f 57 42 62 54 51 39 72 68 77 36 5f 76 4c 47 66 49 73 57 39 43 56 36 6a 58 63 31 43 48 45 30 31 46 69 49 36 71 7a 35 5a 36 61 41 77 35 75 36 65 69 54 51 41 2d 55 59 6f 48 2d 53 78 53 67 65 73 32 6c 59 4c 50 64 6d 4e 75 4f 59 59 2d 4e 5a 4a 37 79 44 62 56 2d 63 5a 6e 6b 31 57 36 38 4b 64 4e 6a 47 47 49 7a 36 46 67 69 52 32 31 50 33 6a 56 52 6f 37 47 5a 30 46 6b 77 4a 30 6b 38 42 66 76 78 58 4a 58 75 46 45 4f 51 4e 45 56 35 44 5a 6e 39 62 2d 48 7a 77 72 75 6d 42 70 4e 32 4a 2d 65 4d 6f 4e 41 34 6b 41 63 49 43 2d 63 6e 46 38 66 4b 70 65 53 30 58 61 71 5a 30 37 56 42 6c 4f 63 53 6f 4d 44 50 41 31 4e 33 67 55 61 4e 38 5f 57 72 4d 4f 75 55 34 67 78 Data Ascii: {"url":"//eephaush.com/?rb=or45u5R9MSiOWBbTQ9rhw6_vLGfIsW9CV6jXc1CHE01FiI6qz5Z6aAw5u6eiTQA-UYoH-SxSges2lYLPdmNuOYY-NZJ7yDbV-cZnk1W68KdNjGGIz6FgiR21P3jVRo7GZ0FkwJ0k8BfvxXJXuFEOQNEV5DZn9b-HzwrumBpN2J-eMoNA4kAcIC-cnF8fKpeS0XaqZ07VBlOcSoMDPA1N3gUaN8_WrMOuU4gx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50246	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	620	OUT	GET /media/New%20navigation_Rebrand%203.0/bpc%20b%20logo%20rounded%20square.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:06 UTC	803	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: image/png Content-Length: 616848 Connection: close Age: 20510 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=751591 ETag: "695a9db4ed155460a0de9301862b8d62" Last-Modified: Thu, 06 Oct 2022 14:45:00 GMT Via: 1.1 dcaec0b05596b42ef5dab9e145ac961e.cloudfront.net (CloudFront) X-Amz-Cf-Id: -JlhZBAXXY9WvqCi6SMDq41964Ssriuov-N_wIYG5m2FvpyvhESmEQ== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: l_.nCNDdArISJEY86AJMtQ_2FzYimppG CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:06 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8c8a938da67-MIA
2024-04-26 18:33:06 UTC	566	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 04 00 08 06 00 00 00 7f 1d 2b 83 00 09 69 57 49 44 41 54 78 da ec 97 b1 8e 1d 45 10 45 cf 09 90 6c 84 ac 05 84 70 00 42 20 7f 16 09 1f 43 c4 8f 11 f3 15 46 08 d9 96 03 3b b0 7c 2d 79 67 df 9d ee 9e d9 75 64 39 78 37 e9 ee aa 99 ba 55 5d 55 d3 d3 fe f9 f7 ef 5c 71 c5 17 82 6f 91 a7 84 1f 80 a7 c8 8f c0 f7 c0 0d e4 86 78 03 3c 51 9e 40 1e 01 8f 03 df 80 5f 01 48 1e 03 8f 00 40 6e 11 c0 6d 5c a7 08 09 20 23 56 19 66 53 39 9a 92 62 51 a4 32 2b ab 78 13 26 01 41 bc d5 1b 8c 60 0d 14 29 ef 09 6a 1b 12 51 20 21 88 6c 72 bc 7b a6 cf 11 90 91 33 b9 27 d8 8a 36 eb eb 36 1a 88 40 40 49 40 d3 3d c8 e9 fe ad cb 6c 3c 42 70 e2 86 b0 8f 15 aa 17 09 19 f2 e0 94 58 40 ca 23 b8 4d c2 bc 07 02 a0 9b 28 81 cb Data Ascii: PNGIHDR+iWIDATxEElpB CF;\|-ygud9x7U]U\qox<Q@_H@nm\ #VfS9bQ2+x&A`)jQ !lr{3'66@@I@=l<BpX@#M(
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: ff 22 cf 81 ff 48 9e 03 2f b8 e2 8a 2f 10 fe f5 cf 1f 5c 71 c5 67 c2 77 c2 b3 c0 33 e1 b7 c8 af 86 9f 91 9f 08 bf 20 5f 4f e7 55 87 40 a8 6c bc 2a 09 e9 e1 04 52 1d f8 29 3f 87 2e d3 f2 27 c4 f9 77 b4 b6 e7 2b 94 64 30 78 2f 3d c1 ec 2f 2a 92 70 e1 c0 b2 4e 28 ff f1 ef ed b0 79 46 36 f4 ae 41 ee 78 2b 07 1c af 53 eb 7e 55 b2 46 5a 49 ed 28 00 e6 f4 60 7e f0 82 d1 43 39 04 0e 3d ab c6 fa 6e 28 95 b0 f7 21 d5 4f a8 2e 80 63 ec e6 03 7b ef 15 b2 6b d7 b5 67 9d 47 62 82 f9 4d 0c 88 d8 15 dd 10 42 f4 17 45 b0 77 37 54 c4 82 8a 5d c1 8e 5d b7 54 04 7b d7 0d 2b 28 a2 82 5d 54 d4 60 0b 18 7b 17 4b ec 82 bd 20 0a ba 63 41 04 ff 43 e4 5f ef 33 ae 71 ce 79 3d eb 8d 26 26 df f7 ad b9 78 d6 7d df 57 99 63 96 d1 e7 98 63 7e 37 86 04 32 73 de 05 12 bd f7 23 cf 7e 0c 2c Data Ascii: "H//\qgw3 _OU@lR)?.'w+d0x/=/pN(yF6Ax+S~UFZI(`~C9=n(!O.c{kgGbMBEw7T]]T{+(]T`{K cAC_3qy=&&x}Wcc~72s#~,
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 5b e7 49 21 68 4e cf 88 eb fb e2 7f 6c 4a 61 be cf 6b 38 d3 71 d4 f3 26 1a f6 36 1b c8 5e 4d 0e 71 78 7d 39 a9 fc 7c 42 ef db ed c6 e8 d7 22 07 62 8d 26 b7 86 63 36 db 3a 83 b3 52 7a 4a b2 f8 eb e0 14 ae 0a 1c 28 9f 17 1c f8 8f 96 03 63 df e2 d4 f5 ce 8c ee db f8 68 3a 30 0d 6d 64 e3 e0 e5 54 ff e6 29 7e c7 83 be 41 fc d2 0e 82 fb 99 83 eb bf b1 34 a6 cb d2 a0 fc 78 a0 35 33 e2 aa c7 4b 77 34 ff 03 c9 bf 1d f2 ef c4 fc db 49 fe e5 24 ff 6d be 95 6f e5 17 53 e1 af f8 85 df 1c 00 df ca f7 2e 3f 15 f2 1b 26 f9 6d 62 7e eb 90 df 9a e4 d7 f1 50 86 f3 16 a0 bb 8c 4b 9e 0a 43 fc ca 22 cd 84 49 1a 96 13 1a bc fa 58 b9 e7 02 38 a3 ba b9 cb 08 cc 52 2a c3 c5 c8 d0 dd 60 b6 90 27 be 4b c3 56 9d a8 6e bb c3 e8 67 a5 f8 1e 12 f9 79 b9 8f 48 0b 50 b6 71 32 0a cd 59 d3 Data Ascii: [I!hNlJak8q&6^Mqx}9\|B"b&c6:RzJ(ch:0mdT)~A4x53Kw4I$moS.?&mb~PKC"IX8R*`'KVngyHPq2Y
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 61 f5 0d 77 f2 47 af b9 3e d7 c5 93 0e 6a 6c da ca 5e 8e a3 0c 4f 6c 9a 6a 71 34 f7 06 94 46 da f1 d4 5c 9d 15 b5 b7 b6 45 71 36 f9 3e 8d 97 98 2a ca f1 ed 95 b1 bd 3a a5 fa e9 c6 74 2b a1 2e d7 04 92 5f cf 29 5c 95 dd 19 99 59 d7 aa 3d 77 5c dd 59 fa 6b bb 9a d3 bc 45 e7 8b ef bd 8e 7d 8e 9f 63 e0 0f a9 3a 20 df b0 9a 7c b5 70 cc c1 83 7e cc f0 55 08 f3 c8 a2 8f 45 a9 36 ec 33 ef 42 ef 29 23 6e 38 de f3 87 c8 e4 69 fa fa c9 10 ad 08 1a 96 13 b7 8a e9 13 80 2e ac bc 50 e6 75 40 fd 5f 13 7e 41 c8 3f 19 f3 4f 26 f9 2f f3 ad 7c 2b df 22 00 be 95 97 f2 cb 07 7f bb c8 ef 1a f2 bb 11 7f ce 12 4a bd c7 d1 ac d5 a7 2a 4b f1 98 2b 9e 0a e5 ca 44 5f b2 fb 90 09 2f 89 a1 0e 6b 73 7b d8 ef fb ca 7a 45 88 1c 9b 9e 39 17 83 d0 11 09 1c ea e4 86 e7 54 eb 7b 12 9a ea d3 Data Ascii: awG>jl^Oljq4F\Eq6>:t+._)\Y=w\YkE}c: \|p~UE63B)#n8i.Pu@_~A?O&/\|+"JK+D_/ks{zE9T{
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: e0 a9 83 8e d2 48 2b 6b 84 4b 22 c0 f9 cd b1 9f 97 12 eb 5d a4 92 4c 49 a2 c1 2f 6f cb 86 61 c3 25 5a be ae 95 48 cd 58 c6 0c 47 db 8c d4 2a f8 47 ff 49 60 00 d8 09 30 9d e3 8b 64 9c 43 ba 56 b6 9b 58 b4 d5 ba 4d 3b 90 59 79 c5 a7 be 1e 35 2e 74 35 e8 0e 89 97 bc 15 b2 c7 11 99 55 d5 85 1d 44 bf fc e1 97 6a 1d 45 72 68 ba 14 9f 6d 95 f6 0d c2 c3 de 76 e8 87 cc 98 15 ff 61 5e d8 3a 7a 3b 04 dc c7 48 b5 31 1b a8 c8 a0 d7 2d 19 35 f7 06 18 5a 1a 15 b1 77 a4 af 15 7f 93 7b 42 4f b3 f9 e9 90 73 82 33 4e 24 98 0f ba 70 29 b3 63 3a cd 75 96 31 d4 db b7 d1 c0 6c 21 01 22 86 70 6e 04 c7 4e c2 36 cf 84 bb e5 d9 b9 50 64 8d e5 a0 28 09 f6 a8 15 a1 3b 38 e3 ed 1c da 61 20 38 30 0d 67 2e 91 78 8e 7b 3b 5b 5d 90 67 6e 19 7a d7 31 96 f8 d2 19 fd b8 31 38 5f 65 9b 15 6d Data Ascii: H+kK"]LI/oa%ZHXG*GI`0dCVXM;Yy5.t5UDjErhmva^:z;H1-5Zw{BOs3N$p)c:u1l!"pnN6Pd(;8a 80g.x{;[]gnz118_em
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: ff c4 18 96 31 28 cf 17 1c e3 8f 9d 96 87 27 4a f9 62 ca 39 2b ad 2c fa 7d 3f 26 d3 f9 be 7e 50 de 61 4e 89 f6 35 49 54 11 78 43 41 32 4e 21 73 cd 61 d4 da c3 38 b3 74 35 fe 3d 91 b1 7b eb 55 e7 01 08 07 4e 7e b5 58 64 fd e5 87 78 e6 53 d0 e9 9f 67 ef a2 07 5c e6 57 6d 0f 3d 9d 0c ca b0 f0 bd 97 30 7e c0 7f 93 43 b4 bb 7e 7e 33 90 36 3e 57 12 57 ea 80 fe 1b 28 dd 71 99 9c 3d e6 31 97 16 36 80 95 67 83 d7 fd 22 c2 86 fe e4 ff 79 ca 16 3f 78 a3 d8 ee 93 eb 16 4e 16 ba d1 84 5d c4 ca c8 19 0d 7b a3 e0 af 90 f0 07 26 f9 07 93 fc f7 49 fe 26 c8 6f 99 6f e5 87 be 7c 73 00 fc 90 14 cd af 92 e4 cf 88 f9 8f 30 ff 32 e1 8f 25 fc ec 2d 64 cf 0c e5 7d 72 be b2 c2 f4 71 56 78 b9 c9 58 e7 e2 75 3f 6b 3f 46 af 92 4e f3 d0 81 a1 d1 7a cf e9 43 7b 95 31 4f 80 b3 1f 36 44 Data Ascii: 1('Jb9+,}?&~PaN5ITxCA2N!sa8t5={UN~XdxSg\Wm=0~C~~36>WW(q=16g"y?xN]{&I&oo\|s02%-d}rqVxXu?k?FNzC{1O6D
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 76 5e e9 6b e9 5b d6 1e 72 65 ae 56 ae 15 f4 be 82 e9 fa bc 16 e6 a1 c7 31 6d c7 5e a8 7d 0c 61 96 82 b5 85 f9 54 37 b7 a9 5d 7f 3a 2b b9 d7 46 b7 14 f5 3a 8e fd 7b ae b9 cf 13 37 2b 93 ff 86 d8 df ec b1 bb 8d fb dc 6b 43 12 43 7b b6 b1 4e 34 ab d5 99 1a ca 99 97 9d f8 0c b2 f0 cc 50 75 5a 4d e5 b3 e3 22 4f 58 83 50 d3 1f 76 a8 39 6b c5 c2 03 d7 ae 90 4d e0 a9 2e b0 b0 6b d5 53 78 25 ab da 6a 97 e7 99 bf ce bc ef f7 69 f8 6b 24 ee 38 50 f3 5d f8 0d 83 1f f2 3c 12 f2 9e 9b 9e af 1a 82 e7 50 9a 0d 10 b3 c7 66 fa be 94 d6 4f 09 66 ee be e2 05 97 dd bd e0 d3 58 19 e2 5e d7 4d b8 72 b2 7d b4 a2 75 34 a0 26 37 67 86 cf 81 79 1d a4 b9 7e 35 bb 37 ac e8 97 2b bb 1f e2 6a fa 1d 06 d3 2e 3c 98 2d 6b ce ed b3 da df 99 7e c1 05 63 cf e6 4c fa c6 e0 3a d2 f1 5a 7a 4c Data Ascii: v^k[reV1m^}aT7]:+F:{7+kCC{N4PuZM"OXPv9kM.kSx%jik$8P]<PfOfX^Mr}u4&7gy~57+j.<-k~cL:ZzL
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: e2 79 a3 8c f3 9d f0 32 30 d5 7e b9 ad 03 4b 87 e7 99 3d 2f 03 86 a9 ff 39 66 6e dc c4 ea 8e 3b 09 e9 f0 06 0e 5a 27 86 b7 03 f4 99 e1 65 d9 c2 fb 04 12 5a 86 c0 c8 d7 ae fa 36 ff 45 db 3b 66 a1 e9 81 b8 24 03 0f dd cc 3d 5f 32 97 de a2 44 18 ba 35 e9 a8 c7 4b 9c fd 5b 87 f8 1e aa 96 21 06 88 cc e8 03 f3 94 96 5c 6e e3 ff 0e 65 df 22 ca b1 33 8f 45 06 1e 47 3d 1b 1a 40 35 80 3e d5 e8 0a 1f db b5 c0 19 b1 68 42 51 17 5f 5b 69 d1 c2 f1 dd b7 64 eb 6e de f5 d1 5f 89 e4 cf 48 f2 9f f1 93 d1 00 3f 9e 6f e5 07 ae 7c 73 00 fc 32 5c 4c 7e 5b e3 3f 4a f2 0b 93 fc a1 89 3f 2d f0 60 ec 84 c7 ea 0e 9c e1 3f e8 19 2a 8e 2b 99 cf 6b 0e 1b 47 48 e8 5e 15 92 54 56 57 7b ef ed dc 62 d5 3f 9f 4e 45 1e 6a b2 e1 96 a9 2e 63 e8 bc 6c a8 de 9f 3c e0 30 75 e2 16 f0 89 f1 ba e7 Data Ascii: y20~K=/9fn;Z'eZ6E;f$=_2D5K[!\ne"3EG=@5>hBQ_[idn_H?o\|s2\L~[?J?-`?*+kGH^TVW{b?NEj.cl<0u
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: e3 f5 fc 7c db cf e5 a7 9f 9d 70 a9 db 3e ec 54 22 b7 bc 04 f7 4d a7 f7 6c f5 35 6e 26 b0 07 c2 67 1b a4 92 bc 9c fd 63 aa aa d2 7b 69 5d 8a 0d 64 15 57 f2 c0 7c ad 7c 9e 14 8b c9 9a 1c 08 af 67 49 ef 97 df d5 5e 4e 3c 9b 5f 85 71 9b 26 d6 24 39 c2 13 4f 74 37 85 0f 7e a9 9b 9e 99 f9 7d 4f 36 f7 3e 5e 72 49 5a 97 4a 78 a6 91 4e 68 94 82 ec bb 09 c5 18 1d dd b0 27 12 c0 91 f5 7f 14 8a ef b9 af b4 e7 23 24 3e 71 5b 63 16 d8 d0 84 c7 93 ce 2e ca ce 99 8d e1 4c 6e 37 6d da b9 48 3a 21 c9 2b 2f 99 c2 2d 7d d3 95 67 f2 92 df e2 1d bf 29 7e 46 12 d9 3d 33 ae 07 e9 3c 00 58 79 f0 ba fe 26 9d c1 89 ef 5e 14 37 0d 35 6d 5e 78 16 1a b3 88 ab 05 50 c9 39 e2 f7 4e 6a d9 be 0d 8f 55 47 9c b6 36 56 dc cb 27 7c 7d 29 ca fb 99 ce e1 8d f7 b9 fd 3a 8d e4 6d 4f f7 d0 8f d3 Data Ascii: \|p>T"Ml5n&gc{i]dW\|\|gI^N<_q&$9Ot7~}O6>^rIZJxNh'#$>q[c.Ln7mH:!+/-}g)~F=3<Xy&^75m^xP9NjUG6V'\|}):mO
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: e0 42 f8 41 dd cf 3b b2 bd 82 cd 3b b6 e3 b3 a4 79 b6 23 a0 50 4b 6b 84 c8 f7 3b 5a 53 0f 27 c2 d9 ba f3 7e a7 6a fd dc 39 3a 8e 04 b1 84 63 9f 88 61 ab 86 0d bf eb ff 79 31 7f 76 92 7f 3f df ca 2f 13 e5 5b 0e 80 5f 2a c5 5f 9d f8 b7 40 7e 21 e6 f7 fc 20 4f ce 0c 31 7e 9a 3d 9d e3 86 1f 42 e1 0c d3 31 26 ba de f5 69 a2 e1 09 68 6d 51 aa 0c d1 57 79 4f bd 6c 64 60 bc 6e 01 36 97 42 90 6a af 2d 13 56 26 e7 a9 db 79 c6 de 9a ce ac 24 ea 62 c8 c4 2f ff a6 0e 2a 1b 79 73 d8 86 c3 96 fb 55 5a 58 39 ca b7 5c 2a 67 cf b5 ee db 2b f2 63 32 c8 fb 31 76 1e 09 86 88 a3 c4 ec 8c ff 9f 97 4e 6e 94 84 f9 7a a4 36 c3 99 1b 4d c0 20 65 b1 b4 40 e2 51 47 e1 0a 44 26 71 16 98 02 7d 86 e8 eb 91 89 1c cf 84 d5 6d b2 70 38 61 5c 49 86 f4 f9 d2 35 0d cf 89 7f cb 50 9a 7a 23 b5 Data Ascii: BA;;y#PKk;ZS'~j9:cay1v?/[__@~! O1~=B1&ihmQWyOld`n6Bj-V&y$b/ysUZX9\*g+c21vNnz6M e@QGD&q}mp8a\I5Pz#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50247	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	578	OUT	GET /media/asset-icons/asset-best.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:06 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: image/svg+xml Content-Length: 931 Connection: close Last-Modified: Mon, 22 Jun 2020 22:23:09 GMT ETag: "5d3aed92faa60b62d172b36205ee2958" x-amz-version-id: 1XbRlhdAbgll4yZuYgsnRQpVcJKdI8d2 X-Cache: Hit from cloudfront Via: 1.1 b3fa6483b226ef7cc87d8bab653f621c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: FB0136tyNAe-5_iAf9_J4UOLBXPOI2RFO4JFVkBIjcgMnsl_2gSXEg== Age: 5342 CF-Cache-Status: HIT Expires: Fri, 26 Apr 2024 18:38:06 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8c96f3a31e9-MIA
2024-04-26 18:33:06 UTC	622	IN	Data Raw: 3c 21 2d 2d 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 49 63 6f 4d 6f 6f 6e 2e 69 6f 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 3c 74 69 74 6c 65 3e 61 73 73 65 74 2d 62 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 65 38 33 33 35 35 22 20 64 3d 22 4d 31 36 20 33 32 63 2d 38 2e 38 33 37 20 30 2d 31 36 2d 37 2e 31 36 33 2d 31 36 2d 31 36 73 37 2e 31 36 33 2d 31 36 20 31 36 2d 31 36 20 31 36 20 37 2e 31 36 33 20 31 36 20 31 36 2d 37 2e 31 36 33 20 31 36 2d 31 36 20 31 Data Ascii: ... Generated by IcoMoon.io --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"><title>asset-best</title><path fill="#e83355" d="M16 32c-8.837 0-16-7.163-16-16s7.163-16 16-16 16 7.163 16 16-7.163 16-16 1
2024-04-26 18:33:06 UTC	309	IN	Data Raw: 20 30 20 32 2e 31 34 36 2d 31 2e 35 35 31 20 33 2e 34 38 33 2d 34 2e 30 35 37 20 33 2e 34 38 33 6c 2d 35 2e 37 32 2d 30 2e 30 31 34 7a 4d 31 33 2e 31 35 37 20 31 36 2e 35 31 38 6c 30 2e 33 30 35 2d 31 2e 36 37 32 68 31 2e 35 32 33 63 34 2e 30 38 35 20 30 20 35 2e 31 36 35 20 30 2e 32 35 31 20 36 2e 30 32 34 20 30 2e 38 33 36 2d 30 2e 36 35 31 20 30 2e 36 34 31 2d 32 2e 30 36 33 20 30 2e 38 33 36 2d 36 2e 30 32 34 20 30 2e 38 33 36 68 2d 31 2e 38 32 38 7a 4d 31 33 2e 37 39 34 20 31 32 2e 38 39 35 6c 30 2e 36 36 35 2d 33 2e 37 36 32 68 33 2e 34 32 31 63 32 2e 35 33 34 20 30 20 34 2e 30 35 37 20 31 2e 32 39 36 20 34 2e 30 35 37 20 33 2e 34 38 33 20 30 20 30 2e 34 34 36 2d 30 2e 30 36 39 20 30 2e 38 36 34 2d 30 2e 32 32 31 20 31 2e 32 31 32 2d 31 2e 32 38 38 Data Ascii: 0 2.146-1.551 3.483-4.057 3.483l-5.72-0.014zM13.157 16.518l0.305-1.672h1.523c4.085 0 5.165 0.251 6.024 0.836-0.651 0.641-2.063 0.836-6.024 0.836h-1.828zM13.794 12.895l0.665-3.762h3.421c2.534 0 4.057 1.296 4.057 3.483 0 0.446-0.069 0.864-0.221 1.212-1.288

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50249	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	847	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/Polkadot_2x_Long.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:06 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: image/svg+xml Content-Length: 1234 Connection: close Last-Modified: Tue, 11 Apr 2023 16:38:27 GMT ETag: "7ecb0fdaab89ac67988ac93a7d836b4b" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: JB0xnZ6gRGqiZuBC8Pa3itNd4REL6Vth X-Cache: Hit from cloudfront Via: 1.1 177fd0f8c3e2c78883d72714aa07183a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: MAl1SCB3CMt9DCqx_LE84-cYg6T5ndRMFFNvq1-fAtXdv7ycHprpPA== Age: 19958 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:06 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8c9981b8d9a-MIA
2024-04-26 18:33:06 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 38 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 36 30 30 37 41 22 20 64 3d 22 4d 31 38 20 31 30 2e 36 32 63 32 2e 35 33 20 30 20 34 2e 35 38 2d 31 2e 32 20 34 2e 35 38 2d 32 2e 36 37 53 32 30 2e 35 33 20 35 2e 33 20 31 38 20 35 2e 33 63 2d 32 2e 35 33 20 30 2d 34 2e 35 38 20 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" fill="none"> <circle cx="18" cy="18" r="18" fill="#fff"/> <path fill="#E6007A" d="M18 10.62c2.53 0 4.58-1.2 4.58-2.67S20.53 5.3 18 5.3c-2.53 0-4.58 1
2024-04-26 18:33:07 UTC	654	IN	Data Raw: 33 2e 34 35 2d 34 2e 36 20 32 2e 36 33 2d 31 2e 32 35 20 32 2e 32 2d 31 2e 32 35 20 34 2e 35 36 2e 30 33 20 35 2e 33 20 31 2e 32 37 2e 37 34 20 33 2e 33 33 2d 2e 34 34 20 34 2e 36 2d 32 2e 36 33 5a 6d 2d 31 37 2e 34 20 32 2e 36 33 63 31 2e 32 38 2d 2e 37 34 20 31 2e 32 38 2d 33 2e 31 2e 30 32 2d 35 2e 33 2d 31 2e 32 36 2d 32 2e 31 38 2d 33 2e 33 32 2d 33 2e 33 36 2d 34 2e 36 2d 32 2e 36 33 2d 31 2e 32 37 2e 37 34 2d 31 2e 32 38 20 33 2e 31 2d 2e 30 31 20 35 2e 33 20 31 2e 32 36 20 32 2e 31 39 20 33 2e 33 32 20 33 2e 33 37 20 34 2e 36 20 32 2e 36 33 5a 6d 31 37 2e 33 37 2d 31 30 2e 30 33 63 31 2e 32 38 2d 2e 37 33 20 31 2e 32 39 2d 33 2e 31 2e 30 32 2d 35 2e 33 2d 31 2e 32 36 2d 32 2e 31 38 2d 33 2e 33 32 2d 33 2e 33 36 2d 34 2e 36 2d 32 2e 36 33 2d 31 2e Data Ascii: 3.45-4.6 2.63-1.25 2.2-1.25 4.56.03 5.3 1.27.74 3.33-.44 4.6-2.63Zm-17.4 2.63c1.28-.74 1.28-3.1.02-5.3-1.26-2.18-3.32-3.36-4.6-2.63-1.27.74-1.28 3.1-.01 5.3 1.26 2.19 3.32 3.37 4.6 2.63Zm17.37-10.03c1.28-.73 1.29-3.1.02-5.3-1.26-2.18-3.32-3.36-4.6-2.63-1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50248	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	846	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/Cardano_2x_Long.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:06 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: image/svg+xml Content-Length: 4338 Connection: close Last-Modified: Tue, 11 Apr 2023 16:38:27 GMT ETag: "ac1eb184a27e659eb4c67d563addf430" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: IeByKFufNd_yavrGVyYVcZ1mqkiiRfii X-Cache: Hit from cloudfront Via: 1.1 b03cdde00266d1a718dac82499df6b8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: saazYBiZ3kjKRorIv5fyPRInC7HsPZ_f6bWviZVSFcMH6mgOq-Nf4A== Age: 19958 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:06 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8c99afbb3d1-MIA
2024-04-26 18:33:06 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 33 36 43 38 2e 30 36 35 20 33 36 20 30 20 32 37 2e 39 33 31 20 30 20 31 37 2e 39 39 38 20 30 20 38 2e 30 36 34 20 38 2e 30 36 20 30 20 31 38 20 30 73 31 38 20 38 2e 30 37 20 31 38 20 31 38 2e 30 30 32 43 33 36 20 32 37 2e 39 33 36 20 32 37 2e 39 33 35 20 33 36 20 31 38 20 33 36 5a 22 20 66 69 6c 6c 3d 22 23 31 42 35 34 37 37 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M18 36C8.065 36 0 27.931 0 17.998 0 8.064 8.06 0 18 0s18 8.07 18 18.002C36 27.936 27.935 36 18 36Z" fill="#1B5477"/><path fill-rule=
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 33 2e 37 33 20 30 20 30 20 30 20 2e 32 31 31 20 31 2e 30 31 35 5a 6d 2d 39 2e 37 30 38 20 35 2e 38 38 33 61 2e 37 33 34 2e 37 33 34 20 30 20 30 20 31 2d 2e 36 39 34 2d 2e 37 37 34 2e 37 33 36 2e 37 33 36 20 30 20 30 20 31 20 2e 37 37 38 2d 2e 36 39 63 2e 34 30 36 2e 30 32 33 2e 37 31 37 2e 33 37 2e 36 39 34 2e 37 37 33 61 2e 37 33 36 2e 37 33 36 20 30 20 30 20 31 2d 2e 37 37 38 2e 36 39 5a 4d 37 2e 34 38 20 32 33 2e 33 32 36 61 2e 37 33 2e 37 33 20 30 20 30 20 30 2d 2e 33 32 37 2e 39 38 34 2e 37 33 39 2e 37 33 39 20 30 20 30 20 30 20 2e 39 39 2e 33 32 34 2e 37 33 2e 37 33 20 30 20 30 20 30 20 2e 33 32 37 2d 2e 39 38 34 2e 37 34 2e 37 34 20 30 20 30 20 30 2d 2e 39 39 2d 2e 33 32 34 5a 6d 2d 2e 33 31 2d 31 31 2e 32 33 31 61 2e 37 34 2e 37 34 20 30 20 30 20 Data Ascii: 3.73 0 0 0 .211 1.015Zm-9.708 5.883a.734.734 0 0 1-.694-.774.736.736 0 0 1 .778-.69c.406.023.717.37.694.773a.736.736 0 0 1-.778.69ZM7.48 23.326a.73.73 0 0 0-.327.984.739.739 0 0 0 .99.324.73.73 0 0 0 .327-.984.74.74 0 0 0-.99-.324Zm-.31-11.231a.74.74 0 0
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 30 20 30 2d 2e 32 35 36 2e 37 37 33 5a 6d 2d 31 32 2e 35 32 36 2e 32 35 61 2e 35 37 34 2e 35 37 34 20 30 20 30 20 31 2d 2e 31 36 36 2d 2e 37 39 37 2e 35 38 31 2e 35 38 31 20 30 20 30 20 31 20 2e 38 30 32 2d 2e 31 36 36 2e 35 37 33 2e 35 37 33 20 30 20 30 20 31 20 2e 31 36 36 2e 37 39 37 2e 35 38 31 2e 35 38 31 20 30 20 30 20 31 2d 2e 38 30 32 2e 31 36 36 5a 4d 35 2e 31 31 35 20 31 37 2e 36 37 61 2e 35 37 38 2e 35 37 38 20 30 20 30 20 30 2d 2e 36 31 32 2e 35 34 33 2e 35 37 39 2e 35 37 39 20 30 20 30 20 30 20 31 2e 31 35 36 2e 30 36 35 2e 35 37 37 2e 35 37 37 20 30 20 30 20 30 2d 2e 35 34 34 2d 2e 36 30 37 5a 6d 36 2e 30 34 34 2d 31 30 2e 39 30 34 61 2e 35 38 31 2e 35 38 31 20 30 20 30 20 31 20 2e 37 37 38 2e 32 35 35 2e 35 37 34 2e 35 37 34 20 30 20 30 20 Data Ascii: 0 0-.256.773Zm-12.526.25a.574.574 0 0 1-.166-.797.581.581 0 0 1 .802-.166.573.573 0 0 1 .166.797.581.581 0 0 1-.802.166ZM5.115 17.67a.578.578 0 0 0-.612.543.579.579 0 0 0 1.156.065.577.577 0 0 0-.544-.607Zm6.044-10.904a.581.581 0 0 1 .778.255.574.574 0 0
2024-04-26 18:33:06 UTC	1020	IN	Data Raw: 36 20 31 2e 37 38 36 20 30 20 30 20 30 2d 31 2e 36 30 31 2d 2e 39 38 63 2d 2e 32 37 38 20 30 2d 2e 35 35 36 2e 30 36 36 2d 2e 38 30 35 2e 31 39 61 31 2e 37 37 35 20 31 2e 37 37 35 20 30 20 30 20 30 2d 2e 38 39 35 20 31 2e 30 33 34 63 2d 2e 31 35 2e 34 35 31 2d 2e 31 31 35 2e 39 33 34 2e 31 30 31 20 31 2e 33 35 39 2e 33 30 36 2e 36 30 34 2e 39 32 2e 39 38 20 31 2e 36 2e 39 38 5a 6d 2d 32 2e 37 32 36 2d 2e 37 39 36 61 31 2e 37 39 20 31 2e 37 39 20 30 20 30 20 31 2d 31 2e 35 2e 38 30 34 20 31 2e 37 39 32 20 31 2e 37 39 32 20 30 20 30 20 31 2d 31 2e 37 35 32 2d 31 2e 34 31 38 20 31 2e 37 35 38 20 31 2e 37 35 38 20 30 20 30 20 31 20 2e 32 35 35 2d 31 2e 33 33 39 20 31 2e 37 39 20 31 2e 37 39 20 30 20 30 20 31 20 31 2e 35 2d 2e 38 30 35 20 31 2e 37 39 33 20 31 Data Ascii: 6 1.786 0 0 0-1.601-.98c-.278 0-.556.066-.805.19a1.775 1.775 0 0 0-.895 1.034c-.15.451-.115.934.101 1.359.306.604.92.98 1.6.98Zm-2.726-.796a1.79 1.79 0 0 1-1.5.804 1.792 1.792 0 0 1-1.752-1.418 1.758 1.758 0 0 1 .255-1.339 1.79 1.79 0 0 1 1.5-.805 1.793 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50251	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	777	OUT	GET /app/v2/js/all.min.js?id=9ac3fa897412c0e399a87da045d24cab HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:06 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: text/javascript Content-Length: 639159 Connection: close Last-Modified: Tue, 05 Mar 2024 12:12:31 GMT ETag: "9ac3fa897412c0e399a87da045d24cab" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=15552000 x-amz-version-id: aJyRV0OQnc.SRaySXjC7Kx6h0TJ98hzb X-Cache: Hit from cloudfront Via: 1.1 bb707a876db211940a3cb07991cacbdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: z_ea-zpbkUSlrxaYRkglp-zAL50IDhqwRJKb2tCuxUidJ0NUGn1XLQ== Age: 359087 CF-Cache-Status: HIT Expires: Wed, 23 Oct 2024 18:33:06 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8c99ad3744a-MIA
2024-04-26 18:33:06 UTC	572	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 6c 6c 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 37 35 31 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 76 61 72 20 72 2c 69 3d 6e 28 31 35 35 29 3b 73 65 6c 66 2c 72 3d 28 29 3d 3e 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 38 34 31 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 70 7d 29 3b 76 61 72 20 72 3d 6e 28 38 31 29 2c 69 3d 6e 2e 6e 28 72 29 2c 73 3d 6e 28 36 34 35 29 2c 61 3d 6e 2e 6e 28 73 29 2c 6f 3d 6e 28 36 36 37 29 2c 6c 3d 6e 2e 6e 28 6f 29 2c 68 3d 6e 65 77 Data Ascii: /! For license information please see all.min.js.LICENSE.txt /(()=>{var __webpack_modules__={751:(t,e,n)=>{var r,i=n(155);self,r=()=>(()=>{var t={841:(t,e,n)=>{"use strict";n.d(e,{Z:()=>p});var r=n(81),i=n.n(r),s=n(645),a=n.n(s),o=n(667),l=n.n(o),h=new
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 61 64 6a 75 73 74 2d 73 6d 61 72 74 2d 62 61 6e 6e 65 72 5f 5f 6a 4f 56 37 42 76 6c 78 44 54 37 41 54 66 62 4c 50 68 33 6a 7b 74 6f 70 3a 30 7d 2e 61 64 6a 75 73 74 2d 73 6d 61 72 74 2d 62 61 6e 6e 65 72 5f 5f 4e 56 6b 35 76 77 6a 75 5f 34 6b 64 61 4b 7a 47 57 4a 50 71 2e 61 64 6a 75 73 74 2d 73 6d 61 72 74 2d 62 61 6e 6e 65 72 5f 5f 58 6d 6f 6d 59 76 31 56 56 51 59 7a 30 6c 45 74 6e 39 51 32 7b 62 6f 74 74 6f 6d 3a 30 7d 2e 61 64 6a 75 73 74 2d 73 6d 61 72 74 2d 62 61 6e 6e 65 72 5f 5f 4e 56 6b 35 76 77 6a 75 5f 34 6b 64 61 4b 7a 47 57 4a 50 71 20 2e 61 64 6a 75 73 74 2d 73 6d 61 72 74 2d 62 61 6e 6e 65 72 5f 5f 65 58 4b 7a 57 6e 52 44 6e 34 52 57 55 69 53 53 65 56 59 4b 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 34 32 38 Data Ascii: adjust-smart-banner__jOV7BvlxDT7ATfbLPh3j{top:0}.adjust-smart-banner__NVk5vwju_4kdaKzGWJPq.adjust-smart-banner__XmomYv1VVQYz0lEtn9Q2{bottom:0}.adjust-smart-banner__NVk5vwju_4kdaKzGWJPq .adjust-smart-banner__eXKzWnRDn4RWUiSSeVYK{margin:0 auto;max-width:428
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 62 6f 6c 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 33 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 4d 74 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 30 65 32 65 63 7d 2e 61 64 6a 75 73 74 2d 73 6d 61 72 74 2d 62 61 6e 6e 65 72 5f 5f 4e 56 6b 35 76 77 6a 75 5f 34 6b 64 61 4b 7a 47 57 4a 50 71 20 2e 61 64 6a 75 73 74 2d 73 6d 61 72 74 2d 62 61 6e 6e 65 72 5f 5f 65 58 4b 7a 57 6e 52 44 6e 34 52 57 55 69 53 53 65 56 59 4b 20 2e 61 64 6a 75 73 74 2d 73 6d 61 72 74 2d 62 61 6e 6e 65 72 5f 5f 72 33 4a 6e 4e 5f 52 4e 68 70 7a 41 72 72 6d 4b 51 38 6a 49 20 2e 61 64 6a 75 73 74 2d 73 6d 61 72 74 2d 62 61 6e 6e 65 72 5f 5f 68 71 76 48 38 Data Ascii: bold;font-size:23px;font-family:ArialMt,Arial,sans-serif;line-height:32px;background-color:#e0e2ec}.adjust-smart-banner__NVk5vwju_4kdaKzGWJPq .adjust-smart-banner__eXKzWnRDn4RWUiSSeVYK .adjust-smart-banner__r3JnN_RNhpzArrmKQ8jI .adjust-smart-banner__hqvH8
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 5f 5f 4e 56 6b 35 76 77 6a 75 5f 34 6b 64 61 4b 7a 47 57 4a 50 71 20 2e 61 64 6a 75 73 74 2d 73 6d 61 72 74 2d 62 61 6e 6e 65 72 5f 5f 65 58 4b 7a 57 6e 52 44 6e 34 52 57 55 69 53 53 65 56 59 4b 20 2e 61 64 6a 75 73 74 2d 73 6d 61 72 74 2d 62 61 6e 6e 65 72 5f 5f 72 33 4a 6e 4e 5f 52 4e 68 70 7a 41 72 72 6d 4b 51 38 6a 49 20 2e 61 64 6a 75 73 74 2d 73 6d 61 72 74 2d 62 61 6e 6e 65 72 5f 5f 72 69 73 4b 56 76 56 33 54 30 76 6a 4b 69 53 54 52 39 6c 30 7b 63 6f 6c 6f 72 3a 23 36 65 37 34 39 32 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 61 66 63 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 64 64 30 65 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 65 37 34 39 32 3b Data Ascii: banner__NVk5vwju_4kdaKzGWJPq .adjust-smart-banner__eXKzWnRDn4RWUiSSeVYK .adjust-smart-banner__r3JnN_RNhpzArrmKQ8jI .adjust-smart-banner__risKVvV3T0vjKiSTR9l0{color:#6e7492;background:#f9fafc;border:1px solid #cdd0e0;border-radius:4px;border-color:#6e7492;
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 65 5b 34 5d 26 26 28 6e 2b 3d 22 40 73 75 70 70 6f 72 74 73 20 28 22 2e 63 6f 6e 63 61 74 28 65 5b 34 5d 2c 22 29 20 7b 22 29 29 2c 65 5b 32 5d 26 26 28 6e 2b 3d 22 40 6d 65 64 69 61 20 22 2e 63 6f 6e 63 61 74 28 65 5b 32 5d 2c 22 20 7b 22 29 29 2c 72 26 26 28 6e 2b 3d 22 40 6c 61 79 65 72 22 2e 63 6f 6e 63 61 74 28 65 5b 35 5d 2e 6c 65 6e 67 74 68 3e 30 3f 22 20 22 2e 63 6f 6e 63 61 74 28 65 5b 35 5d 29 3a 22 22 2c 22 20 7b 22 29 29 2c 6e 2b 3d 74 28 65 29 2c 72 26 26 28 6e 2b 3d 22 7d 22 29 2c 65 5b 32 5d 26 26 28 6e 2b 3d 22 7d 22 29 2c 65 5b 34 5d 26 26 28 6e 2b 3d 22 7d 22 29 2c 6e 7d 29 29 2e 6a 6f 69 6e 28 22 22 29 7d 2c 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 69 2c 73 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 Data Ascii: eturn e[4]&&(n+="@supports (".concat(e[4],") {")),e[2]&&(n+="@media ".concat(e[2]," {")),r&&(n+="@layer".concat(e[5].length>0?" ".concat(e[5]):""," {")),n+=t(e),r&&(n+="}"),e[2]&&(n+="}"),e[4]&&(n+="}"),n})).join("")},e.i=function(t,n,r,i,s){"string"==typ
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 29 7b 77 5b 73 5d 3d 74 2c 77 5b 73 2b 31 5d 3d 65 2c 32 3d 3d 3d 28 73 2b 3d 32 29 26 26 28 6f 3f 6f 28 53 29 3a 5f 28 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 6f 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 6c 3d 74 7d 76 61 72 20 75 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 76 6f 69 64 20 30 2c 70 3d 75 7c 7c 7b 7d 2c 66 3d 70 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 7c 7c 70 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 64 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 22 5b 6f 62 6a 65 63 74 20 70 72 6f 63 65 73 73 5d 22 3d 3d 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e Data Ascii: ){w[s]=t,w[s+1]=e,2===(s+=2)&&(o?o(S):_())};function h(t){o=t}function c(t){l=t}var u="undefined"!=typeof window?window:void 0,p=u\|\|{},f=p.MutationObserver\|\|p.WebKitMutationObserver,d="undefined"==typeof self&&void 0!==i&&"[object process]"==={}.toString.
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 73 75 62 73 74 72 69 6e 67 28 32 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 7d 76 61 72 20 41 3d 76 6f 69 64 20 30 2c 44 3d 31 2c 49 3d 32 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 59 6f 75 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 61 20 70 72 6f 6d 69 73 65 20 77 69 74 68 20 69 74 73 65 6c 66 22 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 73 20 63 61 6c 6c 62 61 63 6b 20 63 61 6e 6e 6f 74 20 72 65 74 75 72 6e 20 74 68 61 74 20 73 61 6d 65 20 70 72 6f 6d 69 73 65 2e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 2c 65 2c 6e 2c 72 29 7b 74 72 79 7b Data Ascii: ).toString(36).substring(2);function T(){}var A=void 0,D=1,I=2;function M(){return new TypeError("You cannot resolve a promise with itself")}function F(){return new TypeError("A promises callback cannot return that same promise.")}function B(t,e,n,r){try{
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 65 6e 67 74 68 3d 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 74 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 73 3d 65 28 72 29 2c 61 3d 76 6f 69 64 20 30 2c 6f 3d 76 6f 69 64 20 30 2c 6c 3d 21 30 3b 69 66 28 73 29 7b 74 72 79 7b 61 3d 72 28 69 29 7d 63 61 74 63 68 28 74 29 7b 6c 3d 21 31 2c 6f 3d 74 7d 69 66 28 6e 3d 3d 3d 61 29 72 65 74 75 72 6e 20 76 6f 69 64 20 7a 28 6e 2c 46 28 29 29 7d 65 6c 73 65 20 61 3d 69 3b 6e 2e 5f 73 74 61 74 65 21 3d 3d 41 7c 7c 28 73 26 26 6c 3f 4f 28 6e 2c 61 29 3a 21 31 3d 3d 3d 6c 3f 7a 28 6e 2c 6f 29 3a 74 3d 3d 3d 44 3f 6a 28 6e 2c 61 29 3a 74 3d 3d 3d 49 26 26 7a 28 6e 2c 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 28 74 2c 65 29 7b 74 72 79 7b 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 28 74 2c 65 29 7d 29 2c 28 66 75 6e 63 Data Ascii: ength=0}}function G(t,n,r,i){var s=e(r),a=void 0,o=void 0,l=!0;if(s){try{a=r(i)}catch(t){l=!1,o=t}if(n===a)return void z(n,F())}else a=i;n._state!==A\|\|(s&&l?O(n,a):!1===l?z(n,o):t===D?j(n,a):t===I&&z(n,a))}function q(t,e){try{e((function(e){O(t,e)}),(func
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 69 6c 6c 53 65 74 74 6c 65 41 74 28 72 28 74 29 2c 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 74 6c 65 64 41 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 70 72 6f 6d 69 73 65 3b 72 2e 5f 73 74 61 74 65 3d 3d 3d 41 26 26 28 74 68 69 73 2e 5f 72 65 6d 61 69 6e 69 6e 67 2d 2d 2c 74 3d 3d 3d 49 3f 7a 28 72 2c 6e 29 3a 74 68 69 73 2e 5f 72 65 73 75 6c 74 5b 65 5d 3d 6e 29 2c 30 3d 3d 3d 74 68 69 73 2e 5f 72 65 6d 61 69 6e 69 6e 67 26 26 6a 28 72 2c 74 68 69 73 2e 5f 72 65 73 75 6c 74 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 77 69 6c 6c 53 65 74 74 6c 65 41 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 24 28 74 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: illSettleAt(r(t),e)},t.prototype._settledAt=function(t,e,n){var r=this.promise;r._state===A&&(this._remaining--,t===I?z(r,n):this._result[e]=n),0===this._remaining&&j(r,this._result)},t.prototype._willSettleAt=function(t,e){var n=this;$(t,void 0,(function
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 20 72 74 28 29 7b 76 61 72 20 74 3d 76 6f 69 64 20 30 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 2e 67 29 74 3d 6e 2e 67 3b 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 29 74 3d 73 65 6c 66 3b 65 6c 73 65 20 74 72 79 7b 74 3d 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 74 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 70 6f 6c 79 66 69 6c 6c 20 66 61 69 6c 65 64 20 62 65 63 61 75 73 65 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 74 68 69 73 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 29 7d 76 61 72 20 65 3d 74 2e 50 72 6f 6d 69 73 65 3b 69 66 28 65 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 3b 74 72 79 Data Ascii: rt(){var t=void 0;if(void 0!==n.g)t=n.g;else if("undefined"!=typeof self)t=self;else try{t=Function("return this")()}catch(t){throw new Error("polyfill failed because global object is unavailable in this environment")}var e=t.Promise;if(e){var r=null;try

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50253	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	779	OUT	GET /app/v2/js/stock.min.js?id=09db388523f29a4e6879d1cd9650b068 HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:06 UTC	796	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: text/javascript Content-Length: 18186 Connection: close Last-Modified: Tue, 05 Mar 2024 12:12:32 GMT ETag: "09db388523f29a4e6879d1cd9650b068" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=15552000 x-amz-version-id: .49zIL3bejTL4j0CUJp3rhhQhAYEEgLj X-Cache: Hit from cloudfront Via: 1.1 eb083428a00073810c04a8eb17b6bb24.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: j_gy8ENTyBIofwfKsn1vq0zyisSXvldIZU4A-Oeq1-fOGNyy2J49TQ== Age: 359087 CF-Cache-Status: HIT Expires: Wed, 23 Oct 2024 18:33:06 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8c9aec6a576-MIA
2024-04-26 18:33:06 UTC	573	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 74 6f 63 6b 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 61 6d 6f 75 6e 74 2c 72 3d 74 2e 63 75 72 72 65 6e 63 79 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 22 45 55 52 22 3a 72 2c 61 3d 74 2e 6d 69 6e 69 6d 75 6d 50 72 65 63 69 73 69 6f 6e 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 30 3a 61 2c 6f 3d 74 2e 6d 61 78 69 6d 75 6d 50 72 65 63 69 73 69 6f 6e 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 30 3a 6f 2c 75 3d 74 2e 72 65 70 6c 61 63 65 5a 65 72 6f 57 69 74 68 2c 63 3d 76 6f 69 64 Data Ascii: /! For license information please see stock.min.js.LICENSE.txt /(()=>{"use strict";var t=function(t){var e=t.amount,r=t.currency,n=void 0===r?"EUR":r,a=t.minimumPrecision,i=void 0===a?0:a,o=t.maximumPrecision,s=void 0===o?0:o,u=t.replaceZeroWith,c=void
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 69 6f 6e 44 69 67 69 74 73 3a 73 2c 6d 69 6e 69 6d 75 6d 46 72 61 63 74 69 6f 6e 44 69 67 69 74 73 3a 69 2c 73 69 67 6e 44 69 73 70 6c 61 79 3a 22 61 75 74 6f 22 7d 29 29 2e 66 6f 72 6d 61 74 28 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 65 29 29 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 49 6e 74 6c 2e 4e 75 6d 62 65 72 46 6f 72 6d 61 74 28 22 64 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6c 61 6e 67 3f 22 64 65 22 3a 22 65 6e 22 2c 7b 6d 61 78 69 6d 75 6d 46 72 61 63 74 69 6f 6e 44 69 67 69 74 73 3a 65 2c 6d 69 6e 69 6d 75 6d 46 72 61 63 74 69 6f 6e 44 69 67 69 74 73 3a 32 7d 29 2e 66 6f 72 6d 61 74 28 74 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: ionDigits:s,minimumFractionDigits:i,signDisplay:"auto"})).format(Number.parseFloat(e))},e=function(t,e){return new Intl.NumberFormat("de"===document.documentElement.lang?"de":"en",{maximumFractionDigits:e,minimumFractionDigits:2}).format(t)},r=function(e,
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 61 74 6f 72 22 2c 63 3d 73 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 7c 7c 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 6c 3d 73 2e 74 6f 53 74 72 69 6e 67 54 61 67 7c 7c 22 40 40 74 6f 53 74 72 69 6e 67 54 61 67 22 3b 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 2c 74 5b 65 5d 7d 74 72 79 7b 64 28 7b 7d 2c 22 22 29 7d 63 61 74 63 68 28 74 29 7b 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 3d 72 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 65 2c Data Ascii: ator",c=s.asyncIterator\|\|"@@asyncIterator",l=s.toStringTag\|\|"@@toStringTag";function d(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{d({},"")}catch(t){d=function(t,e,r){return t[e]=r}}function m(t,e,
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 69 66 28 61 3d 3d 3d 70 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 69 66 28 61 3d 3d 3d 62 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 2c 64 6f 6e 65 3a 21 30 7d 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 73 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 73 29 7b 76 61 72 20 75 3d 6a 28 73 2c 6e 29 3b 69 66 28 75 29 7b 69 66 28 75 3d 3d 3d 76 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 75 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d Data Ascii: rn function(i,o){if(a===p)throw new Error("Generator is already running");if(a===b){if("throw"===i)throw o;return{value:t,done:!0}}for(n.method=i,n.arg=o;;){var s=n.delegate;if(s){var u=j(s,n);if(u){if(u===v)continue;return u}}if("next"===n.method)n.sent=
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 69 6f 6e 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 57 28 74 29 7b 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 3d 5b 7b 74 72 79 4c 6f 63 3a 22 72 6f 6f 74 22 7d 5d 2c 74 2e 66 6f 72 45 61 63 68 28 6b 2c 74 68 69 73 29 2c 74 68 69 73 2e 72 65 73 65 74 28 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 69 66 28 65 7c 7c 22 22 3d 3d 3d 65 29 7b 76 61 72 20 72 3d 65 5b 75 5d 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 65 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6e 65 78 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 21 69 73 4e 61 4e 28 65 2e 6c 65 6e 67 74 68 29 29 7b 76 61 72 20 61 3d 2d 31 2c 6f 3d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 6f 72 28 3b 2b 2b 61 3c 65 2e 6c 65 6e 67 74 68 3b 29 69 66 28 69 2e Data Ascii: ion=e}function W(t){this.tryEntries=[{tryLoc:"root"}],t.forEach(k,this),this.reset(!0)}function N(e){if(e\|\|""===e){var r=e[u];if(r)return r.call(e);if("function"==typeof e.next)return e;if(!isNaN(e.length)){var a=-1,o=function r(){for(;++a<e.length;)if(i.
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 69 6e 20 65 29 72 65 74 75 72 6e 20 74 2e 76 61 6c 75 65 3d 6e 2c 74 2e 64 6f 6e 65 3d 21 31 2c 74 7d 72 65 74 75 72 6e 20 74 2e 64 6f 6e 65 3d 21 30 2c 74 7d 7d 2c 65 2e 76 61 6c 75 65 73 3d 4e 2c 57 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 57 2c 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3d 30 2c 74 68 69 73 2e 6e 65 78 74 3d 30 2c 74 68 69 73 2e 73 65 6e 74 3d 74 68 69 73 2e 5f 73 65 6e 74 3d 74 2c 74 68 69 73 2e 64 6f 6e 65 3d 21 31 2c 74 68 69 73 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 74 68 69 73 2e 61 72 67 3d 74 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 66 6f 72 45 61 63 68 28 46 29 2c 21 65 29 66 6f Data Ascii: in e)return t.value=n,t.done=!1,t}return t.done=!0,t}},e.values=N,W.prototype={constructor:W,reset:function(e){if(this.prev=0,this.next=0,this.sent=this._sent=t,this.done=!1,this.delegate=null,this.method="next",this.arg=t,this.tryEntries.forEach(F),!e)fo
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 72 6e 20 6f 2e 74 79 70 65 3d 74 2c 6f 2e 61 72 67 3d 65 2c 61 3f 28 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 74 68 69 73 2e 6e 65 78 74 3d 61 2e 66 69 6e 61 6c 6c 79 4c 6f 63 2c 76 29 3a 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 28 6f 29 7d 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 74 2e 74 79 70 65 29 74 68 72 6f 77 20 74 2e 61 72 67 3b 72 65 74 75 72 6e 22 62 72 65 61 6b 22 3d 3d 3d 74 2e 74 79 70 65 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 74 68 69 73 2e 6e 65 78 74 3d 74 2e 61 72 67 3a 22 72 65 74 75 72 6e 22 3d 3d 3d 74 2e 74 79 70 65 3f 28 74 68 69 73 2e 72 76 61 6c 3d 74 68 69 73 2e 61 72 67 3d 74 2e 61 72 67 2c 74 68 69 73 2e 6d 65 74 68 6f Data Ascii: rn o.type=t,o.arg=e,a?(this.method="next",this.next=a.finallyLoc,v):this.complete(o)},complete:function(t,e){if("throw"===t.type)throw t.arg;return"break"===t.type\|\|"continue"===t.type?this.next=t.arg:"return"===t.type?(this.rval=this.arg=t.arg,this.metho
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 74 5b 6e 2b 2b 5d 7d 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 74 7d 2c 66 3a 61 7d 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 76 61 72 20 69 2c 73 3d 21 30 2c 75 3d 21 31 3b 72 65 74 75 72 6e 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 3d 72 2e 63 61 6c 6c 28 74 Data Ascii: {done:!1,value:t[n++]}},e:function(t){throw t},f:a}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var i,s=!0,u=!1;return{s:function(){r=r.call(t
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 69 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 7d 28 74 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 3d 6e 28 65 29 3f 65 3a 53 74 72 69 6e 67 28 65 29 7d 28 65 29 29 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 65 5d 3d 72 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 65 2c 72 2c 6e 2c 61 2c 69 2c 6f 29 7b 74 72 79 7b 76 61 72 20 73 3d 74 5b 69 5d 28 6f 29 2c 75 3d 73 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 74 29 7d 73 2e 64 6f 6e 65 3f 65 28 75 29 3a 50 72 6f 6d Data Ascii: ing:Number)(t)}(t,"string");return"symbol"===n(e)?e:String(e)}(e))in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}function l(t,e,r,n,a,i,o){try{var s=t[i](o),u=s.value}catch(t){return void r(t)}s.done?e(u):Prom
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 6f 2c 63 2c 6c 2c 64 2c 6d 2c 68 2c 66 3d 61 2c 79 3d 7b 61 73 73 65 74 4e 61 6d 65 3a 69 2e 64 61 74 61 2e 61 74 74 72 69 62 75 74 65 73 2e 61 73 73 65 74 5f 6e 61 6d 65 2c 63 75 72 72 65 6e 74 50 72 69 63 65 3a 69 2e 64 61 74 61 2e 61 74 74 72 69 62 75 74 65 73 2e 63 75 72 72 65 6e 74 5f 70 72 69 63 65 2c 63 75 72 72 65 6e 74 50 72 69 63 65 41 62 73 6f 6c 75 74 65 43 68 61 6e 67 65 3a 69 2e 64 61 74 61 2e 61 74 74 72 69 62 75 74 65 73 2e 63 75 72 72 65 6e 74 5f 70 72 69 63 65 5f 61 62 73 6f 6c 75 74 65 5f 63 68 61 6e 67 65 2c 63 75 72 72 65 6e 74 50 72 69 63 65 52 65 6c 61 74 69 76 65 43 68 61 6e 67 65 3a 69 2e 64 61 74 61 2e 61 74 74 72 69 62 75 74 65 73 2e 63 75 72 72 65 6e 74 5f 70 72 69 63 65 5f 72 65 6c 61 74 69 76 65 5f 63 68 61 6e 67 65 2c 68 69 Data Ascii: o,c,l,d,m,h,f=a,y={assetName:i.data.attributes.asset_name,currentPrice:i.data.attributes.current_price,currentPriceAbsoluteChange:i.data.attributes.current_price_absolute_change,currentPriceRelativeChange:i.data.attributes.current_price_relative_change,hi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50252	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	793	OUT	GET /app/v2/js/assetDetailBigChart.min.js?id=2961972a8645e5f62560c78ac7873322 HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:06 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: text/javascript Content-Length: 414735 Connection: close Last-Modified: Tue, 05 Mar 2024 12:12:31 GMT ETag: "2961972a8645e5f62560c78ac7873322" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=15552000 x-amz-version-id: P3wXRfdEEbQJcCKG76TfEBkK.4i0BDhD X-Cache: Hit from cloudfront Via: 1.1 221c16f6368b9673111421e368023144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: jzoCoQqwsPKcTcjeqZDIzPA1gufKRXYoR5NGdRGTlpEC4yevnIyaWQ== Age: 359000 CF-Cache-Status: HIT Expires: Wed, 23 Oct 2024 18:33:06 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8c9acf3a551-MIA
2024-04-26 18:33:06 UTC	572	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 73 73 65 74 44 65 74 61 69 6c 42 69 67 43 68 61 72 74 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 33 38 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 6f 2c 72 2c 73 3b 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 65 2c 69 2c 6f 29 7b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 7c 7c 28 74 5b 65 5d 3d 6f 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 69 29 29 Data Ascii: /! For license information please see assetDetailBigChart.min.js.LICENSE.txt /(()=>{"use strict";var t={384:function(t,e,i){var o,r,s;r="undefined"!=typeof window?window:this,s=function(t){function e(t,e,i,o){t.hasOwnProperty(e)\|\|(t[e]=o.apply(null,i))
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 72 65 61 74 65 53 56 47 52 65 63 74 2c 69 2e 75 73 65 72 41 67 65 6e 74 3d 69 2e 77 69 6e 2e 6e 61 76 69 67 61 74 6f 72 26 26 69 2e 77 69 6e 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 7c 7c 22 22 2c 69 2e 69 73 43 68 72 6f 6d 65 3d 2d 31 21 3d 3d 69 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 43 68 72 6f 6d 65 22 29 2c 69 2e 69 73 46 69 72 65 66 6f 78 3d 2d 31 21 3d 3d 69 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 46 69 72 65 66 6f 78 22 29 2c 69 2e 69 73 4d 53 3d 2f 28 65 64 67 65 7c 6d 73 69 65 7c 74 72 69 64 65 6e 74 29 2f 69 2e 74 65 73 74 28 69 2e 75 73 65 72 41 67 65 6e 74 29 26 26 21 69 2e 77 69 6e 2e 6f 70 65 72 61 2c 69 2e 69 73 53 61 66 61 72 69 3d 21 69 2e 69 73 43 68 72 6f 6d 65 26 26 2d 31 21 Data Ascii: reateSVGRect,i.userAgent=i.win.navigator&&i.win.navigator.userAgent\|\|"",i.isChrome=-1!==i.userAgent.indexOf("Chrome"),i.isFirefox=-1!==i.userAgent.indexOf("Firefox"),i.isMS=/(edge\|msie\|trident)/i.test(i.userAgent)&&!i.win.opera,i.isSafari=!i.isChrome&&-1!
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 3a 72 2c 63 6f 64 65 3a 69 2c 6d 65 73 73 61 67 65 3a 6c 2c 70 61 72 61 6d 73 3a 73 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 29 3b 62 2e 63 6f 6e 73 6f 6c 65 26 26 2d 31 3d 3d 3d 65 2e 6d 65 73 73 61 67 65 73 2e 69 6e 64 65 78 4f 66 28 6c 29 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 6c 29 7d 29 29 2c 65 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 74 2c 65 7c 7c 31 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 7d 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 Data Ascii: :r,code:i,message:l,params:s},(function(){if(o)throw Error(l);b.console&&-1===e.messages.indexOf(l)&&console.warn(l)})),e.messages.push(l)}function i(t,e){return parseInt(t,e\|\|10)}function o(t){return"string"==typeof t}function r(t){return"[object Array]"
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 69 2c 6f 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 76 61 72 20 6f 3b 69 66 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 69 66 28 69 29 7b 76 61 72 20 73 3d 7b 7d 3b 73 5b 69 5d 3d 21 30 7d 65 6c 73 65 20 73 3d 74 3b 67 28 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 66 28 74 5b 69 5d 29 66 6f 72 28 6f 3d 74 5b 69 5d 2e 6c 65 6e 67 74 68 3b 6f 2d 2d 3b 29 72 28 69 2c 74 5b 69 5d 5b 6f 5d 2e 66 6e 29 7d 29 29 7d 7d 76 61 72 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 65 3b 69 66 28 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 22 68 63 45 76 65 6e 74 73 22 29 29 7b 76 61 72 20 61 3d 6e 2e 68 63 45 76 65 6e 74 73 3b 69 3f 28 6e 3d Data Ascii: i,o,!1)}function s(t){var o;if(e.nodeName){if(i){var s={};s[i]=!0}else s=t;g(s,(function(e,i){if(t[i])for(o=t[i].length;o--;)r(i,t[i][o].fn)}))}}var n="function"==typeof e&&e.prototype\|\|e;if(Object.hasOwnProperty.call(n,"hcEvents")){var a=n.hcEvents;i?(n=
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 28 28 72 3d 7b 7d 29 5b 22 48 69 67 68 63 68 61 72 74 73 2e 22 2b 6f 5d 3d 22 75 73 65 20 41 72 72 61 79 2e 22 2b 69 2c 72 29 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 5b 69 5d 2e 61 70 70 6c 79 28 74 2c 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 7d 29 29 3b 76 61 72 20 4d 2c 53 2c 77 2c 43 3d 28 53 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 73 75 62 73 74 72 69 6e 67 28 32 2c 39 29 2b 22 2d 22 2c 77 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 68 69 67 68 63 68 61 72 74 73 2d 22 2b 28 4d 3f 22 22 3a 53 29 2b 77 2b 2b 7d 29 3b 72 65 74 75 72 6e 20 62 2e 6a 51 75 65 72 79 26 26 28 62 2e 6a 51 75 65 72 79 2e 66 6e 2e 68 69 67 68 63 68 61 72 74 73 3d Data Ascii: ((r={})["Highcharts."+o]="use Array."+i,r)),Array.prototype[i].apply(t,[].slice.call(arguments,1))}}));var M,S,w,C=(S=Math.random().toString(36).substring(2,9)+"-",w=0,function(){return"highcharts-"+(M?"":S)+w++});return b.jQuery&&(b.jQuery.fn.highcharts=
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 7c 65 5b 6e 5d 21 3d 3d 69 5b 6e 5d 29 26 26 28 6f 5b 6e 5d 3d 65 5b 6e 5d 29 7d 29 29 2c 6f 7d 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6c 28 74 29 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 29 7d 2c 63 6f 72 72 65 63 74 46 6c 6f 61 74 3a 66 2c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 2c 72 29 7b 72 65 74 75 72 6e 20 74 3d 78 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 2c 65 26 26 64 28 74 2c 65 29 2c 72 26 26 75 28 74 2c 7b 70 61 64 64 69 6e 67 3a 22 30 22 2c 62 6f 72 64 65 72 3a 22 6e 6f 6e 65 22 2c 6d 61 72 67 69 6e 3a 22 30 22 7d 29 2c 69 26 26 75 28 74 2c 69 29 2c 6f 26 26 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 74 7d 2c 63 73 73 3a 75 2c 64 Data Ascii: \|e[n]!==i[n])&&(o[n]=e[n])})),o},clearTimeout:function(t){l(t)&&clearTimeout(t)},correctFloat:f,createElement:function(t,e,i,o,r){return t=x.createElement(t),e&&d(t,e),r&&u(t,{padding:"0",border:"none",margin:"0"}),i&&u(t,i),o&&o.appendChild(t),t},css:u,d
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 62 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 72 2c 76 6f 69 64 20 30 29 29 7b 76 61 72 20 68 3d 72 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 73 29 3b 70 28 6e 2c 22 6f 70 61 63 69 74 79 22 21 3d 3d 73 29 26 26 28 68 3d 69 28 68 29 29 7d 72 65 74 75 72 6e 20 68 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 65 28 33 32 2c 21 31 2c 76 6f 69 64 20 30 2c 7b 22 48 69 67 68 63 68 61 72 74 73 2e 69 6e 41 72 72 61 79 22 3a 22 75 73 65 20 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 22 7d 29 2c 69 2e 69 6e 64 65 78 4f 66 28 74 2c 6f 29 7d 2c 69 73 41 72 72 61 79 3a 72 2c 69 73 43 6c 61 73 73 3a 61 2c 69 73 44 4f 4d 45 6c 65 6d 65 6e 74 3a 6e 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 Data Ascii: b.getComputedStyle(r,void 0)){var h=r.getPropertyValue(s);p(n,"opacity"!==s)&&(h=i(h))}return h},inArray:function(t,i,o){return e(32,!1,void 0,{"Highcharts.inArray":"use Array.indexOf"}),i.indexOf(t,o)},isArray:r,isClass:a,isDOMElement:n,isFunction:functi
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 69 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 28 28 65 7c 7c 32 29 2b 31 2d 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 22 2d 22 2c 22 22 29 2e 6c 65 6e 67 74 68 29 2e 6a 6f 69 6e 28 69 7c 7c 22 30 22 29 2b 74 7d 2c 70 69 63 6b 3a 70 2c 70 49 6e 74 3a 69 2c 72 65 6c 61 74 69 76 65 4c 65 6e 67 74 68 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 2f 25 24 2f 2e 74 65 73 74 28 74 29 3f 65 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 2f 31 30 30 2b 28 69 7c 7c 30 29 3a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 7d 2c 72 65 6d 6f 76 65 45 76 65 6e 74 3a 6d 2c 73 70 6c 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 28 74 29 3f 74 3a 5b 74 5d 7d 2c 73 74 61 62 6c 65 53 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 Data Ascii: i){return Array((e\|\|2)+1-String(t).replace("-","").length).join(i\|\|"0")+t},pick:p,pInt:i,relativeLength:function(t,e,i){return/%$/.test(t)?e*parseFloat(t)/100+(i\|\|0):parseFloat(t)},removeEvent:m,splat:function(t){return r(t)?t:[t]},stableSort:function(t,e
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 62 65 72 2c 6f 3d 65 2e 6d 65 72 67 65 2c 72 3d 65 2e 70 49 6e 74 3b 72 65 74 75 72 6e 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 69 29 7b 74 68 69 73 2e 72 67 62 61 3d 5b 4e 61 4e 2c 4e 61 4e 2c 4e 61 4e 2c 4e 61 4e 5d 2c 74 68 69 73 2e 69 6e 70 75 74 3d 69 3b 76 61 72 20 6f 3d 74 2e 43 6f 6c 6f 72 3b 72 65 74 75 72 6e 20 6f 26 26 6f 21 3d 3d 65 3f 6e 65 77 20 6f 28 69 29 3a 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 76 6f 69 64 20 74 68 69 73 2e 69 6e 69 74 28 69 29 3a 6e 65 77 20 65 28 69 29 7d 72 65 74 75 72 6e 20 65 2e 70 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3f 6e 65 77 20 65 28 74 29 3a 65 2e 4e 6f 6e 65 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 3d 66 75 6e Data Ascii: ber,o=e.merge,r=e.pInt;return e=function(){function e(i){this.rgba=[NaN,NaN,NaN,NaN],this.input=i;var o=t.Color;return o&&o!==e?new o(i):this instanceof e?void this.init(i):new e(i)}return e.parse=function(t){return t?new e(t):e.None},e.prototype.init=fun
2024-04-26 18:33:06 UTC	1369	IN	Data Raw: 2e 74 77 65 65 6e 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 72 67 62 61 2c 72 3d 74 2e 72 67 62 61 3b 72 65 74 75 72 6e 20 69 28 6f 5b 30 5d 29 26 26 69 28 72 5b 30 5d 29 3f 28 28 74 3d 31 21 3d 3d 72 5b 33 5d 7c 7c 31 21 3d 3d 6f 5b 33 5d 29 3f 22 72 67 62 61 28 22 3a 22 72 67 62 28 22 29 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 72 5b 30 5d 2b 28 6f 5b 30 5d 2d 72 5b 30 5d 29 2a 28 31 2d 65 29 29 2b 22 2c 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 72 5b 31 5d 2b 28 6f 5b 31 5d 2d 72 5b 31 5d 29 2a 28 31 2d 65 29 29 2b 22 2c 22 2b 4d 61 74 68 2e 72 6f 75 6e 64 28 72 5b 32 5d 2b 28 6f 5b 32 5d 2d 72 5b 32 5d 29 2a 28 31 2d 65 29 29 2b 28 74 3f 22 2c 22 2b 28 72 5b 33 5d 2b 28 6f 5b 33 5d 2d 72 5b 33 5d 29 2a 28 31 2d 65 29 Data Ascii: .tweenTo=function(t,e){var o=this.rgba,r=t.rgba;return i(o[0])&&i(r[0])?((t=1!==r[3]\|\|1!==o[3])?"rgba(":"rgb(")+Math.round(r[0]+(o[0]-r[0])(1-e))+","+Math.round(r[1]+(o[1]-r[1])(1-e))+","+Math.round(r[2]+(o[2]-r[2])(1-e))+(t?","+(r[3]+(o[3]-r[3])(1-e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50256	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	577	OUT	GET /media/asset-icons/asset-xrp.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:07 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:06 GMT Content-Type: image/svg+xml Content-Length: 560 Connection: close Last-Modified: Mon, 22 Jun 2020 22:23:18 GMT ETag: "9615c833564a3c0ac121899045b74baa" x-amz-version-id: ktNwnzei2mWkdX.x2B_1C5fi8Oqke_nI X-Cache: Hit from cloudfront Via: 1.1 d63b9ed947b87984f3825316a5ec0b1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: j71TAbTiCEr4_dff1pz5VFr9MSUvPHlN3is-1C7Ap9GK3446ncSaRg== Age: 4943 CF-Cache-Status: HIT Expires: Fri, 26 Apr 2024 18:38:06 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8ca6cc1b3e6-MIA
2024-04-26 18:33:07 UTC	560	IN	Data Raw: 3c 21 2d 2d 20 47 65 6e 65 72 61 74 65 64 20 62 79 20 49 63 6f 4d 6f 6f 6e 2e 69 6f 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 3e 0a 3c 74 69 74 6c 65 3e 61 73 73 65 74 2d 78 72 70 3c 2f 74 69 74 6c 65 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 32 32 32 22 20 64 3d 22 4d 31 36 20 30 63 38 2e 38 33 37 20 30 20 31 36 20 37 2e 31 36 33 20 31 36 20 31 36 73 2d 37 2e 31 36 33 20 31 36 2d 31 36 20 31 36 63 2d 38 2e 38 33 36 20 30 2d 31 36 2d 37 2e 31 36 33 2d 31 36 2d 31 36 73 37 2e 31 36 33 2d 31 36 20 Data Ascii: ... Generated by IcoMoon.io --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 32 32"><title>asset-xrp</title><path fill="#222" d="M16 0c8.837 0 16 7.163 16 16s-7.163 16-16 16c-8.836 0-16-7.163-16-16s7.163-16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50257	18.239.225.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	547	OUT	GET /bitpanda.matomo.cloud/matomo.js HTTP/1.1 Host: cdn.matomo.cloud Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:07 UTC	598	IN	HTTP/1.1 404 Not Found Server: CloudFront Content-Type: text/html Content-Length: 0 Connection: close Date: Fri, 26 Apr 2024 18:00:56 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 02 Nov 2023 02:17:11 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" x-amz-version-id: x8CUW72Cdy4wRBv1lXTNc2XlWFvGGyiM Accept-Ranges: bytes X-Cache: Error from cloudfront Via: 1.1 15167ef85a9fc2764e4d5ca36adfffde.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P8 X-Amz-Cf-Id: UiyRvMVYdGoxo73sYA7gO9uCXsY-BpbeFIIt4zhYaWvxGA5wTplrQg== Age: 1932 Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50259	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	591	OUT	GET /media/New%20navigation_Rebrand%203.0/tsla.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:07 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: image/svg+xml Content-Length: 800 Connection: close Last-Modified: Mon, 20 Dec 2021 10:00:39 GMT x-amz-version-id: h1BKCulbEqyYiNj1EK1jW8YPt9JUtU4U Cache-Control: public, max-age=36000 ETag: "18cb43d2469c45ae6bcec43993f35cbb" X-Cache: Hit from cloudfront Via: 1.1 5a334f8291e38975c678834100b052f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: FzbWO4O64fQ5MircehmWRfOaSjHiRcJm68mcCEeKUbEHYkwHAkUAzw== Age: 11114 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:07 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8cafb463360-MIA
2024-04-26 18:33:07 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 63 32 2e 38 33 37 20 30 20 35 2e 35 32 2e 36 35 36 20 37 2e 39 30 37 20 31 2e 38 32 35 43 33 31 2e 38 38 34 20 34 2e 37 35 33 20 33 36 20 31 30 2e 38 39 35 20 33 36 20 31 38 63 30 20 39 2e 39 34 32 2d 38 2e 30 35 38 20 31 38 2d 31 38 20 31 38 2d 39 2e 39 34 20 30 2d 31 38 2d 38 2e 30 35 37 2d 31 38 2d 31 38 43 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="nonzero"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C
2024-04-26 18:33:07 UTC	181	IN	Data Raw: 35 33 20 32 2e 32 37 38 2e 35 33 37 2d 2e 39 36 35 2e 36 37 34 2d 31 2e 33 39 31 2e 36 37 34 2d 31 2e 33 39 31 43 32 35 2e 36 37 20 37 2e 36 30 39 20 32 31 2e 35 36 34 20 37 2e 30 31 34 20 31 38 2e 30 32 37 20 37 63 2d 33 2e 35 33 36 2e 30 31 35 2d 37 2e 36 34 32 2e 36 30 39 2d 31 32 2e 30 32 37 20 32 2e 33 34 34 20 30 20 30 20 2e 31 39 36 2e 35 32 35 2e 36 37 34 20 31 2e 33 39 31 20 34 2e 30 31 2d 31 2e 37 34 38 20 37 2e 39 33 2d 32 2e 33 30 34 20 31 31 2e 33 35 33 2d 32 2e 32 37 38 7a 22 2f 3e 3c 2f 67 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: 53 2.278.537-.965.674-1.391.674-1.391C25.67 7.609 21.564 7.014 18.027 7c-3.536.015-7.642.609-12.027 2.344 0 0 .196.525.674 1.391 4.01-1.748 7.93-2.304 11.353-2.278z"/></g></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50260	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	591	OUT	GET /media/New%20navigation_Rebrand%203.0/pypl.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:07 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: image/svg+xml Content-Length: 1800 Connection: close Last-Modified: Mon, 20 Dec 2021 10:01:36 GMT ETag: "9ddec95c944d67575408645eb7254ed0" Cache-Control: public, max-age=36000 x-amz-version-id: SK3mx2RxNZpoewV6L0bw_KfuuSUwex3C X-Cache: Hit from cloudfront Via: 1.1 d63b9ed947b87984f3825316a5ec0b1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: YwUoFsCUjiLTZOKHFno74jBCKVUwkfJJSnc-PNN1LKVoblyDgg9J5Q== Age: 20511 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:07 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8cb0bf374a6-MIA
2024-04-26 18:33:07 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 63 32 2e 38 33 37 20 30 20 35 2e 35 32 2e 36 35 36 20 37 2e 39 30 37 20 31 2e 38 32 35 43 33 31 2e 38 38 34 20 34 2e 37 35 33 20 33 36 20 31 30 2e 38 39 35 20 33 36 20 31 38 63 30 20 39 2e 39 34 32 2d 38 2e 30 35 38 20 31 38 2d 31 38 20 31 38 2d 39 2e 39 34 20 30 2d 31 38 2d 38 2e 30 35 37 2d 31 38 2d 31 38 43 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="nonzero"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C
2024-04-26 18:33:07 UTC	1182	IN	Data Raw: 35 33 20 31 2e 36 37 37 20 36 2e 32 31 20 36 2e 32 31 20 30 20 30 20 31 2d 32 2e 30 36 32 2e 39 33 63 2d 2e 37 36 2e 31 39 38 2d 31 2e 36 32 36 2e 32 39 38 2d 32 2e 35 37 36 2e 32 39 38 68 2d 2e 36 31 33 63 2d 2e 34 33 37 20 30 2d 2e 38 36 33 2e 31 35 37 2d 31 2e 31 39 36 2e 34 34 2d 2e 33 33 34 2e 32 38 36 2d 2e 35 35 35 2e 36 38 2d 2e 36 32 34 20 31 2e 31 31 34 6c 2d 2e 30 34 37 2e 32 35 2d 2e 37 37 35 20 34 2e 39 31 31 2d 2e 30 33 35 2e 31 38 63 2d 2e 30 30 39 2e 30 35 38 2d 2e 30 32 35 2e 30 38 36 2d 2e 30 34 38 2e 31 30 35 61 2e 31 33 2e 31 33 20 30 20 30 20 31 2d 2e 30 38 2e 30 33 68 2d 33 2e 37 38 31 7a 22 20 66 69 6c 6c 3d 22 23 32 35 33 42 38 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 37 2e 33 33 20 31 32 2e 34 33 63 2d 2e 30 32 33 2e 31 35 2d Data Ascii: 53 1.677 6.21 6.21 0 0 1-2.062.93c-.76.198-1.626.298-2.576.298h-.613c-.437 0-.863.157-1.196.44-.334.286-.555.68-.624 1.114l-.047.25-.775 4.911-.035.18c-.009.058-.025.086-.048.105a.13.13 0 0 1-.08.03h-3.781z" fill="#253B80"/><path d="M27.33 12.43c-.023.15-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50261	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	591	OUT	GET /media/New%20navigation_Rebrand%203.0/aapl.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:07 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: image/svg+xml Content-Length: 1923 Connection: close Last-Modified: Mon, 20 Dec 2021 10:00:17 GMT ETag: "208b36d307f2516ba3fc7c641f504f6f" Cache-Control: public, max-age=36000 x-amz-version-id: gq_Q5jLbgi5tAOswgVcxolV4u1xyCPbb X-Cache: Hit from cloudfront Via: 1.1 ef3100c3f2434fd3889627d60775da30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Ngb6Y1vmI99ZIIbkaU7j5ZNUgy68OpVsQw2-dzGzJbXGgvkTcFOmuw== Age: 20511 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:07 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8cb4f2a5c76-MIA
2024-04-26 18:33:07 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 70 78 22 20 68 65 69 67 68 74 3d 22 33 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 2f 73 74 6f 63 6b 73 2f 61 61 70 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 61 73 73 65 74 73 2f 73 74 6f 63 6b 73 2f 61 61 70 6c 22 20 73 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36px" height="36px" viewBox="0 0 36 36" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>assets/stocks/aapl</title> <g id="assets/stocks/aapl" st
2024-04-26 18:33:07 UTC	1305	IN	Data Raw: 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 3c 67 20 69 64 3d 22 61 70 70 6c 65 2d 62 6c 61 63 6b 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 38 2e 30 30 30 30 30 30 2c 20 36 2e 30 30 30 30 30 30 29 22 20 66 69 6c 6c 3d 22 23 30 30 30 30 30 30 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 32 39 32 37 39 31 34 2c 31 32 2e 37 32 38 35 31 33 34 20 43 31 36 2e 33 32 36 34 35 39 39 2c 31 36 2e 33 35 34 32 36 37 34 20 31 39 2e 34 37 33 34 39 37 33 2c 31 37 2e 35 36 30 38 31 32 38 20 31 39 2e 35 30 38 33 36 33 36 2c 31 37 2e 35 37 36 31 37 31 31 20 43 31 39 2e 34 38 31 37 35 34 2c 31 37 2e 36 36 31 32 31 Data Ascii: path> </g> <g id="apple-black" transform="translate(8.000000, 6.000000)" fill="#000000" fill-rule="nonzero"> <path d="M16.2927914,12.7285134 C16.3264599,16.3542674 19.4734973,17.5608128 19.5083636,17.5761711 C19.481754,17.66121

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50262	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	698	OUT	GET /xxrz/250x400/793/60/f8/60f86e3cde437250c3cc15d1b6da4b14/60f86e3cde437250c3cc15d1b6da4b14.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:07 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: image/jpeg Content-Length: 49540 Connection: close Last-Modified: Fri, 26 Apr 2024 17:03:56 GMT Vary: Accept-Encoding ETag: W/"662bde7c-7a5d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1782 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7LeQ6wnjWz5Ns%2Fg%2Be08109zT9fvbH7ZP4ohJtEcBr3Cq05BTc3ZlpuYU9Qn62lsx4MDnBgpZl8FwpaurJCpfMziqdsbAWQdpu%2BtTx9%2FPZVOjopktVDmBOqdnJdGf9fDEHnkd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8cb6fabda9f-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:07 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 57 55 b9 ef b6 3e 72 d9 2c ef b8 c8 22 e4 e9 eb d7 c8 f3 30 f8 41 70 e7 73 f3 98 9b 27 ae 5d 92 55 0f 99 ed b1 87 8a b2 5b ad d9 66 6f 77 bb 32 66 58 da 51 65 79 56 de 30 2d 7d 56 de 33 5c 54 e2 d2 23 96 e9 1c 45 4b 9b 25 cd 56 db 66 2a 63 cd cf ed ef 56 59 92 ba e1 79 3b c8 fe 90 83 8b de 54 90 a7 23 8b 91 bd ff 00 1b ec 61 fe 3b 29 b4 29 bf 9e 28 c8 d8 37 d2 58 dd 65 d6 c8 d7 ea aa ec cf 16 5e e2 da bc 76 52 46 c2 1b 95 3d bb 0e d8 da d3 0b da 65 8d dc a0 98 15 44 61 db 0a 18 b7 f5 cb 74 75 be 6a 36 18 95 b4 8d ad ea 2b 1a 37 94 ee eb 7c c8 90 92 70 ce 9e bc 91 09 24 4c a2 a2 0c 24 20 9f 70 f1 f4 12 2c f7 cf e8 b1 38 f7 a8 ea ac f8 d6 61 26 3f 1e 7a 70 cd b9 11 af 3c 8a 2c 74 a4 e0 ca 28 88 89 e2 4f c8 38 71 d3 b1 6e 54 33 80 ce 90 56 ec 79 d3 c1 91 91 Data Ascii: WU>r,"0Aps']U[fow2fXQeyV0-}V3\T#EK%Vf*cVYy;T#a;))(7Xe^vRF=eDatuj6+7\|p$L$ p,8a&?zp<,t(O8qnT3Vy
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: d8 74 2e 30 b2 57 88 97 0f ac ba 73 72 25 e3 2a 98 7c 99 60 d2 d1 5e 22 56 36 54 31 99 34 36 44 d7 39 2b 9b 78 de 4c 36 fa fd be 5d 4e 26 e5 29 94 a7 76 2a c1 91 b7 1e cf 01 08 44 c7 d6 85 0e 0d b8 89 63 93 63 0a 5a 75 12 9c 36 f6 da b3 44 c8 6a 13 93 f0 de b8 8c 4d 57 25 68 c0 2d 05 80 3d c6 cc d7 9d 8a 73 c2 86 8c ed 38 f6 b5 83 30 f9 b1 e6 fa e4 7a 8b 3e bd c2 ef a0 36 43 e4 f4 42 98 5d 6e 41 c6 26 8b 36 5a 43 15 3e e9 4c e6 76 42 c9 db 46 cb 6b 0c e6 3e e7 98 30 b0 6d bc 91 e2 e0 47 1c cd 99 d7 c3 6d 71 41 8f ea c4 f2 24 77 16 bc 68 9f 15 3e 0a c6 ea b7 12 4c 89 fa 9a 3d 47 5a e5 1d aa 4e b9 4d 7f 8c 7b 4b f3 5c 8d 76 3f 52 65 c9 25 a3 f8 21 d5 a1 fd 93 91 37 4b 0f a6 75 2b 5f 31 7a 0b c9 1e ac 6b 5c e4 50 f8 63 9a df ad 15 92 36 41 2e 34 f0 b3 b5 1c Data Ascii: t.0Wsr%\|`^"V6T146D9+xL6]N&)vDccZu6DjMW%h-=s80z>6CB]nA&6ZC>LvBFk>0mGmqA$wh>L=GZNM{K\v?Re%!7Ku+_1zk\Pc6A.4
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: c5 64 4c 53 8f d9 32 f1 51 0a 8c 54 20 a3 15 10 7d c6 08 01 7a 8a b5 24 50 48 8d 3f bc 32 78 ac 4c b1 bb d5 ac 26 23 59 c1 41 0f 92 8e af 98 bc 1f 11 3c 4d 30 63 a8 91 cd b9 65 ae d9 c8 eb 98 d1 b7 62 d4 df 96 47 8f f3 af 8f b0 75 2d 65 e3 8a c4 86 c8 c5 18 ae 94 42 a2 1e d4 22 a2 15 08 28 83 ea 28 d7 a9 22 1f ea b2 82 91 ba 45 ed d2 e9 41 39 c4 b1 39 b2 11 af 91 8e 65 59 d8 da 98 f8 a7 a3 1c 8d 10 c7 5c 31 21 19 cd c8 ba e0 14 1a d0 14 74 82 5a b3 b6 bb 6a 1a 76 b6 fd 4a b6 3e b7 4d fe 9b 91 91 b2 26 5d 28 59 42 ca 16 50 8a 84 54 20 a1 8d 73 fe 03 25 63 3d 6a ab 82 9d 91 0f 5e cc dd af 8c 99 33 b8 a8 e6 76 58 8b 9f dd 89 99 cc 6b 13 0a 1e 9a 3b 11 fc d5 f5 fb ae d7 f7 0b f0 63 87 91 c2 3a d4 83 ca 39 59 98 87 1a 43 93 e3 4b 31 7c 18 33 64 48 9b da 26 50 Data Ascii: dLS2QT }z$PH?2xL&#YA<M0cebGu-eB"(("EA99eY\1!tZjvJ>M&](YBPT s%c=j^3vXk;c:9YCK1\|3dH&P
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 9c cd 2b 4d 90 79 64 fc a9 50 12 02 41 22 03 41 22 09 10 ca 9a 4f af 99 d9 72 38 95 8c 45 96 6f 95 ff 00 58 24 70 7f 37 35 62 b0 78 9f 71 df bb f0 5b 28 7b 72 8a c7 47 4c c8 54 56 46 36 f9 84 e7 ae 6f e5 aa e5 c7 57 d3 36 09 32 bb 4e 43 52 1b f8 dc 54 53 af ca 74 24 80 90 49 d2 19 10 1a 19 10 48 9a 57 5f 2a d9 46 2b 18 cc 8c 6f 15 9f d5 9f a7 69 1a 71 92 1f 96 9c d2 95 99 6b 58 01 5e 3d 4d 43 f1 89 41 20 44 ab 5c 8e c8 0b 9b d8 a7 24 b2 86 c5 37 e2 e0 f1 98 2b 65 7e 09 5c 9c 2c 32 fc 94 24 84 d0 c8 9a 44 32 21 93 e8 64 fa 69 51 93 81 5c 92 03 a3 b0 0f fb 93 fb 77 ee 0e de 35 a2 16 a9 4a c4 3f 19 0c 0d 64 a1 ea 6b 2e e5 08 cc 24 53 d8 f0 18 e5 1f 18 63 31 3c 74 7f 34 bb fb c1 7e d6 06 3c 85 50 af 2f 84 2f 65 9e 3f cc 42 68 4d 09 a1 34 d2 26 91 34 89 a4 5f Data Ascii: +MydPA"A"Or8EoX$p75bxq[({rGLTVF6oW62NCRTSt$IHW_*F+oiqkX^=MCA D\$7+e~\,2$D2!diQ\w5J?dk.$Sc1<t4~<P//e?BhM4&4_
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: d7 93 3a ed 79 26 4e eb b5 da 67 5e 4b b5 e4 bc d7 92 73 5f 73 e3 0d 1a 27 fb fd 99 33 f6 c4 bb 42 bb 46 5e 48 1b ed 76 bb 5d a7 7f 7f 25 da ed 76 bb 5e 4c 88 d5 43 17 b1 60 4a 33 34 5f ca ef d9 93 7b 33 fe 8c 9c 97 f2 87 f6 ed 76 bb 5d ae d7 6b c9 76 88 97 9f 4f 92 91 e5 b8 5f c7 e8 c9 99 3b 3a 66 4c de fd a3 74 de dd fe 9d fb 76 bf ff c4 00 3e 11 00 01 03 02 04 03 05 05 04 08 07 01 00 00 00 00 01 02 03 11 00 04 05 12 21 31 41 51 61 10 13 22 71 81 06 14 32 91 a1 42 52 d1 f0 15 20 23 33 72 b1 c1 e1 07 16 43 53 62 92 f1 b2 ff da 00 08 01 03 01 01 3f 01 29 1c 75 ac 80 ef f8 56 52 9a 4a 6a d0 0c bc b6 a4 ed 1c a8 88 a4 89 9a 41 d2 39 52 94 28 10 29 4a d2 20 54 1e 5f 9d 2b 6a 4b 82 83 a2 bb b3 41 03 ce bb bf 5a 4b 7c aa d9 11 c7 95 03 34 9a 66 d2 e1 c3 28 6c Data Ascii: :y&Ng^Ks_s'3BF^Hv]%v^LC`J34_{3v]kvO_;:fLtv>!1AQa"q2BR #3rCSb?)uVRJjA9R()J T_+jKAZK\|4f(l
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 0d e9 bd 49 e9 58 43 9d cb 8d 91 bc d6 1b 7e b0 b4 b4 bd 42 fc 22 3e 95 ed db 05 9c 7e f2 47 ef 14 1c 1f c2 a0 22 ae 32 82 22 7a cf 33 4a 31 1f 9e 54 c1 fe 94 d2 a7 48 ec 4e f3 ca 80 fd 2b 80 5d e1 6c bf ee d7 41 d4 bc 35 23 de 12 11 19 24 0d 4f 4e b4 e3 4a b7 79 6d 39 f1 b6 a2 95 0e a0 d2 15 1c 2b 34 fc 27 b3 35 37 f1 03 ca ad 12 51 95 c4 9d 04 19 ac 31 c5 38 12 55 f1 24 83 3e 71 5e de 60 0a bf b2 4e 2c c3 6b 53 ec a2 16 94 a0 a8 ad 04 a6 3f eb 57 28 52 0a 92 41 91 a1 9d 08 23 4d a9 69 d6 79 d3 4b 20 e9 48 5e 93 1b f5 a4 2a 46 d4 9a c3 fc 6f b6 26 3c 49 32 37 81 06 b1 70 95 e2 57 6a e0 2e 1c 23 fe df da 94 a1 a4 6b 49 d4 4d 0d 04 76 34 67 f3 e5 56 4e 85 b7 93 49 4e bc a4 69 3f 2a c2 94 b4 ac 34 a2 0a 57 b7 4d 45 59 21 b7 6c 72 b8 00 46 53 98 ab 60 34 d6 Data Ascii: IXC~B">~G"2"z3J1THN+]lA5#$ONJym9+4'57Q18U$>q^`N,kS?W(RA#MiyK H^Fo&<I27pWj.#kIMv4gVNINi?4WMEY!lrFS`4
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 07 55 1f d3 ad 26 de 35 5a b3 2b a0 d1 23 e0 2b 2e 5d 06 df c8 a4 83 2a d9 5d 47 3a 9f c6 81 9a 0a 81 b5 01 34 f3 db eb 4e bf bd 2e e2 0c 7d 72 a4 dc 6b 3c c5 60 ed bb 7c f0 6d bf 0a 50 02 9f 77 60 84 92 3c 3f ef 72 08 4f c4 f9 53 4d 21 94 84 20 00 90 00 d3 cb 99 f3 a2 26 88 8a cb 44 c7 76 5a 71 20 82 79 e9 1e 54 0c c7 9d 26 92 62 69 e7 88 1a f3 a7 1e d0 99 de 95 71 94 4e ff 00 42 8d c8 1b d7 65 ec c5 ae 12 c2 c8 87 6e 80 b8 74 f3 95 8f 0a 09 fe c4 40 fc f9 f7 11 3d ca 55 29 55 c4 e9 5c 58 de 82 c9 a5 82 87 7d 40 a4 aa 92 a8 a7 5c de 69 e7 b7 d6 96 e9 26 6a e5 e0 86 1d 50 dc 21 51 ea 44 0f c4 c5 61 48 e1 61 b6 4d eb e0 b6 64 19 de 78 48 a0 26 89 9a 2a 8e 54 a5 f9 7e 7f b5 29 79 44 aa 8b e4 ed ca 9d b8 00 c9 3f bd 33 74 14 41 4a a9 6b 0a 4a 55 f5 ac 52 55 Data Ascii: U&5Z+#+.]]G:4N.}rk<`\|mPw`<?rOSM! &DvZq yT&biqNBent@=U)U\X}@\i&jP!QDaHaMdxH&T~)yD?3tAJkJURU
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: a0 83 e5 40 8e 94 e2 01 1f 5e 54 e2 60 c4 d2 9b 33 06 88 8a ba 21 2c 2e 44 f2 1a 13 af c2 b0 32 af e1 18 71 5c 95 7b 23 12 49 24 93 c3 4e a4 9d 64 d6 5a 52 69 cf 7b eb a0 ae 29 2a 5b 71 a8 81 d2 af 5b dc 83 94 13 06 b1 0b 72 db dc 4f 11 cc ac a7 4e 71 a7 e3 58 b8 4a 9a 53 a9 6c 80 80 0a 86 a4 15 1e b5 7e 5e 18 a8 53 00 a9 c2 a6 e1 b4 89 2b 2a 22 10 00 92 49 3a 0a ec ff 00 68 ae 6d b1 56 b0 bb 97 6e 78 4b b6 6d 19 1d 4e 67 6c ee c2 02 b8 6a df 3b 70 20 a8 eb ac d6 13 7c 8b db 62 be 23 65 6d b8 a6 97 94 83 aa 34 9c a2 4a 7d 15 06 9c 49 1f 0a 71 b4 c8 3d 67 e5 4e 36 33 51 40 ab 1b 41 73 7f 64 ca c8 c8 bb 84 05 7a 6f 1f 18 ab 56 d2 d3 2d a1 3e e8 42 40 1d 00 11 44 c5 11 34 77 70 74 00 d3 85 49 50 5f 50 99 f3 d0 50 87 9a 39 c6 bb 19 1f f1 57 ec ac ca 4e 55 26 Data Ascii: @^T`3!,.D2q\{#I$NdZRi{)[q[rONqXJSl~^S+"I:hmVnxKmNglj;p \|b#em4J}Iq=gN63Q@AsdzoV->B@D4wptIP_PP9WNU&
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: de ec 4f f9 0f 85 be a0 34 4e 47 b3 bb 1a 1c aa 4d e1 f7 bd 83 fb bf d4 4e 0e 24 9a 67 58 e2 8c 5d e4 73 60 a0 90 a3 f1 2c 00 03 73 87 87 2c 5d 03 a1 aa 6f 5f ff 00 a4 bd 14 78 31 df d8 30 64 9a 47 96 46 f5 9d c9 66 3f 13 f5 7a 95 8a b0 e8 47 5c 2d 35 51 b4 d6 b4 72 77 4b fb 27 f6 bf 7f d6 f4 f9 ce 25 ad a9 6d 30 c7 61 fb 4c ed 7d 11 a0 bf 33 3d 8d 80 f0 27 bb 0c f2 b1 8e 9c 13 c1 a7 52 42 2a f7 12 3a 33 f8 93 f0 b0 fa e0 45 c1 1b 83 e0 46 38 52 9f d2 61 03 55 fe da f7 37 bf c7 ea 2f e6 74 f9 8e 24 96 56 08 91 ab 3b b3 6c 15 10 6a 66 3e c0 06 24 10 16 5c b2 95 de 3a 38 cf db 17 b3 54 3e c3 9a 5b 5c 03 fa b4 22 3e aa 49 fa f8 aa 17 a2 b5 9c 77 32 13 cc 0f c3 09 2c 67 5a 3a 86 04 7b 7e b4 e2 0c a2 03 a6 a7 34 d6 f3 91 eb 0a 14 6d 3e 3b 71 65 56 5f 16 55 7b Data Ascii: O4NGMN$gX]s`,s,]o_x10dGFf?zG\-5QrwK'%m0aL}3='RB*:3EF8RaU7/t$V;ljf>$\:8T>[\">Iw2,gZ:{~4m>;qeV_U{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50263	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	698	OUT	GET /xxrz/250x400/793/4a/6a/4a6a22f7a0595822396fb0b553e99be9/4a6a22f7a0595822396fb0b553e99be9.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:07 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: image/jpeg Content-Length: 61147 Connection: close Last-Modified: Fri, 26 Apr 2024 14:12:51 GMT Vary: Accept-Encoding ETag: W/"662bb663-eb32" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1782 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uYIKRtCcbZ%2FOGFUnSDQw2HJ29R9cVkMjV9r2038fE1M3fjLyJFKX059%2FdmT19LGxXLEiHLSElRnYzfCVgc2JTfFuUFz9hUMjWmvkHKho%2FDVyYbQ3Gm3%2FWsSq1%2FptCktrxPRn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8cb7dd167ba-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:07 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 78 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 05 05 01 00 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCx"
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 11 e5 47 d5 01 b8 45 2b a1 2d d4 88 6d 12 da 09 b1 d4 14 9d 62 71 29 2a 8f 38 cb c7 ce c4 f2 44 c2 68 8a db a2 39 8d b2 66 bd 89 36 e7 7f f9 bc 6a b6 ce ed 3f 5b 8f 34 dd 66 d3 0d ee 38 9f dd fe 0b f7 fc e0 2e 7a d5 3f 4d 27 05 3b 83 c4 5e e1 9c 02 f4 f9 e5 d7 d4 19 bb 34 41 a5 0c b1 03 b5 84 17 61 88 01 6a 2c 14 2b 94 71 8f 8f 1d 83 e3 98 47 58 39 43 e9 d8 f3 a9 af dd 10 e6 91 ea 73 81 1e 82 fc f1 1d 73 eb 27 9b ee 8a 1c da dc ce 72 f4 64 f3 f7 e9 3f cd 3f a4 a3 ce d7 b4 3f 14 5e 92 8e 0a 77 ff 00 cf af 5d 4e 47 7a 7c f3 71 ea 08 d9 33 52 9e 5c 22 a2 f4 22 c3 44 48 83 0b b1 41 f6 01 c7 1a b9 a1 eb 06 c7 8f 5f 4c db 46 03 95 7c 44 f5 89 91 cd 4c e0 a7 a9 62 8f 22 d9 ef d3 52 a3 c6 9f 6b fb 04 98 f1 47 e9 0f a3 66 9e 32 f7 ff 00 d1 b5 1e 3f 22 fe cb 84 79 Data Ascii: GE+-mbq)*8Dh9f6j?[4f8.z?M';^4Aaj,+qGX9Css'rd???^w]NGz\|q3R\""DHA_LF\|DLb"RkGf2?"y
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 04 e8 15 40 ad 54 36 6b cd 57 3e 9c 5e 96 d5 6b 05 e2 9a ab e6 9a aa 8a aa a2 85 54 55 55 14 2a a2 e0 aa 03 b3 35 47 48 36 be a8 71 aa a0 c2 2a 81 8e a8 ff c4 00 2f 10 00 00 05 04 01 04 02 01 04 02 03 01 01 00 00 00 01 02 03 04 05 00 06 07 11 12 08 10 13 21 14 31 22 15 16 20 41 23 32 17 18 24 26 27 ff da 00 08 01 01 00 01 05 02 36 b9 00 01 ab 75 a2 88 28 91 04 84 1d 14 6b ea b9 0d 1c 0f 42 63 96 b9 fb de a8 de eb 85 6b 46 00 0a 1d f6 1f 55 cc 2b 61 42 6a 28 6a bf 3e 41 bd d0 08 52 80 53 18 78 80 10 a3 ad 0d 1c bc 80 4d c6 93 13 8d 7f ad 01 7d eb 40 60 f4 20 5a f4 4a 54 80 62 17 95 0f 22 d7 23 00 28 73 1d 2e 46 d1 47 54 53 08 d6 e8 d4 02 1b 31 68 40 74 1f ed c4 2b 95 73 29 68 ba 11 fc 28 40 29 50 31 8a 51 54 6b 91 eb 47 1a 20 0f 20 00 a1 4f 46 00 10 a1 f4 Data Ascii: @T6kW>^kTUU5GH6q/!1" A#2$&'6u(kBckFU+aBj(j>ARSxM}@` ZJTb"#(s.FGTS1h@t+s)h(@)P1QTkG OF
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 2a 27 b3 9b 1b f5 16 85 cf 3b 90 39 9a ff 00 e9 df 2a d8 98 ff 00 1b a3 e2 59 ce 22 63 f0 31 a1 6b ee b7 fc 83 55 ba fb 0f 75 d6 24 6c 9c 85 bd 86 6d 1b 80 2f f9 c8 0b 92 3a ee c3 04 76 9e 31 c8 56 a9 5a f5 07 21 66 5c 47 9c c2 6c 15 8f c5 59 aa df 93 71 96 a2 ec e9 c5 8d 9c ad e9 25 25 db c7 4c 20 bf 4e b1 4e d1 b3 23 6d 8b 8d 75 ec a8 97 8d 3a 68 6f 6b cc 18 70 8d a5 30 d3 22 5e 96 bd d0 ef 22 0d 97 75 11 c6 38 c1 57 cd d2 fd 16 c8 b3 6c 51 af ae c3 db 74 51 ad 76 1d d1 40 42 84 bb ad 76 00 0a dd 5c 16 ea 13 8f 03 d8 9c a3 be 26 af 18 9a 8b 43 aa 0d 0d 68 c0 05 a0 f4 60 13 00 89 eb d8 80 17 41 ba 2f e4 3a 0a fb ec 03 b1 e5 45 38 56 f7 40 21 42 05 a3 fa af 62 3e c2 83 7b f7 45 29 8a 51 00 ae 41 b7 2f 1b 35 14 e7 62 8c 98 c8 b7 f9 09 cc b6 39 4c f8 0a 08 Data Ascii: ';9Y"c1kUu$lm/:v1VZ!f\GlYq%%L NN#mu:hokp0"^"u8WlQtQv@Bv\&Ch`A/:E8V@!Bb>{E)QA/5b9L
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: ae 95 55 b9 dd 21 31 33 6d c1 2b 2c fe e3 b9 3e 58 2f f8 8a 82 26 a3 35 20 91 33 02 54 40 25 28 a8 96 95 31 96 17 1a 07 4f 39 35 78 2b 15 42 ae f8 01 bb 84 05 66 cd 64 25 1a 02 5f 0d f1 91 97 73 0e fd e5 df 11 78 62 f8 c7 80 fe 3f fa fa ad d0 6e b7 ef dd 72 ae 43 b3 1b 42 02 23 40 3a 0c cf 91 a3 98 3b 64 ca 4a e0 93 b8 c6 32 cf 8b 05 03 99 c7 9d 0a 47 0a 39 74 1c ff 00 30 74 6d 7c 82 2a 5d f0 23 f6 ae 53 13 b8 15 96 2e d1 39 13 4d 43 82 fe 2a 49 57 48 91 13 aa dd 42 2c 69 32 db 8f dd 32 88 19 78 96 4c e2 e6 62 e6 53 ad f6 8a 0f 3b ea f5 46 ff 00 6d 05 00 55 f7 79 34 b2 a0 17 89 77 2a 83 af 81 8b e2 1c 3c 55 53 94 e3 b4 b4 73 2a 87 11 59 33 18 a7 20 85 28 05 a0 2a a7 39 0d e9 72 b9 3a a9 a0 ec ca 91 a1 3e 2b 53 0b 43 39 41 2d 26 55 bc 65 33 b0 a7 92 8e 34 Data Ascii: U!13m+,>X/&5 3T@%(1O95x+Bfd%_sxb?nrCB#@:;dJ2G9t0tm\|]#S.9MCIWHB,i22xLbS;FmUy4w<USsY3 (*9r:>+SC9A-&Ue34
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 09 eb cb b1 15 40 6a f8 8a 19 58 e9 39 25 d9 ae 63 1c ea c7 49 b5 45 18 44 07 83 d9 3f 9a b9 8e 26 3a eb a4 88 ab 30 4d 1e 49 c1 e8 ee 57 3d 72 1a e4 21 46 50 e7 a0 70 70 a1 70 03 44 3f 01 22 94 8b 82 d7 ca 04 e8 16 31 0a 43 3d 7c e3 1f 5a c9 5a f6 d7 97 90 79 7d 82 9e b9 1a 80 de f9 e8 79 0f 2e 61 40 3c 82 75 50 f8 b7 2b c2 8c e4 5c 62 d2 0b 29 6a 35 72 69 c4 dd 37 41 db d8 26 20 e6 64 ca 81 94 31 eb 7d f7 df 5d 80 44 a2 55 0c 06 40 e7 af 92 00 b5 b5 60 dc f7 9b 8b 0f 1a c1 59 29 0a be c1 50 01 e6 00 3e 43 05 7c 82 57 20 d7 21 1a e5 c4 40 c6 1a 5d da 6d 12 94 ba 23 66 a1 9f 31 6c b4 b3 bb c6 2e 29 39 3b c2 41 f8 28 b2 aa 8f f1 dd 6e b7 5b ed ba 1e d6 26 36 97 bd 12 80 c4 36 7c 29 90 3a 69 17 e4 00 57 c8 f7 f2 7d 03 9a 33 81 2d 02 a5 d7 ff c4 00 34 11 00 Data Ascii: @jX9%cIED?&:0MIW=r!FPpppD?"1C=\|ZZy}y.a@<uP+\b)j5ri7A& d1}]DU@`Y)P>C\|W !@]m#f1l.)9;A(n[&66\|):iW}3-4
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 56 df bf 7f e4 7e 7c 01 ff 00 2f d6 2c 76 ec 3f 01 c0 16 ff 00 53 df 7f 1f cd ef c7 d6 e3 67 ed 6d c0 1d be db f0 40 dc b6 23 25 b2 f8 8d fb 5b 6b b1 1e 7e 3d f8 ea 65 b7 74 20 f7 04 02 2f b7 95 b7 17 07 c0 f1 f9 3c 1e df 2f bf e3 f2 fe bc 5b c0 71 ee 83 f3 fe 76 3c 5b 1f bb 23 db e4 38 3b 90 3f e6 36 fb 0f e1 c7 70 a7 7b 13 b7 e1 71 ef 7f 5e 36 ee 6d f5 af db 3f 8f fc 3f eb dc 10 be 16 c5 4e de 16 fb 36 b0 e3 2e 51 fb 07 0d 85 fb 15 ef df 21 b9 25 6f 8a 0c ad 7e 93 b7 71 b5 c6 6b 25 ad 7b 6f 7f 1f 26 17 df 1b 00 bd ec 38 dc 6f 8f ff 00 f4 7f a1 fc 38 dc 1f e7 b9 fe 5c 79 70 38 ef 7f cf cf 8f 0d be 1f 77 1e 1b f8 77 f9 71 63 bf f0 fc 8e 3f 3e 5b f0 3f 3f 9e fc 6e 6d c5 fe 5f 9f e7 c7 97 c3 e6 76 e2 f6 fc ed c6 c0 31 bf d6 fb ff 00 64 f9 7f 51 c5 8a e3 b9 Data Ascii: V~\|/,v?Sgm@#%[k~=et /</[qv<[#8;?6p{q^6m??N6.Q!%o~qk%{o&8o8\yp8wwqc?>[??nm_v1dQ
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: d7 f4 ac 7e 92 47 a7 88 b4 e9 63 6a 3f ed 2e a7 43 a9 d5 7a f4 8b a9 65 5f ea ed a7 41 1d 30 87 d4 39 61 e6 93 23 23 a9 8f 47 d4 6a b5 bc e6 d2 93 49 8d e0 48 75 39 69 6b c6 97 af cf ad af ad 9d 47 5b af ad 9f a5 d1 60 35 15 95 06 9a b6 08 aa 94 b5 38 f5 2e 0d 6c 35 f0 d3 d3 d5 47 e8 f4 3a 85 3c 94 66 69 9a 3f 46 b5 aa ad 6a 8c d1 54 2d 54 02 9e 49 e5 ad 9e 0a 87 96 1a 9c 17 93 3c 1c a9 22 22 5a b9 46 a9 34 be b7 aa e9 da ab 2c e9 51 51 ea c7 4f f4 e6 6f 4c 9a 0a 15 92 b5 92 96 1a c4 95 74 fa 98 e0 44 8c cd 4d 4d 5a 23 be 54 ec b0 4b ac ac 94 54 93 e8 be a3 0a d0 c9 90 87 48 f4 9e 8f 5f 8f d6 9f d7 65 57 a9 92 2a 55 d3 e6 a9 86 38 23 95 dd f5 0a 88 9d b1 a7 87 54 9e 8f 59 9a 91 75 8a 3f 4a e9 6a e2 86 91 3d 9c de 96 6b 74 15 f5 5a 9d 1b 34 e4 41 5d 1e 99 Data Ascii: ~Gcj?.Cze_A09a##GjIHu9ikG[`58.l5G:<fi?FjT-TI<""ZF4,QQOoLtDMMZ#TKTH_eW*U8#TYu?Jj=ktZ4A]
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: a9 26 5c 73 29 59 4a db 74 04 86 46 92 0a dd 8f b2 c4 b9 54 62 ae 9b 74 f4 98 fe af fb 1f 8a a1 56 76 8b 4c f4 96 40 c4 e1 cc 35 3e 93 54 4a 00 ba e7 6c 4c 6a 06 3e d1 88 65 f7 2f c4 e2 08 69 e6 f5 96 80 b4 b2 28 60 a4 c1 29 33 8f 67 ca 2c 64 68 b1 72 1d 84 78 2d c3 bb fa b6 b0 b4 b0 46 b2 a7 a2 be 9b 34 38 a2 a3 31 fe c5 fa 46 24 dc 6f 8e 25 54 31 bd da 38 c2 f2 fb f0 1e a2 a1 c2 fa db c5 22 a0 53 8a 98 a2 6e 60 36 c1 8d db 26 b5 d5 93 60 54 15 c3 d0 56 8f eb 6b 29 7b 15 eb 40 92 b3 9e b6 18 ed 8d c1 f2 e9 b9 20 71 e9 95 33 65 1a cd e9 36 bb ce ea 7e bc 2b f5 09 7d e1 b9 5b ae 76 21 b2 f0 ee dc 54 6a 74 9e 8f 6b 55 3a 35 13 e1 55 a9 52 e9 75 f3 e9 d0 13 0c 53 98 67 ad a7 84 c1 19 44 92 27 62 f3 45 ec e4 42 48 e8 66 fd 2b a4 54 49 a6 6a f4 15 82 68 aa a3 Data Ascii: &\s)YJtFTbtVvL@5>TJlLj>e/i(`)3g,dhrx-F481F$o%T18"Sn`6&`TVk){@ q3e6~+}[v!TjtkU:5URuSgD'bEBHf+TIjh
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 32 14 16 0e db 6f e9 24 ba 2e a7 41 a8 c2 74 ad 46 9c d5 69 f5 54 f5 f0 c7 37 aa b3 72 dd a0 95 a3 12 22 3a 3b 21 65 70 ac ad 6d c5 d0 07 90 1c 9e f6 25 8f 71 f0 6f 26 27 3c 48 0d 7d c5 c9 d5 46 23 6f 47 7d 2a 27 33 b3 5e 5a e7 c9 cf 6b 75 62 ff 00 f0 9e 29 a4 57 e5 ba 60 f2 46 d7 df da e7 1f 8a b6 c2 4b 83 9d ce 36 1b 95 3c 68 f4 31 eb da 44 f5 95 34 b4 91 c5 4d 4d a8 d0 cb 31 9f 90 8b 82 c2 93 19 58 86 ba e1 8e 6b be 63 b9 e3 d2 c8 d9 9b 21 e9 2e b2 a4 dc 1d ff 00 49 54 a8 20 75 58 b1 3e ed 80 d8 59 af b8 d6 65 73 98 fe d6 6b 52 14 26 f7 55 d2 74 5d be 17 1f bf 81 2d 2d 0c 34 22 4c 6f 1c 66 72 2d f5 48 e7 c9 51 ef 14 2e bf 53 27 7e 9f 0e 3d 09 00 df fc 2e a8 77 f3 3a fe ab 71 f6 1b 8f 8d af f4 76 e3 b6 ff 00 47 61 f9 b7 d1 fb bf 3e 3c 7e 7e 1e 5c 7e 7f Data Ascii: 2o$.AtFiT7r":;!epm%qo&'<H}F#oG}*'3^Zkub)W`FK6<h1D4MM1Xkc!.IT uX>YeskR&Ut]--4"Lofr-HQ.S'~=.w:qvGa><~~\~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50266	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	698	OUT	GET /xxrz/250x400/793/b8/b9/b8b9b67aad5b4627db15b960e8b956fa/b8b9b67aad5b4627db15b960e8b956fa.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:07 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: image/jpeg Content-Length: 66851 Connection: close Last-Modified: Fri, 26 Apr 2024 17:01:21 GMT Vary: Accept-Encoding ETag: W/"662bdde1-bada" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1781 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q46N%2FVp45Cu12Vb5bNh%2FmYMQVL7q2ICIYl2GcitPopqxCcyzjELGU5HwhjWVdEabOymUYVwxp4xDvNXL1YOUMQ2KZgblYMZvyWn%2BSkybVGRJsO%2FT9fsYEQN6zAF9ulqu3%2BqK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8cb89faa527-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:07 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 46 b7 3c e9 9b ef f6 e8 1d b7 cb e3 f4 78 9d 97 9d 7a 54 75 56 df 37 8f 2f 54 e1 da b4 b6 a8 56 4f 5e 76 c9 97 49 3a 95 f3 4f dd 5f 11 5d ec 20 56 1f 25 5c bd f8 d7 8b b1 2c 80 68 64 b2 00 17 87 50 d5 b3 3b 79 35 b4 7b ab 33 9f 54 43 3a 52 6d 42 25 b1 5f ae 8c 5b e9 38 3a 6d a9 98 a1 8b ec 66 16 84 8b 1e be a4 6a fd e8 f5 bc ea d1 f2 ed 1d bd bb 33 70 6e 3c ee 1b e8 67 d7 df be 22 d5 57 f4 4e 4f 64 95 75 95 d1 1a 17 d0 0c d5 ef 55 b1 ad 5f 2f 75 0c f8 b2 a1 c1 20 cc da 28 32 f7 ac 8b 43 bf 5b 7b 1b fa dc fb d4 de df b5 ce 1a bf 73 c6 d0 b6 fd e5 9f 49 b6 12 99 dc b7 4d 2a 95 71 75 c5 53 36 07 b4 33 3c 57 a1 44 d1 97 a6 f9 bd b1 56 f8 32 f8 d6 5e 6f a0 29 b9 a1 2a bb 89 7f 57 f9 49 f5 15 60 ae 7e cb d5 2a 82 a0 9d 6b d6 cf 3e 37 98 42 94 9f 2e ca fa b0 e7 Data Ascii: F<xzTuV7/TVO^vI:O_] V%\,hdP;y5{3TC:RmB%_[8:mfj3pn<g"WNOduU_/u (2C[{sIMquS63<WDV2^o)WI`~*k>7B.
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 5c 83 78 6d fa 3f 52 bd 34 ce 7e cc e9 d4 fe b0 d9 9a eb eb 5d f2 4b 90 ea 2d d1 65 c6 39 f5 fb b5 4d 79 ed 9a 2e e8 cf ba fa 9b a5 80 a8 d6 3d 9c f6 2f cb cd af 50 e9 d3 2f 17 31 7c 63 9f 4f f7 1c 64 eb 8d 6a 15 de 40 65 14 a4 ad 26 45 e5 2f 2e c6 68 d4 66 98 54 a8 8c 82 8e bd 58 48 36 db 39 ce ac 13 0c 59 ec ef 45 dc 19 6e 9b c8 f8 be 6a c8 6d ef 8e f9 6c 81 6c a6 d7 c3 cd bb 3f c6 d0 9b 5e 48 6b 61 4b 1b 19 f2 44 e9 42 7a 43 5f 62 59 e8 99 6e c9 0a c7 25 54 1e b3 06 96 52 46 13 ec d7 2d 6f 3e 45 42 9a 48 d5 e6 ac 5d 0b 42 42 7c 5e ec b8 9f a4 c1 93 0e 84 a2 30 02 54 46 31 ac cd 63 1f 83 62 3a 29 0a 34 f3 48 20 00 04 60 92 90 ac 81 58 94 08 89 66 95 11 a8 88 10 06 40 03 0a 48 22 25 18 23 c7 97 1b a2 30 93 6a a0 46 01 98 23 00 c8 92 02 c8 00 08 94 90 08 Data Ascii: \xm?R4~]K-e9My.=/P/1\|cOdj@e&E/.hfTXH69YEnjmll?^HkaKDBzC_bYn%TRF-o>EBH]BB\|^0TF1cb:)4H `Xf@H"%#0jF#
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 1c 43 76 d2 44 20 32 d3 d9 6b 00 b4 d1 15 5c 62 3a 5f 1b 18 6a 9c 3b 28 95 f7 3f cb 8e db 4b 32 70 f8 92 87 00 34 78 1d 9a 1d 96 31 80 1c 9a d4 2f 7f 09 a7 34 0b 2b 7b 24 cb 40 2c a5 22 1a cb 0d 64 d4 c5 96 4a b6 9a 4a ac 3d ca 26 5c 54 6a ba 42 52 e9 84 5f 88 fc 8d fa 51 93 6c e5 d0 16 1a 3a 37 3f cb e1 1a 2c d2 fd 00 62 ab 17 4c 99 08 1a ea 6c 97 2b 01 68 bd 81 b2 a8 21 5f 8d b4 05 9f 6e 70 df 2d f9 e0 15 ff 00 69 53 38 7c 0b 2c 56 fc a6 82 bc 5a 0a 94 1c 3c 91 01 08 d5 da b0 72 e1 38 b4 00 fa 9a ba 65 a7 69 8c c8 c4 4b 48 b5 74 d8 2a 91 64 9b 95 7f 04 c0 ed e8 b0 4e 22 da 17 b9 4a 91 78 b1 30 7e b2 36 17 36 68 72 69 f5 22 d1 75 ab c0 3f 90 f1 6b 32 b2 ac dd 1e c4 d5 8a 4e 35 52 55 f3 82 ca 96 65 a8 6e 3f 3f bd 9d 8f 0d 99 00 8c 92 7e 6f 08 aa ca e5 7c Data Ascii: CvD 2k\b:_j;(?K2p4x1/4+{$@,"dJJ=&\TjBR_Ql:7?,bLl+h!_np-iS8\|,VZ<r8eiKHt*dN"Jx0~66hri"u?k2N5RUen??~o\|
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: d0 da cc ca 07 21 e6 ce ba 33 d3 69 47 1d 27 08 2f 83 9e db 4c cb 30 82 64 9e a0 40 de 6c 09 d6 2b 89 66 b0 1c 88 c5 57 66 c6 1e db 7e 9e 3d a2 c1 ff 00 1e 1a be fc 8e 58 34 fa 39 c1 6f 0d a5 2b d6 5d 2d 97 7f 3d 73 28 00 06 07 6d c7 61 cd 5e 85 eb 6f 4b 97 42 46 be a2 00 70 8d 7a 27 c9 69 56 70 ac 61 ac 51 d3 67 b8 d8 20 e1 2b 30 5a a3 1a d1 05 ed 36 05 2b 55 78 c9 f8 e2 97 91 2e da a4 bb 12 52 f4 6d 48 88 1b 48 82 1e 1e a3 35 08 db 29 e4 16 76 d5 44 ba c3 46 ee 33 09 ba 27 5f 46 5f 34 6e 46 e3 3b a5 74 87 b1 97 d0 f4 7d ef 60 8b 4e 66 16 21 89 50 9c 12 98 a3 e1 0f 32 72 85 e8 3d a2 7a 36 4a 7e d1 67 96 3d b9 66 4a a7 a3 ae 64 1c 69 c3 c5 53 42 47 79 aa a3 c7 8d ea 71 70 5a a3 03 3a 13 74 79 77 0f de 5c 59 b5 6f e5 8f 07 a5 90 72 4c 63 db 59 ab 37 82 8f Data Ascii: !3iG'/L0d@l+fWf~=X49o+]-=s(ma^oKBFpz'iVpaQg +0Z6+Ux.RmHH5)vDF3'_F_4nF;t}`Nf!P2r=z6J~g=fJdiSBGyqpZ:tyw\YorLcY7
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: d2 a4 77 af 89 6a 04 b2 37 22 28 cf 81 73 dd 85 74 d8 59 14 6e c7 cf 7b 93 d4 e0 9a 83 ff 00 6b 1f a7 67 5b 7e ab ff 00 1c 55 56 d3 50 d3 2b 56 c8 aa da 6e 5d 06 93 21 b7 74 ac 20 91 7b 7d df 3d f1 51 c5 a5 5b f6 78 03 2f 9c 9d 48 da de 3e b8 aa e2 ac ca 51 a6 25 8e 9d 0f 4d 23 53 f8 7d a6 ff 00 4c 27 11 e6 e8 2d da b5 0f de 44 27 f3 b6 32 ae 2f a9 59 44 75 c0 04 75 2a 67 8c 59 94 7e f2 f4 23 ce c3 10 57 51 e6 08 ae 93 ab 92 00 e6 29 d5 e4 06 a4 d9 94 f9 fb 09 b6 3a e1 7d d1 e8 3f 4a fd 09 ae 74 42 a7 fb 50 5e 43 e3 a3 6b 28 f8 b6 df ec 62 ba 59 a1 11 41 4d a1 26 96 f6 26 d6 44 50 2e 40 37 b9 dc 0e 9b 5f d3 12 66 19 9d 05 40 e7 3f 35 4f 83 77 91 c6 dd 2d 6b 1f 4f e3 8c d7 30 9a b2 ad e5 a8 62 4f d8 51 ee c6 96 16 55 1e 00 0f c4 db 7c 31 ee 5c 8e bf fd 60 Data Ascii: wj7"(stYn{kg[~UVP+Vn]!t {}=Q[x/H>Q%M#S}L'-D'2/YDuu*gY~#WQ):}?JtBP^Ck(bYAM&&DP.@7_f@?5Ow-kO0bOQU\|1\`
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 85 5b 22 aa c6 b1 3c 4e 8e dd d1 d7 4b 1b 7c 77 c5 67 04 d4 d0 f1 0e 63 92 8a e4 a8 cb a8 66 7d 35 71 3d da ba 14 61 a2 3a 68 05 f9 d5 92 06 00 47 d0 1b c9 70 aa d8 ce b8 7e 4a 7c ce 14 92 9b 90 05 1d 3c 66 97 63 d9 0c 68 23 ec ec e0 59 a4 44 54 69 7a b7 31 db 51 b9 b0 e4 f2 d1 5e 25 b3 a8 17 5e 82 40 a0 02 08 e8 1f 4f ba 40 be a0 07 42 46 12 75 51 7f 07 0a 54 ff 00 bf 5c 1e c3 53 cb ed 30 d3 d4 34 6d ae 36 92 24 90 a3 79 8d 60 d8 f4 e9 6c 1e 5a 8b 8d 3e 03 bb d0 7e 18 cc f2 4a 2c cf 91 53 2d 39 79 a2 96 35 b1 95 e3 46 89 5b 50 be 85 6d c3 00 6c 34 ea f3 f2 55 54 50 aa 34 85 d8 01 e1 80 09 e8 09 f4 17 c2 8b aa fa 0f d2 30 45 f1 44 f6 2f 11 dd 64 1b fa 11 a4 9f e2 30 36 62 86 d7 b8 1a 57 60 2d b6 ff 00 85 ff 00 3c 67 e2 3a 64 bc 10 16 96 a0 4d f5 a2 5e 5b Data Ascii: ["<NK\|wgcf}5q=a:hGp~J\|<fch#YDTiz1Q^%^@O@BFuQT\S04m6$y`lZ>~J,S-9y5F[Pml4UTP40ED/d06bW`-<g:dM^[
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: be 8b 2c 97 51 ab 5f 33 42 b8 56 b1 41 64 5f 1b ed 96 bc af 47 0f 3e 51 34 f1 8e 4c f2 8e 92 4d 11 31 c8 fd 07 bc 57 57 4e a4 e0 f0 71 8b 2c c9 72 fa 66 6a 74 9e b7 2b cc 6a da 03 2c c9 2c d3 d0 d4 32 44 fc d6 ee 24 ad c8 56 65 b2 8b 5c 6e 31 57 c1 1c 2b f2 55 c1 15 35 c9 ae af 35 cd 9e 58 e8 05 4b 42 d5 15 55 b3 7f de 24 d0 0a c3 4b 48 8b cd 48 a1 b5 f4 28 92 46 79 4d 89 24 dc ee 49 24 93 d4 93 b9 fe 37 c1 17 f6 70 58 ff 00 88 78 77 89 38 45 cd e5 96 94 e6 39 68 3d 45 4d 32 87 b2 f8 ef a6 fe 3d 49 c4 10 8a 7a 87 59 46 97 04 a6 fe 0c 0d 88 3f 1b df 00 df 1c 4f 55 59 45 93 55 cf 97 86 6a b0 aa b1 69 4d 65 75 b0 56 70 3a 5d 14 92 09 b8 07 c3 1c 3b c5 39 b5 16 67 0c 4c 64 a9 8c b3 8a a8 04 41 a5 96 22 4c b2 38 3e f6 b4 ef b8 b5 bc be 22 19 a3 a8 89 26 89 d6 Data Ascii: ,Q_3BVAd_G>Q4LM1WWNq,rfjt+j,,2D$Ve\n1W+U55XKBU$KHH(FyM$I$7pXxw8E9h=EM2=IzYF?OUYEUjiMeuVp:];9gLdA"L8>"&
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: f3 b2 e9 fe 3e dc ba 91 b3 1a fa 3a 14 6d 0d 57 53 05 38 7e ba 4c d2 ac 7a ad b5 ed aa f6 b8 bd ad 71 86 f9 38 47 96 9c 51 e6 fc f8 5e 5c c6 92 a1 9a 94 89 61 ae cb 62 79 64 87 48 60 19 5c 46 dd f0 7b b6 bf 7f 6c 54 64 5d 9f 87 f2 fc f8 4e 5b b6 d7 d4 51 1a 7e 5d 84 5c 8e 8f cc d4 49 26 db a9 51 d4 6f e7 92 45 4a 99 a5 7f 69 d0 20 3c 29 90 99 af 7d 3c b2 d5 89 26 af dd 2a 2c 7e 0d 81 97 ae 4f 9f 70 46 5a b6 65 87 e7 ea 74 7b 1b 98 9a 99 9d 14 df c4 25 81 f8 83 8c 9f bf 17 07 b4 ed cd 95 2a 38 a6 8f 53 12 cd cb 89 6a d5 54 b1 24 90 04 6b a7 ca c3 cb 1c 39 1c c6 97 84 5a 31 31 a7 8d 78 8e 9e af 46 be 5a de 49 16 06 98 0e e9 3a 90 85 2c 0e e7 6c 70 ff 00 02 51 67 b4 93 d6 d4 66 73 51 c9 2e 6d 5d 96 d2 44 90 07 46 92 08 1a a0 34 8d ab 50 1a 11 8d bb be ed 85 Data Ascii: >:mWS8~Lzq8GQ^\abydH`\F{lTd]N[Q~]\I&QoEJi <)}<&,~OpFZet{%8SjT$k9Z11xFZI:,lpQgfsQ.m]DF4P
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: e1 f9 6d b1 f0 b5 3f ef 0f 07 f6 f1 e9 c6 7e 5c 54 d9 42 83 dc 60 ad 20 10 b2 29 01 83 5b 9c 3b d4 0e a4 6d 68 ea c1 1c 96 99 0f 95 ec 3d 75 91 59 47 6f 08 f9 02 bf 3e 6a ba 8d fd 6e 49 e4 d2 b4 b1 14 b7 12 37 6f 68 bd 6a d3 3f 4a 23 2f 76 44 61 1c 8f 2b 7d a2 00 45 c1 3c 58 f0 6b c3 4d 6b 4c f6 48 b4 18 69 6d 5d 89 66 99 68 6f 42 c3 d1 cc bb 98 c8 df f6 dd 45 6c 7d fc 72 97 24 e8 dc a7 a5 0a 5a 5d 55 8f 76 1a c5 82 07 5e d4 8a 02 09 26 71 dd 88 50 15 17 ec a2 f6 5c 7b c2 32 9e de 83 88 58 fe ce 32 c3 df db df c0 60 4e 07 1a a6 91 a5 eb 35 5e 96 ad a7 d4 d4 2a ca 0a bc 16 a0 49 63 20 8c 7a 38 38 3e f0 cb 86 07 d0 f1 e2 37 e0 dd 42 68 ec ea bc 8a de c5 34 51 c9 2b e8 93 33 cb 0c e5 7c f8 a7 33 b6 f8 5b 00 85 8d f7 a9 38 00 8c f1 34 72 43 23 c1 32 34 53 42 Data Ascii: m?~\TB` )[;mh=uYGo>jnI7ohj?J#/vDa+}E<XkMkLHim]fhoBEl}r$Z]Uv^&qP\{2X2`N5^*Ic z88>7Bh4Q+3\|3[84rC#24SB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50267	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	698	OUT	GET /xxrz/250x400/793/0a/a9/0aa95e98d17d7e708b1d9ab1086189f5/0aa95e98d17d7e708b1d9ab1086189f5.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:07 UTC	732	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: image/jpeg Content-Length: 73660 Connection: close Last-Modified: Fri, 26 Apr 2024 17:02:26 GMT Vary: Accept-Encoding ETag: W/"662bde22-fba1" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1782 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xVaEoH%2BFj1rmVQOA6CTkKmBsngnV%2BvIPzquA%2BUJMcH5JpSmhLo9exqFPqckCk2qeBuc%2F6XT%2BQuyMCvEX7GXHdT27Pr%2FRs6ygbYcmFU7xKJ58%2BnkaD%2Fu0DbOn0FeAfUOJ%2FaIm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8cb9c17742e-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:07 UTC	637	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: c6 f6 49 bd ad 6a e5 b6 2a 9b 8a ad c2 89 0a 2b 71 05 95 95 56 7d c4 38 b0 a5 39 6a f8 a2 74 c6 b2 62 34 c7 8a 41 b0 2d 29 30 f2 35 6b 8d 06 ec 59 ed 6d f6 cb e9 0a f8 4a 0f d5 c8 2d d4 ea ae e2 0a d0 6c 38 eb 43 c4 d0 bf e7 11 00 6f 3b 73 6a af 5d f3 64 d3 27 ad 69 9d 0e fa 96 55 a2 94 71 8d f0 be 24 52 cf 34 7a 56 ef b0 da 51 bf fa 75 c8 8c 66 17 cd 4a 95 6f c6 ef a8 f2 e3 de 1b 4e 94 f3 94 52 42 59 5d 55 c1 6f 74 dc 2d 12 d8 8b 0d 8d ab 93 d3 85 3f 6d 66 4f 7e 93 7e 74 7e 92 67 64 c8 15 21 da 99 52 29 4a 34 18 d6 c3 08 44 da ed 07 c2 52 d9 e6 de 55 ee f6 d3 de 4a 6d 0f 99 a1 21 fb c8 85 98 79 1a 00 24 4b 3c 8d 88 75 2a 29 ca ba fc b0 06 32 69 9d 43 90 4d 16 6a 34 09 89 b2 b8 07 3d 57 4a e5 1a 06 29 06 42 46 d2 33 0e ef 28 c5 a0 cb 6f 2d 59 58 48 24 04 Data Ascii: Ij+qV}89jtb4A-)05kYmJ-l8Co;sj]d'iUq$R4zVQufJoNRBY]Uot-?mfO~~t~gd!R)J4DRUJm!y$K<u)2iCMj4=WJ)BF3(o-YXH$
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 9e da e0 3f ce 0f d1 d7 cc 05 e4 0a 91 73 50 8a ae db a4 1c be c5 aa 72 e0 c7 6d c2 8c e6 ec e4 57 cd db 67 a0 f1 b2 00 a2 50 90 8f 15 47 f7 cc a9 ac ce 5e 24 13 70 36 5e 20 60 7e c6 53 50 bb 9d 6c 64 fe 2a 6d c4 ae 38 0e 65 28 ec eb e6 2a d3 2b 53 3b 72 10 d4 bb 5c 55 62 f4 db cd a1 57 e9 9e 62 be db 6e 7b 7b c1 7e 5c be a4 fe 63 af 8a f9 18 a3 4a aa fb 2e 99 5a af 50 eb 52 c0 8e 80 d4 26 2f da a1 d3 ce 58 1d 5f 46 54 5c 98 4c 57 36 44 72 5d 06 df 0e 94 3b 96 1e cf c1 75 37 e6 67 27 18 2c f3 ce ae e3 3b 0d f1 de c6 f1 31 a4 bf 7a 73 e7 8b da 6d d9 c7 cc 05 a6 28 a5 c5 78 d3 3a 9c 65 61 f7 cc c1 b7 19 b7 3d 94 df cf 9e 6f a1 9a 52 b6 04 6b cd c1 6e cd bb 76 94 73 15 6d f3 84 60 08 ab 51 00 3b 9a 1f 2c dc 5f 2d bc 83 64 64 ab 57 06 46 c4 a9 13 4a 51 83 03 Data Ascii: ?sPrmWgPG^$p6^ `~SPldm8e(+S;r\UbWbn{{~\cJ.ZPR&/X_FT\LW6Dr];u7g',;1zsm(x:ea=oRknvsm`Q;,_-ddWFJQ
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 3f 44 84 83 50 1c d8 63 dc 42 70 9d b6 e8 fe 24 50 40 8e 1c 00 f5 31 7c b3 37 5a 89 92 3e a6 96 80 77 2c 8e 3b 4d aa bd 4b 28 40 0e 5c a6 0a b7 c1 0f 87 f5 e5 68 73 eb 65 4a 7e 5c 52 9c 76 28 eb ad f4 e1 c7 ab 8f d9 6d bb 8c cd 81 f4 3c 70 2c 8d f5 5f 21 3d 99 98 19 52 4d 07 42 57 16 86 59 5b df 4b 73 f7 40 0a e0 a2 61 21 3d 48 28 43 10 da 46 c2 46 12 b4 94 4d ed f6 e3 9b 2a ad c1 08 e2 87 de 38 4f a1 6c 10 ce 3c e4 1c 83 26 2a 75 f6 cf c8 2d 00 bf a7 a5 39 72 05 ca f9 85 64 6e f1 c9 39 65 2c c9 46 2f 38 c3 10 48 56 a6 02 1f 55 89 64 2b 30 a9 f5 b0 9e 1f c6 75 87 75 7b da c7 56 53 af f4 26 3d 58 54 cc 18 e5 22 b8 42 a4 df d5 25 ae 1f 1a 46 ab 63 29 97 75 0e bf 53 80 fe f2 4c 9d 2b 79 71 e7 7f 7d e9 e0 e4 40 c9 83 be 91 51 92 a6 2d 62 4d b2 a6 ca ac a0 f5 Data Ascii: ?DPcBp$P@1\|7Z>w,;MK(@\hseJ~\Rv(m<p,_!=RMBWY[Ks@a!=H(CFFM8Ol<&u-9rdn9e,F/8HVUd+0uu{VS&=XT"B%Fc)uSL+yq}@Q-bM
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 27 09 5e 6a 0b d6 e7 69 2b b1 87 90 6d 7e 5d fc b5 a2 18 e0 e6 63 a5 35 d5 1c 13 60 e0 8f db a7 ca 2c dc 7c a9 74 59 4b 9b 8a dd 22 ab 5b 47 79 57 a3 13 8c d0 b2 6d 92 57 d6 38 f5 1b 35 ea 8e 2e 3a d6 e7 5e 80 4a 68 53 9f 96 71 b9 21 23 57 46 ea d5 dd 95 d3 90 4d d3 37 1d cc 8c 30 f6 c8 a7 38 53 67 56 18 78 c3 9f 14 53 0e ae 5c e2 18 cc 32 64 a8 16 0a 45 7e 02 bd 2d de 81 b6 fd bc 36 33 62 bc 83 b7 6c 18 a4 12 75 37 0c 71 36 8d 93 13 45 20 f4 5c b3 72 c9 5d 69 7c 84 85 83 96 d9 32 75 d6 eb 6f 38 89 b2 54 27 35 44 b5 82 d3 b3 6e 10 f6 3b 0c d0 4d 48 26 af 19 19 6f 92 97 63 6a 0e d4 94 43 67 66 ae 3b 70 9b a5 9a 28 0e d6 45 6c 45 5c 21 bc 94 1c 54 d8 78 e6 bf c2 9a 46 34 5a 91 55 8c 87 33 2d cf 56 69 58 76 bc 46 bf d3 f5 37 1f c0 6e f7 b9 cd 3c de c9 bc ee Data Ascii: '^ji+m~]c5`,\|tYK"[GyWmW85.:^JhSq!#WFM708SgVxS\2dE~-63blu7q6E \r]i\|2uo8T'5Dn;MH&ocjCgf;p(ElE\!TxF4ZU3-ViXvF7n<
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 8b 9d a3 c3 ed aa c9 5a a9 5e eb ef 2b e4 a7 dc 93 26 17 0b 81 f3 1c dd 2f 45 cd de 9c d8 cb cc 5c db c0 29 54 4d 9b d4 d4 a9 dc 1d 1d 78 b9 83 c3 0d e3 64 b5 84 b0 47 c9 03 19 97 1b f6 2a 41 bf f2 09 72 48 3f 90 7b 24 e7 9c 8b 76 92 4e 25 63 58 cb c4 21 09 55 8c 31 ee 92 65 89 78 65 9e 28 8b 55 08 15 bb 1c 25 be 1b 57 b8 b6 ea c7 57 17 e3 34 d6 22 4a 2e 75 81 03 03 03 03 38 f3 01 c1 c3 66 c1 7b ee 16 62 20 43 0b 75 d4 04 d0 1e d9 48 ab 52 65 63 69 c9 d4 1c bf bd 6a cb 31 bf 83 42 cf 8c c6 a9 b5 45 e3 a8 b1 6a 63 34 48 0c 8b 72 09 a1 6b b6 a5 f2 42 03 d1 0a b3 15 a6 b8 bb d2 bf 54 89 22 38 9a 7f 8b 5e e3 73 41 4c 34 da 30 30 16 8b ae 90 b8 33 b7 a1 66 be d7 6c 6d 2c ad c3 03 03 3e fe 2a 8f 41 65 95 3a ab b6 e4 b8 89 8d 8c ce 61 4c 52 5f 08 47 84 38 02 de Data Ascii: Z^+&/E\)TMxdGArH?{$vN%cX!U1exe(U%WW4"J.u8f{b CuHRecij1BEjc4HrkBT"8^sAL4003flm,>Ae:aLR_G8
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 02 03 11 00 04 12 21 31 05 13 22 41 51 06 61 71 81 10 14 32 42 91 a1 b1 23 33 52 62 c1 d1 07 72 82 f0 15 20 24 34 e1 43 63 83 b2 92 a2 c2 ff da 00 08 01 03 01 01 3f 01 f4 01 34 54 94 66 a3 15 b5 ef 52 ab 62 94 aa 37 92 94 a4 7b e0 44 92 35 09 9e a3 3a e5 1c ff 00 e6 6b b2 ce 60 bd 50 ea 04 f9 1a 41 e1 48 8f 78 0c fb eb b5 04 14 09 8e 1e 9f 9a 3f 6a 19 1f fc 9f 58 a6 d5 80 05 7e 05 83 f2 03 f4 ab 37 80 b6 41 56 49 c4 50 92 72 9e 7e 03 5e b5 92 b3 06 88 8f 46 2f 46 94 94 6f 26 4e 14 e9 de a9 e4 3e 15 81 96 9a 71 69 6b 78 e0 18 50 3d a5 ad 6a 80 94 c9 9c c9 3d 34 ab bb 55 b0 e2 db 7b db 42 b0 40 32 9e 3e 30 07 48 c5 1e 20 d2 4f 1a 8f 87 e8 2b b2 56 4a b9 7a e5 c4 a8 05 34 1a 50 07 53 2a 06 07 8c 11 48 65 38 27 90 ce 6b b5 cf 37 01 09 50 2a f6 94 3e 9f ad 1e Data Ascii: !1"AQaq2B#3Rbr $4Cc?4TfRb7{D5:k`PAHx?jX~7AVIPr~^F/Fo&N>qikxP=j=4U{B@2>0H O+VJz4PSHe8'k7P>
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 6d d7 b7 6f 5a 25 c8 74 34 b0 f2 50 0e 5b c4 46 47 09 cc 8c f4 ee ad 9a dd ab 6c b0 fd b6 15 63 6d 25 4e 21 59 39 29 4f 11 8c b1 1e 75 da 41 eb 4c 23 85 40 b6 a2 a1 c3 ae 5a 78 1a 73 10 3a 41 04 47 59 3d 29 b2 54 84 a8 e4 4a 52 48 3a 83 02 69 a7 d6 c2 b1 22 33 c8 cf 4a 63 68 b4 a5 00 ea 0a 27 2c 43 88 49 f0 ab cb 96 da b4 7a e1 44 ee 9b 6d 4b 9f 01 31 a6 a7 20 3b eb 64 8f f5 42 e6 e0 41 7d 69 51 11 9a 12 08 2d b2 3b 90 08 27 9e 23 9e 95 b4 2c de bb 69 db f6 9f 52 4d ab 70 db 4a 12 db 98 d4 06 02 15 9c ab f1 03 95 3f 71 c2 9c 4d a4 2f de 09 33 9e 59 46 74 6d 9e 7d c4 a1 6c b7 68 f2 9b 4e e5 90 a9 2f 98 d4 0c 44 24 91 df 86 41 d2 9e 2a 69 c5 b4 e0 c2 b6 d4 50 a1 23 25 0c 88 30 4e 62 82 ca f8 71 61 2a c8 28 fb a7 ae 79 56 c7 b0 61 8f 58 17 77 6d 21 26 5d 75 Data Ascii: moZ%t4P[FGlcm%N!Y9)OuAL#@Zxs:AGY=)TJRH:i"3Jch',CIzDmK1 ;dBA}iQ-;'#,iRMpJ?qM/3YFtm}lhN/D$AiP#%0Nbqa(yVaXwm!&]u
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 1e 4a 00 a4 f7 1a b3 ba 4a fd fe 22 66 3c 69 a7 19 53 18 55 ed 83 89 26 33 93 00 a4 e7 9a 48 ab 67 77 0e ef 49 48 4a 33 02 3d a2 08 23 5c a2 45 6d 6d b7 73 b5 50 d2 1f 8c 0c 88 6c 0f 74 4a 49 1a 49 92 39 93 15 66 76 85 e3 8d 58 b0 f9 fb a7 d0 80 a5 61 4a 59 08 53 ae 82 7f 0c 23 e3 02 8e be 15 b5 1f b7 70 5a 04 4a ee 1b 61 b4 dc 38 08 29 57 0f 08 11 3c 68 91 e4 45 58 de fa 93 8a 79 0e ad a7 07 b0 5b 12 a9 8f a6 64 1f 8d 6d 7d b6 f5 da 96 ab eb c7 ee 5c 69 38 02 9d 52 d6 52 9c 88 4a 4a b2 00 49 e9 5d 8d 07 68 df a1 2e 28 04 23 15 ca 1a 3e fe e4 80 dc f7 02 b9 f2 8a 5a 00 a3 ad 2a 95 42 b6 bb fe af b3 6f 5e e6 8b 77 08 8d 64 a6 07 cc d6 ce da cc a5 f3 6d bd c2 bd e1 dc e3 84 e7 3e c7 2d 4c c5 58 5e 07 52 06 21 3a 53 8b fb 3f ef ba 94 53 a4 fc ab b2 fb 3d f7 Data Ascii: JJ"f<iSU&3HgwIHJ3=#\EmmsPltJII9fvXaJYS#pZJa8)W<hEXy[dm}\i8RRJJI]h.(#>Z*Bo^wdm>-LX^R!:S?S=
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: c8 65 71 f4 ab bc 93 9f 3e b5 74 4a 08 89 d6 73 e2 11 96 ba c4 d3 ae 29 44 85 c0 88 83 a4 cf c7 4a 51 51 24 82 3f 2e 7a 0d 2b f8 63 62 ab 9d bc c3 85 32 9b 74 a9 e3 f9 70 26 07 88 2a 23 97 a1 f6 9b b9 6d 4d 3a 90 a4 2b 50 7e a3 98 23 91 19 83 57 fb 1a e6 d5 ec 2d a1 6f 34 a9 28 5a 52 55 97 e1 50 03 25 0f 82 84 11 dc 0c d1 11 e8 db b6 c6 d3 68 dd 35 10 03 cb 52 7f 91 67 1a 7e 4a ad a6 c1 38 c8 1a f4 ab 94 09 2a 03 38 29 82 4e 83 a8 e7 4f e9 99 26 bf 84 c8 0a ed 05 d4 9c 91 61 73 8b 21 98 2c b9 d7 c2 b6 82 02 e7 90 e3 f3 f2 ab b4 90 0f 0c 77 01 e6 07 7d 3c 65 47 2e fc b9 65 a1 f8 69 47 67 bc cd bd ad d3 82 11 76 5c dc a0 7b 58 5b 20 29 7e 67 21 5f c2 7b 10 da 2f ae d4 81 90 6d 90 a9 cf 8a 14 a0 3c 92 3f 6f 42 6a 45 01 35 8a 88 9a ed ad 9e 1b 86 6e 00 c9 e6 Data Ascii: eq>tJs)DJQQ$?.z+cb2tp&#mM:+P~#W-o4(ZRUP%h5Rg~J88)NO&as!,w}<eG.eiGgv\{X[ )~g!_{/m<?oBjE5n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50250	52.218.29.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	645	OUT	GET /static/cryptocoin/xdb.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:07 UTC	470	IN	HTTP/1.1 200 OK x-amz-id-2: LFMMRK/Z1Gjes0uallD3Tyx9WDnH0PqLBYRoyI6JeuGVoWnX28U5ny36Nu8eoOstaH3NkOVQybA= x-amz-request-id: 17PGDWZTC0K5GCVV Date: Fri, 26 Apr 2024 18:33:08 GMT Last-Modified: Mon, 04 Dec 2023 09:48:40 GMT ETag: "73b34dc61e24d681d8b8d3b83c2e9ca4" x-amz-server-side-encryption: AES256 x-amz-version-id: MEGtB_riZBLiVKrA0upqhpnpuiACgde3 Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 1617 Connection: close
2024-04-26 18:33:07 UTC	1488	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 30 2e 33 33 33 38 20 31 38 2e 36 37 37 36 43 32 31 2e 34 30 37 38 20 31 38 2e 37 39 38 20 32 32 2e 34 33 31 37 20 31 39 2e 30 39 39 32 20 32 34 2e 31 33 38 20 32 30 2e 30 37 32 38 4c 32 39 2e 31 35 36 39 20 32 32 2e 39 33 33 35 43 32 39 2e 36 37 38 38 20 32 33 2e 32 32 34 36 20 32 39 2e 39 39 20 32 33 2e 37 37 36 37 20 32 39 2e 39 39 20 32 34 2e 33 36 38 39 43 32 39 2e 39 39 20 32 35 2e 36 37 33 38 20 32 38 2e 35 35 34 36 20 32 36 2e 34 36 Data Ascii: <svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M20.3338 18.6776C21.4078 18.798 22.4317 19.0992 24.138 20.0728L29.1569 22.9335C29.6788 23.2246 29.99 23.7767 29.99 24.3689C29.99 25.6738 28.5546 26.46
2024-04-26 18:33:07 UTC	129	IN	Data Raw: 20 31 36 2e 30 33 37 37 43 32 32 2e 35 30 31 39 20 31 36 2e 39 36 31 31 20 32 31 2e 34 33 38 20 31 37 2e 31 32 31 38 20 32 30 2e 33 34 33 38 20 31 37 2e 31 38 31 39 4c 31 39 2e 38 37 32 20 31 37 2e 39 33 34 38 4c 32 30 2e 33 32 33 38 20 31 38 2e 36 36 37 35 4c 32 30 2e 33 33 33 38 20 31 38 2e 36 37 37 36 5a 22 20 66 69 6c 6c 3d 22 23 30 30 33 37 46 46 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 16.0377C22.5019 16.9611 21.438 17.1218 20.3438 17.1819L19.872 17.9348L20.3238 18.6675L20.3338 18.6776Z" fill="#0037FF"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50258	87.230.104.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:06 UTC	522	OUT	GET /beige.js HTTP/1.1 Host: www.fndsda.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:08 UTC	336	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: application/x-javascript Content-Length: 12320 Connection: close Server: Apache Last-Modified: Fri, 31 Jul 2015 10:40:48 GMT ETag: "3020-51c2973f18c00" Accept-Ranges: bytes Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=604800
2024-04-26 18:33:08 UTC	12320	IN	Data Raw: 76 61 72 20 72 65 61 64 79 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 20 20 20 20 0a 0a 20 20 20 20 76 61 72 20 72 65 61 64 79 4c 69 73 74 2c 0a 20 20 20 20 20 20 20 20 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2c 0a 20 20 20 20 20 20 20 20 63 6c 61 73 73 32 74 79 70 65 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 63 6c 61 73 73 32 74 79 70 65 5b 22 5b 6f 62 6a 65 63 74 20 42 6f 6f 6c 65 61 6e 5d 22 5d 20 3d 20 22 62 6f 6f 6c 65 61 6e 22 3b 0a 20 20 20 20 20 20 20 20 63 6c 61 73 73 32 74 79 70 65 5b 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 5d 20 3d 20 22 6e 75 6d 62 65 72 22 3b 0a 20 20 20 20 20 20 20 20 63 6c 61 73 73 32 74 79 70 65 5b 22 5b 6f 62 6a 65 63 74 20 53 74 72 69 6e 67 5d 22 5d 20 3d 20 22 73 74 72 69 6e 67 22 3b 0a 20 20 20 Data Ascii: var ready = (function(){ var readyList, DOMContentLoaded, class2type = {}; class2type["[object Boolean]"] = "boolean"; class2type["[object Number]"] = "number"; class2type["[object String]"] = "string";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50268	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	669	OUT	GET /117405/Resources/dist/Resources/css/shame.css HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=.ZLCGAswrtSeIPop225MZwozKgjgqUSKKyn0i106XKA-1714156377022-0.0.1.1-604800000
2024-04-26 18:33:07 UTC	531	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 814825 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: text/css Date: Fri, 26 Apr 2024 18:33:07 GMT Etag: "1b892979c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:17 GMT Server: ECAcc (mic/9B24) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 768 Connection: close
2024-04-26 18:33:07 UTC	768	IN	Data Raw: 2f 2a 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 2a 2f 0d 0a 2f 2a 20 54 65 6d 70 6f 72 61 72 79 20 43 53 53 20 66 6f 72 20 44 65 76 65 6c 6f 70 65 72 73 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2a 2f 0d 0a 2f 2a 20 50 75 74 20 61 6c 6c 20 79 6f 75 72 20 63 73 73 20 68 65 72 65 20 61 6e 64 20 69 20 77 69 6c 6c 20 63 6f 6e 76 65 72 74 20 69 74 20 74 6f 20 53 43 53 53 20 6c 61 74 65 72 20 2a 2f 0d 0a 2f 2a 20 44 4f 20 4e 4f 54 20 50 55 54 20 52 55 4c 45 53 20 49 4e 20 41 50 50 2e 43 53 53 20 2d 20 54 48 45 59 20 57 49 4c 4c 20 42 45 20 4f 56 45 52 52 49 44 45 4e 20 21 21 21 20 Data Ascii: /* ********************************************************* // Temporary CSS for Developers // Put all your css here and i will convert it to SCSS later // DO NOT PUT RULES IN APP.CSS - THEY WILL BE OVERRIDEN !!!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50269	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	784	OUT	GET /app/v2/js/cta-button.min.js?id=d34a8a89944479eef669417eb9f8e3c5 HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:07 UTC	794	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: text/javascript Content-Length: 421 Connection: close Last-Modified: Tue, 05 Mar 2024 12:12:31 GMT ETag: "d34a8a89944479eef669417eb9f8e3c5" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=15552000 x-amz-version-id: YH1wwfkjCOrmcP5TypeG_r6_wbf6.aws X-Cache: Hit from cloudfront Via: 1.1 04a7e6061ff44278cba30d4bada61a54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: iTOLwaYP1xKZ8lgJaEkzAIWASZmeuBTKN7Ul8hUqozBKg6AEPoYcUg== Age: 359085 CF-Cache-Status: HIT Expires: Wed, 23 Oct 2024 18:33:07 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8cfdd3109d6-MIA
2024-04-26 18:33:07 UTC	421	IN	Data Raw: 77 69 6e 64 6f 77 2e 69 6e 69 74 43 74 61 42 75 74 74 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 72 29 7b 66 6f 72 28 76 61 72 20 74 3d 72 2b 22 3d 22 2c 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 66 6f 72 28 76 61 72 20 69 3d 65 5b 6e 5d 3b 22 20 22 3d 3d 3d 69 2e 63 68 61 72 41 74 28 30 29 3b 29 69 3d 69 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 69 66 28 30 3d 3d 3d 69 2e 69 6e 64 65 78 4f 66 28 74 29 29 72 65 74 75 72 6e 20 69 2e 73 75 62 73 74 72 69 6e 67 28 74 2e 6c 65 6e 67 74 68 2c 69 2e 6c 65 6e 67 74 68 29 7d 72 65 74 75 72 6e 22 22 7d 76 61 72 20 74 3d 72 28 22 72 65 66 22 29 2c 65 3d 72 28 22 74 61 67 22 29 2c Data Ascii: window.initCtaButton=function(){function r(r){for(var t=r+"=",e=document.cookie.split(";"),n=0;n<e.length;n++){for(var i=e[n];" "===i.charAt(0);)i=i.substring(1);if(0===i.indexOf(t))return i.substring(t.length,i.length)}return""}var t=r("ref"),e=r("tag"),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50271	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	573	OUT	GET /media/development/GOOGL.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:07 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: image/png Content-Length: 4443 Connection: close Age: 20510 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=6259 ETag: "cbbded98a3c3d8e18f11724abcb51ae9" Last-Modified: Fri, 06 Aug 2021 08:05:51 GMT Via: 1.1 903a82370ff225ae16b374d8f5cbc5a6.cloudfront.net (CloudFront) X-Amz-Cf-Id: 5KK9zjhgrfd9DkIims0_019etmiGyftbGEUti03GV4YA14Kv68aiww== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: FCt42m_66_HNuwk3W76oGDVm4ZGPdFkg CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:07 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8cdf96dda2b-MIA
2024-04-26 18:33:07 UTC	570	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 87 00 00 00 87 08 06 00 00 00 3c e7 4a 0a 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 10 e6 49 44 41 54 78 da ec da bb 6b 54 41 14 06 f0 55 51 13 21 46 c4 17 fe 03 82 a5 44 ac b4 d1 a0 22 22 11 b1 b0 30 45 6c ac 04 11 b4 b0 54 21 44 d0 08 16 e9 04 45 8d e2 03 45 34 85 62 a1 a9 8c 44 0b 93 54 06 43 54 d8 dd 7b ef 9c 73 66 ce 44 cc 7e 0e 9b 80 82 82 46 f2 d8 c7 7c f0 6b ee ee 56 df e1 de d9 b9 93 ab f5 58 6b 37 8a f8 5d 64 f5 98 61 3d 47 a2 d7 59 f4 19 8b 7f 43 a2 a3 24 3e 99 a2 df 03 04 df 7e b9 f6 71 fa 7b 4f 82 6b c1 05 b2 da c1 ac 3b 44 64 43 2e a6 7a c2 cc Data Ascii: PNGIHDR<JgAMAa cHRMz&u0`:pQ<IDATxkTAUQ!FD""0ElT!DEE4bDTCT{sfD~F\|kVXk7]da=GYC$>~q{Ok;DdC.z
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: 19 63 56 13 6b 7f 2c 70 1e 58 7d 95 24 68 ae 9e 03 37 e2 06 63 71 f3 bb 69 46 44 6b 2a fe 48 1e 89 0e c5 c2 16 c4 7b 11 59 5f b1 77 8c 38 18 0b 6e 98 43 0f b9 4a 4a 9a a6 ab aa ee cc 45 31 85 19 19 46 d6 ff 1a 69 df 53 64 8f 1e 20 bd d7 8b f4 ee 4d a4 f7 ef 4c 5d 7b f9 a2 fc b9 19 19 01 65 54 2d 87 8a de a5 a1 8f 8a 39 b6 57 e9 8b 4f 33 fa 09 d9 e3 87 48 ae 74 a1 78 f2 38 0a 6d ad c8 ef dc 3a 33 ad db 50 38 b2 bf fc fb e4 52 67 79 78 cc d8 0f 72 ae e7 b5 89 28 08 83 07 2f 8a e0 5f 21 1e bd a8 a8 50 c1 6a 6d eb 8f b6 a4 c4 36 0d a6 52 a9 58 6c 85 42 45 7a a9 56 a1 55 11 a1 6a 13 51 10 29 88 14 3c 15 ab 34 78 30 1a 15 e9 0f 9a 78 2a 6d 94 1a d3 26 6f 77 df ee 4b 76 e3 69 84 39 78 f1 d0 34 dd 9d f7 42 0e 73 d9 d3 32 f3 bd 37 33 df 7c f3 d2 aa 76 31 51 64 53 Data Ascii: cVk,pX}$h7cqiFDkH{Y_w8nCJJE1FiSd ML]{eT-9WO3Htx8m:3P8Rgyxr(/_!Pjm6RXlBEzVUjQ)<4x0xm&owKvi9x4Bs273\|v1QdS
2024-04-26 18:33:07 UTC	1369	IN	Data Raw: f3 0c c5 a6 0a e7 d1 eb b3 07 e1 68 23 db a5 e4 7f df 1d 38 7a 6f 77 a7 f7 de ee 5a 13 62 84 e3 cc 51 bd 84 c6 18 fb 2e d5 43 d4 b6 12 74 f6 a0 65 ec 1f 05 ed 33 27 f6 ac 35 a6 82 6c 91 85 e3 cc 12 56 27 c4 86 bc 64 eb 8d ea 7d 43 82 03 d5 99 f4 18 58 96 8d 07 cb ae 2d c2 61 26 0a f3 6a 31 2f 65 25 d9 7a a3 74 f5 90 e1 70 6e 77 6f 64 08 a7 99 ab 65 12 b6 f0 a6 7a 40 67 e1 38 3e 70 e4 3d 0d 8a 6a ce 35 fc be 2c 1d 16 ec d5 7c 42 1f 64 d0 8d 09 d6 56 97 b0 b7 3b d9 62 34 77 14 17 38 8c 2b 21 a6 80 81 da 79 82 c1 d4 77 35 9f d0 9f 0e e9 b4 09 d7 aa 66 64 90 90 67 a9 e1 02 06 8a dd da 2d e0 e8 43 33 77 51 e6 d6 b2 13 18 4c 7c 91 e6 3e e5 0c 2f 38 f0 6e 46 c0 e1 42 75 ad 74 f5 d4 25 6c 57 49 b2 53 a9 4b e0 06 87 2a 37 09 38 5c e8 7c 05 a3 1a 8b 0a 84 a3 83 04 Data Ascii: h#8zowZbQ.Cte3'5lV'd}CX-a&j1/e%ztpnwodez@g8>p=j5,\|BdV;b4w8+!yw5fdg-C3wQL\|>/8nFBut%lWISK*78\\|
2024-04-26 18:33:07 UTC	1135	IN	Data Raw: 7f 40 60 e2 92 41 3f 6b 72 ec 6a 98 b2 b3 94 c3 69 28 89 ea d1 df ee f6 b1 7f db 8c d9 a3 b4 b9 ca b9 fe f0 67 4d 88 9d 0f 01 91 49 6e 81 b1 28 52 87 16 0b 23 f6 01 db e0 d5 bd ec b3 6b 8a f0 ae c4 ef 01 41 05 44 ed 82 c0 ed 1d 03 ba 5c 2b bb 4d 0d 86 d1 d6 d6 06 8f 4b 83 31 45 63 6f 9a b5 15 8c b9 9e 86 3b 8c e1 01 48 cc 3a 98 12 5e dd 2f 1c 29 17 99 19 9d a8 d7 49 83 b5 3b 00 8f 29 9a 71 c7 24 40 f0 3d 3f 2c e0 40 3d 1b b7 10 9e 7b ef 34 fd b6 d5 b5 1a b0 55 ac 34 14 53 34 63 b9 89 87 49 18 a7 31 6c 66 10 fc 9e 01 fb 0f 75 03 a1 38 c1 d8 7d 52 37 2b 64 71 b1 34 54 03 80 af 2a 9a 71 c1 4c 40 f0 fc 60 c2 d1 e1 b1 06 41 05 44 ff 0d 02 43 1b 9d a9 06 d4 c2 e4 79 f4 ab c4 c3 14 85 4d 72 96 87 32 49 59 d5 85 78 99 36 6c 00 d9 9e 9f 08 b2 39 63 fb 5f 99 b1 f1 Data Ascii: @`A?krji(gMIn(R#kAD\+MK1Eco;H:^/)I;)q$@=?,@={4U4S4cI1lfu8}R7+dq4T*qL@`ADCyMr2IYx6l9c_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50272	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	598	OUT	GET /media/New%20navigation_Rebrand%203.0/eurostoxx50.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:07 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: image/svg+xml Content-Length: 954 Connection: close Last-Modified: Mon, 20 Dec 2021 10:03:30 GMT ETag: "7bce84e41a8ce73920a3ee78b3946590" Cache-Control: public, max-age=36000 x-amz-version-id: OwV5D_59msiSseeg6CsnZy34dN.zE.4y X-Cache: Hit from cloudfront Via: 1.1 5dd2304368effbad5413134075a82ff0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 9KOBziftyxmUL04TmCUqEKC6Ef-L-C2Y90KWvCiRRIsnaKlltK5nCg== Age: 20511 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:07 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8cdfb4aa4c7-MIA
2024-04-26 18:33:07 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 77 69 64 74 68 3d 22 33 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 38 20 30 63 32 2e 38 33 36 37 34 37 31 20 30 20 35 2e 35 32 30 31 37 31 2e 36 35 36 31 39 35 33 37 20 37 2e 39 30 36 38 30 32 20 31 2e 38 32 35 30 35 32 39 32 20 35 2e 39 37 37 34 36 34 31 20 32 2e 39 32 37 34 37 35 35 35 20 31 30 2e 30 39 33 31 39 38 20 39 2e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg height="36" viewBox="0 0 36 36" width="36" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="nonzero"><path d="m18 0c2.8367471 0 5.520171.65619537 7.906802 1.82505292 5.9774641 2.92747555 10.093198 9.
2024-04-26 18:33:07 UTC	335	IN	Data Raw: 31 31 2e 39 37 34 34 31 33 36 39 7a 6d 32 2e 30 35 31 31 37 32 37 20 38 2e 31 34 39 32 35 33 36 39 76 2d 31 30 2e 32 30 30 34 32 36 34 6c 2e 34 35 37 31 32 30 34 2e 30 31 37 36 33 33 31 38 2e 33 38 34 38 33 35 36 2e 30 32 31 38 31 31 36 31 63 2e 30 35 38 31 31 35 36 2e 30 30 33 39 38 33 34 37 2e 31 31 33 32 31 39 33 2e 30 30 38 31 34 31 30 34 2e 31 36 35 33 31 31 31 2e 30 31 32 34 37 32 37 31 6c 2e 32 37 36 34 30 38 36 2e 30 32 38 30 37 39 32 36 63 34 2e 36 32 30 32 34 33 36 2e 35 38 30 31 33 30 32 37 20 38 2e 32 37 39 30 37 30 34 20 34 2e 32 35 30 34 36 38 34 32 20 38 2e 38 34 31 36 32 33 38 20 38 2e 38 37 36 31 35 37 39 34 6c 2e 30 32 36 33 37 36 35 2e 32 36 38 30 32 39 39 2e 30 32 32 34 34 37 31 2e 33 33 38 30 31 31 2e 30 31 38 35 31 37 39 2e 34 30 37 Data Ascii: 11.97441369zm2.0511727 8.14925369v-10.2004264l.4571204.01763318.3848356.02181161c.0581156.00398347.1132193.00814104.1653111.01247271l.2764086.02807926c4.6202436.58013027 8.2790704 4.25046842 8.8416238 8.87615794l.0263765.2680299.0224471.338011.0185179.407

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50255	139.45.195.254	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	687	OUT	POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=78137abb-581d-4efe-bf4c-8d400f99f3ba HTTP/1.1 Host: fleraprt.com Connection: keep-alive Content-Length: 2026 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:07 UTC	2026	OUT	Data Raw: 4c 1b 52 52 1f 1c 26 1c 14 05 67 1f 1c 4b 12 03 01 05 50 0e 4c 5f 04 0a 11 1a 58 16 10 4a 4f 40 79 27 3e 75 24 4a 46 2c 1d 5b 09 01 52 15 13 60 0f 08 12 09 1b 42 09 47 4a 17 51 4a 46 38 05 5d 08 19 64 51 52 52 1f 16 59 2c 10 14 51 0a 1c 19 49 39 1b 09 08 51 1c 02 1e 19 1b 06 02 54 49 58 45 21 08 2d 3c 10 48 46 4e 38 05 5d 08 19 64 51 52 52 1f 16 59 0c 07 0b 4e 0c 0b 10 43 46 4c 19 04 16 54 4f 70 56 5c 51 16 01 59 21 1b 01 16 49 51 7e 0e 05 09 07 17 1d 4c 41 15 4b 43 46 58 5e 48 51 59 40 4c 13 16 1b 5b 47 5f 59 42 18 4c 1a 40 1b 09 07 48 5c 49 44 57 15 50 4b 43 00 59 5e 42 49 05 5d 19 4f 0d 08 01 0e 4a 48 5b 1f 1c 0a 1a 53 40 09 56 46 4c 1c 0a 16 54 5d 1b 1b 44 4f 58 5e 49 44 57 0b 40 4b 43 09 4d 48 19 0d 11 16 54 59 1b 1b 40 57 12 46 43 51 4d 56 14 4b 0a Data Ascii: LRR&gKPL_XJO@y'>u$JF,[R`BGJQJF8]dQRRY,QI9QTIXE!-<HFN8]dQRRYNCFLTOpV\QY!IQ~LAKCFX^HQY@L[G_YBL@H\IDWPKCY^BI]OJH[S@VFLT]DOX^IDW@KCMHTY@WFCQMVK
2024-04-26 18:33:07 UTC	465	IN	HTTP/1.1 200 OK Server: nginx/1.19.10 Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: application/json; charset=utf-8 Content-Length: 12 Connection: close Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-04-26 18:33:07 UTC	12	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 32 7d Data Ascii: {"status":2}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50270	3.232.64.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	696	OUT	GET /match?uid=6f67744e-1091-4048-adba-e024cc18f2d2&bid=1e2n4ou HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18f1bae1d9d-42c70000010a45f6; SERVERID=17910~DM
2024-04-26 18:33:07 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=17910~DM; Domain=eyeota.net; Path=/; Expires=Fri, 26 Apr 2024 18:43:07 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Fri, 26 Apr 2024 18:33:07 GMT
2024-04-26 18:33:07 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50265	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	698	OUT	GET /xxrz/250x400/793/f5/70/f5706571721222f8411fe7ab58e9b5e9/f5706571721222f8411fe7ab58e9b5e9.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:08 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: image/jpeg Content-Length: 78624 Connection: close Last-Modified: Fri, 26 Apr 2024 17:01:54 GMT Vary: Accept-Encoding ETag: W/"662bde02-e290" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1782 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R6zhOdOzEbCAMF856m9pkC710M5Jtopv55td6lM6A27TTGoLSlEdUrR4FKwQDIyNxl93RDx0LUGz73RD2%2FQgHq1w6YEM2stuErMMBJueFUgr9MFawXj1bhXvSL%2BPtoxnOwaj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8d08ad2d9d1-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:08 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:08 UTC	1369	IN	Data Raw: 62 66 28 83 41 65 40 f9 76 0a 6d 3d f5 03 e4 94 c6 4b df 33 ea 43 43 22 ce 5a 63 bb ce 7f 49 10 8a 61 61 72 ae dc fb e6 eb cb 58 f9 35 ee e6 a0 9f ea 68 cb ba e9 0c 6b 79 b6 b9 e7 5b 6b 6d 7b 5c a7 43 83 48 4a 51 7c 6d 34 0e 06 bd 4a d7 6f f5 ae 2e 09 19 89 5d de ca ef 1e 76 f6 ba 7d ec 18 59 69 d5 3e 64 08 a8 37 6e c6 fc 5c 4d b2 29 77 8a 1c 6b 7c 0f 93 ac 5d ee 40 a8 3f 39 de 90 2b 0d 0a 41 e3 0e 53 5a d5 41 cd 3f cd ad ef 98 df 53 6b 6d 6a d4 ec 07 3a ad 97 be 87 ab 75 79 17 ea d7 6a ad e4 fb 96 e9 10 f8 c8 1a 14 1c 51 7f 5c 5b 75 4d 82 d5 27 de b4 59 59 c9 af 66 ea a7 f7 a3 32 f6 ff 00 4d 35 ea bc 9d e2 e8 8d 7d cd ae c8 48 ed 46 46 56 fa 17 3b 42 d3 a4 2e 59 04 31 e4 8e 2a 64 ce e7 8e f3 84 f9 f0 c4 d6 89 20 e6 44 12 2e 84 0b 9a a5 cc 5b 10 35 69 c9 Data Ascii: bf(Ae@vm=K3CC"ZcIaarX5hky[km{\CHJQ\|m4Jo.]v}Yi>d7n\M)wk\|]@?9+ASZA?Skmj:uyjQ\[uM'YYf2M5}HFFV;B.Y1*d D.[5i
2024-04-26 18:33:08 UTC	1369	IN	Data Raw: 99 6d 36 ed c5 f6 49 e4 23 66 15 84 23 2e d0 d9 32 11 21 33 84 b6 c7 e1 fd 0f f0 a4 cb 82 5d 42 91 26 33 96 c2 f8 44 92 a4 17 d5 f3 e6 84 70 55 e7 eb 01 d3 78 47 aa be 99 46 4c d4 4f 2c a5 91 34 b5 82 7f a5 a8 48 33 1c c6 58 e8 3a 4d 20 b0 b3 46 0a 6a 90 47 f2 11 4a 07 1a 4a 29 24 eb 9f ea ee 34 0e a3 21 f0 0c 6e 9a 97 25 be 56 f9 39 72 7d 9e 85 ca 2e 4d 77 fe 8d d1 30 91 10 32 18 a6 c5 d0 b4 6b 8c 01 14 98 9d 53 c2 b3 30 96 12 42 6c 17 fc a5 ed 99 c1 3d e6 60 42 79 56 ee 8b f7 a9 a7 50 40 f6 8a 30 a4 32 31 97 fe a5 cd db b7 17 fa 7d 48 4c a0 1a 8c c1 b1 1d 3c 74 06 17 5e 8b 82 4c 36 7c 82 ab a9 5d 36 19 b0 17 f2 e4 7d e2 d5 4f d7 bf 32 5f f9 f6 df ba 7d a6 9f 9e e1 93 87 72 c6 fc 73 25 a6 22 e4 c1 5c c2 c0 73 78 f5 2b c6 17 4d ba d0 72 e1 b8 dc a3 fa 41 Data Ascii: m6I#f#.2!3]B&3DpUxGFLO,4H3X:M FjGJJ)$4!n%V9r}.Mw02kS0Bl=`ByVP@021}HL<t^L6\|]6}O2_}rs%"\sx+MrA
2024-04-26 18:33:08 UTC	1369	IN	Data Raw: 33 f6 e1 9e 14 41 05 bb 8e 20 9e 76 80 88 35 31 0a 66 80 7c 52 37 b8 c5 8d 14 42 4e 61 dd 7a 11 36 8a c2 89 4e ec b9 01 18 a1 a5 5a c6 34 91 af 42 a0 76 a8 ef ca a2 ae 2b 71 32 66 6e aa 70 cd d7 27 b3 b5 0c 3c 77 66 53 98 82 32 dd 99 d8 39 da 39 c6 71 9c 60 71 93 04 50 65 81 31 38 03 50 03 19 0c f0 61 1a 93 82 25 e3 ce 4e 6c 2b 63 e3 74 54 e1 24 44 00 50 2e 28 cc c6 c9 78 01 7e d6 52 b6 e9 84 c4 b5 70 4f 60 7d 34 fa 19 06 5b 26 30 f3 f4 39 56 6e b2 f9 1a 59 6a ac 8b 77 88 21 00 82 ab 44 1e 39 43 0a 4c c5 31 aa a5 fd 77 6e 76 06 76 06 78 40 70 c8 71 9e 3c 4c bf 12 4d 7b a4 fd 08 93 3c 06 2e 09 4e 51 e0 0d 85 4c a7 14 d0 20 62 2d 92 39 01 a8 61 39 c2 95 63 0a 44 ec 14 c4 0c 1d 84 31 2f 0d 14 88 7a 74 41 08 c0 6c 67 d2 14 b8 d7 73 0d eb d4 d6 10 93 ef 1c 1c Data Ascii: 3A v51f\|R7BNaz6NZ4Bv+q2fnp'<wfS299q`qPe18Pa%Nl+ctT$DP.(x~RpO`}4[&09VnYjw!D9CL1wnvvx@pq<LM{<.NQL b-9a9cD1/ztAlgs
2024-04-26 18:33:08 UTC	1369	IN	Data Raw: 9e 26 bc 9b 6d 36 9a 4e 24 dc 95 32 93 aa b8 d4 11 af d1 e5 b9 51 b7 f2 8d 5d 38 78 fe 33 c7 92 b1 ea fb a0 b6 ec 51 02 76 13 59 07 63 bb a9 40 66 24 0a 23 1f aa be da ab 9f fb 22 f8 dd 57 15 58 6d 87 59 65 13 af 5d b6 7d 25 6c 87 f7 3b 6e e1 91 f6 cd 6f 6e 78 0c e9 e0 39 1a d8 89 b3 da 01 fd cc d2 85 37 f0 a6 35 35 03 ab 4e a2 d3 03 69 e8 14 c3 d8 b4 51 7f bb 3d 52 2f e9 a8 ca a2 2d 1e e8 d6 62 9c 9d 8a 47 d2 5b ba aa 8a 6e 7d 77 00 e5 46 cb 55 97 49 e3 38 43 78 97 e7 00 03 25 0c 51 96 31 89 88 89 4e 96 b1 30 99 e5 e0 dc 4c ca 01 7d bb 53 a9 df 54 d9 33 0b c0 5c 21 27 23 ac 2c ef 9a f3 c6 1a 59 43 1d 03 37 21 9c 75 32 f9 76 d4 ab c3 ce e2 80 e3 2f f6 9b 3f a7 7d 77 ec fa 4f ed d4 90 9f fa e7 a8 90 12 69 e8 30 e6 0b 5a 6b b9 8a 85 cf aa 77 a8 bb ab 90 e6 Data Ascii: &m6N$2Q]8x3QvYc@f$#"WXmYe]}%l;nonx9755NiQ=R/-bG[n}wFUI8Cx%Q1N0L}ST3\!'#,YC7!u2v/?}wOi0Zkw
2024-04-26 18:33:08 UTC	1369	IN	Data Raw: 51 d8 c7 eb 92 ae 8b b6 88 76 a0 da 88 7f 35 3b 7d 26 03 aa 7a 3e 68 00 73 a9 da 5d 14 ab c1 7a aa 45 59 3d 04 d9 78 bd de 3f 6e 46 c8 02 f2 c6 8c 29 27 be ee 2d c5 ed ba d4 98 b2 55 3a da 4d d1 5c 11 43 80 58 43 1f 4d 33 23 f6 76 08 1e 59 3a 45 6c d9 de e6 9d 76 90 b3 a7 15 99 63 9c 22 69 06 59 48 60 03 86 39 4d 63 9e a0 55 09 10 28 95 6c ae 91 53 4b e8 47 ce 9c 52 f6 f9 bb b5 56 ab 90 f7 7d 71 b1 25 06 1a 8b a5 d6 55 6d 4f d4 d3 d7 0d 34 f7 47 8c 7b 29 0b a6 0b 21 4f a2 33 a8 bb 07 02 26 a8 c2 83 2e a2 d3 39 16 c8 a9 02 13 69 aa 71 28 f9 f8 09 d1 f2 db e0 52 5e 3d 78 a5 51 7a dc 8e c3 b0 ca 9c f9 24 6f d5 92 0e 55 45 da a0 b6 cd 97 7b 1d 59 a3 c8 16 4e b7 30 a8 34 88 a1 3d 07 d1 3f e5 c3 e2 82 b5 23 82 f1 1f b6 6a 48 c2 20 eb a6 67 20 a6 ae dc 1f f5 77 Data Ascii: Qv5;}&z>hs]zEY=x?nF)'-U:M\CXCM3#vY:Elvc"iYH`9McU(lSKGRV}q%UmO4G{)!O3&.9iq(R^=xQz$oUE{YN04=?#jH g w
2024-04-26 18:33:08 UTC	1369	IN	Data Raw: dd 10 fe 9c 33 60 1d 44 e5 6b cc ce b3 b5 10 6a c6 46 c8 06 44 a4 3f ac 3b 27 2a 34 67 07 13 03 2e a5 cc 8d 96 b4 a9 4b b4 1a 31 18 26 ee 31 8b 26 d1 e5 51 ca 7e 9e 4f fd ef e5 1c a7 32 4d e4 8a e8 1d b2 dc e1 47 0b f1 88 e3 7c 47 e3 20 fb 4e e6 9c f4 e8 24 33 0c e2 50 6d 69 44 ed c0 d9 77 20 2c b3 07 8d d5 56 39 dc 05 64 26 66 46 41 06 83 c2 a8 94 de 13 48 b9 ac c1 4d 2f 22 ee 6a 26 62 44 ed 8a a1 fb d5 57 80 f2 09 99 cb 00 7a dc 0c ff 00 1f 5a 3a 3e 3c b6 33 f1 2d 81 85 36 27 8d cc 1c 26 6e 32 30 44 ce d9 9d cd 4d b5 b5 c1 fd 99 83 42 fa 1f f0 f7 c6 13 56 76 1e cb 36 45 97 38 28 9a eb 89 0c 44 8e cd ca 66 42 fc 83 74 68 a9 36 4c ec 08 66 84 4d 75 53 05 55 fb b0 aa 70 da c6 d0 50 5c 30 3f 20 06 55 f9 41 9c cb 2f 70 82 0c 0c 4f f7 48 40 71 b9 83 94 cd f3 Data Ascii: 3`DkjFD?;'*4g.K1&1&Q~O2MG\|G N$3PmiDw ,V9d&fFAHM/"j&bDWzZ:><3-6'&n20DMBVv6E8(DfBth6LfMuSUpP\0? UA/pOH@q
2024-04-26 18:33:08 UTC	1369	IN	Data Raw: 2a 74 55 79 24 89 52 6b b2 a4 0b a1 5a 49 0b 26 f7 b9 1a 2d da bd ec 77 c6 7d 4d 4f 4d 47 5d 46 27 a6 76 a9 8a 4a b3 a2 16 86 4e 7a de 44 62 d6 21 99 99 a4 ec 97 e8 c7 b3 d3 19 0b fa bd 20 a5 78 da 46 9e a4 34 65 48 00 34 b1 aa be b0 7f c4 52 a0 5c 93 dd 8a 77 96 2a 68 af 26 f1 c6 91 f6 96 e5 99 55 47 5c 71 33 4a f9 4d 76 ae 9c 87 d4 7c b6 ee c0 16 fe c0 17 c7 01 e9 8e ae ba e7 63 04 77 1e e7 3f c7 c7 11 cf 12 8b 05 5e ee ef dd 6c 45 51 6e c9 41 6c 4a f1 39 1d 8d d8 d8 ee 0e 26 08 47 6b 71 7e e1 be d6 fb 3e 78 59 29 a1 6d 4e 39 9a 6d 6b 91 7c 57 55 d2 4c 80 22 95 6f 2f 2c 51 54 35 3d 42 4c 08 60 b7 0c a4 6c c8 e0 ab 03 e4 54 91 8c c6 b6 a2 5c b2 a2 af 97 db 86 42 1b 43 24 81 91 48 e5 ce 34 db 4e a4 61 a9 0a a9 56 04 58 8b 31 ac 57 cc 63 0d 2f 35 62 d3 72 Data Ascii: tUy$RkZI&-w}MOMG]F'vJNzDb! xF4eH4R\wh&UG\q3JMv\|cw?^lEQnAlJ9&Gkq~>xY)mN9mk\|WUL"o/,QT5=BL`lT\BC$H4NaVX1Wc/5br
2024-04-26 18:33:08 UTC	1369	IN	Data Raw: d7 df f7 e0 69 96 3b 1d cf 76 29 18 b5 3c 77 ea a3 41 f7 ae df 86 3d 12 a3 ad 76 6c 50 80 0d 24 1a cd ae 74 89 4f 4d fc f1 f9 42 c8 c5 b8 4c 1b ff 00 da c0 f9 8d 54 25 7f 1c 57 af fd 20 ce 3f f2 e3 ff 00 e5 af 8a 41 ab 82 f3 b3 dc 33 cc 90 7d b4 99 bf ee c5 7e 5f 99 65 54 3c 13 c5 ab 01 9e 81 69 69 2d 22 86 e5 a5 4e 5f 98 d4 3f ab ce e0 5a 3e 68 01 a3 3f 58 6a ea 50 8c 66 59 6f 0a 4b c0 b9 ff 00 12 70 ed 5d 74 95 35 b2 65 f1 66 54 55 92 c6 cf 45 34 d9 a5 3d 43 46 51 21 4b 0d 5f aa 95 49 47 8c 1d 27 ad b2 65 15 59 b6 51 04 9e c2 55 42 0d cf b4 ab 27 35 be 42 d8 e2 8a e1 55 9a 95 07 b3 4d 4f 0c 0a 07 41 61 72 3e 78 cb ea 12 09 9c be af a5 d2 a3 48 bf d6 5c 6a fa 7a d3 ff 00 77 3f cd c6 09 fd 12 2f 39 e6 ff 00 76 2c 51 83 2e 67 4c 63 ed 85 e5 96 b7 70 48 86 Data Ascii: i;v)<wA=vlP$tOMBLT%W ?A3}~_eT<ii-"N_?Z>h?XjPfYoKp]t5efTUE4=CFQ!K_IG'eYQUB'5BUMOAar>xH\jzw?/9v,Q.gLcpH
2024-04-26 18:33:08 UTC	1369	IN	Data Raw: 66 d7 2c af d7 54 8c 7e 17 c5 33 aa e5 75 40 f5 2e 40 f7 90 83 11 45 7a 4a c7 fd 8e 47 c3 54 96 c6 53 26 9a 2c c9 4f 4e 4b db de 62 20 9f 96 01 c4 f2 73 a5 e6 f7 b4 71 5f df a0 63 2b e8 83 c9 3f dd 1f bf 0d 8f 47 b1 fa d5 56 64 b0 73 0b 25 34 25 95 45 88 bc 96 1a af d0 13 df be 3d 3b c3 32 be 40 64 a6 aa 8c 22 66 0a cf 32 e9 0d 63 49 7d 07 70 e3 6d c8 f1 18 9b 87 44 7c 29 49 c5 1e b5 1b 8a ac de a3 2b 6a 2d 48 64 8f 93 09 98 4e 52 fc dd 0d ec 89 3d 9b f7 e2 8e a2 51 c0 b9 dd 2a 94 e4 49 9e e5 12 48 ba 97 51 78 a0 a8 08 74 5f 51 01 4e ec 06 9b 9d fc fd 14 e6 35 59 64 f9 d1 a6 97 95 ce 86 88 39 ef b4 6f 50 cb f3 26 fb 1b 7c 71 c5 32 bc bc 49 9d 4b 23 6b 79 33 1a 96 67 fd a2 5c dc ef 8a f8 84 59 02 b3 03 cc 9e b2 1b 6d b6 88 e1 93 a1 ef dc 83 6f 7e 2c 74 ea Data Ascii: f,T~3u@.@EzJGTS&,ONKb sq_c+?GVds%4%E=;2@d"f2cI}pmD\|)I+j-HdNR=Q*IHQxt_QN5Yd9oP&\|q2IK#ky3g\Ymo~,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50275	35.169.4.189	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	1151	OUT	GET /map/st/?pid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: map.go.affec.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ck=662bf34d3757330001701a4b; oo=1; pt=eyJhbiI6eyJkdCI6MTcxNDE1NjM3MCwiaWQiOiI2NTc2Nzg3Mjg3MDEzNDUyMzI1IiwibHMiOjE3MTQxNTYzNzB9LCJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM2NX0sInRkIjp7ImR0IjoxNzE0MTU2MzczLCJpZCI6IjZmNjc3NDRlLTEwOTEtNDA0OC1hZGJhLWUwMjRjYzE4ZjJkMiIsImxzIjoxNzE0MTU2MzczfSwiaW0iOnsiZHQiOjE3MTQxNTYzNjgsImlkIjoiZDVmNjQ2YTEtM2E5MC00NTg1LTgxYTAtNjkzY2E0YTA2ZmMwIiwibHMiOjE3MTQxNTYzNjh9LCJ2IjowfQ==\|1714156373\|fe38a37a29004b0c3ba1840c6fe54c1191497f0b
2024-04-26 18:33:08 UTC	1186	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 18:33:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 331 Connection: close Location: https://match.360yield.com/match?dsp_callback=1&publisher_dsp_id=440&external_user_id=662bf34d3757330001701a4b&r=https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fim%2F%7BPUB_USER_ID%7D%3Fch%3D662bf363bc6e410001f8e0c2%26chc%3Dst%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= Set-Cookie: ck=662bf34d3757330001701a4b; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:33:07 GMT; Secure; SameSite=None Set-Cookie: oo=1; Secure; SameSite=None Set-Cookie: pt=eyJhbiI6eyJkdCI6MTcxNDE1NjM3MCwiaWQiOiI2NTc2Nzg3Mjg3MDEzNDUyMzI1IiwibHMiOjE3MTQxNTYzNzB9LCJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM4N30sInRkIjp7ImR0IjoxNzE0MTU2MzczLCJpZCI6IjZmNjc3NDRlLTEwOTEtNDA0OC1hZGJhLWUwMjRjYzE4ZjJkMiIsImxzIjoxNzE0MTU2MzczfSwiaW0iOnsiZHQiOjE3MTQxNTYzNjgsImlkIjoiZDVmNjQ2YTEtM2E5MC00NTg1LTgxYTAtNjkzY2E0YTA2ZmMwIiwibHMiOjE3MTQxNTYzNjh9LCJ2IjowfQ==\|1714156387\|9778e5ff5677e25c9ec0528ac1ee251f924dc26f; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:33:07 GMT; Secure; SameSite=None
2024-04-26 18:33:08 UTC	331	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 33 36 30 79 69 65 6c 64 2e 63 6f 6d 2f 6d 61 74 63 68 3f 64 73 70 5f 63 61 6c 6c 62 61 63 6b 3d 31 26 61 6d 70 3b 70 75 62 6c 69 73 68 65 72 5f 64 73 70 5f 69 64 3d 34 34 30 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 36 36 32 62 66 33 34 64 33 37 35 37 33 33 30 30 30 31 37 30 31 61 34 62 26 61 6d 70 3b 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 70 2e 67 6f 2e 61 66 66 65 63 2e 74 76 25 32 46 6d 61 70 25 32 46 69 6d 25 32 46 25 37 42 50 55 42 5f 55 53 45 52 5f 49 44 25 37 44 25 33 46 63 68 25 33 44 36 36 32 62 66 33 36 33 62 63 36 65 34 31 30 30 30 31 66 38 65 30 63 32 25 32 36 63 68 63 25 33 44 73 74 25 32 36 72 65 64 69 72 65 63 74 5f 75 72 6c 25 33 44 Data Ascii: <a href="https://match.360yield.com/match?dsp_callback=1&publisher_dsp_id=440&external_user_id=662bf34d3757330001701a4b&r=https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fim%2F%7BPUB_USER_ID%7D%3Fch%3D662bf363bc6e410001f8e0c2%26chc%3Dst%26redirect_url%3D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50278	18.239.225.41	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	712	OUT	GET /adscores/r.pixel?sid=9212270798&puid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3AvrUVPPddecJuOYpnw9f4xj%2FF%2FkDRVGai
2024-04-26 18:33:08 UTC	869	IN	HTTP/1.1 302 Found Transfer-Encoding: chunked Connection: close Date: Fri, 26 Apr 2024 18:33:07 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AvrUVPPddecJuOYpnw9f4xj%2FF%2FkDRVGai; Path=/; Domain=.agkn.com; Expires=Sat, 26-Apr-2025 18:33:07 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://static.agkn.com/spacer.gif X-Cache: Miss from cloudfront Via: 1.1 a3d81350f207075a8a67e8d7ae50f6de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-P8 X-Amz-Cf-Id: PGzjsRd-BqVi9QtbRT4ottgPLqzj2XCfJTnYTvi5idtyC4OXbkvwVA==
2024-04-26 18:33:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50284	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	618	OUT	GET /117405/Resources/dist/Resources/js/WebCommon/Common/BrowserDetection.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:08 UTC	546	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 814824 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:07 GMT Etag: "f032c469c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:16 GMT Server: ECAcc (mic/9B62) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 1348 Connection: close
2024-04-26 18:33:08 UTC	1348	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 7b 7d 3b 77 69 6e 64 6f 77 2e 42 72 6f 77 73 65 72 44 65 74 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 6e 75 6c 6c 2c 69 3d 7b 43 68 72 6f 6d 65 3a 31 2c 46 69 72 65 46 6f 78 3a 32 2c 4f 70 65 72 61 3a 33 2c 53 61 66 61 72 69 3a 34 2c 45 64 67 65 3a 35 2c 49 45 3a 36 2c 53 61 6d 73 75 6e 67 49 6e 74 65 72 6e 65 74 3a 37 2c 41 6d 61 7a 6f 6e 53 69 6c 6b 3a 38 2c 4f 74 68 65 72 3a 39 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 72 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 61 2c 65 3d 72 2e 6d 61 74 63 68 28 2f 28 6f 70 65 72 61 7c 63 68 72 6f 6d 65 7c 53 61 6d 73 75 6e 67 42 72 6f 77 Data Ascii: (()=>{"use strict";var c={};window.BrowserDetection=function(){"use strict";var s=null,i={Chrome:1,FireFox:2,Opera:3,Safari:4,Edge:5,IE:6,SamsungInternet:7,AmazonSilk:8,Other:9};function o(){var r=navigator.userAgent,a,e=r.match(/(opera\|chrome\|SamsungBrow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50277	3.232.64.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	682	OUT	GET /pixel?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18f1bae1d9d-42c70000010a45f6; SERVERID=17910~DM
2024-04-26 18:33:08 UTC	469	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=17910~DM; Domain=eyeota.net; Path=/; Expires=Fri, 26 Apr 2024 18:43:08 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://tags.bluekai.com/site/29539?limit=1&id=2X8ctuZqlT6iqH7pWTTXMukusZDr-qkwY2aB-x2Fk8ok Content-Length: 0 Date: Fri, 26 Apr 2024 18:33:08 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50279	3.232.64.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	689	OUT	GET /pixel?pid=m4omg6v&t=gif&call=2&gdpr=0&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18f1bae1d9d-42c70000010a45f6; SERVERID=17910~DM
2024-04-26 18:33:08 UTC	461	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=17910~DM; Domain=eyeota.net; Path=/; Expires=Fri, 26 Apr 2024 18:43:08 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://ups.analytics.yahoo.com/ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent= Content-Length: 0 Date: Fri, 26 Apr 2024 18:33:08 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50285	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	607	OUT	GET /v2/assets/1/details HTTP/1.1 Host: api.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.bitpanda.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:08 UTC	1363	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:08 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=ZmB67pn2Wib0tFGzkG8CcE5BiVbvK1KLcqNPblbMT4eUiwJujzANTCSH8jbch8b6wilFM3klQgCBueLKKQ9ZgjariP6Na06+1BGtHSCSP7e3Et0XDzC+T+QVqfAC; Expires=Fri, 03 May 2024 18:33:08 GMT; Path=/ access-control-allow-origin: https://www.bitpanda.com access-control-allow-headers: origin, content-type, access-token, x-bitpanda-academy, x-tracking-id, If-None-Match, If-Match, x-bitpanda-app-web, x-datadog-trace-id, x-datadog-parent-id, x-datadog-origin, x-datadog-sampling-priority, bp-broker-user-api-token-id cache-control: max-age=60, private strict-transport-security: max-age=15552000; includeSubDomains; preload x-frame-options: SAMEORIGIN vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers, Accept-Encoding CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Set-Cookie: AWSALBCORS=ZmB67pn2Wib0tFGzkG8CcE5BiVbvK1KLcqNPblbMT4eUiwJujzANTCSH8jbch8b6wilFM3klQgCBueLKKQ9ZgjariP6Na06+1BGtHSCSP7e3Et0XDzC+T+QVqfAC; Expires=Fri, 03 May 2024 18:33:08 GMT; Path=/; SameSite=None; Secure Set-Cookie: _cfuvid=MoBln4wVGBRPipFh23uFD8FjXbJHdKidt5ey.tYrT9k-1714156388220-0.0.1.1-604800000; path=/; domain=.bitpanda.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a8d14c1c5c82-MIA
2024-04-26 18:33:08 UTC	6	IN	Data Raw: 31 38 32 0d 0a 7b Data Ascii: 182{
2024-04-26 18:33:08 UTC	387	IN	Data Raw: 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 63 72 79 70 74 6f 63 6f 69 6e 5f 64 65 74 61 69 6c 73 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 61 73 73 65 74 5f 6e 61 6d 65 22 3a 22 42 69 74 63 6f 69 6e 22 2c 22 64 61 69 6c 79 5f 68 69 67 68 22 3a 22 36 30 38 33 34 2e 38 30 30 30 30 30 30 30 22 2c 22 64 61 69 6c 79 5f 6c 6f 77 22 3a 22 35 39 32 39 30 2e 31 30 30 30 30 30 30 30 22 2c 22 68 69 67 68 5f 35 32 5f 77 22 3a 22 36 37 34 31 37 2e 35 30 30 30 30 30 30 30 22 2c 22 6c 6f 77 5f 35 32 5f 77 22 3a 22 32 32 37 38 38 2e 31 30 30 30 30 30 30 30 22 2c 22 6d 6f 6e 74 68 6c 79 5f 76 6f 6c 61 74 69 6c 69 74 79 22 3a 22 30 2e 31 33 39 32 33 38 36 37 22 2c 22 6d 61 72 6b 65 74 5f 63 61 70 22 3a 22 31 31 37 36 37 39 30 39 36 35 39 32 34 2e 37 33 37 36 Data Ascii: "data":{"type":"cryptocoin_details","attributes":{"asset_name":"Bitcoin","daily_high":"60834.80000000","daily_low":"59290.10000000","high_52_w":"67417.50000000","low_52_w":"22788.10000000","monthly_volatility":"0.13923867","market_cap":"1176790965924.7376
2024-04-26 18:33:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50283	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	620	OUT	GET /117405/Resources/dist/Resources/js/WebCommon/Common/ExperimentsManager.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:08 UTC	544	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 1946 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:08 GMT Etag: "c25acd69c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:16 GMT Server: ECAcc (mic/9B3A) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 1232 Connection: close
2024-04-26 18:33:08 UTC	1232	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 7b 7d 3b 69 2e 64 3d 28 74 2c 72 29 3d 3e 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 72 29 69 2e 6f 28 72 2c 65 29 26 26 21 69 2e 6f 28 74 2c 65 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 5b 65 5d 7d 29 7d 2c 69 2e 6f 3d 28 74 2c 72 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 3b 76 61 72 20 73 3d 7b 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 43 75 72 72 65 6e 74 6c 79 45 78 63 6c 75 64 65 64 3a 31 2c 46 6f 72 6d 65 72 50 61 72 74 69 Data Ascii: (()=>{"use strict";var i={};i.d=(t,r)=>{for(var e in r)i.o(r,e)&&!i.o(t,e)&&Object.defineProperty(t,e,{enumerable:!0,get:r[e]})},i.o=(t,r)=>Object.prototype.hasOwnProperty.call(t,r);var s={},l=function(){"use strict";var t={CurrentlyExcluded:1,FormerParti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50281	18.230.167.103	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:07 UTC	840	OUT	GET /ibs:dpid=600901&dpuuid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.sharethis.com%2Fadobe%3Fuid%3D%24%7BDD_UUID%7D%26_rand%3D1714156386906 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=06291327801249806183443003251739176557; dpm=06291327801249806183443003251739176557
2024-04-26 18:33:08 UTC	940	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:33:08 GMT Content-Length: 0 Connection: close X-TID: teRv4ElQSHc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://sync.sharethis.com/adobe?uid=06291327801249806183443003251739176557&_rand=1714156386906 DCS: dcs-prod-sae-1-v059-05a700b0b.edge-sae.demdex.com 2 ms set-cookie: dpm=06291327801249806183443003251739176557; Max-Age=15552000; Expires=Wed, 23 Oct 2024 18:33:08 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=06291327801249806183443003251739176557; Max-Age=15552000; Expires=Wed, 23 Oct 2024 18:33:08 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50276	44.235.243.161	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	850	OUT	GET /load/?p=847&g=001&j=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: loadus.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="a19a850734a267b9c36559160770466b"; ud="eJxrXxzq6XKLQSHR0DLRwtTA3Ngk0cjMPMky2djM1NTS0MzA3NzAxMwsaXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252FvvQ4AR8cpyA%253D%253D"
2024-04-26 18:33:09 UTC	1267	IN	HTTP/1.1 302 server: nginx date: Fri, 26 Apr 2024 18:33:09 GMT content-type: image/gif content-length: 0 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="a19a850734a267b9c36559160770466b"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 24-Aug-2024 06:33:09 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQSHR0DLRwtTA3Ngk0cjMPMky2djM1NTS0MzA3NzAxMwsaXFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252FvvQ4AR8cpyA%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 24-Aug-2024 06:33:09 GMT; SameSite=None; Secure; set-cookie: hsk_2465="gAAAAAQAAABYKLUv%252FSBYwQIAiKRidWlkoKNoc2ukNjMyNahkZWxpdmVyeaQ2MzI1o3ZlcgGlYm5hbWWnUzIwNFNIUqV0c2Vnc68yNjkzODUwLDI2Mzg3NzGlYmNvZGXNCaGidHPKU8eN1w%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Sat, 24-Aug-2024 06:33:09 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://sync.sharethis.com/nlsn?uid=a19a850734a267b9c36559160770466b access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50282	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	854	OUT	OPTIONS /500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=6&pl=https%3A%2F%2F1movieshd.cc%2Fhome&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://1movieshd.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:09 UTC	737	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Length: 0 Connection: close Allow: GET, OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50286	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	929	OUT	GET /xxrz/250x400/793/b4/c6/b4c6078f1da394fd9a4e7abf6c1e621f/b4c6078f1da394fd9a4e7abf6c1e621f.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:09 UTC	719	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/jpeg Content-Length: 96881 Connection: close Last-Modified: Wed, 24 Apr 2024 14:35:11 GMT Vary: Accept-Encoding ETag: W/"6629189f-146cc" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5536 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ApvWVePGqFn4SwcgapJFV3cj0GNYZ4lojS7EHrWBoiiajPEslgnxDF41uoauP9wkOpkKrcJbily48nhl7NxqeElw4zVb%2FZM0xL09HBG8cNHcZuTzwIKNfnTJszcF2kybjPn%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db0b8c259d-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:09 UTC	650	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 92 a2 3d a9 d7 6e 20 c1 1f 18 e4 ad 60 c6 1c b3 ce b9 48 93 7c 0a 42 01 86 1f 7f 45 fe 72 d9 f7 1d 9b 06 78 c7 df af 6a 63 bf af 0e 91 3f 60 b8 a1 96 9f e6 7f f4 3b f9 f1 cc f6 08 56 5c b9 02 03 46 40 a7 df d0 f8 20 6b 7c e0 c8 b7 97 e6 84 95 65 a3 79 14 7d 7f 95 26 22 e9 65 12 9f 34 ee 0f a5 fb 2b a5 96 fe b6 3e ed f8 2a 36 f3 71 ce a8 18 fa 87 2d 45 fe d8 e3 59 24 40 7e 4a dd df f0 52 9a 0a 14 17 b7 5d 16 66 27 d3 15 f9 c0 d7 b7 1f e9 f6 15 f3 67 b6 5a 18 c5 fb 8e e4 87 f7 9f eb 87 f1 e5 d6 b5 73 f6 79 8f e3 42 6c 40 2f fa b5 a5 41 83 b1 47 46 be c1 22 8d c8 46 1a a2 7d dd 83 29 6e c1 ff 00 42 c0 7d 71 75 26 9e fd 0f 52 a8 f4 b6 c3 0f e8 d7 5f e7 ea 3f 4f a1 fa 43 16 69 4f 6b 27 87 35 b0 7e 77 97 c1 10 76 5e 9f e7 75 33 a9 bf 4a 9e fc c7 3b 96 81 df df Data Ascii: =n `H\|BErxjc?`;V\F@ k\|ey}&"e4+>*6q-EY$@~JR]f'gZsyBl@/AGF"F})nB}qu&R_?OCiOk'5~wv^u3J;
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 4b 8e f3 ed 81 b1 e5 54 1b e0 fa a7 0f 04 de 82 65 a9 20 dd 3c 2b 6e c5 8c 73 5a d5 93 72 d4 e3 60 64 9a 55 0e ce 31 f7 cd 25 31 80 95 70 54 92 de 30 f4 49 9a 6a c8 b2 6b 0a 25 11 50 9e 82 df 90 c9 b2 5d ac 96 d7 47 b7 b7 33 dd 91 4c 66 2d 03 50 6a 4b 10 6f 19 1e a8 8e b5 21 ea ef 16 fa 05 bf 57 a5 49 19 80 c4 1a 17 94 f9 1b ca d4 82 e1 dd 47 e1 f4 15 69 dc 7d 3c a2 e8 b8 2f 2a fe 20 6b 02 36 25 35 9f 23 3b ea 94 19 67 65 3e 9a e7 03 c3 a7 25 2c 9e 1d 4a c2 66 8f a3 96 61 94 a2 24 31 7c d8 5b 31 b9 55 b2 0f a7 a2 79 16 3c 95 36 15 66 f0 d4 4c 40 6b ac 4d 69 49 82 83 37 e2 06 2a 4a f4 eb b2 eb f6 31 20 eb 9a 27 18 09 08 41 2d b5 19 cb f5 da bf f9 91 23 36 a6 ed 3b 1c 29 22 a4 e6 40 c2 a4 00 4d 3e 44 4c 80 27 5b b2 89 ec 38 78 68 62 36 a8 48 a0 27 37 1d 1a Data Ascii: KTe <+nsZr`dU1%1pT0Ijk%P]G3Lf-PjKo!WIGi}</* k6%5#;ge>%,Jfa$1\|[1Uy<6fL@kMiI7*J1 'A-#6;)"@M>DL'[8xhb6H'7
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 2f 47 75 c5 5d b8 32 75 7e 1b ca f5 ae 21 15 7a ef 0e 9c b1 eb 0c 71 81 c5 47 a1 93 4a de b9 c4 b5 bd 95 41 52 cb cc 5f 4f 54 d4 8e de bf c6 73 f0 0c 5f 0d eb bc 81 41 9f 91 b3 ae d5 c1 d7 18 c8 a0 ed aa 9c d5 10 38 1e 9c f6 e7 e0 78 de 7e 07 8c e3 70 58 f7 73 b6 3a f5 72 36 3c 4e 78 6f 13 9e 7f aa 2f f3 d4 d9 cf c9 b7 3f 48 ef 3d 83 d9 a5 67 c9 0f bb b6 c5 16 c0 e5 f5 ed bb 99 00 aa c5 e6 1d 9c cc 76 7e 9a 7c 85 32 f7 ae f9 dc ea 0b bd 3e d2 a4 e1 be de 37 55 56 4d a1 d0 92 34 42 c1 d5 95 d2 e8 b4 45 42 d1 47 b1 ee 3d 5c 47 55 77 6e 86 03 7f c7 ca de 75 cc 72 6f 37 ca 03 9b ca d8 7f 34 ed 9f a7 73 b9 d8 bd a9 75 41 a5 0b ba f5 d2 4f 0f ea 36 9a 26 f6 7f 67 b3 7d 1f 3c f9 fd 9b fb fe 96 71 e8 da 4d 24 b0 d0 d2 6e 2c 14 ab 28 27 20 12 5d d8 5b 5f 6e a2 6e Data Ascii: /Gu]2u~!zqGJAR_OTs_A8x~pXs:r6<Nxo/?H=gv~\|2>7UVM4BEBG=\GUwnuro74suAO6&g}<qM$n,(' ][_nn
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 56 d6 d9 5b e7 9f 1f 16 34 e7 aa 73 d7 88 c6 78 f1 c6 0f 24 ae 92 39 e3 96 3a f9 bd 43 a5 3c be 63 72 14 d4 b5 f7 c6 d4 d8 d6 6b 6a 7e d7 7d 87 cf 05 52 8d 8c 97 63 43 0c 69 52 aa 79 06 2f 54 7c f2 c5 83 ad 12 6b 1c 95 13 09 91 95 02 8b 29 b3 c7 ee 54 ed 49 6d 6d d2 69 b2 ce 82 e4 82 30 b6 63 3c 2b fd 6e 7d b6 ba 7b bb 25 78 76 a7 6b 8e cc 6d 2b e5 bc 91 85 1e d8 7d dc 2c 0d fa 86 dd 86 13 ea b4 06 9e d1 59 9c 29 6d 3a 9b 1d 71 1b ba 67 4e 8e fc 5b 0a 22 7e 28 09 53 d3 56 57 0a 3c 37 c3 86 26 52 f7 ef 3b fd 79 54 d6 b3 e8 5d 29 16 94 d6 72 c9 4f ad b1 80 1a 88 4a cf 3b 93 92 20 2f 94 e1 09 5c 75 b0 63 5c 4a 44 71 eb 08 99 e7 11 65 42 e8 99 30 20 cd c2 ea 6a ab 1c db 2c b3 5a fd 05 33 62 3e d4 66 39 96 25 b8 ab 06 f8 27 19 dd 7a 6c d0 5a 1a d6 15 6e 90 89 Data Ascii: V[4sx$9:C<crkj~}RcCiRy/T\|k)TImmi0c<+n}{%xvkm+},Y)m:qgN["~(SVW<7&R;yT])rOJ; /\uc\JDqeB0 j,Z3b>f9%'zlZn
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: b5 f5 3f 63 bd dc 94 61 34 a6 7f fd 35 15 45 dc 9b de 6c ab 32 f8 b1 88 12 60 9a ef 4c dd 65 d5 95 5c cf 85 4b a7 83 fd 55 40 de d5 d2 b7 e0 80 88 18 0c 6c 9d ed 77 62 b9 05 12 83 74 44 ec 97 6d f7 19 b4 e3 da 11 62 5e 69 b4 63 d5 58 d5 fd 27 bb 6c eb 31 39 25 b5 73 6a aa da d9 9e e9 25 49 91 91 55 db bc 3a 94 0e c8 a6 da 6a ff 00 d8 e0 ae be 7d 1d 22 c7 55 a6 85 bf 2b 6f 31 14 fa e1 f5 83 b8 aa 4c 95 11 3d 85 93 d2 f5 67 62 d1 3b f4 dc 08 56 3a 5b 30 e1 79 16 d0 c6 9c 05 84 2b 2a 9c 53 29 b3 75 8a 4a 05 27 fa ba 4f 66 07 ac dd 0d 5a 3d 7f 73 17 14 d5 e4 0e 78 84 8e c9 39 67 d7 5e 16 5f aa c5 25 0d e4 74 a1 dd e9 65 b6 5a a9 5d 0c dd 7c 6c 66 58 92 d0 c3 aa 9c 49 52 77 44 92 43 f4 44 cc fb ba b6 44 f9 d5 08 3e c8 bb 02 5d 6f 99 76 5a 87 1f 9b 0e ca f2 ea Data Ascii: ?ca45El2`Le\KU@lwbtDmb^icX'l19%sj%IU:j}"U+o1L=gb;V:[0y+*S)uJ'OfZ=sx9g^_%teZ]\|lfXIRwDCDD>]ovZ
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: cc 06 bf 19 6b 18 57 2a e7 d6 88 54 71 cd 19 08 a2 99 2c a8 6d 7d 6c 72 56 72 e2 aa 20 64 75 5c 2a e8 5b 0b 82 32 0a f6 51 c1 27 ab 73 c1 30 2a ed 16 e9 8c 5a 29 d4 20 6d 08 90 c9 e3 0b c7 0f 7f c7 10 52 c6 16 1f 3d 57 f7 43 35 b6 91 5b d9 24 3e 8a ef 3c a4 67 c6 d0 4f 9a bc dd 6c b1 df 85 26 69 10 3a 4b 41 6f 28 cf cd d5 18 43 b0 84 39 a6 e7 ea b0 f9 bd 79 31 3c ed 1f fa a3 46 6a 38 cb 07 c9 f5 31 4a e9 60 92 a4 33 5f 28 86 52 c9 79 08 c9 c3 a1 26 d6 89 d6 a3 b5 df 0f db e4 22 59 17 95 70 0d 5e fd 05 dd c1 e9 17 b4 d3 5c 5a 27 c2 3c 6a e7 46 cf 3c 3a 25 92 6b 21 d9 08 04 48 ea ca a8 bd 7c c0 cf 66 36 3f 67 c6 df 8a 0f 8d ff 00 49 f5 a8 58 81 16 e5 0f 1b 0c a7 5a 11 9e a9 cc 57 65 0b 8e d7 68 4e 90 59 6e 5f 68 a6 9f 52 27 c9 96 8f c3 17 40 8a 87 42 f9 16 Data Ascii: kWTq,m}lrVr du\[2Q's0*Z) mR=WC5[$><gOl&i:KAo(C9y1<Fj81J`3_(Ry&"Yp^\Z'<jF<:%k!H\|f6?gIXZWehNYn_hR'@B
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 30 55 ef b4 62 3e f4 59 43 71 e3 1e 4f ff 00 21 57 61 1c 90 ea b2 61 be 6e a2 d6 f4 f1 15 b9 da c2 06 77 3d 88 d1 18 4e 89 0e d8 e1 40 b2 67 86 0a d3 21 db 84 ef 15 3e e7 a8 f5 3d d5 b4 ca 67 52 11 99 0c d2 5f b0 57 94 8c 92 45 6e e2 c7 9d ee b9 4c f0 04 9f 9f b6 48 69 f5 58 66 17 5a 2d 4e 3a f3 f7 c0 8a 5e c8 97 15 63 44 75 58 a3 7f 51 24 dd c6 72 03 f2 cd ff 00 d6 7a b3 ac 56 5d 13 b7 5a f4 53 dd 91 41 9d 93 0b 27 7a 76 56 b4 06 d1 8f 29 67 53 b8 26 d0 30 32 55 73 5f e0 ff 00 60 bd 7f 8e 8a 0b 16 27 13 58 46 56 62 eb 19 21 20 c0 39 cf 91 24 07 6b 2e 5d ff 00 9d 9b da 4f 6a 9d 44 b5 09 a9 0e 04 ea 15 f3 34 50 c5 98 e3 60 a1 83 06 94 45 bb 25 4b 84 2b b7 96 02 4d 5f 4a b1 3c 12 0b 09 0c 89 4a 76 ac f2 c6 3f 06 5b 3d a0 a8 d8 58 d4 b4 01 0c 6c 0f 2d 1e 48 Data Ascii: 0Ub>YCqO!Waanw=N@g!>=gR_WEnLHiXfZ-N:^cDuXQ$rzV]ZSA'zvV)gS&02Us_`'XFVb! 9$k.]OjD4P`E%K+M_J<Jv?[=Xl-H
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: b1 4b 62 27 05 65 40 3d 57 9e ac b4 66 59 4c 28 52 13 2b 98 55 8e e6 58 cb 9d 8a cc 79 66 09 b7 27 dc f3 81 9e 98 b0 c6 31 fc ff 00 97 f4 56 92 be de dd be ff 00 6c 31 74 6a e6 35 90 12 06 e5 fc 45 65 65 6c 03 ec cb 8e 0f 27 aa 15 68 de b5 15 4a df b5 3b 92 64 8d cd 57 6a 84 5d ce ec 71 c2 aa 8c 93 83 9e 00 04 90 3a d1 68 d9 f0 c3 9d 47 49 a8 b7 b5 7d d0 0d 37 54 9e ca f6 b4 e4 9b 02 cd 9a 15 96 02 b2 df 48 9d 5d 6e ce cd 0d 18 1c cf 0c 12 4e 12 48 bc 30 ab 4b c4 16 75 7a d0 b5 ad 4b 46 b7 37 64 df d4 62 5a ad ab 58 8a d0 a5 67 cb a6 77 24 f8 6b a1 6d 22 49 d9 56 9a 38 a2 77 52 f8 ea 97 84 35 39 e4 b4 6e 61 be 20 e0 4b 0c ee 93 49 bc c7 39 9d 0b d4 99 9e 39 31 22 bf e1 87 57 59 83 05 08 d9 8b 41 14 f4 2d 43 48 ac 77 8d 4e cd 6b 56 ac c7 7e 39 ed 4a 94 d6 Data Ascii: Kb'e@=WfYL(R+UXyf'1Vl1tj5Eeel'hJ;dWj]q:hGI}7TH]nNH0KuzKF7dbZXgw$km"IV8wR59na KI991"WYA-CHwNkV~9J
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: d6 a3 18 a1 3f 9b 70 9a 22 98 2d bb 76 f1 c7 03 f5 e9 ac 03 7e ac 21 73 15 88 cc 4e c4 e3 6b a4 79 8c 8f a9 38 da 7d 38 fd 3a 92 ac d2 4d da 86 36 91 9b 80 aa 33 ff 00 a0 3e e4 81 f7 ea 5d 1a 4a ea af 66 dd 68 59 f1 f8 2a dd e9 57 d3 1b f6 7e 18 fe 4e 7a 5d 25 af 50 89 a2 98 4b 1c 64 c0 6c 46 8d f8 33 2f 3d b9 17 d4 ac a8 c0 e4 67 04 7d b9 5d 2b 55 a3 7a 16 f8 47 9d 22 96 36 32 c3 89 13 6e e5 c9 e3 cc 30 07 20 8c 8e bf d5 ad 46 7d 36 fd b1 b4 76 e6 b2 b0 b6 ee 49 8a 5c b3 32 60 92 59 8f 6d 54 8c 93 e6 e1 7a 69 dd c2 99 06 d9 08 f3 0f 60 41 e9 98 b1 cf 52 7a 67 fc fb 75 21 f3 75 73 c0 7e 21 af 01 79 74 ab 6a 53 25 f0 bb f6 8f ab 6c c9 03 ef 8c 75 5b c2 76 25 45 94 93 b0 ba a3 e1 4f e1 9c 6e 2c de a7 60 07 3b b1 d4 e2 95 42 62 ae bb e1 85 25 ef cf 36 59 3b Data Ascii: ?p"-v~!sNky8}8:M63>]JfhY*W~Nz]%PKdlF3/=g}]+UzG"62n0 F}6vI\2`YmTzi`ARzgu!us~!ytjS%lu[v%EOn,`;Bb%6Y;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50299	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	698	OUT	GET /xxrz/250x400/793/5e/87/5e870a75dad1edbca0a3c113ea470ad3/5e870a75dad1edbca0a3c113ea470ad3.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:10 UTC	716	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/jpeg Content-Length: 52963 Connection: close Last-Modified: Fri, 26 Apr 2024 17:03:06 GMT Vary: Accept-Encoding ETag: W/"662bde4a-834e" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1784 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S7rQ9ayO1Xz6LvNmbUX2h7zmJfiee08PDM6jd3AV78OMTwqm5OCJw1FO4yPfrA4ktCiMjvCmlWPIqEsHh3VaZCrA7sF%2B0kTiBYSvyhWSQFZ5X6XsPtxxeSJo0MWXVQKDNkd4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8daf880a540-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:10 UTC	653	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 72 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCr"
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 8a f9 7e f9 8d f2 b4 ae 4f 3a 23 72 0e 61 28 88 94 d8 36 87 97 2e 8f dd 56 7a 45 60 74 5a b8 6f 91 95 c8 b0 e9 46 ef 07 a8 49 76 b3 ad 0d 48 24 a6 f0 ac 7d 8b 0e 55 04 14 b4 08 24 1a b4 0c 24 37 2d 38 b8 46 28 da ae e4 df a9 51 4a 0f cf b7 6a c7 95 93 67 22 10 98 8c db c4 8e 31 ab 25 5c 3b f2 5e 89 95 20 75 c5 9b ce 91 a9 a3 a6 ae b2 fb 16 b9 98 94 c5 e9 ce 76 be 87 2f 29 1e ee 3c fc 67 31 ed 99 d2 7c 83 3c 94 8d 91 e8 b8 46 33 2b b0 a9 a9 f2 32 fa 8e 36 ac b7 5f 06 bd ac 6e ea 42 ad 71 d8 27 cc ea dd 76 ab 57 ce cd 47 ec 7a f5 e4 d8 a2 2e e1 b2 bb 31 d5 78 81 7c 64 37 3f ce 41 e1 fa 4e 3a 6a e8 6d 66 b9 bd 3b 64 f4 0e e5 55 a6 df df ad be 41 aa da 91 83 b9 2b 64 ad f9 21 91 93 71 42 eb a6 5c 1d 30 a2 64 41 1d d0 44 73 d4 08 d7 40 d4 2a da 8d 91 a0 d0 dd Data Ascii: ~O:#ra(6.VzE`tZoFIvH$}U$$7-8F(QJjg"1%\;^ uv/)<g1\|<F3+26_nBq'vWGz.1x\|d7?AN:jmf;dUA+d!qB\0dADs@*
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 42 62 5a 6d ab b2 48 c7 61 46 d0 02 ed d9 c0 d2 88 c8 21 71 bb 08 62 bd f1 77 af da d5 a6 ea 2a 2d 18 5b ac 23 54 9c 86 ac 0f ed 3b 71 b9 89 0e b2 e7 f9 55 0c a1 94 ed b4 06 40 dc 8d 6e cf a4 bc 1a cb d5 ad 24 85 56 d1 c7 33 8b 85 77 56 8c 9a 04 84 73 04 54 8a 6e 76 cc 94 65 75 ee cc cd 06 1e f9 69 d5 e3 04 cf c3 ea ab f6 e5 11 c2 74 10 8b 48 cf dd 9f 57 78 22 0e 89 f6 2b fa b3 2c cf b4 22 80 bd 34 8f c4 62 f5 02 1e 96 04 ed d5 a4 ee ac 70 46 65 9b 1e 02 fe 51 8d 9a f3 ee b2 25 d3 8d 75 31 66 bd 47 4c cc 19 4d 7b 42 d0 27 dd 09 cf ca a3 a9 ba dd 16 1c fd a0 2e a1 71 dc 48 d9 33 4d bc 4b 09 11 cc 7b 13 17 a9 a6 55 55 e0 95 5a 1c ff 00 a2 b6 54 74 10 59 31 b8 ce 17 64 cf e7 48 8f 93 87 33 16 bf 97 34 79 60 ec f7 02 99 02 92 28 37 8f 09 25 58 6e 33 95 71 0e Data Ascii: BbZmHaF!qbw*-[#T;qU@n$V3wVsTnveuitHWx"+,"4bpFeQ%u1fGLM{B'.qH3MK{UUZTtY1dH34y`(7%Xn3q
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 56 fa f5 fa 78 4b bd 0a de 9c 25 d3 52 76 23 be cd cb 7f 02 64 3b 50 be d6 3a 37 39 6b 60 1f 59 7c 37 05 28 38 2b 0c e8 9b 6b b6 fb 8c b8 aa df 36 b2 3f 38 61 33 71 af 24 31 13 f1 1c 8d 8e f4 be ad f5 c1 48 0f bf 4c 4c fe 64 8d 85 13 21 55 dd 5a 3e 4d b7 d8 8a 6a cc ec 15 24 67 e9 da 67 24 f0 47 13 c1 9b c4 f7 43 39 48 ea cf 33 6c 78 a7 65 1c 4e 4f 0b 30 43 39 37 3c 2d 8e c5 ec a6 33 1f 76 96 5c 1e ab 6f 7e 8c db 5d bf 0c 3e 38 a7 04 60 40 ea 33 78 8f dc 34 a0 44 b7 b5 19 bb 28 23 69 63 92 a9 b1 43 5c f5 0d 73 54 31 13 4e 55 31 b1 63 6b 65 33 d6 bd c5 2e ae c9 d7 b1 11 d5 ce 45 94 e9 8e d3 4d 83 b4 c9 f0 d6 19 e0 e9 f9 5c 6c 54 08 c2 e5 47 15 83 80 25 b1 94 ca d4 86 1e aa ba 33 4b e9 04 4e cd c3 c7 6d 44 6d 2b 71 da b3 01 18 ae 3b 54 e4 7e 3b da 6f a6 2f Data Ascii: VxK%Rv#d;P:79k`Y\|7(8+k6?8a3q$1HLLd!UZ>Mj$gg$GC9H3lxeNO0C97<-3v\o~]>8`@3x4D(#icC\sT1NU1cke3.EM\lTG%3KNmDm+q;T~;o/
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: e7 39 60 cc d3 55 5f f2 84 3c 9a 06 71 5d 5b 04 87 5e bb f0 52 1f cd 89 13 29 22 3a d3 f4 b5 ac 81 c5 96 b4 f0 d7 86 bb da b2 2d 1d 68 b3 65 66 c5 8e 2c 2d e9 85 f9 63 9d 96 52 2f cd e0 66 e5 32 2e 2e 38 68 7f b4 8c 35 13 32 b0 fc ac b2 65 55 b7 35 99 1e 9d 38 a4 87 21 52 68 4a ac f5 2c 33 84 52 46 4b a9 e4 73 0b f5 9e 9d a3 7d 9e fe 53 3e 8b 27 4c 6c e2 b0 13 70 c7 e5 ad f3 2c 35 2e cc 36 b2 03 36 4f 3a 3a 27 f5 e9 d7 dd 1e 2b 27 1f ce 78 c8 6e 7c 51 8f 11 c3 c7 aa ac 2b e9 8b c9 b7 db 2a 4d b9 f2 8d fd 86 16 fb d1 9f 31 57 b9 0d 69 1d 94 37 21 69 6c 4c 2f 99 ea 19 39 65 1d fc 17 f9 19 6d 43 7a 16 e9 cc 6c ef 0c 35 ab bd db 79 7b ed 8f ad 89 67 fe a1 9c 1f c6 fe bd 33 ff 00 af a5 7c 3c 64 d9 83 24 cd e2 ce d9 b1 f1 71 0e 2a c7 c6 bb 32 66 f4 c6 8f f7 19 Data Ascii: 9`U_<q][^R)":-hef,-cR/f2..8h52eU58!RhJ,3RFKs}S>'Llp,5.66O::'+'xn\|Q+M1Wi7!ilL/9emCzl5y{g3\|<d$q2f
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 32 b2 92 63 97 d6 20 76 76 72 77 63 52 f9 26 66 4e cc 99 1b 33 2f d7 e8 19 93 fd 1f 83 fd d8 46 cd ed c1 1f db b3 7f cb 1b 36 df c3 3f fd 6b ff c4 00 48 11 00 02 01 02 04 02 07 03 07 0a 04 04 07 00 00 00 01 02 03 04 11 00 12 21 31 05 41 13 22 32 51 61 71 81 06 14 91 23 42 52 a1 b1 c1 f0 10 15 24 33 62 72 82 92 d1 e1 a2 b2 c2 f1 20 25 43 53 30 34 44 63 73 74 d2 ff da 00 08 01 03 01 01 3f 01 ff 00 c3 b8 3b 62 e3 99 03 fe 19 26 48 ed 7d 49 da df 8f 1c 4b 5a ca 34 03 f1 6c 43 51 23 ca 0b be 9c ef a0 b6 9c f0 1d 58 d8 32 9f 00 ca 4f c0 1b 9f c8 f3 e5 9b 2e 60 34 be a4 7d e4 61 1e f7 b1 56 e5 a1 1b fa 63 7d ce 16 cd b1 07 6d 88 3b eb c8 f7 6b e5 86 d8 dc db 9d f6 f8 93 a5 b1 9a 2f a6 bf ce b8 c8 25 d6 fa 02 2c 77 f3 c2 76 6d dd f9 4d 7c 60 5e e7 d3 0b 3c 52 9d Data Ascii: 2c vvrwcR&fN3/F6?kH!1A"2Qaq#BR$3br %CS04Dcst?;b&H}IKZ4lCQ#X2O.`4}aVc}m;k/%,wvmM\|`^<R
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: ed c9 75 bf 76 da db d7 bf 06 9b 34 f9 9d b3 1e 7a 6f f5 e3 83 51 0a 1a 28 e3 b7 5d fe 55 ef bd dc 68 bf c2 b6 fc 97 be 27 88 4d 14 91 9f 9c a4 79 78 fa 1c 2f 52 e8 7b 48 48 61 dd 6d 3e ec 48 f2 22 75 37 ff 00 6c 48 ef 24 cb 1c 9c 8d fc 8e 98 8c 90 2c 79 62 74 be 97 db ef b6 2b 2a e1 a6 20 c8 6d a7 c4 e9 8a 2a c8 a7 02 48 f5 f0 fe ff 00 db 10 cb 99 34 c4 a4 db a8 75 ff 00 6c 51 12 b5 12 ae 6b 66 37 61 e2 48 c7 13 78 8e 44 05 4c 97 d0 9f 1b 7d 98 e1 54 3e f5 56 84 af c9 a5 9a 4f e1 db e3 f9 2e 06 16 a8 86 1a fe 34 c2 b0 65 0c 0d ee 31 c5 69 99 2a 56 78 fb 13 6b 25 b6 ce 37 3e b8 19 b2 e2 6b 47 2e 76 c0 a9 8c ae 60 47 ae 27 af 58 d4 96 71 6f 3c 54 a4 9c 76 a4 f4 27 2c 71 5f 52 34 27 6e 58 8d 2b 38 2c a0 c8 81 a9 4d bb 26 e4 5e c0 ee 06 d8 a3 e2 74 e5 01 ce Data Ascii: uv4zoQ(]Uh'Myx/R{HHam>H"u7lH$,ybt+* mH4ulQkf7aHxDL}T>VO.4e1iVxk%7>kG.v`G'Xqo<Tv',q_R4'nX+8,M&^t
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 4f b8 fd 5f f3 8c c3 e0 41 f8 e3 82 d2 74 95 2a 48 ba c6 33 b7 98 d1 47 99 27 4f 2c 71 aa b9 2a ea a2 e1 b4 bd 63 9f 29 b7 39 2d ad fc 17 ef c7 0e a3 4e 19 48 94 f1 d9 a5 61 79 64 fa 4e 40 fb 36 03 96 3d a9 d6 9a 99 b6 cb 33 0f e6 43 fd 31 c0 a7 48 ea 17 2e 9a 29 63 f4 9b 3a fe 3d 71 9b 53 e9 8e 33 27 45 c3 ce b6 2d 2a 28 ef d2 e7 12 c9 9a 46 3c cb 1f ac e2 9c 5a 08 14 fc d8 63 5f 82 81 f5 e2 79 0c 50 c8 e2 da 21 3a ec 7f 17 c2 49 25 25 4a 71 28 93 2d 3c 93 c9 14 81 74 50 d7 eb a5 b9 2b 03 99 3d 46 38 8a 89 02 54 47 d6 49 14 11 6f 21 97 fa 7a 63 86 21 f7 f8 ce c0 66 26 fd d9 75 c5 0e 56 a9 e9 57 e7 c7 70 7c 09 03 fb e2 a8 fc a2 0d ba a7 ee c7 11 91 6a 78 7b 35 83 3a ca b0 3d fe 63 06 e5 cf 35 ac 6f cb c7 11 b8 e1 3c 35 a6 da 69 b4 8f be f6 b2 9f e1 17 38 Data Ascii: O_AtH3G'O,qc)9-NHaydN@6=3C1H.)c:=qS3'E-*(F<Zc_yP!:I%%Jq(-<tP+=F8TGIo!zc!f&uVWp\|jx{5:=c5o<5i8
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: aa 97 8f b5 b7 46 74 e5 7e cd fb f9 e0 70 2c d7 6a 86 32 13 da 55 b9 1f cc e4 9c 25 2c 50 c3 d1 8e 8d 15 35 0b da b6 dc 80 3f 1c 49 5b 0c 57 f9 c7 c7 ee 45 b9 bf ef b4 78 a8 e2 27 52 91 db f7 ac 3f c2 bf ea 66 18 96 ae 79 88 ce e4 81 d9 5f 9a bf ba a2 c0 5e da db 7c 53 71 1a ba 63 68 58 80 c4 5d 4a 86 52 74 eb 58 83 af 8f 8e 22 af a8 53 17 bc d4 d1 bc 8c e9 9a 1b 05 78 d4 9b 31 bf 78 f0 18 96 b5 26 82 38 16 6b c6 99 af 91 be 99 d7 51 df 97 96 b8 99 a9 32 45 2b 9c a1 9b 2a b9 06 c0 9b 1d 6d b6 d6 1e 38 5c 92 2e 65 60 ca 79 db 71 cc 61 b8 45 2b 36 6e 8c a9 3a 90 8c 40 be 98 5e 1f 91 7a af 75 d0 08 e5 57 96 31 e1 90 c9 94 fa 8c 41 46 90 b6 60 91 ab fd 24 8f 28 b6 97 b0 b9 b6 2a 29 63 a8 49 01 5d 58 6a dc f7 0c 0d b6 3a eb ad f0 78 54 79 72 b1 66 be 97 c9 12 Data Ascii: Ft~p,j2U%,P5?I[WEx'R?fy_^\|SqchX]JRtX"Sx1x&8kQ2E+m8\.e`yqaE+6n:@^zuW1AF`$()cI]Xj:xTyrf
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: b4 9c c2 d3 9a 72 00 9d e8 02 2f cf 0e 96 d2 9b cd c1 69 6f d5 d2 b2 31 7d dd 97 4f 4e 85 53 1a 64 fe 66 fa 8e 83 54 ce ce 19 e6 80 7b f8 c2 22 0a 63 a5 aa 38 a2 cc fa 05 e6 24 76 a7 34 b5 53 6d b7 4c 75 7d 51 00 62 b4 aa ba ca ae c9 bb 23 b3 7f 41 04 2a 6f d5 bd af 1b 95 c6 f0 71 83 de 10 63 09 92 ae 68 29 f1 88 54 4d dc fa 5e c0 db c6 ff 00 4f fa 9b 13 7a a9 d5 9c 95 06 9b cf 25 a4 d5 14 69 1f a9 db 2d e6 6e e8 b2 72 4e a6 1c 08 56 4c c1 b9 68 b5 25 86 9b b1 a7 87 16 ee 57 03 39 ad c4 2b 19 ab 01 11 6b 82 12 31 bc 66 88 94 29 6d 4a a8 c2 02 a6 1d 0c f1 ca cd d3 76 fe 0b 4d 70 7d 5b 23 06 5d db 77 e8 a9 b6 d9 8d d9 ab 01 51 8a 8c 9d fb d5 7a 45 bb 40 6e bf d1 30 90 43 bb 0f 22 81 82 13 5c 66 7e e0 6e 77 a8 08 18 4e 74 f0 55 6a d9 6d ac 87 79 4f 91 fd ce Data Ascii: r/io1}ONSdfT{"c8$v4SmLu}Qb#A*oqch)TM^Oz%i-nrNVLh%W9+k1f)mJvMp}[#]wQzE@n0C"\f~nwNtUjmyO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50290	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	623	OUT	GET /media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%20DeFi_36x36.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:09 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/svg+xml Content-Length: 2885 Connection: close Last-Modified: Mon, 20 Jun 2022 12:10:07 GMT ETag: "8811878ee283d7a3beadc5b9af9eb36e" Cache-Control: public, max-age=36000 x-amz-version-id: dCpt0.cbpUpCz320sjVOeOcK0LSHnNRN X-Cache: Hit from cloudfront Via: 1.1 8f99d698624c0704470547731241e282.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: jKBe5DTaisbx_CJkQXaXI_4wWohf_9Blc5w4booHKpTw1UacLksC3g== Age: 20513 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:09 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8db0cf267ea-MIA
2024-04-26 18:33:09 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 33 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 2e 33 33 37 2c 36 2e 33 35 2c 31 2e 35 36 2c 31 32 2e 38 34 2c 37 2e 31 38 2c 31 36 2e 30 38 35 63 30 2e 34 37 36 2c 30 2e 32 37 39 2c 30 2e 36 33 36 2c 30 2e 38 39 32 2c 30 2e 33 35 37 2c 31 2e 33 36 38 63 2d 30 2e 32 37 37 2c 30 2e 34 37 32 2d 30 2e 38 38 31 2c 30 2e 36 33 34 2d 31 2e 33 35 37 2c 30 2e 33 36 34 0a 09 09 43 33 2e 31 33 32 2c 32 39 2e 30 34 33 2d 30 2e 31 35 31 2c 32 31 2e 36 38 37 2c 31 2e 33 36 35 2c 31 34 2e 34 39 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 33 2e 30 30 34 2c 33 34 2e 32 34 39 63 2d 30 2e 35 32 38 2d 30 2e 31 36 33 2d 30 2e 38 32 33 2d 30 2e 37 32 33 2d 30 2e 36 36 2d 31 2e 32 35 73 30 2e 37 32 33 2d 30 2e 38 32 33 2c 31 2e 32 35 2d 30 2e 36 36 0a 09 09 63 36 2e 39 31 36 2c 32 Data Ascii: .337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364C3.132,29.043-0.151,21.687,1.365,14.49z"/><path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66c6.916,2
2024-04-26 18:33:09 UTC	898	IN	Data Raw: 3c 67 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 35 22 20 64 3d 22 4d 39 2e 39 35 2c 32 31 68 31 2e 37 33 35 63 31 2e 38 35 32 2c 30 2c 33 2e 32 31 33 2d 31 2e 32 39 32 2c 33 2e 32 31 33 2d 33 2e 30 31 37 63 30 2d 31 2e 37 32 36 2d 31 2e 33 36 2d 33 2e 30 31 38 2d 33 2e 32 31 33 2d 33 2e 30 31 38 48 39 2e 39 35 56 32 31 7a 20 4d 31 30 2e 37 34 31 2c 32 30 2e 32 36 0a 09 09 09 76 2d 34 2e 35 35 36 68 30 2e 39 34 34 63 31 2e 34 35 33 2c 30 2c 32 2e 34 31 33 2c 30 2e 39 37 2c 32 2e 34 31 33 2c 32 2e 32 37 39 63 30 2c 31 2e 33 30 38 2d 30 2e 39 36 2c 32 2e 32 37 37 2d 32 2e 34 31 34 2c 32 2e 32 37 37 48 31 30 2e 37 34 31 7a 20 4d 31 37 2e 38 33 38 2c 32 31 2e 30 38 35 0a 09 09 09 63 30 2e 38 38 34 2c 30 2c 31 2e 35 33 2d 30 2e 33 39 31 2c 31 2e Data Ascii: <g><path class="st5" d="M9.95,21h1.735c1.852,0,3.213-1.292,3.213-3.017c0-1.726-1.36-3.018-3.213-3.018H9.95V21z M10.741,20.26v-4.556h0.944c1.453,0,2.413,0.97,2.413,2.279c0,1.308-0.96,2.277-2.414,2.277H10.741z M17.838,21.085c0.884,0,1.53-0.391,1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50297	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	698	OUT	GET /xxrz/250x400/793/f0/6b/f06bf9152cca69ecc543586569563320/f06bf9152cca69ecc543586569563320.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:09 UTC	723	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/jpeg Content-Length: 64208 Connection: close Last-Modified: Fri, 26 Apr 2024 14:12:31 GMT Vary: Accept-Encoding ETag: W/"662bb64f-109af" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 4123 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PC%2BmxbgYDDL7XOP0WoRdx0DbZFYmCQAJB%2F9oxANPBLF0JHgOEky0U3EIysFfazN2OCbiSXx1owdRIQVh%2FEfbzFFD1TIwF5RGpHkcVSg6JEhJHxabzlvriOzM1VVFfhs%2F1eCS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db0da80a32-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:09 UTC	646	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 74 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCt"
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 88 d4 2c df 15 33 68 e7 cf 20 66 69 f4 a9 5f 59 29 a2 95 69 1f 5a 49 f9 1c a7 a7 ad 6d c7 df 3d f5 f6 79 ef 9d d8 c9 3d b1 8a 63 73 8c 60 5a 61 a5 c3 04 ba aa 76 bb 75 2e e7 de 66 2d d3 e6 66 77 7b e7 be 77 50 45 44 dd 6d 3b 39 cd 36 c1 54 25 06 b2 2c d0 3c 20 86 83 d0 2b e0 29 af dd 04 13 b8 7e 7c c9 e5 61 e4 88 62 ad 9c c2 87 6c 4f 13 92 b5 96 90 cb 5a d8 4f be 7a 63 9f 33 df 3b b1 3c 67 19 ba 8a 24 68 1f 14 26 8f 10 b2 bd da 28 b3 64 cd ec f7 13 4a 50 f4 b9 99 92 97 be 7b e7 75 3a 53 7d c9 d3 e3 0c db 58 9a 59 26 1c 44 a4 08 e0 70 6e 03 40 90 ab cb 75 5f 76 1d f3 b5 17 b2 01 9d 90 a0 72 dd e8 67 1d 71 b9 7f 20 58 a9 10 8d b4 e0 f7 e7 d7 45 fc c3 c2 ca a2 25 23 80 d3 e8 4f b3 cf fd 24 cf 0e ee a5 57 24 a3 23 d8 a4 f9 9b 26 ab a1 e6 4e d6 c7 37 c5 79 4e Data Ascii: ,3h fi_Y)iZIm=y=cs`Zavu.f-fw{wPEDm;96T%,< +)~\|ablOZOzc3;<g$h&(dJP{u:S}XY&Dpn@u_vrgq XE%#O$W$#&N7yN
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 94 a6 ac 8b 17 ae d6 a1 d5 f2 2d 64 9a df d3 21 7e 67 3d b2 e3 9b f3 0c a0 e8 b5 57 11 e9 0e 39 d9 c2 61 6f b5 82 94 b3 08 06 f0 56 e8 b5 46 40 d3 d2 dd 5b 42 da 7a 1c f5 3e 7c bc b1 06 1a 55 27 8a 19 48 2c cf d5 e5 c2 4d 37 01 7f 40 47 51 fc c7 e3 91 86 75 e1 70 94 e9 f5 f5 c9 ff 00 93 eb 91 34 d9 40 68 ee b7 bf 24 3c be 02 d8 5b 3c e4 4a 01 28 3e 21 fa da fb 37 b9 9e 54 3a 5b c6 9a af 59 e2 b7 22 65 7b b3 b3 a9 15 7f b0 ea 3f d8 4c 62 8d 90 0d 00 f6 b7 4f 60 dc 93 b9 20 4f 84 64 3b 4f 1e 16 71 e9 a9 28 d6 43 1e 8b 27 37 f0 15 a1 91 1a e1 35 d6 8a 77 29 81 23 ae 21 d3 d7 49 54 4a da b8 f3 d5 ef 36 dd 36 c0 ed 48 e9 1c 79 8b 26 2a 26 a6 86 2f f3 99 8a da ea 07 9c 2f ae 29 b9 1b 62 8e d3 9b 32 c9 b7 36 5d 7d 01 7c 60 44 b8 0d f8 54 b7 31 9e 57 c6 eb ec af Data Ascii: -d!~g=W9aoVF@[Bz>\|U'H,M7@GQup4@h$<[<J(>!7T:[Y"e{?LbO` Od;Oq(C'75w)#!ITJ66Hy&*&//)b26]}\|`DT1W
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: cc e1 b7 ea a3 e8 49 84 9f 06 83 2b da fd 29 e8 a9 2a b1 3d 90 45 17 23 08 96 48 6f fa 6e d6 07 46 7e 89 12 63 c5 6f 56 ee 2d 7d 7c 1d 53 39 cb 2b 76 5d e1 63 3a e2 ae da 5f 48 a3 6a 05 b4 3b 01 fa 77 f5 d5 4b e9 ca bd de e7 1c 4c 5c 5c 2f 84 7f 4c ad 11 36 ac 19 e6 54 20 54 0a e2 54 28 85 8f 0f 7a fd b8 6f cb 1f 82 aa 0e 6b 5d d6 af a3 cb 8d 53 77 77 22 6d 95 8a a7 5f 9a c3 1f d6 a8 af 6a 2a d0 bc 44 95 d6 26 0b 57 aa 08 d5 b7 01 d1 f8 11 20 e7 88 22 fe e5 98 9e e7 51 51 5d 5f 55 fb 12 61 fc 18 fb 55 ff 00 a6 f1 22 ca 8a d7 2d c4 0e 16 12 fa 02 7f 94 d1 03 e5 fc 77 6f 56 c8 a6 49 32 08 b0 9f c7 25 27 3d 59 57 14 1e 57 a1 43 65 f2 81 2d 88 a3 0a d7 20 59 a6 69 5d 44 21 23 e1 2f 95 1f 10 47 d7 55 49 e1 4d f1 5e 1d 55 e7 ff 00 c9 61 fc 1a ca b5 fd 27 87 b3 Data Ascii: I+)=E#HonF~coV-}\|S9+v]c:_Hj;wKL\\/L6T TT(zok]Sww"m_jD&W "QQ]_UaU"-woVI2%'=YWWCe- Yi]D!#/GUIM^Ua'
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 70 e4 50 7a ce 04 ec 9f 4f 14 92 5d 4c 86 11 e6 88 54 be 02 b8 d4 97 18 75 97 91 f4 8c ef 0b 1d ee 16 23 e4 59 1e 40 c7 66 25 b1 3c e7 89 eb 34 9d ba fe 10 35 3d 65 46 bd d5 d6 cd d5 69 b9 0f 91 bc aa b8 a4 bc ce 77 f4 a2 aa 22 97 3d 5d 54 43 2c 07 38 77 c3 e1 0a 58 78 81 a7 7e e7 6f 50 8c 97 69 a1 d8 d6 ed d6 f3 ba a7 b8 a6 ea 8b 3d 88 14 dd 92 d9 fe 2d 20 51 d9 ed bb 8e f9 4a bc 26 26 2f dd a1 71 a4 69 ec 8e e7 2b 10 c4 01 fb 05 36 e9 5e ec 7b f6 46 bb bb b7 52 a4 51 eb bd eb 27 9c db 45 73 b1 7f df b7 99 6b dd da 5a c9 d6 e7 db d8 e1 21 08 9f 60 37 04 0f c3 cc 9e d7 5e 29 ed 25 57 68 40 25 07 20 3c 12 6b b7 79 3b 6e 11 8a aa 23 1f 2e 12 db f5 71 3d 0b 0b e0 38 2d f6 5f 4c 65 79 26 0d 05 7e 6b b6 79 df a3 46 f7 0b e2 36 17 ca 6e bd 36 85 5d c2 da eb a8 Data Ascii: pPzO]LTu#Y@f%<45=eFiw"=]TC,8wXx~oPi=- QJ&&/qi+6^{FRQ'EskZ!`7^)%Wh@% <ky;n#.q=8-_Ley&~kyF6n6]
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 7c 94 c4 87 20 72 f5 bf ea 0a d8 e5 c4 65 51 d4 70 7c e8 4a d0 24 89 c8 24 f1 8e 70 bf 06 57 da 1f 71 4f 51 54 e5 85 f5 8e aa b9 05 8f 3e c2 76 d5 dd 48 78 76 ab 50 26 48 db 9b 68 4d ee 47 e6 79 9a 9f 6b 6b a6 4c dc 9a dd 27 45 1b 22 37 55 04 7e 6e 3e 7c dc 7c f9 b8 f9 e2 6a 5d 6b fb 5a b1 dc 36 bc 3e 5c cd 91 b6 48 fb 6b 9e 60 e7 74 cb df f7 22 2e 32 5c 80 eb 72 f8 88 da 70 2f 48 6d 0b 1f 4e b9 ca 62 63 3f 64 5f 54 55 c1 fb b3 8c 17 a5 64 94 62 ca 25 fd 43 f1 c2 6c 17 73 c4 26 bf bf a9 35 4e 70 7d ab a3 f7 cb 5b e9 56 f4 a5 f4 4d 4f 45 ed c2 75 38 df bd cf 93 56 26 a4 5f 0d 9d d2 12 35 71 d4 bd 55 45 05 9b 3a f7 44 25 47 2c ba 46 0a 54 d7 1a 6f 2c 65 2e 5a c8 55 4b 6e 09 d7 39 c9 01 db 3a 62 7d 99 e7 ad 53 2c 3b 30 20 69 df 22 4c 0a 21 8e cd 2d 6f 62 8b Data Ascii: \| reQp\|J$$pWqOQT>vHxvP&HhMGykkL'E"7U~n>\|\|j]kZ6>\Hk`t".2\rp/HmNbc?d_TUdb%Cls&5Np}[VMOEu8V&_5qUE:D%G,FTo,e.ZUKn9:b}S,;0 i"L!-ob
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: bd fb 3e d8 04 18 06 17 d6 ed 87 11 5a 6e d6 10 dd f8 9f 85 a2 51 04 7e da 3d fe 77 dd 69 b4 2b a5 22 84 50 a2 d5 50 3b b2 ef ac 34 b4 b6 f2 94 94 05 27 ae 02 55 b8 13 6e 5a 72 ee 8c 35 c4 b6 ee 65 0f 58 11 fa 35 f7 f0 80 42 85 52 41 07 78 f3 ce 7f 58 76 9f 5a 25 d4 a0 aa 0d e3 e2 98 68 9e 37 3c 87 9d 6d 54 03 db f0 84 36 41 89 74 75 0f e9 00 7c 3c d8 86 22 a6 d4 a6 19 b2 85 33 af 78 a8 ad 13 df ac 2d 4b 59 24 a8 92 75 24 d6 bd f0 51 5b 8b 2a a2 bc 0f 6d 21 83 4a 6e a4 32 f9 4d d2 ae d1 b8 f6 c3 4e 87 53 98 6b bc 70 3f 67 0f 34 e7 e1 dc fd 2f b2 18 fc 20 ec f8 a6 1b 56 bb 8e 6f f0 f9 8a a8 79 46 a8 49 07 8f cf c6 1b 50 36 22 87 5a ee 3f 3c a1 90 42 6f 6b 8f 9f 75 f7 c2 8e 50 54 74 00 93 ec 89 87 3a 57 dd 5f d6 5f cf 70 8c a7 81 1e c3 68 cb 43 7a 8b 7d 55 Data Ascii: >ZnQ~=wi+"PP;4'UnZr5eX5BRAxXvZ%h7<mT6Atu\|<"3x-KY$u$Q[*m!Jn2MNSkp?g4/ VoyFIP6"Z?<BokuPTt:W__phCz}U
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 91 b4 4f 3b e8 e0 cc 92 95 25 b2 b5 38 12 a0 ac 1b 6e 31 5d 8b c4 66 5c 90 67 0e c4 24 f1 1c 3d 58 6e 2f 83 63 12 be 9d 84 62 d2 0e 29 2e 19 69 e9 5c ed 2c e4 71 28 75 97 99 79 97 d9 71 35 6d d0 95 38 95 e3 1b 79 88 ed 5b 12 38 6a 70 dc 0f 66 f6 6f 01 5c c4 e4 a6 cf ec e4 9b d2 92 0a 9e 9d 6c b7 31 88 4d 19 89 89 c9 a9 d9 e5 b4 80 cf 4f 33 32 be 89 94 86 d8 43 69 53 99 ff 00 94 ed a1 6f 1b d8 6c 6e 55 12 52 73 1b 01 87 c8 e1 98 33 72 ad be 86 5f 96 93 9a 99 9a 78 e2 01 53 0e 29 e7 b1 3f 4b 7d 9c 44 b2 a9 76 dd 65 79 1b 69 ad 61 1b 71 8d a7 09 db 3c 26 63 d1 a7 91 b7 73 d8 6e 27 8d ce 4d a1 e5 ce a7 11 c3 31 09 8c 45 b9 c9 37 10 fb 6d 34 ec c3 d3 73 0d cd 17 59 7c 2d 87 0a 11 d1 9e b4 63 7b 61 8a 63 b8 6e cc e1 0e a2 56 47 0d d9 4c 29 58 5e 19 29 87 26 61 Data Ascii: O;%8n1]f\g$=Xn/cb).i\,q(uyq5m8y[8jpfo\l1MO32CiSolnURs3r_xS)?K}Dveyiaq<&csn'M1E7m4sY\|-c{acnVGL)X^)&a
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 54 1c db 86 62 77 76 70 89 84 07 26 97 9a 80 27 2d 6a ac 95 21 29 14 0a a2 85 6b 5d d1 24 e3 0d a3 31 4b 88 ad 2e b7 3a 41 d8 90 00 a0 d3 f1 6a 7d 91 5a de 31 0f ea c7 92 d0 7c 62 49 6b 4a c2 42 b2 f4 99 4a cd 2b 7a 7a d7 f0 ed d2 0b 8a 4a 8a 49 cd 4d e7 5d 07 0a 7b a1 c6 fa 43 98 ac 8f 60 3d c4 c2 db ab 8b b9 ba 8f 3b fb 48 85 a1 48 3d 61 ed dd f3 c8 d0 ef d2 f0 d9 a1 ed 84 0b 41 87 dc 52 13 d5 4e 63 a7 78 ac 17 1c 51 a2 88 48 e0 35 f0 eb 42 3d 52 2f a8 35 ec 84 3a 6f 5f 8f f1 89 84 14 bc a5 29 40 b6 b2 15 95 6a aa 33 53 ad 54 07 10 e1 36 d5 15 d7 48 96 5a 96 e2 10 96 2c 4d 4b c5 b5 86 db 4a 45 7a a9 2d 37 7a d0 27 ae a3 7a de 90 a4 91 6c b4 03 4e 7b c9 89 96 fa 46 1c 4d 72 da b5 23 4c a4 2a fc ad 78 97 b1 eb 38 dd 05 6e 85 15 15 e9 a2 28 16 69 7b e9 0d Data Ascii: Tbwvp&'-j!)k]$1K.:Aj}Z1\|bIkJBJ+zzJIM]{C`=;HH=aARNcxQH5B=R/5:o_)@j3ST6HZ,MKJEz-7z'zlN{FMr#L*x8n(i{
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 48 3a 53 3e 52 43 54 ac 0f d7 87 d7 fa d6 21 c8 9e 3f ad 73 0f 54 18 7d e7 69 b4 4f d5 03 8b 58 eb 7e 83 e7 d6 d4 91 a2 fe aa fd 78 5a 83 5a e3 91 1e ee 1f 0a c5 29 6b fe b7 97 2f cb 5a 65 78 cd d6 e3 e5 ee a8 df 38 d4 58 8e 23 f1 1d c6 a5 73 1a 16 02 e4 7e 75 81 27 74 a4 f3 b9 f8 d2 9b 8a 3a 8a 96 f9 b8 0a 75 be 97 f7 54 c4 02 41 a9 cb 2e ab 72 bd 3e b8 f8 1a 91 c3 ca 87 8f 01 fb c2 fe 07 d5 87 40 b0 a9 3c 92 fe 1a 9b f7 f9 d6 75 e4 54 df 85 88 f8 1f 9d ab 3d f9 6b fd 64 27 5f 3f 0f 7f 95 35 bf 64 5c f2 ba 5e fe fe bf 3a 92 28 c9 1a a9 bf 87 ca f5 34 3b 80 64 b5 c0 f6 ad d3 91 e9 f4 6a 66 32 46 58 1b 0e 20 6b af 0e 97 f8 d6 07 f4 09 f5 ce 93 87 9d 72 e9 df 52 7b 54 e6 d7 d3 dd cc d6 24 f6 d8 d4 ce aa a5 d9 95 51 01 66 66 21 55 40 d4 96 27 40 00 d4 93 4c Data Ascii: H:S>RCT!?sT}iOX~xZZ)k/Zex8X#s~u't:uTA.r>@<uT=kd'_?5d\^:(4;djf2FX krR{T$Qff!U@'@L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50296	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	594	OUT	GET /media/New%20navigation_Rebrand%203.0/ftse100.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:10 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/svg+xml Content-Length: 567 Connection: close Last-Modified: Mon, 20 Dec 2021 10:04:14 GMT ETag: "a35c32ec06f2a3dd54b0f95c86c6c02f" Cache-Control: public, max-age=36000 x-amz-version-id: wRdhA84KSpeEmWuKCcAcyZX_CnSFJzyq X-Cache: Hit from cloudfront Via: 1.1 dcaec0b05596b42ef5dab9e145ac961e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 4iXn0RNtxcDtvz3Ok5lS1TgqnZznpdzFmHJuFJjTVLlPDpdPWnBtNg== Age: 20513 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:09 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8db081c029b-MIA
2024-04-26 18:33:10 UTC	567	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 63 32 2e 38 33 37 20 30 20 35 2e 35 32 2e 36 35 36 20 37 2e 39 30 37 20 31 2e 38 32 35 43 33 31 2e 38 38 34 20 34 2e 37 35 33 20 33 36 20 31 30 2e 38 39 35 20 33 36 20 31 38 63 30 20 39 2e 39 34 32 2d 38 2e 30 35 38 20 31 38 2d 31 38 20 31 38 2d 39 2e 39 34 20 30 2d 31 38 2d 38 2e 30 35 37 2d 31 38 2d 31 38 43 30 20 38 2e 30 36 20 38 2e 30 36 20 30 20 31 38 20 30 7a 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50300	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	698	OUT	GET /xxrz/250x400/793/25/36/25369637a43bd670ec087ed2046e8737/25369637a43bd670ec087ed2046e8737.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:09 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/jpeg Content-Length: 75568 Connection: close Last-Modified: Fri, 26 Apr 2024 14:11:18 GMT Vary: Accept-Encoding ETag: W/"662bb606-e6c3" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5342 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B%2Bc%2BjVwiHgJAsF8a4nqIETQX5YImbF1AWSiRkYe6dKH5Ao%2Bkm%2FJeRMAehpRInk6ztWpqNGlENTFpc%2FJV6O5sNVckvnshXakF5E1OheLdh5TQUqzDnEbmMy00wdA5H3StgZN0"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db0a29a564-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:09 UTC	643	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: de 4f ce 85 6e c3 f4 e8 c2 8a a5 3a dd 8b e9 1c b9 c9 aa 91 8f d1 53 56 2f 34 e0 40 fd 11 8e fc 1f 3b 69 f7 7c db 6d a1 37 9d 36 eb 29 36 23 66 74 da ed c0 1b 62 85 b0 03 49 82 e5 92 7e 30 96 92 e3 d7 d6 3e 81 4b b3 55 0f 1c c0 2d a9 ca 65 0b 95 6e 45 77 16 d0 7c 3b df 5e 75 16 3b ac 23 af dd 3c 4f 84 2b 08 13 2f 72 3b c0 66 e6 a7 6b bb da bb 8a 8c a4 94 b2 fe 08 d2 db 07 86 74 d6 32 f5 cd b3 9f 71 d8 46 45 46 9d 36 da 5f 3c ef e8 99 31 70 57 a3 49 c1 e0 20 c8 59 48 25 1d 0e 37 71 82 91 86 67 32 61 13 ec a3 d8 84 04 f6 8a 7f 3a 84 97 aa 2e 68 7c 80 2a 88 2a 5d 45 16 2c c9 c7 9c 4c f2 37 2e 80 50 26 a2 38 c2 95 c7 9f 4d 60 bd cb cd b5 88 e0 ac 1b ec b8 41 04 08 15 2d 90 a2 7b 99 cb 85 c8 d3 a1 b4 e0 e0 4c 47 1b 90 10 58 25 46 68 48 2a 5d 42 a4 61 46 3c fd Data Ascii: On:SV/4@;i\|m76)6#ftbI~0>KU-enEw\|;^u;#<O+/r;fkt2qFEF6_<1pWI YH%7qg2a:.h\|*]E,L7.P&8M`A-{LGX%FhH]BaF<
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 3b d8 6a d2 3c fd 20 45 41 dc d7 cd aa 15 c9 b4 e5 aa 98 df 23 e3 64 91 fd 5c 54 dc a4 f9 4a eb 1b a4 f9 e1 99 6a 4a f7 8a 16 a1 4f 41 76 e3 93 80 1f 62 c7 e3 e3 8c ce bd 36 9a df 46 8d 0c ee 8c 9c a1 68 c7 35 f5 79 e3 6f 42 a5 2f aa 89 7b 0b 14 5d 68 81 5d bb 43 8f a5 0f 9b 7f a2 7b 3d 3d ea f9 d3 bf 5f 9e 86 24 5b a5 68 ce ca 96 9a 3e 3e 18 16 ab 4b 00 76 13 4b b2 7a 76 bc de 2f 4d c6 9b a1 e9 19 a5 7c 51 98 29 d2 3d 3d 3a 71 b6 c1 c4 43 94 da 84 3e e9 86 a8 0d a5 b7 cb 91 0a c2 c9 51 43 b5 13 aa 4c 0f 6a a7 4c 8f fb 8e 3a d2 91 89 e3 41 2c a0 9f ac 7d f1 50 b4 4a b5 86 66 ed 42 fa ee df 5d 30 dc 81 01 63 a8 5e e9 28 f9 82 13 a2 a5 ec 96 b9 08 04 23 53 a6 4c 67 0b 98 89 94 c8 5a 06 e8 9b 16 b7 45 1d a4 a8 d8 87 19 ed 21 5c 2c 0d 1f 39 4e 1c 74 72 48 3b Data Ascii: ;j< EA#d\TJjJOAvb6Fh5yoB/{]h]C{==_$[h>>KvKzv/M\|Q)==:qC>QCLjL:A,}PJfB]0c^(#SLgZE!\,9NtrH;
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 32 d7 4d ab d5 25 b3 d2 53 18 31 5a 49 f5 d6 4d 0a 8d 0b 4e 45 03 bb 3d da 41 e3 fb 66 c0 70 a2 f1 37 89 02 43 54 aa ad d1 ad 54 35 b2 07 6f 5f d3 69 2b 33 2d bd e7 46 6e fd 44 68 db 58 ea 2a 0c 3b 9d 89 b3 fa 9b ba 39 a9 6b 5d 3c 7b 4e c3 d8 f2 73 be 8a 77 ac 89 e7 6c ab fd b9 db 9d b9 db 82 19 db 9c 60 07 c0 03 3a 7c d5 f2 17 c9 13 69 9b 38 1a 47 45 4a 4a 37 94 d2 72 b2 4c d8 68 04 2b cb cd 69 4f 78 39 34 7b 08 f5 e4 b5 a3 a9 14 69 b4 e4 2a ed e8 71 c6 b3 dd 8d 10 69 ad 91 6c a0 85 83 2f a5 70 48 9b 62 c4 af d1 68 f5 e6 ba fb 58 6b b8 57 17 fd 9f d4 cd 80 61 35 e7 48 75 41 77 61 db 7a 4d ae d9 5f a7 dd 5d 19 4e bb c1 ca fc c7 bf 3a c7 92 f3 dd fe 1c 67 19 c6 71 9c 60 06 71 9c 65 1b 72 5b b5 e4 3f e6 5b 63 0e 7e 64 b6 28 e0 f5 13 b0 0d 86 df d7 a3 61 b7 Data Ascii: 2M%S1ZIMNE=Afp7CTT5o_i+3-FnDhX;9k]<{Nswl`:\|i8GEJJ7rLh+iOx94{iqil/pHbhXkWa5HuAwazM_]N:gq`qer[?[c~d(a
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 21 5c bb 94 51 46 ce f5 a5 1a 4e ce 70 6a 58 f0 ea 31 f3 96 7a f4 b2 8d 25 a1 37 0a b7 16 e6 90 94 76 e8 22 56 27 bd 31 b0 b9 80 93 3c 9a 12 ac a4 b8 33 78 01 e2 6f 64 c7 48 a2 86 a0 a8 b2 bc 5c 26 75 7d 3b c7 2a d2 aa e2 87 4b b0 31 8e b4 d6 17 93 8b 88 25 b6 da fd d4 fb 53 0c b7 b4 3c 53 3d 8a 47 22 2c 07 6b 92 36 96 6b 0b 7b 20 f9 1f c5 27 39 35 13 2f 5b 81 6f 10 c9 c1 59 3f 7c 83 59 6d de cd d2 60 f0 c9 b6 ab d3 6b 36 7b 6b e8 fd 55 09 dc 65 d3 4d 47 29 a6 ba 5b 75 a9 a7 75 ad 6a e9 72 a9 46 49 d9 5c 4b 9e c5 06 b4 f3 8d 3b ad 21 a4 64 ef d5 3f 68 93 05 ec 11 60 56 60 f0 89 b1 51 37 d2 91 a4 91 57 59 4c c7 d7 2e 93 0f d6 32 57 d7 ad fd a3 59 44 a4 ea 42 66 1d a2 2f 66 5a db 2b e9 4d a8 a3 d9 66 a6 53 b7 e6 77 f8 52 8a 25 82 63 0e e2 ba dd a2 4e 0d 19 Data Ascii: !\QFNpjX1z%7v"V'1<3xodH\&u};*K1%S<S=G",k6k{ '95/[oY?\|Ym`k6{kUeMG)[uujrFI\K;!d?h`V`Q7WYL.2WYDBf/fZ+MfSwR%cN
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: e1 63 d9 48 9b b5 58 27 e5 23 47 b2 7d c8 ee 49 d4 42 84 dd e8 1e a5 3c d3 c2 bb e1 03 ba 02 81 72 ba e8 e5 0d 71 23 c3 89 2e d5 05 66 95 bb 9d 7e 31 58 cd 53 23 b1 f6 62 f1 e1 39 78 9d 9d 38 98 e7 0f 2a 58 2e 5c 8a 09 f6 15 bb 73 f2 47 a0 a3 c6 ad 10 70 dd 03 9d 2e 1f 37 5d 96 bf b5 04 8a 4d 5d a4 b3 37 3d 38 a6 67 b4 44 3f 42 5b e1 cf 9e de 9a a3 21 a4 2e 76 92 6b fd 58 63 18 e6 ca fa 9f b1 2c ba 29 37 ba 59 cf 2f 52 64 a0 84 7d a8 39 8a ee c1 1e 72 01 73 02 b1 76 84 6b d3 4e 95 22 84 b4 cc 49 2e 68 7d a1 1b 3f 9b 06 a8 d5 86 22 d1 7e f9 09 07 0a 2a 84 59 0c 8f b2 4f 1c 16 61 20 d1 cb 28 f7 4a 2e ba c0 2a 48 d8 16 36 68 48 75 27 ef 97 f9 94 21 2a f2 db 4a 59 d2 4b 3c 2b f5 34 bb 70 88 d7 ea 2b da 86 de 54 16 b5 6b 33 04 9e 9f ea 8e cc 2b 49 61 3e f9 17 Data Ascii: cHX'#G}IB<rq#.f~1XS#b9x8X.\sGp.7]M]7=8gD?B[!.vkXc,)7Y/Rd}9rsvkN"I.h}?"~YOa (J.H6hHu'!JYK<+4p+Tk3+Ia>
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: f7 a8 97 66 27 fa 8a 82 e5 68 93 e3 a4 e9 cb f6 84 2a 1e 02 86 47 48 bd 8b 6e 67 a0 0c a5 5e c4 be 49 9b 96 6d a3 fd 02 8f d5 01 0e 03 8e 3b 79 ca 31 3c 75 b7 6a f2 32 8a 07 32 83 c9 18 7d dd 4e 7e a7 df fe fd 5d a3 e3 87 fd c0 4f 1b 88 26 92 e6 f2 2c 41 fb 83 81 44 b0 92 11 88 2e dc e4 93 76 92 00 98 10 92 c0 49 a7 89 48 4a f6 1d 43 92 2c e9 38 56 30 ed 95 6b 12 d9 cd 61 ca 1e 05 b8 f8 55 ca 08 d7 5d 07 19 20 55 0c b4 e9 bf 52 23 c2 d2 c0 3c 0f f7 f4 86 2b f6 42 14 7b 5f 2e 8f 81 e1 d6 ec 6f ce 24 03 8b 2b ce 35 28 02 0d 8a 0c 5e 24 ef bc 3d f1 50 c5 ce 2a 0b 35 4a 92 c0 8c 6b b5 8c 9f 73 82 ae 09 d6 e5 88 e0 ae c7 fb fe c6 04 9f c2 3d ee 1c 7e 1f e4 4c f2 2b 13 ff 00 a9 42 f2 c4 c1 fa fe 01 f1 27 f6 af fd 78 e1 e1 79 92 76 c8 aa 3c 25 c6 27 c6 2a 0d 8c Data Ascii: f'hGHng^Im;y1<uj22}N~]O&,AD.vIHJC,8V0kaU] UR#<+B{_.o$+5(^$=P5Jks=~L+B'xyv<%'*
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: e7 f9 fe 38 89 14 da ea 36 f5 60 44 9f 65 7e 18 9e a7 42 96 37 b5 b9 0e 7d 31 57 5f 34 bc 42 93 c6 96 ef 85 78 9a ec 2e a3 42 73 bb 6f 7d ec 2d 7d f6 c1 a9 93 5f 7d f5 02 bd 13 4f 3f c7 0f c4 98 95 8b 49 60 a5 ac d2 24 7b 0e 8b ad 94 16 3c 95 41 2c 4f 21 88 68 2b 25 a8 8b 8b 48 dc 0e 22 ab 96 65 52 35 ab 95 21 43 86 65 52 bd e3 62 ab b6 ab 5c 62 9e 81 6d 72 b6 ef 05 b8 52 45 cf 8f b8 13 8e c7 44 d9 85 1a 51 42 ca 67 a5 5b 14 24 29 e1 73 52 a0 da e0 5c 83 6e a3 14 fd 9f ae 21 d8 a3 a1 8c 97 3a c3 0d 4a 2d 6d 36 bd ef d0 75 df 19 da 49 4d 4f e7 62 2b 24 01 49 0c 8c 2e ba 91 6f af d1 b7 7a e3 d9 8c f6 18 ea ea 01 56 0e 16 25 43 be ca db dc 01 f9 e5 8c d3 26 8d d6 45 b1 01 c5 b6 36 23 97 5c 65 59 6f 94 9a 96 f2 a1 0a d3 4e f1 68 d2 d2 15 e1 ca b1 92 ed 71 b5 Data Ascii: 86`De~B7}1W_4Bx.Bso}-}_}O?I`${<A,O!h+%H"eR5!CeRb\bmrREDQBg[$)sR\n!:J-m6uIMOb+$I.ozV%C&E6#\eYoNhq
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 92 21 d6 40 0c 06 28 2a 12 24 8d 88 01 24 5f ae 05 c8 16 de f6 1e 3d 0e 32 c8 e0 aa 49 1d a2 47 b3 28 05 ba 0b 0e 5a 49 c6 67 45 c3 55 28 af 2b b0 b4 88 14 2f 0e 4d 43 4a 5c b1 d4 19 40 3a ac 39 da db 5f 19 a6 58 4c 0a 10 b0 90 c6 ad 2a 4a 53 4a c8 09 b0 4b 36 ea 16 db b3 5c 9b f8 63 b1 95 bd ae a3 ed 2e 5d 45 47 52 5b 2b 15 46 5c ce 89 2a 7f 55 14 ae a5 65 99 a2 d4 c1 5d 49 53 1e 95 ef 48 14 1d b1 5f 5f 25 73 c5 12 5d 69 e3 b2 45 17 c8 c8 c7 ab 93 bf 80 1b 01 cc e2 3a 63 0d 22 ed b0 37 27 c5 76 df e3 7c 02 52 44 8d 4e dc 35 1e fb 02 4f cf 13 8f 36 37 e4 6f f0 b6 3b 2b 5a b5 fd 9f ca e6 1d 29 92 16 bd af ae 0b c4 d7 b7 ad 2f ec 23 1f 48 87 fa 04 fa eb 29 3f d3 20 3f 88 07 0c 55 fc a9 1b 7b d9 97 c5 48 b7 23 8c b6 69 e1 7a c7 0e 56 28 e9 4b 08 cf 79 4c cc Data Ascii: !@($$_=2IG(ZIgEU(+/MCJ\@:9_XLJSJK6\c.]EGR[+F\*Ue]ISH__%s]iE:c"7'v\|RDN5O67o;+Z)/#H)? ?U{H#izV(KyL
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 92 68 e1 41 72 ec 17 e2 46 29 de 2a 5a 40 b2 92 a4 93 f5 59 af 6d 3f 64 1b 7b f1 72 24 93 81 29 e1 49 76 29 d2 e1 80 dc 1e 57 c5 38 f3 75 47 c4 05 f8 e2 ae a3 81 46 c3 93 19 09 1e d2 81 57 f1 38 8c 6a 70 3a fd 5f bd 71 6c 1c c4 d1 f6 72 35 6f db 79 3e 90 58 6d 7e 1d bf 8e 29 d9 ea 2a 67 a8 20 85 30 84 f7 84 b1 fc 2f ef c6 6c 2d 52 0f 49 22 8a 41 fd e8 a3 07 e6 31 95 d2 ce 5b ca ee 91 c1 1d c3 b3 1b 5f 61 dd 51 cc b1 e8 06 3e 8b 33 d6 a5 8e 1c 9a b5 84 71 34 6c 68 19 cd 80 b3 b6 98 1c b1 d2 8c d0 98 f4 a8 b0 0c 8c a2 e5 b1 da 6e da c5 47 9e 4f 0c 32 2d 5d 12 d4 fe b5 ad 44 e4 14 b8 31 51 ee 38 2c a7 bb c4 0d e9 01 76 60 2c 7b 59 9e b0 d1 99 c1 96 b4 10 e6 75 2f 4f 02 cb 2d ef 2c 28 8f 34 ae fa 47 20 dc 82 e9 d4 74 83 7b db ce c8 88 c2 4b 16 ef b1 b3 6f aa Data Ascii: hArF)Z@Ym?d{r$)Iv)W8uGFW8jp:_qlr5oy>Xm~)g 0/l-RI"A1[_aQ>3q4lhnGO2-]D1Q8,v`,{Yu/O-,(4G t{Ko

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50291	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	624	OUT	GET /media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%20Infra_36x36.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:10 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/svg+xml Content-Length: 3095 Connection: close Last-Modified: Mon, 20 Jun 2022 12:10:07 GMT ETag: "7ab3b4bc1d71846008b13761be884585" Cache-Control: public, max-age=36000 x-amz-version-id: KgIfi4SRNEVK.on4Oua9_SwV3kpiB3lG X-Cache: Hit from cloudfront Via: 1.1 96ec34ce0a0b54341f66006912ddc5d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: SBHcdBZzM3SJB8yRIoM8VZg32Deut6tSo_eXb6UPE1iDDP9U0qkxUQ== Age: 20513 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:09 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8db0cabdaf5-MIA
2024-04-26 18:33:10 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 33 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 2e 33 33 37 2c 36 2e 33 35 2c 31 2e 35 36 2c 31 32 2e 38 34 2c 37 2e 31 38 2c 31 36 2e 30 38 35 63 30 2e 34 37 36 2c 30 2e 32 37 39 2c 30 2e 36 33 36 2c 30 2e 38 39 32 2c 30 2e 33 35 37 2c 31 2e 33 36 38 63 2d 30 2e 32 37 37 2c 30 2e 34 37 32 2d 30 2e 38 38 31 2c 30 2e 36 33 34 2d 31 2e 33 35 37 2c 30 2e 33 36 34 0a 09 09 43 33 2e 31 33 32 2c 32 39 2e 30 34 33 2d 30 2e 31 35 31 2c 32 31 2e 36 38 37 2c 31 2e 33 36 35 2c 31 34 2e 34 39 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 33 2e 30 30 34 2c 33 34 2e 32 34 39 63 2d 30 2e 35 32 38 2d 30 2e 31 36 33 2d 30 2e 38 32 33 2d 30 2e 37 32 33 2d 30 2e 36 36 2d 31 2e 32 35 73 30 2e 37 32 33 2d 30 2e 38 32 33 2c 31 2e 32 35 2d 30 2e 36 36 0a 09 09 63 36 2e 39 31 36 2c 32 Data Ascii: .337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364C3.132,29.043-0.151,21.687,1.365,14.49z"/><path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66c6.916,2
2024-04-26 18:33:10 UTC	1108	IN	Data Raw: 3c 67 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 35 22 20 64 3d 22 4d 39 2e 32 32 2c 32 31 68 30 2e 37 39 76 2d 36 2e 30 33 35 48 39 2e 32 32 56 32 31 7a 20 4d 31 31 2e 34 39 38 2c 32 31 68 30 2e 37 33 76 2d 32 2e 38 32 32 63 30 2e 31 37 2d 30 2e 34 39 33 2c 30 2e 35 37 39 2d 30 2e 38 34 31 2c 31 2e 31 37 34 2d 30 2e 38 34 31 0a 09 09 09 63 30 2e 36 35 34 2c 30 2c 31 2e 30 36 32 2c 30 2e 34 32 34 2c 31 2e 30 36 32 2c 31 2e 31 36 34 56 32 31 68 30 2e 37 32 33 76 2d 32 2e 36 31 63 30 2d 31 2e 30 36 32 2d 30 2e 36 35 35 2d 31 2e 37 32 35 2d 31 2e 36 31 35 2d 31 2e 37 32 35 63 2d 30 2e 35 33 36 2c 30 2d 31 2e 30 34 36 2c 30 2e 31 39 35 2d 31 2e 33 34 33 2c 30 2e 36 32 56 31 36 2e 37 35 68 2d 30 2e 37 33 31 0a 09 09 09 56 32 31 7a 20 4d 31 36 2e Data Ascii: <g><path class="st5" d="M9.22,21h0.79v-6.035H9.22V21z M11.498,21h0.73v-2.822c0.17-0.493,0.579-0.841,1.174-0.841c0.654,0,1.062,0.424,1.062,1.164V21h0.723v-2.61c0-1.062-0.655-1.725-1.615-1.725c-0.536,0-1.046,0.195-1.343,0.62V16.75h-0.731V21z M16.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50303	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	698	OUT	GET /xxrz/250x400/793/68/22/68223cf08a407a8c5107c603202618c9/68223cf08a407a8c5107c603202618c9.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:09 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/jpeg Content-Length: 41383 Connection: close Last-Modified: Fri, 26 Apr 2024 13:53:10 GMT Vary: Accept-Encoding ETag: W/"662bb1c6-5c94" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1765 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TcLxsimMz%2B6VxxJZW6CUDFxrvBaDwjZEn7bgVfA0Ddo%2FviVUlsM1%2FZ6LuiODaZ%2Bx5eeZ55eDge8sH6q4qW0mvZLUfHBzqGN3%2FErDPCllyOhnM55bKrjcbZO30mYehnQtix8l"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db0a2aa564-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:09 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 6d ae 30 da 65 95 55 fc 03 19 d6 70 b3 60 9f b7 77 cc 36 27 6e 19 39 1c 42 f1 4b af da ad be 68 7e 51 d1 5e 7f 7a 91 d5 fa fe e3 3b da 42 86 c2 75 bf 78 bc 1e aa ca 33 02 e8 56 a4 c6 fc 3b 7a 74 c3 7c ea ac b9 b2 2f 56 6f b6 d7 79 e4 7f a8 f8 b9 4c dd 8d 3c db 64 ea fb 7e a1 37 db 3f 12 d9 6a 7d 77 54 32 c9 a9 d9 83 ee 36 ad ed 90 36 b8 fc 7e 4d 17 53 75 8c 33 9a 8c 90 6f 68 9a c5 9f e8 77 99 33 b8 39 4a fa 9e 7b 44 f4 bc fb 76 99 cd 47 7d 27 90 8c 6e 65 5b a8 af 22 1f 96 97 ea 71 54 7c ac 5f 57 1e 60 7e 4d 0f ad a6 4d e4 5b 7e be 0d eb 8f 0d 3b 10 ca 42 f8 fe 1e b9 44 4c 6f 28 9b f5 7e a4 9f 92 c0 eb 34 61 93 f2 ae ba 8e da 62 bc 6f 28 ca 59 6b 7b 8e 07 11 e8 71 4c 75 e7 71 19 76 97 95 be c7 27 a9 03 9a 92 84 91 a9 a7 91 5b 89 61 6b e3 5d c8 13 03 81 da Data Ascii: m0eUp`w6'n9BKh~Q^z;Bux3V;zt\|/VoyL<d~7?j}wT266~MSu3ohw39J{DvG}'ne["qT\|_W`~MM[~;BDLo(~4abo(Yk{qLuqv'[ak]
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 23 1d ee cf 2d fd 0e b8 19 3e 65 7b ca ca 15 30 c2 a1 36 c1 4a 1d d3 29 51 78 fe 41 8f da cb 39 23 13 20 1e 5d 2c 2a 1e 32 50 ab 03 2d 68 bb 44 29 06 66 c2 eb 4d 37 37 46 77 cd 03 d6 b6 83 50 f6 f2 95 d7 55 cf a2 ec 60 1b d1 63 00 e7 17 49 39 63 d9 39 fe 8b b2 96 3f b9 fc cd df f4 48 47 fc cd f7 60 52 a1 bc e5 dc 77 c1 4b 12 c2 e2 98 41 4c 43 db 4d 22 fe 25 fc 2a 41 6d c8 18 eb ab 19 a1 d2 dc 1a 30 9b 9c cc d8 24 87 3f 77 53 98 bd 8b 96 ed b6 e6 f3 a3 7a e9 df 9b b9 e6 03 f8 d9 d3 01 69 fc d6 b9 69 b4 fc 46 db be 6a fa 03 96 b7 90 65 27 e8 be 5b df 16 6c 9d 7c de f6 90 80 fd bc 56 ad 53 25 8d 4c 5c 9b 79 28 dc 1d 19 09 37 05 66 7c ab ee 4d 7b 37 62 e4 3b eb 8e f1 b7 30 db 74 de b4 eb 4e 9c f9 75 dd 3f a3 6d b7 3c 6b a2 73 7e 8a eb 2f 81 de 19 b6 83 54 4f Data Ascii: #->e{06J)QxA9# ],2P-hD)fM77FwPU`cI9c9?HG`RwKALCM"%Am0$?wSziiFje'[l\|VS%L\y(7f\|M{7b;0tNu?m<ks~/TO
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 59 53 eb ed 64 76 bd d6 8f af 35 a3 eb c5 64 fa ef 57 52 de aa c5 ae d0 d5 88 a4 68 47 11 17 23 55 50 64 45 1a f1 22 28 91 9c 75 d5 06 c7 12 32 88 fc 99 11 ca 35 e8 bb a2 18 38 8a 39 07 c3 1d 94 39 6c e6 8f 6a 8a 3b 23 9a 2c 31 f0 ce 82 10 e2 60 63 90 41 a3 17 23 5b 93 a2 24 27 08 d1 04 db 0e 18 e5 39 19 32 64 51 c8 28 e6 a2 8f 84 83 bf 88 8f 43 dc 56 8a d1 50 54 1c 88 60 62 a8 d7 28 c8 a3 1e 8e 1a 32 22 a0 c8 a8 a2 61 4e 27 03 82 08 98 18 87 49 aa 74 8e 9b 8e 26 0c 18 c8 e6 0e 6a 8a 3d 88 a3 db c5 51 f8 39 0a 28 e1 c6 4e 27 b0 91 06 c5 54 21 cd f1 19 30 c7 8d 56 90 dc a3 1e 22 98 31 81 aa 35 e2 39 0c 64 56 21 c4 c1 81 50 73 10 7c 31 cc 54 1c d1 f0 f0 2f a1 c8 c8 a3 d3 7c 0a d3 d5 04 73 90 6c 4f 58 73 0a 84 29 bc 10 66 9a f1 b1 06 c4 11 e7 23 23 a6 a1 cb Data Ascii: YSdv5dWRhG#UPdE"(u25899lj;#,1`cA#[$'92dQ(CVPT`b(2"aN'It&j=Q9(N'T!0V"159dV!Ps\|1T/\|slOXs)f##
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 5b 9a 18 ce 36 86 f8 31 b6 bc 40 56 d7 a3 7e c4 af f8 6b df 1b d8 68 86 7b d0 43 5e 58 bf 06 d0 f6 2b 6c ac 18 31 ba 1a fc c6 e2 32 67 68 1f e2 29 93 26 77 52 2e cd 13 6c 99 33 ba 08 21 ae fc 7e 55 d1 b4 fe c1 ee d7 e8 8b e6 5c 70 f5 86 de 30 17 6c f6 29 17 64 10 45 33 d8 82 08 21 af 8b fe 89 a2 31 15 f6 30 88 60 c0 a8 22 1a f3 33 d4 b9 5c 98 12 17 ab d3 08 bd b9 15 48 9b 35 44 5e e4 d9 10 6a 1e 20 23 b7 a3 a1 7e b6 52 34 46 2a 9d 25 3a 67 03 a6 a6 aa 54 5b 53 bf 26 13 0e 46 b0 fd 98 a8 2a 18 31 ba a9 11 4c 88 20 8b b6 04 63 94 82 d4 8d 0f a7 83 89 2d 39 21 35 1e 7a e7 a4 d2 eb 1a db 5b 93 ab 5d ba 63 7a 51 ac cb 22 99 77 db b5 29 2b 8b 5d aa 93 72 74 8f 10 35 78 71 ec 9d 5e 65 75 df 5c 6c bf 3b f5 fa 04 57 c6 7f 98 9f 99 6a ac 65 e9 f1 8f 3d 2f 4f b7 29 Data Ascii: [61@V~kh{C^X+l12gh)&wR.l3!~U\p0l)dE3!10`"3\H5D^j #~R4F%:gT[S&F1L c-9!5z[]czQ"w)+]rt5xq^eu\l;Wje=/O)
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: f6 f6 f1 16 3b 67 92 2f c9 9a 84 26 50 cb b5 65 9d 51 a2 04 12 18 7a 50 a8 3d 3a 6e 1e 15 6d 2e af 1c f7 92 b6 9d 38 6b bb 6b 18 db d2 81 81 6b 6b 6d 93 7f 4a 08 dc c7 6a 10 0f 5e d1 d6 bc c6 f2 ef 4f 4b 49 ad 24 8d ed ec f4 ee 5b 33 46 54 cf 65 71 2b 32 0d ac 7f a2 72 41 38 1d 4f bc c5 70 35 4d 37 55 8a d2 4e 70 d4 2e 96 ec f3 17 f9 23 46 d6 e8 c4 17 c6 36 a4 44 6d c6 70 73 5a c5 ac f7 3a 84 bc a8 8b c1 a8 2d 84 73 cb 90 04 1e 65 73 cd 62 f9 eb 87 85 8a a6 3b 5b a7 4a d0 1e 7b 63 a8 f3 61 68 39 ba 8c f3 c5 b8 a9 e6 45 26 dd 8c 36 93 8e ce ff 00 df 57 4b 79 3f e5 f5 4b 49 5c df de e9 ef 01 dd 10 0e 90 f2 56 47 fb 79 01 79 4c dd 9d 84 7b 9a 3d 4a 0d 44 4e 9a 6d c4 d0 c3 c4 17 1a 8e f8 de dc 09 2d e4 b5 58 57 6f 32 65 eb b8 9c 03 db 8a bf 8a 7d 4f 41 78 64 Data Ascii: ;g/&PeQzP=:nm.8kkkkmJj^OKI$[3FTeq+2rA8Op5M7UNp.#F6DmpsZ:-sesb;[J{cah9E&6WKy?KI\VGyyL{=JDNm-XWo2e}OAxd
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: de 30 07 3c 36 1c 0d be 8e 14 f4 18 cf 4a f2 3d 7a f3 e8 17 56 6c bd 2c af 9b 64 99 19 65 b8 51 26 d2 bf 68 6c 20 f5 3d 1b 3e 8f 61 ad b5 b6 b6 d6 da 6a 75 ec f7 fe 14 eb 9c 75 a0 33 4b 5b 4d 79 5c bc 9e e3 8a da 09 70 23 b2 b2 b6 8e 10 3f 56 50 66 66 3e b2 ce 7d c0 7d 08 ef 1b a4 91 b3 23 c6 ea ea ca 4a b0 64 21 81 0c 30 41 c8 ab fd 5e ef 57 be 7b db f9 9e 42 f3 19 cc 7b d8 46 84 2a 28 58 d7 38 50 56 28 d3 20 6e e8 09 27 b2 a4 91 e5 91 e5 91 8b bc 8c ce ec 7b 4b 31 c9 35 c3 9c 71 75 c3 da 0d f5 95 a2 42 97 4f 34 46 d2 65 85 77 03 26 79 b2 dc 33 1f ad 2a 36 88 54 fa 2b d7 a7 8e 97 e5 66 e2 2d 39 62 bb 50 6f 6d fd 2d d3 06 92 3d 45 73 e9 a7 31 30 6d ae 00 f4 a3 ca 34 4d 8d 84 0e 8c 34 0d 72 cf 88 34 d8 35 0b 29 03 24 8a 37 c7 91 cc 82 5c 0d f0 ca 07 d9 74 Data Ascii: 0<6J=zVl,deQ&hl =>ajuu3K[My\p#?VPff>}}#Jd!0A^W{B{F(X8PV( n'{K15quBO4Few&y36T+f-9bPom-=Es10m4M4r45)$7\t
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: ea 90 46 7d 79 1d d5 07 96 87 9e ee e1 65 b6 58 6d 84 3a 83 c0 48 de 4b 45 09 92 c4 13 9c fd 74 89 89 01 27 00 8c 66 b8 83 ca 6c 97 71 da 2d ac 8d 1f 33 4f 9b 9b ca 61 1e cb 89 11 e3 52 70 4e 70 c7 24 74 c7 bf a6 9b c5 fa e6 96 8f 1d bd f4 a2 36 1b 55 5d 8c 8a 83 7a 39 da 1b 23 ae d0 3b 3a 02 6a 4e 35 d6 6e 2e 74 b9 ee 6e 1a 63 a6 cc 64 4e e6 76 73 93 bf a8 dd 9c 95 3d be 87 4a d5 75 7b bd 56 7b a9 67 93 72 dc 5d 3d ce d3 92 15 9b 1d 06 7b 80 00 7b a8 dd cd 85 f4 88 28 81 01 04 fd 95 ec 15 cc 35 cf 6c 01 b9 b0 3b 06 e3 81 d9 dc 73 5c c3 5c c6 a1 a8 df 86 32 2d e5 c8 90 a7 2c b8 9a 40 db 3f 53 21 81 0b fd 90 40 f5 55 be b9 aa 41 cb 09 7b 70 16 19 d6 e1 17 9c fb 44 cb d8 f8 cf 6f 8f 88 e9 53 f1 16 b5 73 2d b4 d3 ea 37 32 49 68 e2 4b 72 d2 b1 11 38 25 b7 28 Data Ascii: F}yeXm:HKEt'flq-3OaRpNp$t6U]z9#;:jN5n.tncdNvs=Ju{V{gr]={{(5l;s\\2-,@?S!@UA{pDoSs-72IhKr8%(
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 6d 46 e0 b9 6e 80 a8 39 20 5b 71 0e 9b f9 13 5c d1 66 d6 2d bd 0c e8 3a 6b e9 b0 08 66 cf e5 65 71 7b 71 10 3e 8e 18 b8 b8 69 a2 91 e4 6e 50 25 0c 67 1b ab 87 38 9b 4c b5 d1 e1 7b ab b4 b7 bd e1 f9 f5 7b 9b 1b 52 ae 5e f8 6a da 67 a2 44 90 6d 52 bb a2 bc 0a d2 ef 2b b6 3c b6 4f 97 14 ea 5a 7d c7 e4 16 b2 d4 22 bd 30 e8 56 56 b7 5c a4 99 79 57 30 ee de ad cc 44 cf df f5 48 cf 63 9c 74 ad 27 5b d1 61 7e 10 96 5d 5a d4 7e 4d d3 75 65 bc 5d 97 39 86 5b 8f 48 78 22 fd 07 ae ce 67 09 ea e4 02 ad d7 18 cc 5a a6 89 73 a6 18 4e bb 65 6d 3c dc 21 69 a4 f2 e7 4b ac c3 79 1d e9 ba 7d e6 38 1c 15 58 d4 7d c2 c7 2f db db a4 6a f6 9a 5f 12 47 34 57 0a d6 36 d7 37 2b 1d c7 5d ad 0f 2e 54 56 f5 95 4e 18 7a c3 20 1c 1e a2 b4 6e 22 b0 6b ce 18 f4 bb e8 ad e2 d3 ac 2f 56 77 Data Ascii: mFn9 [q\f-:kfeq{q>inP%g8L{{R^jgDmR+<OZ}"0VV\yW0DHct'[a~]Z~Mue]9[Hx"gZsNem<!iKy}8X}/j_G4W67+].TVNz n"k/Vw
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 2c b8 87 46 e2 1b 3d 42 2e 65 a3 de 58 91 8e 8d cd 8e 1b be b9 ff 00 a2 e7 23 a7 be b5 6f 05 ac 65 8d 4e 91 a9 cf 0c ca b8 db 78 a9 2a 4a dd 02 e6 48 c4 4d 18 c9 cb 10 b2 1e 9d 16 b8 a3 80 38 93 86 4c 93 dc 5a fa 5d 82 0d cd a8 59 e6 58 11 7a 75 95 70 25 8b 1e 7b d3 1e fe f5 e1 c7 05 69 7c 45 6f a9 df eb 86 5f 41 82 dc f2 63 81 8a 4e 0a 31 69 2e 94 ae 5b 09 cb 78 a3 5d 8e 24 71 37 fc d7 5d 1a 1b 08 34 9d 36 3d 2b fc 1a b6 56 e6 cb ef 64 db 34 61 a3 66 2e 03 16 70 77 36 ec 1c 9e c2 bc 6e b1 16 dc 45 65 7c af 96 bf b0 45 78 f6 90 10 da b1 45 21 be eb 6e 52 3a 03 95 db eb 63 22 96 40 bd fc ea 39 07 f5 52 c9 f2 a1 2e 7b d0 6c 79 52 39 07 22 9e 6e dd 8f c7 e5 f4 69 9a 9e 52 46 05 4a e4 12 07 9f f6 0a f0 7e da 08 78 3a 1b 98 f2 d2 df 5e dd cb 70 c7 f9 70 b0 b7 Data Ascii: ,F=B.eX#oeNx*JHM8LZ]YXzup%{i\|Eo_AcN1i.[x]$q7]46=+Vd4af.pw6nEe\|ExE!nR:c"@9R.{lyR9"niRFJ~x:^pp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50302	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	698	OUT	GET /xxrz/250x400/793/88/4a/884a49f9f49a5f6a6eb4fe7485db01ac/884a49f9f49a5f6a6eb4fe7485db01ac.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:09 UTC	723	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/jpeg Content-Length: 92164 Connection: close Last-Modified: Fri, 26 Apr 2024 14:10:43 GMT Vary: Accept-Encoding ETag: W/"662bb5e3-15765" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5536 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x%2FgN%2FIiKd%2FLpQWUZWLb8FFE4oy0sO47jgzqAjfe9IRVnKXhoLb48uDJdHBlS4WoUvvp3GvbMqydU2VaRL53zrOsR%2FBoiPW2SgdmC1ZfZyQIv7ADKJLtZ4h4FIrpuZf3axzPP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db09a8747d-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:09 UTC	646	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 75 a9 d6 35 f6 41 f3 74 23 b1 22 c2 f7 3b d2 f5 84 58 a9 85 e7 1c 3e 7d f2 0d 8a 00 66 63 67 e7 eb d4 3e de 97 23 d2 23 01 45 7d 94 9e 70 c2 2d cc f0 2b 5c 6e eb c7 66 24 a2 33 49 f7 18 26 e8 c6 e3 eb 4a 4d 45 a6 a7 ea e9 35 cb a7 e0 e5 27 52 ac b2 b2 56 25 91 ad 99 1a 00 8b f9 8d 83 a4 ee e8 f2 bc 9b 09 4a ad b1 62 f0 92 42 48 d6 a3 73 84 dd b5 ba 60 da 6a a7 bd b8 f2 8e 41 53 34 87 5d 13 41 8e db 18 91 ff 00 42 34 c2 17 96 b1 cf 5a eb a3 ba 16 0d d3 de f3 6e 58 01 e6 9d d0 89 b7 7a f1 ea b2 25 50 b9 b3 52 51 c0 6f 9c fe cf 66 e5 3a 9c 72 0a 8e 7b 8c bb 11 54 d3 c1 f6 2b c9 a5 a3 d5 e6 f4 fe a1 0d 26 60 94 4d 92 2d 81 59 b0 c4 d2 20 e5 92 74 7c cd b5 7a 76 b4 3a eb 93 26 98 27 5d 29 d8 04 45 24 d9 62 dc d0 fc 13 b1 58 d7 2f 00 d9 0f 75 35 67 b4 b0 cb ca Data Ascii: u5At#";X>}fcg>##E}p-+\nf$3I&JME5'RV%JbBHs`jAS4]AB4ZnXz%PRQof:r{T+&`M-Y t\|zv:&'])E$bX/u5g
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 08 30 e6 9f 15 b2 57 a1 1e b5 7c 10 fa 4d 46 89 17 6b ca 63 88 c9 4e ae 1d 62 83 1f 5f ce 90 24 58 13 72 1c 99 05 17 2e 92 97 c1 98 c3 b1 a1 8a d9 5c fb fd c3 f3 d4 e6 fd d7 55 e7 53 f3 ec fe 25 5f 19 94 3e d9 ee 6d df cf b6 3a ea 58 49 59 8d 34 78 e2 73 7d 75 2b af 3d 12 48 03 98 cb 20 79 90 0a c3 1c 7c dc 41 85 14 e0 49 8f 45 21 d3 bf 59 8a a5 16 9c ad 96 1c 99 8d 5b 16 6e 94 86 ea 4f 23 16 e0 61 03 ee 41 e4 7a 55 36 fb 3e 0d 8b 32 da cb a4 ae 85 6a e4 fd ca da b2 7c ad 6c 33 ed 0d 9c b8 11 dd 35 64 bf ae f8 88 4e 1d 18 06 14 f8 df 50 49 19 3f 29 34 64 7c 08 54 70 71 60 3c c4 1d 8f bb bf 73 c6 4d 66 12 b7 ef 7f ee 02 6a d1 14 60 e0 85 62 c3 05 6c 36 05 de 2b 03 8d ed 2c f7 8a b6 fd ad d4 6c a7 a8 59 40 23 3b 53 ac a2 90 1a fb e8 2e 7b 10 7f 95 3d 15 c8 Data Ascii: 0W\|MFkcNb_$Xr.\US%_>m:XIY4xs}u+=H y\|AIE!Y[nO#aAzU6>2j\|l35dNPI?)4d\|Tpq`<sMfj`bl6+,lY@#;S.{=
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: d4 59 b7 75 7a 2d 16 55 f4 85 6a 99 fc 70 ea 4a 36 2b 7a dc c9 e5 43 62 58 94 ac d5 9d c7 a8 91 db 37 1e ad 23 cf cc 04 b2 ac 23 95 90 5c ca 49 14 ee 2a ee 9c 42 2e 55 9c 1e c1 b2 24 23 87 f2 2a 56 c9 23 0c f1 ab 82 22 ad 7e 62 54 b1 2d 9f 43 95 d1 3c b8 dc a7 8b 51 64 5d e3 fe 71 c7 3d be 71 56 aa 03 74 62 ba 98 86 6c 86 3d 40 1e b3 b0 77 22 d3 d6 95 23 31 06 b3 56 63 69 d9 33 46 c6 16 02 31 a9 8c 64 44 b6 69 c7 6d 65 35 7d 8d cc 82 fb 49 4f c9 3e 95 8f 3a 8a 36 6c 60 32 0c 92 55 28 18 e7 5e 0a f4 7b 78 c6 d1 f2 13 6e 4f ee 8a c1 dc 23 98 b8 47 a1 32 b3 67 c5 4d 33 38 b3 b9 f0 cc ae 29 33 54 d1 e9 ba c7 f1 5e d1 2a 75 5e bf 31 66 67 13 5d 6c 64 db d1 27 9d 59 b4 be bb 59 c9 fd 2f 10 e7 3d a9 a3 76 43 75 79 20 10 72 67 4c ac df 24 a1 76 7c 2a 2d a7 25 aa Data Ascii: Yuz-UjpJ6+zCbX7##\IB.U$#V#"~bT-C<Qd]q=qVtbl=@w"#1Vci3F1dDime5}IO>:6l`2U(^{xnO#G2gM38)3T^u^1fg]ld'YY/=vCuy rgL$v\|-%
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 88 5f a7 1a b4 05 ca 40 19 06 dc aa ec 9d 25 5e 8a a8 59 66 d0 51 95 9d e8 37 46 5e 47 cc ba 20 3c f6 c5 7e 0c 70 c1 c5 3e a7 57 80 14 c4 38 6c dd 77 6b ea 4d 48 8e c0 14 1b 2d 5c d1 55 f9 a5 6c da 66 d3 b6 69 00 ca 2a 83 b3 b7 7b eb ac 00 53 ad 6e ca 70 00 32 2a 95 b2 fe dd d1 ce 18 1c 1b 19 26 f5 07 d6 07 cd d7 1e eb 2a ab 2a d5 99 57 93 b0 8e 60 71 77 e7 cf 70 6c 5d f1 0a b3 97 09 2e b5 c6 51 bb 49 a9 f7 e2 e4 ca 08 70 4f 83 75 c3 86 1d 30 1c 02 87 2b a1 f4 02 f7 6d ac 34 ec cd fd 1a c4 43 2d 39 b0 eb b5 26 f5 cb 05 67 6e 46 50 0f 78 da d6 5b a1 74 b3 88 64 36 34 8c 7b a7 ae bd 4d 53 5a 47 24 23 e7 4b 91 29 dc 01 81 46 8e 3c a9 88 8e 42 9c ee 56 ac ea 0b 16 c6 69 ae f5 0d 23 5f 13 62 cb d4 11 99 9f a4 c3 c8 c6 3e 41 dc 7b ff 00 6c e4 71 a4 52 40 ad a5 Data Ascii: _@%^YfQ7F^G <~p>W8lwkMH-\Ulfi{Snp2&**W`qwpl].QIpOu0+m4C-9&gnFPx[td64{MSZG$#K)F<BVi#_b>A{lqR@
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 1b e0 c6 0e 0b c6 14 47 0b db 00 dc e4 68 28 57 20 02 60 d8 37 04 58 37 d4 d5 90 b9 dc a4 10 49 c9 f7 f5 a2 db fc 92 8f b4 2d ba e0 b4 fd 2d b2 f6 fb dd e3 a7 d8 ea 84 c8 a3 77 b1 1b cf 63 db 35 e5 3e 9d b4 67 eb f7 ad 95 bc ad 3b 09 62 89 88 2a e7 7e c4 2e 68 db 9a d7 1d 7b 65 88 42 4d 38 1f 4a 4e d8 c8 57 62 20 e0 e0 fd 45 ee 48 57 71 a8 ab 82 6c 2f 61 11 0e 82 61 03 01 be 05 23 13 b8 80 26 a8 72 38 5c 27 99 23 26 8b 8f 1c 98 02 e3 e9 f2 79 28 8b 91 d2 f9 f5 85 52 f6 cf e3 24 0f 14 fd 93 d4 e4 99 7a a7 33 22 ea 88 1d 91 52 ac ea 3d c5 bf 0d b1 9a 90 dc 94 c3 86 28 08 08 67 f9 1e 78 cf 4a 9b 01 38 49 43 38 6d ce c8 dd 5a fe 9e 17 bd dd 71 bd e0 8f c7 f9 39 4c 51 ce 4b c0 9c 14 ce 4c 18 26 0c 6e 92 67 32 ec 57 6d 9d 30 a9 93 af 05 0c 2b e6 fc 4b a4 b1 e7 Data Ascii: Gh(W `7X7I--wc5>g;b*~.h{eBM8JNWb EHWql/aa#&r8\'#&y(R$z3"R=(gxJ8IC8mZq9LQKL&ng2Wm0+K
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 08 b8 c6 9c c3 89 a9 c6 58 a3 5b ac d9 c8 22 51 fe e3 9d b9 13 e0 ec 91 0c ab de 10 9e 82 34 44 d1 5d 78 d3 ec 60 f9 f1 70 26 02 f5 8c 39 9a e4 9c 93 77 ad 8a d4 f8 55 54 47 1c 19 c3 a5 11 ea 06 76 88 97 3c 27 2a 90 6a 72 b3 56 ef 5e 41 c1 c1 4a 91 b8 54 8c 59 28 b8 05 8c af b0 4c b9 25 b3 f5 ad d2 bf 7c 54 8c 56 89 9b b3 44 2b 39 39 3d 63 76 d4 0e c1 66 52 de e5 24 0e a9 91 85 33 85 57 db b5 f6 70 93 67 29 8d 8d 0b c0 7d 4d 87 12 86 6b 6b 43 97 95 eb 04 79 e3 67 fc 67 13 2c 4e 80 dc c5 5f 0a ed db 73 b9 90 44 ab 24 af dc 13 44 e9 74 3a 6a 94 c6 eb 1c 99 5d 03 6a 8b 35 8b 5e a1 3d 34 ca 7a c1 ab 53 c6 c0 fb 94 d1 8a 02 60 21 d4 55 86 90 15 41 da 68 b2 6c b0 38 7e 79 07 0d 8a 7f 32 42 84 8a 2a 0c 64 78 aa a3 76 ca 36 51 94 43 43 66 d3 a1 27 66 a9 8a 7d 71 Data Ascii: X["Q4D]x`p&9wUTGv<'jrV^AJTY(L%\|TVD+99=cvfR$3Wpg)}MkkCygg,N_sD$Dt:j]j5^=4zS`!UAhl8~y2Bdxv6QCCf'f}q
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 0b 54 2b 60 fe 21 0b c1 f5 a2 77 1f a5 68 e1 63 3a a8 79 63 66 07 6d a9 e3 e5 f2 3f c7 51 e0 45 fc 38 fc c7 7d 0e 95 1b 87 28 d6 07 3c d1 dd db 80 3d be 7f cb 4f d1 dc a9 65 23 75 1a 50 6c f6 bd 3e 30 91 0c 12 a0 78 fd 8f 75 3f b4 87 ba 37 cc 57 ef 6e 1c 69 be f9 84 16 23 88 9d 5b 1a bf c3 34 d1 3c 92 40 be b1 1d 9e 65 af d9 37 19 f8 a3 ab 61 ae b9 9d e2 e3 c9 87 1a 62 48 60 58 5f 2b 35 59 04 b2 7f f9 26 f1 bd a9 be 22 85 ae 86 e5 1d 8c 2b 14 d2 46 24 2e 8b 4d e2 14 f3 35 f7 4d a0 9e 49 3b 45 05 1a e8 df 65 f1 70 62 80 ca 14 e4 b4 21 a6 b1 c8 96 41 ba 81 f6 8d 48 41 f3 b3 df 5d 47 a4 60 c5 13 3b 23 f8 be 9b 6d bd b8 a1 7f ed ae b1 d2 9b c1 7c 98 62 7a 88 fe 2f a9 55 be 1c d5 d7 7e dd f4 55 95 55 d9 48 0f 61 7e 64 55 8f 91 16 3d 35 8f 10 c9 f0 f1 d7 bf 2d Data Ascii: T+`!whc:ycfm?QE8}(<=Oe#uPl>0xu?7Wni#[4<@e7abH`X_+5Y&"+F$.M5MI;Eepb!AHA]G`;#m\|bz/U~UUHa~dU=5-
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 3a 23 2b ec 08 ac c4 ee 36 3e 16 a2 3b df d7 59 03 cc 3d 4f af 3f d7 8d 50 b3 e5 17 7c f6 3e de 84 11 7e e4 72 7d 6e 86 bf e9 fe 59 bc 09 63 99 ca a8 da 0e d9 42 b1 3f aa c7 d4 ad 9a 37 40 e8 64 e4 e3 d4 6f b9 d5 4e d2 1e ed 48 e3 8f 50 3e 46 c6 b2 e4 9b c3 13 22 82 f0 8b 65 e4 4c 15 bb 2f ec ec 6e cc 92 06 47 ec c3 50 64 63 7d e7 c5 c9 45 18 d9 43 c3 99 6a c2 dd 6d 9a 3d f6 e8 62 71 6c a4 ee 40 0a 8d d1 95 a9 ba 24 7e 31 f0 5f 72 13 6a 41 b0 41 a2 0d f6 a2 35 f6 7b a6 f8 19 24 30 a6 ab 88 d7 62 28 1f e5 db 5f 6d f2 e0 8f 17 1f 0c 90 d9 2d 2a 3e c5 20 95 41 76 ce 3b 8b 07 cb 7d f9 f6 d6 ee 7b 70 7b fc 87 be 85 8f 9e 99 ab f3 d6 f3 ae 9d d4 7e f5 00 8a 62 59 e1 51 4e 4f 99 95 6a 95 87 a9 f4 07 4e d2 8d ac 87 6c 55 b9 b9 f3 29 1b 6f cc 77 03 ef 41 18 8f cf Data Ascii: :#+6>;Y=O?P\|>~r}nYcB?7@doNHP>F"eL/nGPdc}ECjm=bql@$~1_rjAA5{$0b(_m-*> Av;}{p{~bYQNOjNlU)owA
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 93 6a 6d 72 cc 57 78 20 5d 6b 37 aa c9 d4 f2 ce 44 eb 1a 39 45 5f c3 5d ab 49 40 71 64 f6 f5 bd 4c 49 73 fc b5 ba fb 0e 3f 42 9a 20 e9 ce e5 b5 e6 bf 95 ea 23 c9 1e fc ea 51 4d f5 ff 00 4d 47 f0 83 f3 3f e9 af 09 8b 71 d8 1b fe 43 5d 17 ad 37 dc d3 a7 4a c3 72 de cb 1c 91 f5 27 bf f5 d6 48 66 7b af ef 8f a6 a3 c0 5e 9b 87 0c cd 25 c9 8f 10 db 43 6c 7e 21 da 00 24 f2 ea 0b 79 6c 0e 38 f9 9e b5 34 83 a8 e3 65 3c a0 c8 ad b8 cc b6 40 2b 2f 88 0d 10 bf 05 f0 2f b0 1c eb aa f5 e9 32 a5 c8 87 16 42 98 4c f2 14 f2 22 cc 56 7d ad 3a 78 82 dc 45 24 bb 9f c3 be cc 2e f8 d3 1b fc b5 ca d1 d1 70 54 1d a0 b7 03 e9 fe fa dc cc 2b db d8 57 f4 d5 7e 88 fe 2a fd ae 34 0e d6 bf 6d 79 e4 3d bf e2 fd f4 23 da 28 1f f4 d2 9d 46 cc 8c 1d 4d 32 90 41 1a 87 23 c5 89 24 e5 8b 0f Data Ascii: jmrWx ]k7D9E_]I@qdLIs?B #QMMG?qC]7Jr'Hf{^%Cl~!$yl84e<@+//2BL"V}:xE$.pT+W~*4my=#(FM2A#$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50289	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	694	OUT	GET /ajax/login-state HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"d8-R6JFTYCzz9JLwYU4VIqVMGUySyY"
2024-04-26 18:33:09 UTC	908	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:33:09 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"d8-R6JFTYCzz9JLwYU4VIqVMGUySyY" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pt50xYhr6NpofUcuLm8aW5iMvSXIl4cU%2BVDyV2gCQkZrUN1m6lFgfPRq%2B1Z4rU7KcORnz3QfIDrKMNbcxkK7aZiDEtop4jLRHRGuc9K8bpoouwiSxini4%2BjcM1unCo8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db0d2ba66b-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50288	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	708	OUT	GET /ajax/verify?domain=1movieshd.cc HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"f-NQVRlQfKHCoInEbhALgECMonhCE"
2024-04-26 18:33:09 UTC	913	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:33:09 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"f-NQVRlQfKHCoInEbhALgECMonhCE" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hPv4gf4g5MycaY9jN%2FoTPGo1hhOllDYzgyPkhLX%2FqNEc70Tm9d9VZKMvmQGFKrzQOgZ2Uxj%2F4%2BKpG1iVAFdcPmiGMQHDF%2BmVG%2BfG8hLrazfF2b5ATzpxVOZgUPIgNBs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db0a4b3367-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50298	3.16.63.45	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	1378	OUT	GET /pview?event=pview&hostname=1movieshd.cc&location=%2Fmovie&product=inline-share-buttons&url=https%3A%2F%2F1movieshd.cc%2Fmovie&source=platform&fcmp=false&fcmpv2=false&has_segmentio=false&title=%231Movies%20%7C%20Watch%20Free%20Streaming%20Movies%20and%20TV%20Series%20Online&cms=unknown&publisher=6433be364f61b7001240a339&sop=true&version=st_sop.js&lang=en&fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA&description=1Movies%20Watch%20Movies%20online%20for%20free%2C%20Streaming%20movies%20on%201Movies.to.%201Movies%20is%20the%20biggest%20website%20for%20free%20movies.&ua=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&ua_mobile=false&ua_platform=Windows&ua_full_version_list=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&ua_platform_version=10.0.0&uuid=17beb744-db97-4194-9492-d4a188d44158 HTTP/1.1 Host: l.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:09 UTC	493	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Origin: * Access-Control-Expose-Headers: stid Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain; charset=utf-8 Date: Fri, 26 Apr 2024 18:33:09 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 67 Connection: Close
2024-04-26 18:33:09 UTC	67	IN	Data Raw: 7b 22 6c 6f 74 61 6d 65 22 3a 22 74 72 75 65 22 2c 22 73 74 61 74 75 73 22 3a 22 74 72 75 65 22 2c 22 73 74 69 64 22 3a 22 5a 47 6b 41 43 57 59 72 38 7a 4d 41 41 41 41 49 41 39 38 59 41 77 3d 3d 22 7d Data Ascii: {"lotame":"true","status":"true","stid":"ZGkACWYr8zMAAAAIA98YAw=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50287	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	594	OUT	GET /media/New%20navigation_Rebrand%203.0/msci-em.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:10 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/svg+xml Content-Length: 567 Connection: close Last-Modified: Mon, 20 Dec 2021 10:04:44 GMT ETag: "36d4cc2b83b63ac0e2d16ee4dfab5be4" Cache-Control: public, max-age=36000 x-amz-version-id: 1Ddl5eaK..P.X_ACvLZdQEgbkXX0RtJy X-Cache: Hit from cloudfront Via: 1.1 5dd2304368effbad5413134075a82ff0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: M-XeItdcB1aceu2KfXLQdVpkegG8Vlp1oK4yEQsKSqoVDnH-xkrgWg== Age: 20512 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:09 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8db0dc22886-MIA
2024-04-26 18:33:10 UTC	567	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 63 32 2e 38 33 37 20 30 20 35 2e 35 32 2e 36 35 36 20 37 2e 39 30 37 20 31 2e 38 32 35 43 33 31 2e 38 38 34 20 34 2e 37 35 33 20 33 36 20 31 30 2e 38 39 35 20 33 36 20 31 38 63 30 20 39 2e 39 34 32 2d 38 2e 30 35 38 20 31 38 2d 31 38 20 31 38 2d 39 2e 39 34 20 30 2d 31 38 2d 38 2e 30 35 37 2d 31 38 2d 31 38 43 30 20 38 2e 30 36 20 38 2e 30 36 20 30 20 31 38 20 30 7a 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50304	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	590	OUT	GET /media/New%20navigation_Rebrand%203.0/dax.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:09 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/svg+xml Content-Length: 567 Connection: close Last-Modified: Mon, 20 Dec 2021 10:03:52 GMT ETag: "bbd13c60676e3e326a2c079b57c3e761" Cache-Control: public, max-age=36000 x-amz-version-id: v5SUeh3C7nn1Z._fIgSMj7crTZgiPRMb X-Cache: Hit from cloudfront Via: 1.1 50d46662b214cb2923f288d3ad4f9dec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Z7MFejrASnKd0gU26z999g4iYpa6aHOjYNNmwWfVCRMJiU4KsTy7mQ== Age: 20513 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:09 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8db0dc79ad2-MIA
2024-04-26 18:33:09 UTC	567	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 63 32 2e 38 33 37 20 30 20 35 2e 35 32 2e 36 35 36 20 37 2e 39 30 37 20 31 2e 38 32 35 43 33 31 2e 38 38 34 20 34 2e 37 35 33 20 33 36 20 31 30 2e 38 39 35 20 33 36 20 31 38 63 30 20 39 2e 39 34 32 2d 38 2e 30 35 38 20 31 38 2d 31 38 20 31 38 2d 39 2e 39 34 20 30 2d 31 38 2d 38 2e 30 35 37 2d 31 38 2d 31 38 43 30 20 38 2e 30 36 20 38 2e 30 36 20 30 20 31 38 20 30 7a 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" xmlns="http://www.w3.org/2000/svg"><g fill="none"><path d="M18 0c2.837 0 5.52.656 7.907 1.825C31.884 4.753 36 10.895 36 18c0 9.942-8.058 18-18 18-9.94 0-18-8.057-18-18C0 8.06 8.06 0 18 0z"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50308	52.92.0.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	409	OUT	GET /static/cryptocoin/xrp.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:09 UTC	431	IN	HTTP/1.1 200 OK x-amz-id-2: SFb7L89qnl8q+i+1JCHKlN+Fa4izQXkRzSdZorsyi4NymDFhIQ8yModgKhhJHKeON0PA3DeUMhM= x-amz-request-id: 5DF282WZBN6X5S88 Date: Fri, 26 Apr 2024 18:33:10 GMT Last-Modified: Wed, 16 Dec 2020 17:58:30 GMT ETag: "61a7c4963a9d50becbe6039a24fba386" x-amz-version-id: GsBqXt2pKi2.ig3mzQqw1Wsr4PM6ucge Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 547 Connection: close
2024-04-26 18:33:09 UTC	547	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 32 37 32 44 33 33 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d 38 2e 30 35 39 20 31 38 2d 31 38 20 31 38 53 30 20 32 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#272D33" fill-rule="nonzero" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50301	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	645	OUT	GET /ajax/banners?page= HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:09 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: application/json; charset=utf-8 Content-Length: 60 Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"3c-DFz73KHXVYZHM3DcVRSxkH+OTqg" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=90mU2KVKSk%2BRRFMwECPw39gGMncuWo59BJGaDhndkNqqQQn2mtIW5eJjRRhZeRhfj6ZSJ4q53ETr85qvmPSiTPB2TkW2n0n%2BIEf1M0E%2FJ8XtjyBDTExtlOKsaNnhuSk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db09dda563-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:09 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 62 61 6e 6e 65 72 73 22 3a 7b 22 74 6f 70 22 3a 22 22 2c 22 6d 69 64 64 6c 65 22 3a 22 22 2c 22 62 6f 74 74 6f 6d 22 3a 22 22 7d 7d Data Ascii: {"status":true,"banners":{"top":"","middle":"","bottom":""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50293	52.92.0.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	409	OUT	GET /static/cryptocoin/bnb.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:09 UTC	431	IN	HTTP/1.1 200 OK x-amz-id-2: PMr0lfuYOjHDcEWKy93/IoXm+ETrB7kIifYz87JIemNEUR2H0fGHyrtKHdBF/MjrtfESrs8Rs2A= x-amz-request-id: 5DFBJ48J2W42HK12 Date: Fri, 26 Apr 2024 18:33:10 GMT Last-Modified: Wed, 16 Dec 2020 17:58:30 GMT ETag: "784f2aadcc5b3da45da5f62d282f95b0" x-amz-version-id: mayjX_Z706_6Lt5QlMCZkuC.Httquj1_ Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 615 Connection: close
2024-04-26 18:33:09 UTC	615	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 33 42 41 32 46 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d 38 2e 30 35 39 20 31 38 2d 31 38 20 31 38 53 30 20 32 37 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 30 20 31 38 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#F3BA2F" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27.941 0 18 8.059 0 18

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50274	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	710	OUT	GET /basis?uid=febb0cc9-a867-4e01-8b79-fa3d8a253c66-662bf35d-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:09 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:09 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50295	52.92.0.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	410	OUT	GET /static/cryptocoin/usdc.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:09 UTC	432	IN	HTTP/1.1 200 OK x-amz-id-2: BWnEAPWeCQc3uuc0xb8JXoJxfjtkbq+ufV0pUv16lTUV1TPgZT1fJeSCgICi9fJT/oKxyz7WEgM= x-amz-request-id: 5DFCP3P8VRWK6AAJ Date: Fri, 26 Apr 2024 18:33:10 GMT Last-Modified: Wed, 16 Dec 2020 17:58:30 GMT ETag: "7254fa7385a48a72be30661bfb3a9615" x-amz-version-id: XJxdHXTtqa7cts73yW0xRo77pJk7bSKN Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 1438 Connection: close
2024-04-26 18:33:09 UTC	1438	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 32 37 37 35 43 41 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d 38 2e 30 35 39 20 31 38 2d 31 38 20 31 38 53 30 20 32 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#2775CA" fill-rule="nonzero" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50294	52.92.0.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	408	OUT	GET /static/cryptocoin/sc.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:09 UTC	431	IN	HTTP/1.1 200 OK x-amz-id-2: nnzzTiUi988k5RrktIfxK6cd40Cfi53nNmEol9YnDjOfRV6Mqej6q/yJ0ixea4r89cXgjciRgFU= x-amz-request-id: 5DFCG0X5QBWX1BPW Date: Fri, 26 Apr 2024 18:33:10 GMT Last-Modified: Tue, 07 Jun 2022 08:53:26 GMT ETag: "d3a90161a921a24b34dfd802b9f34d35" x-amz-version-id: 9OfiUAB6Ve5EbQVcwpqGE2Q6SMrnWSOj Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 760 Connection: close
2024-04-26 18:33:09 UTC	760	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 38 22 20 66 69 6c 6c 3d 22 23 46 32 46 34 46 37 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 32 2e 32 30 31 20 31 38 76 34 2e 32 68 2d 34 2e 32 61 34 2e 32 20 34 2e 32 20 30 20 31 20 31 20 34 2e 32 2d 34 2e 32 5a 6d 2d 34 2e 31 34 36 2d 37 2e 30 30 33 61 37 2e 30 30 33 20 37 2e 30 30 33 20 30 20 31 20 30 2d 2e 34 31 36 20 31 33 2e 39 39 39 63 2e 31 32 31 20 30 20 2e 32 34 32 2e 30 30 34 2e 33 36 34 20 30 68 37 76 2d 36 2e 39 31 32 63 30 2d 33 2e 38 36 2d Data Ascii: <svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#F2F4F7"/><path d="M22.201 18v4.2h-4.2a4.2 4.2 0 1 1 4.2-4.2Zm-4.146-7.003a7.003 7.003 0 1 0-.416 13.999c.121 0 .242.004.364 0h7v-6.912c0-3.86-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50273	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	605	OUT	GET /117405/Resources/dist/Resources/js/components/heap-init.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:09 UTC	545	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 814826 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:09 GMT Etag: "5c7b2679c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:17 GMT Server: ECAcc (mic/9BA5) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 637 Connection: close
2024-04-26 18:33:09 UTC	637	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 68 65 61 70 3d 77 69 6e 64 6f 77 2e 68 65 61 70 7c 7c 5b 5d 2c 68 65 61 70 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 61 29 7b 77 69 6e 64 6f 77 2e 68 65 61 70 2e 61 70 70 69 64 3d 6e 2c 77 69 6e 64 6f 77 2e 68 65 61 70 2e 63 6f 6e 66 69 67 3d 61 3d 61 7c 7c 7b 7d 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 65 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 65 2e 61 73 79 6e 63 3d 21 30 2c 65 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 68 65 61 70 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 6a 73 2f 68 65 61 70 2d 22 2b 6e 2b 22 2e 6a 73 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 Data Ascii: (function(){window.heap=window.heap\|\|[],heap.load=function(n,a){window.heap.appid=n,window.heap.config=a=a\|\|{};var e=document.createElement("script");e.type="text/javascript",e.async=!0,e.src="https://cdn.heapanalytics.com/js/heap-"+n+".js";var p=document

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50311	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	929	OUT	GET /xxrz/250x400/793/3e/34/3e34a78cd7ece10d0cc0a028b8702dfb/3e34a78cd7ece10d0cc0a028b8702dfb.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:09 UTC	725	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/jpeg Content-Length: 93463 Connection: close Last-Modified: Wed, 24 Apr 2024 03:56:40 GMT Vary: Accept-Encoding ETag: W/"662882f8-15ad5" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6952 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=igPoOlhzjbJsDAB8SiBO5ejJimcQQI4PTiNigmXfSQNJQvXPKxovPoGIOsfnIYM0L%2BRoym7oDxp%2Bt8kWHuPi8vrLxhQ%2F7oZVbt8oLEEUixZsHU%2BvY4nzQvA2fv%2FRDGh05PPA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db0c866da1-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:09 UTC	644	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 02 03 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: ec 93 c9 e7 a1 79 14 42 71 8e d9 44 73 ea 21 33 0a c7 00 da ad b2 4c 2e 5b 8f 5d 54 8e f6 d5 15 e8 b5 a2 2f b8 dc 77 00 0f ee 17 e4 c3 0d b3 db b6 8c 20 63 21 28 86 69 d5 af 46 e5 51 6c 1c e2 1d 36 c8 e7 55 49 06 a3 43 e4 d0 ae b5 09 46 dd cd 01 df 6d 38 cb 4a 32 92 a3 97 d5 27 99 31 0e 55 51 2b 9d c8 ed 63 8c 7d b4 09 f3 63 71 d4 a4 0d 85 bf 5f 77 16 0d df 0e 0b 43 76 fe 25 17 16 d6 1a ad 10 71 a6 46 af 97 08 b9 53 e2 c3 ca 39 6b 15 10 5f 49 88 6d 80 84 06 6a bf 15 4d 1c d2 83 62 45 a5 73 0a b4 d5 5a 27 99 62 1c c4 1a ad a5 cd 01 cf 7b 18 72 6f f3 c9 82 d2 65 27 b2 a3 0f ef 04 ad f0 5a 1d 9f be 16 11 ee e5 92 4c 50 be 46 de 13 b0 55 47 24 ea db b7 71 9c b2 1c 81 39 43 94 a7 21 01 6c 22 6d 70 cd f3 aa 46 55 b5 69 f2 74 1f 67 7d 03 af 7c a6 03 9a e5 09 ae Data Ascii: yBqDs!3L.[]T/w c!(iFQl6UICFm8J2'1UQ+c}cq_wCv%qFS9k_ImjMbEsZ'b{roe'ZLPFUG$q9C!l"mpFUitg}\|
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 97 24 16 a8 33 25 8b e0 f4 a9 58 f8 aa e2 2e 29 4e 87 c5 6d 42 9e 52 d7 95 a2 ad aa 8c cf e2 9c 2a 72 f6 16 f0 62 d8 79 0e ca 21 93 0b 87 6d f6 d5 29 f2 cd 29 38 de b2 bf 63 af ba 7f 9a 87 cc 72 ba 02 38 98 79 cb 88 4e 0b 75 05 1b b0 9d 0a e7 4f eb 8b 13 14 e2 38 34 b2 d4 f4 99 56 c4 81 aa 63 e6 46 44 06 0b 56 b1 36 1c 4b 32 98 43 12 22 39 aa 39 55 db 19 bd b1 f0 4b 66 4e bd 7a fd ea 86 ff 00 cd 8e e8 66 5a 42 58 b0 3c 9e 26 41 c2 01 9b 0e 8c 61 8c 2d ca ba 3c d3 3f c7 4c e3 39 fb ce 49 1f dc dd fb 3f 46 2c 76 c7 3f 1b 71 fc 79 86 ca 93 d7 7a 3b 5d f7 e5 04 d4 c5 ff 00 7a 64 b2 89 a0 c8 7b 62 a2 73 7f b8 67 ec 09 9b 6d 7a 47 dd c8 c8 ca f1 f4 d4 d5 73 a4 d4 39 a5 9b 6f 63 df 94 79 bb b7 38 44 ad 8c 1d 3d ed e2 9b bc cb b0 3b 8e 04 59 a6 7f 25 18 69 c5 1e Data Ascii: $3%X.)NmBR*rby!m))8cr8yNuO84VcFDV6K2C"99UKfNzfZBX<&Aa-<?L9I?F,v?qyz;]zd{bsgmzGs9ocy8D=;Y%i
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 63 f3 db 8c e3 f7 0e d2 9d e3 ca 71 29 6d dc b8 9c e3 0d f1 ca eb 43 d7 ea ba f2 6e e4 d4 9d 6a 4a 08 ac 21 58 e6 5d ed 86 15 d9 b2 d7 e5 9d 6c 37 cd 98 fb 55 be 22 03 d8 d9 63 81 04 36 c3 b9 b1 39 2e de 54 42 d4 85 37 94 4a 18 92 5c 43 2b 33 4e 16 b9 3a b0 67 e0 dd c9 32 32 10 dd 8f da e4 92 85 5b 04 10 22 d4 28 cd b4 b7 63 06 53 83 97 84 63 39 46 73 9f 14 f3 d4 a6 86 15 b4 25 a3 b1 85 a8 26 db f2 d6 d5 d5 d8 67 e6 81 40 61 e9 f6 58 fb 1f 68 b7 92 db 97 07 21 15 96 ff 00 93 be 71 8f 5f e3 59 ad 48 b9 65 cf cc 59 f8 69 dd d7 b1 cf b9 db 04 2f 3c 30 4c b5 c4 78 b8 84 a9 2d be d3 d9 15 fd 5f 77 85 af 5a 20 6c 95 f3 36 ed b9 a7 1f 80 bf d6 94 9a b2 a0 b2 dc 97 d2 51 e1 f1 99 46 61 45 c3 81 90 23 3e fc 61 4a cb 31 ae be 83 22 8e 4b 28 0d e6 07 7d 2b 4e 1c 6b Data Ascii: cq)mCnjJ!X]l7U"c69.TB7J\C+3N:g22["(cSc9Fs%&g@aXh!q_YHeYi/<0Lx-_wZ l6QFaE#>aJ1"K(}+Nk
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 13 4c 5b 8c b0 e2 c4 88 8a c3 8e c0 a5 87 aa a1 31 89 7d b7 04 bb 3e 9b ac 80 c4 a5 8b 62 12 3a 96 3b 4c 76 54 69 05 b4 f0 af f2 0f db 8c cd b6 79 02 57 6f 73 55 6e 4f 48 e2 52 4e b9 49 32 65 25 8d 1f 0e d5 7e f9 23 5a 32 7a c6 cb 8d ca 1c e1 2a 5b 59 ee d3 1c 69 3d b9 e1 c8 a4 9a 8c 44 9b 26 24 86 b3 b4 01 61 8a 08 26 94 ae a2 f6 e3 b5 86 e9 3b 46 1e 51 32 54 0a fc c2 07 d5 f1 d5 26 0f fb 96 60 32 64 c9 1b 88 3c c7 50 90 9f 71 e0 d4 66 5f 1b 64 ed 80 62 5a 02 d6 5a 5a 89 35 32 19 cb aa c4 9c a0 a2 98 f4 90 b2 6f b8 7c 38 2a 54 e0 e5 b4 6b 48 65 ec ac 9e ff 00 71 d9 7e 15 26 d3 a6 e2 aa a7 5a 6a f2 a1 a2 ab 3b 63 32 cb 08 34 56 53 90 5a 4b 7f c8 a4 90 a6 91 db 90 e3 3a 97 e1 e1 03 91 44 73 0b aa 91 39 b3 e3 2b 14 c9 99 89 0b 0c af 77 3c a8 db 62 6a a8 6d Data Ascii: L[1}>b:;LvTiyWosUnOHRNI2e%~#Z2z[Yi=D&$a&;FQ2T&`2d<Pqf_dbZZZ52o\|8TkHeq~&Zj;c24VSZK:Ds9+w<bjm
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 15 aa 4e df 1e 5e 1a d1 af aa 57 46 ae fa d0 da f1 8e 65 c6 47 a0 6b c0 ad 11 a5 1c 1c 18 b0 25 43 c8 71 bb 8d 6a 27 0d de 21 e5 5c 8e 18 39 46 fe 89 8e 0e bc 27 2c 0a 58 c9 ab 2f 3e da a8 4a c0 f2 12 12 27 9a 3a 85 5f 3e 58 cd a9 07 b4 e7 10 2f c7 8d 90 b1 48 28 0c 14 e6 59 08 a3 07 62 35 d7 7b be b7 1f 4f a9 c8 c9 59 17 18 21 df 5a 94 e1 59 69 c1 c8 7d 6e 72 32 c8 e3 49 b0 79 37 25 0a e1 cc 81 1d b1 ed 10 6f 0b b3 2b 16 f1 c5 d0 c0 de 1d 86 a4 55 ab 50 17 8d 45 1f 62 c4 ad 72 93 56 50 91 54 39 87 5e d5 37 04 b4 25 22 ec 03 7f 7c c9 35 c1 5f f4 28 73 f1 e7 09 3a ec 7b b4 9b b0 4b c9 9d 37 eb 89 21 6c ba 7b 60 55 88 6e 15 d7 1a ab 32 3e 5d 9e 70 20 ea a5 94 e9 79 67 0a 4a bd aa 7d f1 9e 73 dc 04 81 40 3c 61 24 1c 6b a4 e5 4d 7b 57 87 1a 1d 79 69 a1 b2 ea Data Ascii: N^WFeGk%Cqj'!\9F',X/>J':_>X/H(Yb5{OY!ZYi}nr2Iy7%o+UPEbrVPT9^7%"\|5_(s:{K7!l{`Un2>]p ygJ}s@<a$kM{Wyi
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 8f 20 66 58 c0 cf b4 d9 9f 11 a1 49 90 f1 19 5b 05 86 be b2 fd 76 46 69 80 f5 be c5 39 2d 53 ec ae 59 87 e9 af 61 91 c3 fa 63 9f 8f 89 d3 da 61 bd 8b 1c 3f 4c d4 26 39 bd 35 4c 15 05 8e ff 00 9f 2f d3 b6 3b 67 fe a2 f7 ed 95 61 a4 79 65 f7 1e ed 86 ea 0d fc 56 e4 cb 4b ab ce 1c ce 1e 6d ce 21 c5 b9 9f de a5 95 ad ef b1 11 71 8e 7e d8 3d 13 62 95 8f 1f 40 12 d8 d6 f8 52 2b 96 8c 69 0d 76 02 15 48 a5 4c 05 1a 33 71 5b 03 7f c3 01 98 2d 4e 9c 31 ae 28 7b bd bb c5 a7 a8 79 02 aa fb 07 49 6d 8b 16 c2 97 df 77 fb c5 7e e7 d2 a1 7e 75 cb 13 cf c4 75 1d d5 00 be dd 7d e5 ce fc ca fb 72 3e 0a 7e 51 0c 6a ed 86 6e 3e c2 b4 c5 d8 6f fa c2 d9 48 8d a2 e8 23 ee 35 bf 80 46 24 b5 c6 9f ad ce 53 b5 ad 6a 06 6f 63 4a d7 34 9d 31 5b 92 66 91 2b 37 97 de 68 20 5e 7c 97 ec Data Ascii: fXI[vFi9-SYaca?L&95L/;gayeVKm!q~=b@R+ivHL3q[-N1({yImw~~uu}r>~Qjn>oH#5F$SjocJ41[f+7h ^\|
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: d2 f1 ff da 00 08 01 03 01 01 3f 01 7a b1 1b a9 47 f9 72 d9 e2 7b ed a4 db 62 3b 58 ed 88 2a 11 90 3d c6 99 45 ba fe 23 b1 5f b9 dc 61 e4 d3 a7 95 b4 c6 e0 f5 22 dd 87 98 8b ab 5e c6 fe dd 71 fb 4d ac 14 92 e5 a1 ec ab 2c 12 ef ab bc 72 aa 9b ed fd 13 df e8 a7 1e 09 95 64 cd 32 fa b6 60 23 a7 76 8d c9 f5 75 6b 0f b1 20 61 b9 b4 30 6e ef 62 3d 19 0e ff 00 a6 17 7e e7 ca 3f d1 71 0d cd 4c c0 df 6b 6f b6 fd 31 dc ae ad c1 52 7b 72 dc d8 fa 1f 2e 1a fe bb f4 1f 53 b0 ee 30 e7 60 2c 3f fe 62 f6 4d ef 76 df 17 01 37 d8 fa 13 61 8c fb 37 4c ba 99 53 57 cf a9 ba c6 3d 13 a3 3f d3 b0 fc f1 41 52 2a 6c aa 6f 7e a2 ff 00 eb 8a ac c8 53 b0 86 9d c0 09 e7 23 f1 3e d7 3f 4c 64 d9 ec 75 d1 49 46 f2 1e 2c 5a a7 a5 b9 dd 80 00 cd 0d fa 9d 89 70 a3 d0 f5 c7 86 3c 47 4f 51 Data Ascii: ?zGr{b;X=E#_a"^qM,rd2`#vuk a0nb=~?qLko1R{r.S0`,?bMv7a7LSW=?ARlo~S#>?LduIF,Zp<GOQ
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: a6 33 ea 06 80 89 a3 04 7c f9 e0 e8 76 e1 f0 ec 7f ea 3b 7d 71 4a f5 74 a9 1f 09 5d 9d e4 73 c3 48 d9 88 89 37 2e 58 6e 4d ee 19 74 72 aa 96 2d db 14 c6 45 26 52 08 32 ea 3a bf bf 6f f4 6c 49 99 ca 22 78 f6 6f 94 d7 e9 6b 74 1b fb ef 88 2b a4 8a 99 5d 89 67 49 a4 62 be a0 aa 9d ff 00 cd 23 25 bf f1 1f bc 34 75 cf 96 c0 2a 07 c2 99 e4 79 ea 1e 62 fa cb 17 66 1a 62 dd 9a e3 7b 28 01 42 80 db f4 6a 44 87 8c 29 16 4b 32 32 c9 56 f7 46 7d 64 6a d0 bb 08 e3 2a 0a 8b 73 10 c7 9b 14 10 2d 25 1b cd 34 8b 0a c9 a8 42 8d b9 90 93 60 c1 7b 91 d8 91 61 7d f1 94 b2 03 3b 87 72 ec c3 8b ac 8b 29 d5 b5 99 55 56 df 41 f7 c5 21 48 94 14 f9 92 35 85 bf df 41 89 25 70 e7 94 6f fe ff 00 2c 78 66 0a 5a 6c c6 82 b7 29 90 8a 4a b4 a8 a2 cd 69 86 e2 9a 64 81 aa 69 e6 1d d6 39 24 Data Ascii: 3\|v;}qJt]sH7.XnMtr-E&R2:olI"xokt+]gIb#%4uybfb{(BjD)K22VF}djs-%4B`{a};r)UVA!H5A%po,xfZl)Jidi9$
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 95 50 e8 76 d5 ea 46 20 30 52 c6 0a 5a f8 ad cc 64 69 6e 09 03 b7 e9 8c df 33 fe 21 a3 bc 35 0a de 42 34 f1 ee 3a a9 74 0b ac 74 d2 cc 2f b5 8d ed 8f 0e d4 43 5c f4 d4 4f 61 32 9f 95 1e 9d 5a ae 2d cd ca 37 5d fd 41 1b fb 63 33 c9 29 eb 23 85 6e c9 25 3c 5c 38 de f7 bd bf c8 76 20 93 8a 8a 19 29 35 f1 e3 7e 21 f9 31 32 b1 e0 b2 bf e2 26 f7 b1 02 dc 3e 87 b9 38 50 d0 46 8f 53 4b 1c 8a c2 e2 48 ee b6 d8 72 ec d6 b0 3b 8d bd b1 4e 95 33 af 16 9e 9c 91 6b 06 08 85 58 6d b3 6b 16 36 df 9b 7b 5f a0 c5 34 19 dc 09 22 20 e1 41 55 a1 da 30 e4 6b 2a 35 29 b4 32 6a 5b df 70 db 6f 6b 1c 43 92 e6 b3 0e 52 91 5c 30 3c 3a 74 bd b6 d9 9f 48 7b 1f be 26 ca 25 a6 6b 54 4b 2f 36 dc b1 0b ff 00 f3 37 fe 58 87 26 49 51 6c d5 47 7d cd 86 93 df 94 08 f6 ef 7b 93 db a6 20 cb 24 Data Ascii: PvF 0RZdin3!5B4:tt/C\Oa2Z-7]Ac3)#n%<\8v )5~!12&>8PFSKHr;N3kXmk6{_4" AU0k*5)2j[pokCR\0<:tH{&%kTK/67X&IQlG}{ $

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50309	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	465	OUT	GET /mediamath?uid=6e3f662b-f35d-4100-8a7a-d4dc11b8af80&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:09 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:09 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50292	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	621	OUT	GET /media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%2010_36x36.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:09 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/svg+xml Content-Length: 3253 Connection: close Last-Modified: Mon, 20 Jun 2022 12:10:07 GMT ETag: "f80071b260fe4d3032349d75f41379eb" Cache-Control: public, max-age=36000 x-amz-version-id: yB47V7xIJmffa0.f_tu4C3PUY3oWJUnr X-Cache: Miss from cloudfront Via: 1.1 d1c64d10e2bd86b43a04bfb63e7766c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: M0QP4MxXsw4KIQ9OrAc5VsFJANijcZzvcOGGM5kuEM9Rl1Hz2En-Wg== CF-Cache-Status: HIT Age: 20513 Expires: Sat, 27 Apr 2024 04:33:09 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8db3d549ae9-MIA
2024-04-26 18:33:09 UTC	617	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 33 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 31 2e 33 33 37 2c 36 2e 33 35 2c 31 2e 35 36 2c 31 32 2e 38 34 2c 37 2e 31 38 2c 31 36 2e 30 38 35 63 30 2e 34 37 36 2c 30 2e 32 37 39 2c 30 2e 36 33 36 2c 30 2e 38 39 32 2c 30 2e 33 35 37 2c 31 2e 33 36 38 63 2d 30 2e 32 37 37 2c 30 2e 34 37 32 2d 30 2e 38 38 31 2c 30 2e 36 33 34 2d 31 2e 33 35 37 2c 30 2e 33 36 34 0a 09 09 43 33 2e 31 33 32 2c 32 39 2e 30 34 33 2d 30 2e 31 35 31 2c 32 31 2e 36 38 37 2c 31 2e 33 36 35 2c 31 34 2e 34 39 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 33 2e 30 30 34 2c 33 34 2e 32 34 39 63 2d 30 2e 35 32 38 2d 30 2e 31 36 33 2d 30 2e 38 32 33 2d 30 2e 37 32 33 2d 30 2e 36 36 2d 31 2e 32 35 73 30 2e 37 32 33 2d 30 2e 38 32 33 2c 31 2e 32 35 2d 30 2e 36 36 0a 09 09 63 36 2e 39 31 36 2c Data Ascii: 1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364C3.132,29.043-0.151,21.687,1.365,14.49z"/><path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66c6.916,
2024-04-26 18:33:09 UTC	1267	IN	Data Raw: 09 3c 67 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 35 22 20 64 3d 22 4d 37 2e 37 35 33 2c 32 31 68 32 2e 31 36 63 31 2e 32 32 33 2c 30 2c 32 2e 30 32 32 2d 30 2e 37 35 37 2c 32 2e 30 32 32 2d 31 2e 37 36 63 30 2d 30 2e 38 30 37 2d 30 2e 34 35 39 2d 31 2e 32 33 32 2d 31 2e 30 34 35 2d 31 2e 34 34 34 0a 09 09 09 63 30 2e 33 38 32 2d 30 2e 32 33 38 2c 30 2e 36 34 36 2d 30 2e 36 33 38 2c 30 2e 36 34 36 2d 31 2e 32 33 33 63 30 2d 30 2e 38 35 2d 30 2e 36 38 2d 31 2e 35 39 38 2d 31 2e 38 30 32 2d 31 2e 35 39 38 68 2d 31 2e 39 38 56 32 31 48 37 2e 37 35 33 7a 20 4d 38 2e 35 34 33 2c 31 37 2e 35 35 38 76 2d 31 2e 38 37 39 68 31 2e 31 39 0a 09 09 09 63 30 2e 36 34 37 2c 30 2c 31 2e 30 33 2c 30 2e 34 33 34 2c 31 2e 30 33 2c 30 2e 39 34 33 63 30 2c 30 Data Ascii: <g><path class="st5" d="M7.753,21h2.16c1.223,0,2.022-0.757,2.022-1.76c0-0.807-0.459-1.232-1.045-1.444c0.382-0.238,0.646-0.638,0.646-1.233c0-0.85-0.68-1.598-1.802-1.598h-1.98V21H7.753z M8.543,17.558v-1.879h1.19c0.647,0,1.03,0.434,1.03,0.943c0,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50314	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	929	OUT	GET /xxrz/250x400/793/6a/e3/6ae390dc2e135c79c6ea8efabe9abbf4/6ae390dc2e135c79c6ea8efabe9abbf4.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:09 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/jpeg Content-Length: 55818 Connection: close Last-Modified: Wed, 24 Apr 2024 03:55:53 GMT Vary: Accept-Encoding ETag: W/"662882c9-be04" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5340 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0YOLG6UUOEhc5OETrFFAnbLYFCVKaycpaLqRKr98djrGatHo%2FT6dEPiuXM2yP%2F5ELWJhcDpcS7qZ2wKwO0naLdoYJRcTae00LER80jju3REqBrxWB9VB9ssBD6nW1SpkhUSv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db3f990362-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:09 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 02 03 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 7d b9 a5 2d 32 f5 a5 7d f5 28 28 45 58 86 b5 ec 54 d7 5c 0c 85 b1 6d ef 6b 5f 3d ef 3f 60 97 5b 4a d7 0b 8b b8 a6 19 d4 c5 1a 12 27 ec 58 d3 cf 92 ff 00 e4 33 d6 f4 97 e8 e8 c2 d9 67 4e 50 26 a1 ba 2e cc bb 33 8c 11 85 b3 b6 0e 8c 82 82 0d ab aa 42 c6 2d 68 92 de 6b 49 b1 e3 ad bd ac 7e fd cf 77 2b d4 64 6e 33 bb 56 9f 6b b6 db d7 46 9b 92 db ba 8a 91 2a 8e f5 6d 3d db 3b 6d f2 f9 4a e4 bc 9e 84 6b bc fb 9c c6 47 b7 02 b9 a4 93 4e da e2 d8 c6 8d 84 fa 60 aa 1b 95 23 3f 9b 39 66 32 b2 f1 77 65 55 c2 99 9f 0c 8b 3d 8c ed 8c ad 6d 1a b1 a9 ed 72 93 17 45 08 96 70 d2 cc b2 e3 aa af 81 49 9b 5f 9f 0d fd fb f3 e7 28 59 5f 75 ea 8a ca 53 cd bc 9c da 65 43 08 cb fc ab 9e 46 29 ed b0 77 fc 82 f1 c2 6d 2f e1 17 29 a3 65 71 7e 7b 96 69 ea 65 61 bb 78 d4 e7 c9 5c 58 Data Ascii: }-2}((EXT\mk_=?`[J'X3gNP&.3B-hkI~w+dn3VkF*m=;mJkGN`#?9f2weU=mrEpI_(Y_uSeCF)wm/)eq~{ieax\X
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 9b 26 b9 39 8d 8d ea b6 98 18 fc 63 77 de 20 00 00 00 00 00 00 00 00 00 00 00 00 00 01 e9 93 a6 e7 86 95 a7 52 e0 71 28 97 91 08 97 e9 a7 cc 6e fe 5a c5 68 8b c4 92 cd 37 4f 77 47 9c f4 bc 40 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ef eb 90 70 f9 87 9a 47 ba 5f 19 fe d2 bc d1 6a e6 d5 37 6a 3b 66 dc 75 da 3c cc 3c 6d 00 0a e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ef f0 00 03 84 4e 7e 59 bd 4c f9 02 7d 48 0f df 85 d9 53 5c 38 82 fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 7f 80 00 00 33 9e 29 7d 35 79 5d 6e 9e 9f 87 d5 2e f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 bf c0 00 e3 f5 8c ec 7c d4 56 aa f5 00 ed 7c 78 02 57 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 7f 80 07 4d 5a 05 f4 f9 67 c0 0e cf 87 c0 ae Data Ascii: &9cw Rq(nZh7OwG@pG_j7j;fu<<mN~YL}HS\83)}5y]n.\|V\|xWpMZg
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 1a 36 8d cd 6a 46 90 c6 93 5e cb 47 5e cf 18 f9 5e bf 5e 9f 51 81 9a 60 be 80 09 13 44 8c 44 d3 44 e5 78 1c 9c 86 3a a3 e1 ab 23 ea a9 c8 31 c4 9d c8 25 2b 8c d1 0d dd 99 0d ee 34 5c 55 af 6d 45 1d 2f 82 fb 22 95 8d 24 ed ce b8 46 56 ee 0c 1e d1 f3 38 2e d3 6d d8 f1 58 d1 d1 4b 42 d1 10 5a 97 5c 31 ea 6d 7f 53 96 2a 24 77 47 72 b6 40 fc 0e 72 39 15 b8 c9 53 4d c5 48 f6 33 16 90 fd 37 16 3f 48 d8 94 c7 28 31 09 a5 58 f8 4d a1 9c dc 0e e7 b3 f0 5b 28 ad 7d 69 62 39 8d 45 6b 3f 51 92 4f 40 d7 d7 dc 10 4c ad b8 ea fa e9 8c d4 8c b2 a6 a8 d3 77 26 4f 78 bb 9f 21 24 5b e5 31 ee 02 b6 d5 88 3b 1b 2a f7 95 15 5e da 2b f9 54 ed 87 7f e3 74 89 f2 21 68 71 2a ee ab a7 d2 46 13 a6 d5 ac 44 f6 7d d6 53 57 db 3d 9f ad fe 9d 30 77 28 7d 37 61 08 d1 fa 65 c1 1f a9 9e 9b Data Ascii: 6jF^G^^^Q`DDDx:#1%+4\UmE/"$FV8.mXKBZ\1mS$wGr@r9SMH37?H(1XM[(}ib9Ek?QO@Lw&Ox!$[1;^+Tt!hq*FD}SW=0w(}7ae
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: cc 27 92 aa 81 96 89 83 63 e3 c6 e8 6d 3e b1 4c 56 bd e5 e3 c9 d0 5a 14 d1 5a eb da 1d 16 44 99 35 cb 4f 36 59 ca 8e 22 e9 88 a8 d7 49 56 c8 e1 8a 8c e3 a6 72 a3 6e 3f 39 78 8e 35 ef ac 5d eb ef ab 5f e4 84 41 0c cc c9 36 9e 92 62 ef 16 34 b4 d7 8e 6f 55 f9 78 5d 56 c0 95 2e 4e d5 ec 99 e6 52 63 b8 45 75 16 99 f5 5b 0e 52 31 55 cc 7f 1f af aa e8 11 7e 14 59 76 06 38 31 cb ab 07 ce f0 b6 12 f9 d9 c4 59 69 2d 8a 81 39 91 ad ea d5 6f 5c dd 18 b8 f5 af fa a2 72 b5 71 27 73 63 4e de 95 da 54 ec 9b f5 89 c1 b5 26 4f 8e ad 3c 8e 15 3f 14 d0 07 e4 7d 3d 43 a6 1b 6b f1 60 7c 73 1e 67 8e 10 fe a8 34 4d 58 a7 f4 fc af 9d 8c ec 4f d4 dd 5b b5 3a fe f2 47 a8 f0 7b fa 75 8d 35 1f 0a 18 52 22 03 b3 e0 bd d6 31 5a 4e 9f 5d 66 69 e4 c7 6c 48 35 8c d2 6b 15 3b 5b 3a 89 fe Data Ascii: 'cm>LVZZD5O6Y"IVrn?9x5]_A6b4oUx]V.NRcEu[R1U~Yv81Yi-9o\rq'scNT&O<?}=Ck`\|sg4MXO[:G{u5R"1ZN]filH5k;[:
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: a4 29 19 d5 da 82 72 dc 58 99 55 85 7a 45 3c 27 70 40 cc a7 0e 9d 75 d6 62 e6 46 b4 a7 3b 33 35 e8 b5 ff 00 33 13 6b 94 37 7d c7 6b fa 57 a5 1b 61 49 fe d0 52 86 66 11 c2 e1 e5 1d a9 05 28 bc 80 32 e6 eb 6a c1 a5 95 e2 59 4e 20 e4 69 4a ba 8f b3 16 99 3b 7e f6 de 8b 6e 62 1c 79 c6 13 9c 36 e4 f0 d0 9b f0 51 01 2b 4a 77 1d 98 50 d4 13 27 51 4f 38 97 5e 71 c4 23 86 95 2a 72 7e 1b 54 d1 6d 79 38 99 55 c3 9c b9 e0 81 9a 27 2f 7d 25 60 32 19 3e d1 75 0a 1d c1 b5 0f 99 15 85 30 84 a7 f2 26 fd c9 14 14 15 31 b5 5c 27 a2 a0 dc 6c 2e 3a d0 d4 13 7e 94 b5 a9 41 b4 9d 1b 4c 27 9c 12 55 f0 27 ca bd 0d 8d 67 0a cb bc 48 52 db 68 28 24 37 95 45 01 76 6c 29 56 51 25 dc c4 d8 c1 bc d7 a7 56 1c c4 61 9e 8c a5 6d a4 91 b2 01 02 23 9e 87 49 14 e2 fb 16 fa d2 bd 13 ed 3f d4 Data Ascii: )rXUzE<'p@ubF;353k7}kWaIRf(2jYN iJ;~nby6Q+JwP'QO8^q#*r~Tmy8U'/}%`2>u0&1\'l.:~AL'U'gHRh($7Evl)VQ%Vam#I?
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 14 52 75 09 b4 4d 3a 73 2e 20 7c f9 51 4d ea 3e d6 04 af b8 8f 8d 63 92 54 a5 24 72 1f 5f 0a 53 26 6f d7 e7 de 2b 12 ea d8 79 08 09 49 6d 79 72 5c e6 02 06 bd 06 82 6f 1b d5 b8 21 a8 d4 49 3c 95 af d5 e8 02 67 36 f0 0f 70 1c f6 9a 43 24 a4 a5 44 24 01 20 f9 41 3e 54 a6 89 b6 6c d1 72 af 2d 3f 5a 6d 82 a5 4a a7 25 80 8d ff 00 6a 18 67 12 df 61 4a 58 4a d0 e2 59 8b 29 41 62 67 9d a6 28 a1 61 c7 5f 71 25 25 ef 65 0a b9 44 14 d8 9e 76 bd 2c dc 9f ad ab 35 66 fb 35 ac 3a 4e bc cc 53 f9 73 dc df 97 7c 5a 9d 28 cf da 81 cb b1 3c ba d2 f3 92 d8 75 a4 bc 83 6e 2a 51 90 b6 53 17 3b 41 f0 8a 05 85 11 da 0a 55 c6 54 de 14 22 41 3c ba fc 28 36 d8 da 84 1b 40 83 00 f7 52 92 12 3b 22 e6 de 1b d2 6c a0 9e 5a 83 ae d6 34 a7 0a 14 88 8b aa 29 f0 a7 5b 0e 09 85 c6 61 f8 54 Data Ascii: RuM:s. \|QM>cT$r_S&o+yImyr\o!I<g6pC$D$ A>Tlr-?ZmJ%jgaJXJY)Abg(a_q%%eDv,5f5:NSs\|Z(<un*QS;AUT"A<(6@R;"lZ4)[aT
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 14 32 42 91 a1 b1 10 23 30 c1 d1 f0 07 15 20 24 33 52 72 82 34 53 62 d2 e1 73 92 a2 b2 f1 ff da 00 08 01 02 01 01 3f 01 07 17 91 ce 47 d0 14 15 30 66 0c 1e 84 6a 3c 45 3c fe e8 09 80 65 40 05 11 99 cf 0e 9a 62 f7 81 9d 6c b7 4a d4 f9 81 de 7c 9f 5b a0 4f 2e 31 34 05 6d 70 a5 6e 73 cb 12 89 1f da 07 df 56 8b 7f 79 e8 62 70 3a 52 a2 a2 a3 09 85 49 c8 f3 8e 95 72 eb a1 85 ee 3b ee 25 23 21 eb 09 d0 81 9c e7 c3 2c b3 e1 41 f4 b0 db 6d bc bc 05 c4 46 35 99 fa c3 aa 67 4d 4e 59 e7 4c 62 6d b4 a1 4b de 29 22 0a 87 18 d0 9e b1 f2 a2 4d 07 44 e1 25 38 e3 10 4c e7 87 9d 3a 85 6f 5b 58 39 06 b3 f1 c4 85 7c 81 f7 52 c1 2a 4a a3 95 01 11 1a f1 8f 1c a8 00 61 5c ba 98 eb e3 4a 9e 06 3a c4 d0 08 49 51 19 63 38 95 9f 18 03 2f 2a da 6c 2d e5 a7 0e 20 95 b8 a1 38 e7 09 c0 Data Ascii: 2B#0 $3Rr4Sbs?G0fj<E<e@blJ\|[O.14mpnsVybp:RIr;%#!,AmF5gMNYLbmK)"MD%8L:o[X9\|RJa\J:IQc8/l- 8
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: f1 21 38 92 74 09 03 cf 3d 2b 65 39 79 b3 fb 40 c7 6c 56 af dc 76 87 69 2f b6 65 c2 b3 c2 96 5e 70 04 b8 a3 fe 59 93 1c b7 23 9d 39 b7 1f 3d b7 b6 d8 6c ee 93 65 69 b1 9c da 5b 49 c2 06 2c 4a 84 b0 8c 73 08 48 94 ba a3 a9 98 26 35 d9 1d b3 d9 bb 55 9d ab 7d 95 a6 ca d9 d7 de 82 de d2 b9 79 b6 ed ef 16 23 12 da 98 21 00 a9 01 24 ce 32 ac b4 ae d3 f6 b3 64 f6 72 cd 97 ef 9d 51 76 e5 69 16 96 ac 00 bb 8b 8c c7 79 09 24 77 13 20 95 aa 11 98 ce 68 76 e3 64 3b b7 3f 52 b6 bc 65 bb 47 ae ae ef 0a db 45 ad a6 e5 38 d6 d3 8b 2a 82 e2 46 4b c2 70 a1 59 62 35 da 5d ba c5 bf 64 76 ae d3 b0 b8 6d f4 3f 6a ab 7b 47 ed d4 16 95 bd 74 e2 6d 51 bb 5a 75 52 54 b5 65 33 29 d2 bb 19 b2 ed b6 4d 9d bb 4f 1b 76 b6 b5 e5 9b 0e 3b 68 5c 6f d2 d8 b1 61 b4 35 68 d6 eb 16 f3 0a 13 Data Ascii: !8t=+e9y@lVvi/e^pY#9=lei[I,JsH&5U}y#!$2drQviy$w hvd;?ReGE8*FKpYb5]dvm?j{GtmQZuRTe3)MOv;h\oa5h
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: fc 74 ff 00 8a 42 8b 6f 21 c0 99 09 3e 24 8d 0c 53 97 2e dc 10 d3 6d 38 10 48 c4 ac b3 19 18 a6 ed 82 44 95 2f c0 18 e1 d2 b0 c7 b4 af 9d 41 e7 f0 15 1d 4f c3 f0 a5 26 7d a5 0f 71 fb a9 fb 12 e1 c4 0a 7c 23 09 c5 ce 40 fb a8 d9 3c e1 fe 18 98 e0 a9 d2 39 e9 4d 5b 1c 20 00 64 7a c1 7c cc 66 27 81 8a 7a d5 d3 83 0a a3 3e f6 99 e9 46 d5 e3 84 13 a7 01 1f 91 a5 3b b3 5b 52 82 94 57 29 88 85 01 ef cb 33 97 1a 76 d5 24 64 98 29 c8 11 ae 94 6d 54 95 05 01 9e b3 cf 30 73 af 46 41 ef 28 92 47 ce b7 09 20 48 81 d3 23 ef d6 92 da 50 21 30 3c be c1 a7 58 4a 40 5e 3c bc 0f cc 56 5c be 82 99 a7 90 10 0a b4 09 1a 52 8c 9d 3e d3 d3 6e 7f cd 3e e4 fe 14 6f ef 24 0c 4a ea 42 9b e9 c0 89 3e 55 66 f6 fd 94 a8 fa e9 ee 2f c4 68 7f b8 41 f8 53 e8 0a 11 03 24 92 a9 e0 22 8e bf Data Ascii: tBo!>$S.m8HD/AO&}q\|#@<9M[ dz\|f'z>F;[RW)3v$d)mT0sFA(G H#P!0<XJ@^<V\R>n>o$JB>Uf/hAS$"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50313	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	929	OUT	GET /xxrz/250x400/793/52/99/5299dcaeb71225b45ac215eb6bdcdf7c/5299dcaeb71225b45ac215eb6bdcdf7c.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:09 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/jpeg Content-Length: 56220 Connection: close Last-Modified: Wed, 24 Apr 2024 03:54:49 GMT Vary: Accept-Encoding ETag: W/"66288289-7d9d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5340 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uxg%2BF9jPvjrUyYupMgD%2FrzPNu9ty9PZ5BhuXK5iy%2B91dRJr%2B0XMjrWScDSK%2BG9V2aMcOoDOb50k8d14ELUkWTW1DdI3wuTNNeX35CjdSPC7eU8LlX767cT4%2BTqzwzLDPAjVG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db3b00db05-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:09 UTC	643	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 80 d3 59 ae ef 42 32 ad b2 47 88 b0 a8 02 78 6f d3 67 44 34 67 13 ac 2e 78 ca 80 ee 41 0d ee 66 91 cb 88 57 b1 54 8f a4 e6 29 6b 3e 5f 63 38 45 c9 da af ad c0 6e 08 50 70 70 85 82 16 31 91 3c b1 26 54 b8 a1 e9 a9 c3 58 04 52 92 14 f6 69 42 b8 db 52 8a 31 c1 cd bf da a1 d8 2c 8d a5 96 e3 b1 00 27 64 a4 3c 75 32 ac 93 ae 2d e2 6c f8 eb 26 b1 7b 24 f3 6a c6 17 21 03 a6 ce 50 89 c9 8e 10 ae 2a 65 44 3b 52 cc da e7 b8 8c 99 d2 88 fb 5f 1e a6 bf e6 39 28 8b 44 6a b3 71 11 05 0d ca a4 69 76 58 ad 99 91 2a e2 84 44 91 98 cc 26 b6 d1 44 64 93 c6 3c 45 7e 58 b3 eb ba ba cf f9 3b 1a 16 70 37 56 70 ce ed cf 3d 5b 84 67 d5 0c 6e bc 03 c2 f2 7d a4 3a d6 73 45 6c bd 44 d1 69 b4 a7 a7 8f 39 6b 57 d6 7d 5b 04 d3 88 61 66 14 9a 49 5a 1a db 11 ba 24 76 c2 7d 19 bc dc 44 3d Data Ascii: YB2GxogD4g.xAfWT)k>_c8EnPpp1<&TXRiBR1,'d<u2-l&{$j!PeD;R_9(DjqivXD&Dd<E~X;p7Vp=[gn}:sElDi9kW}[afIZ$v}D=
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: dc 5e f1 79 e5 b5 fc 40 5d ba 3e 62 d8 b1 00 cd 6d 14 ae f9 3d 39 b3 04 44 65 75 69 4e 1e 94 1e ce 2b d2 be 56 5d 02 73 f3 46 59 27 80 b0 29 e2 bd 9c a3 c2 35 1f 52 67 3e b3 7e 81 d3 79 aa be 15 df f9 f5 82 74 52 79 bd 95 a6 51 28 54 0d 06 b0 15 5d 11 41 ed 56 64 b5 07 9e c8 da 92 22 cb e4 1b d8 91 bd a8 8d 60 1a 2e ca 64 aa 45 99 fd 4c e8 e3 aa 78 3f 23 08 16 62 74 e3 88 5f d2 d0 f1 c4 81 8c b4 f2 ca 43 90 35 71 ee c5 95 e4 bb 1a a8 f6 0f 9a 30 81 f4 9f 34 fa 8f e5 a4 9c bd 7c cd ec bf 3a 3a 4e 4a 53 8d 7a 06 fd 65 1e 6c a2 58 8a 65 2d 6d 0f e8 7f 2b a3 2c 4c fc bf 5b af 40 6f 44 b2 89 62 3d 94 f4 56 63 f9 26 34 41 59 89 92 3b 65 81 07 0f 03 db 3b 67 6f 7c f2 d0 26 e0 6d 7a 8e 64 90 86 12 9a db 61 c2 ca 6d 77 0b 65 6d 16 d5 a5 28 9d 64 e8 4e 92 0d 76 90 Data Ascii: ^y@]>bm=9DeuiN+V]sFY')5Rg>~ytRyQ(T]AVd"`.dELx?#bt_C5q04\|::NJSzelXe-m+,L[@oDb=Vc&4AY;e;go\|&mzdamwem(dNv
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 4d 19 8f 6c 4a 1e cb 63 da a8 78 82 1a 3d 92 34 3a 04 b6 09 b2 06 c9 69 c6 52 a4 e5 5c 76 cc e1 61 5f 26 0b af c6 51 82 69 68 11 23 1b c2 2d 53 89 11 a0 ae 32 5b 7d 7d e3 f7 eb dd 06 4f 30 6f 85 c3 22 0e 36 a4 aa 33 bd 14 72 3f 19 92 3a 21 76 4c 98 62 53 ad b9 4f 68 9b 06 56 d8 36 88 81 75 21 f8 98 d2 01 20 12 41 24 12 01 20 74 06 40 d1 f0 a6 4f 77 18 c5 75 db 76 3c 7b ec d4 ee 20 ca 4d 38 df 84 e1 47 ea 95 c3 6d e0 55 0d 34 e1 30 da 07 8d 00 d0 c9 13 91 c8 c3 b1 d0 90 f3 5a 39 32 25 07 9b 9a f9 46 a7 51 ad 8a f2 6d 0d 25 71 dc 83 24 a6 36 b6 cc c9 e6 95 b3 25 90 ee f8 d0 22 04 12 40 93 b1 e3 1e 2f 9f 08 f0 e8 1b 60 9a 13 68 59 74 49 af 52 56 9a ef 92 ae d9 48 84 e1 0f 68 e9 82 84 a1 ec 36 3d 91 85 d7 36 69 7a a9 a2 0f d7 b6 42 64 25 74 85 58 a0 70 d3 af Data Ascii: MlJcx=4:iR\va_&Qih#-S2[}}O0o"63r?:!vLbSOhV6u! A$ t@Owuv<{ M8GmU40Z92%FQm%q$6%"@/`hYtIRVHh6=6izBd%tXp
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: a9 0b 85 d1 a2 74 90 f3 49 9c a8 cf f1 17 25 96 6b 5c 4a 04 a1 bf 42 f4 d8 23 1b f5 d8 33 06 60 cc 38 64 1c 59 10 6a 74 49 88 cc 39 87 0e c4 64 65 3f c4 6f b9 89 89 60 b6 b9 56 43 96 f2 c3 50 c7 f2 ab 96 64 82 6c 8d ad 84 2f a8 de d5 5e 94 93 2d 99 91 c7 71 3d 70 ac 71 57 d9 26 01 c5 d4 f8 1b c4 08 c3 d3 22 46 70 17 da 66 0c c1 85 18 50 51 85 98 cb ad 1c a6 c6 f1 9c d6 d2 af 14 b4 42 59 b0 54 46 bd 86 1f 07 35 cd 6b 70 be 3d a2 c2 22 8d 8d 8d 86 88 94 ba a7 fb 25 07 a0 4a 31 c6 b8 dc bc d3 20 6c b4 92 04 63 f8 81 bc 6f f5 3a b9 5b 2d b0 bb c3 f3 b8 d7 ed 0d 8d 8d 8d 8d 8d 83 06 16 61 63 95 b2 28 b8 e6 29 c6 8d 54 e7 4a cb b8 2f 36 a7 95 fc ae ce d1 1f 0f a0 8f 8c e3 66 35 e8 41 94 77 1a 31 0d c0 d3 dd c9 4e 19 97 f0 f7 8d 50 cf 9a 46 36 36 39 ae bd 35 f9 Data Ascii: tI%k\JB#3`8dYjtI9de?o`VCPdl/^-q=pqW&"FpfPQBYTF5kp="%J1 lco:[-ac()TJ/6f5Aw1NPF6695
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 3a 77 b9 1a db 26 b5 ca 73 c9 96 82 86 5a df 29 b2 90 6d c5 41 a9 aa ac 92 d2 9e c2 c7 23 bb a2 a6 83 c9 15 53 5b f3 61 76 21 e9 3f 56 91 29 77 11 a2 3e 56 81 a4 49 40 34 cb df a9 6c 87 70 d2 93 ba b8 8d db 47 79 52 61 cb c4 f9 5d fe 8e 72 9e 29 1d 8b 2e 57 af 44 5c ae d8 e6 c9 6c fe 63 2b e1 fe 14 80 e4 69 d1 1e 66 4d 07 14 cb b1 a0 8f c6 73 df b1 46 23 4f 8d 4a b1 a7 c2 66 11 e3 d2 2b 22 aa 62 de 5b 2e 29 2e b2 8e f6 19 f4 b5 38 d2 9b 5b c1 c2 62 bd 89 36 32 5e 79 9b 94 b6 19 cd 5f d3 f9 0b 32 98 f9 fb 49 43 b1 0a f9 de cd 56 97 15 16 aa 8f 75 56 db d6 de e5 89 a8 94 e1 49 75 d3 75 c6 c6 3a ca 65 5c 4e e4 9a c6 63 cf 69 52 2b 30 cc ba b6 1d 05 8c ec 6a ed 9c a7 8b 5b b6 6a cf 0a 9d 58 4a 90 f2 1b 8f 51 62 f2 3e 9b 30 9c 7d 78 ed 5c 79 57 ac 4c 75 bb 48 Data Ascii: :w&sZ)mA#S[av!?V)w>VI@4lpGyRa]r).WD\lc+ifMsF#OJf+"b[.).8[b62^y_2ICVuVIuu:e\NciR+0j[jXJQb>0}x\yWLuH
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 8e 39 de 8b bc a7 08 19 07 f1 0f 9c d3 db be af 0e 0a e4 6e 76 e3 e5 bd 28 d3 ce 9e 0e f3 8f 1e b4 f1 14 3e 7c 8d 1c b7 13 c3 e7 f0 ac aa 9c 03 56 57 06 6f 03 7b 40 64 1e b4 cb a6 b5 f9 1a 03 15 7d 7e 96 26 00 e8 5c 4c cc 32 08 1a 42 e9 c9 df 8f b5 5b 10 0f 51 9f c6 97 b5 6d da ee e2 d8 82 16 d9 24 77 9b 23 4e 22 c6 af 08 c9 e3 b7 3a 4b cb 99 11 65 87 b3 67 78 9c 65 1c cb 0a 16 5e 47 4b 36 45 5c 76 9d a8 86 39 24 85 fc 53 9b 77 0c 00 92 09 17 db d5 c4 60 01 c4 1f 85 5c d9 2c 28 f3 ec d1 84 ef 32 36 f0 f8 4f e3 44 24 81 16 24 2c ef 1a c9 a4 63 65 61 b6 e6 85 b8 56 45 91 0a 77 9b 29 66 0c 33 b7 4e 1e b4 96 f1 4c 9a d0 60 6a 65 3e f5 20 54 b6 e8 59 63 d1 b9 52 46 fd 00 a9 6c 14 fb 58 4c f4 5c f4 e9 49 68 a8 30 0f d9 51 5b 2c 7f 49 c0 73 a5 50 c9 bf 30 0f c4 Data Ascii: 9nv(>\|VWo{@d}~&\L2B[Qm$w#N":Kegxe^GK6E\v9$Sw`\,(26OD$$,ceaVEw)f3NL`je> TYcRFlXL\Ih0Q[,IsP0
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 99 4e a8 40 f6 b0 01 53 c8 8c 54 77 d0 49 c1 c7 1c 6d 5d ab da 73 7e 93 05 95 9b 37 8b 4b cb 22 71 d2 78 01 d1 42 82 cc 79 e4 74 a8 7b 4e e6 1d a5 5e fd 14 7b 43 f6 f8 e5 8e 08 e4 74 3a 49 cf 1a 6e dc 75 77 cc 7e 1c fd 1a 36 52 6d 38 1f ba d9 d5 e4 41 c1 e4 4d 49 da d2 5d fd 09 d5 04 32 68 c3 ba 78 58 ac 80 90 76 38 c8 1f 11 bf 50 dd bb 25 8c 93 40 cf df 3f 7d 21 cf 77 dd f8 49 1a 57 1b fb 0b 85 ce 7c 58 ce 06 71 47 b7 27 f0 dc a2 e1 a5 1d d9 cf 0d 31 10 46 3d fd e1 cd 2f e5 0d c6 30 63 cf b8 8f 2e a2 85 c2 f7 ac ad 94 2c 7c 3a fc 21 8f d5 04 ed 9f 7e 2b b5 7b 4a 3b 68 dd 06 a2 db 0d 40 65 01 c8 ca b3 7e ef 99 df 14 7b 5e 16 9a f9 35 ba a4 b0 45 0d b3 05 fd e8 9d 59 94 ff 00 ac 3a 9a bf ca 32 a7 7b 84 3e 24 28 09 d5 c1 b1 ab 6c f4 f9 da bb 33 bc 96 e9 b7 Data Ascii: N@STwIm]s~7K"qxByt{N^{Ct:Inuw~6Rm8AMI]2hxXv8P%@?}!wIW\|XqG'1F=/0c.,\|:!~+{J;h@e~{^5EY:2{>$(l3
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: df 95 34 b1 23 7d 11 ef a4 b8 8b bb 02 3f ad a7 da 6c 91 81 f1 ab 4b 5b 8b 6b 74 8c 47 e2 8d 9d 80 f1 fb 4f c5 bf 67 c4 0d 81 cf 33 50 06 b7 73 df db 33 96 cf 8d f2 75 8d b5 63 48 38 e5 c7 d2 9a ca ca e0 f8 90 a1 f2 91 b1 f0 39 fb ea 3e cc 45 1f 44 ea 01 c7 11 ab 87 a8 eb f9 88 cd 11 8a 65 a7 0a 8e 8d c3 2c 06 79 2e e3 8d 30 c6 2a ed 0b c4 50 32 2e b0 41 32 60 26 36 e3 92 2a 68 56 3e 17 56 d9 e7 dd 21 3e 1e 43 56 e3 d4 7a d1 31 ab fb 61 86 46 a5 20 00 7e 39 a8 1b b1 e6 84 81 07 75 2e 9e 03 63 c4 7b 12 0c fa ec 29 7b 3e c2 44 5c 09 24 39 1c 64 d9 78 12 09 73 b1 f7 0a 8e 39 ff 00 4c 40 c9 1a c1 1c a1 63 d1 8d 5a 4a 78 75 10 77 27 1e d7 d9 f9 ae b2 d2 5b a8 93 bb 3a f5 0d 98 ea 60 40 03 60 7a f3 c5 4c 24 ef 99 a1 f1 8d 4c 70 39 6f fe 15 6e ee 89 99 01 4c 91 Data Ascii: 4#}?lK[ktGOg3Ps3ucH89>EDe,y.0P2.A2`&6hV>V!>CVz1aF ~9u.c{){>D\$9dxs9L@cZJxuw'[:`@`zL$Lp9onL
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 60 31 22 f7 bb 45 f5 6b f5 d6 1d bf ba 63 0f 05 11 5f cd ab 0a ee f8 7c 70 8c 16 7e a9 2c 00 27 db 1c 85 60 60 c4 0c 54 25 e2 90 26 7d 49 52 07 aa 7b a9 db f4 92 8e 52 3f db 6a cf dd f5 ff 00 4f 46 13 fc 17 48 ff 00 04 1f f2 56 1d e3 38 34 c6 b1 bc 98 28 a5 81 57 99 7b 75 1e ec e7 df 58 1d 70 b0 1f fd a4 47 fd 82 b1 5f e2 71 1f cf 97 ed 9a 63 fa 37 1c fa 1e 31 fe f5 ae 8d 90 cf d5 44 7d 7c 2e 21 31 11 ff 00 29 98 2c aa 39 00 72 91 be f5 d2 0d fd d8 69 fe a1 8a 3e fa e8 d9 5d 53 1f 63 be 14 fd b4 ae 91 c4 06 c5 28 3f f8 d8 6f f8 96 b0 d2 29 e8 fc 59 e4 f8 7f 8d 61 6c 70 38 f2 0f 08 3e d9 ac 18 64 c2 f4 83 2b 59 84 29 62 2e 0f af dc 6b a3 e7 99 b1 90 29 96 42 a5 f5 52 ec 41 ec 9e 66 a5 fd 6c bf cd 93 ed 9a cc 68 c7 05 82 fd 1e 12 a3 60 50 1b 73 df ca be 8f Data Ascii: `1"Ekc_\|p~,'``T%&}IR{R?jOFHV84(W{uXpG_qc71D}\|.!1),9ri>]Sc(?o)Yalp8>d+Y)b.k)BRAflh`Ps

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50312	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	929	OUT	GET /xxrz/250x400/793/90/b0/90b051bb3db7aefe1c46a855e18305a6/90b051bb3db7aefe1c46a855e18305a6.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:09 UTC	723	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: image/jpeg Content-Length: 88636 Connection: close Last-Modified: Wed, 24 Apr 2024 14:37:02 GMT Vary: Accept-Encoding ETag: W/"6629190e-15505" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6952 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t%2Fm7OjjxFEvzs%2FEoMzf%2FXyS2ch7M60GEn1k64nxIIzVrEFl9MX8ZetmDjB03ZSafeNwY%2FVChvzYcvQpwZN6n87eRAIi5urmKzIwj9YWu8j15C7P0LXJUE2yi5dzPkpWJPc6n"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db3aaa6dce-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:09 UTC	646	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: d3 cb 6a af 41 a8 9d cb f0 bd 40 b8 bc c4 aa d0 67 fd 02 55 1a 08 05 f2 cf d0 ed 70 e6 38 67 cb 0c 5d c5 fc b8 db 09 5d d3 ab 7d f9 eb ea 2f a0 47 b7 95 d6 94 ea 59 2f f2 06 fc d7 1c af 5d 1d 21 e9 02 5e 87 41 7b 01 27 8c 52 5a 39 c0 49 1d 3d 26 3d f5 89 d5 1e e1 0d 29 d5 22 bf 27 49 fb c1 c5 4b a0 0c e5 5d 67 bd 36 ab 03 50 cd 81 f6 8f cc 4d e2 24 d6 73 27 c3 38 41 45 7b 81 75 6f 66 fc ca 4c ff 00 4c 15 e6 f0 3f 9d 7b a5 d6 c2 54 b2 fe 6d 0d 7d 5a be 3f 7d f9 b6 ec 80 76 f3 64 30 3d e5 ff 00 59 19 aa b7 86 1d dd cf 5f 92 8e 80 6f 1f 3f 7e cb d0 1e 23 19 ea 36 c8 53 0c d1 2a 34 b4 f0 db f5 47 9e 6a 68 9b c3 bd 84 b4 82 07 cb 3b 05 fd fd 03 7e 4a 7f 55 d8 07 0f 78 f7 da d1 c0 d6 d3 54 44 5f 15 b8 05 b8 e6 9d ec a1 91 25 d3 2e 49 75 82 9d c2 0e 9b cd d5 5a Data Ascii: jA@gUp8g]]}/GY/]!^A{'RZ9I=&=)"'IK]g6PM$s'8AE{uofLL?{Tm}Z?}vd0=Y_o?~#6S*4Gjh;~JUxTD_%.IuZ
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 89 65 8c 43 21 a6 52 75 cf a0 25 e3 48 ce 4f 51 85 52 ad f9 d0 2e 71 f3 d0 c8 b4 ae 2f a4 a7 41 81 c7 80 2f 3b e9 70 86 b5 c8 ce 8c 0a 2e d3 f5 ad 0d 79 a0 1b 24 f6 b6 1d 99 21 f3 d2 a2 27 52 d8 57 08 3c e5 d1 d4 4b 4a e2 1c 5a 66 29 82 30 ad f5 1e 62 6d ac 52 1d 97 0f de 06 91 03 0c ac 8d 12 bb 31 b6 f2 82 33 cc 19 ce ca 49 da 46 3a 21 2c 0f d5 a9 2f b2 9c 8c 9c 5d a3 a2 e7 c2 27 b0 ae 7d d2 03 ce 51 f7 e3 62 c2 c8 94 69 66 4a 5d f5 26 88 d8 b5 1a ad 13 cb 2a 27 88 08 d8 0d 1e 97 08 5e 43 b6 12 8c 81 53 e0 26 b9 24 6f eb 50 93 a9 85 d3 a8 f9 55 c0 a4 1c 8c 2c 63 52 1e c5 95 20 65 40 50 a9 06 df bd 56 9f 4e a8 cd 56 29 d4 cb c5 9b 50 3f c2 56 d6 0e 40 1e 25 be 8f 14 35 e6 4f 28 ab 72 79 1b 1a 5c 7b e5 b6 33 0b 31 41 13 74 4a bc 64 df 5f 4b 83 02 4e e1 eb Data Ascii: eC!Ru%HOQR.q/A/;p.y$!'RW<KJZf)0bmR13IF:!,/]'}QbifJ]&*'^CS&$oPU,cR e@PVNV)P?V@%5O(ry\{31AtJd_KN
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: fd a3 c6 ff 00 b7 30 e7 2a a6 97 13 af 38 e6 4e c5 36 f9 6e b7 b1 af 6e dc d8 65 59 4e 62 81 18 c7 b9 f9 c3 6a 63 6d 26 dc 40 cc f2 57 ec 96 d7 f6 cd b6 cf 69 eb eb 63 f0 07 fb 2e 6e b8 57 6b 6e b6 af 6d 64 51 63 91 b1 7a 94 d5 d6 e1 d3 d3 3e c3 7a 62 bc a8 17 44 26 e1 7f f1 af a7 f3 0f d4 30 ca 41 ae d2 43 1d f5 25 b8 6d a3 cc 08 25 86 c2 ce a2 92 14 41 24 58 1b 85 92 c2 8d 57 b2 4a 2b 6d c9 fb 84 01 b6 f7 1c c5 b2 ab 1e 9d 75 ba 99 9c 98 27 c7 6e a3 64 54 5b 95 8a ae 4f 47 91 6d ce 6d 8e 07 6d b1 56 e2 78 ee 49 6d f6 9a d5 a0 cb 33 bc 87 16 c6 ab b1 3a 7c c3 2a 8f 8f 41 ce 33 f9 59 0c a6 c8 2b 82 e8 ce 72 aa fc d6 de 4a ae 77 d3 de 48 6b ab ee 48 ab bb cd eb 92 fd c8 51 ac 64 79 4e fc b6 ad b2 28 f6 e3 6d b2 bc 56 fe 64 8b 88 cc ca f7 68 b6 6d a9 cd ae Data Ascii: 08N6nneYNbjcm&@Wic.nWknmdQcz>zbD&0AC%m%A$XWJ+mu'ndT[OGmmmVxIm3:\|A3Y+rJwHkHQdyN(mVdhm
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 57 02 d6 70 a6 b7 14 3b 1b 5f 3f 1d 94 e7 47 ab 13 1a f8 0a 72 9c 90 6b de 53 92 42 f8 fa eb 96 a6 95 55 57 fa 09 89 e1 e8 ed 65 f0 d0 a6 9e 15 14 83 ff 00 2e 8a ed 35 a2 66 80 79 1a fc d9 a6 b9 9a 91 0c 65 c7 59 cf 63 3e 74 dd 2b 7a bc 4d 33 04 11 4b 7b 8a 19 2a e8 d0 7c b2 fe dc 06 98 ed 6c 8d 09 a0 48 f3 db 29 fa 2b 8c cd 0e 71 0c 29 1d f4 f7 95 34 f7 11 75 c7 f4 4f e8 9c 72 de 5a 25 72 31 6f 84 a4 d5 a3 b9 71 9a bc 89 0a cd 0e 29 4b a3 47 f1 a0 06 06 32 22 09 fa 7b a3 b6 ba 5b 21 4e 70 e0 84 30 c7 08 6d 27 25 54 6b 11 8a 83 ec d8 8a 8c 94 6f d4 3f 2b a4 72 ae 91 9d dd ea f6 27 da 1b 22 3c a8 e6 16 8c 35 e5 cd ff 00 8b 13 e5 13 4a 5e ab 67 29 85 6d c0 fa 91 ff 00 2e 7f 1d 63 db 4a 03 a2 b6 1d 88 64 56 3b c3 1c 22 8c a7 73 e4 b9 b1 55 35 c7 2a c6 2a e8 Data Ascii: Wp;_?GrkSBUWe.5fyeYc>t+zM3K{\|lH)+q)4uOrZ%r1oq)KG2"{[!Np0m'%Tko?+r'"<5J^g)m.cJdV;"sU5*
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 90 d7 d2 1f 1c b2 11 18 79 4f 4f 5f ed 64 7c 45 1b 5d a7 31 c8 91 ff 00 f6 d7 27 06 03 1a a3 ac 42 a9 ce e1 69 7c aa b4 8e 57 52 e5 2b db 47 47 a0 ad d8 a9 5e aa 9d 85 fc 5f c7 91 87 77 8d aa e4 91 5c d4 2b ac 82 54 d3 9e aa ae 93 eb 8e 7c 86 f9 c7 90 42 88 b0 73 01 8e 41 72 54 70 eb ec e1 ce 8d 43 39 a7 8f 62 16 86 fe d1 aa 49 e6 63 9e 59 ff 00 11 21 29 47 05 91 60 86 58 57 6d 46 d6 d9 60 21 74 db 4c 25 6c 7f b8 b0 7d 2d c6 df 13 57 ee a8 2c f6 cd 23 5b 8f bd 5f 53 93 2a 6a 43 f8 89 64 f7 3e 22 ff 00 21 7f 8b ff 00 d9 bf 2e 86 20 91 94 66 f2 8e cf f3 82 91 e3 19 6f 63 ce 7d 54 0c 5f ce e8 78 8e 00 46 44 a8 c1 22 1e 70 b0 f0 29 b0 7a 49 3a c7 6a 66 51 93 2b 32 3a d6 50 58 e9 6f 46 b1 87 51 a4 6a b9 ad 23 25 4c 73 4f 4b 32 2f 3c 47 72 d9 0a 27 f7 53 9d 0b Data Ascii: yOO_d\|E]1'Bi\|WR+GG^_w\+T\|BsArTpC9bIcY!)G`XWmF`!tL%l}-W,#[_S*jCd>"!. foc}T_xFD"p)zI:jfQ+2:PXoFQj#%LsOK2/<Gr'S
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 49 1d b5 8d 28 12 b5 87 1a 01 51 d4 c2 f0 db 53 41 72 5d 41 90 56 4d 9c 20 4a d6 6b b4 2d 38 cb 8c 64 22 2e 29 87 44 a3 91 d9 5e 03 b9 4a 18 87 49 51 2b a5 a0 a5 6e 14 20 c9 8a c4 65 15 85 a4 d7 3c 96 3d cb 2e e1 9d d2 c1 38 93 09 fc 2b ca 89 1a 11 5b 28 5e 24 66 a0 37 cd 22 81 cb 1c 27 72 bd ee 2f 94 35 ef 6a 9a 6b b4 51 23 a5 27 e1 5b 5a d7 70 ce a0 96 68 ed 2e a1 3b b5 bd 74 a4 91 4d 57 d4 73 8d 18 56 b2 43 28 b1 c8 91 9d c0 4e f3 e9 ef 10 1b 32 f6 b7 d3 83 91 92 36 45 26 7a f3 25 82 bb a3 9b 59 0e f8 96 18 e9 9a eb b8 45 8e b6 68 44 d4 f1 ab d9 19 88 af f5 12 58 6b c5 eb 89 fc 10 31 62 ba 44 a8 c4 74 69 8f 33 1d a9 06 41 16 bd eb ed cd 55 ed 29 a8 8d 90 f1 ba 4c 72 b8 0b 31 ac 20 9b 30 6f 65 14 74 b0 b2 41 c9 0d 5d 4d 83 49 0e 9e 68 5c 8e 40 4d 88 da Data Ascii: I(QSAr]AVM Jk-8d".)D^JIQ+n e<=.8+[(^$f7"'r/5jkQ#'[Zph.;tMWsVC(N26E&z%YEhDXk1bDti3AU)Lr1 0oetA]MIh\@M
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: a6 a9 a6 5a 64 aa 5a 9b 54 c7 d7 68 d5 db 45 2c 54 b2 39 8c 75 58 1f d3 3a 1e 18 54 a9 91 21 0e b1 8e 1a ca 96 93 08 bf 57 64 33 4d 7b 4f 5e e2 9e 11 df 69 11 5e 57 df 7b c1 49 61 7f fb ce 33 f6 46 9a 7e 1c 51 54 34 8d 21 e2 47 c1 10 47 a5 5a 75 73 76 43 33 ab ac 31 f6 47 11 82 3b b2 9d 01 19 59 ad 97 e4 79 96 67 32 8a 3a 53 c4 25 19 22 a0 eb 35 f2 46 0a a3 2e ae 02 c9 24 6f 62 1b 5c c6 99 37 bf a3 1b 63 3a 82 bf 26 af 93 2f ad 4a 61 55 12 43 23 23 43 47 3c c9 c5 8c 38 15 92 46 1d 56 b3 93 49 10 77 08 1d 01 91 9f 5e 13 25 ac 7c 96 6c e2 a6 18 e0 a5 a6 92 2e 2d 4c 70 a4 4a 1a 7b 04 a5 54 53 12 54 54 b7 12 19 74 28 0d 12 48 a6 49 2d a8 22 45 4f 50 4a c5 2d 55 c2 97 62 69 13 4a 28 b5 dd ca d5 31 0a 3b cd 8f 30 00 2c 54 19 22 d0 ed 1c 87 b5 1b ba 1d 26 e2 ea Data Ascii: ZdZThE,T9uX:T!Wd3M{O^i^W{Ia3F~QT4!GGZusvC31G;Yyg2:S%"5F.$ob\7c:&/JaUC##CG<8FVIw^%\|l.-LpJ{TSTTt(HI-"EOPJ-UbiJ(1;0,T"&
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: d9 bf 47 24 79 32 fe a6 cd 24 7c 16 35 74 54 f5 0c 62 e5 c3 13 32 0a 81 18 ff 00 0c 4b c3 ee 2a 46 d8 a9 aa 35 7c 1a a6 8a 9a 19 24 33 c6 e2 96 9a 1a 58 8e 89 04 80 f0 60 44 8c 11 d6 0a 83 a4 1d 0a 80 df 1d 1a e9 2f f6 68 b5 42 51 c7 55 24 f9 65 64 34 db 37 1a 1a da 87 92 24 aa 42 0e 92 13 83 4f 1b 82 a5 84 5c 4e 19 bb b8 6e ab 57 43 45 2d 7c 94 d2 16 92 55 a2 32 11 d9 a4 35 51 48 e5 a6 27 fd e6 78 92 41 14 17 32 ac 6e d3 c8 13 d0 eb c9 a2 a0 4c a7 36 ae ab 9c 23 a5 1c d1 d3 c4 8e 63 9e a2 aa 61 c1 a3 a7 8c a1 0e b1 71 1e 4a aa 96 4d 24 c3 4a b1 17 11 ca ea dd 18 ae 83 2e ad 8e b1 e3 96 a6 54 96 31 4f 0c 56 e2 49 3a a4 d3 53 76 cd f4 2a d6 43 4a ef 21 07 4a 06 d8 b1 5c 54 49 3d 66 67 35 49 95 6a 25 15 d2 d5 cd 38 91 f4 b8 59 8b 4a fc 6b 34 84 3a 96 01 c0 Data Ascii: G$y2$\|5tTb2KF5\|$3X`D/hBQU$ed47$BO\NnWCE-\|U25QH'xA2nL6#caqJM$J.T1OVI:SvCJ!J\TI=fg5Ij%8YJk4:
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: e2 10 1a 49 22 97 ad 42 f7 b9 2e 63 86 36 36 bd ef 8c c3 a2 b9 85 2c aa b5 35 2b 24 11 c6 a8 20 8b d1 2b e9 22 cd 23 2c 4a 58 1b 0f 47 61 17 3b ae 12 0e 10 0a 2c 8a 06 c1 47 b3 91 3b 58 79 00 3b ad 8f cf 9f e8 f7 db 19 b4 57 8f 50 de e9 bf 96 26 83 5c 6c 07 67 fe 2e 5e 47 13 25 6c 0b 76 b9 5e e6 88 9d 24 8b 7a ca 39 1f 68 f2 e6 71 08 ac 9a 39 3f 51 9e b0 bf 67 81 12 be e8 05 ad b7 ab b9 bb b1 b8 b7 60 06 27 14 88 28 d2 48 8a cd 79 26 92 67 8a 71 e9 52 59 1c b4 8a c6 c0 83 ac 93 dd f7 0c 30 24 ed 75 1e 17 bd fd a7 f1 c6 8f 2c 70 99 7e cd 87 8e 19 47 ac 6d e6 6f 80 2f fc 80 be 12 9d d9 35 18 a5 d0 db 6b e1 36 9b f9 3d ad f0 c2 67 b9 7d 6e 59 04 75 d3 18 2b 60 89 22 93 89 1b 91 30 8c 05 59 03 2a 91 76 03 b4 0e fa af dd be 25 5a 77 3e 8a 54 6b f2 d9 97 c3 f7 Data Ascii: I"B.c66,5+$ +"#,JXGa;,G;Xy;WP&\lg.^G%lv^$z9hq9?Qg`'(Hy&gqRY0$u,p~Gmo/5k6=g}nYu+`"0Y*v%Zw>Tk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50310	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	632	OUT	GET /movie HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:09 UTC	957	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:09 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FSgV%2FW3CNGf%2Fvt3Ev5MBIOQTU6e5hpXHXeAPNS4Yo0XySbVbSnK9LvMQ4KSd2uO7c7zs65ltX%2BtaS0gOAa9yfkiNpJPKSnKgmSQD%2B74FPI%2FvW1NZ%2B%2FumXh1xHB02wPU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db4e35227d-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:09 UTC	412	IN	Data Raw: 37 62 66 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 23 31 4d 6f 76 69 65 73 20 7c 20 57 61 74 63 68 20 46 72 65 65 20 53 74 72 65 61 6d 69 6e 67 20 4d 6f 76 69 65 73 20 61 6e 64 20 54 56 20 53 65 72 69 65 73 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 Data Ascii: 7bf5<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/> <meta
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f Data Ascii: refetch" href="//www.google-analytics.com"><link rel="dns-prefetch" href="//www.gstatic.com"><link rel="dns-prefetch" href="//fonts.gstatic.com"><link rel="dns-prefetch" href="//cdnjs.cloudflare.com"><link rel="dns-prefetch" href="//static.zdassets.co
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 65 20 66 6f 72 20 66 72 65 65 2c 20 53 74 72 65 61 6d 69 6e 67 20 6d 6f 76 69 65 73 20 6f 6e 20 31 4d 6f 76 69 65 73 2e 74 6f 2e 20 31 4d 6f 76 69 65 73 20 69 73 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 62 73 69 74 65 20 66 6f 72 20 66 72 65 65 20 6d 6f 76 69 65 73 2e 22 2f 3e 0a 3c 21 2d 2d 42 65 67 69 6e 3a 20 53 74 79 6c 65 73 68 65 65 74 2d 2d 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 34 2e 34 2e 31 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 Data Ascii: e for free, Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/>...Begin: Stylesheet--><link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css"><link rel="stylesheet" href="ht
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 2e 5f 43 3d 24 2e 42 44 3b 24 2e 5f 43 3c 24 2e 43 42 3b 24 2e 5f 43 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 75 2e 64 28 74 2c 24 2e 43 61 2c 74 29 2c 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 26 26 6e 5b 24 2e 43 63 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 43 69 5d 3b 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3b 7d 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 75 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 24 2e 43 46 5d 5b 24 2e 43 4a 5d 5b 24 2e 42 7a 5d 28 6e 2c 74 29 3b 7d 2c 75 2e 70 3d 24 2e 42 75 2c 75 28 75 2e 73 3d 24 2e 42 78 29 3b 62 72 65 61 6b 3b 63 61 73 Data Ascii: ._C=$.BD;$._C<$.CB;$._C+=$.y){switch($._C){case $.y:return u.d(t,$.Ca,t),t;break;case $.BD:var t=n&&n[$.Cc]?function(){return n[$.Ci];}:function(){return n;};break;}}},u.o=function(n,t){return Object[$.CF][$.CJ][$.Bz](n,t);},u.p=$.Bu,u(u.s=$.Bx);break;cas
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 24 2e 42 44 3a 76 61 72 20 74 3d 6e 5b 24 2e 47 75 5d 28 24 2e 64 79 29 2c 72 3d 74 5b 24 2e 63 6a 5d 28 29 5b 24 2e 65 46 5d 28 29 2c 65 3d 74 5b 24 2e 42 74 5d 28 24 2e 64 79 29 3b 62 72 65 61 6b 3b 7d 7d 7d 29 2c 75 5b 73 2e 5a 5d 3f 28 6c 3d 21 24 2e 42 44 2c 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 5a 5d 29 29 3a 75 5b 73 2e 57 5d 26 26 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 57 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 6e 3d 74 5b 24 2e 63 72 5d 28 29 5b 24 2e 64 64 5d 28 29 5b 24 2e 47 75 5d 28 6e 65 77 20 52 65 67 45 78 70 28 24 2e 64 7a 2c 24 2e 42 75 29 29 2c 75 3d 24 2e 24 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 74 5b 24 2e 49 69 5d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d Data Ascii: $.BD:var t=n[$.Gu]($.dy),r=t[$.cj]()[$.eF](),e=t[$.Bt]($.dy);break;}}}),u[s.Z]?(l=!$.BD,($.BD,a.$)(u[s.Z])):u[s.W]&&($.BD,a.$)(u[s.W]);break;case $.BD:var n=t[$.cr]()[$.dd]()[$.Gu](new RegExp($.dz,$.Bu)),u=$.$();break;}}}},t[$.Ii]();break;case $.BD:var t=
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 79 29 5b 24 2e 43 41 5d 28 24 2e 43 42 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 4f 62 6a 65 63 74 5b 24 2e 65 5d 28 72 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 2c 72 2e 56 3d 72 2e 51 3d 72 2e 6e 6e 3d 72 2e 74 6e 3d 72 2e 72 6e 3d 72 2e 65 6e 3d 76 6f 69 64 20 24 2e 42 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 44 43 3a 63 26 26 28 63 5b 24 2e 42 5d 28 61 2c 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 63 5b 24 2e 43 5d 28 61 2c 74 29 2c 5b 28 24 2e 42 44 2c 69 2e 75 6e 29 28 6e 5b 24 2e 63 73 5d 29 2c 28 24 2e 42 44 2c 69 2e 69 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 42 5d 5b 24 2e 74 5d 29 2c 28 24 2e 42 44 2c 69 2e 63 6e 29 28 6e 65 77 20 65 28 29 29 2c 28 24 2e 42 44 2c 69 2e 66 6e 29 28 77 69 6e 64 6f 77 5b 24 2e 62 Data Ascii: y)[$.CA]($.CB);break;case $.y:Object[$.e](r,$.Cc,$.$($.Ij,!$.BD)),r.V=r.Q=r.nn=r.tn=r.rn=r.en=void $.BD;break;case $.DC:c&&(c[$.B](a,function t(r){c[$.C](a,t),[($.BD,i.un)(n[$.cs]),($.BD,i.in)(window[$.bB][$.t]),($.BD,i.cn)(new e()),($.BD,i.fn)(window[$.b
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 43 4a 3d 24 2e 42 44 3b 24 2e 5f 43 4a 3c 24 2e 46 73 3b 24 2e 5f 43 4a 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 4a 29 7b 63 61 73 65 20 24 2e 43 66 3a 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 66 6f 72 28 24 2e 5f 42 6b 3d 24 2e 42 44 3b 24 2e 5f 42 6b 3c 24 2e 43 42 3b 24 2e 5f 42 6b 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 6b 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 65 3c 3d 74 26 26 74 3c 3d 75 3f 74 2d 65 3a 6f 3c 3d 74 26 26 74 3c 3d 63 3f 74 2d 6f 2b 69 3a 24 2e 42 44 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 5b 24 2e 42 76 5d 28 29 Data Ascii: k;case $.BD:$.Cr;break;}}},function(n,t,r){for($._CJ=$.BD;$._CJ<$.Fs;$._CJ+=$.y){switch($._CJ){case $.Cf:function a(n){for($._Bk=$.BD;$._Bk<$.CB;$._Bk+=$.y){switch($._Bk){case $.y:return e<=t&&t<=u?t-e:o<=t&&t<=c?t-o+i:$.BD;break;case $.BD:var t=n[$.Bv]()
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 5b 24 2e 65 5d 28 74 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 44 64 3d 24 2e 42 44 3b 24 2e 5f 44 64 3c 24 2e 43 66 3b 24 2e 5f 44 64 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 44 64 29 7b 63 61 73 65 20 24 2e 43 42 3a 76 61 72 20 75 3d 72 28 24 2e 44 43 29 2c 76 3d 72 28 24 2e 46 6c 29 2c 6c 3d 72 28 24 2e 42 44 29 2c 66 3d 74 2e 70 6e 3d 6e 65 77 20 6a 28 24 2e 61 42 2c 24 2e 42 75 29 2c 69 3d 28 24 2e 43 73 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 3a 24 2e 24 28 24 2e 61 2c 6e 75 6c 6c 29 29 5b 24 2e 61 5d 2c 77 3d 24 2e Data Ascii: [$.e](t,$.Cc,$.$($.Ij,!$.BD));break;case $.BD:$.Cr;break;}}},function(n,t,r){for($._Dd=$.BD;$._Dd<$.Cf;$._Dd+=$.y){switch($._Dd){case $.CB:var u=r($.DC),v=r($.Fl),l=r($.BD),f=t.pn=new j($.aB,$.Bu),i=($.Cs!=typeof document?document:$.$($.a,null))[$.a],w=$.
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 6e 28 6e 2c 74 29 7b 66 6f 72 28 24 2e 5f 65 3d 24 2e 42 44 3b 24 2e 5f 65 3c 24 2e 43 42 3b 24 2e 5f 65 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 65 29 7b 63 61 73 65 20 24 2e 79 3a 72 5b 24 2e 61 76 5d 3d 6e 2c 69 5b 24 2e 46 5d 28 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 72 3d 6e 65 77 20 45 76 65 6e 74 28 74 29 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 74 2e 4f 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 72 65 74 75 72 6e 20 68 5b 24 2e 43 67 5d 28 6e 75 6c 6c 2c 24 2e 24 28 24 2e 47 6f 2c 6e 29 29 5b 24 2e 61 61 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 28 24 2e 42 44 2c 75 2e 64 6e 29 28 72 2c 74 29 3b 7d 29 5b 24 2e 42 74 5d 28 24 2e 65 67 29 3b 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 Data Ascii: n(n,t){for($._e=$.BD;$._e<$.CB;$._e+=$.y){switch($._e){case $.y:r[$.av]=n,i[$.F](r);break;case $.BD:var r=new Event(t);break;}}},t.On=function(r,n){return h[$.Cg](null,$.$($.Go,n))[$.aa](function(n,t){return($.BD,u.dn)(r,t);})[$.Bt]($.eg);};break;case $.B
2024-04-26 18:33:09 UTC	1369	IN	Data Raw: 6f 5d 28 79 28 24 2e 43 76 2c 24 2e 43 77 29 29 3b 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 76 61 72 20 74 3d 79 28 24 2e 46 71 2c 24 2e 47 45 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 6c 5b 24 2e 42 6e 5d 3d 24 2e 42 75 3b 62 72 65 61 6b 3b 7d 7d 7d 29 2c 28 24 2e 42 44 2c 61 2e 6b 6e 29 28 29 29 72 65 74 75 72 6e 3b 62 72 65 61 6b 3b 7d 7d 7d 63 61 74 63 68 28 6e 29 7b 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 69 66 28 76 28 75 29 2c 77 69 6e 64 6f 77 5b 24 2e 43 5d 28 24 2e 47 6c 2c 6e 29 2c 24 2e 63 47 3d 3d 3d 6c 5b 24 2e 44 73 5d 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6c 5b 24 2e 44 74 5d 3d 21 24 2e 42 44 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 24 2e 4a 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 77 3d 6e Data Ascii: o](y($.Cv,$.Cw));});break;case $.y:var t=y($.Fq,$.GE);break;case $.BD:l[$.Bn]=$.Bu;break;}}}),($.BD,a.kn)())return;break;}}}catch(n){}break;case $.BD:if(v(u),window[$.C]($.Gl,n),$.cG===l[$.Ds])return void(l[$.Dt]=!$.BD);break;}}}},$.Jj);break;case $.y:w=n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50307	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	693	OUT	GET /ajax/banner/vpn HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"10-UiecVLFvCojUPVe0y7mBPqPMOas"
2024-04-26 18:33:09 UTC	908	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:33:09 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"10-UiecVLFvCojUPVe0y7mBPqPMOas" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DiLk7x1mGIMdvHmPzj2yPKdrylB%2BlpQXullf4Q2oomaJaah%2FjaSt5FGYDneoC64ZOJu1ykgv8NTUfZwIXIxYhyS4KX8MwE6hrz4WgifyqzduaqoJ6RLtL3FWRj%2FfDDw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8db48ca4c02-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50306	52.92.0.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	410	OUT	GET /static/cryptocoin/vtho.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:09 UTC	431	IN	HTTP/1.1 200 OK x-amz-id-2: ESC40mcukPYJk+i5I49RHYysrg8LvHxawLLFLT8fhFBMxH5nJzc1FsX4woCVWkRGx9jbleJcFvQ= x-amz-request-id: 5DF269QED3GTKZF3 Date: Fri, 26 Apr 2024 18:33:10 GMT Last-Modified: Tue, 21 Jun 2022 08:13:40 GMT ETag: "b2dac216f60dc75b697e87483829e1b2" x-amz-version-id: czDAUJTQRekSMW1joJTnZNj6S48UxnxB Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 370 Connection: close
2024-04-26 18:33:09 UTC	370	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 38 22 20 66 69 6c 6c 3d 22 23 32 41 35 32 38 34 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 32 2e 38 30 36 20 35 2e 36 39 68 33 2e 34 6c 2d 36 2e 33 39 31 20 38 2e 35 33 32 68 35 2e 37 33 36 4c 31 31 2e 38 34 39 20 33 30 2e 33 31 6c 34 2e 34 33 32 2d 31 31 2e 33 36 37 68 2d 35 2e 30 30 36 4c 31 36 2e 33 32 33 20 35 2e 36 39 68 36 2e 34 38 33 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 2e 37 30 34 22 2f 3e 3c 70 Data Ascii: <svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#2A5284"/><path d="M22.806 5.69h3.4l-6.391 8.532h5.736L11.849 30.31l4.432-11.367h-5.006L16.323 5.69h6.483Z" fill="#fff" fill-opacity=".704"/><p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50305	52.92.0.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	409	OUT	GET /static/cryptocoin/mbl.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:09 UTC	432	IN	HTTP/1.1 200 OK x-amz-id-2: Zlqa2P5b/W0XkQlqHTAhH/ilF9u3clSF52r76w0/SAZ3x5W46qo7Si3M8H83b0cDWZlKdGjWIDk= x-amz-request-id: 5DF90HR78FD52872 Date: Fri, 26 Apr 2024 18:33:10 GMT Last-Modified: Tue, 10 May 2022 16:21:36 GMT ETag: "8655b256a90dce02c744782b37c5bf98" x-amz-version-id: mJpKmk2sqsBypJsc9JfX2ga6E2Aoe9Jj Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 1242 Connection: close
2024-04-26 18:33:09 UTC	1242	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 38 22 20 66 69 6c 6c 3d 22 23 35 42 34 34 39 42 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 39 20 31 30 2e 38 35 38 76 31 34 2e 39 34 63 2d 2e 34 35 33 2d 2e 30 35 31 2d 2e 38 39 35 2d 2e 31 31 2d 31 2e 33 34 32 2d 2e 31 39 32 6c 2d 2e 31 39 32 2d 2e 30 33 34 2d 2e 36 32 31 2d 2e 31 31 34 2d 2e 32 31 38 2d 2e 30 34 63 2d 31 2e 30 39 34 2d 2e 32 2d 32 2e 31 38 36 2d 2e 34 30 39 2d 33 2e 32 37 38 2d 2e 36 32 34 61 31 39 38 2e 37 30 35 20 31 39 38 2e 37 30 Data Ascii: <svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#5B449B"/><path d="M29 10.858v14.94c-.453-.051-.895-.11-1.342-.192l-.192-.034-.621-.114-.218-.04c-1.094-.2-2.186-.409-3.278-.624a198.705 198.70

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50315	141.95.33.120	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	594	OUT	GET /k/155.gif?puid=AAGbQU7MV-cAABTrRdAf4w&id5AccountNum=155&numCascadesAllowed=9 HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=ef3cddf5-ca0f-737b-a417-e2297a9c0d9f#1714156371003#2; 3pi=121#1714156372767#-1519022819\|155#1714156386397#-681916381#AAGbQU7MV-cAABTrRdAf4w\|124#1714156375753#1865358582
2024-04-26 18:33:10 UTC	304	IN	HTTP/1.1 404 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding content-type: text/html;charset=utf-8 transfer-encoding: chunked date: Fri, 26 Apr 2024 18:33:09 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-04-26 18:33:10 UTC	49	IN	Data Raw: 32 42 0d 0a 63 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 69 6e 69 74 69 61 74 69 6e 67 20 73 79 6e 63 20 70 61 72 74 6e 65 72 20 6e 75 6c 6c 0d 0a Data Ascii: 2Bcould not find initiating sync partner null
2024-04-26 18:33:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50317	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	505	OUT	GET /panorama?uid=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1&stid=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:10 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:10 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50322	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:09 UTC	698	OUT	GET /xxrz/250x400/793/81/a6/81a6f809123d73982bcf71dae330052f/81a6f809123d73982bcf71dae330052f.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:10 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:10 GMT Content-Type: image/jpeg Content-Length: 66611 Connection: close Last-Modified: Fri, 26 Apr 2024 13:52:15 GMT Vary: Accept-Encoding ETag: W/"662bb18f-c41c" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1766 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wUQdPYOZmOWjAt7CHTw8Zsc4UaRKcSmkOJTkduC0ytvKeuQkyS8ZI7lM5QyREYXNQTtOgEyoTLUkJWiF%2BN7LrxFRCl7eG8Mg7XRiDmH5oT6p3LPZU%2BMEXDXPfar7RlFRdG0K"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8de7de109b2-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:10 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: d6 e9 2a 22 de 8a 2e 08 fe 77 59 a6 65 c8 53 11 e0 2d 1d 16 7e 41 e5 ab 3d f7 9b ea c3 76 f5 c5 ee 6d 2f 0a 68 be dc 35 26 c8 cb 20 e7 31 8a 4f ad b7 6f 62 96 f5 03 9b 7d 87 8a 6d 41 68 e1 42 a6 da 7a eb 1c 8b 37 86 36 a1 10 f7 92 5a 09 13 64 e3 bd dc 11 3c c5 63 9e 92 9d 42 c2 ac f6 e8 f1 af 9c ae d7 19 3b fe 24 03 49 c7 57 fc 6c 82 c2 83 63 c1 ec f2 fb e9 1e 62 9d 36 ed 6b 8f 2f 8d 12 35 24 19 23 83 7c 4e 73 fa 47 95 53 e8 6b 5e c7 b3 01 b4 f1 1e 9a d6 98 ed 75 a5 e8 b7 5c 44 20 35 9d 38 51 59 6c 43 da 47 42 22 b1 ce 8f 39 38 fd b2 46 4d 69 c9 26 95 c0 6c 04 3a 1e 7d 8b a5 57 c1 bc e4 72 a6 9e 47 28 a2 b5 98 f4 70 5b 68 75 14 7f 96 dc b6 6c d1 e5 db 15 2d 71 49 2b b7 cc d4 91 3d 13 a9 2f 1a 31 da 51 10 04 71 f2 e1 b1 c2 f3 fa 88 05 7c 31 12 57 29 52 4e Data Ascii: *".wYeS-~A=vm/h5& 1Oob}mAhBz76Zd<cB;$IWlcb6k/5$#\|NsGSk^u\D 58QYlCGB"98FMi&l:}WrG(p[hul-qI+=/1Qq\|1W)RN
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 02 28 43 03 72 8d 53 06 5c 75 d9 50 01 d5 f1 54 64 f1 3b e2 c7 1d 59 a8 7d ed 7f 52 7e f6 7a 12 71 91 47 24 e9 33 63 bb 5a 5d 01 23 41 8a 3e 41 f4 0f a1 8f 53 48 10 a8 27 74 29 7c 80 b9 d9 6a 91 30 b9 a1 e8 98 6a 38 44 d9 d2 72 fe f0 53 75 12 57 9f 6b bf 4b 79 b3 78 28 67 a9 9c 83 ec 47 63 a4 95 52 db d4 58 01 be d5 12 cc 12 09 26 a2 45 ca 75 86 11 6f e0 26 0f 67 25 9e a4 0f ae f5 3c 80 35 2c ef 8c 31 0e ba 4b 11 98 a4 da 93 34 a9 74 7a 45 16 d9 e4 be fc 40 26 0f 66 ed 8a 45 45 ca 42 c9 e9 c4 12 f8 63 25 f6 4c d9 23 61 1a 16 cb c1 5a 9b 35 dd 00 b8 6a 32 8f 59 d5 17 a5 30 46 d9 51 52 00 38 b1 a9 1a 20 d1 09 0c e4 8c 84 b2 3b 5b 18 b5 42 d4 0d 6a f3 5b 67 6b 64 7e 4b 14 0b 63 32 38 b3 63 55 28 88 49 52 d6 d6 bd 99 2e 89 b5 d6 67 ac 27 a3 9c 22 c1 54 45 55 Data Ascii: (CrS\uPTd;Y}R~zqG$3cZ]#A>ASH't)\|j0j8DrSuWkKyx(gGcRX&Euo&g%<5,1K4tzE@&fEEBc%L#aZ5j2Y0FQR8 ;[Bj[gkd~Kc28cU(IR.g'"TEU
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 65 d4 da 2a f2 c6 ea cd 33 d9 67 b7 ea f7 2c d7 49 e0 b9 30 91 e2 70 9f dc dc 76 22 a2 2c 92 05 c7 89 86 4f 82 2e 79 17 91 48 50 2b ee 65 70 e3 b9 71 0e ec a1 01 25 d8 ea f0 a1 02 9f 64 ae 8b 65 61 4d a0 24 4c b1 d5 8d 60 24 8b b6 02 45 ad fe df 6d 16 8a a7 66 33 bf 69 c7 9e d1 6a 6d 63 e5 d4 0a 4c 78 74 64 fd 32 2b 09 00 db 9e d1 25 5a 89 c2 89 8e 76 32 29 1c 90 cd 22 be 45 2e c0 b6 8e 65 58 95 89 8e cf eb 22 2f 6e 15 7e 1f 48 d0 0b 27 24 57 94 38 a9 c6 77 65 21 a4 9c 92 ad a3 56 eb da df ed 60 30 9c b8 45 95 29 55 4e 77 c7 8a 08 91 b1 35 c8 52 a4 9a 2b 1c b0 58 c1 24 d2 04 ab bf 6e 52 b5 c0 ed 1d 4a 8d b0 a0 a7 f7 aa b8 2e 50 06 17 03 00 3b 48 d4 22 e9 b5 cf 91 6a 2a a2 28 fb b9 c7 27 1f 4f 93 b2 28 d7 0e de 06 b9 ee b9 40 65 71 2c e1 34 38 70 b9 c5 a6 Data Ascii: e3g,I0pv",O.yHP+epq%deaM$L`$Emf3ijmcLxtd2+%Zv2)"E.eX"/n~H'$W8we!V`0E)UNw5R+X$nRJ.P;H"j('O(@eq,48p
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 1a a8 86 68 08 8a ec 92 93 58 d9 2e 59 0d ad 3b 4e 3d b6 07 9e 08 49 e2 2c 22 b5 ca 0e 13 22 7c cd 1f 6b ae 5b 80 ce 8b 39 01 ee 9b 51 d6 25 16 a5 58 ca d8 1b 0c af fe c5 04 85 95 59 be 8d b0 9f 77 20 92 2d 63 76 3b 0c ff 00 1a 0d ce c8 48 83 44 7f ba 11 c9 93 c9 dc df 4e dc 67 08 84 6e 6d 91 db 13 66 b6 00 e4 c5 82 25 94 28 ed 20 44 5d aa 7d 45 a4 59 10 ef 21 59 c2 2d 7c 8d 26 65 94 8b 69 8e f2 47 b8 ad 79 5b 4a 71 87 03 60 d5 59 53 df 51 5d 45 4d 14 ec 8d 59 0e 23 23 37 2e 54 53 e5 4a 22 46 a9 ba 9f e4 9d a9 d9 23 eb f7 38 24 b4 ae db 2b 1f 14 91 d5 58 ef e4 a2 44 72 b5 fc aa 3f 9c 71 13 84 fb a5 46 7b 7a e8 42 1d 86 e9 44 07 ec 77 b5 97 50 eb 6c bd 5d 35 59 9a c9 0a e4 1c 5e a1 47 58 84 d5 f6 57 d7 cd b0 87 07 62 ac 91 10 b5 92 f6 b0 c7 1c 73 06 54 5c Data Ascii: hX.Y;N=I,""\|k[9Q%XYw -cv;HDNgnmf%( D]}EY!Y-\|&eiGy[Jq`YSQ]EMY##7.TSJ"F#8$+XDr?qF{zBDwPl]5Y^GXWbsT\
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 9c e3 51 79 c6 e2 67 91 7b 7b 5b 91 85 61 33 1a 36 46 49 71 d4 23 8d 10 14 f1 aa 01 ea a6 4a 8e a1 af d7 1c ef d3 4b fe ea 1d 78 7c f2 ba d0 04 1e e5 a7 ac 6f d4 77 da 71 eb 57 7b dd 15 33 75 ae a4 b0 a3 da 55 33 5f a4 97 b1 dc 6c 3a b6 bb 0a aa da d5 7f 4e 6f cb 0c ee d6 27 3d ae 7f b2 bf 38 c5 57 67 3c e3 31 7f 90 db ca a0 9a ad fe 2f e5 30 e5 0c 08 f1 40 80 63 18 18 51 8c b2 64 3f 5d f1 c5 85 50 57 5b d0 ea b6 08 b1 e2 9d 84 1c 36 a4 67 6f 9a 75 de d2 2b 0d 32 e3 54 8d d6 90 86 e7 58 12 ad c7 42 6d 24 db 6d 74 9a 64 68 f6 1b 74 da 68 fa d6 c1 ae 7f b9 d1 4e 47 11 dd 25 d6 81 b3 ee 37 d1 c5 16 e2 3c 16 1b 56 5c 77 e5 39 c7 2e 35 39 5e 38 c7 3b e6 27 fb a3 b0 ab f3 47 fb 43 11 24 c9 8c 2f 58 6b 47 35 1e c8 fd 85 96 07 c3 c9 f1 e5 43 b0 73 d2 51 35 93 88 Data Ascii: Qyg{{[a36FIq#JKx\|owqW{3uU3_l:No'=8Wg<1/0@cQd?]PW[6gou+2TXBm$mtdhthNG%7<V\w9.59^8;'GC$/XkG5CsQ5
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 50 e3 60 11 3c 6f fd 23 e7 41 c8 d4 56 37 10 77 d8 7d dc 65 d1 46 7d d9 e5 a9 f5 a5 af 3a 80 a4 25 59 13 d0 9e 44 f8 76 7b 52 2c 3d 8d 8e 8d 2e 11 06 99 80 13 f8 a3 d6 f5 88 54 41 ce 11 72 6f c6 d3 03 b6 de b4 db a5 21 26 26 40 fc eb 69 2a 77 6a ce 94 5c da 14 4a 8f 46 c0 01 e7 35 87 e9 b8 91 3c ab 6b 36 e2 f1 4d 6e d5 01 37 23 b2 51 eb 6a ce a5 5a 8e 1f 32 92 54 98 29 d0 da f4 86 42 b2 84 21 59 ed c2 94 b5 33 0d 2d 0a 94 8f 8f b4 5d 34 4c d3 46 13 14 e2 73 47 ef 95 61 52 dc 80 e6 48 03 de e3 11 a5 62 59 71 d2 32 12 84 85 19 22 f6 30 29 a0 51 94 04 e8 00 be 96 1c a8 b3 9b 28 5a 42 ac 4f 68 2a b1 8f 21 35 85 18 66 1c cf 89 6d d5 b6 02 82 43 4b c9 2a 8b 66 b1 24 03 16 11 a6 a2 99 c2 bb 8c 7e 01 93 cc 99 f4 ac 27 f0 c3 eb 85 97 82 13 3a a8 72 ec e4 69 7f c3 Data Ascii: P`<o#AV7w}eF}:%YDv{R,=.TAro!&&@iwj\JF5<k6Mn7#QjZ2T)B!Y3-]4LFsGaRHbYq2"0)Q(ZBOh!5fmCK*f$~':ri
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: d6 01 51 8d 7b 7b 4d 15 a5 26 dc 34 ac 6e 25 4b 77 2b 6a b2 04 1e f2 6f 4d 2c 25 70 75 ad a0 02 90 c3 c9 3d 20 72 ab c8 41 f4 35 88 37 cb 6b 90 60 d6 19 bc 3e d3 c2 0c a1 0c e3 10 89 6d 68 84 a5 6a 4e 89 58 d0 4f 05 01 e0 69 b7 1c 5b 99 4b 8a 69 c6 42 da 75 93 d5 59 d2 fc 8a 4d c4 7c ec d1 43 84 a1 51 71 04 13 a8 f0 83 58 5c 4a 9a 60 49 4a 50 84 c9 51 16 01 20 73 34 ce 29 c7 f7 b8 85 9b 38 af b2 91 74 b6 3a ba cc 13 d6 23 99 a5 92 7a 13 d6 36 93 c6 9f 50 65 93 7b 7c ff 00 5a 6d c4 a9 19 75 0a fd 2b 69 61 32 cb 89 1c 7e 34 d2 e5 b0 0e 96 35 bd 08 16 a7 b1 3d b4 97 35 27 de ad a1 8c c0 6c c3 38 8b a9 44 41 4a 73 5b 99 b1 8a 40 6b 1d 85 de b2 4a 82 d2 56 df 78 82 3c e9 6c ca 52 a8 bc 90 7c 0d 60 02 d9 da 19 82 88 19 64 23 44 90 a3 3c 0f 65 63 d2 4e d0 53 a8 Data Ascii: Q{{M&4n%Kw+joM,%pu= rA57k`>mhjNXOi[KiBuYM\|CQqX\J`IJPQ s4)8t:#z6Pe{\|Zmu+ia2~45=5'l8DAJs[@kJVx<lR\|`d#D<ecNS
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 6b a4 b7 0a 80 9b fa 70 a2 da b5 54 23 fa 8e bd d4 77 29 be f0 aa 3e e0 b7 a9 14 ea b0 b9 bf 96 ea e7 f1 84 8e 1c 32 9a de e1 bf e5 d7 ff 00 78 ff 00 f3 5b dc 37 f9 2e 5e 26 1e e4 47 e1 a0 70 84 4e 57 c7 6e 74 2b ff 00 51 51 86 50 8d fb ad f6 2d b0 53 e3 95 53 e9 5b 8c dd 47 d9 5f 61 59 42 bc 9c 03 e3 4b 6d 6d c6 71 13 a5 c1 04 76 10 4f d4 6e 97 7b 72 a4 12 94 90 38 26 2b 78 b0 20 28 8a 2b 51 33 34 e2 e4 01 1c fe 54 a5 5b da 0c 51 11 40 4f d5 06 05 44 28 f8 52 dd e8 91 59 ad 44 9a 57 0a 2a f6 81 1e d2 67 ea af 87 8f ca 96 65 0a f0 a5 28 c1 bf b1 46 23 da 9f f7 1f ff c4 00 3e 11 00 02 01 02 04 01 09 05 07 03 02 07 00 00 00 00 01 02 03 00 11 04 12 21 41 31 05 13 22 32 51 61 71 81 91 20 52 a1 b1 d1 10 14 23 42 62 c1 f0 72 e1 f1 30 82 15 33 43 63 92 a2 c2 ff Data Ascii: kpT#w)>2x[7.^&GpNWnt+QQP-SS[G_aYBKmmqvOn{r8&+x (+Q34T[Q@OD(RYDW*ge(F#>!A1"2Qaq R#Bbr03Cc
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: ef 5f 7c 8f 36 55 c3 25 ef 6b b1 27 b2 81 25 8b 58 27 0d 07 f9 ab 06 53 be b5 20 b5 05 2f 1b 58 12 7a 34 ac 54 95 df e5 58 f3 7c 91 f1 25 85 c7 a5 23 98 a6 84 f0 b6 5f 2a c2 0e 70 f3 84 02 32 79 1b 81 f4 a9 b0 b0 b4 9a 46 b4 30 f1 c0 a7 22 28 62 36 14 16 b0 d1 05 4b 9b 74 b5 e1 4d 13 32 e9 51 e6 57 64 71 61 6d 3d 75 f9 d6 1c 74 b3 1d b8 d4 98 50 b6 96 2b e5 23 a4 09 bf 65 c8 a4 20 23 a1 5c d9 b2 14 7f 77 86 a3 c7 81 a5 25 0d c5 38 12 1b 91 52 bb 44 99 57 43 db 44 71 6f 36 3d c2 94 19 b1 49 b9 cc 2b 15 03 1e 1a 15 b5 72 26 3c e9 04 a7 50 00 1f 4a 61 d2 bf 65 18 c9 37 a4 c3 8d 34 a3 1f 00 36 15 85 83 13 8b 1f 85 a0 4d f4 17 3d 83 5d 6b 11 9f 0e e5 24 b5 d4 d8 fc 3e b4 24 b3 36 d7 15 83 98 3e 0f 23 0b eb c7 d3 6a 90 28 e0 7a ae 58 78 69 6a c2 3c 39 19 25 50 Data Ascii: _\|6U%k'%X'S /Xz4TX\|%#_*p2yF0"(b6KtM2QWdqam=utP+#e #\w%8RDWCDqo6=I+r&<PJae746M=]k$>$6>#j(zXxij<9%P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50323	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:10 UTC	585	OUT	GET /media/bci/navigation_icons/bcime-01.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:10 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:10 GMT Content-Type: image/svg+xml Content-Length: 3363 Connection: close Last-Modified: Tue, 09 Aug 2022 09:54:08 GMT ETag: "d272987f843f0984a81025c1e367a721" Cache-Control: public, max-age=36000 x-amz-version-id: sH3j2VGGOZ4lvSJZV_VHIiBXdic.yQ0G X-Cache: Hit from cloudfront Via: 1.1 dcccf6c408219d8b851fcd12a0068cea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: 4LcH2-oN77xaHive9ZO0tdm2QxWlSC2hhsj8iucwY7UdrN7DyTT4qA== Age: 20514 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:10 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8df29d18da6-MIA
2024-04-26 18:33:10 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 37 39 37 39 37 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 2e 63 6c 73 2d 33 7b 66 69 6c 6c 3a 23 66 66 36 62 64 62 3b 7d 2e 63 6c 73 2d 34 7b 66 69 6c 6c 3a 23 61 33 31 62 62 37 3b 7d 2e 63 6c 73 2d 35 7b 66 69 6c 6c 3a 23 33 66 65 61 37 33 3b 7d 2e 63 6c 73 2d 36 7b 66 69 6c 6c 3a 23 32 37 36 65 62 36 3b 7d 3c 2f 73 74 79 6c 65 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36 36"><defs><style>.cls-1{fill:#f79797;}.cls-2{fill:#fff;}.cls-3{fill:#ff6bdb;}.cls-4{fill:#a31bb7;}.cls-5{fill:#3fea73;}.cls-6{fill:#276eb6;}</style>
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 31 2c 36 2e 33 32 2c 2e 39 38 2c 39 2e 32 31 73 33 2e 34 36 2c 35 2e 33 2c 36 2e 32 2c 36 2e 38 38 63 2e 32 33 2c 2e 31 33 2c 2e 33 39 2c 2e 33 35 2c 2e 34 36 2c 2e 36 31 73 2e 30 33 2c 2e 35 33 2d 2e 31 2c 2e 37 36 2d 2e 33 35 2c 2e 34 2d 2e 36 2c 2e 34 37 2d 2e 35 33 2c 2e 30 33 2d 2e 37 36 2d 2e 31 63 2d 33 2e 31 31 2d 31 2e 37 39 2d 35 2e 35 36 2d 34 2e 35 32 2d 37 2e 30 33 2d 37 2e 38 2d 31 2e 34 36 2d 33 2e 32 37 2d 31 2e 38 35 2d 36 2e 39 33 2d 31 2e 31 31 2d 31 30 2e 34 33 5a 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 31 33 2c 33 34 2e 32 35 63 2d 2e 32 35 2d 2e 30 38 2d 2e 34 37 2d 2e 32 35 2d 2e 35 39 2d 2e 34 39 2d 2e 31 32 2d 2e 32 33 2d 2e 31 35 2d 2e 35 31 2d 2e 30 37 2d 2e 37 36 73 2e 32 35 2d 2e 34 37 Data Ascii: 1,6.32,.98,9.21s3.46,5.3,6.2,6.88c.23,.13,.39,.35,.46,.61s.03,.53-.1,.76-.35,.4-.6,.47-.53,.03-.76-.1c-3.11-1.79-5.56-4.52-7.03-7.8-1.46-3.27-1.85-6.93-1.11-10.43Z"/><path class="cls-1" d="M13,34.25c-.25-.08-.47-.25-.59-.49-.12-.23-.15-.51-.07-.76s.25-.47
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 31 2e 32 63 2e 31 33 2c 2e 30 32 2c 2e 32 36 2c 2e 30 36 2c 2e 33 38 2c 2e 31 33 2c 2e 31 32 2c 2e 30 37 2c 2e 32 32 2c 2e 31 36 2c 2e 33 2c 2e 32 36 2c 2e 30 38 2c 2e 31 31 2c 2e 31 34 2c 2e 32 33 2c 2e 31 37 2c 2e 33 36 2c 2e 30 33 2c 2e 31 33 2c 2e 30 34 2c 2e 32 36 2c 2e 30 32 2c 2e 34 2d 2e 30 32 2c 2e 31 33 2d 2e 30 37 2c 2e 32 36 2d 2e 31 34 2c 2e 33 37 73 2d 2e 31 36 2c 2e 32 31 2d 2e 32 37 2c 2e 32 39 2d 2e 32 33 2c 2e 31 33 2d 2e 33 36 2c 2e 31 36 63 2d 2e 31 33 2c 2e 30 33 2d 2e 32 36 2c 2e 30 33 2d 2e 34 2c 30 2d 33 2e 32 31 2d 2e 34 39 2d 36 2e 34 39 2c 2e 30 37 2d 39 2e 33 35 2c 31 2e 36 2d 32 2e 38 36 2c 31 2e 35 33 2d 35 2e 31 35 2c 33 2e 39 35 2d 36 2e 35 32 2c 36 2e 38 39 2d 2e 31 31 2c 2e 32 34 2d 2e 33 32 2c 2e 34 32 2d 2e 35 37 2c 2e Data Ascii: 1.2c.13,.02,.26,.06,.38,.13,.12,.07,.22,.16,.3,.26,.08,.11,.14,.23,.17,.36,.03,.13,.04,.26,.02,.4-.02,.13-.07,.26-.14,.37s-.16,.21-.27,.29-.23,.13-.36,.16c-.13,.03-.26,.03-.4,0-3.21-.49-6.49,.07-9.35,1.6-2.86,1.53-5.15,3.95-6.52,6.89-.11,.24-.32,.42-.57,.
2024-04-26 18:33:10 UTC	7	IN	Data Raw: 3e 3c 2f 73 76 67 3e Data Ascii: ></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50324	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:10 UTC	621	OUT	GET /media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%2025_36x36.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:10 UTC	752	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:10 GMT Content-Type: image/svg+xml Content-Length: 3531 Connection: close Last-Modified: Mon, 20 Jun 2022 12:10:07 GMT ETag: "d805465c3e3a81327e19e15a83b2632f" Cache-Control: public, max-age=36000 x-amz-version-id: dLp82pYSkccgZjy4URAy9C.U0ckuz4.e X-Cache: Miss from cloudfront Via: 1.1 0bca35acf826729de8b75fb344bf9f44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Mbxo-VpbKFjJca3ESsnnQubqeHTmZmFOat1bAIwRVY9vAEC2FdXG2g== CF-Cache-Status: HIT Age: 20513 Expires: Sat, 27 Apr 2024 04:33:10 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8df5d907430-MIA
2024-04-26 18:33:10 UTC	617	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 33 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 31 2e 33 33 37 2c 36 2e 33 35 2c 31 2e 35 36 2c 31 32 2e 38 34 2c 37 2e 31 38 2c 31 36 2e 30 38 35 63 30 2e 34 37 36 2c 30 2e 32 37 39 2c 30 2e 36 33 36 2c 30 2e 38 39 32 2c 30 2e 33 35 37 2c 31 2e 33 36 38 63 2d 30 2e 32 37 37 2c 30 2e 34 37 32 2d 30 2e 38 38 31 2c 30 2e 36 33 34 2d 31 2e 33 35 37 2c 30 2e 33 36 34 0a 09 09 43 33 2e 31 33 32 2c 32 39 2e 30 34 33 2d 30 2e 31 35 31 2c 32 31 2e 36 38 37 2c 31 2e 33 36 35 2c 31 34 2e 34 39 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 33 2e 30 30 34 2c 33 34 2e 32 34 39 63 2d 30 2e 35 32 38 2d 30 2e 31 36 33 2d 30 2e 38 32 33 2d 30 2e 37 32 33 2d 30 2e 36 36 2d 31 2e 32 35 73 30 2e 37 32 33 2d 30 2e 38 32 33 2c 31 2e 32 35 2d 30 2e 36 36 0a 09 09 63 36 2e 39 31 36 2c Data Ascii: 1.337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364C3.132,29.043-0.151,21.687,1.365,14.49z"/><path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66c6.916,
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 09 3c 67 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 35 22 20 64 3d 22 4d 36 2e 39 36 37 2c 32 31 68 32 2e 31 35 39 63 31 2e 32 32 34 2c 30 2c 32 2e 30 32 33 2d 30 2e 37 35 37 2c 32 2e 30 32 33 2d 31 2e 37 36 63 30 2d 30 2e 38 30 37 2d 30 2e 34 35 39 2d 31 2e 32 33 32 2d 31 2e 30 34 35 2d 31 2e 34 34 34 0a 09 09 09 63 30 2e 33 38 32 2d 30 2e 32 33 38 2c 30 2e 36 34 36 2d 30 2e 36 33 38 2c 30 2e 36 34 36 2d 31 2e 32 33 33 63 30 2d 30 2e 38 35 2d 30 2e 36 38 2d 31 2e 35 39 38 2d 31 2e 38 30 33 2d 31 2e 35 39 38 68 2d 31 2e 39 38 43 36 2e 39 36 37 2c 31 34 2e 39 36 35 2c 36 2e 39 36 37 2c 32 31 2c 36 2e 39 36 37 2c 32 31 7a 20 4d 37 2e 37 35 37 2c 31 37 2e 35 35 38 76 2d 31 2e 38 37 39 0a 09 09 09 68 31 2e 31 39 63 30 2e 36 34 36 2c 30 2c 31 2e Data Ascii: <g><path class="st5" d="M6.967,21h2.159c1.224,0,2.023-0.757,2.023-1.76c0-0.807-0.459-1.232-1.045-1.444c0.382-0.238,0.646-0.638,0.646-1.233c0-0.85-0.68-1.598-1.803-1.598h-1.98C6.967,14.965,6.967,21,6.967,21z M7.757,17.558v-1.879h1.19c0.646,0,1.
2024-04-26 18:33:10 UTC	176	IN	Data Raw: 63 30 2e 37 34 37 2c 30 2c 31 2e 32 36 36 2c 30 2e 35 37 38 2c 31 2e 32 36 36 2c 31 2e 33 63 30 2c 30 2e 37 31 34 2d 30 2e 35 32 37 2c 31 2e 32 39 32 2d 31 2e 32 34 31 2c 31 2e 32 39 32 63 2d 30 2e 37 32 33 2c 30 2d 31 2e 32 34 31 2d 30 2e 34 33 33 2d 31 2e 33 38 36 2d 31 2e 30 32 6c 2d 30 2e 37 33 39 2c 30 2e 32 35 35 0a 09 09 09 43 32 35 2e 35 39 39 2c 32 30 2e 35 30 37 2c 32 36 2e 35 35 31 2c 32 31 2e 30 38 35 2c 32 37 2e 35 30 33 2c 32 31 2e 30 38 35 7a 22 2f 3e 0a 09 3c 2f 67 3e 0a 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: c0.747,0,1.266,0.578,1.266,1.3c0,0.714-0.527,1.292-1.241,1.292c-0.723,0-1.241-0.433-1.386-1.02l-0.739,0.255C25.599,20.507,26.551,21.085,27.503,21.085z"/></g></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50325	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:10 UTC	624	OUT	GET /media/bci/navigation_icons/22_06_Website_BCI_LandingPage_BCI%20Smart_36x36.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:10 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:10 GMT Content-Type: image/svg+xml Content-Length: 3733 Connection: close Last-Modified: Mon, 20 Jun 2022 12:10:08 GMT ETag: "6fc27648d52718b6656f9ab05442ca95" Cache-Control: public, max-age=36000 x-amz-version-id: AgumetpTyH4I8GAek1ENvlcJhFsIf4jX X-Cache: Hit from cloudfront Via: 1.1 04a7e6061ff44278cba30d4bada61a54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: Fy_AQINACJhsSj4hMRuyCgRGqm2fNRHIF0fMWOZA8i4bxlOzI7YcOw== Age: 20513 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:10 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8df6893495e-MIA
2024-04-26 18:33:10 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 33 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.3.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 2e 33 33 37 2c 36 2e 33 35 2c 31 2e 35 36 2c 31 32 2e 38 34 2c 37 2e 31 38 2c 31 36 2e 30 38 35 63 30 2e 34 37 36 2c 30 2e 32 37 39 2c 30 2e 36 33 36 2c 30 2e 38 39 32 2c 30 2e 33 35 37 2c 31 2e 33 36 38 63 2d 30 2e 32 37 37 2c 30 2e 34 37 32 2d 30 2e 38 38 31 2c 30 2e 36 33 34 2d 31 2e 33 35 37 2c 30 2e 33 36 34 0a 09 09 43 33 2e 31 33 32 2c 32 39 2e 30 34 33 2d 30 2e 31 35 31 2c 32 31 2e 36 38 37 2c 31 2e 33 36 35 2c 31 34 2e 34 39 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 31 33 2e 30 30 34 2c 33 34 2e 32 34 39 63 2d 30 2e 35 32 38 2d 30 2e 31 36 33 2d 30 2e 38 32 33 2d 30 2e 37 32 33 2d 30 2e 36 36 2d 31 2e 32 35 73 30 2e 37 32 33 2d 30 2e 38 32 33 2c 31 2e 32 35 2d 30 2e 36 36 0a 09 09 63 36 2e 39 31 36 2c 32 Data Ascii: .337,6.35,1.56,12.84,7.18,16.085c0.476,0.279,0.636,0.892,0.357,1.368c-0.277,0.472-0.881,0.634-1.357,0.364C3.132,29.043-0.151,21.687,1.365,14.49z"/><path class="st1" d="M13.004,34.249c-0.528-0.163-0.823-0.723-0.66-1.25s0.723-0.823,1.25-0.66c6.916,2
2024-04-26 18:33:10 UTC	1369	IN	Data Raw: 3c 67 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 35 22 20 64 3d 22 4d 38 2e 38 35 37 2c 32 31 2e 31 30 32 63 31 2e 31 33 2c 30 2c 31 2e 39 33 2d 30 2e 36 34 36 2c 31 2e 39 33 2d 31 2e 36 37 35 63 30 2d 30 2e 38 39 32 2d 30 2e 35 31 2d 31 2e 34 30 32 2d 31 2e 34 31 32 2d 31 2e 37 34 32 6c 2d 30 2e 37 32 32 2d 30 2e 32 38 0a 09 09 09 63 2d 30 2e 36 32 2d 30 2e 32 33 2d 30 2e 39 31 2d 30 2e 34 36 2d 30 2e 39 31 2d 30 2e 39 37 63 30 2d 30 2e 35 30 31 2c 30 2e 34 39 33 2d 30 2e 38 33 32 2c 31 2e 30 38 38 2d 30 2e 38 33 32 63 30 2e 35 31 39 2c 30 2c 30 2e 38 38 34 2c 30 2e 32 32 39 2c 31 2e 31 39 39 2c 30 2e 35 39 34 6c 30 2e 35 37 2d 30 2e 35 31 0a 09 09 09 63 2d 30 2e 33 36 36 2d 30 2e 34 38 34 2d 30 2e 39 39 35 2d 30 2e 38 32 34 2d 31 2e 37 35 Data Ascii: <g><path class="st5" d="M8.857,21.102c1.13,0,1.93-0.646,1.93-1.675c0-0.892-0.51-1.402-1.412-1.742l-0.722-0.28c-0.62-0.23-0.91-0.46-0.91-0.97c0-0.501,0.493-0.832,1.088-0.832c0.519,0,0.884,0.229,1.199,0.594l0.57-0.51c-0.366-0.484-0.995-0.824-1.75
2024-04-26 18:33:10 UTC	377	IN	Data Raw: 34 33 2d 30 2e 33 37 34 2d 30 2e 30 34 33 63 2d 30 2e 35 31 2c 30 2d 30 2e 39 37 37 2c 30 2e 33 32 33 2d 31 2e 31 34 37 2c 30 2e 36 37 32 56 31 36 2e 37 35 68 2d 30 2e 37 33 31 43 32 34 2e 36 36 37 2c 31 36 2e 37 35 2c 32 34 2e 36 36 37 2c 32 31 2c 32 34 2e 36 36 37 2c 32 31 7a 0a 09 09 09 20 4d 32 39 2e 35 33 37 2c 32 31 2e 30 34 33 63 30 2e 34 33 34 2c 30 2c 30 2e 37 34 2d 30 2e 31 31 31 2c 30 2e 39 31 38 2d 30 2e 31 39 36 6c 2d 30 2e 32 32 2d 30 2e 36 32 63 2d 30 2e 31 38 36 2c 30 2e 31 30 39 2d 30 2e 33 39 38 2c 30 2e 31 36 34 2d 30 2e 36 31 33 2c 30 2e 31 36 31 63 2d 30 2e 33 38 32 2c 30 2d 30 2e 36 38 2d 30 2e 31 39 36 2d 30 2e 36 38 2d 30 2e 37 34 0a 09 09 09 76 2d 32 2e 32 32 37 68 31 2e 33 31 38 56 31 36 2e 37 35 68 2d 31 2e 33 31 38 76 2d 31 2e Data Ascii: 43-0.374-0.043c-0.51,0-0.977,0.323-1.147,0.672V16.75h-0.731C24.667,16.75,24.667,21,24.667,21z M29.537,21.043c0.434,0,0.74-0.111,0.918-0.196l-0.22-0.62c-0.186,0.109-0.398,0.164-0.613,0.161c-0.382,0-0.68-0.196-0.68-0.74v-2.227h1.318V16.75h-1.318v-1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50327	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	698	OUT	GET /xxrz/250x400/793/05/d2/05d2af3ecc1a6d545c293968589b68fe/05d2af3ecc1a6d545c293968589b68fe.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:11 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/jpeg Content-Length: 70571 Connection: close Last-Modified: Fri, 26 Apr 2024 13:51:26 GMT Vary: Accept-Encoding ETag: W/"662bb15e-d35c" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5538 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bvOf8QG%2BMScm9aGANwpeTOjFAVNrtcrW0BpByoOp8cRwAEXuDJWbOvMBLNnqI%2FEoEBwfIwogPBXVO13Bjdc6xlCE4KGlhIwgo2bapEV6KHSN9zc%2FMjHjpTjC6T%2BkaVS%2Bp2KD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8e53a766dad-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:11 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 89 99 c3 1b 4d 48 cb 4a 3c 14 82 47 1a 51 72 ec 6d 58 30 d3 e0 5a 4f b5 59 17 53 e1 9f 74 8d b2 97 a6 c0 21 0c 67 0d 5c 4e 0b f6 58 45 cc f8 63 a9 c2 3c 18 93 19 d3 2e a4 1f 19 98 d6 97 8f e4 44 85 b8 1e 12 46 c0 28 f1 76 23 64 9d a7 61 f7 54 57 6f 1e 8f 0f 62 04 f4 3e 7e b6 15 37 02 ee 7c 5b 13 0c 19 10 d8 5d 96 da 8c 53 83 65 de d3 ca ed 03 82 8a 7e 76 fd 0a c1 09 2a 3c 28 eb f5 8b f4 43 d8 49 e3 ce 26 3d a3 c4 b4 b3 58 26 f5 16 15 61 8b ef 14 23 1d ac 42 24 67 8e b1 03 0b bb f3 8c f7 ab fa f2 d9 80 ef 62 57 81 65 03 bd 2f 9b 82 47 6c 30 0e 2b 5e b0 9a 01 7f 39 82 98 8b 1b 71 38 a4 9c 77 a1 f3 fd a5 c9 e2 9f 99 3f 4b a2 e5 77 d5 14 65 fe 2f ca 38 f0 89 20 a7 d3 10 89 a4 1b 44 37 c3 38 b8 90 7c 4d a4 50 88 78 e9 38 e7 c2 24 e1 d4 75 37 df 3c 12 d7 80 65 Data Ascii: MHJ<GQrmX0ZOYSt!g\NXEc<.DF(v#daTWob>~7\|[]Se~v*<(CI&=X&a#B$gbWe/Gl0+^9q8w?Kwe/8 D78\|MPx8$u7<e
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: ac ad 63 dc e5 d9 0b 8a b1 32 fc d8 7e 8a f4 c9 68 d3 8e e2 70 8f ba 85 9d 87 d5 1d 1d ea d6 b7 52 3c 6b df fb 01 58 e3 3e ad 76 84 3e 5d 79 15 bc 1a c1 fa b0 29 35 fb f3 0b db fe 1b 8e 7c db ca 67 72 0e b2 3a 19 1c fa 30 4e 01 25 16 11 6a d6 c5 85 c7 bc c4 10 b6 69 5c 66 6d 68 2b 4c c5 16 b7 ca a0 7d a6 c5 96 54 29 74 14 dc 9d 26 c2 f1 28 3b 5a b1 9b cf 51 88 b1 2d 8f d9 b4 68 d6 2f 30 96 d4 e4 6f 04 2e 0a 4e 42 b5 a6 55 d3 26 37 89 03 88 83 7a da 53 22 80 b7 a5 e5 0a 91 64 b0 45 7d 3a f3 a6 26 99 86 06 97 cc 09 37 af 16 45 83 c0 44 7f ce 9d b8 26 49 63 f6 fc 61 ab 8c d6 b8 e7 68 92 e8 40 61 5c 22 1a 06 9f 04 b5 e3 99 64 a3 75 4d e3 6f b5 9f 8c 1e 95 99 0e ba 8b d7 83 a8 dc 89 ba 48 cf 17 39 a5 65 31 82 90 e9 57 26 48 dc 72 08 ba c5 63 84 fc 5f 32 d7 15 Data Ascii: c2~hpR<kX>v>]y)5\|gr:0N%ji\fmh+L}T)t&(;ZQ-h/0o.NBU&7zS"dE}:&7ED&Icah@a\"duMoH9e1W&Hrc_2
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 9c f9 e7 a4 77 31 19 11 fa 31 eb 3a c4 0f a8 d8 1c 3c 91 c9 1c f5 cf 5c f5 9c f5 c8 5c ce 00 75 90 8c 60 fa 92 06 27 08 7a cb 7d 65 a0 89 c2 0e a4 c0 71 8b 8c 62 71 8b c6 2a 30 67 e7 0f 61 9c 31 39 f2 ce bf e8 33 8d 89 eb 3a ff 00 2d 12 ea 57 9e 99 23 d6 7a 67 a6 7c f3 e7 9e 9d 60 c7 ef af d3 87 ac a9 eb 8f eb 2c ff 00 a3 67 5d 1f ae 31 71 38 d5 e1 8e 1a f0 d5 84 9e f2 6b 16 1d 79 cf c7 cf 51 c8 5c 60 8f 58 71 1e a5 3f b1 ff 00 d5 9f f4 eb 3d 73 d6 73 ac f5 8c f5 8c f5 c8 ff 00 32 05 13 16 23 2a 26 67 2d f6 38 ff 00 fd 99 18 5e e5 86 87 4e 3d 3e 98 61 86 bc 35 e4 a6 27 25 7d 63 06 3b f4 8c eb 3f fa c8 9c 11 ec 3d 7d 8c a2 20 4e 7a ff 00 f0 eb 24 3b cf 48 cf 48 ce b2 47 2b 7a e5 81 82 9a cc 80 1b 2e f7 37 c7 78 79 ed eb 8c f7 9c 62 bb c3 5c e1 2f 0d 58 49 Data Ascii: w11:<\\u`'z}eqbq0ga193:-W#zg\|`,g]1q8kyQ\`Xq?=ss2#&g-8^N=>a5'%}c;?=} Nz$;HHG+z.7xyb\/XI
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 6e 4b ea ec 34 55 81 95 b0 59 57 e7 b1 b5 a7 da 6c 2b 6b 57 5a cd 8a 49 62 11 09 d6 5f d8 6e f5 7b 2b df 81 af cb 11 aa 51 32 cd 50 65 d0 16 e5 7e 2d ac 0b e1 71 10 0d af ab 5d 59 de ea 03 2b ed f4 4f 6d 6d de aa a2 a9 f3 3d 55 88 d8 58 3d 93 35 a8 b7 47 73 af a8 77 76 06 e6 3d ab 34 2b 2c 35 36 70 e9 69 22 05 75 a6 7e c6 f2 bf c6 8d 55 bd a4 a3 8c 21 f1 73 46 d8 af b0 2f 6f 97 d6 b8 b2 d5 c9 54 35 c8 36 c0 b4 2c b6 ff 00 a9 cd cf 71 0a f3 56 ef f6 db 5c 9d a6 ca c6 6b ec dc af 3f da f2 16 c9 72 4d 92 6a ff 00 69 c8 7e 5a fd b6 fc 82 6e ec ac 2c f6 5b 12 44 3d b2 76 2f 82 d5 73 92 6f 97 66 fd 86 15 4e 27 cf 23 6d 1b 5d be d4 77 4b df ef ce 3f b4 dd 85 91 db ef da 69 d8 6e 00 c3 68 f5 82 76 b6 49 bb 1a 35 7d 35 f6 2d d0 76 c4 e5 45 5b 71 b2 fe ae 6f ec bd Data Ascii: nK4UYWl+kWZIb_n{+Q2Pe~-q]Y+Omm=UX=5Gswv=4+,56pi"u~U!sF/oT56,qV\k?rMji~Zn,[D=v/sofN'#m]wK?inhvI5}5-vE[qo
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 12 97 35 f1 77 98 f6 5a 0e 77 e4 7f 0f 71 bf 2e e7 8f fc 67 c4 3c 19 a8 a1 e7 ba ea f3 77 92 bc 3f c5 3c d3 5b c7 1e 29 e2 9e 0f d7 78 a3 9f c7 91 7c d9 e4 2f 02 6b fc 85 c9 f9 1f 29 e0 ff 00 c7 fe 0b c1 3c 0f c5 39 bf 01 fe 38 94 c7 98 f9 3c ff 00 f3 47 f2 6f 93 6d 78 7f 93 7c 6f cf b5 3e 48 e2 fc 27 c9 ba de 2d e6 9f 23 7f 19 f4 bc e7 91 f9 93 c2 9e 30 e0 9c 03 90 ff 00 1d 78 76 ab c5 3e 3f e3 3f f7 c7 30 e2 5c 07 45 e3 ee 3f e5 4f 05 f3 2d c5 41 98 19 4c 4e 29 46 c7 a5 9e 85 11 5c a1 af 58 c8 1c 2d 96 2e 7f cd f7 f5 5e bb 98 72 7d 40 3e ed 87 d8 23 31 6e 9b 9c 72 ce 38 ad ef 28 e4 9c 99 ca 50 93 75 bc b3 93 71 5c da 72 cd e7 25 7d 0d d6 eb 4c d0 e7 dc f4 c9 96 59 68 b8 0f 9a f6 bc 0b 8c a3 63 7f 47 b0 77 3d e6 ad b7 b1 de ee b9 15 ad 4f 26 e4 1c 79 76 Data Ascii: 5wZwq.g<w?<[)x\|/k)<98<Gomx\|o>H'-#0xv>??0\E?O-ALN)F\X-.^r}@>#1nr8(Puq\r%}LYhcGw=O&yv
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: b4 e5 dd 7b 6a 92 22 3c 95 5a 92 1b fa 50 20 09 8d 60 2a 14 cb 9d a7 75 52 85 46 e2 7b b2 ff 00 21 57 36 83 f7 92 68 0d 16 20 a7 d6 6b 4c 0d e7 65 d3 f9 41 cf 33 be 23 80 e7 08 d6 6e 46 c9 db 65 36 e8 e2 9c d4 5b 65 56 94 e4 13 e8 3b 98 46 99 46 98 29 f4 9a 01 30 34 d1 31 a1 e0 0d 01 c9 1a 70 e4 69 38 d3 06 25 6d 3b 33 30 12 59 07 f8 55 19 ce 13 d8 41 40 54 9b 30 d9 3f 63 da 6a 53 f6 8e c2 d2 04 b1 be 57 e5 f1 4d a3 88 bb db 38 b4 83 1d 51 a6 11 a6 13 69 b4 9e 4a b5 31 25 54 64 64 9c 11 6d 95 36 89 46 99 00 39 c2 ca 94 0a 62 6f 36 f4 5b 73 2c e0 1c 7e e1 38 11 9a aa 31 04 e7 39 b9 39 d6 e7 09 9b 7b 59 46 1e 5c f7 dc 65 96 56 55 ea ba ad 42 f2 07 41 60 11 6a b2 0c 3c 15 56 19 85 51 86 e9 d4 8c 2c 28 08 20 f3 0a a8 9a 78 84 38 2a 64 b3 65 0e 2d 5b 41 bb 89 Data Ascii: {j"<ZP `uRF{!W6h kLeA3#nFe6[eV;FF)041pi8%m;30YUA@T0?cjSWM8QiJ1%Tddm6F9bo6[s,~8199{YF\eVUBA`j<VQ,( x8de-[A
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 5b c0 cc 67 38 73 81 dd 3f 6e 98 38 4c f2 38 47 92 1b 59 a9 51 ad 3b 8d 99 bf 28 2a a6 d2 cf 68 62 e2 c2 47 c7 c9 7e 65 84 41 c7 e4 8d 4e 18 fa f9 22 62 f7 9e a8 55 67 0a 97 ef 27 54 da ad 75 81 24 f2 4e a8 1a 31 3b 22 9c f0 4f 88 b6 6f fc af 6a d6 9f 1c f5 3f e1 36 a0 70 74 98 70 8d d3 6b 75 4e 7b 5e 22 27 a9 12 3a 2a 85 d4 c9 0d 71 c3 03 33 e2 b6 ab 10 40 c8 08 90 14 0d 0f 9a 76 e9 c3 32 79 75 ff 00 09 a4 de 1a e3 11 24 e4 db 81 f1 46 a6 1b 12 67 af 4e 28 55 6f 38 36 f8 82 85 5e 03 cc 81 ea 86 d5 58 07 06 53 68 6b 0e 27 44 78 a2 3a e9 36 55 2b d5 7e 9e 1b db 98 bf 70 bd a5 66 b4 e2 dd b5 bf ba 4b 7d 44 94 6a 1c 26 69 f4 7f f6 df 48 43 6b 7d 84 0c a3 16 6e b4 44 9f bb 74 4d a9 51 de e8 b7 9f 96 a9 f5 0d 40 49 68 f0 c6 5a 0b 7c 91 7b 9a 73 91 e8 9b 50 a7 Data Ascii: [g8s?n8L8GYQ;(hbG~eAN"bUg'Tu$N1;"Ooj?6ptpkuN{^"':q3@v2yu$FgN(Uo86^XShk'Dx:6U+~pfK}Dj&iHCk}nDtMQ@IhZ\|{sP
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 8c 95 4c 6f 47 55 f2 91 11 bc f9 d2 75 23 e5 b7 f7 14 d6 a5 58 cd 36 ff 00 a6 7a d3 6e 9e 74 45 c7 60 7d 69 21 a2 00 30 0f 9f b5 25 0c 24 4c 8f dc 52 f8 44 5c 0d 5b 71 a7 99 b4 5c 9c f9 73 e5 5a 61 dd 4f 76 df d8 a6 60 c0 a7 84 45 bf bd a9 0d 95 f4 fa d5 90 91 cb fe 45 38 8e 9f bd a9 28 57 43 43 14 cb 87 d6 9b 72 23 34 1d c0 cd 71 01 22 40 3e d4 9b 15 8e 54 1a 6f a7 e2 7f 2a 69 02 4f de 4e 70 27 97 4a 75 61 23 af a5 23 52 83 62 07 d7 e9 4c 6f 29 fa d1 70 9e 5f 8d 36 d1 5e 67 07 f1 ab 1b 81 29 3f d7 a5 70 8f 2d a9 1a 65 91 82 91 57 f5 a4 3d 69 cd 37 a9 4e 33 47 54 94 ef 1f b8 af 89 4a b6 c7 ec 52 5e 83 83 4d be 49 02 62 3c fd 29 6e 59 27 99 e7 41 e9 49 93 43 54 12 e7 4c c7 ad 69 75 8a bc 04 af bb 48 74 28 03 bf ad 36 e6 d4 17 fc 4a 14 de a9 84 39 c3 12 a1 Data Ascii: LoGUu#X6zntE`}i!0%$LRD\[q\sZaOv`EE8(WCCr#4q"@>To*iONp'Jua##RbLo)p_6^g)?p-eW=i7N3GTJR^MIb<)nY'AICTLiuHt(6J9
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 75 ad b7 92 63 03 ba 48 54 99 c0 3b c1 c8 ad 02 f5 ec 29 2a 36 10 a3 2e 1e 0b a0 90 ad ed 94 cc c0 dc 03 fd 27 5e 9e 28 d3 2b 46 f8 70 f0 a1 fe 32 f8 50 ae e9 16 95 26 54 3b ca 1b 0b 62 8f da 46 1c 6c b4 3b 25 0d 36 a8 96 f8 cf 91 02 de e9 4a 07 84 ec 42 55 e1 c5 2f b7 34 85 48 52 bb 17 4b 6a 4d c1 0d bc eb 6d dd 11 3c 28 28 f5 84 f9 19 06 9c ed a4 be d9 42 7b 07 44 99 51 37 05 3a 20 ce 0f dd b6 95 4e 4f cc 01 c7 4a 5e b5 04 a3 fc 82 1b 4a 14 17 6f 17 52 41 52 84 14 84 a8 a8 6f 91 20 9e 54 5f d3 ae 14 86 96 14 20 db c7 5a 41 18 94 ed b1 8c 98 9e b3 cb ec 6f 6a dd ae f8 24 e8 74 fa 74 3b a7 2b 52 da 71 4a 52 d6 d4 65 60 a1 3f 29 22 4c 9e b5 f6 bb b5 5a 1a 4e cf 53 5a 34 6b 13 a9 2b 71 be 2b 9c 3e 10 09 45 c7 c0 b0 54 42 ed 82 30 6b 4f db 4d 37 c5 ff 00 a1 Data Ascii: ucHT;)*6.'^(+Fp2P&T;bFl;%6JBU/4HRKjMm<((B{DQ7: NOJ^JoRARo T_ ZAoj$tt;+RqJRe`?)"LZNSZ4k+q+>ETB0kOM7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50326	52.92.0.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	410	OUT	GET /static/cryptocoin/troy.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:11 UTC	432	IN	HTTP/1.1 200 OK x-amz-id-2: ZXNP4b4yhA0qOX9fopuYNDL8UKWsgIW2ci+/5AwvwIOWglXhvmafG/6KxkbXr6owTRMk5WzTYVE= x-amz-request-id: AWH9GT1Z1XK9AFP2 Date: Fri, 26 Apr 2024 18:33:12 GMT Last-Modified: Tue, 28 Jun 2022 14:38:59 GMT ETag: "729a77746ed40f1771f20c4fa81d431a" x-amz-version-id: 7hBz1NxxmtxpB7qz1PGBJ2Owg6K6XWa. Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 4403 Connection: close
2024-04-26 18:33:11 UTC	1527	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 38 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 34 35 38 20 31 35 2e 30 30 35 68 2d 2e 31 34 63 2d 2e 33 33 32 20 30 2d 2e 35 39 35 2e 30 31 34 2d 2e 38 38 36 2e 31 39 31 6c 2d 2e 30 36 34 2e 30 35 35 2d 2e 30 36 34 2e 30 35 34 63 2d 2e 32 30 38 2e 32 35 31 2d 2e 32 34 37 2e 34 36 39 2d 2e 32 34 38 2e 37 38 37 76 2e 32 35 32 63 30 20 2e 31 33 34 20 30 20 2e 32 36 39 2e 30 30 32 2e 34 30 34 6c 2e 30 30 31 2e 34 35 Data Ascii: <svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="18" fill="#fff"/><path d="M12.458 15.005h-.14c-.332 0-.595.014-.886.191l-.064.055-.064.054c-.208.251-.247.469-.248.787v.252c0 .134 0 .269.002.404l.001.45
2024-04-26 18:33:11 UTC	2876	IN	Data Raw: 45 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 30 2e 34 32 33 20 31 35 2e 30 35 68 2d 2e 31 32 37 63 2d 2e 34 30 36 20 30 2d 2e 37 31 2e 30 33 32 2d 31 2e 30 32 33 2e 33 32 2d 2e 32 37 36 2e 32 38 38 2d 2e 33 38 39 2e 36 32 37 2d 2e 33 39 32 20 31 2e 30 32 32 6c 2e 30 30 32 2e 31 31 35 61 33 31 2e 36 38 38 20 33 31 2e 36 38 38 20 30 20 30 20 30 20 2e 30 30 32 2e 36 36 37 76 2e 31 34 36 6c 2e 30 30 31 2e 34 33 35 63 2e 30 30 32 2e 32 35 31 2e 30 30 34 2e 35 30 33 2e 30 30 34 2e 37 35 33 6c 2e 30 30 32 2e 38 37 31 2e 30 30 33 2e 35 32 37 76 2e 32 32 33 63 2e 30 30 35 2e 33 30 35 2e 31 31 38 2e 35 39 38 2e 33 32 2e 38 32 35 2e 32 37 35 2e 32 Data Ascii: E"/><path fill-rule="evenodd" clip-rule="evenodd" d="M20.423 15.05h-.127c-.406 0-.71.032-1.023.32-.276.288-.389.627-.392 1.022l.002.115a31.688 31.688 0 0 0 .002.667v.146l.001.435c.002.251.004.503.004.753l.002.871.003.527v.223c.005.305.118.598.32.825.275.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50321	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	977	OUT	GET /500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=6&pl=https%3A%2F%2F1movieshd.cc%2Fhome&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072
2024-04-26 18:33:11 UTC	815	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 26 Apr 2024 18:33:11 GMT Connection: close X-Trace-Id: 92eb1ed64ba60c47adb783affb5bf3f0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Pragma: no-cache Timing-Allow-Origin: * Vary: Origin Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:33:11 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50330	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	698	OUT	GET /xxrz/250x400/793/0a/d0/0ad0f66216e079931d172870692005c1/0ad0f66216e079931d172870692005c1.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:11 UTC	717	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/jpeg Content-Length: 58912 Connection: close Last-Modified: Wed, 24 Apr 2024 14:38:19 GMT Vary: Accept-Encoding ETag: W/"6629195b-8c9b" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 894 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8bCYfia10d5kFtKgWKtaHWvTRT9siALjedOHp%2FR6J25lc8uqu7iiO5q2QYafcbzeSCQ4eXDiVlAlE1JqARJArC1hV7mQ8fzS6jI8luboJOaPdOXkOg7adA3CYiMxt9lhO%2F2I"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8e83da75c7d-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:11 UTC	652	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 62 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCb"
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 93 29 71 43 16 cd 37 a4 1f 2b ea 33 cd 20 48 11 31 93 b1 02 43 cd 0c f2 6e 14 fc 56 48 6f a8 81 e8 7c da 8f c5 de 88 73 73 a3 8c c2 9a 32 22 23 5c 48 71 23 d7 ab 7d e2 3d a5 54 a9 41 66 2b 3e 6e 67 90 1c ce be 21 30 5d be 74 dc 22 e6 a0 3c 15 c6 5b f5 b6 f7 41 20 4a 62 4d 49 b1 43 b7 e1 77 5b 12 64 4e e5 ac a1 c9 d1 1b ab 53 22 f3 74 a0 58 67 66 b3 b2 a6 7d b6 8f 27 21 f5 b4 3e be 21 21 f9 f6 b1 20 15 74 67 3a 15 5e ed 99 30 9a 9f e9 06 56 d3 d3 1e 09 e4 55 13 85 0b 11 0b 5a 82 d6 bb d9 0e 61 ea 55 4d 21 0b 7a 8d ea 5d 29 6b e4 bc 5f b4 96 ac 4d 7b 5e cc 23 42 26 fd 6e 92 c2 72 eb 73 9b 9d 16 b7 dc ee 7f 6f 63 a4 2e 6e 83 73 4b 9b 96 74 ad d7 5b 9a 3b 34 a5 bd c4 e5 a7 5a ba 54 e4 f5 a2 94 5a 5f 65 a3 be c0 ad 6e 51 3d 04 38 f0 75 13 8a 5b 05 cf b3 fc ce Data Ascii: )qC7+3 H1CnVHo\|ss2"#\Hq#}=TAf+>ng!0]t"<[A JbMICw[dNS"tXgf}'!>!! tg:^0VUZaUM!z])k_M{^#B&nrsoc.nsKt[;4ZTZ_enQ=8u[
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 31 84 50 42 46 17 08 31 51 fd 16 3e 45 a7 3b 4d 45 69 99 e3 1c ca 8b 48 8d f7 03 4c 0b 74 f5 01 fd 29 da da 12 50 68 91 01 d0 3a c8 cc ac c3 ea 1f dc c5 4b eb 98 b0 3e e6 1e d7 1c c5 78 b0 c9 cc 5a 33 2f 98 c6 50 9e 60 57 dc c0 8b d7 31 65 0d 73 16 97 e5 9c c2 79 89 33 08 71 fb 98 74 ef 91 39 85 4a 03 30 77 bc 33 2c ff c4 00 31 10 00 01 03 04 02 02 01 03 02 05 05 01 01 00 00 00 03 01 02 04 00 05 06 11 07 12 13 21 14 10 22 31 15 41 08 23 32 33 34 16 17 20 24 25 42 35 ff da 00 08 01 01 00 01 05 02 fc a6 b4 8e 4d 2e 96 bd fd 3d 57 b4 a5 ec 95 a4 ae 95 d5 51 3d ad 22 ad 2b a9 7f 3b eb 4a 95 af 6a da f6 b5 a5 df 5a 23 d8 ca 7c b8 fd 49 73 86 3a 5b a3 15 43 35 86 6a 69 5a f6 b3 5e 15 54 ea ea d7 d3 d5 7e da f6 b5 e9 7e 8b bd 75 dd 2a 6a b5 5a 4a 54 f6 ac 4a eb Data Ascii: 1PBF1Q>E;MEiHLt)Ph:K>xZ3/P`W1esy3qt9J0w3,1!"1A#234 $%B5M.=WQ="+;JjZ#\|Is:[C5jiZ^T~~u*jZJTJ
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 88 5e 9e d6 2e d5 75 49 50 e3 47 30 5a 91 7e 4c e8 2c 8e d1 41 86 50 09 f0 95 c9 0e 2a 5c 67 46 8b 11 b1 e3 42 9b 52 21 92 29 2f f8 b8 33 5b c0 f2 3c 42 dd 72 0e 33 86 17 99 39 82 d1 86 71 fd a2 24 2e 2f cd b0 16 6f b4 7e 0e c7 1d c7 36 6b 09 26 9e 14 61 09 bb 55 4e 9d 94 8d 4a 57 69 0b 31 bb 43 b1 56 d8 00 aa 5a 40 e1 ba 0b fa d3 4e 46 9d 25 b5 cc 49 09 aa d6 aa dd fd 81 c4 72 ca b9 c9 ec b0 ff 00 c3 14 36 78 20 ff 00 97 79 fe dc 0d a4 bb d2 7f 22 dd 9f db 6d 3c 83 98 71 a6 25 9c b7 17 c4 2f 38 6f 37 7f 10 16 18 f9 04 7e 5c c4 ad fc 75 74 e3 7b 54 7b 8e 53 fc 3d e5 f3 b2 00 e7 18 f0 ec 19 70 51 3a fd eb 43 d3 45 36 47 8d f2 64 96 a5 4b 32 52 4f 93 56 ec a6 74 12 59 73 f8 8f 85 6a c9 c6 68 92 27 34 51 e0 49 7b c7 f2 8d 5b fa 5b d3 40 01 7c 53 2e 81 f5 11 Data Ascii: ^.uIPG0Z~L,AP*\gFBR!)/3[<Br39q$./o~6k&aUNJWi1CVZ@NF%Ir6x y"m<q%/8o7~\ut{T{S=pQ:CE6GdK2ROVtYsjh'4QI{[[@\|S.
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 51 7a 12 21 bb 09 1f f6 6f b5 31 15 1a e4 dd 2a ad 48 54 71 1f aa fb d6 b4 ba 81 14 45 5e 3b b8 63 77 0c 50 9c 4a e7 13 7e b7 ec 25 e8 49 4e 63 43 6c 37 f3 6e 8e 60 e9 c4 24 48 d6 e9 84 24 8b a8 57 cd 71 5f 1c bb 74 fe ed cd 6d f2 65 ff 00 11 d9 65 be 65 92 e5 c4 fc 90 2c da db 8f 5a a4 a6 6d 07 93 f3 70 cd e5 dc 6f fd 65 c7 7f 85 b6 99 55 96 b9 48 f1 05 ed f1 b6 95 51 c9 be d4 e5 7b 68 dd 91 15 fa 47 4d 8e 8f 9f 91 c5 8c 8b 78 95 25 d6 e9 d7 38 cf 07 23 de 84 0f 6b 4a 8f ae af a7 12 61 99 a3 84 85 7c 99 0f 39 66 9d b1 dc 68 ea b3 2e 0b 46 21 e4 ae 65 34 f6 bc 66 ff 00 c9 79 7d b3 24 be 5e 6e f9 95 94 77 7b 96 37 7a b0 72 36 5b 02 ca c2 f4 91 27 9d b9 2c 33 26 cb 24 e9 70 8a ac 75 be 6b 58 f8 32 3b 23 1c 8f 44 72 35 18 e4 a5 ec 8d 90 e4 44 9e 52 3e 8d 67 Data Ascii: Qz!o1*HTqE^;cwPJ~%INcCl7n`$H$Wq_tmeee,ZmpoeUHQ{hGMx%8#kJa\|9fh.F!e4fy}$^nw{7zr6[',3&$pukX2;#Dr5DR>g
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: aa a2 37 b1 15 59 48 fa ef d6 94 dd 51 1e 57 57 c8 52 44 14 97 31 63 11 16 a3 c9 78 a4 5a 6f 88 61 5c ed ff 00 f6 05 d8 95 70 9a 69 96 2c 73 e3 ce 3d a4 f2 63 ca 8b 04 f3 8f 70 ba 41 c5 e3 de 2e d2 6f 37 30 dd 64 1c 3a ad 52 af 5a 47 f6 a7 7e 1d f6 a7 65 5a db 96 9a c7 b9 79 0a ec 4b d6 53 25 fe c8 bd 88 aa 95 ba 7a ee bb 57 b5 a6 0d bb 28 9e 96 ff 00 21 18 80 78 dc 80 51 aa 0d 08 1a b4 c9 1c 87 de e2 3e 04 a7 4b 34 81 c4 b4 c7 91 0b 32 b3 dc 24 4f ba c4 1e 3f 63 ce b2 f2 e5 17 18 b6 d9 53 16 0d 82 45 2d 93 de dd 4a 9e d1 3e e5 4a 56 a2 d2 22 6f aa 56 45 72 6d 9e c5 28 ce d9 7d 47 7b d5 14 84 5f 1e da fa de a9 5d 4a fd d2 2e a9 c5 77 c0 53 ab 05 06 52 11 62 15 2a 1a 8d cf 87 17 c0 4b 8d d8 96 f3 99 07 14 ac 2a d9 2e f6 51 5b 67 8f 9e 72 11 12 15 5b ae 67 Data Ascii: 7YHQWWRD1cxZoa\pi,s=cpA.o70d:RZG~eZyKS%zW(!xQ>K42$O?cSE-J>JV"oVErm(}G{_]J.wSRbK.Q[gr[g
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 4d f6 28 c0 d7 2c 4c 22 9a 34 cc c3 c8 cb 2c 21 93 c9 95 be 57 8c bc a9 9a 0d 94 9c d3 ab 1e 13 11 66 d4 ec 4f c3 11 30 82 45 91 b5 6a 69 c9 14 b7 6a 86 ab 7e bf bb c7 da 11 70 e7 2c 3d c9 46 b1 f5 c0 37 ec 38 4d 0c 02 47 76 45 9b c2 16 3f 79 94 0e a0 fa e3 2f 00 9b 4c 69 3c 81 59 59 c8 a1 6a ea 46 e2 c6 16 06 65 7c c0 9d 89 85 e9 ec 51 02 c5 90 6c ed e5 58 9e 16 56 85 5f 31 34 90 cc b6 5f 75 1c af cf 1a 99 09 11 c8 fa 75 ea 1c fc b6 3f e7 1a 9b 56 ab 3a ae f5 1e 66 fa e0 bb b5 6a 62 6b 6c 19 64 93 df 62 d5 b5 9b ab df fc 63 6f 61 98 fe 67 2f 97 78 ad 8c 40 a3 a0 f7 87 bb cf e5 8f b3 e3 e1 ce 85 9d 43 3c 6e 74 f5 03 95 5f ad e0 d4 b9 39 92 3d 28 e9 33 16 55 a0 64 00 df 5a df e5 86 24 fd 94 aa 7d e0 fa 6f aa ad 9e 43 b8 bd 80 57 78 0a c1 24 6d 8d f0 2c 6c Data Ascii: M(,L"4,!WfO0Ejij~p,=F78MGvE?y/Li<YYjFe\|QlXV_14_uu?V:fjbkldbcoag/x@C<nt_9=(3UdZ$}oCWx$m,l
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: f4 99 08 e7 90 07 3d 77 35 b8 e8 77 b6 3f 24 b5 da c8 8b 12 d6 c4 50 ea 4c ae b1 ce 63 6e 3f 94 6d 2c da 1e 3e 9d 59 93 1b 94 ec ac c6 62 b2 a3 5b bb 09 92 f4 84 0f 22 58 57 8f f7 5f 75 48 c6 d1 1e 84 6a a3 53 c9 eb b6 a3 82 e6 33 b7 62 9b 1f 34 46 bd 11 7a 0c a9 f1 aa ac d0 4a aa 63 59 57 52 43 2b 92 e2 5d 01 50 74 52 41 d0 df b9 80 96 7c 7f 73 63 3e 2f 15 6b 20 f6 ab 66 62 d2 47 46 96 5d f1 c9 e4 d3 42 50 81 a2 16 49 15 46 83 54 f4 74 8c ae 8a e8 77 23 a8 65 61 ec ca ca 18 11 fa 10 7e 4c 34 b0 f9 bf 8f c4 58 ca 0c 84 c3 25 f8 93 c3 e3 10 cd 59 92 51 bd 17 51 cc 67 68 46 fb 06 f6 eb 31 8f c5 a7 72 41 71 f3 c2 8e 42 3a 7e 1a d4 d2 0f 29 48 7c 4e 81 bd f5 d4 0d 64 1a fb 6d e3 5e af c9 81 cb f6 dc 78 d3 9a 1f 0f 03 c3 1c b9 04 aa ec a6 58 58 6c d7 d0 51 1c Data Ascii: =w5w?$PLcn?m,>Yb["XW_uHjS3b4FzJcYWRC+]PtRA\|sc>/k fbGF]BPIFTtw#ea~L4X%YQQghF1rAqB:~)H\|Ndm^xXXlQ
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 4a c2 43 a2 b8 85 ad 08 93 42 78 f1 b3 8d 75 53 af 07 91 fa fc c2 aa dc 32 86 1f 62 01 ff 00 9e b6 2f b6 d5 d3 e8 bb 57 41 fd 38 fd 3a 2a 0f b8 07 4f b8 07 fe 7a d0 7d bf cd 6b d7 ff c4 00 51 10 00 01 03 02 03 05 04 07 05 04 07 06 03 07 05 00 01 02 03 11 04 21 00 12 31 05 13 22 41 51 32 61 71 81 06 14 23 42 91 a1 b1 52 c1 d1 e1 f0 15 33 43 62 10 24 53 72 82 a2 f1 25 34 73 92 b2 c2 07 16 d2 20 30 44 54 83 a3 b3 35 63 64 74 93 ff da 00 08 01 01 00 06 3f 02 1a 9b fd 71 6e b1 3c b1 e3 a7 eb a0 c0 bd 87 5c 4c cc 6b cf cf 4c 75 3f af 86 35 f8 6b e7 8d 01 27 99 be 35 f9 7e 78 8e 91 ac db e7 8e d1 13 8b 73 06 7e 58 1f cb e2 31 98 4f 28 ef c7 3b 8d 7e be 18 3d c3 f4 71 af 7d cf e7 8f 33 7b f2 f3 c7 fa da 47 8e 04 19 d7 53 7c 19 9e f3 cf cb c7 16 d7 cc 62 39 44 62 Data Ascii: JCBxuS2b/WA8:*Oz}kQ!1"AQ2aq#BR3Cb$Sr%4s 0DT5cdt?qn<\LkLu?5k'5~xs~X1O(;~=q}3{GS\|b9Db
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: cf 41 9f 2f 6b c8 0e bd 31 50 90 b5 2c 10 83 39 37 5e d3 3a 72 00 82 53 2a 50 52 c0 09 99 eb 85 d3 86 f3 d4 29 23 79 c6 86 c8 4e 68 28 4a f7 95 09 81 23 7b c3 c6 78 2c 81 c4 5e 6d 28 79 6d 1f 67 4c c9 71 c1 52 ea 6e 5a 25 a0 87 03 68 41 df 3c a4 32 e2 0b 49 2d e7 41 70 2b 0d bb b4 36 9a bd 71 87 19 7d 3b 31 a7 59 15 65 9f 79 1e b6 54 52 d2 50 d9 de 29 b2 97 56 c3 77 ca 99 cb 86 e8 d9 a7 55 6b 4f ad 0c 3e e5 42 33 d1 ba d2 0f 13 a9 ab 55 35 26 f7 2a 08 53 ce a2 98 2d 6a 52 1d 41 4a 91 bc 2a d9 ec d2 bf b5 96 8f 6e dd 5a a9 91 47 44 ca 53 09 29 6d 6b ad f5 ca fc c9 50 1e de a1 b0 ac 81 49 4a a5 58 7c ae 81 da 54 53 46 f9 75 2a a3 a4 6d 80 b0 40 89 5b 4d 89 f7 50 95 b9 c9 49 27 b5 86 e9 44 d3 53 bc 95 b3 48 b7 1d 6d aa 6a 79 49 de 6e 97 9d 3e b0 5c de 28 ef Data Ascii: A/k1P,97^:rSPR)#yNh(J#{x,^m(ymgLqRnZ%hA<2I-Ap+6q};1YeyTRP)VwUkO>B3U5&S-jRAJnZGDS)mkPIJX\|TSFum@[MPI'DSHmjyIn>\(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50328	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	698	OUT	GET /xxrz/250x400/793/71/92/7192237c81db41a3d14b7020d0c3cada/7192237c81db41a3d14b7020d0c3cada.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:11 UTC	720	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/jpeg Content-Length: 82625 Connection: close Last-Modified: Thu, 25 Apr 2024 04:07:32 GMT Vary: Accept-Encoding ETag: W/"6629d704-e513" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1727 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ygax66sj8GGf0DOxNDJOvYItRTqQlSP1blv0Bt6oMVZ9zYSqKg5sHphDac%2FrAspsCL%2Fh6fQRAWOP2RxBNvo8Q8j43Sif4m4J4Z9LQgzTM1jaV5J%2FRrnwtyUq0USzUyKnGoo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8e83e914c1a-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:11 UTC	649	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 03 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 44 94 14 91 1d 4c d2 76 5c 62 1a a2 52 f8 6c a8 1d 20 17 4a 40 d8 9f 9e a9 00 87 f4 47 1e 2b 98 cc 07 98 f5 47 f1 d3 79 d6 ba ab 0a e7 b5 5a a8 e7 2d 27 ea 49 d0 ba 8a c6 74 b3 89 dd 4f 95 62 17 a3 27 a3 1e 5c 04 f6 e7 ad e7 04 61 89 d7 d3 d4 bf 23 b0 a2 8a df 9b e3 d0 91 38 78 fd d9 c0 36 8b e5 e0 05 34 bd 7b 3f 8f 57 e6 79 2f 66 b3 56 5a f4 37 8b 75 83 9d 5d 42 0a ce 96 22 2d 1a 76 be 09 3e e9 9d b2 85 0a 14 fc d0 1d 45 53 82 91 5d 50 c6 0a 31 e1 2b da 49 d0 e4 2e ff 00 3f c3 7f 27 ba cf 1c 5b 1b cd 72 83 fb 0e 33 6b e3 20 29 f0 0b 31 f9 de 63 47 09 9f 61 d1 e9 54 7b 96 3e d0 be bc 1b 2e dd ad 19 8f 28 5c 5a 48 e3 98 18 93 62 8c fa cf 55 eb 19 32 6a 22 ca 39 43 d0 f4 da e0 14 d1 5b 53 24 8f df 11 29 f1 e2 19 66 6d b1 87 9d e5 ec 96 a1 4a c9 19 69 25 de Data Ascii: DLv\bRl J@G+GyZ-'ItOb'\a#8x64{?Wy/fVZ7u]B"-v>ES]P1+I.?'[r3k )1cGaT{>.(\ZHbU2j"9C[S$)fmJi%
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 0f 67 98 48 0f 4b 54 8e b8 8b ad f3 41 15 d7 89 2d d1 23 ab d2 ca d1 8f 6f ea be 15 9d 1b ae 62 b8 8d d0 95 52 e8 7e c8 81 c7 00 75 8f a7 c6 06 e2 d0 2b 25 58 a5 4c 42 52 ed d8 90 de 93 34 bf 63 c0 c5 8a 73 da 0c 64 46 41 ec f1 24 eb ca 02 85 1c 1a f8 90 97 d1 1e ea d7 12 5d ac a9 28 68 da f7 0e 91 0d 5f 95 0d 9a ba 75 cc 99 de b3 55 02 f5 e8 d8 73 90 c0 3b 8c b9 60 89 04 46 e1 09 04 ee 7c 32 a0 d6 17 93 57 2f f6 8b da 61 b7 7c 46 d7 06 a2 0a 16 44 48 96 52 59 09 3c c1 6c 29 7e 62 0e a9 3d da 96 24 49 93 19 be b4 73 40 91 78 75 a6 ea 46 9b e8 ad a8 8c 16 6d ef a6 61 5e a6 dd a0 be 58 8a 1a 98 11 0e 1f 0c 6d fd 61 42 fd 31 c6 fa ae c6 e2 a6 ed 5f 3d bb 2f 84 4d 61 f3 eb aa 0c ae 4f da 01 cb be 2a e4 34 88 de 9a cc 0a ef 33 e3 ca c8 b0 f4 3b d7 a1 8a c7 d8 Data Ascii: gHKTA-#obR~u+%XLBR4csdFA$](h_uUs;`F\|2W/a\|FDHRY<l)~b=$Is@xuFma^XmaB1_=/MaO*43;
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: fc 2c bf ac d7 35 30 56 45 4e 2e 28 8b 38 94 33 37 0f fa 17 38 cc b1 2e dc 9b 3d b3 98 c8 b2 5a 1e ae 1e 7d a1 f2 25 de 4c e6 11 13 b8 8f 35 66 46 75 f6 81 c9 74 dd 11 8b 31 a1 99 cc ab e0 3c 29 7c 39 99 f9 73 f3 cf ff 00 0e b0 e7 8b d0 61 79 12 78 99 42 cc 07 15 84 bc 56 e9 8c 69 a5 b0 fc fe 1d 57 b3 28 52 b9 27 53 f2 54 ee 7e 33 82 f7 e6 49 1e 3a 78 70 a6 c7 23 3c 70 d0 ff 00 60 3f 3c 14 bf 66 89 c8 12 32 e4 e5 89 40 04 c4 73 a9 b9 eb 73 66 b4 59 e0 1c e3 f6 1d 95 d2 59 c7 e7 92 ca 79 cf 33 b1 52 84 81 da aa 0a 51 91 73 c6 50 cc a3 b3 87 32 01 8f 98 4b 55 ad f3 92 22 67 e5 56 4f 35 9b 76 19 f2 c7 6e dc 24 7d 81 54 18 07 0a 32 ca 24 f3 8f 32 49 e7 86 8e 78 58 e3 9e 58 86 26 c6 25 11 18 bc 19 71 09 b6 6e 0c 9d a4 46 f1 0e 7b e3 ca 0b d0 56 b0 ce ef ab b5 Data Ascii: ,50VEN.(8378.=Z}%L5fFut1<)\|9sayxBViW(R'ST~3I:xp#<p`?<f2@ssfYYy3RQsP2KU"gVO5vn$}T2$2IxXX&%qnF{V
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 5c 63 6c d9 36 9b 4d ab 53 9d 18 fa 5b 71 0a f6 d5 bb ae bd 57 2b cf 55 4f 5d da 7a 82 57 98 d8 76 02 63 6c b3 1d 83 55 87 8d 55 22 ef 62 b6 cd 86 03 9c 95 fc f9 65 a2 4e 10 1c f3 94 52 c0 a0 fb 51 9f 23 db ba c1 ce 79 ff 00 bc 57 bf 7f 5c b8 46 bc 25 93 c3 82 2e 79 32 4b b6 70 13 64 a6 f0 8a 03 23 05 db be c0 8b ee ae 3d 75 c2 83 d9 07 d2 8e 38 90 be ac fb 5e dc 06 b5 cd 75 89 01 8a c6 27 9c f5 41 97 9c 0c 88 94 20 e3 f2 cc cb 89 95 80 84 6f d8 de 4f ce c3 25 24 64 01 36 d4 fe 1a eb c6 2e 2e b6 48 e3 0c 63 33 e2 ab 73 18 e4 71 c0 8e 70 c6 06 69 e0 b2 2c 64 36 25 3e 40 73 c8 a0 6f 1e 4f 18 cf 0d 82 e6 4a fb 7d d7 b2 3f b2 bf c1 bd 7d 88 45 90 da 55 c6 c7 9a ee 9c 07 53 b5 d3 10 c4 25 47 0a d8 53 e5 80 13 35 0b 6c f4 b6 c8 d9 d3 d9 e7 f5 e0 7f 0d 53 24 4c Data Ascii: \cl6MS[qW+UO]zWvclUU"beNRQ#yW\F%.y2Kpd#=u8^u'A oO%$d6..Hc3sqpi,d6%>@soOJ}?}EUS%GS5lS$L
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 5e d9 6c 15 d2 34 73 d6 7b 35 62 fd 5f 4c b4 ad 56 af 29 eb 0b 91 3b 34 23 a7 de 8a f8 b5 8f 0e 17 f7 54 d4 48 4f cb 19 f6 97 90 27 65 f3 db 39 50 02 39 74 be 99 dd 26 a6 e9 4d b0 53 9a d7 44 bd af d7 d5 dd b7 04 6b c5 57 6c d7 3e 82 d0 7c 52 a5 59 b4 3e 98 d3 07 92 4f a7 74 83 fe c1 57 86 ae 6d aa 2a 04 3d d6 5e 59 d9 3e a7 26 ea 1c b2 c2 bb 01 ef de d6 f4 0d d6 8d f2 a9 b4 cd e1 4c 80 5a f2 af 6e 36 63 d3 bd bf 69 5f 63 a2 da 35 9b 77 fa 2f b2 39 86 3a 2e f8 c5 fe 1a 84 47 69 a6 d9 83 6f cf 4b 4c 78 75 1f 51 a1 d2 d8 3c f1 df bf 25 9c e3 99 c6 79 a8 57 f9 16 c7 63 8e 1e 0d dc db c6 db b3 b9 b0 42 82 c8 55 76 84 df 69 17 e6 c5 65 f7 16 51 60 c1 e1 6c 1e 77 98 96 33 c0 62 18 cf f4 bd 30 7a 1e 35 2d 83 9b 0e 26 aa 4a cf cc bf c7 3d 23 24 e0 ac 58 35 e3 e5 Data Ascii: ^l4s{5b_LV);4#THO'e9P9t&MSDkWl>\|RY>OtWm*=^Y>&LZn6ci_c5w/9:.GioKLxuQ<%yWcBUvieQ`lw3b0z5-&J=#$X5
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: fa 6b 03 22 5d 00 51 cd fd 7b 88 43 4c 1b 2e a7 af 56 5b 6d 96 57 77 29 28 6a 3d 86 a9 c7 09 77 ab d7 5c 58 d1 ad bd 3f d2 dd 15 fd 7a 85 35 0c 13 df 3b 27 20 d9 ac a9 f8 f5 a4 ed 11 b7 d0 3a 87 b6 5b 38 5d 9a a1 bd 83 73 a8 75 3d da aa d1 69 ea 37 f5 f5 19 b3 dc 12 78 ba fd 96 bc 5a fa 4d 2a 9d e0 0a 83 48 19 75 fb 2a ca 8b e0 82 d2 0b e6 a9 f2 12 31 be f1 ff 00 21 6d 58 e7 f9 1f 72 e1 37 dd d0 d8 67 0d 32 7f 41 b9 ea 27 33 09 e3 30 41 d3 f2 ba ab 6e aa 6e c2 ff 00 ac 3b c0 56 e9 a6 92 b2 84 44 75 9c ac be dd 06 ed 68 f0 dd 50 ed 43 26 76 8d f1 5a d5 ed f7 ad a1 f4 a9 e8 76 a3 ad b0 bf b1 55 cd 7b 8d b5 72 ac f4 5e 06 c3 d2 64 6e 2c f6 b7 36 da f5 1b 39 73 2c 63 39 e6 02 c6 39 49 6f 7c 94 c8 e6 d8 15 54 cb 54 6f d1 f5 19 a8 15 7d fb 53 e7 f9 1b 5a cf 17 Data Ascii: k"]Q{CL.V[mWw)(j=w\X?z5;' :[8]su=i7xZMHu1!mXr7g2A'30Ann;VDuhPC&vZvU{r^dn,69s,c99Io\|TTo}SZ
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 46 5f 4f 3a 37 74 6e 3c 4b f2 fa 62 1a 49 a0 97 ee 23 53 a4 ed a8 5c 9e 5d 7a 62 95 e5 28 03 52 0e 27 9a ad c7 f2 c5 33 cb a9 63 78 59 5f 86 d2 00 74 01 a5 59 54 9d 98 f5 65 fa e2 aa ef a8 35 94 fa 60 47 61 a9 b9 5a f8 15 71 ae da b9 7f 6c 66 95 8b 29 36 dc 0e 46 ff 00 0e 96 c6 45 9d 57 d2 3b 9a 41 04 c0 94 0f 04 c4 86 63 ee e9 0b de f3 bd b9 6d 88 73 f8 f3 05 90 70 5e 96 aa cd a8 10 4c 7a d4 a8 36 66 d3 f8 bc b1 9c d2 d7 4b 2d a4 9e 46 d4 fe e7 75 00 3d 00 16 bf d7 19 66 4d 59 13 19 2a a2 a3 09 ee eb 8c cc ed 6f fe d5 d3 7f 9f e5 84 94 2a 85 55 51 61 be 91 a4 7d 37 c6 67 97 ad 63 c6 ce 47 35 26 fd 77 53 e7 e9 8c 8a 7a 78 ea 38 52 2a e9 48 d0 2f 4d 36 f4 16 1d 3c 86 3e d2 33 ef 63 a9 cb 28 a2 7b e8 82 59 99 43 85 d2 25 75 09 ca f7 b8 43 f4 f5 c4 73 31 37 Data Ascii: F_O:7tn<KbI#S\]zb(R'3cxY_tYTe5`GaZqlf)6FEW;Acmsp^Lz6fK-Fu=fMYoUQa}7gcG5&wSzx8R*H/M6<>3c({YC%uCs17
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: f3 88 ab a1 93 ee b4 aa b8 1b 0b 59 6f b6 de 97 c1 8a 76 e2 89 22 da f7 16 20 7d 1b 91 f9 60 23 c0 ae ec a3 44 68 ce cc c7 92 a0 b9 bf 53 b0 e8 09 f4 c4 3d a7 a7 cd 73 09 e8 e2 a6 61 4c b1 33 47 56 c3 4b bc 91 8e f3 08 c8 12 08 88 d4 03 1b 12 6d dd 18 a5 ae 8e 4a 1e fa 93 1d f8 52 21 06 fa bd c9 40 3d 6d 63 eb 6c 49 41 4a 66 72 21 8c bb f2 6b 6f 63 d4 e2 6c a8 a1 12 a4 57 23 c8 0b 81 b6 fc c5 f1 1c 2b 51 04 94 f2 0d 71 48 0a 32 b7 3d ff 00 43 e9 8c c7 2f 39 6d 5c 94 d6 b0 1d f4 27 c4 c8 de 12 7d 6d b7 cb 15 12 8b 05 b6 ec 76 fc b1 12 da 34 17 f7 47 e8 31 b4 7b 01 f1 3d 49 db 73 86 b5 ae 4e 27 92 f7 d3 cb cf 04 69 17 38 e2 70 f9 32 fc ed fc c6 28 9a 85 d8 6a 65 2f f8 b6 3f 96 25 78 47 f0 8c 6d 61 c8 73 38 ed 46 66 d4 39 70 8e 20 16 b2 b3 bb 15 b7 08 9e fc Data Ascii: Yov" }`#DhS=saL3GVKmJR!@=mclIAJfr!koclW#+QqH2=C/9m\'}mv4G1{=IsN'i8p2(je/?%xGmas8Ff9p
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 74 d4 cf 32 22 9d 0b 1d 99 a8 aa 91 5c 04 1a 53 bc c2 de 13 ce f2 f6 9b f6 78 5a 3a ba da 2e c0 55 55 a5 12 07 9f 52 d6 48 54 58 91 fc 4a e7 1b d9 ba 63 37 fd a5 3b 2f 94 76 42 4e cd 76 03 b3 15 99 6a d5 c7 34 31 41 1a 88 16 2f 6a da 7e 10 b9 2d 51 28 6d 02 49 24 ee 5f 89 cd 40 c4 f9 ce 76 b0 56 56 4b 93 56 fe f1 cc 33 08 dd d0 88 1a 14 86 49 a1 88 45 1b 48 e3 88 fc 37 75 44 22 c1 b7 3b 6f 8a ea a9 16 36 23 2f ae ab f6 c8 21 f6 9a 68 5e 28 65 a0 8d 51 9e d3 b7 10 05 d6 59 af 63 73 66 20 10 46 3f 7a e6 12 19 24 a9 ca 26 8a 9a ae 38 61 a5 b4 c0 3e 96 0c 6c bb 12 ed 26 b2 c6 c0 69 54 eb cf 14 f3 55 3c b7 14 d6 53 a3 b8 d2 8d 20 2b 77 89 b2 9b f2 4b 6c 2c 17 af 48 de 46 20 ca 8a 84 78 51 1e c2 fb 7b b6 fa 6f 87 76 1f 78 4e 85 1e f3 b5 ef 7e 82 ca 37 f4 eb 85 Data Ascii: t2"\SxZ:.UURHTXJc7;/vBNvj41A/j~-Q(mI$_@vVVKV3IEH7uD";o6#/!h^(eQYcsf F?z$&8a>l&iTU<S +wKl,HF xQ{ovxN~7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50329	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	698	OUT	GET /xxrz/250x400/793/73/e5/73e591c00ee5f6cfa061e6e4f5d56a92/73e591c00ee5f6cfa061e6e4f5d56a92.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:11 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/jpeg Content-Length: 66646 Connection: close Last-Modified: Thu, 25 Apr 2024 04:06:57 GMT Vary: Accept-Encoding ETag: W/"6629d6e1-98ee" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5538 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wOXlVdRpA4bMZt1cBoeaIC24CaZp00serlkOAMXwMPPBeqllVDGssQoFZxGNXBZhn8PwlqfPCIxtWX1Zm4cXy64gVbQSAtrGQf%2Bn6QH9I9uM4v%2FvjjcIglw34e31UzPNgkgn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8e84b02b3bb-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:11 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 3a fa 06 9b 1a 5e 6c d5 1a a8 71 0c d3 6b fd 12 3f ca d2 04 bd 02 fa df 39 cf 3f 37 4e 9f 94 b1 b1 46 7b 84 34 a9 4c fd e4 2d 9b 4d 51 d5 9f d8 ce 31 a8 9f 86 02 13 ea 51 aa c7 e6 02 e5 21 7e df 64 5a f6 c8 11 e8 68 58 e5 28 aa 0c 0e 0f 23 59 23 dd 48 a0 aa f6 1a 30 8a e3 49 3a 26 a7 94 02 17 69 8f 9a e7 ac 70 6c 45 2a d4 5c c4 1e bb da 96 cf ef c2 24 55 da 5c 1d e0 2a ca 6b 6b 6c c3 14 3b cb a3 cd 68 6f 03 6e 67 8f 4e fb f7 5c b9 0a 46 4e 11 0f 25 d1 49 11 b1 e0 ed 88 a6 79 31 7d b8 59 d8 20 4a d1 d2 1e 62 da 71 6c 99 0f 48 4e 37 70 b9 10 09 68 5c 19 ed 02 f4 72 02 2e d9 e3 e6 87 3c 9b 5b a7 9b 21 38 b6 91 b9 65 35 7a 94 68 07 f7 e6 61 c7 04 17 0e df 0b 4b 11 f1 cb 5c 41 8a 36 b4 52 29 e3 d7 9f 2c c5 29 5c 6a a8 91 8c bd 08 f4 6f 46 d2 d3 18 4e 77 a3 96 Data Ascii: :^lqk?9?7NF{4L-MQ1Q!~dZhX(#Y#H0I:&iplE\$U\kkl;hongN\FN%Iy1}Y JbqlHN7ph\r.<[!8e5zhaK\A6R),)\joFNw
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 51 f9 61 d4 b9 38 0c 65 3b 8a eb 52 c1 50 cd ca 8c f3 0d 60 1f 3a a4 7c 46 8e 3a f8 ad 1d b5 78 fb e7 27 5e 7d f1 ea 75 96 6b 52 70 9f 6c dc 1d 35 45 fe aa 95 0e 96 02 cb a8 55 e5 28 f6 b9 e1 8f 12 1c 7d 30 eb 11 a2 23 19 31 66 23 56 dd d9 09 ca fd ef fc ea 77 ab 26 ee 62 fb e9 f7 2a de 2b e2 27 7d 78 79 ae 55 1e 36 28 6b df e6 54 31 b5 a3 1a 50 b8 8d c7 a6 78 9d 12 7f 99 f1 2b 1f 1f 3e 79 b0 6c 9a 61 65 74 d7 2c 0d a5 61 5b 74 aa d4 c6 9f d5 d6 53 a5 bc 59 bd 09 fa b7 33 7d 7c 7b db 73 67 c9 88 44 c7 6b 9f 64 74 66 47 75 66 ae 6d 47 16 f8 15 da ae 23 f5 d7 2e ea fa 91 8f 15 62 1f 09 71 af b4 1c 93 74 1d 44 17 76 16 e8 b9 36 07 68 b1 68 44 4b a9 47 4a ca aa b1 33 5d fa c3 9a 6f 1c f8 d9 ad 11 78 ea d5 be af 24 24 3e 85 6a bd 5b 5a cd be 81 ad e5 3b 0f 84 Data Ascii: Qa8e;RP`:\|F:x'^}ukRpl5EU(}0#1f#Vw&b*+'}xyU6(kT1Px+>ylaet,a[tSY3}\|{sgDkdtfGufmG#.bqtDv6hhDKGJ3]ox$$>j[Z;
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 11 db 4d ec 61 48 b2 0b 61 52 50 df 3e 04 33 d5 e9 d6 a7 6f 1c 69 56 4d b6 e0 dd ba 20 64 c3 93 0c cd fd 99 dc b8 88 ec ec 26 3a 0d 5a 2f 6c 10 a2 2b 7b a5 76 ac a6 61 32 a3 db 23 2f fc c8 4e ea 2d 8f fa 35 e7 fe 3d cd 7a 16 b9 7a 84 ca be 32 2a f4 23 fb de 8d 62 b4 a5 34 c9 37 31 98 05 d6 f7 19 b4 ad 9b c8 96 4e 1d 4d bb 16 64 fb 99 b6 b8 31 b7 c3 1a 74 88 ca 29 c7 54 8f b0 4b 8e dd 92 ed fb 42 58 41 f9 09 2c 23 5b 9d fd 8b de fc 59 32 17 3c c4 ce e5 c6 aa f7 0f f6 2e 55 a2 a6 0b fd b8 0b f6 46 d6 a5 ed 96 c5 d7 a6 ea 96 bb c7 f3 aa 77 e1 37 b8 ec 4f e1 63 1b f8 40 f6 f4 25 84 b9 13 ad 86 c3 99 f5 ce ea 1a e5 e9 5c 94 af 8f 18 64 6c 74 6e 38 7f 86 30 11 d8 30 94 cc 77 4e fb 78 bf 35 13 e5 0d 85 44 6a 7f f0 6f f2 0b 7b dc 87 aa 8f 82 71 0a 31 45 7a 48 9d Data Ascii: MaHaRP>3oiVM d&:Z/l+{va2#/N-5=zz2*#b471NMd1t)TKBXA,#[Y2<.UFw7Oc@%\dltn800wNx5Djo{q1EzH
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 02 f8 b9 5e ac 13 d3 87 7d 62 a5 68 f4 ee 04 d9 63 6a 3c a1 b9 ea 53 b6 3b 08 7b 89 36 5e 6b f5 31 76 4d 73 65 0c 3a eb 39 9c e1 b2 ae d3 c8 a6 32 60 9c ae 91 e4 ec 49 93 5e 82 57 2a ae 3d bd 30 2c d6 9d 1f bb 54 6e 3f f4 de 2b 75 fe 9c 5b 00 16 fc 9d b6 54 eb d6 16 7c e1 5a ae d9 bd 41 dd 4f d7 f4 8e 69 00 89 0b 73 db 7f 4c 6c bc cf 21 91 e8 bd 5a 47 93 2b 8e 39 ea 40 c1 c6 de a0 a9 2d f6 2e 28 f4 91 4b 69 af 6a 9c 51 4f 64 0e 65 f5 22 e4 9f ce 76 12 f5 3f 4d bc 77 cc dc 31 0b 9b 63 71 1e bf 13 54 f5 3f 63 24 bc 75 ca bb 34 48 cd e5 6f 55 3a 8e db b4 1b 8d 6c a5 ff 00 e0 c9 92 51 c8 75 4e ea b6 77 cd 23 f2 c8 8b d7 e0 fe bd 24 87 a2 0c 6e 47 28 0c 56 a4 72 33 38 e7 6c 26 83 b8 72 27 36 9b 7f b6 dc fd 4e 1f 6b 8f c9 be a3 65 f2 66 b7 b7 7a a3 99 b7 47 e5 Data Ascii: ^}bhcj<S;{6^k1vMse:92`I^W*=0,Tn?+u[T\|ZAOisLl!ZG+9@-.(KijQOde"v?Mw1cqT?c$u4HoU:lQuNw#$nG(Vr38l&r'6NkefzG
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 07 b0 58 03 f2 92 bd ec 69 07 da d6 a7 de 44 fc 8c c3 7e d4 ed 5e f5 77 f9 38 3d 7b 51 d8 d7 47 02 82 1f 56 4c 84 27 e5 16 a1 71 62 61 5b db 47 af b0 d8 37 74 4d ea cb 68 af b8 ab 97 37 2c b5 89 3f 2c 18 92 12 2d 4c a4 69 0d 1c 52 c8 00 1e 5c ae 46 d5 a0 d0 eb c8 3a a6 60 3c 5d e2 e8 c5 0d 9c 31 b3 66 98 d4 8e c9 d1 8f 71 b6 4c 08 ee 63 cf 8e 39 07 b7 82 f1 f5 11 da ad 45 29 7f b4 78 5c a6 fe c7 7f d9 c0 72 b8 7e 4c 84 ff 00 06 32 15 92 b5 6b 26 28 f8 8a 57 d2 eb 6d b6 1b 11 49 7d f5 b1 f3 76 47 16 55 10 be 6e f8 56 6b 57 83 a2 8f d9 69 11 d1 4e cd a4 c0 66 8f 0a ea d9 79 27 64 8d b2 c7 91 57 11 d1 80 48 6c 46 c9 86 8a 42 43 29 ed 8b e4 89 af 43 ac 7d c6 f9 0e 85 1f 5a 78 60 33 ee 69 93 0f 73 5a 51 36 c6 1b 54 a5 1b cc cc 26 54 ff 00 61 1d d2 ca b9 df 66 Data Ascii: XiD~^w8={QGVL'qba[G7tMh7,?,-LiR\F:`<]1fqLc9E)x\r~L2k&(WmI}vGUnVkWiNfy'dWHlFBC)C}Zx`3isZQ6T&Taf
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 96 5e 3a b6 fa 85 a6 eb 3a 4d 5e b1 cb b2 d0 55 1c c7 3a 39 80 ad 88 a6 0b 7a 21 13 de 42 03 cf 00 31 4c 46 b0 4a ba e3 e2 86 dc 8a 2e b1 7a 2a 39 bd 8b d3 db c7 89 f4 d4 52 f8 7e 61 32 15 91 6b 4f ad 2c bb 42 42 7a 47 6c c2 77 b6 a5 b4 f4 73 dd 06 aa c2 10 64 c2 13 05 62 00 38 c5 5e d9 d3 a2 d7 45 6d cf 78 79 23 5e 65 e6 f7 1f 45 d7 ab 92 05 35 08 89 2c 65 b2 5d ce 96 d3 6b b2 2f 16 4f 3a dc f1 ff 00 d0 a0 85 13 ab 93 a2 ae 80 e7 e3 74 65 66 3b 4e 7b 55 75 63 37 1c 59 95 c5 8b 73 37 3e af 3d 51 b6 d6 0c 4f ad ce cf ff c4 00 4a 11 00 01 03 02 04 02 05 09 04 04 0b 09 01 00 00 00 01 02 03 11 00 04 05 12 21 31 41 51 13 22 32 61 71 06 14 81 91 a1 b1 c1 d1 f0 23 42 52 e1 10 15 33 62 16 24 25 43 53 72 73 83 a2 b2 b3 26 44 54 63 82 92 a3 c2 f1 d2 ff da 00 08 01 Data Ascii: ^::M^U:9z!B1LFJ.z*9R~a2kO,BBzGlwsdb8^Emxy#^eE5,e]k/O:tef;N{Uuc7Ys7>=QOJ!1AQ"2aq#BR3b$%CSrs&DTc
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: ff 00 f2 88 93 97 84 89 ef 12 0c 51 10 26 b1 25 00 c1 1b 99 12 ae 7e 14 44 d2 88 54 28 71 13 e1 48 39 56 95 6f 95 49 31 ce 14 0f c2 b1 0c 45 ab a7 64 31 d1 e5 88 cb bc 77 88 f5 57 49 f8 69 85 2d a0 db 88 70 e7 42 82 bc 0f 0a 6b 10 0e 10 1e 5c 93 a4 70 0a d3 4f ce 92 46 50 46 a0 d2 54 7a 40 14 bd ce a9 3b 48 88 23 d6 66 b1 25 43 88 48 e0 9f ff 00 35 ad 11 15 68 ac d6 f1 c5 26 3d d4 17 91 c0 a5 49 e5 5d 22 88 db 31 e5 3a f0 f5 d6 25 ab 03 87 5d 34 44 d0 09 c8 98 20 c0 83 4d 7e d1 1f d6 4f f9 93 57 f8 5d 9d c1 0e 34 fb 4c 38 7a bb a7 29 1a 4c e5 3e fa b8 c3 9b b7 0d 86 ee 53 72 a5 48 59 4a 54 02 48 88 d5 51 33 27 6a c2 ad ac ba 6c f8 96 7e 84 27 40 dc c9 57 a2 af db 61 0f a9 56 45 5d 02 f5 4a 14 08 52 7b 8c 8a 6e f1 d6 c0 49 32 91 c3 6e 54 9b d0 e2 c6 64 01 Data Ascii: Q&%~DT(qH9VoI1Ed1wWIi-pBk\pOFPFTz@;H#f%CH5h&=I]"1:%]4D M~OW]4L8z)L>SrHYJTHQ3'jl~'@WaVE]JR{nI2nTd
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: d6 ad 02 1e 09 71 04 29 01 19 67 f7 b4 d2 9b 37 19 00 e5 f9 54 bb f8 7d be 15 74 e3 a8 61 70 35 29 cb 96 75 20 c4 c5 79 30 cb 65 e0 97 51 f6 87 5c ab e0 38 c8 a4 5c 30 95 06 f2 49 26 04 23 42 7d 75 8c 94 b7 8c b8 a6 86 50 fb 1a 8e 45 07 78 ef 9a c3 8b bd 19 1a 89 75 cd c7 25 9a 75 4f 74 6a 8d 4c 68 38 93 a4 00 2a e2 f0 a1 d6 3a 66 54 d8 8e b4 90 4f 0e 03 6a 6a ed 97 8a d8 49 39 94 42 b5 1c 06 fe f1 44 2f 2b 40 69 d5 f8 d5 ca 7e c8 85 6b 3b 77 1d 29 f4 c6 14 78 ed ef 14 c9 22 c3 03 8f f8 c1 fe 9a 87 c6 b0 b0 57 68 dc eb 1f 95 5a 60 de 6e ca d2 d0 ea 15 48 8e 7c 78 d3 76 05 c7 1b b6 00 25 6e 29 29 93 b4 98 15 63 e4 95 95 b3 4b b8 c4 ae 18 5a 08 86 db ce 33 e6 49 12 72 25 66 46 d1 b5 63 5e 4e b5 69 e7 18 8d a3 ad 96 19 52 1c 69 a7 14 92 15 30 7e ea 8f 3e 5f Data Ascii: q)g7T}tap5)u y0eQ\8\0I&#B}uPExu%uOtjLh8*:fTOjjI9BD/+@i~k;w)x"WhZ`nH\|xv%n))cKZ3Ir%fFc^NiRi0~>_
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 40 cb af e2 48 34 e1 52 41 13 5e 47 dc 34 d3 97 0c b9 db 71 09 52 47 f5 74 22 97 7a c3 42 6e 1d 43 48 3d 5e ba c2 41 26 38 98 1e da f2 a3 0a 42 2e cd e5 99 65 eb 1b c3 9d b5 db b8 95 a5 2b 22 56 82 01 25 30 79 c6 fd d5 62 d2 6d db fd e5 76 bc 0f 0a 24 1a e9 05 5f b6 95 9c e9 ed 0d fc 2b c9 c3 65 65 82 25 cb 77 02 d2 a0 5c 74 ac 42 d4 ee c5 20 49 d8 c2 52 26 b1 9b ec f6 78 9b 32 90 1a 65 81 1b 75 de 02 7d 59 bf c3 df a6 52 93 ad 25 04 a9 30 46 86 75 ab 76 55 d2 f4 92 92 15 c2 74 d2 37 a7 cc 3c 9c c2 04 6c 38 ed 40 03 c2 95 06 35 fa d2 ae 4c a0 68 07 58 6d 48 75 c6 56 97 1a 51 42 c1 10 a1 b8 ac 4a f6 ed e7 15 d2 be e3 80 aa 72 a9 44 a6 44 70 f4 d5 b3 ee b7 72 d2 52 b3 95 46 0a 3e ec 69 c2 91 d8 49 e2 7f 2a 3d 93 e8 f7 fe 8b b7 dd 0e b8 90 b2 12 4e c3 6a f3 Data Ascii: @H4RA^G4qRGt"zBnCH=^A&8B.e+"V%0ybmv$_+ee%w\tB IR&x2eu}YR%0FuvUt7<l8@5LhXmHuVQBJrDDprRF>iI*=Nj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50332	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	590	OUT	GET /media/New%20navigation_Rebrand%203.0/xag.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:11 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/svg+xml Content-Length: 757 Connection: close Last-Modified: Mon, 20 Dec 2021 10:12:08 GMT ETag: "8a358fc27f7b244c296100ef34819eb2" Cache-Control: public, max-age=36000 x-amz-version-id: 013VGCLTANuKwKpVdSeSuIPvYBvi2Np0 X-Cache: Hit from cloudfront Via: 1.1 dcccf6c408219d8b851fcd12a0068cea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: XYR5TqIbYEngqWVQjtzD2AbBMn3a1Hxr6ZNVmS6dRH7g-c22SD6Bag== Age: 20514 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:11 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8e869103360-MIA
2024-04-26 18:33:11 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 46 42 46 42 46 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#BFBFBF" d="M18 0c9.941 0 18 8.059 18 18s-
2024-04-26 18:33:11 UTC	138	IN	Data Raw: 2e 38 38 38 2e 32 39 2d 31 2e 30 35 33 2e 37 33 6c 2d 31 2e 36 38 37 20 34 2e 35 61 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 20 31 2e 30 35 33 20 31 2e 35 32 68 39 63 2e 37 38 35 20 30 20 31 2e 33 33 2d 2e 37 38 35 20 31 2e 30 35 33 2d 31 2e 35 32 6c 2d 31 2e 36 38 37 2d 34 2e 35 41 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 20 32 30 2e 38 31 33 20 39 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: .888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5A1.125 1.125 0 0 0 20.813 9z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50331	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	590	OUT	GET /media/New%20navigation_Rebrand%203.0/xau.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:11 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/svg+xml Content-Length: 757 Connection: close Last-Modified: Mon, 20 Dec 2021 10:11:49 GMT ETag: "e250d8589dca206bbe024e3cbfb5ec77" Cache-Control: public, max-age=36000 x-amz-version-id: sa.9aXf65op0_MxZB9T9MGUkeoh_ijym X-Cache: Hit from cloudfront Via: 1.1 dcaec0b05596b42ef5dab9e145ac961e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: VWUushoUa5uR__9Gb6rkoMMVPc6wJWVG8MCHwus2oeqGZsM6JAkiMg== Age: 20515 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:11 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8e869dcda6f-MIA
2024-04-26 18:33:11 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 36 38 45 34 36 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#B68E46" d="M18 0c9.941 0 18 8.059 18 18s-
2024-04-26 18:33:11 UTC	138	IN	Data Raw: 2e 38 38 38 2e 32 39 2d 31 2e 30 35 33 2e 37 33 6c 2d 31 2e 36 38 37 20 34 2e 35 61 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 20 31 2e 30 35 33 20 31 2e 35 32 68 39 63 2e 37 38 35 20 30 20 31 2e 33 33 2d 2e 37 38 35 20 31 2e 30 35 33 2d 31 2e 35 32 6c 2d 31 2e 36 38 37 2d 34 2e 35 41 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 20 32 30 2e 38 31 33 20 39 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: .888.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5A1.125 1.125 0 0 0 20.813 9z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50333	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	590	OUT	GET /media/New%20navigation_Rebrand%203.0/xpt.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:11 UTC	750	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/svg+xml Content-Length: 762 Connection: close Last-Modified: Mon, 20 Dec 2021 10:12:27 GMT ETag: "681a635e9e3cfea14b58c3267ff59d89" Cache-Control: public, max-age=36000 x-amz-version-id: U9gngjRKc5FNXIbKddgIOC4Orqzu3aij X-Cache: Hit from cloudfront Via: 1.1 41958139e7d828579c6466c1ce1c7b26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: bxg6xZ5D4dNioQPe-szwMgC1HO3CUpDzOF_vYCcbHcRQnfQppmU0lQ== Age: 20515 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:11 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8e86a89333d-MIA
2024-04-26 18:33:11 UTC	619	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 41 42 39 38 38 33 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#AB9883" d="M18 0c9.941 0 18 8.059 18 18s-
2024-04-26 18:33:11 UTC	143	IN	Data Raw: 38 2e 32 39 2d 31 2e 30 35 33 2e 37 33 6c 2d 31 2e 36 38 37 20 34 2e 35 61 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 20 31 2e 30 35 33 20 31 2e 35 32 68 39 63 2e 37 38 35 20 30 20 31 2e 33 33 2d 2e 37 38 35 20 31 2e 30 35 33 2d 31 2e 35 32 6c 2d 31 2e 36 38 37 2d 34 2e 35 61 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 2d 31 2e 30 35 33 2d 2e 37 33 68 2d 35 2e 36 32 36 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: 8.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73h-5.626z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50336	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	698	OUT	GET /xxrz/250x400/793/f4/3f/f43fe143bb66878a7be75d0fd23e06c1/f43fe143bb66878a7be75d0fd23e06c1.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:11 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/jpeg Content-Length: 83089 Connection: close Last-Modified: Thu, 25 Apr 2024 04:08:43 GMT Vary: Accept-Encoding ETag: W/"6629d74b-12b72" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 894 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q5WBbPvrJTOcPP7Hvo1ZfjHWFmAH%2BEMsHLBbRUaqOUSX1YaHIJBsHrue2smOPRyvGHHn%2BTTSwQAtynCn0E%2FIXY5o5dkRWimzQi6ZCsbplZjY9NXU9Kj5PDi3KsDym5Y%2BstSi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8e86e41a68d-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:11 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 4b 22 08 70 10 12 e4 13 80 c5 c5 f5 0d ec 6e a1 6b e1 db f5 3f 32 85 82 6f ce 4c 86 c3 9a ab 0e bb 15 00 7d 64 54 2e 0a 6b 2d ab 66 eb 66 55 d7 56 97 2d 5f 7e 1c 04 07 a1 e2 fe 6d f9 b6 71 bc 6b 7f a8 6b 79 c9 b2 88 9c b6 75 25 cb 83 71 be 78 da a9 67 45 8c 5f 53 5e e7 79 ce c3 c2 28 72 2b 1f b4 05 11 ca 2b 1d a2 f5 53 62 49 37 3d 13 cf 19 a5 93 f2 e2 2f 65 0d 1a 29 7e c7 13 44 89 9c 75 4c 91 54 64 de 5b d7 09 3a ed 2d db b3 94 b7 63 c2 9c db 25 e7 83 95 9a d1 d7 bc e3 32 60 be ec b9 e7 0d d8 8c 1e ab e5 39 bb 56 6a b2 37 97 6f 75 03 6f f9 06 b1 0b 96 de a4 b9 6c 6e 2f bb 4a ab 3e 90 47 32 50 aa 8c 92 1e 63 e9 28 6d 5b 21 12 0d 0c 12 8b ae 43 69 ee fe 16 e3 49 a8 b0 77 1a 64 0b 9b 03 1d e8 ce 63 25 56 32 45 13 78 54 cb ce d8 7a 4d 4b c7 22 20 29 ec 9c b9 Data Ascii: K"pnk?2oL}dT.k-ffUV-_~mqkkyu%qxgE_S^y(r++SbI7=/e)~DuLTd[:-c%2`9Vj7ouoln/J>G2Pc(m[!CiIwdc%V2ExTzMK" )
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: cd b3 0c 46 86 26 73 5f d2 a7 32 0d c2 5d 80 56 37 0e 96 7c 72 1a a7 32 99 fb 06 76 4c 19 ab 86 36 40 c6 00 8f 72 d1 e9 6d 06 02 a4 33 4b f8 9f 24 bd 8b 54 b2 1c 12 7a 8f e7 d3 d3 45 45 c8 25 09 71 93 75 a0 44 84 df 64 76 6e f1 a6 ea 94 85 0a 22 f3 04 74 da 87 3d 16 52 f6 f5 4e 15 43 59 d7 89 65 b5 65 69 de 7f a9 88 fc c2 f4 f7 cb a3 31 de 20 44 85 4f d2 08 31 59 97 55 72 1d d8 64 5f 71 8b 23 6e a4 84 66 1d 86 e7 59 c6 46 a3 f5 13 d4 b2 f4 ce a2 c5 b2 6e 21 83 9c a4 66 27 94 29 16 fe 70 d2 9a c8 35 84 0c 87 e5 33 25 b0 9c 63 b2 c1 bc 1b c1 5e b4 e9 60 e3 81 5f 25 76 03 64 a1 1e 3d 32 a6 56 fa f1 2d 12 ad ad 2f 1a ee 25 73 21 d3 8d 0a 48 e6 3c e9 fb 29 1b d4 4a dc 84 72 80 94 2c 72 dd 34 b6 bc 31 04 ae 32 5f 37 ec 3a a2 5c ee 40 90 a9 b6 7d f6 9e 90 90 3b Data Ascii: F&s_2]V7\|r2vL6@rm3K$TzEE%quDdvn"t=RNCYeei1 DO1YUrd_q#nfYFn!f')p53%c^`_%vd=2V-/%s!H<)Jr,r412_7:\@};
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 4b b9 6f 43 d0 f8 2f 53 d2 e4 f2 cf 12 0a 59 dc d7 0d df b3 a4 5f b2 e7 3d 7e 23 fd 9a 7e a5 6b ba de e8 9a 3d 3e 81 43 22 cd ad c2 56 4d 90 89 44 d4 7a c2 8e 03 bb c7 c5 f1 c2 a3 20 eb da 06 18 06 94 b2 a2 f7 34 b0 57 46 e6 ce 76 6c d1 95 c5 33 c3 18 e7 75 26 9d b2 ec 96 5a bf 4d b6 51 6e 20 c5 10 5c 62 8a 44 99 e2 6c a0 f2 af 16 02 e2 1a b5 5a bf af 48 bf 65 ce 7a fc 49 fa 80 25 92 6e 11 e3 50 68 3a f5 84 b2 c8 34 18 ae 1a 1a c4 7e 98 ac 46 fc 9d c9 3a 8c 2c 9f b9 5c 9d bf e5 77 8c 48 bb f4 59 26 0d c5 33 47 be 73 66 bf aa 93 67 e4 dd d3 6c ce 38 e1 bb bd c0 b1 f8 63 8d ea 43 a5 57 6b 1a f8 dd 62 06 bf d2 ec 47 02 3b 9a 66 0a b4 1b 37 30 e9 15 0b b9 73 95 ad a2 97 5e d8 5f 5b fa 23 55 cb d2 4b 55 94 fd b3 9e 7f 12 7e bd 38 71 af be 5b 17 b2 a3 45 1a 0b Data Ascii: KoC/SY_=~#~k=>C"VMDz 4WFvl3u&ZMQn \bDlZHezI%nPh:4~F:,\wHY&3Gsfgl8cCWkbG;f70s^_[#UKU~8q[E
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: b5 06 ff 00 4f c0 a3 6a 18 3c cd 09 1f 22 68 90 47 ce fd b0 7d de f8 10 c6 d2 93 e1 1a 7f 6e 80 d9 6a 7f 88 2c ab 4a e1 0e 44 f8 e5 30 24 a3 b1 a5 62 24 71 39 8e b3 59 eb 1b 5f e3 b9 ef b9 ac e2 3a 0f 6f 83 00 14 e0 8a 5f 49 b2 0e d9 c8 1e ed 11 fb 2a f2 dc d7 44 d1 d5 7b bb a4 6f b2 e7 3c 7e 25 ef 83 23 84 fa 4d 89 f6 74 a2 46 c8 62 c7 46 67 23 ed f4 02 db ae 3d 45 95 8d 6a bd 7c 09 1c b6 77 b4 c0 94 ed c2 5f 84 8b eb 49 58 4b 29 86 1d 7c 86 0c a7 1c 19 01 f4 82 b8 07 ab 9f 12 00 81 96 95 cc 34 3e 35 b8 81 7b aa 44 91 eb 38 b1 4a ae 24 35 18 c3 07 c1 ce f0 8c 39 d3 c8 d9 5d 44 db 16 be af 3a 46 fb 2e 73 c7 e2 5e d8 99 c1 57 a9 6b a9 a4 e5 88 7b da 5e 46 df 9b 27 89 69 68 6b 39 16 b4 92 07 02 85 c5 67 1d ef dc 69 aa 1e df 7e d3 65 5b 6c 7c 07 2e 78 b6 2d Data Ascii: Oj<"hG}nj,JD0$b$q9Y_:o_I*D{o<~%#MtFbFg#=Ej\|w_IXK)\|4>5{D8J$59]D:F.s^Wk{^F'ihk9gi~e[l\|.x-
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 65 af c4 ca f8 96 48 72 90 41 e9 19 9d a8 3b e7 37 2f 6e 2b d5 9a e2 d9 34 4a c9 7b 24 a7 92 e2 95 7b 47 90 0f 6e d3 5d fe ed 6e 6a b6 b3 ab 01 5d ca 53 86 3b fe 4b d8 ac 80 70 3f d0 a6 07 c4 1e 51 db 1e 27 13 6b 92 6d ed 2a 6b 92 00 f6 19 2e 25 c2 ff 00 c6 11 5a 29 93 17 b4 96 3d 5a bd 97 c5 ae ed 90 ed 0b 0b 0d da 4a d1 d9 be b2 65 90 04 37 44 9e 51 8e 09 d8 a5 99 eb 19 7a 52 1a 0a 87 be 73 a7 e2 7d 55 8e 5b 6b 0e ec 95 7e 8b ef 10 1c a7 5d 8e 60 49 46 66 20 d0 6d ee ba e7 79 35 b1 ea 9d 1e c5 d1 86 f7 df 4b 7c a2 0a 27 c3 c6 b2 90 39 d6 5c 27 6b 00 25 41 79 9b 74 d4 f6 2d 4e d8 71 9e e0 bd 8a d7 1d 55 cb 8b ff 00 04 46 ab 60 05 0a 2f 15 8f 8f 17 f3 e1 2e 4d 33 c2 82 af 0b dc b1 9c 65 18 fa 5d 62 7b 16 73 a7 6f 94 da 9b 98 fb fd 81 88 2b 9d 95 ef f7 ba Data Ascii: eHrA;7/n+4J{${Gn]nj]S;Kp?Q'km*k.%Z)=ZJe7DQzRs}U[k~]`IFf my5K\|'9\'k%Ayt-NqUF`/.M3e]b{so+
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 4c a2 78 d7 8f 35 e7 63 b8 de 97 1d c7 51 3d 67 f1 d9 e2 38 ba 95 b9 c1 5f a0 5d 40 97 26 af 7d 2a 97 50 d9 5f 93 68 2d 23 10 b0 81 15 e9 6c 51 36 49 4a 47 ae 74 8b f6 5e d9 ce c9 df 89 9c 8a 89 fc 62 23 7b 2b da b8 9e 3e cf b7 ca 43 5e 6a 9b 08 c9 6d ac 17 d0 99 38 89 65 0d bb 04 47 b6 b2 39 ee ec 5b 22 69 e7 c4 4d 6a b6 6f c4 2f 65 9a 81 c2 ec 82 1e 49 dc 44 a3 3e d5 29 ec f8 f1 95 8e b3 74 8c 73 b0 72 8d 19 05 68 35 68 ec 5a d4 92 61 39 d6 f1 a1 de c9 bb ae 04 24 f3 0a 64 87 fa 8c e9 2d 8a ca 6c e7 6f e3 89 95 1e ab e9 13 b3 44 76 a7 c1 11 1b ad c8 19 63 f9 96 2b 00 8a 54 b1 97 1a 92 92 aa d2 c0 39 07 63 8c 15 b1 b4 9e f2 3e 7f 8a 7b db d5 4f 6b 26 4a 21 4a 72 a4 63 e3 61 83 d3 46 56 c7 c6 5c 41 03 96 d1 5b 87 99 29 f8 b3 55 cb 1e cb e1 c7 ef 66 44 4b Data Ascii: Lx5cQ=g8_]@&}*P_h-#lQ6IJGt^b#{+>C^jm8eG9["iMjo/eID>)tsrh5hZa9$d-loDvc+T9c>{Ok&J!JrcaFV\A[)UfDK
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: ec fc 4f f6 01 7c 50 e5 e6 7d 32 cf 74 87 e8 a8 3d f9 bc f4 f9 20 e4 5f d6 cb 7d f1 06 5f 50 d1 c7 c3 85 63 a6 be 95 6e ea 44 09 e7 bf 36 36 1b 93 72 71 4f 47 41 96 ac 66 40 b5 35 ef 1a 48 35 db 81 0a b1 b2 b9 47 d2 5b 60 d6 20 31 1e 58 ce 67 79 59 74 2e a2 ce 23 88 44 4e 9b 15 5f 0a 81 6e f1 b9 3c 88 3b 1c 2e 4d 18 86 49 65 aa 65 99 62 59 1a 3d 22 ea 09 1b 6e 6c 49 dc 01 b7 5c 2c fc 12 56 da f7 f1 5b 98 ff 00 7c c6 e3 cf 12 55 52 ab 16 96 45 5d af e3 17 5b 5b a5 f7 f7 6d 8a cc e9 5f bb 4c ac 4a 9d a7 90 2a de d6 e4 83 7f c5 b0 b4 35 f5 d3 09 a5 49 07 12 ce 64 74 22 e9 b5 9d 41 b6 a1 ea 0d 8e 2b 28 65 a3 7d 2f de 43 e0 91 47 75 bd 3f 85 bd 09 f7 12 37 fe d8 3e 6c 62 ab c6 bf 67 e2 7f b3 2e a4 f6 89 0c 8f f3 31 da ff 00 c6 fb 69 41 f7 f8 88 dc 01 eb 8a 7a Data Ascii: O\|P}2t= _}_PcnD66rqOGAf@5H5G[` 1XgyYt.#DN_n<;.MIeebY="nlI\,V[\|URE][[m_LJ*5Idt"A+(e}/CGu?7>lbg.1iAz
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 37 e5 7b 36 20 f9 b1 8a b3 67 5f b3 f1 38 ec 77 0e 35 e2 f0 c1 63 2c 9a 9c 8d d4 28 8c a8 d5 6b 81 bf 21 6e 58 cd bb 59 18 8c 52 53 a3 55 54 ad cf 0e 2d c2 1b 58 33 b8 24 01 73 b8 3b fb b1 5d 34 f5 15 92 cb 52 82 39 49 17 51 b8 1e 97 e7 83 e1 f5 16 17 3e 58 02 e2 f8 91 96 35 fa cc 7e 8f 33 eb 6c 24 f6 b0 d3 6e 47 7c 06 52 0e ab 83 70 76 e5 cc 5c 5b fd 70 8d 71 f5 7b cb 6e 97 df 7f c3 0a eb 30 68 9a 40 89 75 e7 d7 7b db fa e2 96 a8 54 49 ec cf 1a 54 40 d6 5d 27 6f 0d bd 7f 43 85 a3 58 78 62 34 44 4b 6a 54 1b 58 16 d8 37 ad b9 9e 46 d8 a9 ad e0 2b a1 8c 7c a2 0d ed 62 3c 87 3e 96 f2 c5 7b 6a 55 3e 73 cb f8 69 8f fa e2 0f 9b 18 aa f1 8f b3 f1 38 ec dc aa 15 a1 99 9b 80 d2 9d 51 ea d2 a7 ba be 22 2c c4 1f 2b fb c1 c4 39 2d 1b 7f cc 47 1a a2 94 03 44 5b 2d ad Data Ascii: 7{6 g_8w5c,(k!nXYRSUT-X3$s;]4R9IQ>X5~3l$nG\|Rpv\[pq{n0h@u{TIT@]'oCXxb4DKjTX7F+\|b<>{jU>si8Q",+9-GD[-
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 68 ea 22 0b 6b 68 94 6b 52 0f bb fa e2 9e 92 c7 5c 8d b7 40 3f 3d f0 1a cd e5 eb 8c b6 33 f3 a7 c0 2f b7 99 20 28 f7 f9 e3 7d 4e 4f d6 3f ae 0a 77 cf ad b0 10 5c dc 73 c4 f1 c9 b1 84 ee a6 e0 61 e7 92 28 8c c8 ba 8a a5 de 23 b9 61 6d c5 bc c7 31 ea 31 13 43 98 89 25 23 88 aa ca a6 fb 77 f6 36 f7 80 45 f1 c3 0b 22 a3 2a 24 43 41 2c fb 16 2a 75 28 07 62 37 17 b6 29 1b 5d 3c 6e 0d c3 02 47 e2 71 9a 7c dc c7 af 07 fa 9c 40 a4 8a 73 c8 b4 61 8f bb 4a df f3 38 80 69 77 8f fc 40 a3 ee 5e f7 e7 b6 02 12 d6 ea 71 3a d3 b6 55 4e 5e 40 d5 3c 32 a8 a0 f7 95 56 42 34 b8 e4 05 af cc dc 8b 6f b6 02 e8 0b d7 bb 7f d3 10 a3 48 c0 12 16 e7 af 2c 43 1f 0e 34 4b 06 22 db ae 2b a0 e0 37 75 f5 07 24 ff 00 10 df 70 7e 07 0e fa 42 df d1 7e 18 3d 31 59 23 24 4f c3 f1 02 bf ae 23 Data Ascii: h"khkR\@?=3/ (}NO?w\sa(#am11C%#w6E"$CA,u(b7)]<nGq\|@saJ8iw@^q:UN^@<2VB4oH,C4K"+7u$p~B~=1Y#$O#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50337	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	590	OUT	GET /media/New%20navigation_Rebrand%203.0/xpd.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:11 UTC	751	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/svg+xml Content-Length: 762 Connection: close Last-Modified: Mon, 20 Dec 2021 10:13:10 GMT ETag: "58f10ef614a7c4c47a130b68568e17cc" Cache-Control: public, max-age=36000 x-amz-version-id: Z5jhskaBWQ_zMVkmgEGSkmk6JP7PcqJa X-Cache: Miss from cloudfront Via: 1.1 dcccf6c408219d8b851fcd12a0068cea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: mS3twdijYq8Jo_rOY9KHn1xEnRcE1O602QS_8JuAod2du9I1rZTK7g== CF-Cache-Status: HIT Age: 20515 Expires: Sat, 27 Apr 2024 04:33:11 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8e87e12228a-MIA
2024-04-26 18:33:11 UTC	618	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 42 35 41 42 41 30 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#B5ABA0" d="M18 0c9.941 0 18 8.059 18 18s-
2024-04-26 18:33:11 UTC	144	IN	Data Raw: 38 38 2e 32 39 2d 31 2e 30 35 33 2e 37 33 6c 2d 31 2e 36 38 37 20 34 2e 35 61 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 20 31 2e 30 35 33 20 31 2e 35 32 68 39 63 2e 37 38 35 20 30 20 31 2e 33 33 2d 2e 37 38 35 20 31 2e 30 35 33 2d 31 2e 35 32 6c 2d 31 2e 36 38 37 2d 34 2e 35 61 31 2e 31 32 35 20 31 2e 31 32 35 20 30 20 30 20 30 2d 31 2e 30 35 33 2d 2e 37 33 68 2d 35 2e 36 32 36 7a 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: 88.29-1.053.73l-1.687 4.5a1.125 1.125 0 0 0 1.053 1.52h9c.785 0 1.33-.785 1.053-1.52l-1.687-4.5a1.125 1.125 0 0 0-1.053-.73h-5.626z"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50338	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	698	OUT	GET /xxrz/250x400/793/52/7b/527bdc2908423dffab686f4838487577/527bdc2908423dffab686f4838487577.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:11 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/jpeg Content-Length: 88588 Connection: close Last-Modified: Fri, 26 Apr 2024 13:46:51 GMT Vary: Accept-Encoding ETag: W/"662bb04b-14b03" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 894 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rnpJmHYP8vmpXAjUCdqjXiWmqXXnt%2Fdfs7mjDoSFKEpaslO5x%2BAl0J%2ByZO%2BHYkPE7K40f7T%2FpDAYfQms%2FV9aAqzgEfdHzBeUzpIjWI44cnQmU33ZqAsh98clQCRNLkD6Kph8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8e87cd4b3cb-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:11 UTC	643	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 01 01 01 01 01 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 1e 86 c0 8d 72 f3 c6 d9 e7 5d 7e d9 6a 8f 63 91 ec de c1 da 4d 10 1f 2b ca a7 0a 52 78 6a 35 80 ad 74 f4 06 d6 1a fc b5 e6 e2 9c c0 5f 7c 29 36 bf 14 24 85 1d 1d 5e 2d 13 49 89 8c 72 15 e9 87 95 5a 2a 53 1a 42 cc 40 e3 71 92 aa 9f 02 e5 b8 17 d0 aa 4a de be e6 bf cd ab f1 c2 ac 26 af 10 09 d7 ba d9 4a 6e ec a7 d1 fe 79 2c 3d ea a9 eb 5b 74 6d 8a 16 33 bb 1b 61 68 68 7d b4 a6 e4 70 15 8e 1e c5 68 fc 1c b5 cc 8c 11 56 1a e8 5c 10 f2 bd 91 0a ac 48 ff 00 2a 1c 44 42 92 3d 49 5c e3 36 28 78 59 69 97 1f 8a fe bb a1 01 63 a8 7d c5 7e 12 56 b9 45 33 8b 83 77 1e be 8e 42 e8 a9 73 f6 44 b7 d6 d7 1e 9c b9 0d f7 99 d2 bb 14 0e 1c 00 27 97 f5 cc bf 9c db 47 a0 59 d1 51 89 60 6d fb 0a 5a f3 e0 6c 70 2c f1 85 d3 28 e7 ed b8 e0 32 f0 fc 16 32 4d 3c 81 9e 65 30 66 b2 99 Data Ascii: r]~jcM+Rxj5t_\|)6$^-IrZSB@qJ&Jny,=[tm3ahh}phV\HDB=I\6(xYic}~VE3wBsD'GYQ`mZlp,(22M<e0f
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 71 70 6c c5 cb ad 6a 91 84 b7 10 78 a1 cf f3 67 21 25 15 f6 39 22 d5 c9 0b 93 6a 51 20 4b 20 8e fc 11 59 23 bc 22 8d 97 85 d0 47 41 15 e9 e8 7e a7 dd 90 a4 06 cc cd 09 f6 75 de 9a f7 09 d4 3a d3 74 e0 17 2a 05 08 b2 29 01 c2 6b 83 d8 00 d2 77 b4 ea c3 e7 bd 9b a6 ef 7b 95 52 b0 06 5f 65 9e 21 89 7b 07 d3 be 6c b3 fa 1a fe 70 b6 c3 1f b1 d0 ba 92 be 6e 89 b6 29 6c de 7f 76 fa 0e 16 49 7e f3 ca f8 9b 3a df 1f 04 76 e7 2c cb 80 d1 55 69 4e bb 0c 5f e5 e9 0a 26 64 5c f4 5d e8 73 2c b0 39 4c 19 2b 0d 3b 51 43 cb 5c a0 6c ac 5d 73 8a d4 ce 07 4d ec be 42 7e f8 94 96 9d 6d b6 1f d7 f1 0b 84 72 6b 46 51 27 77 18 19 c1 f3 c1 e8 c7 1b 5a 7b 5a a5 cc a1 d0 59 5c ac 26 d9 46 49 2e ed 30 e9 04 76 98 b4 89 88 87 c8 14 98 61 d3 78 15 c2 43 1c 86 74 73 06 c8 7b 19 8b 35 Data Ascii: qpljxg!%9"jQ K Y#"GA~u:t*)kw{R_e!{lpn)lvI~:v,UiN_&d\]s,9L+;QC\l]sMB~mrkFQ'wZ{ZY\&FI.0vaxCts{5
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 52 7c 5b 2d d3 41 9a 15 91 10 cd 70 74 f9 4f 6b 98 c1 4b 3a cb 6c 02 ae 4b 4a 35 ab b5 2b 3d 22 ba de 5b 07 49 b2 11 5a d7 6e 7a bd 86 89 6f 4c f5 65 fd 8d 0a 79 30 fd 73 8f f3 c1 2c 41 4e 2c 1f 11 1d 62 e9 c2 50 57 e2 f5 7a 84 30 d0 84 55 7d 38 79 f4 c0 31 d5 04 17 55 ad 10 87 15 05 ef 9c c4 3f 81 97 1c a1 b9 75 57 bb 96 7f 7e 99 94 2e 1d 31 ab 2e 63 9d 5b a7 1e 11 d1 65 b9 0d 6a 78 60 81 db f4 f6 4a 9a 09 76 2a 1c dc ea ac 75 da 3d 7f b4 10 6d 6d 76 cb 2f 39 8b 00 2e 78 8c cc 47 7c d7 bf 29 4f d7 74 d6 ba ee ca f0 c2 cd d5 95 6c 45 2f af 8c cd 54 3f 9f a4 2e 49 16 49 c2 a8 7c f2 55 04 89 1f 10 be bb 41 21 a6 78 ac 30 51 58 66 4c d7 5b 20 54 d0 2f cb 0b 23 98 f2 11 07 ab d2 3c f3 7d d6 13 b6 4a ef 53 62 a4 94 39 ae 71 2e aa 94 90 b4 dc 16 90 9b d5 df 81 Data Ascii: R\|[-AptOkK:lKJ5+="[IZnzoLey0s,AN,bPWz0U}8y1U?uW~.1.c[ejx`Jv*u=mmv/9.xG\|)OtlE/T?.II\|UA!x0QXfL[ T/#<}JSb9q.
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 63 35 ab ec 9a be 75 6b 8a d7 29 4f 8c 55 ec aa e1 da 87 2c 0d 5d 02 6c 36 0e c8 57 2d 53 f3 6a b0 cb c2 4f a8 bb 05 c1 a1 7d 75 a4 d9 ea 3b 6a 5b 0a b5 ad 94 91 62 51 86 01 5f ee 96 13 2e 09 f5 18 e6 6b eb 9f 3d b7 5e d7 c5 ba a4 6f aa ad 49 4f 73 3d c2 9d d7 50 be be d8 58 a4 47 5a 1d 21 cb 69 5c fd ae eb b7 d4 6c 75 91 e9 fd 90 bb 3a ca d6 06 b0 a8 88 84 23 07 fa 98 da 68 31 71 7d a3 eb e2 a8 bc 1d 22 44 b3 6f d6 ba a5 a5 43 5d a5 d5 76 1c 1c 19 84 5b 53 67 58 48 6c 55 cb 2c 39 ed ee c4 4d e8 43 ac 9e cb ab ec 94 17 cb 77 cb 94 a6 d9 fa ab 71 12 17 d5 c7 08 a1 f0 34 c4 2c fc 39 02 28 49 7c 05 c6 19 af a9 41 1e d9 d8 36 25 2b 7b 1e 70 c3 37 da 8d a0 96 a3 a3 8c bb 80 f2 41 ab 1a c7 28 a3 d2 f1 a7 57 54 dc 13 41 bd 6b a9 27 ea b1 f6 2b 71 90 d7 81 51 da Data Ascii: c5uk)OU,]l6W-SjO}u;j[bQ_.k=^oIOs=PXGZ!i\lu:#h1q}"DoC]v[SgXHlU,9MCwq4,9(I\|A6%+{p7A(WTAk'+qQ
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 64 77 6a fa 00 d6 99 ec 0e af a1 d3 dd ac 18 08 a5 8f 55 5e 55 31 fb 3c 28 cb f6 fc 2b e9 61 99 e5 33 cb 32 4c 59 9a eb 34 a9 31 36 25 62 a9 1f b2 7a e1 f5 ac ed 03 0c de 5c 4e 33 b0 78 d3 91 3e 5c 3c 43 18 95 8c c7 0b 7f 3c 5f 32 8f 16 99 0a 2d 2a c2 36 7a fa 5f 12 8c f8 88 b0 7f ec 5b 4a 13 bc 2a 31 9a 04 89 03 ea 64 15 09 64 dd 1d ab b0 5a ca 9b 4d 8d fd 3f 58 af d3 eb be 6c 11 66 f5 9a ed 87 9e 6a 68 c7 dc 2e 2a 45 19 b9 1b b2 4f 76 af 44 76 ef 47 11 57 13 6d 48 84 58 8c d5 f9 e1 a0 30 b9 57 86 65 c8 78 e6 99 7b 59 ae df 6b 55 aa ec 0f 03 11 c9 0c cb 40 0b 52 86 09 1c 1f 92 69 ac 97 5b fb 8d 3e 9d 2e df 1b c2 d9 6e b4 b5 b5 3b 46 5e 5d 22 45 88 00 11 5a 0f 82 36 19 8c 18 0c 76 2c a3 62 e0 be 5e aa 0d 6a ab 5d 44 08 fb ca e1 7e a9 2d 1c 12 60 d9 0f b3 Data Ascii: dwjU^U1<(+a32LY416%bz\N3x>\<C<_2-6z_[J1ddZM?Xlfjh.*EOvDvGWmHX0Wex{YkU@Ri[>.n;F^]"EZ6v,b^j]D~-`
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 99 3c df c8 13 1c 61 ef c6 61 09 c7 2c 6c 72 f7 21 b0 d7 37 51 41 bb 5e 87 45 a9 dc 59 ff 00 eb 96 cd ca 12 b1 67 e4 d5 a0 8c 71 7e ad 33 16 97 50 ab 42 2b 88 12 9c a4 48 64 a3 73 22 65 29 8f 05 71 c6 b1 a8 27 9e 93 ea 7c 22 ed 8b 28 69 3b 1e af d2 a8 fe 9c 7b 29 d8 a9 d3 96 94 3d 5c 7d 31 2d 77 46 53 47 8e a1 ab bf ab df 50 83 6c d3 b6 fc b9 a5 6d 5a 56 ae 86 99 dd d8 fd c3 71 be ea c8 38 e5 d6 6d 4b 96 e6 09 7c ea b8 83 a3 39 27 6d e9 2a cd 60 b3 48 51 77 61 d9 e4 9e ad 63 79 64 c5 95 b6 e8 df 8a 4b f7 21 ec 70 df 22 75 45 06 76 2d b7 b1 f6 19 6f 56 15 50 91 17 51 57 20 37 b5 4b f0 6b 0c 18 41 e7 51 ea 9a 06 eb 61 ab 75 d7 e9 da c2 1b 07 ea 5b aa 0c ef 5f 77 c3 1b 96 c5 b5 7e a6 36 f3 5d 75 bf 61 6e 04 a3 da 77 3b cb c6 35 5d ef 6d de 2b f7 5d 6f 2f 6d Data Ascii: <aa,lr!7QA^EYgq~3PB+Hds"e)q'\|"(i;{)=\}1-wFSGPlmZVq8mK\|9'm*`HQwacydK!p"uEv-oVPQW 7KkAQau[_w~6]uanw;5]m+]o/m
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 38 74 8d 4c 19 ad d4 dd 77 2b e1 dc 61 39 6f 4c 7b 8d ff 00 6c 08 86 96 03 c8 57 a9 bc 64 f8 79 93 a2 f8 05 33 11 f7 89 ae b8 4e 4e 5a 30 a4 50 03 a8 5b 1f 3f 2c 72 f2 79 b5 fb 8f 7e 98 cc f0 28 1f dc 3a 0f ca bf bf e7 8c d7 0b cd 43 13 2d 07 8c ec 6b 7a c4 f0 ac 30 24 77 f7 07 7e ff 00 43 1a 38 26 f0 d6 7b e2 39 0d 81 d4 1c 4a 9c b6 bf 3d ff 00 4c 42 35 0f 76 ec 7f 6c 2a d3 06 06 88 ef ff 00 5d 08 f8 e2 0c c2 6a e5 b7 81 bb 37 dd 3f db 19 6d ef e2 07 e0 6f 1c 30 29 cb ed fe eb 6f 8f f2 bf 0c 66 e1 32 ab a2 cc f0 b1 23 4b a5 58 22 b7 de c1 f8 10 41 04 e3 2b 94 68 b9 60 bb 4b 25 f8 e5 d2 14 30 ed 6a bb 5e dd 46 33 99 9c b6 5d 39 99 89 44 69 ee d9 f7 6c 8d ac f4 1d 3b e3 31 9b d7 14 8a 00 a7 8c d7 ad d6 e0 f7 f9 63 88 6a f0 a9 ba f7 81 ed 64 51 af cb 17 a4 Data Ascii: 8tLw+a9oL{lWdy3NNZ0P[?,ry~(:C-kz0$w~C8&{9J=LB5vl*]j7?mo0)of2#KX"A+h`K%0j^F3]9Dil;1cjdQ
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: 91 bf f9 19 85 56 98 93 5d 73 1a 66 9a cf 73 aa fc b0 be d5 2c ec 65 ce f1 18 c4 4b 65 61 82 c9 73 fd 4e ed 67 b7 45 5c 7b 57 c7 3f c6 4a 44 80 ae 5b 2f a8 c7 b9 b2 e4 51 7f c3 a7 5e f8 89 a6 57 45 76 e6 44 cc 10 6b 26 d0 92 2a 8f fb 6e 85 7a e2 38 da 20 af a8 a1 1a 58 10 7a 30 aa 37 f1 f2 c6 4f 37 99 ce f0 b9 ce 67 35 13 f2 d1 fd d3 a6 45 d0 2e e5 4d af 5d 78 5b 4e e7 ae 23 8b 2b 9e c8 4f 1c 68 01 85 43 99 1a 00 ac 5c 8d 56 25 e6 4a 5a cf 55 b0 68 a9 d3 81 63 b0 f9 e3 59 18 a9 3c 8e 34 4b 44 f9 79 59 3f 96 23 cb fd 5b 86 c2 e1 a8 1d 0e 5b 41 57 e6 de e1 75 2d 95 41 ef 30 b0 4f 4c 47 ed 86 63 27 04 f9 2c a2 20 46 32 dc 8c a7 5b 16 00 12 2e c0 1d 2b 6c 70 9c 87 14 e3 13 a2 e5 32 b9 8c ec cc 40 d3 04 4d 26 9f ea 62 a2 91 6c d1 66 a5 1e 78 e0 f9 64 f6 0b 2b Data Ascii: V]sfs,eKeasNgE\{W?JD[/Q^WEvDk&*nz8 Xz07O7g5E.M]x[N#+OhC\V%JZUhcY<4KDyY?#[[AWu-A0OLGc', F2[.+lp2@M&blfxd+
2024-04-26 18:33:11 UTC	1369	IN	Data Raw: e2 d3 8c ae 56 5f ac a4 6a 92 f2 e2 cc 48 e3 99 cc 3a 50 23 85 26 47 d8 86 23 50 a6 27 70 2b 06 37 1b 91 b7 a1 bc 70 9e 21 38 cc 64 72 ad 2a 47 96 13 86 7a 54 8f 51 16 54 ca e2 8b 80 4e da 9a 86 d8 ce c5 16 5a 2f ac 93 24 d0 a6 ee 63 2a de 0d 42 d9 49 61 ab a9 a1 b5 d7 51 8c c3 46 f3 ca f1 6a d0 d2 3b 2e b0 03 69 2c 48 ba 24 5e e7 6b c7 b2 6b 96 78 b3 ab 22 a2 4a 0c 61 27 76 0b e0 6e b1 51 65 15 69 ab 6d bc eb 13 5e 87 fa ac e0 33 c7 27 21 e2 35 7a 18 53 2b 74 6a 61 5b 6e 41 c7 10 91 ca cd 98 95 8b 49 e1 32 48 dd 6c 8a 8d 7b 51 da cd 0c 64 d1 97 5c d2 1f 51 f1 c4 8c 5d 83 57 7e 98 6d 57 e2 f9 62 fd 31 ab 0b 88 76 1f 1f e7 ef 88 61 a1 a9 ba d5 fa 0f 4f 53 e9 b6 1a 62 09 01 57 e7 be 22 7e 63 69 21 43 1f 74 8e e7 c8 8e 94 71 22 81 a1 c6 da 81 35 eb b5 e1 b3 Data Ascii: V_jH:P#&G#P'p+7p!8drGzTQTNZ/$cBIaQFj;.i,H$^kkx"Ja'vnQeim^3'!5zS+tja[nAI2Hl{Qd\Q]W~mWb1vaOSbW"~ci!Ctq"5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50334	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	597	OUT	GET /media/New%20navigation_Rebrand%203.0/brent%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:11 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/png Content-Length: 1147 Connection: close Age: 19253 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=2314 ETag: "9874e3fbea6efed1776c566dcf48a405" Last-Modified: Tue, 30 Aug 2022 08:01:15 GMT Via: 1.1 903a82370ff225ae16b374d8f5cbc5a6.cloudfront.net (CloudFront) X-Amz-Cf-Id: cJrwpb2tEDLjDYYnucmsjYq9s36vvkBfmnSV-b9kj5QHkgVS0B-Szg== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: hHgxTPsejbiAK2.7KTwCjtjaVafz5uTN CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:11 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8e87c353710-MIA
2024-04-26 18:33:11 UTC	570	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 f9 50 4c 54 45 00 00 00 10 10 10 00 10 10 08 10 08 05 15 05 0b 10 0b 05 10 05 08 14 08 04 14 08 0a 13 0a 06 13 0a 03 13 0a 08 13 0b 08 13 08 05 13 0b 05 13 08 07 12 09 07 14 09 09 12 09 07 12 09 05 12 09 08 14 0a 06 12 0a 08 14 0a 08 14 08 06 12 0a 06 12 08 05 14 09 07 12 09 07 13 0b 07 13 09 07 13 09 07 13 0a 07 13 09 08 14 09 07 14 09 07 13 09 07 14 0a 06 12 09 07 13 09 07 12 09 07 13 09 06 13 09 06 12 09 ff ff ff f0 f0 f0 ef f0 f0 ef f0 ef e0 e2 e0 e0 e1 e0 d1 d3 d1 d0 d3 d0 d1 d2 d1 d0 d2 d0 c1 c4 c1 c1 c3 c1 b2 b5 b2 b1 b5 b2 a2 a7 a3 a2 a6 a3 a2 a6 a2 93 98 Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTE
2024-04-26 18:33:11 UTC	577	IN	Data Raw: 20 c9 2b 3d 98 bc d1 bc b0 80 57 a4 b9 39 4b 1d 48 dd cc 03 12 8f 24 a0 b8 56 07 32 8f f4 02 8a 31 2f 39 23 24 70 48 a1 0a 14 03 0e 25 bf 80 2a cd d8 50 75 79 53 cb 7c e3 56 f4 66 b8 e5 1d 6e 60 de ad 02 d5 6a 16 5e 71 3c 69 d8 0d aa bf cb ea 65 e0 f0 5a 77 a4 eb 2d 8f d8 d2 1c 09 e0 37 27 fa f0 7b 54 44 6c 69 e3 45 e8 8d ef f0 9a 37 89 f9 48 65 20 e6 81 f8 08 0d b9 37 71 78 d3 4d 54 54 89 2a 88 20 7d 87 5d cc f9 fc a9 c5 0e 7b de 3a 2d 80 ea 3d 5d 22 da 70 ba 3e 29 7f c8 1e 10 dc f2 5c 53 42 25 48 40 cf 65 ee 43 f2 1d 66 c6 5e ec 33 16 04 83 eb b0 bd 7f dc c4 9c 8c 7d c6 04 bd 59 84 cb ec b7 f9 1e 73 ec 4a 64 0a 1a b3 0b 3f 3c f1 c9 32 08 d9 82 7e 71 6f 71 a0 81 29 48 40 cb e7 01 c6 1d 66 ee 69 83 cc ad 75 39 e8 33 77 7c f6 f4 41 1f e9 1d b4 c2 db 69 f9 Data Ascii: +=W9KH$V21/9#$pH%PuyS\|Vfn`j^q<ieZw-7'{TDliE7He 7qxMTT }]{:-=]"p>)\SB%H@eCf^3}YsJd?<2~qoq)H@fiu93w\|Ai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50335	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	598	OUT	GET /media/New%20navigation_Rebrand%203.0/natgas%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:11 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/png Content-Length: 1080 Connection: close Age: 19253 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=2126 ETag: "c48387db0b666ae8dee293727fb45d51" Last-Modified: Tue, 30 Aug 2022 08:01:16 GMT Via: 1.1 608f9d003f77a43bcd9df621763561a6.cloudfront.net (CloudFront) X-Amz-Cf-Id: 7nQ4ZTmpmWiRgB9TLzthIoTpCU0orIXQWHJti4Ji22Jr1v6cLoqMIg== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: wd_UNpB4m.gH83FD6oZQe4XIl2RXbvN3 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:11 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8e87c966dbf-MIA
2024-04-26 18:33:11 UTC	570	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 e1 50 4c 54 45 00 00 00 cf 40 50 cf 40 40 bf 40 50 c7 40 50 c5 40 4a ca 3a 50 c5 3a 50 c7 40 4c c3 40 4c c7 3c 4c c3 3c 4c c6 40 4d c9 3d 4d c6 3d 4d c7 3d 4d c5 3d 4d c8 3e 4c c6 3d 4b c8 3b 4d c6 3b 4b c9 3e 4c c7 3e 4c c7 3e 4c c5 3e 4c c7 3c 4c c5 3c 4c c8 3e 4d c6 3e 4d c6 3e 4c c6 3c 4c c8 3d 4c c6 3d 4d c6 3d 4b c7 3d 4c c8 3e 4c c6 3e 4c c6 3e 4b c7 3d 4b c7 3d 4c c6 3d 4c ff ff ff fc f3 f4 fb f3 f4 fb f2 f4 f8 e7 e9 f8 e7 e8 f8 e6 e9 f8 e6 e8 f5 db de f5 db dd f4 db dd f5 da dd f4 da dd f1 ce d2 ee c2 c7 ed c2 c7 ea b6 bc e7 aa b0 e6 aa b1 e6 aa b0 e3 9e Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTE@P@@@P@P@J:P:P@L@L<L<L@M=M=M=M=M>L=K;M;K>L>L>L>L<L<L>M>M>L<L=L=M=K=L>L>L>K=K=L=L
2024-04-26 18:33:11 UTC	510	IN	Data Raw: a4 cd ca 5e b1 21 8c ed 96 73 94 b0 64 20 73 69 ff b2 28 b6 f4 1c 32 0f f6 1f b3 e2 e9 8d 21 33 da 09 4d a0 10 6f 8e 1a 65 92 d9 9f d0 d8 73 c9 e4 f9 70 65 d3 b3 c5 9a 21 4f 48 cd a6 1a f2 84 b4 ba 3d 51 0d 39 86 6b e1 31 24 f6 29 84 36 f8 8e ef 9b 2f 44 a5 90 22 48 cc ed 16 d7 da 13 79 33 45 ca 59 0f 6c 86 25 30 96 d7 c0 07 3a 83 c0 d4 66 99 02 03 b9 31 0d 19 3d 98 e3 1a 73 65 33 19 2a ae d8 60 6c 37 7c fb aa cd 0a 15 57 2c 4d bd 53 67 a1 c2 60 03 a0 9b 51 4a ab 08 8d 32 cf 39 7b f2 f8 92 29 36 84 55 57 ca a6 57 2d 63 61 e6 0c 6a cb f2 13 bd d7 4b d6 c3 9a 85 75 f0 cb 32 66 47 e4 21 f7 d0 4d d1 21 45 ec d0 4e 3d 43 de 29 0d d9 a1 7d 84 3c c3 7c 8a 3b eb b8 60 ef ed 7a 82 1c 7d cf 90 0b 27 96 8d 5f b5 bb 1c b7 d8 b1 ba 72 4a ec aa e5 0e 89 2d f4 9d 26 74 Data Ascii: ^!sd si(2!3Moespe!OH=Q9k1$)6/D"Hy3EYl%0:f1=se3*`l7\|W,MSg`QJ29{)6UWW-cajKu2fG!M!EN=C)}<\|;`z}'_rJ-&t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50339	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	697	OUT	GET /adobe?uid=06291327801249806183443003251739176557&_rand=1714156386906 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:12 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:11 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50340	3.225.218.10	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	758	OUT	GET /ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBDzzK2YCEM-qQq_ZRFSzk-4Ew6R4gE4FEgEBAQFELWY1ZtxI0iMA_eMAAA&S=AQAAAhTZVDy-_SuM5Mmx-sV1a4k; IDSYNC=19b8~2i36
2024-04-26 18:33:12 UTC	755	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19b8~2i36:19cl~2i36";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Sat, 26-Apr-2025 18:33:11 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ps.eyeota.net/match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-EXC.qSRE2pVFjithS3QYY.qSoH4wk.0nJAA-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBDzzK2YCEM-qQq_ZRFSzk-4Ew6R4gE4FEgEBAQFELWY1ZtxI0iMA_eMAAA&S=AQAAAhTZVDy-_SuM5Mmx-sV1a4k; Expires=Sun, 27 Apr 2025 00:33:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50341	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	670	OUT	GET /nlsn?uid=a19a850734a267b9c36559160770466b HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:12 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:11 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50342	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	698	OUT	GET /xxrz/250x400/793/6c/f6/6cf634239aa04e254cc4f6e675b4ad8a/6cf634239aa04e254cc4f6e675b4ad8a.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:12 UTC	717	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:11 GMT Content-Type: image/jpeg Content-Length: 82156 Connection: close Last-Modified: Wed, 24 Apr 2024 14:37:35 GMT Vary: Accept-Encoding ETag: W/"6629192f-1247e" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5342 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bkhikrNuX1vfwYzsulgjedbZiGa4wJbLxTBsaneDrJPs0Z6XeKhnsl47QRgTV5o63IaoqPO0RQk8zcy%2BcFwiFDRwXRa8Mvr2RrOxpCH9hb95nEtJbBACCDM7uorcwOuGaqnE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8e9ae8fa534-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:12 UTC	652	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 89 79 85 5b a6 0c b8 83 3c f1 7d 77 13 9f 79 85 6e 73 b5 b8 6e b1 ec 89 30 09 f1 15 d4 95 56 d5 99 d7 d0 9e d5 57 2b 4b e7 6a 48 61 00 a4 07 71 17 c4 5a dc d0 ee ed e8 24 9a f1 fd a6 a2 f2 da 03 57 a5 73 36 b9 99 52 34 fd 7e 7e b2 43 9f f4 9a d0 dc e0 7c 04 fc 6c e2 9b 9f 35 89 79 d9 4c ac 8a 5f e5 46 83 e5 b4 2b 28 26 72 b0 90 87 b0 fc f1 9d 2c 59 45 5d e6 40 f5 1f 55 20 ac 24 fa 47 10 6b bc cf 7a be db ad af 21 cb a9 b2 c3 1e 87 13 2d c0 82 83 3b ca 12 bd dd 1e 92 79 44 30 20 a9 85 ac 59 e9 41 40 fe 6a 35 61 d3 b4 34 19 02 35 16 a7 13 7f 44 d1 e3 22 20 21 e5 c4 aa ec d7 24 71 8b c4 0a 0c 18 dc 98 3b d1 00 5a 55 19 f9 2e b1 bf dc b6 32 32 04 4d da ef cb 06 ab 90 aa 67 68 74 9d 6b 27 9d 9a 0d 08 8f ed 50 0e e1 77 b6 78 bc f7 e6 b2 5f 20 ec 88 2f 9a a6 29 Data Ascii: y[<}wynsn0VW+KjHaqZ$Ws6R4~~C\|l5yL_F+(&r,YE]@U $Gkz!-;yD0 YA@j5a45D" !$q;ZU.22Mghtk'Pwx_ /)
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: be 7c 9e 25 ed 41 42 3b 0a e3 1b 88 0b 13 2a 41 da df c4 7c 7d 68 2c 7a f8 f9 b3 bc e8 c6 d7 3a 9e 5a 19 1e bc 55 ec 59 e1 fb 90 18 70 d1 fa 4e 37 97 34 ee 9d 8a 8f 99 1e 22 82 21 16 2c 57 d7 33 13 df 2c 5f 57 91 e1 2a 27 cf a6 5e 36 d5 f0 f1 ae 55 e0 89 56 cb ea 79 68 89 ad 18 92 5e fc 6c 95 75 25 c4 26 c9 bc 33 26 fa e8 97 22 51 25 6b 9c be 46 0d b9 83 b6 5d dc af 7c f1 ed b4 e9 22 41 22 ef 37 9e cc 38 aa 2b cb 91 5b 71 ab 74 41 57 3d f3 5f a4 64 90 3b 59 19 5c 7f 33 b5 62 43 bf b1 af 93 de ec c7 7d c9 61 cb ed c9 47 d3 57 9a 66 e3 35 7c c0 2e 9d 26 bb e4 ed f9 66 b5 23 0b 70 28 a7 06 9a 2a 14 66 23 19 08 41 5f 50 b3 dd c7 2e 99 f3 8c a9 75 c6 d5 3c b0 29 33 6f 8d d3 3a dd 61 91 7e 24 f6 f0 5c 3f b5 b8 31 9d b9 1c 2e e5 c4 18 95 55 56 9f 78 c0 87 7b a9 Data Ascii: \|%AB;A\|}h,z:ZUYpN74"!,W3,_W'^6UVyh^lu%&3&"Q%kF]\|"A"78+[qtAW=_d;Y\3bC}aGWf5\|.&f#p(*f#A_P.u<)3o:a~$\?1.UVx{
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: db 53 c7 c9 bb 2f 51 27 1b d8 5a 66 a9 5a fb d2 e5 cf 6b ef 05 66 67 72 45 c9 3f 8e 42 93 e2 f8 66 91 8d 6b de ee 3b e0 7a f4 56 55 ac 6f 3c 7f 0e fe d4 fd b5 6c 90 7f ca ff 00 b7 78 f4 f6 42 0c 43 ed 96 52 b2 50 1f 7b 7d fb 39 ab 57 13 d3 7a 94 6a 74 ae db 8f e8 dd c3 dd fb 11 bd f3 65 91 4a eb eb 9c 90 34 e3 d6 d3 d0 ba 2b 8c 49 85 43 7b 46 65 35 9a b5 7c f5 de 43 f5 4d b6 b7 34 46 76 e3 ae aa e3 99 69 2a e6 0e 75 44 63 1d 2c 70 36 63 e0 6f 3f 24 c7 44 0d 64 f7 36 b4 95 42 d1 d4 f3 fb fa 94 54 00 8b b0 d5 c9 aa bb 20 ff 00 f3 49 66 9b 91 cc c8 e4 f7 78 97 05 d8 79 7e bf ae b2 f5 3b ab f6 cb de dd 8f 34 85 f6 d7 66 dc 4b 45 dd 1d 8c 3f 3a ef d4 0a da ae fe 98 aa bd 7d 6e 6e 3f 81 42 8a 26 d5 38 46 0d d8 7d 7a eb d9 ff 00 6b b4 e8 9d 7f 41 fa 63 3b d9 14 Data Ascii: S/Q'ZfZkfgrE?Bfk;zVUo<lxBCRP{}9WzjteJ4+IC{Fe5\|CM4Fvi*uDc,p6co?$Dd6BT Ifxy~;4fKE?:}nn?B&8F}zkAc;
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 70 e0 13 25 25 6a 3f 70 34 e2 5c 81 2d 4c 82 1f 75 7d f9 7a 6c d4 b0 25 ba d8 d4 e6 23 44 e4 6c 5f 33 46 ae 15 af 57 32 25 54 74 ee f2 bc 6a f0 59 9a 8e ea db 19 ec fa f7 89 de 9d 86 f6 c9 df 3d 84 92 4b de bd 86 8a fe fe ec 86 f0 c5 5b 12 a0 6f c5 cb 3b 34 a6 ab 93 47 66 5b a9 89 7b 28 27 73 5b c5 82 29 52 55 46 4d 57 1c 0f 84 2f ec 91 52 08 23 0c 69 0e 7d f7 b5 66 16 49 27 7a da c0 fd 9c 31 ba 09 a4 af ad b2 a6 28 3f b3 b1 84 5f ea 41 bc 35 61 58 9d ed f1 37 b7 ca f8 5f 2a d5 4e 35 7f bf 4c 96 46 95 98 f3 c1 d3 d9 c7 0a d9 52 78 51 b1 36 24 96 46 81 33 da 34 7e 46 fc 4d 41 24 95 9c cb d2 dc eb 35 f4 bf 8b 6c 8e f8 2b 11 1f 29 10 ac 53 ce 47 da d2 35 ef 7c 91 46 3a 91 45 9f 86 c6 7b 82 11 d6 5f 70 9f 60 e0 7e e2 0c 46 a1 e4 08 39 55 97 54 1a 00 62 0b 45 Data Ascii: p%%j?p4\-Lu}zl%#Dl_3FW2%TtjY=K[o;4Gf[{('s[)RUFMW/R#i}fI'z1(?_A5aX7_*N5LFRxQ6$F34~FMA$5l+)SG5\|F:E{_p`~F9UTbE
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 63 c8 ac 1c 1e 76 4b ef f1 b7 f9 18 5f da ba 48 03 63 1b ea 61 1a 9d 7d 9b b5 12 92 db 21 24 1a 0a b1 ab 15 e3 c1 ba ea f3 a6 3f b6 ba f6 65 d9 f6 25 4d a5 75 05 db 60 96 2d 35 6c 50 69 33 f5 d6 d1 56 d1 dc 25 d5 d9 20 60 b3 11 f7 59 10 0f 4b df 04 58 96 41 6c a4 a1 d6 55 0f 6b 7e b4 0e 1a 1c cd 69 e7 88 4a fd d1 f3 56 fd bc 50 c0 d9 39 97 eb b3 09 cd 27 9f af aa 0d 0a d9 6a 66 21 24 e7 a7 48 12 6a dd 36 96 0c 9d b6 d7 2b 36 87 33 d4 39 39 33 79 aa ed e4 77 1b cf 51 85 fc d8 80 02 22 c8 ec 75 6c 14 f5 7d cf da 53 67 ee 2b be 4d 55 a6 4b a4 6e ec 6c 3b 6f 17 8d c3 83 d4 ba fc a6 6a 1a de cb eb c8 86 da f6 dd 05 ad 16 23 4b 9a 18 9f dd 7e ae 46 8f db 5d 42 89 9e d5 e2 b4 69 dc dd 94 ea f9 e1 b8 18 d9 d6 a6 44 a3 a4 b3 75 6d 39 35 f2 82 54 06 b5 52 84 17 d9 Data Ascii: cvK_Hca}!$?e%Mu`-5lPi3V% `YKXAlUk~iJVP9'jf!$Hj6+63993ywQ"ul}Sg+MUKnl;oj#K~F]BiDum95TR
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: f4 af 3c d2 68 bc 7d 7c fd 7c 71 dc f5 21 a2 0a ab 0e e9 9c f7 2f 9e 46 c8 df c9 46 9e 09 3d a8 8c 7c ad 44 62 ff 00 9c 8c 45 73 87 58 65 86 3f 6c 39 41 e8 56 2c e9 50 ca 4d fd d2 66 2b 27 3d 74 f6 9a 4b c7 59 17 48 24 4d 5b 17 32 c0 ef b7 91 1d 80 d2 5a 5b 1f 52 b5 90 02 7a 84 5f 3b a6 b4 41 22 f4 d8 4b 5f a2 ff 00 a2 e2 92 9e fc 4b af 4d 9d 6e 74 b6 fe 99 46 1d f6 fd 27 6f 5c 81 f5 3e b8 c1 ad f0 fa 0a 57 b8 47 46 ab 1b 98 a1 49 01 03 a0 af f3 1c 5e 64 ac f7 b6 2c fa b8 71 f6 97 b6 f7 f6 e1 d8 4b 5d 4c d8 de 41 25 96 b1 70 36 a0 a9 24 4c 94 2c 0e 59 d3 10 15 bf b2 70 2c 5d 22 f6 9b 03 90 1e a5 d0 b2 8b b2 63 7f bb 89 f5 f3 f4 f3 f4 5e 48 df 28 70 de f4 3e 9e 22 0a 38 2c ec 13 ec 4b cc c8 cd 30 18 32 35 ec 8b ac ff 00 19 8d 76 44 4a 0d c3 71 61 d1 e4 4f Data Ascii: <h}\|\|q!/FF=\|DbEsXe?l9AV,PMf+'=tKYH$M[2Z[Rz_;A"K_KMntF'o\>WGFI^d,qK]LA%p6$L,Yp,]"c^H(p>"8,K025vDJqaO
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 90 3b e3 f1 26 65 30 2f 47 45 51 51 18 d8 b4 51 97 50 7e ad c7 43 e6 30 3c 3b 9d 15 df 2b ac bf ac 4d 84 f0 ee 76 0f fe d9 58 2f ff 00 49 bf 96 32 2c 97 39 4c 8a 96 a1 e3 48 d8 44 bc 58 d9 18 ca 81 00 16 65 21 46 a2 9a 5c aa b3 10 0e e2 f8 a3 fc 6d 4b 4d 19 8e 9e 92 a1 74 dc 15 92 44 7b 90 3d e5 20 ef 8a fc cb 37 69 5b 5c f5 30 1d 4e a6 38 d8 c6 80 ab 5a cb 6b 5e d6 b5 ce f8 96 2c d5 e8 05 74 92 d4 bd 23 4e 60 bb 48 e4 6a 0b be c4 f4 dc af eb 63 c6 59 56 5d 2e 41 51 57 25 24 06 a5 59 38 53 2a 22 4e 24 66 0a 09 9b 62 c9 6b ea 56 36 3b 77 df 12 65 ac ea 3d e7 ec a0 0e 9f cf 03 2b 9c d9 b8 6c 6d 61 63 b3 7c 77 ed b6 3f 06 5e 1c 15 39 93 66 b2 ab 35 3e 5c 2f 1a b8 b8 35 92 7b bd 47 bd 12 5d cf d5 62 b8 eb 8d 58 f1 3d 5f 1e a2 2a 08 cf 2c 67 54 b6 ff 00 98 c3 Data Ascii: ;&e0/GEQQQP~C0<;+MvX/I2,9LHDXe!F\mKMtD{= 7i[\0N8Zk^,t#N`HjcYV].AQW%$Y8S"N$fbkV6;we=+lmac\|w?^9f5>\/5{G]bX=_,gT
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 33 42 d2 46 93 70 25 49 53 5a f4 74 65 23 bf a6 ff 00 66 29 73 5a 6a 81 62 78 32 7d 49 08 03 ec 6e 87 01 95 80 65 21 81 dc 10 6e 2d f1 1b 7c b3 17 00 14 5d 46 fe 76 b7 af 43 88 a4 d6 07 d6 fa 5e 9f cf a7 5c 57 51 c8 21 0b 32 3c 42 61 f3 2d 20 b2 49 e4 c0 86 bd bf 66 32 ca 8a 9a 79 6a 28 55 0b eb 0f a9 34 ea 00 aa f3 11 fa cb d3 cf 6f 3c 78 6e ba 96 38 78 7e df 0d 35 bd f8 9a 9d 78 da 05 b9 0c ef ea 07 c3 19 9f 89 62 81 a5 82 8c a1 57 61 71 18 03 8c d6 b3 5f c9 7a 06 3d 09 1b 5f 7c 7b 0b 53 b3 37 bc 84 92 3d d0 c1 ae 08 b1 f7 9a f8 4a 8a a5 a8 82 a5 c9 12 d3 b4 5c 23 60 74 18 98 32 6d f1 17 37 ea 7b e2 a7 c4 55 19 84 d4 b5 31 e5 9c 3a e8 c1 59 a5 86 66 65 ab a6 f7 f8 52 43 6b 80 b6 e4 2a f7 5d f1 9d d5 ad 5d 73 d4 70 cc 46 d6 70 de f3 bd c9 72 dc c6 d6 2d Data Ascii: 3BFp%ISZte#f)sZjbx2}Ine!n-\|]FvC^\WQ!2<Ba- If2yj(U4o<xn8x~5xbWaq_z=_\|{S7=J\#`t2m7{U1:YfeRCk*]]spFpr-
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 61 a7 6e 9d ed 6b 9f 4f e3 8c 99 bc 39 07 b5 4b 9c 42 8e c1 81 8d 99 a6 22 45 b6 93 18 8a 32 14 ba 91 7b 9e ba bd 31 3e 6d e1 03 97 c9 2d 15 15 22 b0 52 4c 53 41 27 18 bd f9 15 4a b0 95 83 7d 65 7b 2d f9 b6 c7 86 4d 2d 4e 6c cf 53 49 17 02 6a 19 64 10 30 92 58 90 99 a3 8e 35 4d 7a cd cd fe 97 bb aa e3 7c 78 a6 b7 2e a4 cc 4d 26 58 9c 1d 2b c2 a9 e1 86 5f 67 a9 0d a1 ca 96 5b 93 a6 c1 b7 1d fc f1 3b d0 97 11 e5 75 53 b0 45 1c 51 c2 91 d7 57 28 e2 03 21 04 17 b1 24 0d b6 da c3 6f 96 97 2c af ad a9 96 2c b6 92 6a b2 8c ed 2a c0 ba c8 0e d7 bb 22 f3 5a e6 d7 e9 f0 be 25 c8 f3 8a 5e 14 75 34 35 31 c9 28 bf ce 46 e1 47 43 ef 58 93 6d af e4 71 25 0e 77 5b 1f b3 45 4b 53 3c 74 ef f3 8b 18 e2 69 7f a3 ab ba f9 8d 40 5c 7c 30 f4 d5 74 d5 09 4b 3d 3c b0 d4 36 90 21 Data Ascii: ankO9KB"E2{1>m-"RLSA'J}e{-M-NlSIjd0X5Mz\|x.M&X+_g[;uSEQW(!$o,,j*"Z%^u451(FGCXmq%w[EKS<ti@\\|0tK=<6!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50343	18.212.140.196	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	739	OUT	GET /v1/s/sharethis?puid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdprcs=?&rdurl=http%3A%2F%2Fsync.sharethis.com%2Fcarbon%3Fuid%3D%7B%7Bccuid%7D%7D%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: eus-api.ccgateway.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:12 UTC	83	IN	HTTP/1.1 204 No Content date: Fri, 26 Apr 2024 18:33:12 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50345	18.211.29.223	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:11 UTC	1120	OUT	GET /match?dsp_callback=1&publisher_dsp_id=440&external_user_id=662bf34d3757330001701a4b&r=https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fim%2F%7BPUB_USER_ID%7D%3Fch%3D662bf363bc6e410001f8e0c2%26chc%3Dst%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=d5f646a1-3a90-4585-81a0-693ca4a06fc0; tuuid_lu=1714156367; um=!79,904POBYiLAQlUPJsP6vafPfFb1kBrYHQLO8hlEEWyZPSjGgDVYJCgzxclqFanMz7gdIAGC5n77WmETDX,1721932373!440,pDiXtfEkDgV78C2sVzpZkvblsa1.Aok.SLLzOl1-WWYSi-e6nfc,1721932367; umeh=!79,0,1776364373,-1!440,0,1776364367,-1
2024-04-26 18:33:12 UTC	826	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: um=!79,904POBYiLAQlUPJsP6vafPfFb1kBrYHQLO8hlEEWyZPSjGgDVYJCgzxclqFanMz7gdIAGC5n77WmETDX,1721932373!440,pDiXtQ.4sEaJwAtbQLxBtJ6JadDAZhWnd5fCzY-00TGhrtRoLqA,1721932392; Expires=Thu, 25 Jul 2024 18:33:12 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: umeh=!79,0,1776364373,-1!440,0,1776364392,-1; Expires=Thu, 25 Jul 2024 18:33:12 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://map.go.affec.tv/map/im/d5f646a1-3a90-4585-81a0-693ca4a06fc0?ch=662bf363bc6e410001f8e0c2&chc=st&redirect_url=&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50347	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	597	OUT	GET /media/New%20navigation_Rebrand%203.0/wheat%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:12 UTC	800	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/png Content-Length: 1182 Connection: close Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=2385 ETag: "3a1fac4c518de242143d9dedfb584f57" Last-Modified: Tue, 30 Aug 2022 08:01:18 GMT Via: 1.1 dcaec0b05596b42ef5dab9e145ac961e.cloudfront.net (CloudFront) X-Amz-Cf-Id: Hn-VOGl2m23UExN-6CtjGh6d9xubJDGCHtrhyoMGpP746YeQwmUddA== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Miss from cloudfront x-amz-version-id: im_pbjtDDNV1131B0fy.Pecn6.NAjUEi CF-Cache-Status: HIT Age: 19254 Expires: Sat, 27 Apr 2024 04:33:12 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8ec3cc48752-MIA
2024-04-26 18:33:12 UTC	569	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 ea 50 4c 54 45 00 00 00 ef cf 80 df cf 80 ef bf 80 ef c7 80 e7 c7 80 ea ca 80 ea c5 80 eb c7 80 eb c3 80 ec c9 80 ec c6 80 ec c7 82 ec c7 80 ec c5 80 ef c8 83 ed c8 80 ed c6 82 ed c6 80 ea c6 80 ef c9 82 ef c7 82 eb c7 80 eb c5 80 ef c8 82 ed c6 82 ec c6 81 ec c6 80 ee c8 82 ec c6 81 ec c6 80 ee c7 81 ec c7 80 ee c8 81 ee c6 81 ed c6 81 ed c6 80 ee c7 81 ed c7 81 ed c7 80 ed c7 81 ed c6 81 ff ff ff fe fc f7 fe fb f8 fe fb f7 fd f8 ef fc f5 e7 fc f4 e7 fb f1 df fa ee d7 fa ed d8 f9 ed d8 f9 ea d0 f9 ea cf f8 ea d0 f8 e7 c8 f8 e7 c7 f7 e7 c8 f7 e6 c8 f6 e3 c0 f5 e0 Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTE
2024-04-26 18:33:12 UTC	613	IN	Data Raw: a6 43 e7 0b 4b e8 0d e6 ee 65 61 d2 45 cd 96 90 2c 27 c3 dc 62 8a 25 0e 1d 3b 34 52 ca 29 4f e9 0d 1a c9 39 cd d9 0c cb 75 81 eb 39 2e e0 5d bf 88 a8 ea 89 56 a3 d9 7d 3f 15 e9 84 94 6a 03 61 4d 56 66 33 a0 4b d3 a2 46 b5 36 6b 65 93 22 89 98 72 0f f9 ff 41 69 6d e6 06 f1 2c c4 93 cb 03 3c d2 a8 6c 6e 4d 34 b9 a3 94 ce c4 93 4b f2 73 09 52 54 ec 42 17 4d 78 87 c3 e2 49 6f e4 f5 97 34 c9 b3 b7 38 43 0c 96 8f 6b b9 55 2a cf d2 eb 40 54 c4 9f fd a9 ee fa 85 cf f0 15 b5 a6 88 43 9a 6f cf 64 9a a1 f0 53 73 2e 04 88 f1 34 e2 22 d0 ca 4c b7 93 04 8c 65 4d 1f f2 35 94 5b f8 07 35 c0 b4 42 f4 47 16 2d ff 32 9c c7 61 9f d2 e0 9a 21 56 0f c4 44 55 8b 80 06 cb 73 a3 85 78 8b 40 09 15 3b 94 06 49 4c 57 82 14 75 34 cd 9e f3 b7 2a af 0d 31 65 74 65 20 e3 b8 4e 6d 34 cc Data Ascii: CKeaE,'b%;4R)O9u9.]V}?jaMVf3KF6ke"rAim,<lnM4KsRTBMxIo48CkU@TCodSs.4"LeM5[5BG-2a!VDUsx@;ILWu41ete Nm4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50348	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	598	OUT	GET /media/New%20navigation_Rebrand%203.0/nickel%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:12 UTC	798	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/png Content-Length: 965 Connection: close Age: 19254 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=1994 ETag: "8850c9e5b79b340c0b9a83bb7fb6ff90" Last-Modified: Tue, 30 Aug 2022 08:01:17 GMT Via: 1.1 130ce7c752c5865952ded89032560b32.cloudfront.net (CloudFront) X-Amz-Cf-Id: F_bbTi2V9ejUbWmfB6ceAEu7EAfUxDWZk4eRlzZsKjI0C5Y-_4ETqQ== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: Kkkk3bXoVf8dtkgJXAhjJrVvLEqjtsZv CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:12 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8ec3e502597-MIA
2024-04-26 18:33:12 UTC	571	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 cc 50 4c 54 45 00 00 00 70 80 70 70 70 70 70 70 70 70 75 70 70 70 70 74 74 74 70 74 70 73 76 73 73 73 73 70 73 70 72 72 72 70 72 70 73 73 73 72 74 72 72 72 72 70 72 70 72 74 72 72 74 72 72 74 72 71 73 71 72 75 72 71 74 71 71 72 71 73 74 73 71 74 71 73 75 73 73 74 73 71 74 71 72 75 72 72 73 72 71 73 71 72 74 72 ff ff ff f6 f7 f6 f6 f6 f6 ee ee ee ed ee ed e5 e5 e5 dc dd dc dc dc dc d3 d4 d3 d3 d3 d3 ca cb ca c2 c3 c2 c2 c2 c2 c1 c2 c1 b9 ba b9 b8 ba b8 b9 b9 b9 b8 b9 b8 b0 b1 b0 b0 b0 b0 a8 a9 a8 a7 a9 a7 a7 a8 a7 9f a0 9f 9e 9f 9e 96 97 96 95 97 95 8d 8e 8d 8c 8e Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTEpppppppppupppptttptpsvsssspsprrrprpsssrtrrrrprprtrrtrrtrqsqrurqtqqrqstsqtqsusstsqtqrurrsrqsqrtr
2024-04-26 18:33:12 UTC	394	IN	Data Raw: fd 4e 19 f5 cd 91 25 25 b4 e3 83 f9 f5 bd d3 2d 98 03 d6 99 b3 33 d9 d9 66 61 65 23 7b 43 93 b2 24 e6 16 3c 4b 10 0e 29 7c 9e a0 33 8a b5 41 cb 87 56 0b 6d 50 4c 23 6d d0 0a ad 56 da a0 37 f4 5e 1b b4 a8 5a 2d b5 41 19 a5 6e 6b 24 83 e0 1a c4 fc 07 41 85 dd f8 0b 30 62 b1 57 76 e3 5f 77 4e ad b2 1b 7f 85 a6 4b 7a 0b 66 a6 2c 94 60 12 8a c1 dc 28 0b 1b 30 31 85 60 b6 63 d5 ad 92 27 db 0b 38 f4 b6 00 77 44 5e 0e e6 4e 75 fa 09 ae 3e 6a 99 ce de 0a 70 09 11 85 e0 3e f5 ef ec 15 11 79 e0 ee a7 85 d1 ac 02 e7 13 eb cd 51 42 c4 7a b3 26 3b 23 3e b7 9b a2 db b4 b9 d5 ae a8 16 39 9c 23 e2 b5 46 96 74 ad 2c 7c 69 14 e4 93 28 a9 36 57 4f 3e 00 68 d4 30 51 4f e6 68 8a 5a df b2 0b 55 ab 9a 41 95 aa 4d c0 56 68 2f d0 07 6d 81 fd 23 05 6c 55 6d 8a 86 c6 6d 2b d6 fd 07 Data Ascii: N%%-3fae#{C$<K)\|3AVmPL#mV7^Z-Ank$A0bWv_wNKzf,`(01`c'8wD^Nu>jp>yQBz&;#>9#Ft,\|i(6WO>h0QOhZUAMVh/m#lUmm+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50351	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	599	OUT	GET /media/New%20navigation_Rebrand%203.0/soybean%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:12 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/png Content-Length: 1065 Connection: close Age: 19254 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=2193 ETag: "f6d60680f212dc9a7395035f03760010" Last-Modified: Tue, 30 Aug 2022 08:01:17 GMT Via: 1.1 b3fa6483b226ef7cc87d8bab653f621c.cloudfront.net (CloudFront) X-Amz-Cf-Id: D4GCEeZgorVtvP-GEdDvKxxVxy7pGoUw5_oeZealR8nGWRBl5uBKew== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: aisZ.Zsh08Xj9ZChPlDs_L6cxQUqG47b CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:12 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8ec3835a4d3-MIA
2024-04-26 18:33:12 UTC	570	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 cc 50 4c 54 45 00 00 00 df bf 9f cf bf 9f d7 bf 9f d5 c5 9f d5 bf 9f d7 c3 9f d6 c2 9f d6 c2 9c d7 c2 9f d7 c2 9d d8 c6 9f d6 c4 9d d6 c1 9d d7 c5 9f d7 c3 9d d8 c6 9f d8 c4 9f d6 c5 9e d6 c3 9e d8 c5 9f d6 c4 9e d7 c4 9f d7 c4 9e d8 c4 9f d8 c4 9e d7 c5 9e d7 c3 9e d8 c4 9e d6 c4 9e ff ff ff fd fb f9 fa f8 f3 fa f8 f2 f8 f5 ed f7 f5 ed f8 f4 ed f8 f4 ec f5 f0 e7 f5 f0 e6 f0 e9 db f0 e9 da f0 e8 da ed e6 d4 ee e5 d5 ed e5 d5 ed e5 d4 eb e2 ce eb e1 cf eb e1 ce e9 de c8 e8 de c8 e9 dd c9 e9 dd c8 e8 dd c8 e6 da c3 e6 da c2 e4 d7 bc e3 d7 bc e3 d6 bc e1 d3 b6 e1 d2 Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTE
2024-04-26 18:33:12 UTC	495	IN	Data Raw: 46 d5 f5 f3 a8 d1 6a ab 4e 78 c3 0e 7e 60 43 e0 ee ec fb a9 20 21 17 57 0d 03 77 67 6b 79 52 b2 d3 19 6a 7a 43 bb 8f 22 68 a9 54 34 43 7a 6e 11 da 7d 10 41 79 2d cf 50 06 49 67 30 40 9b fa 51 bd c5 78 71 ac 8f 0e 69 62 cd b9 67 27 0f bf 39 5f 1d 97 fc 17 36 4d ec b3 16 39 44 81 c4 15 dc a2 d9 8a e9 7d 46 22 85 14 8d 38 33 17 44 83 ec 07 26 cc be 54 f3 42 e6 70 d4 b0 04 f1 82 09 d5 f3 d5 03 13 ee 39 b6 09 da 3e e6 8d 89 ec c5 1f 16 35 6a 81 69 7d 24 8e c2 52 5e 69 40 6a 68 8a 8e b6 22 41 f4 d4 68 8e 94 ab b7 af a1 b3 5b b8 32 9c 16 fd d5 28 65 7d d4 54 73 8b 3c 31 55 51 a3 dc ce 39 ea 4d 34 37 6d 79 6c 69 be 3e 2e 4f b1 95 e3 df a0 de 00 5e 18 f6 f9 fe 50 c7 7e c1 84 5c 9d 3c 15 41 2f d3 76 56 d4 b2 3c ba 0a 14 00 5c a3 6a a9 7c bd 6f 94 9c af 68 9c 35 90 Data Ascii: FjNx~`C !WwgkyRjzC"hT4Czn}Ay-PIg0@Qxqibg'9_6M9D}F"83D&TBp9>5ji}$R^i@jh"Ah[2(e}Ts<1UQ9M47myli>.O^P~\<A/vV<\j\|oh5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50346	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	598	OUT	GET /media/New%20navigation_Rebrand%203.0/copper%402x.png HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:12 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/png Content-Length: 1007 Connection: close Age: 19254 Cache-Control: public, max-age=36000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=2072 ETag: "347ca61caadbe8d1a9a8d4f4d2615376" Last-Modified: Tue, 30 Aug 2022 08:01:15 GMT Via: 1.1 bb707a876db211940a3cb07991cacbdc.cloudfront.net (CloudFront) X-Amz-Cf-Id: ovpTBfTBRm_sF-mcY8Sn9ETEn_u5kW4X2YoM947VZuxQ99DEzsYFDg== X-Amz-Cf-Pop: MIA3-C3 X-Cache: Hit from cloudfront x-amz-version-id: C5yUR5wLkLtSKGOcSmybqYb4UuXXcI2x CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:12 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8ec0bf35730-MIA
2024-04-26 18:33:12 UTC	570	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 03 00 00 00 62 33 43 75 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 e1 50 4c 54 45 00 00 00 af 80 30 bf 70 30 af 70 40 af 70 30 b7 70 38 b7 70 30 ba 70 35 b5 70 35 b5 70 30 b7 74 34 b7 74 30 b7 70 30 b9 73 33 b6 73 33 b9 70 30 b7 72 32 ba 73 33 b6 74 34 b8 72 32 b6 72 32 b9 74 32 b9 72 32 b7 74 34 b7 74 32 b7 72 34 b7 72 32 b9 74 34 b8 72 32 b6 73 33 b6 73 32 b6 71 32 b9 73 33 b8 72 33 b7 72 33 b8 74 33 b8 73 33 b8 74 34 b8 74 33 b9 73 34 b8 73 33 b8 73 33 b8 73 32 b8 72 33 b9 73 33 ff ff ff fb f7 f2 fb f6 f2 f7 ee e5 f6 ee e5 f2 e5 d9 f1 e5 d9 ee dc cc ed dc cc e9 d3 bf e8 d3 bf e5 ca b3 e5 ca b2 e4 ca b3 e0 c2 a6 e0 c1 a6 dc b9 Data Ascii: PNGIHDRHHb3CusRGBgAMAaPLTE0p0p@p0p8p0p5p5p0t4t0p0s3s3p0r2s3t4r2r2t2r2t4t2r4r2t4r2s3s2q2s3r3r3t3s3t4t3s4s3s3s2r3s3
2024-04-26 18:33:12 UTC	437	IN	Data Raw: ad e9 2c 81 ea ad e1 86 6d a6 b2 d4 2c 45 91 68 95 16 4a 23 69 30 2d ab 14 98 73 b8 a5 be 52 df 26 87 57 e2 37 e5 b2 6e 0e af 34 a4 ad 2e 14 ab a4 d2 12 8a 16 9b ac a1 01 9f 2c b9 b1 92 f0 d9 50 24 2d b1 bd 1d ec 24 08 fb e4 ed 26 68 40 ef b5 41 f3 b4 d4 2f 6d d0 3b f6 15 29 97 9c 8b b5 41 1f e8 93 36 e8 26 2d 35 d7 06 05 14 ec e6 8c 02 c2 6e 82 f0 1f 04 45 76 eb 8f a0 60 87 1d db ad 3f ae dc da bd dd fa 53 14 7d a1 8f 50 4c a5 85 09 14 43 76 45 70 27 2d 24 60 57 c4 83 62 7d 25 ab a5 fc 65 7b 8e 06 b3 fd 84 ca a5 b6 80 62 29 2b fd 81 2a 7b 6a 15 95 b3 45 00 f8 53 eb 41 75 5b 7f b2 3e 11 b5 a1 5a 5d 7f 33 9a a4 50 39 c4 66 b3 c3 27 63 b3 59 e2 93 91 ba b7 bb a8 da f5 02 79 21 65 de 20 af c1 2b 72 4a a4 a9 14 4b 0b 71 a1 90 43 ac 52 e6 87 7c 70 55 e8 f7 f8 Data Ascii: ,m,EhJ#i0-sR&W7n4.,P$-$&h@A/m;)A6&-5nEv`?S}PLCvEp'-$`Wb}%e{b)+*{jESAu[>Z]3P9f'cYy!e +rJKqCR\|pU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50349	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	613	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/Ethereum_1x_Short.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:12 UTC	788	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/svg+xml Content-Length: 640 Connection: close Last-Modified: Tue, 06 Jun 2023 07:53:39 GMT ETag: "2f598d9e8034d366caf7664286890a6d" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: hQY0OLFWYKHURAPqYJ256dqZwD7.QBnP X-Cache: Hit from cloudfront Via: 1.1 9abd3232e1a3776dc26ad56d2477147c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: GCRGG-03p99VwpqB0A27vJGgYJo_iqN_lggaTgiD7KtcW_l9kCIlyw== Age: 19964 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:12 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8ec2e350a3e-MIA
2024-04-26 18:33:12 UTC	581	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d 38 2e 30 35 39 20 31 38 2d 31 38 20 31 38 53 30 20 32 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="17" fill="#fff"/><path fill-rule="evenodd" clip-rule="evenodd" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 2
2024-04-26 18:33:12 UTC	59	IN	Data Raw: 32 37 38 6c 2d 31 2e 38 39 34 2d 31 2e 38 39 33 2d 2e 36 30 32 2e 35 39 33 20 32 2e 39 32 36 20 32 2e 39 32 36 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 278l-1.894-1.893-.602.593 2.926 2.926Z" fill="#fff"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50350	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	611	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/Bitcoin_2x_Long.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:12 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/svg+xml Content-Length: 1648 Connection: close Last-Modified: Tue, 11 Apr 2023 16:38:27 GMT ETag: "414b60894723fdf8853654bd54518b58" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: dovj.P84pEcRy5nLoslJDv2.xauAbEJ2 X-Cache: Hit from cloudfront Via: 1.1 dcccf6c408219d8b851fcd12a0068cea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: zz5uHyM_-rk3SjH6m6hVoKSA9uwuTdx3ZD06SBEaBdXtOlBob7uNkg== Age: 19964 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:12 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8ec3d25221e-MIA
2024-04-26 18:33:12 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 43 38 2e 30 36 20 30 20 30 20 38 2e 30 35 39 20 30 20 31 38 73 38 2e 30 35 39 20 31 38 20 31 38 20 31 38 20 31 38 2d 38 2e 30 35 39 20 31 38 2d 31 38 53 32 37 2e 39 34 31 20 30 20 31 38 20 30 5a 22 20 66 69 6c 6c 3d 22 23 46 37 39 33 31 41 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M18 0C8.06 0 0 8.059 0 18s8.059 18 18 18 18-8.059 18-18S27.941 0 18 0Z" fill="#F7931A"/><path fill-rule="evenodd" clip-rule="evenodd
2024-04-26 18:33:12 UTC	1068	IN	Data Raw: 39 32 37 20 33 2e 36 35 32 2e 39 37 38 4c 31 38 2e 31 32 33 20 37 6c 31 2e 38 35 36 2e 34 39 37 2d 2e 37 39 38 20 32 2e 39 37 35 20 31 2e 34 31 34 2e 33 37 39 2e 37 39 37 2d 32 2e 39 37 35 20 31 2e 38 35 36 2e 34 39 37 2d 2e 38 30 36 20 33 2e 30 31 31 63 31 2e 33 36 2e 34 35 37 20 32 2e 33 32 2e 39 39 36 20 33 2e 30 34 31 20 31 2e 39 30 32 2e 39 33 32 20 31 2e 31 37 2e 34 37 32 20 32 2e 36 34 35 2e 33 35 20 32 2e 39 39 34 2d 2e 31 32 2e 33 34 38 2d 2e 34 36 2e 39 39 32 2d 2e 38 39 31 20 31 2e 33 35 2d 2e 34 33 2e 33 36 2d 31 2e 33 31 33 2e 35 39 37 2d 31 2e 33 31 33 2e 35 39 37 73 2e 38 35 31 2e 34 33 32 20 31 2e 33 35 37 20 31 2e 30 38 63 2e 35 30 35 2e 36 34 36 2e 37 34 38 20 31 2e 36 31 33 2e 33 39 31 20 32 2e 38 33 37 2d 2e 33 35 35 20 31 2e 32 32 35 Data Ascii: 927 3.652.978L18.123 7l1.856.497-.798 2.975 1.414.379.797-2.975 1.856.497-.806 3.011c1.36.457 2.32.996 3.041 1.902.932 1.17.472 2.645.35 2.994-.12.348-.46.992-.891 1.35-.43.36-1.313.597-1.313.597s.851.432 1.357 1.08c.505.646.748 1.613.391 2.837-.355 1.225

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50344	52.92.0.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	409	OUT	GET /static/cryptocoin/xdb.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:12 UTC	470	IN	HTTP/1.1 200 OK x-amz-id-2: n5IkPFCymcHo4wJX4F85WyhM1aPOfz/Zg7Ct/20ibF/8UxDfXTphoYjmlDuiTBCL3UCzCreyUsI= x-amz-request-id: 7JFEKRJE8HPPMNVK Date: Fri, 26 Apr 2024 18:33:13 GMT Last-Modified: Mon, 04 Dec 2023 09:48:40 GMT ETag: "73b34dc61e24d681d8b8d3b83c2e9ca4" x-amz-server-side-encryption: AES256 x-amz-version-id: MEGtB_riZBLiVKrA0upqhpnpuiACgde3 Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 1617 Connection: close
2024-04-26 18:33:12 UTC	1617	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 30 2e 33 33 33 38 20 31 38 2e 36 37 37 36 43 32 31 2e 34 30 37 38 20 31 38 2e 37 39 38 20 32 32 2e 34 33 31 37 20 31 39 2e 30 39 39 32 20 32 34 2e 31 33 38 20 32 30 2e 30 37 32 38 4c 32 39 2e 31 35 36 39 20 32 32 2e 39 33 33 35 43 32 39 2e 36 37 38 38 20 32 33 2e 32 32 34 36 20 32 39 2e 39 39 20 32 33 2e 37 37 36 37 20 32 39 2e 39 39 20 32 34 2e 33 36 38 39 43 32 39 2e 39 39 20 32 35 2e 36 37 33 38 20 32 38 2e 35 35 34 36 20 32 36 2e 34 36 Data Ascii: <svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M20.3338 18.6776C21.4078 18.798 22.4317 19.0992 24.138 20.0728L29.1569 22.9335C29.6788 23.2246 29.99 23.7767 29.99 24.3689C29.99 25.6738 28.5546 26.46

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50353	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	678	OUT	GET /oracle?uid=9%2Bou199999e0s0%2BZ&BK_SWAP_DEST=5957 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:12 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:12 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50352	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	606	OUT	GET /117405/Resources/dist/Resources/js/WebCommon/Vue/vue.min.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:12 UTC	548	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 814829 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:12 GMT Etag: "6c722179c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:16 GMT Server: ECAcc (mic/9AED) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 107184 Connection: close
2024-04-26 18:33:12 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 56 75 65 2e 6a 73 20 76 32 2e 37 2e 31 34 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 32 32 20 45 76 61 6e 20 59 6f 75 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 4a 2c 6b 29 7b 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6b 28 29 3a 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 6b 29 3a 28 4a 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f Data Ascii: /! Vue.js v2.7.14 * (c) 2014-2022 Evan You * Released under the MIT License. */(function(J,k){typeof exports=="object"&&typeof module!="undefined"?module.exports=k():typeof define=="function"&&define.amd?define(k):(J=typeof globalThis!="undefined"?
2024-04-26 18:33:12 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-04-26 18:33:12 UTC	16383	IN	Data Raw: 74 20 61 74 74 72 73 28 29 7b 69 66 28 21 65 2e 5f 61 74 74 72 73 50 72 6f 78 79 29 7b 76 61 72 20 6e 3d 65 2e 5f 61 74 74 72 73 50 72 6f 78 79 3d 7b 7d 3b 4b 28 6e 2c 22 5f 76 5f 61 74 74 72 5f 70 72 6f 78 79 22 2c 21 30 29 2c 46 6e 28 6e 2c 65 2e 24 61 74 74 72 73 2c 4a 2c 65 2c 22 24 61 74 74 72 73 22 29 7d 72 65 74 75 72 6e 20 65 2e 5f 61 74 74 72 73 50 72 6f 78 79 7d 2c 67 65 74 20 6c 69 73 74 65 6e 65 72 73 28 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6c 69 73 74 65 6e 65 72 73 50 72 6f 78 79 7c 7c 46 6e 28 65 2e 5f 6c 69 73 74 65 6e 65 72 73 50 72 6f 78 79 3d 7b 7d 2c 65 2e 24 6c 69 73 74 65 6e 65 72 73 2c 4a 2c 65 2c 22 24 6c 69 73 74 65 6e 65 72 73 22 29 2c 65 2e 5f 6c 69 73 74 65 6e 65 72 73 50 72 6f 78 79 7d 2c 67 65 74 20 73 6c 6f 74 73 28 29 7b 72 Data Ascii: t attrs(){if(!e._attrsProxy){var n=e._attrsProxy={};K(n,"_v_attr_proxy",!0),Fn(n,e.$attrs,J,e,"$attrs")}return e._attrsProxy},get listeners(){return e._listenersProxy\|\|Fn(e._listenersProxy={},e.$listeners,J,e,"$listeners"),e._listenersProxy},get slots(){r
2024-04-26 18:33:12 UTC	16383	IN	Data Raw: 6f 6e 20 4c 6f 28 65 2c 6e 2c 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 68 74 28 65 29 3b 72 65 74 75 72 6e 20 6f 2e 66 6e 43 6f 6e 74 65 78 74 3d 74 2c 6f 2e 66 6e 4f 70 74 69 6f 6e 73 3d 72 2c 6e 2e 73 6c 6f 74 26 26 28 28 6f 2e 64 61 74 61 7c 7c 28 6f 2e 64 61 74 61 3d 7b 7d 29 29 2e 73 6c 6f 74 3d 6e 2e 73 6c 6f 74 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 52 6f 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 6e 29 65 5b 73 65 28 74 29 5d 3d 6e 5b 74 5d 7d 66 75 6e 63 74 69 6f 6e 20 57 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 7c 7c 65 2e 5f 5f 6e 61 6d 65 7c 7c 65 2e 5f 63 6f 6d 70 6f 6e 65 6e 74 54 61 67 7d 76 6f 28 46 74 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 42 74 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 Data Ascii: on Lo(e,n,t,r,i){var o=ht(e);return o.fnContext=t,o.fnOptions=r,n.slot&&((o.data\|\|(o.data={})).slot=n.slot),o}function Ro(e,n){for(var t in n)e[se(t)]=n[t]}function Wn(e){return e.name\|\|e.__name\|\|e._componentTag}vo(Ft.prototype);var Bt={init:function(e,n)
2024-04-26 18:33:12 UTC	16383	IN	Data Raw: 61 74 61 26 26 28 6e 3d 58 6f 28 6e 2c 74 2e 64 61 74 61 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 6f 29 7b 72 65 74 75 72 6e 20 67 28 69 29 7c 7c 67 28 6f 29 3f 4a 74 28 69 2c 71 74 28 6f 29 29 3a 22 22 7d 28 6e 2e 73 74 61 74 69 63 43 6c 61 73 73 2c 6e 2e 63 6c 61 73 73 29 7d 66 75 6e 63 74 69 6f 6e 20 58 6f 28 65 2c 6e 29 7b 72 65 74 75 72 6e 7b 73 74 61 74 69 63 43 6c 61 73 73 3a 4a 74 28 65 2e 73 74 61 74 69 63 43 6c 61 73 73 2c 6e 2e 73 74 61 74 69 63 43 6c 61 73 73 29 2c 63 6c 61 73 73 3a 67 28 65 2e 63 6c 61 73 73 29 3f 5b 65 2e 63 6c 61 73 73 2c 6e 2e 63 6c 61 73 73 5d 3a 6e 2e 63 6c 61 73 73 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 3f 6e 3f 65 2b 22 20 22 2b 6e 3a 65 3a 6e 7c 7c 22 22 Data Ascii: ata&&(n=Xo(n,t.data));return function(i,o){return g(i)\|\|g(o)?Jt(i,qt(o)):""}(n.staticClass,n.class)}function Xo(e,n){return{staticClass:Jt(e.staticClass,n.staticClass),class:g(e.class)?[e.class,n.class]:n.class}}function Jt(e,n){return e?n?e+" "+n:e:n\|\|""
2024-04-26 18:33:12 UTC	16383	IN	Data Raw: 73 73 2c 70 3d 72 2e 62 65 66 6f 72 65 45 6e 74 65 72 2c 76 3d 72 2e 65 6e 74 65 72 2c 68 3d 72 2e 61 66 74 65 72 45 6e 74 65 72 2c 5f 3d 72 2e 65 6e 74 65 72 43 61 6e 63 65 6c 6c 65 64 2c 79 3d 72 2e 62 65 66 6f 72 65 41 70 70 65 61 72 2c 77 3d 72 2e 61 70 70 65 61 72 2c 24 3d 72 2e 61 66 74 65 72 41 70 70 65 61 72 2c 6a 3d 72 2e 61 70 70 65 61 72 43 61 6e 63 65 6c 6c 65 64 2c 43 3d 72 2e 64 75 72 61 74 69 6f 6e 2c 4f 3d 56 65 2c 41 3d 56 65 2e 24 76 6e 6f 64 65 3b 41 26 26 41 2e 70 61 72 65 6e 74 3b 29 4f 3d 41 2e 63 6f 6e 74 65 78 74 2c 41 3d 41 2e 70 61 72 65 6e 74 3b 76 61 72 20 64 3d 21 4f 2e 5f 69 73 4d 6f 75 6e 74 65 64 7c 7c 21 65 2e 69 73 52 6f 6f 74 49 6e 73 65 72 74 3b 69 66 28 21 64 7c 7c 77 7c 7c 77 3d 3d 3d 22 22 29 7b 76 61 72 20 6d 3d 64 Data Ascii: ss,p=r.beforeEnter,v=r.enter,h=r.afterEnter,_=r.enterCancelled,y=r.beforeAppear,w=r.appear,$=r.afterAppear,j=r.appearCancelled,C=r.duration,O=Ve,A=Ve.$vnode;A&&A.parent;)O=A.context,A=A.parent;var d=!O._isMounted\|\|!e.isRootInsert;if(!d\|\|w\|\|w===""){var m=d
2024-04-26 18:33:12 UTC	4	IN	Data Raw: 61 72 65 61 Data Ascii: area
2024-04-26 18:33:12 UTC	16383	IN	Data Raw: 22 2c 21 30 29 2c 51 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 26 26 52 63 28 65 29 26 26 6e 5b 30 5d 3d 3d 3d 60 0a 60 7d 3b 66 75 6e 63 74 69 6f 6e 20 46 63 28 65 2c 6e 29 7b 76 61 72 20 74 3d 6e 3f 4c 63 3a 49 63 3b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 74 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 4d 63 5b 72 5d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 42 63 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 74 2c 72 2c 69 3d 5b 5d 2c 6f 3d 6e 2e 65 78 70 65 63 74 48 54 4d 4c 2c 61 3d 6e 2e 69 73 55 6e 61 72 79 54 61 67 7c 7c 76 65 2c 73 3d 6e 2e 63 61 6e 42 65 4c 65 66 74 4f 70 65 6e 54 61 67 7c 7c 76 65 2c 63 3d 30 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 3d 65 2c 72 26 26 58 69 28 72 29 29 Data Ascii: ",!0),Qi=function(e,n){return e&&Rc(e)&&n[0]===``};function Fc(e,n){var t=n?Lc:Ic;return e.replace(t,function(r){return Mc[r]})}function Bc(e,n){for(var t,r,i=[],o=n.expectHTML,a=n.isUnaryTag\|\|ve,s=n.canBeLeftOpenTag\|\|ve,c=0,l=function(){if(t=e,r&&Xi(r))
2024-04-26 18:33:12 UTC	8881	IN	Data Raw: 65 6e 74 26 26 28 65 2e 70 72 65 3d 65 2e 70 72 65 7c 7c 65 2e 70 61 72 65 6e 74 2e 70 72 65 29 2c 65 2e 73 74 61 74 69 63 52 6f 6f 74 26 26 21 65 2e 73 74 61 74 69 63 50 72 6f 63 65 73 73 65 64 29 72 65 74 75 72 6e 20 67 61 28 65 2c 6e 29 3b 69 66 28 65 2e 6f 6e 63 65 26 26 21 65 2e 6f 6e 63 65 50 72 6f 63 65 73 73 65 64 29 72 65 74 75 72 6e 20 79 61 28 65 2c 6e 29 3b 69 66 28 65 2e 66 6f 72 26 26 21 65 2e 66 6f 72 50 72 6f 63 65 73 73 65 64 29 72 65 74 75 72 6e 20 62 61 28 65 2c 6e 29 3b 69 66 28 65 2e 69 66 26 26 21 65 2e 69 66 50 72 6f 63 65 73 73 65 64 29 72 65 74 75 72 6e 20 6a 72 28 65 2c 6e 29 3b 69 66 28 65 2e 74 61 67 21 3d 3d 22 74 65 6d 70 6c 61 74 65 22 7c 7c 65 2e 73 6c 6f 74 54 61 72 67 65 74 7c 7c 6e 2e 70 72 65 29 7b 69 66 28 65 2e 74 61 Data Ascii: ent&&(e.pre=e.pre\|\|e.parent.pre),e.staticRoot&&!e.staticProcessed)return ga(e,n);if(e.once&&!e.onceProcessed)return ya(e,n);if(e.for&&!e.forProcessed)return ba(e,n);if(e.if&&!e.ifProcessed)return jr(e,n);if(e.tag!=="template"\|\|e.slotTarget\|\|n.pre){if(e.ta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50359	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	835	OUT	GET /v2/assets/1/details HTTP/1.1 Host: api.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296; AWSALB=z4A+AjEvcwkiPDC7Nc58DcFnHnBi/dEE2OuELDR21jT0HvSo/67LxAtv0UfHNPiVNo7L3NvvEj0LgBSrCtSjxoB5g6HK8oNM+pHXeoP/EHhlwwLm6f23clRMffF+; AWSALBCORS=z4A+AjEvcwkiPDC7Nc58DcFnHnBi/dEE2OuELDR21jT0HvSo/67LxAtv0UfHNPiVNo7L3NvvEj0LgBSrCtSjxoB5g6HK8oNM+pHXeoP/EHhlwwLm6f23clRMffF+
2024-04-26 18:33:12 UTC	1180	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=uZbL6respsrd6zMVsAc+rcfPmB4acUEnnzqPPfFxWXadhzejNq8yUeD9CK/e69pM274tRVYgISqTnYvzVNihj0yktN9o4C2b0moqcdT2GuEXg9WXijsTaDB8Ahyz; Expires=Fri, 03 May 2024 18:33:12 GMT; Path=/ Set-Cookie: AWSALBCORS=uZbL6respsrd6zMVsAc+rcfPmB4acUEnnzqPPfFxWXadhzejNq8yUeD9CK/e69pM274tRVYgISqTnYvzVNihj0yktN9o4C2b0moqcdT2GuEXg9WXijsTaDB8Ahyz; Expires=Fri, 03 May 2024 18:33:12 GMT; Path=/; SameSite=None; Secure access-control-allow-origin: * access-control-allow-headers: origin, content-type, access-token, x-bitpanda-academy, x-tracking-id, If-None-Match, If-Match, x-bitpanda-app-web, x-datadog-trace-id, x-datadog-parent-id, x-datadog-origin, x-datadog-sampling-priority, bp-broker-user-api-token-id cache-control: max-age=60, private strict-transport-security: max-age=15552000; includeSubDomains; preload x-frame-options: SAMEORIGIN vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers, Accept-Encoding CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8eebcc30325-MIA
2024-04-26 18:33:12 UTC	189	IN	Data Raw: 31 38 32 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 63 72 79 70 74 6f 63 6f 69 6e 5f 64 65 74 61 69 6c 73 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 61 73 73 65 74 5f 6e 61 6d 65 22 3a 22 42 69 74 63 6f 69 6e 22 2c 22 64 61 69 6c 79 5f 68 69 67 68 22 3a 22 36 30 38 33 34 2e 38 30 30 30 30 30 30 30 22 2c 22 64 61 69 6c 79 5f 6c 6f 77 22 3a 22 35 39 32 39 30 2e 31 30 30 30 30 30 30 30 22 2c 22 68 69 67 68 5f 35 32 5f 77 22 3a 22 36 37 34 31 37 2e 35 30 30 30 30 30 30 30 22 2c 22 6c 6f 77 5f 35 32 5f 77 22 3a 22 32 32 37 38 38 2e 31 30 30 30 Data Ascii: 182{"data":{"type":"cryptocoin_details","attributes":{"asset_name":"Bitcoin","daily_high":"60834.80000000","daily_low":"59290.10000000","high_52_w":"67417.50000000","low_52_w":"22788.1000
2024-04-26 18:33:12 UTC	204	IN	Data Raw: 30 30 30 30 22 2c 22 6d 6f 6e 74 68 6c 79 5f 76 6f 6c 61 74 69 6c 69 74 79 22 3a 22 30 2e 31 33 39 32 33 38 36 37 22 2c 22 6d 61 72 6b 65 74 5f 63 61 70 22 3a 22 31 31 37 36 37 39 30 39 36 35 39 32 34 2e 37 33 37 36 32 35 30 30 22 2c 22 6d 61 72 6b 65 74 5f 63 61 70 5f 65 75 72 22 3a 22 31 31 37 36 37 39 30 39 36 35 39 32 34 2e 37 33 37 36 32 35 30 30 22 2c 22 6c 61 73 74 5f 75 70 64 61 74 65 64 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 32 30 3a 31 36 3a 35 39 2b 30 32 3a 30 30 22 2c 22 75 6e 69 78 22 3a 22 31 37 31 34 31 35 35 34 31 39 22 7d 7d 7d 7d 0d 0a Data Ascii: 0000","monthly_volatility":"0.13923867","market_cap":"1176790965924.73762500","market_cap_eur":"1176790965924.73762500","last_updated":{"date_iso8601":"2024-04-26T20:16:59+02:00","unix":"1714155419"}}}}
2024-04-26 18:33:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50363	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	698	OUT	GET /xxrz/250x400/793/6a/e3/6ae390dc2e135c79c6ea8efabe9abbf4/6ae390dc2e135c79c6ea8efabe9abbf4.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:12 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/jpeg Content-Length: 55818 Connection: close Last-Modified: Wed, 24 Apr 2024 03:55:53 GMT Vary: Accept-Encoding ETag: W/"662882c9-be04" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5343 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i6%2FpzJWqHUwbigIhd8u6VEzpuxVkj89dj%2F7MaZRkIwovV%2Fm2dz7%2BvhfjFsCIz1g%2BEnAmgILu6ylZR4nEnBQ6zXHshUhTjLZHIgY6JV7lhviHwN5h8oOwLssTgSwyuC5tCtdl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8eebc3c31e3-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:12 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 02 03 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 97 81 b7 a6 35 3a 7d b9 a5 2d 32 f5 a5 7d f5 28 28 45 58 86 b5 ec 54 d7 5c 0c 85 b1 6d ef 6b 5f 3d ef 3f 60 97 5b 4a d7 0b 8b b8 a6 19 d4 c5 1a 12 27 ec 58 d3 cf 92 ff 00 e4 33 d6 f4 97 e8 e8 c2 d9 67 4e 50 26 a1 ba 2e cc bb 33 8c 11 85 b3 b6 0e 8c 82 82 0d ab aa 42 c6 2d 68 92 de 6b 49 b1 e3 ad bd ac 7e fd cf 77 2b d4 64 6e 33 bb 56 9f 6b b6 db d7 46 9b 92 db ba 8a 91 2a 8e f5 6d 3d db 3b 6d f2 f9 4a e4 bc 9e 84 6b bc fb 9c c6 47 b7 02 b9 a4 93 4e da e2 d8 c6 8d 84 fa 60 aa 1b 95 23 3f 9b 39 66 32 b2 f1 77 65 55 c2 99 9f 0c 8b 3d 8c ed 8c ad 6d 1a b1 a9 ed 72 93 17 45 08 96 70 d2 cc b2 e3 aa af 81 49 9b 5f 9f 0d fd fb f3 e7 28 59 5f 75 ea 8a ca 53 cd bc 9c da 65 43 08 cb fc ab 9e 46 29 ed b0 77 fc 82 f1 c2 6d 2f e1 17 29 a3 65 71 7e 7b 96 69 ea 65 61 bb Data Ascii: 5:}-2}((EXT\mk_=?`[J'X3gNP&.3B-hkI~w+dn3VkF*m=;mJkGN`#?9f2weU=mrEpI_(Y_uSeCF)wm/)eq~{iea
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 3d 2a 36 37 5c 82 9b 26 b9 39 8d 8d ea b6 98 18 fc 63 77 de 20 00 00 00 00 00 00 00 00 00 00 00 00 00 01 e9 93 a6 e7 86 95 a7 52 e0 71 28 97 91 08 97 e9 a7 cc 6e fe 5a c5 68 8b c4 92 cd 37 4f 77 47 9c f4 bc 40 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ef eb 90 70 f9 87 9a 47 ba 5f 19 fe d2 bc d1 6a e6 d5 37 6a 3b 66 dc 75 da 3c cc 3c 6d 00 0a e6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ef f0 00 03 84 4e 7e 59 bd 4c f9 02 7d 48 0f df 85 d9 53 5c 38 82 fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 7f 80 00 00 33 9e 29 7d 35 79 5d 6e 9e 9f 87 d5 2e f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 bf c0 00 e3 f5 8c ec 7c d4 56 aa f5 00 ed 7c 78 02 57 00 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 7f 80 07 4d 5a 05 f4 f9 67 Data Ascii: =*67\&9cw Rq(nZh7OwG@pG_j7j;fu<<mN~YL}HS\83)}5y]n.\|V\|xWpMZg
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: d1 c0 3d 7a f9 3e 1a 36 8d cd 6a 46 90 c6 93 5e cb 47 5e cf 18 f9 5e bf 5e 9f 51 81 9a 60 be 80 09 13 44 8c 44 d3 44 e5 78 1c 9c 86 3a a3 e1 ab 23 ea a9 c8 31 c4 9d c8 25 2b 8c d1 0d dd 99 0d ee 34 5c 55 af 6d 45 1d 2f 82 fb 22 95 8d 24 ed ce b8 46 56 ee 0c 1e d1 f3 38 2e d3 6d d8 f1 58 d1 d1 4b 42 d1 10 5a 97 5c 31 ea 6d 7f 53 96 2a 24 77 47 72 b6 40 fc 0e 72 39 15 b8 c9 53 4d c5 48 f6 33 16 90 fd 37 16 3f 48 d8 94 c7 28 31 09 a5 58 f8 4d a1 9c dc 0e e7 b3 f0 5b 28 ad 7d 69 62 39 8d 45 6b 3f 51 92 4f 40 d7 d7 dc 10 4c ad b8 ea fa e9 8c d4 8c b2 a6 a8 d3 77 26 4f 78 bb 9f 21 24 5b e5 31 ee 02 b6 d5 88 3b 1b 2a f7 95 15 5e da 2b f9 54 ed 87 7f e3 74 89 f2 21 68 71 2a ee ab a7 d2 46 13 a6 d5 ac 44 f6 7d d6 53 57 db 3d 9f ad fe 9d 30 77 28 7d 37 61 08 d1 fa Data Ascii: =z>6jF^G^^^Q`DDDx:#1%+4\UmE/"$FV8.mXKBZ\1mS$wGr@r9SMH37?H(1XM[(}ib9Ek?QO@Lw&Ox!$[1;^+Tt!hq*FD}SW=0w(}7a
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 9a 60 dc 47 63 18 cc 27 92 aa 81 96 89 83 63 e3 c6 e8 6d 3e b1 4c 56 bd e5 e3 c9 d0 5a 14 d1 5a eb da 1d 16 44 99 35 cb 4f 36 59 ca 8e 22 e9 88 a8 d7 49 56 c8 e1 8a 8c e3 a6 72 a3 6e 3f 39 78 8e 35 ef ac 5d eb ef ab 5f e4 84 41 0c cc c9 36 9e 92 62 ef 16 34 b4 d7 8e 6f 55 f9 78 5d 56 c0 95 2e 4e d5 ec 99 e6 52 63 b8 45 75 16 99 f5 5b 0e 52 31 55 cc 7f 1f af aa e8 11 7e 14 59 76 06 38 31 cb ab 07 ce f0 b6 12 f9 d9 c4 59 69 2d 8a 81 39 91 ad ea d5 6f 5c dd 18 b8 f5 af fa a2 72 b5 71 27 73 63 4e de 95 da 54 ec 9b f5 89 c1 b5 26 4f 8e ad 3c 8e 15 3f 14 d0 07 e4 7d 3d 43 a6 1b 6b f1 60 7c 73 1e 67 8e 10 fe a8 34 4d 58 a7 f4 fc af 9d 8c ec 4f d4 dd 5b b5 3a fe f2 47 a8 f0 7b fa 75 8d 35 1f 0a 18 52 22 03 b3 e0 bd d6 31 5a 4e 9f 5d 66 69 e4 c7 6c 48 35 8c d2 6b Data Ascii: `Gc'cm>LVZZD5O6Y"IVrn?9x5]_A6b4oUx]V.NRcEu[R1U~Yv81Yi-9o\rq'scNT&O<?}=Ck`\|sg4MXO[:G{u5R"1ZN]filH5k
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 92 84 aa 5b 04 84 a4 29 19 d5 da 82 72 dc 58 99 55 85 7a 45 3c 27 70 40 cc a7 0e 9d 75 d6 62 e6 46 b4 a7 3b 33 35 e8 b5 ff 00 33 13 6b 94 37 7d c7 6b fa 57 a5 1b 61 49 fe d0 52 86 66 11 c2 e1 e5 1d a9 05 28 bc 80 32 e6 eb 6a c1 a5 95 e2 59 4e 20 e4 69 4a ba 8f b3 16 99 3b 7e f6 de 8b 6e 62 1c 79 c6 13 9c 36 e4 f0 d0 9b f0 51 01 2b 4a 77 1d 98 50 d4 13 27 51 4f 38 97 5e 71 c4 23 86 95 2a 72 7e 1b 54 d1 6d 79 38 99 55 c3 9c b9 e0 81 9a 27 2f 7d 25 60 32 19 3e d1 75 0a 1d c1 b5 0f 99 15 85 30 84 a7 f2 26 fd c9 14 14 15 31 b5 5c 27 a2 a0 dc 6c 2e 3a d0 d4 13 7e 94 b5 a9 41 b4 9d 1b 4c 27 9c 12 55 f0 27 ca bd 0d 8d 67 0a cb bc 48 52 db 68 28 24 37 95 45 01 76 6c 29 56 51 25 dc c4 d8 c1 bc d7 a7 56 1c c4 61 9e 8c a5 6d a4 91 b2 01 02 23 9e 87 49 14 e2 fb 16 fa Data Ascii: [)rXUzE<'p@ubF;353k7}kWaIRf(2jYN iJ;~nby6Q+JwP'QO8^q#*r~Tmy8U'/}%`2>u0&1\'l.:~AL'U'gHRh($7Evl)VQ%Vam#I
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 61 0a 04 0e 32 82 14 52 75 09 b4 4d 3a 73 2e 20 7c f9 51 4d ea 3e d6 04 af b8 8f 8d 63 92 54 a5 24 72 1f 5f 0a 53 26 6f d7 e7 de 2b 12 ea d8 79 08 09 49 6d 79 72 5c e6 02 06 bd 06 82 6f 1b d5 b8 21 a8 d4 49 3c 95 af d5 e8 02 67 36 f0 0f 70 1c f6 9a 43 24 a4 a5 44 24 01 20 f9 41 3e 54 a6 89 b6 6c d1 72 af 2d 3f 5a 6d 82 a5 4a a7 25 80 8d ff 00 6a 18 67 12 df 61 4a 58 4a d0 e2 59 8b 29 41 62 67 9d a6 28 a1 61 c7 5f 71 25 25 ef 65 0a b9 44 14 d8 9e 76 bd 2c dc 9f ad ab 35 66 fb 35 ac 3a 4e bc cc 53 f9 73 dc df 97 7c 5a 9d 28 cf da 81 cb b1 3c ba d2 f3 92 d8 75 a4 bc 83 6e 2a 51 90 b6 53 17 3b 41 f0 8a 05 85 11 da 0a 55 c6 54 de 14 22 41 3c ba fc 28 36 d8 da 84 1b 40 83 00 f7 52 92 12 3b 22 e6 de 1b d2 6c a0 9e 5a 83 ae d6 34 a7 0a 14 88 8b aa 29 f0 a7 5b 0e Data Ascii: a2RuM:s. \|QM>cT$r_S&o+yImyr\o!I<g6pC$D$ A>Tlr-?ZmJ%jgaJXJY)Abg(a_q%%eDv,5f5:NSs\|Z(<un*QS;AUT"A<(6@R;"lZ4)[
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 51 61 06 22 71 81 14 32 42 91 a1 b1 10 23 30 c1 d1 f0 07 15 20 24 33 52 72 82 34 53 62 d2 e1 73 92 a2 b2 f1 ff da 00 08 01 02 01 01 3f 01 07 17 91 ce 47 d0 14 15 30 66 0c 1e 84 6a 3c 45 3c fe e8 09 80 65 40 05 11 99 cf 0e 9a 62 f7 81 9d 6c b7 4a d4 f9 81 de 7c 9f 5b a0 4f 2e 31 34 05 6d 70 a5 6e 73 cb 12 89 1f da 07 df 56 8b 7f 79 e8 62 70 3a 52 a2 a2 a3 09 85 49 c8 f3 8e 95 72 eb a1 85 ee 3b ee 25 23 21 eb 09 d0 81 9c e7 c3 2c b3 e1 41 f4 b0 db 6d bc bc 05 c4 46 35 99 fa c3 aa 67 4d 4e 59 e7 4c 62 6d b4 a1 4b de 29 22 0a 87 18 d0 9e b1 f2 a2 4d 07 44 e1 25 38 e3 10 4c e7 87 9d 3a 85 6f 5b 58 39 06 b3 f1 c4 85 7c 81 f7 52 c1 2a 4a a3 95 01 11 1a f1 8f 1c a8 00 61 5c ba 98 eb e3 4a 9e 06 3a c4 d0 08 49 51 19 63 38 95 9f 18 03 2f 2a da 6c 2d e5 a7 0e 20 95 Data Ascii: Qa"q2B#0 $3Rr4Sbs?G0fj<E<e@blJ\|[O.14mpnsVybp:RIr;%#!,AmF5gMNYLbmK)"MD%8L:o[X9\|RJa\J:IQc8/l-
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 9d 5d 32 e2 82 87 f1 21 38 92 74 09 03 cf 3d 2b 65 39 79 b3 fb 40 c7 6c 56 af dc 76 87 69 2f b6 65 c2 b3 c2 96 5e 70 04 b8 a3 fe 59 93 1c b7 23 9d 39 b7 1f 3d b7 b6 d8 6c ee 93 65 69 b1 9c da 5b 49 c2 06 2c 4a 84 b0 8c 73 08 48 94 ba a3 a9 98 26 35 d9 1d b3 d9 bb 55 9d ab 7d 95 a6 ca d9 d7 de 82 de d2 b9 79 b6 ed ef 16 23 12 da 98 21 00 a9 01 24 ce 32 ac b4 ae d3 f6 b3 64 f6 72 cd 97 ef 9d 51 76 e5 69 16 96 ac 00 bb 8b 8c c7 79 09 24 77 13 20 95 aa 11 98 ce 68 76 e3 64 3b b7 3f 52 b6 bc 65 bb 47 ae ae ef 0a db 45 ad a6 e5 38 d6 d3 8b 2a 82 e2 46 4b c2 70 a1 59 62 35 da 5d ba c5 bf 64 76 ae d3 b0 b8 6d f4 3f 6a ab 7b 47 ed d4 16 95 bd 74 e2 6d 51 bb 5a 75 52 54 b5 65 33 29 d2 bb 19 b2 ed b6 4d 9d bb 4f 1b 76 b6 b5 e5 9b 0e 3b 68 5c 6f d2 d8 b1 61 b4 35 68 Data Ascii: ]2!8t=+e9y@lVvi/e^pY#9=lei[I,JsH&5U}y#!$2drQviy$w hvd;?ReGE8*FKpYb5]dvm?j{GtmQZuRTe3)MOv;h\oa5h
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 34 b4 e1 46 19 04 fc 74 ff 00 8a 42 8b 6f 21 c0 99 09 3e 24 8d 0c 53 97 2e dc 10 d3 6d 38 10 48 c4 ac b3 19 18 a6 ed 82 44 95 2f c0 18 e1 d2 b0 c7 b4 af 9d 41 e7 f0 15 1d 4f c3 f0 a5 26 7d a5 0f 71 fb a9 fb 12 e1 c4 0a 7c 23 09 c5 ce 40 fb a8 d9 3c e1 fe 18 98 e0 a9 d2 39 e9 4d 5b 1c 20 00 64 7a c1 7c cc 66 27 81 8a 7a d5 d3 83 0a a3 3e f6 99 e9 46 d5 e3 84 13 a7 01 1f 91 a5 3b b3 5b 52 82 94 57 29 88 85 01 ef cb 33 97 1a 76 d5 24 64 98 29 c8 11 ae 94 6d 54 95 05 01 9e b3 cf 30 73 af 46 41 ef 28 92 47 ce b7 09 20 48 81 d3 23 ef d6 92 da 50 21 30 3c be c1 a7 58 4a 40 5e 3c bc 0f cc 56 5c be 82 99 a7 90 10 0a b4 09 1a 52 8c 9d 3e d3 d3 6e 7f cd 3e e4 fe 14 6f ef 24 0c 4a ea 42 9b e9 c0 89 3e 55 66 f6 fd 94 a8 fa e9 ee 2f c4 68 7f b8 41 f8 53 e8 0a 11 03 24 Data Ascii: 4FtBo!>$S.m8HD/AO&}q\|#@<9M[ dz\|f'z>F;[RW)3v$d)mT0sFA(G H#P!0<XJ@^<V\R>n>o$JB>Uf/hAS$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50362	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	698	OUT	GET /xxrz/250x400/793/52/99/5299dcaeb71225b45ac215eb6bdcdf7c/5299dcaeb71225b45ac215eb6bdcdf7c.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:12 UTC	732	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/jpeg Content-Length: 56220 Connection: close Last-Modified: Wed, 24 Apr 2024 03:54:49 GMT Vary: Accept-Encoding ETag: W/"66288289-7d9d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5343 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3mnO845P%2BNR5an%2Fkp56uzA1zP0LL1uMa1%2FaYJtYJMCbDvxnrQ33uSQCS%2BVlFZmhqW%2FtBbqyU7Oc%2B%2BylHED1uuZHIt8DTC4La9%2BhMIITfjOjULi3jKy%2BZ1uBKQmWHlzLJsL6R"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8eecded335b-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:12 UTC	637	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 2b 2e 13 48 39 12 80 d3 59 ae ef 42 32 ad b2 47 88 b0 a8 02 78 6f d3 67 44 34 67 13 ac 2e 78 ca 80 ee 41 0d ee 66 91 cb 88 57 b1 54 8f a4 e6 29 6b 3e 5f 63 38 45 c9 da af ad c0 6e 08 50 70 70 85 82 16 31 91 3c b1 26 54 b8 a1 e9 a9 c3 58 04 52 92 14 f6 69 42 b8 db 52 8a 31 c1 cd bf da a1 d8 2c 8d a5 96 e3 b1 00 27 64 a4 3c 75 32 ac 93 ae 2d e2 6c f8 eb 26 b1 7b 24 f3 6a c6 17 21 03 a6 ce 50 89 c9 8e 10 ae 2a 65 44 3b 52 cc da e7 b8 8c 99 d2 88 fb 5f 1e a6 bf e6 39 28 8b 44 6a b3 71 11 05 0d ca a4 69 76 58 ad 99 91 2a e2 84 44 91 98 cc 26 b6 d1 44 64 93 c6 3c 45 7e 58 b3 eb ba ba cf f9 3b 1a 16 70 37 56 70 ce ed cf 3d 5b 84 67 d5 0c 6e bc 03 c2 f2 7d a4 3a d6 73 45 6c bd 44 d1 69 b4 a7 a7 8f 39 6b 57 d6 7d 5b 04 d3 88 61 66 14 9a 49 5a 1a db 11 ba 24 76 c2 Data Ascii: +.H9YB2GxogD4g.xAfWT)k>_c8EnPpp1<&TXRiBR1,'d<u2-l&{$j!PeD;R_9(DjqivXD&Dd<E~X;p7Vp=[gn}:sElDi9kW}[afIZ$v
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 71 6b 1d 21 66 55 dc 5e f1 79 e5 b5 fc 40 5d ba 3e 62 d8 b1 00 cd 6d 14 ae f9 3d 39 b3 04 44 65 75 69 4e 1e 94 1e ce 2b d2 be 56 5d 02 73 f3 46 59 27 80 b0 29 e2 bd 9c a3 c2 35 1f 52 67 3e b3 7e 81 d3 79 aa be 15 df f9 f5 82 74 52 79 bd 95 a6 51 28 54 0d 06 b0 15 5d 11 41 ed 56 64 b5 07 9e c8 da 92 22 cb e4 1b d8 91 bd a8 8d 60 1a 2e ca 64 aa 45 99 fd 4c e8 e3 aa 78 3f 23 08 16 62 74 e3 88 5f d2 d0 f1 c4 81 8c b4 f2 ca 43 90 35 71 ee c5 95 e4 bb 1a a8 f6 0f 9a 30 81 f4 9f 34 fa 8f e5 a4 9c bd 7c cd ec bf 3a 3a 4e 4a 53 8d 7a 06 fd 65 1e 6c a2 58 8a 65 2d 6d 0f e8 7f 2b a3 2c 4c fc bf 5b af 40 6f 44 b2 89 62 3d 94 f4 56 63 f9 26 34 41 59 89 92 3b 65 81 07 0f 03 db 3b 67 6f 7c f2 d0 26 e0 6d 7a 8e 64 90 86 12 9a db 61 c2 ca 6d 77 0b 65 6d 16 d5 a5 28 9d 64 Data Ascii: qk!fU^y@]>bm=9DeuiN+V]sFY')5Rg>~ytRyQ(T]AVd"`.dELx?#bt_C5q04\|::NJSzelXe-m+,L[@oDb=Vc&4AY;e;go\|&mzdamwem(d
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 59 b6 b2 d8 71 21 4d 19 8f 6c 4a 1e cb 63 da a8 78 82 1a 3d 92 34 3a 04 b6 09 b2 06 c9 69 c6 52 a4 e5 5c 76 cc e1 61 5f 26 0b af c6 51 82 69 68 11 23 1b c2 2d 53 89 11 a0 ae 32 5b 7d 7d e3 f7 eb dd 06 4f 30 6f 85 c3 22 0e 36 a4 aa 33 bd 14 72 3f 19 92 3a 21 76 4c 98 62 53 ad b9 4f 68 9b 06 56 d8 36 88 81 75 21 f8 98 d2 01 20 12 41 24 12 01 20 74 06 40 d1 f0 a6 4f 77 18 c5 75 db 76 3c 7b ec d4 ee 20 ca 4d 38 df 84 e1 47 ea 95 c3 6d e0 55 0d 34 e1 30 da 07 8d 00 d0 c9 13 91 c8 c3 b1 d0 90 f3 5a 39 32 25 07 9b 9a f9 46 a7 51 ad 8a f2 6d 0d 25 71 dc 83 24 a6 36 b6 cc c9 e6 95 b3 25 90 ee f8 d0 22 04 12 40 93 b1 e3 1e 2f 9f 08 f0 e8 1b 60 9a 13 68 59 74 49 af 52 56 9a ef 92 ae d9 48 84 e1 0f 68 e9 82 84 a1 ec 36 3d 91 85 d7 36 69 7a a9 a2 0f d7 b6 42 64 25 74 Data Ascii: Yq!MlJcx=4:iR\va_&Qih#-S2[}}O0o"63r?:!vLbSOhV6u! A$ t@Owuv<{ M8GmU40Z92%FQm%q$6%"@/`hYtIRVHh6=6izBd%t
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 8e 53 a4 b5 c1 8a a9 0b 85 d1 a2 74 90 f3 49 9c a8 cf f1 17 25 96 6b 5c 4a 04 a1 bf 42 f4 d8 23 1b f5 d8 33 06 60 cc 38 64 1c 59 10 6a 74 49 88 cc 39 87 0e c4 64 65 3f c4 6f b9 89 89 60 b6 b9 56 43 96 f2 c3 50 c7 f2 ab 96 64 82 6c 8d ad 84 2f a8 de d5 5e 94 93 2d 99 91 c7 71 3d 70 ac 71 57 d9 26 01 c5 d4 f8 1b c4 08 c3 d3 22 46 70 17 da 66 0c c1 85 18 50 51 85 98 cb ad 1c a6 c6 f1 9c d6 d2 af 14 b4 42 59 b0 54 46 bd 86 1f 07 35 cd 6b 70 be 3d a2 c2 22 8d 8d 8d 86 88 94 ba a7 fb 25 07 a0 4a 31 c6 b8 dc bc d3 20 6c b4 92 04 63 f8 81 bc 6f f5 3a b9 5b 2d b0 bb c3 f3 b8 d7 ed 0d 8d 8d 8d 8d 8d 83 06 16 61 63 95 b2 28 b8 e6 29 c6 8d 54 e7 4a cb b8 2f 36 a7 95 fc ae ce d1 1f 0f a0 8f 8c e3 66 35 e8 41 94 77 1a 31 0d c0 d3 dd c9 4e 19 97 f0 f7 8d 50 cf 9a 46 36 Data Ascii: StI%k\JB#3`8dYjtI9de?o`VCPdl/^-q=pqW&"FpfPQBYTF5kp="%J1 lco:[-ac()TJ/6f5Aw1NPF6
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 87 ab 63 73 3d 7c 3a 77 b9 1a db 26 b5 ca 73 c9 96 82 86 5a df 29 b2 90 6d c5 41 a9 aa ac 92 d2 9e c2 c7 23 bb a2 a6 83 c9 15 53 5b f3 61 76 21 e9 3f 56 91 29 77 11 a2 3e 56 81 a4 49 40 34 cb df a9 6c 87 70 d2 93 ba b8 8d db 47 79 52 61 cb c4 f9 5d fe 8e 72 9e 29 1d 8b 2e 57 af 44 5c ae d8 e6 c9 6c fe 63 2b e1 fe 14 80 e4 69 d1 1e 66 4d 07 14 cb b1 a0 8f c6 73 df b1 46 23 4f 8d 4a b1 a7 c2 66 11 e3 d2 2b 22 aa 62 de 5b 2e 29 2e b2 8e f6 19 f4 b5 38 d2 9b 5b c1 c2 62 bd 89 36 32 5e 79 9b 94 b6 19 cd 5f d3 f9 0b 32 98 f9 fb 49 43 b1 0a f9 de cd 56 97 15 16 aa 8f 75 56 db d6 de e5 89 a8 94 e1 49 75 d3 75 c6 c6 3a ca 65 5c 4e e4 9a c6 63 cf 69 52 2b 30 cc ba b6 1d 05 8c ec 6a ed 9c a7 8b 5b b6 6a cf 0a 9d 58 4a 90 f2 1b 8f 51 62 f2 3e 9b 30 9c 7d 78 ed 5c 79 Data Ascii: cs=\|:w&sZ)mA#S[av!?V)w>VI@4lpGyRa]r).WD\lc+ifMsF#OJf+"b[.).8[b62^y_2ICVuVIuu:e\NciR+0j[jXJQb>0}x\y
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 7b 88 7c 0f 6e c0 8e 39 de 8b bc a7 08 19 07 f1 0f 9c d3 db be af 0e 0a e4 6e 76 e3 e5 bd 28 d3 ce 9e 0e f3 8f 1e b4 f1 14 3e 7c 8d 1c b7 13 c3 e7 f0 ac aa 9c 03 56 57 06 6f 03 7b 40 64 1e b4 cb a6 b5 f9 1a 03 15 7d 7e 96 26 00 e8 5c 4c cc 32 08 1a 42 e9 c9 df 8f b5 5b 10 0f 51 9f c6 97 b5 6d da ee e2 d8 82 16 d9 24 77 9b 23 4e 22 c6 af 08 c9 e3 b7 3a 4b cb 99 11 65 87 b3 67 78 9c 65 1c cb 0a 16 5e 47 4b 36 45 5c 76 9d a8 86 39 24 85 fc 53 9b 77 0c 00 92 09 17 db d5 c4 60 01 c4 1f 85 5c d9 2c 28 f3 ec d1 84 ef 32 36 f0 f8 4f e3 44 24 81 16 24 2c ef 1a c9 a4 63 65 61 b6 e6 85 b8 56 45 91 0a 77 9b 29 66 0c 33 b7 4e 1e b4 96 f1 4c 9a d0 60 6a 65 3e f5 20 54 b6 e8 59 63 d1 b9 52 46 fd 00 a9 6c 14 fb 58 4c f4 5c f4 e9 49 68 a8 30 0f d9 51 5b 2c 7f 49 c0 73 a5 Data Ascii: {\|n9nv(>\|VWo{@d}~&\L2B[Qm$w#N":Kegxe^GK6E\v9$Sw`\,(26OD$$,ceaVEw)f3NL`je> TYcRFlXL\Ih0Q[,Is
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: d8 f2 a4 92 5b 5c 99 4e a8 40 f6 b0 01 53 c8 8c 54 77 d0 49 c1 c7 1c 6d 5d ab da 73 7e 93 05 95 9b 37 8b 4b cb 22 71 d2 78 01 d1 42 82 cc 79 e4 74 a8 7b 4e e6 1d a5 5e fd 14 7b 43 f6 f8 e5 8e 08 e4 74 3a 49 cf 1a 6e dc 75 77 cc 7e 1c fd 1a 36 52 6d 38 1f ba d9 d5 e4 41 c1 e4 4d 49 da d2 5d fd 09 d5 04 32 68 c3 ba 78 58 ac 80 90 76 38 c8 1f 11 bf 50 dd bb 25 8c 93 40 cf df 3f 7d 21 cf 77 dd f8 49 1a 57 1b fb 0b 85 ce 7c 58 ce 06 71 47 b7 27 f0 dc a2 e1 a5 1d d9 cf 0d 31 10 46 3d fd e1 cd 2f e5 0d c6 30 63 cf b8 8f 2e a2 85 c2 f7 ac ad 94 2c 7c 3a fc 21 8f d5 04 ed 9f 7e 2b b5 7b 4a 3b 68 dd 06 a2 db 0d 40 65 01 c8 ca b3 7e ef 99 df 14 7b 5e 16 9a f9 35 ba a4 b0 45 0d b3 05 fd e8 9d 59 94 ff 00 ac 3a 9a bf ca 32 a7 7b 84 3e 24 28 09 d5 c1 b1 ab 6c f4 f9 da Data Ascii: [\N@STwIm]s~7K"qxByt{N^{Ct:Inuw~6Rm8AMI]2hxXv8P%@?}!wIW\|XqG'1F=/0c.,\|:!~+{J;h@e~{^5EY:2{>$(l
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 23 69 42 54 28 f3 df 95 34 b1 23 7d 11 ef a4 b8 8b bb 02 3f ad a7 da 6c 91 81 f1 ab 4b 5b 8b 6b 74 8c 47 e2 8d 9d 80 f1 fb 4f c5 bf 67 c4 0d 81 cf 33 50 06 b7 73 df db 33 96 cf 8d f2 75 8d b5 63 48 38 e5 c7 d2 9a ca ca e0 f8 90 a1 f2 91 b1 f0 39 fb ea 3e cc 45 1f 44 ea 01 c7 11 ab 87 a8 eb f9 88 cd 11 8a 65 a7 0a 8e 8d c3 2c 06 79 2e e3 8d 30 c6 2a ed 0b c4 50 32 2e b0 41 32 60 26 36 e3 92 2a 68 56 3e 17 56 d9 e7 dd 21 3e 1e 43 56 e3 d4 7a d1 31 ab fb 61 86 46 a5 20 00 7e 39 a8 1b b1 e6 84 81 07 75 2e 9e 03 63 c4 7b 12 0c fa ec 29 7b 3e c2 44 5c 09 24 39 1c 64 d9 78 12 09 73 b1 f7 0a 8e 39 ff 00 4c 40 c9 1a c1 1c a1 63 d1 8d 5a 4a 78 75 10 77 27 1e d7 d9 f9 ae b2 d2 5b a8 93 bb 3a f5 0d 98 ea 60 40 03 60 7a f3 c5 4c 24 ef 99 a1 f1 8d 4c 70 39 6f fe 15 6e Data Ascii: #iBT(4#}?lK[ktGOg3Ps3ucH89>EDe,y.0P2.A2`&6hV>V!>CVz1aF ~9u.c{){>D\$9dxs9L@cZJxuw'[:`@`zL$Lp9on
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: b0 df f1 8a c3 d8 60 31 22 f7 bb 45 f5 6b f5 d6 1d bf ba 63 0f 05 11 5f cd ab 0a ee f8 7c 70 8c 16 7e a9 2c 00 27 db 1c 85 60 60 c4 0c 54 25 e2 90 26 7d 49 52 07 aa 7b a9 db f4 92 8e 52 3f db 6a cf dd f5 ff 00 4f 46 13 fc 17 48 ff 00 04 1f f2 56 1d e3 38 34 c6 b1 bc 98 28 a5 81 57 99 7b 75 1e ec e7 df 58 1d 70 b0 1f fd a4 47 fd 82 b1 5f e2 71 1f cf 97 ed 9a 63 fa 37 1c fa 1e 31 fe f5 ae 8d 90 cf d5 44 7d 7c 2e 21 31 11 ff 00 29 98 2c aa 39 00 72 91 be f5 d2 0d fd d8 69 fe a1 8a 3e fa e8 d9 5d 53 1f 63 be 14 fd b4 ae 91 c4 06 c5 28 3f f8 d8 6f f8 96 b0 d2 29 e8 fc 59 e4 f8 7f 8d 61 6c 70 38 f2 0f 08 3e d9 ac 18 64 c2 f4 83 2b 59 84 29 62 2e 0f af dc 6b a3 e7 99 b1 90 29 96 42 a5 f5 52 ec 41 ec 9e 66 a5 fd 6c bf cd 93 ed 9a cc 68 c7 05 82 fd 1e 12 a3 60 50 Data Ascii: `1"Ekc_\|p~,'``T%&}IR{R?jOFHV84(W{uXpG_qc71D}\|.!1),9ri>]Sc(?o)Yalp8>d+Y)b.k)BRAflh`P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50361	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	698	OUT	GET /xxrz/250x400/793/90/b0/90b051bb3db7aefe1c46a855e18305a6/90b051bb3db7aefe1c46a855e18305a6.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:12 UTC	717	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/jpeg Content-Length: 88636 Connection: close Last-Modified: Wed, 24 Apr 2024 14:37:02 GMT Vary: Accept-Encoding ETag: W/"6629190e-15505" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6955 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EJFPRFW4zX88zCQHMU1HhskmY9AtsUyZJNUhkfYszf%2BeLNkCGl8zsrzwq04ORaJejyGFp9Vqz9GiLzGU2smSiEbAF74kF3DDsjTuBuPqPCF83Um9cpcGvrc52aIJreHcPdjE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8eece81dab9-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:12 UTC	652	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 9d cb f0 bd 40 b8 bc c4 aa d0 67 fd 02 55 1a 08 05 f2 cf d0 ed 70 e6 38 67 cb 0c 5d c5 fc b8 db 09 5d d3 ab 7d f9 eb ea 2f a0 47 b7 95 d6 94 ea 59 2f f2 06 fc d7 1c af 5d 1d 21 e9 02 5e 87 41 7b 01 27 8c 52 5a 39 c0 49 1d 3d 26 3d f5 89 d5 1e e1 0d 29 d5 22 bf 27 49 fb c1 c5 4b a0 0c e5 5d 67 bd 36 ab 03 50 cd 81 f6 8f cc 4d e2 24 d6 73 27 c3 38 41 45 7b 81 75 6f 66 fc ca 4c ff 00 4c 15 e6 f0 3f 9d 7b a5 d6 c2 54 b2 fe 6d 0d 7d 5a be 3f 7d f9 b6 ec 80 76 f3 64 30 3d e5 ff 00 59 19 aa b7 86 1d dd cf 5f 92 8e 80 6f 1f 3f 7e cb d0 1e 23 19 ea 36 c8 53 0c d1 2a 34 b4 f0 db f5 47 9e 6a 68 9b c3 bd 84 b4 82 07 cb 3b 05 fd fd 03 7e 4a 7f 55 d8 07 0f 78 f7 da d1 c0 d6 d3 54 44 5f 15 b8 05 b8 e6 9d ec a1 91 25 d3 2e 49 75 82 9d c2 0e 9b cd d5 5a e0 f3 ab 51 42 6d Data Ascii: @gUp8g]]}/GY/]!^A{'RZ9I=&=)"'IK]g6PM$s'8AE{uofLL?{Tm}Z?}vd0=Y_o?~#6S*4Gjh;~JUxTD_%.IuZQBm
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 52 75 cf a0 25 e3 48 ce 4f 51 85 52 ad f9 d0 2e 71 f3 d0 c8 b4 ae 2f a4 a7 41 81 c7 80 2f 3b e9 70 86 b5 c8 ce 8c 0a 2e d3 f5 ad 0d 79 a0 1b 24 f6 b6 1d 99 21 f3 d2 a2 27 52 d8 57 08 3c e5 d1 d4 4b 4a e2 1c 5a 66 29 82 30 ad f5 1e 62 6d ac 52 1d 97 0f de 06 91 03 0c ac 8d 12 bb 31 b6 f2 82 33 cc 19 ce ca 49 da 46 3a 21 2c 0f d5 a9 2f b2 9c 8c 9c 5d a3 a2 e7 c2 27 b0 ae 7d d2 03 ce 51 f7 e3 62 c2 c8 94 69 66 4a 5d f5 26 88 d8 b5 1a ad 13 cb 2a 27 88 08 d8 0d 1e 97 08 5e 43 b6 12 8c 81 53 e0 26 b9 24 6f eb 50 93 a9 85 d3 a8 f9 55 c0 a4 1c 8c 2c 63 52 1e c5 95 20 65 40 50 a9 06 df bd 56 9f 4e a8 cd 56 29 d4 cb c5 9b 50 3f c2 56 d6 0e 40 1e 25 be 8f 14 35 e6 4f 28 ab 72 79 1b 1a 5c 7b e5 b6 33 0b 31 41 13 74 4a bc 64 df 5f 4b 83 02 4e e1 eb 9a 64 d0 3c c5 8e Data Ascii: Ru%HOQR.q/A/;p.y$!'RW<KJZf)0bmR13IF:!,/]'}QbifJ]&*'^CS&$oPU,cR e@PVNV)P?V@%5O(ry\{31AtJd_KNd<
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 30 e7 2a a6 97 13 af 38 e6 4e c5 36 f9 6e b7 b1 af 6e dc d8 65 59 4e 62 81 18 c7 b9 f9 c3 6a 63 6d 26 dc 40 cc f2 57 ec 96 d7 f6 cd b6 cf 69 eb eb 63 f0 07 fb 2e 6e b8 57 6b 6e b6 af 6d 64 51 63 91 b1 7a 94 d5 d6 e1 d3 d3 3e c3 7a 62 bc a8 17 44 26 e1 7f f1 af a7 f3 0f d4 30 ca 41 ae d2 43 1d f5 25 b8 6d a3 cc 08 25 86 c2 ce a2 92 14 41 24 58 1b 85 92 c2 8d 57 b2 4a 2b 6d c9 fb 84 01 b6 f7 1c c5 b2 ab 1e 9d 75 ba 99 9c 98 27 c7 6e a3 64 54 5b 95 8a ae 4f 47 91 6d ce 6d 8e 07 6d b1 56 e2 78 ee 49 6d f6 9a d5 a0 cb 33 bc 87 16 c6 ab b1 3a 7c c3 2a 8f 8f 41 ce 33 f9 59 0c a6 c8 2b 82 e8 ce 72 aa fc d6 de 4a ae 77 d3 de 48 6b ab ee 48 ab bb cd eb 92 fd c8 51 ac 64 79 4e fc b6 ad b2 28 f6 e3 6d b2 bc 56 fe 64 8b 88 cc ca f7 68 b6 6d a9 cd ae 31 cb 49 9b a7 91 Data Ascii: 08N6nneYNbjcm&@Wic.nWknmdQcz>zbD&0AC%m%A$XWJ+mu'ndT[OGmmmVxIm3:\|A3Y+rJwHkHQdyN(mVdhm1I
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 14 3b 1b 5f 3f 1d 94 e7 47 ab 13 1a f8 0a 72 9c 90 6b de 53 92 42 f8 fa eb 96 a6 95 55 57 fa 09 89 e1 e8 ed 65 f0 d0 a6 9e 15 14 83 ff 00 2e 8a ed 35 a2 66 80 79 1a fc d9 a6 b9 9a 91 0c 65 c7 59 cf 63 3e 74 dd 2b 7a bc 4d 33 04 11 4b 7b 8a 19 2a e8 d0 7c b2 fe dc 06 98 ed 6c 8d 09 a0 48 f3 db 29 fa 2b 8c cd 0e 71 0c 29 1d f4 f7 95 34 f7 11 75 c7 f4 4f e8 9c 72 de 5a 25 72 31 6f 84 a4 d5 a3 b9 71 9a bc 89 0a cd 0e 29 4b a3 47 f1 a0 06 06 32 22 09 fa 7b a3 b6 ba 5b 21 4e 70 e0 84 30 c7 08 6d 27 25 54 6b 11 8a 83 ec d8 8a 8c 94 6f d4 3f 2b a4 72 ae 91 9d dd ea f6 27 da 1b 22 3c a8 e6 16 8c 35 e5 cd ff 00 8b 13 e5 13 4a 5e ab 67 29 85 6d c0 fa 91 ff 00 2e 7f 1d 63 db 4a 03 a2 b6 1d 88 64 56 3b c3 1c 22 8c a7 73 e4 b9 b1 55 35 c7 2a c6 2a e8 60 ea d4 17 65 58 Data Ascii: ;_?GrkSBUWe.5fyeYc>t+zM3K{\|lH)+q)4uOrZ%r1oq)KG2"{[!Np0m'%Tko?+r'"<5J^g)m.cJdV;"sU5*`eX
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 11 18 79 4f 4f 5f ed 64 7c 45 1b 5d a7 31 c8 91 ff 00 f6 d7 27 06 03 1a a3 ac 42 a9 ce e1 69 7c aa b4 8e 57 52 e5 2b db 47 47 a0 ad d8 a9 5e aa 9d 85 fc 5f c7 91 87 77 8d aa e4 91 5c d4 2b ac 82 54 d3 9e aa ae 93 eb 8e 7c 86 f9 c7 90 42 88 b0 73 01 8e 41 72 54 70 eb ec e1 ce 8d 43 39 a7 8f 62 16 86 fe d1 aa 49 e6 63 9e 59 ff 00 11 21 29 47 05 91 60 86 58 57 6d 46 d6 d9 60 21 74 db 4c 25 6c 7f b8 b0 7d 2d c6 df 13 57 ee a8 2c f6 cd 23 5b 8f bd 5f 53 93 2a 6a 43 f8 89 64 f7 3e 22 ff 00 21 7f 8b ff 00 d9 bf 2e 86 20 91 94 66 f2 8e cf f3 82 91 e3 19 6f 63 ce 7d 54 0c 5f ce e8 78 8e 00 46 44 a8 c1 22 1e 70 b0 f0 29 b0 7a 49 3a c7 6a 66 51 93 2b 32 3a d6 50 58 e9 6f 46 b1 87 51 a4 6a b9 ad 23 25 4c 73 4f 4b 32 2f 3c 47 72 d9 0a 27 f7 53 9d 0b dd 99 e8 10 36 6a Data Ascii: yOO_d\|E]1'Bi\|WR+GG^_w\+T\|BsArTpC9bIcY!)G`XWmF`!tL%l}-W,#[_S*jCd>"!. foc}T_xFD"p)zI:jfQ+2:PXoFQj#%LsOK2/<Gr'S6j
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: b5 87 1a 01 51 d4 c2 f0 db 53 41 72 5d 41 90 56 4d 9c 20 4a d6 6b b4 2d 38 cb 8c 64 22 2e 29 87 44 a3 91 d9 5e 03 b9 4a 18 87 49 51 2b a5 a0 a5 6e 14 20 c9 8a c4 65 15 85 a4 d7 3c 96 3d cb 2e e1 9d d2 c1 38 93 09 fc 2b ca 89 1a 11 5b 28 5e 24 66 a0 37 cd 22 81 cb 1c 27 72 bd ee 2f 94 35 ef 6a 9a 6b b4 51 23 a5 27 e1 5b 5a d7 70 ce a0 96 68 ed 2e a1 3b b5 bd 74 a4 91 4d 57 d4 73 8d 18 56 b2 43 28 b1 c8 91 9d c0 4e f3 e9 ef 10 1b 32 f6 b7 d3 83 91 92 36 45 26 7a f3 25 82 bb a3 9b 59 0e f8 96 18 e9 9a eb b8 45 8e b6 68 44 d4 f1 ab d9 19 88 af f5 12 58 6b c5 eb 89 fc 10 31 62 ba 44 a8 c4 74 69 8f 33 1d a9 06 41 16 bd eb ed cd 55 ed 29 a8 8d 90 f1 ba 4c 72 b8 0b 31 ac 20 9b 30 6f 65 14 74 b0 b2 41 c9 0d 5d 4d 83 49 0e 9e 68 5c 8e 40 4d 88 da bb 24 6a cc 48 ac Data Ascii: QSAr]AVM Jk-8d".)D^JIQ+n e<=.8+[(^$f7"'r/5jkQ#'[Zph.;tMWsVC(N26E&z%YEhDXk1bDti3AU)Lr1 0oetA]MIh\@M$jH
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: 5a 9b 54 c7 d7 68 d5 db 45 2c 54 b2 39 8c 75 58 1f d3 3a 1e 18 54 a9 91 21 0e b1 8e 1a ca 96 93 08 bf 57 64 33 4d 7b 4f 5e e2 9e 11 df 69 11 5e 57 df 7b c1 49 61 7f fb ce 33 f6 46 9a 7e 1c 51 54 34 8d 21 e2 47 c1 10 47 a5 5a 75 73 76 43 33 ab ac 31 f6 47 11 82 3b b2 9d 01 19 59 ad 97 e4 79 96 67 32 8a 3a 53 c4 25 19 22 a0 eb 35 f2 46 0a a3 2e ae 02 c9 24 6f 62 1b 5c c6 99 37 bf a3 1b 63 3a 82 bf 26 af 93 2f ad 4a 61 55 12 43 23 23 43 47 3c c9 c5 8c 38 15 92 46 1d 56 b3 93 49 10 77 08 1d 01 91 9f 5e 13 25 ac 7c 96 6c e2 a6 18 e0 a5 a6 92 2e 2d 4c 70 a4 4a 1a 7b 04 a5 54 53 12 54 54 b7 12 19 74 28 0d 12 48 a6 49 2d a8 22 45 4f 50 4a c5 2d 55 c2 97 62 69 13 4a 28 b5 dd ca d5 31 0a 3b cd 8f 30 00 2c 54 19 22 d0 ed 1c 87 b5 1b ba 1d 26 e2 ea d6 36 3d e3 c0 f8 Data Ascii: ZThE,T9uX:T!Wd3M{O^i^W{Ia3F~QT4!GGZusvC31G;Yyg2:S%"5F.$ob\7c:&/JaUC##CG<8FVIw^%\|l.-LpJ{TSTTt(HI-"EOPJ-UbiJ(1;0,T"&6=
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: fe a6 cd 24 7c 16 35 74 54 f5 0c 62 e5 c3 13 32 0a 81 18 ff 00 0c 4b c3 ee 2a 46 d8 a9 aa 35 7c 1a a6 8a 9a 19 24 33 c6 e2 96 9a 1a 58 8e 89 04 80 f0 60 44 8c 11 d6 0a 83 a4 1d 0a 80 df 1d 1a e9 2f f6 68 b5 42 51 c7 55 24 f9 65 64 34 db 37 1a 1a da 87 92 24 aa 42 0e 92 13 83 4f 1b 82 a5 84 5c 4e 19 bb b8 6e ab 57 43 45 2d 7c 94 d2 16 92 55 a2 32 11 d9 a4 35 51 48 e5 a6 27 fd e6 78 92 41 14 17 32 ac 6e d3 c8 13 d0 eb c9 a2 a0 4c a7 36 ae ab 9c 23 a5 1c d1 d3 c4 8e 63 9e a2 aa 61 c1 a3 a7 8c a1 0e b1 71 1e 4a aa 96 4d 24 c3 4a b1 17 11 ca ea dd 18 ae 83 2e ad 8e b1 e3 96 a6 54 96 31 4f 0c 56 e2 49 3a a4 d3 53 76 cd f4 2a d6 43 4a ef 21 07 4a 06 d8 b1 5c 54 49 3d 66 67 35 49 95 6a 25 15 d2 d5 cd 38 91 f4 b8 59 8b 4a fc 6b 34 84 3a 96 01 c0 32 35 d4 af 68 8c Data Ascii: $\|5tTb2KF5\|$3X`D/hBQU$ed47$BO\NnWCE-\|U25QH'xA2nL6#caqJM$J.T1OVI:SvCJ!J\TI=fg5Ij%8YJk4:25h
2024-04-26 18:33:12 UTC	1369	IN	Data Raw: ad 42 f7 b9 2e 63 86 36 36 bd ef 8c c3 a2 b9 85 2c aa b5 35 2b 24 11 c6 a8 20 8b d1 2b e9 22 cd 23 2c 4a 58 1b 0f 47 61 17 3b ae 12 0e 10 0a 2c 8a 06 c1 47 b3 91 3b 58 79 00 3b ad 8f cf 9f e8 f7 db 19 b4 57 8f 50 de e9 bf 96 26 83 5c 6c 07 67 fe 2e 5e 47 13 25 6c 0b 76 b9 5e e6 88 9d 24 8b 7a ca 39 1f 68 f2 e6 71 08 ac 9a 39 3f 51 9e b0 bf 67 81 12 be e8 05 ad b7 ab b9 bb b1 b8 b7 60 06 27 14 88 28 d2 48 8a cd 79 26 92 67 8a 71 e9 52 59 1c b4 8a c6 c0 83 ac 93 dd f7 0c 30 24 ed 75 1e 17 bd fd a7 f1 c6 8f 2c 70 99 7e cd 87 8e 19 47 ac 6d e6 6f 80 2f fc 80 be 12 9d d9 35 18 a5 d0 db 6b e1 36 9b f9 3d ad f0 c2 67 b9 7d 6e 59 04 75 d3 18 2b 60 89 22 93 89 1b 91 30 8c 05 59 03 2a 91 76 03 b4 0e fa af dd be 25 5a 77 3e 8a 54 6b f2 d9 97 c3 f7 ad dd 87 85 97 b8 Data Ascii: B.c66,5+$ +"#,JXGa;,G;Xy;WP&\lg.^G%lv^$z9hq9?Qg`'(Hy&gqRY0$u,p~Gmo/5k6=g}nYu+`"0Y*v%Zw>Tk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50357	52.55.144.0	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	461	OUT	GET /match?uid=6f67744e-1091-4048-adba-e024cc18f2d2&bid=1e2n4ou HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18f1bae1d9d-42c70000010a45f6; SERVERID=17910~DM
2024-04-26 18:33:12 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=17910~DM; Domain=eyeota.net; Path=/; Expires=Fri, 26 Apr 2024 18:43:12 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Fri, 26 Apr 2024 18:33:12 GMT
2024-04-26 18:33:12 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50354	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	700	OUT	GET /398646.gif?n=1 HTTP/1.1 Host: rc.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=4gcQgc4F+lGOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYImLsrEBo=
2024-04-26 18:33:13 UTC	812	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=zbVI3ujrmHGOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 18:33:12 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuOsBECsSBgiYuysQGg==; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 18:33:12 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	50356	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	622	OUT	GET /117405/Resources/dist/Resources/js/WebCommon/Vue/vue-class-component.min.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:12 UTC	546	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 753137 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:12 GMT Etag: "35fd2079c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:16 GMT Server: ECAcc (mic/9BA9) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 3922 Connection: close
2024-04-26 18:33:12 UTC	3922	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 76 75 65 2d 63 6c 61 73 73 2d 63 6f 6d 70 6f 6e 65 6e 74 20 76 37 2e 32 2e 36 0a 20 2a 20 28 63 29 20 32 30 31 35 2d 70 72 65 73 65 6e 74 20 45 76 61 6e 20 59 6f 75 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 70 2c 63 29 7b 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 63 28 65 78 70 6f 72 74 73 2c 72 65 71 75 69 72 65 28 22 76 75 65 22 29 29 3a 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 76 75 65 22 5d 2c 63 29 3a 63 28 28 70 3d 70 7c 7c 73 65 6c 66 29 Data Ascii: /** * vue-class-component v7.2.6 * (c) 2015-present Evan You * @license MIT */(function(p,c){typeof exports=="object"&&typeof module!="undefined"?c(exports,require("vue")):typeof define=="function"&&define.amd?define(["exports","vue"],c):c((p=p\|\|self)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50355	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	606	OUT	GET /117405/Resources/dist/Resources/js/WebCommon/Vue/initVue.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:12 UTC	521	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 753137 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:12 GMT Etag: "15882079c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:16 GMT Server: ECAcc (mic/9BA8) Strict-Transport-Security: max-age=31536000 X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 55 Connection: close
2024-04-26 18:33:12 UTC	55	IN	Data Raw: 56 75 65 43 6c 61 73 73 43 6f 6d 70 6f 6e 65 6e 74 2e 43 6f 6d 70 6f 6e 65 6e 74 3d 56 75 65 43 6c 61 73 73 43 6f 6d 70 6f 6e 65 6e 74 2e 64 65 66 61 75 6c 74 3b 0a Data Ascii: VueClassComponent.Component=VueClassComponent.default;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50367	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	612	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/Ethereum_2x_Long.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:13 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/svg+xml Content-Length: 823 Connection: close Last-Modified: Tue, 11 Apr 2023 16:38:27 GMT ETag: "2027c97aded45b9497802248686a2057" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: vXLV0QvIXa.IanBTJzaE8UDIPaFkTb5. X-Cache: Miss from cloudfront Via: 1.1 6c9274205f681e6532f5f293414b8d2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: pAQw0vrhUv6nwcB7v8ww-bkU8_Wf7kVSaijRudDTAOxSwS4hszhriw== CF-Cache-Status: HIT Age: 19964 Expires: Sat, 27 Apr 2024 04:33:12 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8efd9e02257-MIA
2024-04-26 18:33:13 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 38 20 30 63 39 2e 39 34 31 20 30 20 31 38 20 38 2e 30 35 39 20 31 38 20 31 38 73 2d 38 2e 30 35 39 20 31 38 2d 31 38 20 31 38 53 30 20 32 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><circle cx="18" cy="18" r="17" fill="#fff"/><path fill-rule="evenodd" clip-rule="evenodd" d="M18 0c9.941 0 18 8.059 18 18s-8.059 18-18 18S0 2
2024-04-26 18:33:13 UTC	243	IN	Data Raw: 31 37 36 20 30 2d 32 2e 30 39 34 2e 37 34 36 2d 32 2e 33 30 34 20 31 2e 38 37 34 6c 31 2e 30 33 32 2e 32 33 63 2e 31 31 35 2d 2e 36 30 33 2e 36 31 32 2d 31 2e 30 37 31 20 31 2e 32 32 34 2d 31 2e 30 37 31 2e 36 35 20 30 20 31 2e 31 2e 34 37 38 20 31 2e 31 20 31 2e 30 36 31 20 30 20 2e 35 34 35 2d 2e 33 36 33 2e 39 37 35 2d 2e 37 35 35 20 31 2e 33 35 38 6c 2d 32 2e 36 34 20 32 2e 35 34 34 56 33 30 5a 6d 37 2e 39 30 34 20 30 68 2e 38 36 76 2d 35 2e 32 37 39 6c 31 2e 38 38 35 20 31 2e 38 39 34 2e 36 31 32 2d 2e 35 39 33 2d 32 2e 39 32 37 2d 32 2e 39 32 36 2d 32 2e 39 32 36 20 32 2e 39 32 36 2e 36 30 33 2e 35 39 33 20 31 2e 38 39 33 2d 31 2e 38 39 33 56 33 30 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 176 0-2.094.746-2.304 1.874l1.032.23c.115-.603.612-1.071 1.224-1.071.65 0 1.1.478 1.1 1.061 0 .545-.363.975-.755 1.358l-2.64 2.544V30Zm7.904 0h.86v-5.279l1.885 1.894.612-.593-2.927-2.926-2.926 2.926.603.593 1.893-1.893V30Z" fill="#fff"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50368	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	612	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/Bitcoin_1x_Short.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:13 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/svg+xml Content-Length: 1465 Connection: close Last-Modified: Tue, 06 Jun 2023 07:53:39 GMT ETag: "fbce27c7963b12186e1adef88db8daab" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: Yciz_fbmLD3d23n.J40w_xjDPei998M5 X-Cache: Hit from cloudfront Via: 1.1 344d3cc6f132c3533d8a58d054dcf1da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: b1JfqvZyVDloGUC7kvNviqbX7-cZ9Vy4jSfpfwCPFZ1xAQBgrE7O-A== Age: 19964 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:12 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8efeb425731-MIA
2024-04-26 18:33:13 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 30 43 38 2e 30 36 20 30 20 30 20 38 2e 30 35 39 20 30 20 31 38 73 38 2e 30 35 39 20 31 38 20 31 38 20 31 38 20 31 38 2d 38 2e 30 35 39 20 31 38 2d 31 38 53 32 37 2e 39 34 31 20 30 20 31 38 20 30 5a 22 20 66 69 6c 6c 3d 22 23 46 37 39 33 31 41 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M18 0C8.06 0 0 8.059 0 18s8.059 18 18 18 18-8.059 18-18S27.941 0 18 0Z" fill="#F7931A"/><path fill-rule="evenodd" clip-rule="evenodd
2024-04-26 18:33:13 UTC	885	IN	Data Raw: 39 32 37 20 33 2e 36 35 32 2e 39 37 38 4c 31 38 2e 31 32 33 20 37 6c 31 2e 38 35 36 2e 34 39 37 2d 2e 37 39 38 20 32 2e 39 37 35 20 31 2e 34 31 34 2e 33 37 39 2e 37 39 37 2d 32 2e 39 37 35 20 31 2e 38 35 36 2e 34 39 37 2d 2e 38 30 36 20 33 2e 30 31 31 63 31 2e 33 36 2e 34 35 37 20 32 2e 33 32 2e 39 39 36 20 33 2e 30 34 31 20 31 2e 39 30 32 2e 39 33 32 20 31 2e 31 37 2e 34 37 32 20 32 2e 36 34 35 2e 33 35 20 32 2e 39 39 34 2d 2e 31 32 2e 33 34 38 2d 2e 34 36 2e 39 39 32 2d 2e 38 39 31 20 31 2e 33 35 2d 2e 34 33 2e 33 36 2d 31 2e 33 31 33 2e 35 39 37 2d 31 2e 33 31 33 2e 35 39 37 73 2e 38 35 31 2e 34 33 32 20 31 2e 33 35 37 20 31 2e 30 38 63 2e 35 30 35 2e 36 34 36 2e 37 34 38 20 31 2e 36 31 33 2e 33 39 31 20 32 2e 38 33 37 2d 2e 33 35 35 20 31 2e 32 32 35 Data Ascii: 927 3.652.978L18.123 7l1.856.497-.798 2.975 1.414.379.797-2.975 1.856.497-.806 3.011c1.36.457 2.32.996 3.041 1.902.932 1.17.472 2.645.35 2.994-.12.348-.46.992-.891 1.35-.43.36-1.313.597-1.313.597s.851.432 1.357 1.08c.505.646.748 1.613.391 2.837-.355 1.225

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50369	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	611	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/Cardano_2x_Long.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:13 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/svg+xml Content-Length: 4338 Connection: close Last-Modified: Tue, 11 Apr 2023 16:38:27 GMT ETag: "ac1eb184a27e659eb4c67d563addf430" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: IeByKFufNd_yavrGVyYVcZ1mqkiiRfii X-Cache: Hit from cloudfront Via: 1.1 b03cdde00266d1a718dac82499df6b8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: saazYBiZ3kjKRorIv5fyPRInC7HsPZ_f6bWviZVSFcMH6mgOq-Nf4A== Age: 19964 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:12 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8efef86a65f-MIA
2024-04-26 18:33:13 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 33 36 43 38 2e 30 36 35 20 33 36 20 30 20 32 37 2e 39 33 31 20 30 20 31 37 2e 39 39 38 20 30 20 38 2e 30 36 34 20 38 2e 30 36 20 30 20 31 38 20 30 73 31 38 20 38 2e 30 37 20 31 38 20 31 38 2e 30 30 32 43 33 36 20 32 37 2e 39 33 36 20 32 37 2e 39 33 35 20 33 36 20 31 38 20 33 36 5a 22 20 66 69 6c 6c 3d 22 23 31 42 35 34 37 37 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="36" height="36" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M18 36C8.065 36 0 27.931 0 17.998 0 8.064 8.06 0 18 0s18 8.07 18 18.002C36 27.936 27.935 36 18 36Z" fill="#1B5477"/><path fill-rule=
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: 33 2e 37 33 20 30 20 30 20 30 20 2e 32 31 31 20 31 2e 30 31 35 5a 6d 2d 39 2e 37 30 38 20 35 2e 38 38 33 61 2e 37 33 34 2e 37 33 34 20 30 20 30 20 31 2d 2e 36 39 34 2d 2e 37 37 34 2e 37 33 36 2e 37 33 36 20 30 20 30 20 31 20 2e 37 37 38 2d 2e 36 39 63 2e 34 30 36 2e 30 32 33 2e 37 31 37 2e 33 37 2e 36 39 34 2e 37 37 33 61 2e 37 33 36 2e 37 33 36 20 30 20 30 20 31 2d 2e 37 37 38 2e 36 39 5a 4d 37 2e 34 38 20 32 33 2e 33 32 36 61 2e 37 33 2e 37 33 20 30 20 30 20 30 2d 2e 33 32 37 2e 39 38 34 2e 37 33 39 2e 37 33 39 20 30 20 30 20 30 20 2e 39 39 2e 33 32 34 2e 37 33 2e 37 33 20 30 20 30 20 30 20 2e 33 32 37 2d 2e 39 38 34 2e 37 34 2e 37 34 20 30 20 30 20 30 2d 2e 39 39 2d 2e 33 32 34 5a 6d 2d 2e 33 31 2d 31 31 2e 32 33 31 61 2e 37 34 2e 37 34 20 30 20 30 20 Data Ascii: 3.73 0 0 0 .211 1.015Zm-9.708 5.883a.734.734 0 0 1-.694-.774.736.736 0 0 1 .778-.69c.406.023.717.37.694.773a.736.736 0 0 1-.778.69ZM7.48 23.326a.73.73 0 0 0-.327.984.739.739 0 0 0 .99.324.73.73 0 0 0 .327-.984.74.74 0 0 0-.99-.324Zm-.31-11.231a.74.74 0 0
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: 30 20 30 2d 2e 32 35 36 2e 37 37 33 5a 6d 2d 31 32 2e 35 32 36 2e 32 35 61 2e 35 37 34 2e 35 37 34 20 30 20 30 20 31 2d 2e 31 36 36 2d 2e 37 39 37 2e 35 38 31 2e 35 38 31 20 30 20 30 20 31 20 2e 38 30 32 2d 2e 31 36 36 2e 35 37 33 2e 35 37 33 20 30 20 30 20 31 20 2e 31 36 36 2e 37 39 37 2e 35 38 31 2e 35 38 31 20 30 20 30 20 31 2d 2e 38 30 32 2e 31 36 36 5a 4d 35 2e 31 31 35 20 31 37 2e 36 37 61 2e 35 37 38 2e 35 37 38 20 30 20 30 20 30 2d 2e 36 31 32 2e 35 34 33 2e 35 37 39 2e 35 37 39 20 30 20 30 20 30 20 31 2e 31 35 36 2e 30 36 35 2e 35 37 37 2e 35 37 37 20 30 20 30 20 30 2d 2e 35 34 34 2d 2e 36 30 37 5a 6d 36 2e 30 34 34 2d 31 30 2e 39 30 34 61 2e 35 38 31 2e 35 38 31 20 30 20 30 20 31 20 2e 37 37 38 2e 32 35 35 2e 35 37 34 2e 35 37 34 20 30 20 30 20 Data Ascii: 0 0-.256.773Zm-12.526.25a.574.574 0 0 1-.166-.797.581.581 0 0 1 .802-.166.573.573 0 0 1 .166.797.581.581 0 0 1-.802.166ZM5.115 17.67a.578.578 0 0 0-.612.543.579.579 0 0 0 1.156.065.577.577 0 0 0-.544-.607Zm6.044-10.904a.581.581 0 0 1 .778.255.574.574 0 0
2024-04-26 18:33:13 UTC	1020	IN	Data Raw: 36 20 31 2e 37 38 36 20 30 20 30 20 30 2d 31 2e 36 30 31 2d 2e 39 38 63 2d 2e 32 37 38 20 30 2d 2e 35 35 36 2e 30 36 36 2d 2e 38 30 35 2e 31 39 61 31 2e 37 37 35 20 31 2e 37 37 35 20 30 20 30 20 30 2d 2e 38 39 35 20 31 2e 30 33 34 63 2d 2e 31 35 2e 34 35 31 2d 2e 31 31 35 2e 39 33 34 2e 31 30 31 20 31 2e 33 35 39 2e 33 30 36 2e 36 30 34 2e 39 32 2e 39 38 20 31 2e 36 2e 39 38 5a 6d 2d 32 2e 37 32 36 2d 2e 37 39 36 61 31 2e 37 39 20 31 2e 37 39 20 30 20 30 20 31 2d 31 2e 35 2e 38 30 34 20 31 2e 37 39 32 20 31 2e 37 39 32 20 30 20 30 20 31 2d 31 2e 37 35 32 2d 31 2e 34 31 38 20 31 2e 37 35 38 20 31 2e 37 35 38 20 30 20 30 20 31 20 2e 32 35 35 2d 31 2e 33 33 39 20 31 2e 37 39 20 31 2e 37 39 20 30 20 30 20 31 20 31 2e 35 2d 2e 38 30 35 20 31 2e 37 39 33 20 31 Data Ascii: 6 1.786 0 0 0-1.601-.98c-.278 0-.556.066-.805.19a1.775 1.775 0 0 0-.895 1.034c-.15.451-.115.934.101 1.359.306.604.92.98 1.6.98Zm-2.726-.796a1.79 1.79 0 0 1-1.5.804 1.792 1.792 0 0 1-1.752-1.418 1.758 1.758 0 0 1 .255-1.339 1.79 1.79 0 0 1 1.5-.805 1.793 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50370	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	612	OUT	GET /media/New%20navigation_Rebrand%203.0/leverage/Polkadot_2x_Long.svg HTTP/1.1 Host: cdn.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296
2024-04-26 18:33:13 UTC	789	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:12 GMT Content-Type: image/svg+xml Content-Length: 1234 Connection: close Last-Modified: Tue, 11 Apr 2023 16:38:27 GMT ETag: "7ecb0fdaab89ac67988ac93a7d836b4b" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=36000 x-amz-version-id: JB0xnZ6gRGqiZuBC8Pa3itNd4REL6Vth X-Cache: Hit from cloudfront Via: 1.1 177fd0f8c3e2c78883d72714aa07183a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MIA3-C3 X-Amz-Cf-Id: MAl1SCB3CMt9DCqx_LE84-cYg6T5ndRMFFNvq1-fAtXdv7ycHprpPA== Age: 19964 CF-Cache-Status: HIT Expires: Sat, 27 Apr 2024 04:33:12 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87a8a8effb3874b2-MIA
2024-04-26 18:33:13 UTC	580	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 38 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 36 30 30 37 41 22 20 64 3d 22 4d 31 38 20 31 30 2e 36 32 63 32 2e 35 33 20 30 20 34 2e 35 38 2d 31 2e 32 20 34 2e 35 38 2d 32 2e 36 37 53 32 30 2e 35 33 20 35 2e 33 20 31 38 20 35 2e 33 63 2d 32 2e 35 33 20 30 2d 34 2e 35 38 20 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" fill="none"> <circle cx="18" cy="18" r="18" fill="#fff"/> <path fill="#E6007A" d="M18 10.62c2.53 0 4.58-1.2 4.58-2.67S20.53 5.3 18 5.3c-2.53 0-4.58 1
2024-04-26 18:33:13 UTC	654	IN	Data Raw: 33 2e 34 35 2d 34 2e 36 20 32 2e 36 33 2d 31 2e 32 35 20 32 2e 32 2d 31 2e 32 35 20 34 2e 35 36 2e 30 33 20 35 2e 33 20 31 2e 32 37 2e 37 34 20 33 2e 33 33 2d 2e 34 34 20 34 2e 36 2d 32 2e 36 33 5a 6d 2d 31 37 2e 34 20 32 2e 36 33 63 31 2e 32 38 2d 2e 37 34 20 31 2e 32 38 2d 33 2e 31 2e 30 32 2d 35 2e 33 2d 31 2e 32 36 2d 32 2e 31 38 2d 33 2e 33 32 2d 33 2e 33 36 2d 34 2e 36 2d 32 2e 36 33 2d 31 2e 32 37 2e 37 34 2d 31 2e 32 38 20 33 2e 31 2d 2e 30 31 20 35 2e 33 20 31 2e 32 36 20 32 2e 31 39 20 33 2e 33 32 20 33 2e 33 37 20 34 2e 36 20 32 2e 36 33 5a 6d 31 37 2e 33 37 2d 31 30 2e 30 33 63 31 2e 32 38 2d 2e 37 33 20 31 2e 32 39 2d 33 2e 31 2e 30 32 2d 35 2e 33 2d 31 2e 32 36 2d 32 2e 31 38 2d 33 2e 33 32 2d 33 2e 33 36 2d 34 2e 36 2d 32 2e 36 33 2d 31 2e Data Ascii: 3.45-4.6 2.63-1.25 2.2-1.25 4.56.03 5.3 1.27.74 3.33-.44 4.6-2.63Zm-17.4 2.63c1.28-.74 1.28-3.1.02-5.3-1.26-2.18-3.32-3.36-4.6-2.63-1.27.74-1.28 3.1-.01 5.3 1.26 2.19 3.32 3.37 4.6 2.63Zm17.37-10.03c1.28-.73 1.29-3.1.02-5.3-1.26-2.18-3.32-3.36-4.6-2.63-1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50366	3.232.64.79	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	724	OUT	GET /match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-EXC.qSRE2pVFjithS3QYY.qSoH4wk.0nJAA-~A&gdpr=0 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18f1bae1d9d-42c70000010a45f6; SERVERID=17910~DM
2024-04-26 18:33:13 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=17910~DM; Domain=eyeota.net; Path=/; Expires=Fri, 26 Apr 2024 18:43:13 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Fri, 26 Apr 2024 18:33:13 GMT
2024-04-26 18:33:13 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50371	35.169.4.189	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	1230	OUT	GET /map/im/d5f646a1-3a90-4585-81a0-693ca4a06fc0?ch=662bf363bc6e410001f8e0c2&chc=st&redirect_url=&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1 Host: map.go.affec.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oo=1; ck=662bf34d3757330001701a4b; oo=1; pt=eyJhbiI6eyJkdCI6MTcxNDE1NjM3MCwiaWQiOiI2NTc2Nzg3Mjg3MDEzNDUyMzI1IiwibHMiOjE3MTQxNTYzNzB9LCJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM4N30sInRkIjp7ImR0IjoxNzE0MTU2MzczLCJpZCI6IjZmNjc3NDRlLTEwOTEtNDA0OC1hZGJhLWUwMjRjYzE4ZjJkMiIsImxzIjoxNzE0MTU2MzczfSwiaW0iOnsiZHQiOjE3MTQxNTYzNjgsImlkIjoiZDVmNjQ2YTEtM2E5MC00NTg1LTgxYTAtNjkzY2E0YTA2ZmMwIiwibHMiOjE3MTQxNTYzNjh9LCJ2IjowfQ==\|1714156387\|9778e5ff5677e25c9ec0528ac1ee251f924dc26f
2024-04-26 18:33:13 UTC	1101	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 18:33:13 GMT Content-Type: text/html; charset=utf-8 Content-Length: 234 Connection: close Location: https://secure.adnxs.com/getuid?https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fan%2F%24UID%3Fch%3D662bf363bc6e410001f8e0c2%26chc%3Dst%257Cim%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= Set-Cookie: ck=662bf34d3757330001701a4b; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:33:13 GMT; Secure; SameSite=None Set-Cookie: oo=1; Secure; SameSite=None Set-Cookie: pt=eyJhbiI6eyJkdCI6MTcxNDE1NjM3MCwiaWQiOiI2NTc2Nzg3Mjg3MDEzNDUyMzI1IiwibHMiOjE3MTQxNTYzNzB9LCJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM4N30sInRkIjp7ImR0IjoxNzE0MTU2MzczLCJpZCI6IjZmNjc3NDRlLTEwOTEtNDA0OC1hZGJhLWUwMjRjYzE4ZjJkMiIsImxzIjoxNzE0MTU2MzczfSwiaW0iOnsiZHQiOjE3MTQxNTYzNjgsImlkIjoiZDVmNjQ2YTEtM2E5MC00NTg1LTgxYTAtNjkzY2E0YTA2ZmMwIiwibHMiOjE3MTQxNTYzOTN9LCJ2IjowfQ==\|1714156393\|8ef68bdc1d0409bd40c17e29923fa762dc607514; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:33:13 GMT; Secure; SameSite=None
2024-04-26 18:33:13 UTC	234	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 70 2e 67 6f 2e 61 66 66 65 63 2e 74 76 25 32 46 6d 61 70 25 32 46 61 6e 25 32 46 25 32 34 55 49 44 25 33 46 63 68 25 33 44 36 36 32 62 66 33 36 33 62 63 36 65 34 31 30 30 30 31 66 38 65 30 63 32 25 32 36 63 68 63 25 33 44 73 74 25 32 35 37 43 69 6d 25 32 36 72 65 64 69 72 65 63 74 5f 75 72 6c 25 33 44 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 53 65 65 20 4f 74 68 65 72 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://secure.adnxs.com/getuid?https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fan%2F%24UID%3Fch%3D662bf363bc6e410001f8e0c2%26chc%3Dst%257Cim%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=">See Other</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50365	142.250.189.130	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	743	OUT	GET /pixel?google_nid=bluekai&google_cm&google_sc&google_hm=V0VrdTFPd005OWVDSVkrWg%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkEiXynQ3F2vfWpzcT0iiYFVMu4cIAq8AD1TijBJDcnZ7lPa4qPjngJWg7LZTM
2024-04-26 18:33:13 UTC	661	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://tags.bluekai.com/site/2981?id=&google_gid=CAESEM6aIdoOX5XaL2WUlP9o-74&google_cver=1 Date: Fri, 26 Apr 2024 18:33:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 296 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:33:13 UTC	296	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 32 39 38 31 3f 69 64 3d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 4d 36 61 49 64 6f 4f 58 35 58 61 4c 32 57 55 6c 50 39 6f 2d 37 34 26 61 6d 70 3b 67 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://tags.bluekai.com/site/2981?id=&google_gid=CAESEM6aIdoOX5XaL2WUlP9o-74&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50373	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	698	OUT	GET /xxrz/250x400/793/3e/34/3e34a78cd7ece10d0cc0a028b8702dfb/3e34a78cd7ece10d0cc0a028b8702dfb.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:13 UTC	721	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:13 GMT Content-Type: image/jpeg Content-Length: 93463 Connection: close Last-Modified: Wed, 24 Apr 2024 03:56:40 GMT Vary: Accept-Encoding ETag: W/"662882f8-15ad5" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6956 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VLVTkQhlbiIBcd1nM6SaEdF71R2cSBHtHzaW2h%2BDwZI8iAR4%2BmMiKOtL88S62aUVgmWJuXKFEfkNxR%2FJmFTTdzlBuRZm0OY5DyvVYvp0TP3FWNULFcA0Pe0hlKuzme7dV4qC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8f079a68db8-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:13 UTC	648	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 02 03 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: a1 79 14 42 71 8e d9 44 73 ea 21 33 0a c7 00 da ad b2 4c 2e 5b 8f 5d 54 8e f6 d5 15 e8 b5 a2 2f b8 dc 77 00 0f ee 17 e4 c3 0d b3 db b6 8c 20 63 21 28 86 69 d5 af 46 e5 51 6c 1c e2 1d 36 c8 e7 55 49 06 a3 43 e4 d0 ae b5 09 46 dd cd 01 df 6d 38 cb 4a 32 92 a3 97 d5 27 99 31 0e 55 51 2b 9d c8 ed 63 8c 7d b4 09 f3 63 71 d4 a4 0d 85 bf 5f 77 16 0d df 0e 0b 43 76 fe 25 17 16 d6 1a ad 10 71 a6 46 af 97 08 b9 53 e2 c3 ca 39 6b 15 10 5f 49 88 6d 80 84 06 6a bf 15 4d 1c d2 83 62 45 a5 73 0a b4 d5 5a 27 99 62 1c c4 1a ad a5 cd 01 cf 7b 18 72 6f f3 c9 82 d2 65 27 b2 a3 0f ef 04 ad f0 5a 1d 9f be 16 11 ee e5 92 4c 50 be 46 de 13 b0 55 47 24 ea db b7 71 9c b2 1c 81 39 43 94 a7 21 01 6c 22 6d 70 cd f3 aa 46 55 b5 69 f2 74 1f 67 7d 03 af 7c a6 03 9a e5 09 ae 05 96 19 a0 Data Ascii: yBqDs!3L.[]T/w c!(iFQl6UICFm8J2'1UQ+c}cq_wCv%qFS9k_ImjMbEsZ'b{roe'ZLPFUG$q9C!l"mpFUitg}\|
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: 33 25 8b e0 f4 a9 58 f8 aa e2 2e 29 4e 87 c5 6d 42 9e 52 d7 95 a2 ad aa 8c cf e2 9c 2a 72 f6 16 f0 62 d8 79 0e ca 21 93 0b 87 6d f6 d5 29 f2 cd 29 38 de b2 bf 63 af ba 7f 9a 87 cc 72 ba 02 38 98 79 cb 88 4e 0b 75 05 1b b0 9d 0a e7 4f eb 8b 13 14 e2 38 34 b2 d4 f4 99 56 c4 81 aa 63 e6 46 44 06 0b 56 b1 36 1c 4b 32 98 43 12 22 39 aa 39 55 db 19 bd b1 f0 4b 66 4e bd 7a fd ea 86 ff 00 cd 8e e8 66 5a 42 58 b0 3c 9e 26 41 c2 01 9b 0e 8c 61 8c 2d ca ba 3c d3 3f c7 4c e3 39 fb ce 49 1f dc dd fb 3f 46 2c 76 c7 3f 1b 71 fc 79 86 ca 93 d7 7a 3b 5d f7 e5 04 d4 c5 ff 00 7a 64 b2 89 a0 c8 7b 62 a2 73 7f b8 67 ec 09 9b 6d 7a 47 dd c8 c8 ca f1 f4 d4 d5 73 a4 d4 39 a5 9b 6f 63 df 94 79 bb b7 38 44 ad 8c 1d 3d ed e2 9b bc cb b0 3b 8e 04 59 a6 7f 25 18 69 c5 1e 95 52 58 50 Data Ascii: 3%X.)NmBR*rby!m))8cr8yNuO84VcFDV6K2C"99UKfNzfZBX<&Aa-<?L9I?F,v?qyz;]zd{bsgmzGs9ocy8D=;Y%iRXP
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: e3 f7 0e d2 9d e3 ca 71 29 6d dc b8 9c e3 0d f1 ca eb 43 d7 ea ba f2 6e e4 d4 9d 6a 4a 08 ac 21 58 e6 5d ed 86 15 d9 b2 d7 e5 9d 6c 37 cd 98 fb 55 be 22 03 d8 d9 63 81 04 36 c3 b9 b1 39 2e de 54 42 d4 85 37 94 4a 18 92 5c 43 2b 33 4e 16 b9 3a b0 67 e0 dd c9 32 32 10 dd 8f da e4 92 85 5b 04 10 22 d4 28 cd b4 b7 63 06 53 83 97 84 63 39 46 73 9f 14 f3 d4 a6 86 15 b4 25 a3 b1 85 a8 26 db f2 d6 d5 d5 d8 67 e6 81 40 61 e9 f6 58 fb 1f 68 b7 92 db 97 07 21 15 96 ff 00 93 be 71 8f 5f e3 59 ad 48 b9 65 cf cc 59 f8 69 dd d7 b1 cf b9 db 04 2f 3c 30 4c b5 c4 78 b8 84 a9 2d be d3 d9 15 fd 5f 77 85 af 5a 20 6c 95 f3 36 ed b9 a7 1f 80 bf d6 94 9a b2 a0 b2 dc 97 d2 51 e1 f1 99 46 61 45 c3 81 90 23 3e fc 61 4a cb 31 ae be 83 22 8e 4b 28 0d e6 07 7d 2b 4e 1c 6b c5 ad 6d 52 Data Ascii: q)mCnjJ!X]l7U"c69.TB7J\C+3N:g22["(cSc9Fs%&g@aXh!q_YHeYi/<0Lx-_wZ l6QFaE#>aJ1"K(}+NkmR
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: b0 e2 c4 88 8a c3 8e c0 a5 87 aa a1 31 89 7d b7 04 bb 3e 9b ac 80 c4 a5 8b 62 12 3a 96 3b 4c 76 54 69 05 b4 f0 af f2 0f db 8c cd b6 79 02 57 6f 73 55 6e 4f 48 e2 52 4e b9 49 32 65 25 8d 1f 0e d5 7e f9 23 5a 32 7a c6 cb 8d ca 1c e1 2a 5b 59 ee d3 1c 69 3d b9 e1 c8 a4 9a 8c 44 9b 26 24 86 b3 b4 01 61 8a 08 26 94 ae a2 f6 e3 b5 86 e9 3b 46 1e 51 32 54 0a fc c2 07 d5 f1 d5 26 0f fb 96 60 32 64 c9 1b 88 3c c7 50 90 9f 71 e0 d4 66 5f 1b 64 ed 80 62 5a 02 d6 5a 5a 89 35 32 19 cb aa c4 9c a0 a2 98 f4 90 b2 6f b8 7c 38 2a 54 e0 e5 b4 6b 48 65 ec ac 9e ff 00 71 d9 7e 15 26 d3 a6 e2 aa a7 5a 6a f2 a1 a2 ab 3b 63 32 cb 08 34 56 53 90 5a 4b 7f c8 a4 90 a6 91 db 90 e3 3a 97 e1 e1 03 91 44 73 0b aa 91 39 b3 e3 2b 14 c9 99 89 0b 0c af 77 3c a8 db 62 6a a8 6d 5b 64 c6 5f Data Ascii: 1}>b:;LvTiyWosUnOHRNI2e%~#Z2z[Yi=D&$a&;FQ2T&`2d<Pqf_dbZZZ52o\|8TkHeq~&Zj;c24VSZK:Ds9+w<bjm[d_
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: 1e 5e 1a d1 af aa 57 46 ae fa d0 da f1 8e 65 c6 47 a0 6b c0 ad 11 a5 1c 1c 18 b0 25 43 c8 71 bb 8d 6a 27 0d de 21 e5 5c 8e 18 39 46 fe 89 8e 0e bc 27 2c 0a 58 c9 ab 2f 3e da a8 4a c0 f2 12 12 27 9a 3a 85 5f 3e 58 cd a9 07 b4 e7 10 2f c7 8d 90 b1 48 28 0c 14 e6 59 08 a3 07 62 35 d7 7b be b7 1f 4f a9 c8 c9 59 17 18 21 df 5a 94 e1 59 69 c1 c8 7d 6e 72 32 c8 e3 49 b0 79 37 25 0a e1 cc 81 1d b1 ed 10 6f 0b b3 2b 16 f1 c5 d0 c0 de 1d 86 a4 55 ab 50 17 8d 45 1f 62 c4 ad 72 93 56 50 91 54 39 87 5e d5 37 04 b4 25 22 ec 03 7f 7c c9 35 c1 5f f4 28 73 f1 e7 09 3a ec 7b b4 9b b0 4b c9 9d 37 eb 89 21 6c ba 7b 60 55 88 6e 15 d7 1a ab 32 3e 5d 9e 70 20 ea a5 94 e9 79 67 0a 4a bd aa 7d f1 9e 73 dc 04 81 40 3c 61 24 1c 6b a4 e5 4d 7b 57 87 1a 1d 79 69 a1 b2 ea a3 1d fd d3 Data Ascii: ^WFeGk%Cqj'!\9F',X/>J':_>X/H(Yb5{OY!ZYi}nr2Iy7%o+UPEbrVPT9^7%"\|5_(s:{K7!l{`Un2>]p ygJ}s@<a$kM{Wyi
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: c0 cf b4 d9 9f 11 a1 49 90 f1 19 5b 05 86 be b2 fd 76 46 69 80 f5 be c5 39 2d 53 ec ae 59 87 e9 af 61 91 c3 fa 63 9f 8f 89 d3 da 61 bd 8b 1c 3f 4c d4 26 39 bd 35 4c 15 05 8e ff 00 9f 2f d3 b6 3b 67 fe a2 f7 ed 95 61 a4 79 65 f7 1e ed 86 ea 0d fc 56 e4 cb 4b ab ce 1c ce 1e 6d ce 21 c5 b9 9f de a5 95 ad ef b1 11 71 8e 7e d8 3d 13 62 95 8f 1f 40 12 d8 d6 f8 52 2b 96 8c 69 0d 76 02 15 48 a5 4c 05 1a 33 71 5b 03 7f c3 01 98 2d 4e 9c 31 ae 28 7b bd bb c5 a7 a8 79 02 aa fb 07 49 6d 8b 16 c2 97 df 77 fb c5 7e e7 d2 a1 7e 75 cb 13 cf c4 75 1d d5 00 be dd 7d e5 ce fc ca fb 72 3e 0a 7e 51 0c 6a ed 86 6e 3e c2 b4 c5 d8 6f fa c2 d9 48 8d a2 e8 23 ee 35 bf 80 46 24 b5 c6 9f ad ce 53 b5 ad 6a 06 6f 63 4a d7 34 9d 31 5b 92 66 91 2b 37 97 de 68 20 5e 7c 97 ec d1 09 9f 80 Data Ascii: I[vFi9-SYaca?L&95L/;gayeVKm!q~=b@R+ivHL3q[-N1({yImw~~uu}r>~Qjn>oH#5F$SjocJ41[f+7h ^\|
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: 00 08 01 03 01 01 3f 01 7a b1 1b a9 47 f9 72 d9 e2 7b ed a4 db 62 3b 58 ed 88 2a 11 90 3d c6 99 45 ba fe 23 b1 5f b9 dc 61 e4 d3 a7 95 b4 c6 e0 f5 22 dd 87 98 8b ab 5e c6 fe dd 71 fb 4d ac 14 92 e5 a1 ec ab 2c 12 ef ab bc 72 aa 9b ed fd 13 df e8 a7 1e 09 95 64 cd 32 fa b6 60 23 a7 76 8d c9 f5 75 6b 0f b1 20 61 b9 b4 30 6e ef 62 3d 19 0e ff 00 a6 17 7e e7 ca 3f d1 71 0d cd 4c c0 df 6b 6f b6 fd 31 dc ae ad c1 52 7b 72 dc d8 fa 1f 2e 1a fe bb f4 1f 53 b0 ee 30 e7 60 2c 3f fe 62 f6 4d ef 76 df 17 01 37 d8 fa 13 61 8c fb 37 4c ba 99 53 57 cf a9 ba c6 3d 13 a3 3f d3 b0 fc f1 41 52 2a 6c aa 6f 7e a2 ff 00 eb 8a ac c8 53 b0 86 9d c0 09 e7 23 f1 3e d7 3f 4c 64 d9 ec 75 d1 49 46 f2 1e 2c 5a a7 a5 b9 dd 80 00 cd 0d fa 9d 89 70 a3 d0 f5 c7 86 3c 47 4f 51 59 2e 57 23 Data Ascii: ?zGr{b;X=E#_a"^qM,rd2`#vuk a0nb=~?qLko1R{r.S0`,?bMv7a7LSW=?ARlo~S#>?LduIF,Zp<GOQY.W#
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: 80 89 a3 04 7c f9 e0 e8 76 e1 f0 ec 7f ea 3b 7d 71 4a f5 74 a9 1f 09 5d 9d e4 73 c3 48 d9 88 89 37 2e 58 6e 4d ee 19 74 72 aa 96 2d db 14 c6 45 26 52 08 32 ea 3a bf bf 6f f4 6c 49 99 ca 22 78 f6 6f 94 d7 e9 6b 74 1b fb ef 88 2b a4 8a 99 5d 89 67 49 a4 62 be a0 aa 9d ff 00 cd 23 25 bf f1 1f bc 34 75 cf 96 c0 2a 07 c2 99 e4 79 ea 1e 62 fa cb 17 66 1a 62 dd 9a e3 7b 28 01 42 80 db f4 6a 44 87 8c 29 16 4b 32 32 c9 56 f7 46 7d 64 6a d0 bb 08 e3 2a 0a 8b 73 10 c7 9b 14 10 2d 25 1b cd 34 8b 0a c9 a8 42 8d b9 90 93 60 c1 7b 91 d8 91 61 7d f1 94 b2 03 3b 87 72 ec c3 8b ac 8b 29 d5 b5 99 55 56 df 41 f7 c5 21 48 94 14 f9 92 35 85 bf df 41 89 25 70 e7 94 6f fe ff 00 2c 78 66 0a 5a 6c c6 82 b7 29 90 8a 4a b4 a8 a2 cd 69 86 e2 9a 64 81 aa 69 e6 1d d6 39 24 85 7a 6c 1c Data Ascii: \|v;}qJt]sH7.XnMtr-E&R2:olI"xokt+]gIb#%4uybfb{(BjD)K22VF}djs-%4B`{a};r)UVA!H5A%po,xfZl)Jidi9$zl
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: d5 ea 46 20 30 52 c6 0a 5a f8 ad cc 64 69 6e 09 03 b7 e9 8c df 33 fe 21 a3 bc 35 0a de 42 34 f1 ee 3a a9 74 0b ac 74 d2 cc 2f b5 8d ed 8f 0e d4 43 5c f4 d4 4f 61 32 9f 95 1e 9d 5a ae 2d cd ca 37 5d fd 41 1b fb 63 33 c9 29 eb 23 85 6e c9 25 3c 5c 38 de f7 bd bf c8 76 20 93 8a 8a 19 29 35 f1 e3 7e 21 f9 31 32 b1 e0 b2 bf e2 26 f7 b1 02 dc 3e 87 b9 38 50 d0 46 8f 53 4b 1c 8a c2 e2 48 ee b6 d8 72 ec d6 b0 3b 8d bd b1 4e 95 33 af 16 9e 9c 91 6b 06 08 85 58 6d b3 6b 16 36 df 9b 7b 5f a0 c5 34 19 dc 09 22 20 e1 41 55 a1 da 30 e4 6b 2a 35 29 b4 32 6a 5b df 70 db 6f 6b 1c 43 92 e6 b3 0e 52 91 5c 30 3c 3a 74 bd b6 d9 9f 48 7b 1f be 26 ca 25 a6 6b 54 4b 2f 36 dc b1 0b ff 00 f3 37 fe 58 87 26 49 51 6c d5 47 7d cd 86 93 df 94 08 f6 ef 7b 93 db a6 20 cb 24 a5 37 86 23 Data Ascii: F 0RZdin3!5B4:tt/C\Oa2Z-7]Ac3)#n%<\8v )5~!12&>8PFSKHr;N3kXmk6{_4" AU0k*5)2j[pokCR\0<:tH{&%kTK/67X&IQlG}{ $7#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50372	18.230.167.103	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:12 UTC	840	OUT	GET /ibs:dpid=600901&dpuuid=ZGkACWYr8zMAAAAIA98YAw%3D%3D&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fsync.sharethis.com%2Fadobe%3Fuid%3D%24%7BDD_UUID%7D%26_rand%3D1714156371359 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=06291327801249806183443003251739176557; dpm=06291327801249806183443003251739176557
2024-04-26 18:33:13 UTC	940	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:33:13 GMT Content-Length: 0 Connection: close X-TID: nhwK7EOoSlo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://sync.sharethis.com/adobe?uid=06291327801249806183443003251739176557&_rand=1714156371359 DCS: dcs-prod-sae-2-v059-05a9f1fdd.edge-sae.demdex.com 2 ms set-cookie: dpm=06291327801249806183443003251739176557; Max-Age=15552000; Expires=Wed, 23 Oct 2024 18:33:13 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=06291327801249806183443003251739176557; Max-Age=15552000; Expires=Wed, 23 Oct 2024 18:33:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50374	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:13 UTC	698	OUT	GET /xxrz/250x400/793/b4/c6/b4c6078f1da394fd9a4e7abf6c1e621f/b4c6078f1da394fd9a4e7abf6c1e621f.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:13 UTC	727	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:13 GMT Content-Type: image/jpeg Content-Length: 96881 Connection: close Last-Modified: Wed, 24 Apr 2024 14:35:11 GMT Vary: Accept-Encoding ETag: W/"6629189f-146cc" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5540 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ALzTu1mvDdMxQEj%2B5xZ414F6FXrW9Aq3jsm6A7%2FBdVjGNZD17xPsiBa6vZjDlGldQ1fz0CYF%2F03jKNzSow0CRvdC%2BAMQTdckG%2Bx1XynYYv9z5U9URiRPVcPsLqV%2Fk92LMNKd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a8f249b1a4d3-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:13 UTC	642	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: ee ce 3a 90 3a d2 df 45 92 a2 3d a9 d7 6e 20 c1 1f 18 e4 ad 60 c6 1c b3 ce b9 48 93 7c 0a 42 01 86 1f 7f 45 fe 72 d9 f7 1d 9b 06 78 c7 df af 6a 63 bf af 0e 91 3f 60 b8 a1 96 9f e6 7f f4 3b f9 f1 cc f6 08 56 5c b9 02 03 46 40 a7 df d0 f8 20 6b 7c e0 c8 b7 97 e6 84 95 65 a3 79 14 7d 7f 95 26 22 e9 65 12 9f 34 ee 0f a5 fb 2b a5 96 fe b6 3e ed f8 2a 36 f3 71 ce a8 18 fa 87 2d 45 fe d8 e3 59 24 40 7e 4a dd df f0 52 9a 0a 14 17 b7 5d 16 66 27 d3 15 f9 c0 d7 b7 1f e9 f6 15 f3 67 b6 5a 18 c5 fb 8e e4 87 f7 9f eb 87 f1 e5 d6 b5 73 f6 79 8f e3 42 6c 40 2f fa b5 a5 41 83 b1 47 46 be c1 22 8d c8 46 1a a2 7d dd 83 29 6e c1 ff 00 42 c0 7d 71 75 26 9e fd 0f 52 a8 f4 b6 c3 0f e8 d7 5f e7 ea 3f 4f a1 fa 43 16 69 4f 6b 27 87 35 b0 7e 77 97 c1 10 76 5e 9f e7 75 33 a9 bf 4a Data Ascii: ::E=n `H\|BErxjc?`;V\F@ k\|ey}&"e4+>*6q-EY$@~JR]f'gZsyBl@/AGF"F})nB}qu&R_?OCiOk'5~wv^u3J
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: b3 1b c3 fd 2a f5 38 fa 4b 8e f3 ed 81 b1 e5 54 1b e0 fa a7 0f 04 de 82 65 a9 20 dd 3c 2b 6e c5 8c 73 5a d5 93 72 d4 e3 60 64 9a 55 0e ce 31 f7 cd 25 31 80 95 70 54 92 de 30 f4 49 9a 6a c8 b2 6b 0a 25 11 50 9e 82 df 90 c9 b2 5d ac 96 d7 47 b7 b7 33 dd 91 4c 66 2d 03 50 6a 4b 10 6f 19 1e a8 8e b5 21 ea ef 16 fa 05 bf 57 a5 49 19 80 c4 1a 17 94 f9 1b ca d4 82 e1 dd 47 e1 f4 15 69 dc 7d 3c a2 e8 b8 2f 2a fe 20 6b 02 36 25 35 9f 23 3b ea 94 19 67 65 3e 9a e7 03 c3 a7 25 2c 9e 1d 4a c2 66 8f a3 96 61 94 a2 24 31 7c d8 5b 31 b9 55 b2 0f a7 a2 79 16 3c 95 36 15 66 f0 d4 4c 40 6b ac 4d 69 49 82 83 37 e2 06 2a 4a f4 eb b2 eb f6 31 20 eb 9a 27 18 09 08 41 2d b5 19 cb f5 da bf f9 91 23 36 a6 ed 3b 1c 29 22 a4 e6 40 c2 a4 00 4d 3e 44 4c 80 27 5b b2 89 ec 38 78 68 62 Data Ascii: 8KTe <+nsZr`dU1%1pT0Ijk%P]G3Lf-PjKo!WIGi}</ k6%5#;ge>%,Jfa$1\|[1Uy<6fL@kMiI7*J1 'A-#6;)"@M>DL'[8xhb
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: f5 e3 97 b4 3a 9f 3f 1d 2f 47 75 c5 5d b8 32 75 7e 1b ca f5 ae 21 15 7a ef 0e 9c b1 eb 0c 71 81 c5 47 a1 93 4a de b9 c4 b5 bd 95 41 52 cb cc 5f 4f 54 d4 8e de bf c6 73 f0 0c 5f 0d eb bc 81 41 9f 91 b3 ae d5 c1 d7 18 c8 a0 ed aa 9c d5 10 38 1e 9c f6 e7 e0 78 de 7e 07 8c e3 70 58 f7 73 b6 3a f5 72 36 3c 4e 78 6f 13 9e 7f aa 2f f3 d4 d9 cf c9 b7 3f 48 ef 3d 83 d9 a5 67 c9 0f bb b6 c5 16 c0 e5 f5 ed bb 99 00 aa c5 e6 1d 9c cc 76 7e 9a 7c 85 32 f7 ae f9 dc ea 0b bd 3e d2 a4 e1 be de 37 55 56 4d a1 d0 92 34 42 c1 d5 95 d2 e8 b4 45 42 d1 47 b1 ee 3d 5c 47 55 77 6e 86 03 7f c7 ca de 75 cc 72 6f 37 ca 03 9b ca d8 7f 34 ed 9f a7 73 b9 d8 bd a9 75 41 a5 0b ba f5 d2 4f 0f ea 36 9a 26 f6 7f 67 b3 7d 1f 3c f9 fd 9b fb fe 96 71 e8 da 4d 24 b0 d0 d2 6e 2c 14 ab 28 27 20 Data Ascii: :?/Gu]2u~!zqGJAR_OTs_A8x~pXs:r6<Nxo/?H=gv~\|2>7UVM4BEBG=\GUwnuro74suAO6&g}<qM$n,('
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: 59 5a e7 04 d0 de e9 2c 56 d6 d9 5b e7 9f 1f 16 34 e7 aa 73 d7 88 c6 78 f1 c6 0f 24 ae 92 39 e3 96 3a f9 bd 43 a5 3c be 63 72 14 d4 b5 f7 c6 d4 d8 d6 6b 6a 7e d7 7d 87 cf 05 52 8d 8c 97 63 43 0c 69 52 aa 79 06 2f 54 7c f2 c5 83 ad 12 6b 1c 95 13 09 91 95 02 8b 29 b3 c7 ee 54 ed 49 6d 6d d2 69 b2 ce 82 e4 82 30 b6 63 3c 2b fd 6e 7d b6 ba 7b bb 25 78 76 a7 6b 8e cc 6d 2b e5 bc 91 85 1e d8 7d dc 2c 0d fa 86 dd 86 13 ea b4 06 9e d1 59 9c 29 6d 3a 9b 1d 71 1b ba 67 4e 8e fc 5b 0a 22 7e 28 09 53 d3 56 57 0a 3c 37 c3 86 26 52 f7 ef 3b fd 79 54 d6 b3 e8 5d 29 16 94 d6 72 c9 4f ad b1 80 1a 88 4a cf 3b 93 92 20 2f 94 e1 09 5c 75 b0 63 5c 4a 44 71 eb 08 99 e7 11 65 42 e8 99 30 20 cd c2 ea 6a ab 1c db 2c b3 5a fd 05 33 62 3e d4 66 39 96 25 b8 ab 06 f8 27 19 dd 7a 6c Data Ascii: YZ,V[4sx$9:C<crkj~}RcCiRy/T\|k)TImmi0c<+n}{%xvkm+},Y)m:qgN["~(SVW<7&R;yT])rOJ; /\uc\JDqeB0 j,Z3b>f9%'zl
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: 8a 9e 88 ff 00 ce 69 6e b5 f5 3f 63 bd dc 94 61 34 a6 7f fd 35 15 45 dc 9b de 6c ab 32 f8 b1 88 12 60 9a ef 4c dd 65 d5 95 5c cf 85 4b a7 83 fd 55 40 de d5 d2 b7 e0 80 88 18 0c 6c 9d ed 77 62 b9 05 12 83 74 44 ec 97 6d f7 19 b4 e3 da 11 62 5e 69 b4 63 d5 58 d5 fd 27 bb 6c eb 31 39 25 b5 73 6a aa da d9 9e e9 25 49 91 91 55 db bc 3a 94 0e c8 a6 da 6a ff 00 d8 e0 ae be 7d 1d 22 c7 55 a6 85 bf 2b 6f 31 14 fa e1 f5 83 b8 aa 4c 95 11 3d 85 93 d2 f5 67 62 d1 3b f4 dc 08 56 3a 5b 30 e1 79 16 d0 c6 9c 05 84 2b 2a 9c 53 29 b3 75 8a 4a 05 27 fa ba 4f 66 07 ac dd 0d 5a 3d 7f 73 17 14 d5 e4 0e 78 84 8e c9 39 67 d7 5e 16 5f aa c5 25 0d e4 74 a1 dd e9 65 b6 5a a9 5d 0c dd 7c 6c 66 58 92 d0 c3 aa 9c 49 52 77 44 92 43 f4 44 cc fb ba b6 44 f9 d5 08 3e c8 bb 02 5d 6f 99 76 Data Ascii: in?ca45El2`Le\KU@lwbtDmb^icX'l19%sj%IU:j}"U+o1L=gb;V:[0y+*S)uJ'OfZ=sx9g^_%teZ]\|lfXIRwDCDD>]ov
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: 4d 47 2e 6b c6 90 db c9 cc 06 bf 19 6b 18 57 2a e7 d6 88 54 71 cd 19 08 a2 99 2c a8 6d 7d 6c 72 56 72 e2 aa 20 64 75 5c 2a e8 5b 0b 82 32 0a f6 51 c1 27 ab 73 c1 30 2a ed 16 e9 8c 5a 29 d4 20 6d 08 90 c9 e3 0b c7 0f 7f c7 10 52 c6 16 1f 3d 57 f7 43 35 b6 91 5b d9 24 3e 8a ef 3c a4 67 c6 d0 4f 9a bc dd 6c b1 df 85 26 69 10 3a 4b 41 6f 28 cf cd d5 18 43 b0 84 39 a6 e7 ea b0 f9 bd 79 31 3c ed 1f fa a3 46 6a 38 cb 07 c9 f5 31 4a e9 60 92 a4 33 5f 28 86 52 c9 79 08 c9 c3 a1 26 d6 89 d6 a3 b5 df 0f db e4 22 59 17 95 70 0d 5e fd 05 dd c1 e9 17 b4 d3 5c 5a 27 c2 3c 6a e7 46 cf 3c 3a 25 92 6b 21 d9 08 04 48 ea ca a8 bd 7c c0 cf 66 36 3f 67 c6 df 8a 0f 8d ff 00 49 f5 a8 58 81 16 e5 0f 1b 0c a7 5a 11 9e a9 cc 57 65 0b 8e d7 68 4e 90 59 6e 5f 68 a6 9f 52 27 c9 96 8f Data Ascii: MG.kkWTq,m}lrVr du\[2Q's0*Z) mR=WC5[$><gOl&i:KAo(C9y1<Fj81J`3_(Ry&"Yp^\Z'<jF<:%k!H\|f6?gIXZWehNYn_hR'
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: 4f b6 b6 21 93 50 54 c4 30 55 ef b4 62 3e f4 59 43 71 e3 1e 4f ff 00 21 57 61 1c 90 ea b2 61 be 6e a2 d6 f4 f1 15 b9 da c2 06 77 3d 88 d1 18 4e 89 0e d8 e1 40 b2 67 86 0a d3 21 db 84 ef 15 3e e7 a8 f5 3d d5 b4 ca 67 52 11 99 0c d2 5f b0 57 94 8c 92 45 6e e2 c7 9d ee b9 4c f0 04 9f 9f b6 48 69 f5 58 66 17 5a 2d 4e 3a f3 f7 c0 8a 5e c8 97 15 63 44 75 58 a3 7f 51 24 dd c6 72 03 f2 cd ff 00 d6 7a b3 ac 56 5d 13 b7 5a f4 53 dd 91 41 9d 93 0b 27 7a 76 56 b4 06 d1 8f 29 67 53 b8 26 d0 30 32 55 73 5f e0 ff 00 60 bd 7f 8e 8a 0b 16 27 13 58 46 56 62 eb 19 21 20 c0 39 cf 91 24 07 6b 2e 5d ff 00 9d 9b da 4f 6a 9d 44 b5 09 a9 0e 04 ea 15 f3 34 50 c5 98 e3 60 a1 83 06 94 45 bb 25 4b 84 2b b7 96 02 4d 5f 4a b1 3c 12 0b 09 0c 89 4a 76 ac f2 c6 3f 06 5b 3d a0 a8 d8 58 d4 Data Ascii: O!PT0Ub>YCqO!Waanw=N@g!>=gR_WEnLHiXfZ-N:^cDuXQ$rzV]ZSA'zvV)gS&02Us_`'XFVb! 9$k.]OjD4P`E%K+M_J<Jv?[=X
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: dd 96 cd c4 57 f3 26 ca b1 4b 62 27 05 65 40 3d 57 9e ac b4 66 59 4c 28 52 13 2b 98 55 8e e6 58 cb 9d 8a cc 79 66 09 b7 27 dc f3 81 9e 98 b0 c6 31 fc ff 00 97 f4 56 92 be de dd be ff 00 6c 31 74 6a e6 35 90 12 06 e5 fc 45 65 65 6c 03 ec cb 8e 0f 27 aa 15 68 de b5 15 4a df b5 3b 92 64 8d cd 57 6a 84 5d ce ec 71 c2 aa 8c 93 83 9e 00 04 90 3a d1 68 d9 f0 c3 9d 47 49 a8 b7 b5 7d d0 0d 37 54 9e ca f6 b4 e4 9b 02 cd 9a 15 96 02 b2 df 48 9d 5d 6e ce cd 0d 18 1c cf 0c 12 4e 12 48 bc 30 ab 4b c4 16 75 7a d0 b5 ad 4b 46 b7 37 64 df d4 62 5a ad ab 58 8a d0 a5 67 cb a6 77 24 f8 6b a1 6d 22 49 d9 56 9a 38 a2 77 52 f8 ea 97 84 35 39 e4 b4 6e 61 be 20 e0 4b 0c ee 93 49 bc c7 39 9d 0b d4 99 9e 39 31 22 bf e1 87 57 59 83 05 08 d9 8b 41 14 f4 2d 43 48 ac 77 8d 4e cd 6b 56 Data Ascii: W&Kb'e@=WfYL(R+UXyf'1Vl1tj5Eeel'hJ;dWj]q:hGI}7TH]nNH0KuzKF7dbZXgw$km"IV8wR59na KI991"WYA-CHwNkV
2024-04-26 18:33:13 UTC	1369	IN	Data Raw: df 31 11 93 8d b8 f5 ea d6 a3 18 a1 3f 9b 70 9a 22 98 2d bb 76 f1 c7 03 f5 e9 ac 03 7e ac 21 73 15 88 cc 4e c4 e3 6b a4 79 8c 8f a9 38 da 7d 38 fd 3a 92 ac d2 4d da 86 36 91 9b 80 aa 33 ff 00 a0 3e e4 81 f7 ea 5d 1a 4a ea af 66 dd 68 59 f1 f8 2a dd e9 57 d3 1b f6 7e 18 fe 4e 7a 5d 25 af 50 89 a2 98 4b 1c 64 c0 6c 46 8d f8 33 2f 3d b9 17 d4 ac a8 c0 e4 67 04 7d b9 5d 2b 55 a3 7a 16 f8 47 9d 22 96 36 32 c3 89 13 6e e5 c9 e3 cc 30 07 20 8c 8e bf d5 ad 46 7d 36 fd b1 b4 76 e6 b2 b0 b6 ee 49 8a 5c b3 32 60 92 59 8f 6d 54 8c 93 e6 e1 7a 69 dd c2 99 06 d9 08 f3 0f 60 41 e9 98 b1 cf 52 7a 67 fc fb 75 21 f3 75 73 c0 7e 21 af 01 79 74 ab 6a 53 25 f0 bb f6 8f ab 6c c9 03 ef 8c 75 5b c2 76 25 45 94 93 b0 ba a3 e1 4f e1 9c 6e 2c de a7 60 07 3b b1 d4 e2 95 42 62 ae bb Data Ascii: 1?p"-v~!sNky8}8:M63>]JfhY*W~Nz]%PKdlF3/=g}]+UzG"62n0 F}6vI\2`YmTzi`ARzgu!us~!ytjS%lu[v%EOn,`;Bb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50364	139.45.195.254	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:14 UTC	426	OUT	GET /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f&ruid=78137abb-581d-4efe-bf4c-8d400f99f3ba HTTP/1.1 Host: fleraprt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:14 UTC	454	IN	HTTP/1.1 400 Bad Request Server: nginx/1.19.10 Date: Fri, 26 Apr 2024 18:33:14 GMT Content-Type: application/json; charset=utf-8 Content-Length: 25 Connection: close Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match Access-Control-Allow-Credentials: true
2024-04-26 18:33:14 UTC	25	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 30 2c 22 65 72 72 6f 72 22 3a 31 30 30 31 7d Data Ascii: {"status":0,"error":1001}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50360	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:14 UTC	475	OUT	GET /basis?uid=febb0cc9-a867-4e01-8b79-fa3d8a253c66-662bf35d-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:14 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:14 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50375	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:17 UTC	601	OUT	GET /v3/currencies HTTP/1.1 Host: api.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.bitpanda.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:17 UTC	1358	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:17 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Set-Cookie: AWSALB=NyJ6oC+u0yBeZarUv+mDUgXutWZuSmXbj01EnSv4cDTEfAFXEoQLz/A7IXxvwktQT40CWa9BzqwS/n2147UyNL1M00hJ4oJlQ0qv/uWXfvcfBbuuDXX294F30e2w; Expires=Fri, 03 May 2024 18:33:17 GMT; Path=/ vary: Accept-Encoding,Accept-Language,Origin,Access-Control-Request-Method,Access-Control-Request-Headers access-control-allow-origin: https://www.bitpanda.com access-control-allow-headers: origin, content-type, access-token, x-bitpanda-academy, x-tracking-id, If-None-Match, If-Match, x-bitpanda-app-web, x-datadog-trace-id, x-datadog-parent-id, x-datadog-origin, x-datadog-sampling-priority, bp-broker-user-api-token-id cache-control: max-age=14, public, s-maxage=29 strict-transport-security: max-age=15552000; includeSubDomains; preload x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC X-Content-Type-Options: nosniff Set-Cookie: AWSALBCORS=NyJ6oC+u0yBeZarUv+mDUgXutWZuSmXbj01EnSv4cDTEfAFXEoQLz/A7IXxvwktQT40CWa9BzqwS/n2147UyNL1M00hJ4oJlQ0qv/uWXfvcfBbuuDXX294F30e2w; Expires=Fri, 03 May 2024 18:33:17 GMT; Path=/; SameSite=None; Secure Set-Cookie: _cfuvid=4zkUCO_J49ZHd2ylACMLAVk5H9dyRU5Lcb_gy6UzoPk-1714156397711-0.0.1.1-604800000; path=/; domain=.bitpanda.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-04-26 18:33:17 UTC	32	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 37 61 38 61 39 30 63 61 63 66 61 61 36 36 39 2d 4d 49 41 0d 0a 0d 0a Data Ascii: CF-RAY: 87a8a90cacfaa669-MIA
2024-04-26 18:33:17 UTC	452	IN	Data Raw: 31 62 64 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 63 6f 6d 6d 6f 64 69 74 69 65 73 22 3a 5b 7b 22 74 79 70 65 22 3a 22 63 6f 6d 6d 6f 64 69 74 79 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 6f 6c 64 22 2c 22 73 79 6d 62 6f 6c 22 3a 22 58 41 55 22 2c 22 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 62 69 74 70 61 6e 64 61 2d 62 72 6f 6b 65 72 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 61 73 73 65 74 73 2e 73 33 2e 65 75 2d 77 65 73 74 2d 31 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 5c 2f 73 74 61 74 69 63 5c 2f 63 72 79 70 74 6f 63 6f 69 6e 5c 2f 62 38 36 63 38 38 64 34 2d 65 66 65 33 2d 31 31 65 62 2d 62 35 36 66 2d 30 36 39 31 37 Data Ascii: 1bd{"data":{"type":"collection","attributes":{"commodities":[{"type":"commodity","attributes":{"name":"Gold","symbol":"XAU","logo":"https:\/\/bitpanda-broker-production-assets.s3.eu-west-1.amazonaws.com\/static\/cryptocoin\/b86c88d4-efe3-11eb-b56f-06917
2024-04-26 18:33:17 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 6e 61 6d 65 22 3a 22 63 6f 6d 6d 6f 64 69 74 79 22 2c 22 61 73 73 65 74 5f 67 72 6f 75 70 5f 6e 61 6d 65 22 3a 22 6d 65 74 61 6c 22 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 66 69 61 74 5f 70 72 69 63 65 22 3a 32 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 63 6f 69 6e 73 22 3a 34 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 69 6e 74 65 72 6e 61 6c 22 3a 38 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 74 78 22 3a 38 2c 22 69 6f 73 5f 73 75 70 70 6f 72 74 65 64 5f 76 65 72 73 69 6f 6e 22 3a 22 30 2e 30 2e 31 22 2c 22 61 6e 64 72 6f 69 64 5f 73 75 70 70 6f 72 74 65 64 5f 76 65 72 73 69 6f 6e 22 3a 22 30 2e 30 2e 31 22 2c 22 6d 65 61 73 75 72 65 6d 65 6e 74 5f 75 6e 69 74 22 3a 22 67 22 2c 22 69 73 5f 74 6f 6b 65 6e 22 3a 66 Data Ascii: 7ff9name":"commodity","asset_group_name":"metal","precision_for_fiat_price":2,"precision_for_coins":4,"precision_for_internal":8,"precision_for_tx":8,"ios_supported_version":"0.0.1","android_supported_version":"0.0.1","measurement_unit":"g","is_token":f
2024-04-26 18:33:17 UTC	1369	IN	Data Raw: 61 72 6b 2e 73 76 67 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 42 43 41 41 39 35 22 2c 22 61 73 73 65 74 5f 74 79 70 65 5f 6e 61 6d 65 22 3a 22 63 6f 6d 6d 6f 64 69 74 79 22 2c 22 61 73 73 65 74 5f 67 72 6f 75 70 5f 6e 61 6d 65 22 3a 22 6d 65 74 61 6c 22 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 66 69 61 74 5f 70 72 69 63 65 22 3a 32 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 63 6f 69 6e 73 22 3a 34 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 69 6e 74 65 72 6e 61 6c 22 3a 38 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 74 78 22 3a 38 2c 22 69 6f 73 5f 73 75 70 70 6f 72 74 65 64 5f 76 65 72 73 69 6f 6e 22 3a 22 30 2e 30 2e 31 22 2c 22 61 6e 64 72 6f 69 64 5f 73 75 70 70 6f 72 74 65 64 5f 76 65 72 73 69 6f 6e 22 3a 22 30 2e 30 2e 31 22 2c 22 6d Data Ascii: ark.svg","color":"#BCAA95","asset_type_name":"commodity","asset_group_name":"metal","precision_for_fiat_price":2,"precision_for_coins":4,"precision_for_internal":8,"precision_for_tx":8,"ios_supported_version":"0.0.1","android_supported_version":"0.0.1","m
2024-04-26 18:33:17 UTC	1369	IN	Data Raw: 5c 2f 63 72 79 70 74 6f 63 6f 69 6e 5c 2f 62 38 36 63 30 33 34 62 2d 65 66 65 33 2d 31 31 65 62 2d 62 35 36 66 2d 30 36 39 31 37 36 34 34 34 36 61 37 5f 64 61 72 6b 2e 73 76 67 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 46 37 39 33 31 41 22 2c 22 61 73 73 65 74 5f 74 79 70 65 5f 6e 61 6d 65 22 3a 22 63 72 79 70 74 6f 63 6f 69 6e 22 2c 22 61 73 73 65 74 5f 67 72 6f 75 70 5f 6e 61 6d 65 22 3a 22 63 6f 69 6e 22 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 66 69 61 74 5f 70 72 69 63 65 22 3a 32 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 63 6f 69 6e 73 22 3a 34 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 69 6e 74 65 72 6e 61 6c 22 3a 38 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 74 78 22 3a 38 2c 22 69 6f 73 5f 73 75 70 70 6f 72 74 65 64 5f 76 65 72 Data Ascii: \/cryptocoin\/b86c034b-efe3-11eb-b56f-0691764446a7_dark.svg","color":"#F7931A","asset_type_name":"cryptocoin","asset_group_name":"coin","precision_for_fiat_price":2,"precision_for_coins":4,"precision_for_internal":8,"precision_for_tx":8,"ios_supported_ver
2024-04-26 18:33:17 UTC	1369	IN	Data Raw: 70 70 6f 72 74 5f 64 65 73 74 69 6e 61 74 69 6f 6e 5f 74 61 67 22 3a 66 61 6c 73 65 2c 22 73 75 70 70 6f 72 74 5f 64 65 73 74 69 6e 61 74 69 6f 6e 5f 74 61 67 5f 74 79 70 65 22 3a 66 61 6c 73 65 2c 22 69 6e 64 65 78 5f 6f 6e 6c 79 22 3a 66 61 6c 73 65 7d 2c 22 69 64 22 3a 22 35 22 7d 2c 7b 22 74 79 70 65 22 3a 22 63 72 79 70 74 6f 63 6f 69 6e 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 54 65 74 68 65 72 22 2c 22 73 79 6d 62 6f 6c 22 3a 22 55 53 44 54 22 2c 22 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 62 69 74 70 61 6e 64 61 2d 62 72 6f 6b 65 72 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 61 73 73 65 74 73 2e 73 33 2e 65 75 2d 77 65 73 74 2d 31 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 5c 2f 73 74 61 74 69 63 5c 2f 63 72 79 70 Data Ascii: pport_destination_tag":false,"support_destination_tag_type":false,"index_only":false},"id":"5"},{"type":"cryptocoin","attributes":{"name":"Tether","symbol":"USDT","logo":"https:\/\/bitpanda-broker-production-assets.s3.eu-west-1.amazonaws.com\/static\/cryp
2024-04-26 18:33:17 UTC	1369	IN	Data Raw: 22 3a 22 63 72 79 70 74 6f 63 6f 69 6e 22 2c 22 61 73 73 65 74 5f 67 72 6f 75 70 5f 6e 61 6d 65 22 3a 22 63 6f 69 6e 22 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 66 69 61 74 5f 70 72 69 63 65 22 3a 32 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 63 6f 69 6e 73 22 3a 34 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 69 6e 74 65 72 6e 61 6c 22 3a 38 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 74 78 22 3a 38 2c 22 69 6f 73 5f 73 75 70 70 6f 72 74 65 64 5f 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 2e 30 22 2c 22 61 6e 64 72 6f 69 64 5f 73 75 70 70 6f 72 74 65 64 5f 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 2e 30 22 2c 22 69 73 5f 74 6f 6b 65 6e 22 3a 66 61 6c 73 65 2c 22 70 69 64 22 3a 22 62 38 36 63 62 39 31 61 2d 65 66 65 33 2d 31 31 65 62 2d 62 35 Data Ascii: ":"cryptocoin","asset_group_name":"coin","precision_for_fiat_price":2,"precision_for_coins":4,"precision_for_internal":8,"precision_for_tx":8,"ios_supported_version":"1.0.0","android_supported_version":"1.0.0","is_token":false,"pid":"b86cb91a-efe3-11eb-b5
2024-04-26 18:33:17 UTC	1369	IN	Data Raw: 22 3a 66 61 6c 73 65 7d 2c 22 69 64 22 3a 22 31 33 35 22 7d 2c 7b 22 74 79 70 65 22 3a 22 63 72 79 70 74 6f 63 6f 69 6e 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 55 53 44 20 43 6f 69 6e 22 2c 22 73 79 6d 62 6f 6c 22 3a 22 55 53 44 43 22 2c 22 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 62 69 74 70 61 6e 64 61 2d 62 72 6f 6b 65 72 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 61 73 73 65 74 73 2e 73 33 2e 65 75 2d 77 65 73 74 2d 31 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 5c 2f 73 74 61 74 69 63 5c 2f 63 72 79 70 74 6f 63 6f 69 6e 5c 2f 62 38 36 63 38 66 32 38 2d 65 66 65 33 2d 31 31 65 62 2d 62 35 36 66 2d 30 36 39 31 37 36 34 34 34 36 61 37 2e 73 76 67 22 2c 22 6c 6f 67 6f 5f 64 61 72 6b 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f Data Ascii: ":false},"id":"135"},{"type":"cryptocoin","attributes":{"name":"USD Coin","symbol":"USDC","logo":"https:\/\/bitpanda-broker-production-assets.s3.eu-west-1.amazonaws.com\/static\/cryptocoin\/b86c8f28-efe3-11eb-b56f-0691764446a7.svg","logo_dark":"https:\/\/
2024-04-26 18:33:17 UTC	1369	IN	Data Raw: 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 63 6f 69 6e 73 22 3a 34 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 69 6e 74 65 72 6e 61 6c 22 3a 38 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 74 78 22 3a 36 2c 22 69 6f 73 5f 73 75 70 70 6f 72 74 65 64 5f 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 2e 30 22 2c 22 61 6e 64 72 6f 69 64 5f 73 75 70 70 6f 72 74 65 64 5f 76 65 72 73 69 6f 6e 22 3a 22 30 2e 30 2e 31 22 2c 22 69 73 5f 74 6f 6b 65 6e 22 3a 66 61 6c 73 65 2c 22 70 69 64 22 3a 22 62 38 36 63 31 37 63 62 2d 65 66 65 33 2d 31 31 65 62 2d 62 35 36 66 2d 30 36 39 31 37 36 34 34 34 36 61 37 22 2c 22 75 72 6c 5f 63 68 65 63 6b 5f 61 64 64 72 65 73 73 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 62 69 74 68 6f 6d 70 2e 63 6f 6d 5c 2f 65 78 70 6c 6f 72 65 72 5c 2f 25 73 Data Ascii: ecision_for_coins":4,"precision_for_internal":8,"precision_for_tx":6,"ios_supported_version":"1.0.0","android_supported_version":"0.0.1","is_token":false,"pid":"b86c17cb-efe3-11eb-b56f-0691764446a7","url_check_address":"https:\/\/bithomp.com\/explorer\/%s
2024-04-26 18:33:17 UTC	1369	IN	Data Raw: 62 69 74 70 61 6e 64 61 2d 62 72 6f 6b 65 72 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 61 73 73 65 74 73 2e 73 33 2e 65 75 2d 77 65 73 74 2d 31 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 5c 2f 73 74 61 74 69 63 5c 2f 63 72 79 70 74 6f 63 6f 69 6e 5c 2f 62 38 36 63 61 31 34 65 2d 65 66 65 33 2d 31 31 65 62 2d 62 35 36 66 2d 30 36 39 31 37 36 34 34 34 36 61 37 5f 64 61 72 6b 2e 73 76 67 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 42 32 39 38 33 30 22 2c 22 61 73 73 65 74 5f 74 79 70 65 5f 6e 61 6d 65 22 3a 22 63 72 79 70 74 6f 63 6f 69 6e 22 2c 22 61 73 73 65 74 5f 67 72 6f 75 70 5f 6e 61 6d 65 22 3a 22 63 6f 69 6e 22 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 66 69 61 74 5f 70 72 69 63 65 22 3a 36 2c 22 70 72 65 63 69 73 69 6f 6e 5f 66 6f 72 5f 63 6f 69 6e 73 22 3a Data Ascii: bitpanda-broker-production-assets.s3.eu-west-1.amazonaws.com\/static\/cryptocoin\/b86ca14e-efe3-11eb-b56f-0691764446a7_dark.svg","color":"#B29830","asset_type_name":"cryptocoin","asset_group_name":"coin","precision_for_fiat_price":6,"precision_for_coins":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	50378	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:17 UTC	697	OUT	GET /adobe?uid=06291327801249806183443003251739176557&_rand=1714156371359 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:17 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:17 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	50377	68.67.181.211	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:17 UTC	936	OUT	GET /getuid?https%3A%2F%2Fmap.go.affec.tv%2Fmap%2Fan%2F%24UID%3Fch%3D662bf363bc6e410001f8e0c2%26chc%3Dst%257Cim%26redirect_url%3D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=-lBTO87oE1q2j5ZgQrZoc7orAwxvjOJuHVqHh1IudHjfYH1iAps-CU7yEFaCrGbChgtgds1o0wDPMQKlmeD3MbgxClGbwDhR2tcv_pRCcWc.; receive-cookie-deprecation=1; uuid2=6576787287013452325
2024-04-26 18:33:17 UTC	1517	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 26 Apr 2024 18:33:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://map.go.affec.tv/map/an/6576787287013452325?ch=662bf363bc6e410001f8e0c2&chc=st%7Cim&redirect_url=&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= AN-X-Request-Uuid: 6988bf5e-390b-482d-94d4-7f8fcec53dbb Set-Cookie: XANDR_PANID=-lBTO87oE1q2j5ZgQrZoc7orAwxvjOJuHVqHh1IudHjfYH1iAps-CU7yEFaCrGbChgtgds1o0wDPMQKlmeD3MbgxClGbwDhR2tcv_pRCcWc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:33:17 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 14-Apr-2034 18:33:17 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6576787287013452325; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:33:17 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.220; 102.129.152.220; 584.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	50383	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:17 UTC	604	OUT	GET /117405/Resources/dist/Resources/strings/de/resources.l.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:17 UTC	546	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 803921 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:17 GMT Etag: "e88ea79c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:16 GMT Server: ECAcc (mic/9AD7) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 30008 Connection: close
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 69 66 28 6e 2e 73 74 72 69 6e 67 73 29 66 6f 72 28 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2c 65 3d 30 3b 65 3c 72 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 6e 2e 73 74 72 69 6e 67 73 5b 72 5b 65 5d 5d 3d 74 5b 72 5b 65 5d 5d 3b 65 6c 73 65 20 6e 2e 73 74 72 69 6e 67 73 3d 74 7d 69 28 7b 4c 61 6e 67 43 6f 64 65 3a 22 44 45 22 2c 73 74 72 41 44 56 41 4e 43 45 44 5f 54 4f 4f 4c 53 3a 22 46 6f 72 74 73 63 68 72 69 74 74 6c 69 63 68 65 20 74 65 63 68 6e 69 73 63 68 65 20 57 65 72 6b 7a 65 75 67 65 22 2c 73 74 72 41 46 46 49 4c 49 41 54 45 5f 54 45 58 54 5f 46 49 4e 41 4e 5a 45 4e 4e Data Ascii: (()=>{"use strict";var s={};(function(n){function i(t){if(n.strings)for(var r=Object.keys(t),e=0;e<r.length;e++)n.strings[r[e]]=t[r[e]];else n.strings=t}i({LangCode:"DE",strADVANCED_TOOLS:"Fortschrittliche technische Werkzeuge",strAFFILIATE_TEXT_FINANZENN
2024-04-26 18:33:17 UTC	13625	IN	Data Raw: 79 20 75 70 64 61 74 65 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 73 74 72 4d 4f 52 45 5f 49 4e 46 4f 52 4d 41 54 49 4f 4e 3a 22 4d 65 68 72 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 22 2c 73 74 72 4e 45 47 41 54 49 56 45 5f 42 41 4c 41 4e 43 45 3a 22 4b 6f 6e 74 6f 5c 78 46 43 62 65 72 7a 75 67 73 73 63 68 75 74 7a 22 2c 73 74 72 4e 45 57 5f 50 41 53 53 57 4f 52 44 3a 22 4e 65 75 65 73 20 4b 65 6e 6e 77 6f 72 74 22 2c 73 74 72 4e 45 57 5f 55 53 45 52 3a 22 4e 65 75 65 72 20 42 65 6e 75 74 7a 65 72 22 2c 73 74 72 4e 45 57 5f 55 53 45 52 5f 53 49 47 4e 5f 55 50 3a 22 4e 65 75 65 72 20 42 65 6e 75 74 7a 65 72 3f 20 4a 65 74 7a 74 20 72 65 67 69 73 74 72 69 65 72 65 6e 21 22 2c 73 74 72 4e 45 57 5f 57 45 42 54 52 41 44 45 52 5f 4e 4f 54 5f 53 55 50 50 4f Data Ascii: y update is required.",strMORE_INFORMATION:"Mehr Informationen",strNEGATIVE_BALANCE:"Konto\xFCberzugsschutz",strNEW_PASSWORD:"Neues Kennwort",strNEW_USER:"Neuer Benutzer",strNEW_USER_SIGN_UP:"Neuer Benutzer? Jetzt registrieren!",strNEW_WEBTRADER_NOT_SUPPO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	50376	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:17 UTC	712	OUT	GET /398646.gif?n=2 HTTP/1.1 Host: rc.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=zbVI3ujrmHGOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuOsBECsSBgiYuysQGg==
2024-04-26 18:33:17 UTC	725	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://cm.g.doubleclick.net/pixel?google_nid=epsilon&google_cm P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=1rhDcLeioz2OsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 18:33:17 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCJi7KxAa; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 18:33:17 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:33:17 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50379	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:17 UTC	604	OUT	GET /117405/Resources/dist/Resources/loginNonModuled.bundle.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:17 UTC	548	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 814822 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:17 GMT Etag: "73761f79c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:16 GMT Server: ECAcc (mic/9AC2) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 203577 Connection: close
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 76 2c 4d 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 3d 22 6f 62 6a 65 63 74 22 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 76 2e 64 6f 63 75 6d 65 6e 74 3f 4d 28 76 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 69 66 28 21 4e 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 Data Ascii: /! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /(function(v,M){"use strict";typeof module=="object"&&typeof module.exports=="object"?module.exports=v.document?M(v,!0):function(N){if(!N.document)throw new Error("jQue
2024-04-26 18:33:17 UTC	1	IN	Data Raw: 75 Data Ascii: u
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 56 28 68 2c 22 69 6e 70 75 74 22 29 26 26 68 2e 74 79 70 65 3d 3d 3d 22 62 75 74 74 6f 6e 22 7c 7c 56 28 68 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 44 3b 72 65 74 75 72 6e 20 56 28 68 2c 22 69 6e 70 75 74 22 29 26 26 68 2e 74 79 70 65 3d 3d 3d 22 74 65 78 74 22 26 26 28 28 44 3d 68 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 3d 3d 6e 75 6c 6c 7c 7c 44 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 22 74 65 78 74 22 29 7d 2c 66 69 72 73 74 3a 4f 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 30 5d 7d 29 2c 6c 61 73 74 3a 4f 74 28 66 75 6e 63 74 69 6f 6e 28 68 2c 44 29 7b 72 65 74 75 72 6e 5b 44 2d 31 5d 7d 29 Data Ascii: nction(h){return V(h,"input")&&h.type==="button"\|\|V(h,"button")},text:function(h){var D;return V(h,"input")&&h.type==="text"&&((D=h.getAttribute("type"))==null\|\|D.toLowerCase()==="text")},first:Ot(function(){return[0]}),last:Ot(function(h,D){return[D-1]})
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 6f 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 6f 3d 5a 2e 61 63 63 65 73 73 28 65 2c 74 2c 6e 2e 6d 61 6b 65 41 72 72 61 79 28 72 29 29 3a 6f 2e 70 75 73 68 28 72 29 29 2c 6f 7c 7c 5b 5d 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 74 7c 7c 22 66 78 22 3b 76 61 72 20 72 3d 6e 2e 71 75 65 75 65 28 65 2c 74 29 2c 6f 3d 72 2e 6c 65 6e 67 74 68 2c 61 3d 72 2e 73 68 69 66 74 28 29 2c 75 3d 6e 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 65 2c 74 29 3b 61 3d 3d 3d 22 69 6e 70 72 6f 67 72 65 73 73 22 26 26 28 61 3d 72 2e 73 68 69 66 74 28 29 2c 6f 2d 2d 29 2c 61 26 26 28 74 3d 3d 3d 22 66 78 22 26 26 72 2e 75 6e 73 68 69 66 74 28 22 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 64 65 6c 65 74 65 20 75 2e 73 74 6f 70 2c 61 2e 63 Data Ascii: o\|\|Array.isArray(r)?o=Z.access(e,t,n.makeArray(r)):o.push(r)),o\|\|[]},dequeue:function(e,t){t=t\|\|"fx";var r=n.queue(e,t),o=r.length,a=r.shift(),u=n._queueHooks(e,t);a==="inprogress"&&(a=r.shift(),o--),a&&(t==="fx"&&r.unshift("inprogress"),delete u.stop,a.c
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 72 65 74 75 72 6e 20 72 2e 69 6e 6e 65 72 48 54 4d 4c 3b 69 66 28 74 79 70 65 6f 66 20 74 3d 3d 22 73 74 72 69 6e 67 22 26 26 21 64 72 2e 74 65 73 74 28 74 29 26 26 21 73 74 5b 28 50 6e 2e 65 78 65 63 28 74 29 7c 7c 5b 22 22 2c 22 22 5d 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 29 7b 74 3d 6e 2e 68 74 6d 6c 50 72 65 66 69 6c 74 65 72 28 74 29 3b 74 72 79 7b 66 6f 72 28 3b 6f 3c 61 3b 6f 2b 2b 29 28 72 3d 74 68 69 73 5b 6f 5d 7c 7c 7b 7d 29 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 28 6e 2e 63 6c 65 61 6e 44 61 74 61 28 4a 65 28 72 2c 21 31 29 29 2c 72 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 29 3b 72 3d 30 7d 63 61 74 63 68 28 75 29 7b 7d 7d 72 26 26 74 68 69 73 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 Data Ascii: .nodeType===1)return r.innerHTML;if(typeof t=="string"&&!dr.test(t)&&!st[(Pn.exec(t)\|\|["",""])[1].toLowerCase()]){t=n.htmlPrefilter(t);try{for(;o<a;o++)(r=this[o]\|\|{}).nodeType===1&&(n.cleanData(Je(r,!1)),r.innerHTML=t);r=0}catch(u){}}r&&this.empty().appe
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 2c 6e 2e 70 72 6f 70 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 50 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 74 68 69 73 5b 6e 2e 70 72 6f 70 46 69 78 5b 65 5d 7c 7c 65 5d 7d 29 7d 7d 29 2c 6e 2e 65 78 74 65 6e 64 28 7b 70 72 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6f 2c 61 2c 75 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 75 21 3d 3d 33 26 26 75 21 3d 3d 38 26 26 75 21 3d 3d 32 29 72 65 74 75 72 6e 20 75 3d 3d 3d 31 26 26 6e 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 74 3d 6e 2e 70 72 6f 70 46 69 78 5b 74 5d 7c 7c 74 2c 61 3d 6e 2e 70 72 6f 70 48 6f 6f 6b 73 5b Data Ascii: ,n.prop,e,t,1<arguments.length)},removeProp:function(e){return this.each(function(){delete this[n.propFix[e]\|\|e]})}}),n.extend({prop:function(e,t,r){var o,a,u=e.nodeType;if(u!==3&&u!==8&&u!==2)return u===1&&n.isXMLDoc(e)\|\|(t=n.propFix[t]\|\|t,a=n.propHooks[
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3b 69 66 28 65 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 2e 73 63 72 69 70 74 41 74 74 72 73 29 72 65 74 75 72 6e 7b 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 74 3d 6e 28 22 3c 73 63 72 69 70 74 3e 22 29 2e 61 74 74 72 28 65 2e 73 63 72 69 70 74 41 74 74 72 73 7c 7c 7b 7d 29 2e 70 72 6f 70 28 7b 63 68 61 72 73 65 74 3a 65 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 2c 73 72 63 3a 65 2e 75 72 6c 7d 29 2e 6f 6e 28 22 6c 6f 61 64 20 65 72 72 6f 72 22 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 2e 72 65 6d 6f 76 65 28 29 2c 72 3d 6e 75 6c 6c 2c 75 26 26 61 28 75 2e 74 79 70 65 3d 3d 3d 22 65 72 72 6f 72 22 3f 34 30 34 3a 32 30 30 2c 75 2e 74 79 70 65 29 7d 29 2c 6d 2e 68 65 61 64 2e 61 70 Data Ascii: nction(e){var t,r;if(e.crossDomain\|\|e.scriptAttrs)return{send:function(o,a){t=n("<script>").attr(e.scriptAttrs\|\|{}).prop({charset:e.scriptCharset,src:e.url}).on("load error",r=function(u){t.remove(),r=null,u&&a(u.type==="error"?404:200,u.type)}),m.head.ap
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 76 61 72 20 42 65 3d 55 28 61 65 2c 4a 2c 22 2d 6e 22 29 3b 50 65 2b 3d 22 65 22 2b 28 42 65 5b 30 5d 7c 7c 22 2b 22 29 2b 42 65 5b 31 5d 7d 70 2e 74 65 73 74 28 50 65 29 26 26 28 47 3d 70 61 72 73 65 46 6c 6f 61 74 28 50 65 29 29 7d 72 65 74 75 72 6e 20 47 7d 2c 76 2e 70 61 72 73 65 44 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 4c 2c 57 2c 58 29 7b 58 3d 74 68 69 73 2e 66 69 6e 64 43 6c 6f 73 65 73 74 43 75 6c 74 75 72 65 28 58 29 3b 76 61 72 20 47 2c 4a 2c 4b 3b 69 66 28 57 29 7b 69 66 28 74 79 70 65 6f 66 20 57 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 57 3d 5b 57 5d 29 2c 57 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6c 65 3d 30 2c 75 65 3d 57 2e 6c 65 6e 67 74 68 3b 6c 65 3c 75 65 3b 6c 65 2b 2b 29 7b 76 61 72 20 61 65 3d 57 5b 6c 65 5d 3b 69 66 28 61 Data Ascii: var Be=U(ae,J,"-n");Pe+="e"+(Be[0]\|\|"+")+Be[1]}p.test(Pe)&&(G=parseFloat(Pe))}return G},v.parseDate=function(L,W,X){X=this.findClosestCulture(X);var G,J,K;if(W){if(typeof W=="string"&&(W=[W]),W.length)for(var le=0,ue=W.length;le<ue;le++){var ae=W[le];if(a
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 70 2e 72 61 77 3f 66 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 66 29 7b 72 65 74 75 72 6e 20 70 2e 72 61 77 3f 66 3a 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 72 65 74 75 72 6e 20 4e 28 70 2e 6a 73 6f 6e 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 66 29 3a 53 74 72 69 6e 67 28 66 29 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 66 29 7b 66 2e 69 6e 64 65 78 4f 66 28 27 22 27 29 3d 3d 3d 30 26 26 28 66 3d 66 2e 73 6c 69 63 65 28 31 2c 2d 31 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 22 2f 67 2c 27 22 27 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 5c 5c 2f 67 2c 22 5c 5c 22 29 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 66 Data Ascii: ){return p.raw?f:encodeURIComponent(f)}function A(f){return p.raw?f:decodeURIComponent(f)}function b(f){return N(p.json?JSON.stringify(f):String(f))}function x(f){f.indexOf('"')===0&&(f=f.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\"));try{return f
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 61 6c 55 70 64 61 74 65 3a 38 34 2c 42 72 6f 6b 65 72 46 65 65 64 3a 38 35 2c 42 69 64 41 73 6b 55 70 64 61 74 65 4d 65 73 73 61 67 65 3a 38 36 2c 42 72 6f 6b 65 72 54 72 61 64 65 49 6e 73 74 72 75 6d 65 6e 74 73 3a 38 37 2c 48 74 74 70 53 65 73 73 69 6f 6e 45 6e 64 65 64 3a 31 30 30 2c 53 75 62 53 65 73 73 69 6f 6e 4d 69 73 73 69 6e 67 3a 31 30 31 2c 43 6f 6d 65 74 55 72 6c 45 72 72 6f 72 3a 31 30 32 2c 57 65 62 50 75 62 6c 69 73 68 54 65 72 6d 69 6e 61 74 69 6f 6e 3a 31 30 33 2c 43 6f 6d 65 74 52 65 66 72 65 73 68 52 65 71 75 69 72 65 64 3a 31 30 34 2c 53 74 72 65 61 6d 69 6e 67 54 65 73 74 3a 31 30 35 2c 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 55 70 64 61 74 65 3a 31 30 37 2c 4c 6f 63 61 6c 69 7a 61 74 69 6f 6e 4f 76 65 72 72 69 64 65 73 3a 31 30 38 2c Data Ascii: alUpdate:84,BrokerFeed:85,BidAskUpdateMessage:86,BrokerTradeInstruments:87,HttpSessionEnded:100,SubSessionMissing:101,CometUrlError:102,WebPublishTermination:103,CometRefreshRequired:104,StreamingTest:105,ConfigurationUpdate:107,LocalizationOverrides:108,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	50384	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:17 UTC	595	OUT	GET /117405/Resources/dist/Resources/vendor.bundle.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:17 UTC	548	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 814834 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:17 GMT Etag: "29651e79c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:16 GMT Server: ECAcc (mic/9A98) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 144360 Connection: close
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 5a 6c 3d 7b 39 36 34 38 36 3a 66 75 6e 63 74 69 6f 6e 28 6f 6e 2c 41 6e 2c 53 6e 29 7b 6f 6e 3d 53 6e 2e 6e 6d 64 28 6f 6e 29 3b 76 61 72 20 52 65 3b 2f 2a 2a 0a 2a 20 40 6c 69 63 65 6e 73 65 0a 2a 20 4c 6f 64 61 73 68 20 3c 68 74 74 70 73 3a 2f 2f 6c 6f 64 61 73 68 2e 63 6f 6d 2f 3e 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 3c 68 74 74 70 73 3a 2f 2f 6f 70 65 6e 6a 73 66 2e 6f 72 67 2f 3e 0a 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 3c 68 74 74 70 73 3a 2f 2f 6c 6f 64 61 73 68 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 3e 0a 2a 20 42 61 73 65 64 20 6f 6e 20 55 6e 64 65 Data Ascii: (()=>{var Zl={96486:function(on,An,Sn){on=Sn.nmd(on);var Re;/*** @license* Lodash <https://lodash.com/>* Copyright OpenJS Foundation and other contributors <https://openjsf.org/>* Released under MIT license <https://lodash.com/license>* Based on Unde
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 69 73 2e 5f 5f 64 61 74 61 5f 5f 2e 73 65 74 28 6e 2c 71 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 53 66 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 2e 68 61 73 28 6e 29 7d 6a 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 6a 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 3d 41 66 2c 6a 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 53 66 3b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 6e 65 77 20 61 74 28 6e 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 2e 73 69 7a 65 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 6e 65 77 20 61 74 2c 74 68 69 73 2e 73 69 7a 65 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 29 7b 76 61 72 20 74 3d Data Ascii: is.__data__.set(n,qr),this}function Sf(n){return this.__data__.has(n)}jt.prototype.add=jt.prototype.push=Af,jt.prototype.has=Sf;function e(n){var t=this.__data__=new at(n);this.size=t.size}function r(){this.__data__=new at,this.size=0}function u(n){var t=
2024-04-26 18:33:17 UTC	2	IN	Data Raw: 62 3d Data Ascii: b=
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 45 3d 2d 31 2c 49 3d 61 2e 6c 65 6e 67 74 68 2c 52 3d 78 28 49 2b 62 29 2c 46 3d 74 68 69 73 26 26 74 68 69 73 21 3d 3d 78 6e 26 26 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 3f 68 3a 6e 3b 2b 2b 45 3c 49 3b 29 52 5b 45 5d 3d 61 5b 45 5d 3b 66 6f 72 28 3b 62 2d 2d 3b 29 52 5b 45 2b 2b 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 2b 2b 6d 5d 3b 72 65 74 75 72 6e 20 50 6e 28 46 2c 63 3f 69 3a 74 68 69 73 2c 52 29 7d 72 65 74 75 72 6e 20 67 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 61 21 3d 22 6e 75 6d 62 65 72 22 26 26 71 6e 28 74 2c 69 2c 61 29 26 26 28 69 3d 61 3d 64 29 2c 74 3d 69 Data Ascii: arguments.length,E=-1,I=a.length,R=x(I+b),F=this&&this!==xn&&this instanceof g?h:n;++E<I;)R[E]=a[E];for(;b--;)R[E++]=arguments[++m];return Pn(F,c?i:this,R)}return g}function Ja(n){return function(t,i,a){return a&&typeof a!="number"&&qn(t,i,a)&&(i=a=d),t=i
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 62 68 28 6e 29 7b 76 61 72 20 74 3d 56 28 6e 29 3f 70 3a 76 63 3b 72 65 74 75 72 6e 20 74 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 78 68 28 6e 2c 74 2c 69 29 7b 28 69 3f 71 6e 28 6e 2c 74 2c 69 29 3a 74 3d 3d 3d 64 29 3f 74 3d 31 3a 74 3d 5a 28 74 29 3b 76 61 72 20 61 3d 56 28 6e 29 3f 5f 3a 64 63 3b 72 65 74 75 72 6e 20 61 28 6e 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 41 68 28 6e 29 7b 76 61 72 20 74 3d 56 28 6e 29 3f 77 3a 67 63 3b 72 65 74 75 72 6e 20 74 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 53 68 28 6e 29 7b 69 66 28 6e 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 30 3b 69 66 28 5a 6e 28 6e 29 29 72 65 74 75 72 6e 20 61 6f 28 6e 29 3f 6d 65 28 6e 29 3a 6e 2e 6c 65 6e 67 74 68 3b 76 61 72 20 74 3d 57 6e 28 6e 29 3b 72 65 74 75 72 6e Data Ascii: unction bh(n){var t=V(n)?p:vc;return t(n)}function xh(n,t,i){(i?qn(n,t,i):t===d)?t=1:t=Z(t);var a=V(n)?_:dc;return a(n,t)}function Ah(n){var t=V(n)?w:gc;return t(n)}function Sh(n){if(n==null)return 0;if(Zn(n))return ao(n)?me(n):n.length;var t=Wn(n);return
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 6e 2c 4c 66 29 3a 64 7d 66 75 6e 63 74 69 6f 6e 20 6e 70 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 4b 75 28 6e 2c 71 28 74 2c 32 29 2c 4c 66 29 3a 64 7d 76 61 72 20 74 70 3d 4a 75 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2a 74 7d 2c 31 29 2c 65 70 3d 48 66 28 22 72 6f 75 6e 64 22 29 2c 72 70 3d 4a 75 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2d 74 7d 2c 30 29 3b 66 75 6e 63 74 69 6f 6e 20 69 70 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 41 72 28 6e 2c 4a 6e 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 75 70 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 41 72 28 6e 2c 71 28 74 2c 32 29 29 3a 30 7d 72 65 74 75 72 6e 20 73 Data Ascii: n,Lf):d}function np(n,t){return n&&n.length?Ku(n,q(t,2),Lf):d}var tp=Ju(function(n,t){return n*t},1),ep=Hf("round"),rp=Ju(function(n,t){return n-t},0);function ip(n){return n&&n.length?Ar(n,Jn):0}function up(n,t){return n&&n.length?Ar(n,q(t,2)):0}return s
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 20 69 6e 20 72 29 29 26 26 28 6c 7c 7c 28 6c 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 72 2c 30 2c 6f 29 29 2c 6c 5b 6f 5d 3d 72 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 6c 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 72 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 6e 3f 28 74 68 69 73 2e 76 3d 65 2c 74 68 69 73 29 3a 6e 65 77 20 4d 6e 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 42 69 28 65 2c 72 2c 75 29 7b 69 66 28 21 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 2e 61 73 79 6e Data Ascii: in r))&&(l\|\|(l=Array.prototype.slice.call(r,0,o)),l[o]=r[o]);return e.concat(l\|\|Array.prototype.slice.call(r))}function Mn(e){return this instanceof Mn?(this.v=e,this):new Mn(e)}function Bi(e,r,u){if(!Symbol.asyncIterator)throw new TypeError("Symbol.asyn
2024-04-26 18:33:17 UTC	4	IN	Data Raw: 75 62 73 63 Data Ascii: ubsc
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 68 69 73 2e 5f 74 68 72 6f 77 49 66 43 6c 6f 73 65 64 28 29 2c 74 68 69 73 2e 5f 74 72 69 6d 42 75 66 66 65 72 28 29 3b 66 6f 72 28 76 61 72 20 6f 3d 74 68 69 73 2e 5f 69 6e 6e 65 72 53 75 62 73 63 72 69 62 65 28 75 29 2c 66 3d 74 68 69 73 2c 6c 3d 66 2e 5f 69 6e 66 69 6e 69 74 65 54 69 6d 65 57 69 6e 64 6f 77 2c 76 3d 66 2e 5f 62 75 66 66 65 72 2c 70 3d 76 2e 73 6c 69 63 65 28 29 2c 5f 3d 30 3b 5f 3c 70 2e 6c 65 6e 67 74 68 26 26 21 75 2e 63 6c 6f 73 65 64 3b 5f 2b 3d 6c 3f 31 3a 32 29 75 2e 6e 65 78 74 28 70 5b 5f 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 68 65 63 6b 46 69 6e 61 6c 69 7a 65 64 53 74 61 74 75 73 65 73 28 75 29 2c 6f 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 74 72 69 6d 42 Data Ascii: ribe=function(u){this._throwIfClosed(),this._trimBuffer();for(var o=this._innerSubscribe(u),f=this,l=f._infiniteTimeWindow,v=f._buffer,p=v.slice(),_=0;_<p.length&&!u.closed;_+=l?1:2)u.next(p[_]);return this._checkFinalizedStatuses(u),o},r.prototype._trimB
2024-04-26 18:33:17 UTC	16383	IN	Data Raw: 2c 72 2c 6f 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 66 29 2e 70 69 70 65 28 4f 74 28 75 29 29 7d 3b 72 65 74 75 72 6e 20 6f 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 66 3d 5b 5d 2c 6c 3d 30 3b 6c 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 66 5b 6c 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6c 5d 3b 72 65 74 75 72 6e 20 43 74 28 65 2c 72 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 66 29 2e 70 69 70 65 28 4e 65 28 6f 29 2c 42 65 28 6f 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 66 3d 74 68 69 73 2c 6c 3d 5b 5d 2c 76 3d 30 3b 76 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 76 2b 2b 29 6c 5b 76 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 76 5d 3b 76 61 72 20 70 3d 6e 65 77 20 59 72 2c 5f 3d 21 30 3b 72 65 Data Ascii: ,r,o).apply(this,f).pipe(Ot(u))};return o?function(){for(var f=[],l=0;l<arguments.length;l++)f[l]=arguments[l];return Ct(e,r).apply(this,f).pipe(Ne(o),Be(o))}:function(){for(var f=this,l=[],v=0;v<arguments.length;v++)l[v]=arguments[v];var p=new Yr,_=!0;re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	50387	34.98.64.218	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:17 UTC	708	OUT	GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:17 UTC	594	IN	HTTP/1.1 302 Moved Temporarily Set-Cookie: i=f94be6e6-1394-4f93-8055-7cfef2b4f9f9\|1714156397; Version=1; Expires=Sat, 26-Apr-2025 18:33:17 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/cm?cc=1&id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D Date: Fri, 26 Apr 2024 18:33:17 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	50382	87.230.104.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:17 UTC	927	OUT	GET /beige.php?id=OyCkAkzwJOc8Gw2AUwuC&url=https%3A%2F%2Fwww.bitpanda.com%2Fde%2Fpreise%2Fbitcoin-btc%3Firclickid%3D1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0%26utm_source%3DImpact%26utm_medium%3DAffiliates%26utm_campaign%3D4484296%26utm_content%3DCopy%2520of%2520Bitcoin%2520Price%2520Page_CH_2%26utm_term%3De2%26ref%3D615250356669422741%26tag%3Daffiliates%26subid1%3D%26irgwc%3D1&frameit=1 HTTP/1.1 Host: www.fndsda.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.bitpanda.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:18 UTC	239	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:17 GMT Content-Type: text/html Content-Length: 1 Connection: close Server: Apache Access-Control-Allow-Origin: * Cache-Control: max-age=0, private, no-store, no-cache, must-revalidate
2024-04-26 18:33:18 UTC	1	IN	Data Raw: 09 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	50381	52.218.29.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:17 UTC	678	OUT	GET /static/cryptocoin/b86c034b-efe3-11eb-b56f-0691764446a7.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:18 UTC	470	IN	HTTP/1.1 200 OK x-amz-id-2: DwQ3GGF2fU0oNMAkC7/j8x3QCNOWyn2xei1nDaZeBF1kTVIT8tUKAoUwzhrcJde77QVJnMa18Ho= x-amz-request-id: B61FQ5H9MNPQYMQW Date: Fri, 26 Apr 2024 18:33:19 GMT Last-Modified: Fri, 28 Oct 2022 12:31:19 GMT ETag: "4134b39675d96eff2d44dc90fc3d2b63" x-amz-server-side-encryption: AES256 x-amz-version-id: Ca4iZILj9zK3JX8zfPWDjO1cT0Ek4x0m Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 1283 Connection: close
2024-04-26 18:33:18 UTC	1283	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 37 39 33 31 41 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 20 64 3d 22 4d 31 38 20 30 43 38 2e 30 36 20 30 20 30 20 38 2e 30 35 39 20 30 20 31 38 73 38 2e 30 35 39 20 31 38 20 31 38 20 31 38 20 31 38 2d 38 2e 30 35 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#F7931A" fill-rule="nonzero" d="M18 0C8.06 0 0 8.059 0 18s8.059 18 18 18 18-8.059

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	50380	52.218.29.128	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:17 UTC	651	OUT	GET /static/cryptocoin/undefined.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:18 UTC	285	IN	HTTP/1.1 403 Forbidden x-amz-request-id: B6176DWX1X3H2F5Z x-amz-id-2: EWe73UGgZyBYY1QGR8PZiCBONZuSWzg70iHUcSm3vglx8PutMxwc4lEPmabk8c+XMSE1/EK2cRI= Content-Type: application/xml Transfer-Encoding: chunked Date: Fri, 26 Apr 2024 18:33:17 GMT Server: AmazonS3 Connection: close
2024-04-26 18:33:18 UTC	249	IN	Data Raw: 66 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 42 36 31 37 36 44 57 58 31 58 33 48 32 46 35 5a 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 45 57 65 37 33 55 47 67 5a 79 42 59 59 31 51 47 52 38 50 5a 69 43 42 4f 4e 5a 75 53 57 7a 67 37 30 69 48 55 63 53 6d 33 76 67 6c 78 38 50 75 74 4d 78 77 63 34 6c 45 50 6d 61 62 6b 38 63 2b 58 4d 53 45 31 2f 45 4b 32 63 52 49 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e 0d 0a Data Ascii: f3<?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>B6176DWX1X3H2F5Z</RequestId><HostId>EWe73UGgZyBYY1QGR8PZiCBONZuSWzg70iHUcSm3vglx8PutMxwc4lEPmabk8c+XMSE1/EK2cRI=</HostId></Error>
2024-04-26 18:33:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	50391	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	435	OUT	GET /nlsn?uid=a19a850734a267b9c36559160770466b HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:18 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:18 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	50389	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	462	OUT	GET /adobe?uid=06291327801249806183443003251739176557&_rand=1714156386906 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:18 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:18 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	50390	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	443	OUT	GET /oracle?uid=9%2Bou199999e0s0%2BZ&BK_SWAP_DEST=5957 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:18 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:18 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	50388	87.230.104.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	1050	OUT	GET /beige.php?id=OyCkAkzwJOc8Gw2AUwuC&url=https%3A%2F%2Fwww.bitpanda.com%2Fde%2Fpreise%2Fbitcoin-btc%3Firclickid%3D1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0%26utm_source%3DImpact%26utm_medium%3DAffiliates%26utm_campaign%3D4484296%26utm_content%3DCopy%2520of%2520Bitcoin%2520Price%2520Page_CH_2%26utm_term%3De2%26ref%3D615250356669422741%26tag%3Daffiliates%26subid1%3D%26irgwc%3D1 HTTP/1.1 Host: www.fndsda.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:18 UTC	264	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:18 GMT Content-Type: text/html Content-Length: 456 Connection: close Server: Apache Access-Control-Allow-Origin: * Vary: Accept-Encoding Cache-Control: max-age=0, private, no-store, no-cache, must-revalidate
2024-04-26 18:33:18 UTC	456	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 0a 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 0a 0a 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 0a 0a 3c 68 65 61 64 3e 0a 0a 0a 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 0a 09 3c 74 69 74 6c 65 3e 42 65 69 67 65 3c 2f 74 69 74 6c 65 3e 0a 0a 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en"><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><title>Beige</title></head><body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	50393	35.169.4.189	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	1218	OUT	GET /map/an/6576787287013452325?ch=662bf363bc6e410001f8e0c2&chc=st%7Cim&redirect_url=&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1 Host: map.go.affec.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oo=1; ck=662bf34d3757330001701a4b; oo=1; pt=eyJhbiI6eyJkdCI6MTcxNDE1NjM3MCwiaWQiOiI2NTc2Nzg3Mjg3MDEzNDUyMzI1IiwibHMiOjE3MTQxNTYzNzB9LCJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM4N30sInRkIjp7ImR0IjoxNzE0MTU2MzczLCJpZCI6IjZmNjc3NDRlLTEwOTEtNDA0OC1hZGJhLWUwMjRjYzE4ZjJkMiIsImxzIjoxNzE0MTU2MzczfSwiaW0iOnsiZHQiOjE3MTQxNTYzNjgsImlkIjoiZDVmNjQ2YTEtM2E5MC00NTg1LTgxYTAtNjkzY2E0YTA2ZmMwIiwibHMiOjE3MTQxNTYzOTN9LCJ2IjowfQ==\|1714156393\|8ef68bdc1d0409bd40c17e29923fa762dc607514
2024-04-26 18:33:18 UTC	991	IN	HTTP/1.1 303 See Other Date: Fri, 26 Apr 2024 18:33:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 128 Connection: close Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=mssm115&ttd_tpi=1&gdpr=0&gdpr_consent= Set-Cookie: ck=662bf34d3757330001701a4b; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:33:18 GMT; Secure; SameSite=None Set-Cookie: oo=1; Secure; SameSite=None Set-Cookie: pt=eyJhbiI6eyJkdCI6MTcxNDE1NjM3MCwiaWQiOiI2NTc2Nzg3Mjg3MDEzNDUyMzI1IiwibHMiOjE3MTQxNTYzOTh9LCJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM4N30sInRkIjp7ImR0IjoxNzE0MTU2MzczLCJpZCI6IjZmNjc3NDRlLTEwOTEtNDA0OC1hZGJhLWUwMjRjYzE4ZjJkMiIsImxzIjoxNzE0MTU2MzczfSwiaW0iOnsiZHQiOjE3MTQxNTYzNjgsImlkIjoiZDVmNjQ2YTEtM2E5MC00NTg1LTgxYTAtNjkzY2E0YTA2ZmMwIiwibHMiOjE3MTQxNTYzOTN9LCJ2IjowfQ==\|1714156398\|dd68927afe22bfdbd297f91a3d79a13ee1362086; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:33:18 GMT; Secure; SameSite=None
2024-04-26 18:33:18 UTC	128	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 6d 73 73 6d 31 31 35 26 61 6d 70 3b 74 74 64 5f 74 70 69 3d 31 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 53 65 65 20 4f 74 68 65 72 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://match.adsrvr.org/track/cmf/generic?ttd_pid=mssm115&ttd_tpi=1&gdpr=0&gdpr_consent=">See Other</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50394	34.98.64.218	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	772	OUT	GET /w/1.0/cm?cc=1&id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fidsync.rlcdn.com%2F396846.gif%3Fserved_by%3Devergreen%26partner_uid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=f94be6e6-1394-4f93-8055-7cfef2b4f9f9\|1714156397
2024-04-26 18:33:18 UTC	591	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=f94be6e6-1394-4f93-8055-7cfef2b4f9f9\|1714156397; Version=1; Expires=Sat, 26-Apr-2025 18:33:18 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://idsync.rlcdn.com/396846.gif?served_by=evergreen&partner_uid=7f21a6d9-7754-4604-85fa-34e5af08abdc Date: Fri, 26 Apr 2024 18:33:18 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50392	142.250.189.130	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	694	OUT	GET /pixel?google_nid=epsilon&google_cm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkEiXynQ3F2vfWpzcT0iiYFVMu4cIAq8AD1TijBJDcnZ7lPa4qPjngJWg7LZTM
2024-04-26 18:33:18 UTC	658	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://idsync.rlcdn.com/362358.gif?google_gid=CAESEHohkNIdCJccZczOUmR7tjo&google_cver=1 Date: Fri, 26 Apr 2024 18:33:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 289 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:33:18 UTC	289	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 33 36 32 33 35 38 2e 67 69 66 3f 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 48 6f 68 6b 4e 49 64 43 4a 63 63 5a 63 7a 4f 55 6d 52 37 74 6a 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://idsync.rlcdn.com/362358.gif?google_gid=CAESEHohkNIdCJccZczOUmR7tjo&google_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	50395	69.169.85.7	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	634	OUT	GET /image.sbmx?go=304847&pid=583&xid=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: ib.mookie1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:18 UTC	72	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 4b 0d 0a 53 65 72 76 65 72 3a 20 42 69 67 49 50 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: HTTP/1.0 200 OKServer: BigIPConnection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	50396	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	605	OUT	GET /117405/Resources/dist/Resources/js/WinJS_4.4.4/base.min.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:18 UTC	548	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 814835 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:18 GMT Etag: "2de2c779c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:18 GMT Server: ECAcc (mic/9AD5) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 333674 Connection: close
2024-04-26 18:33:18 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 20 53 65 65 20 4c 69 63 65 6e 73 65 2e 74 78 74 20 69 6e 20 74 68 65 20 70 72 6f 6a 65 63 74 20 72 6f 6f 74 20 66 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 6c 6f 62 61 6c 4f 62 6a 65 63 74 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 79 70 65 Data Ascii: /! Copyright (c) Microsoft Corporation. All Rights Reserved. Licensed under the MIT License. See License.txt in the project root for license information. /(function(){var globalObject=typeof window!="undefined"?window:typeof self!="undefined"?self:type
2024-04-26 18:33:18 UTC	16383	IN	Data Raw: 72 49 63 6f 6e 73 2f 6c 65 66 74 22 3a 22 5c 75 45 31 31 32 22 2c 22 5f 75 69 2f 61 70 70 42 61 72 49 63 6f 6e 73 2f 6c 65 66 74 2e 63 6f 6d 6d 65 6e 74 22 3a 22 7b 4c 6f 63 6b 65 64 3d 71 70 73 2d 70 6c 6f 63 2c 71 70 73 2d 70 6c 6f 63 6d 7d 22 2c 22 75 69 2f 61 70 70 42 61 72 49 63 6f 6e 73 2f 66 61 76 6f 72 69 74 65 22 3a 22 5c 75 45 31 31 33 22 2c 22 5f 75 69 2f 61 70 70 42 61 72 49 63 6f 6e 73 2f 66 61 76 6f 72 69 74 65 2e 63 6f 6d 6d 65 6e 74 22 3a 22 7b 4c 6f 63 6b 65 64 3d 71 70 73 2d 70 6c 6f 63 2c 71 70 73 2d 70 6c 6f 63 6d 7d 22 2c 22 75 69 2f 61 70 70 42 61 72 49 63 6f 6e 73 2f 63 61 6d 65 72 61 22 3a 22 5c 75 45 31 31 34 22 2c 22 5f 75 69 2f 61 70 70 42 61 72 49 63 6f 6e 73 2f 63 61 6d 65 72 61 2e 63 6f 6d 6d 65 6e 74 22 3a 22 7b 4c 6f 63 6b Data Ascii: rIcons/left":"\uE112","_ui/appBarIcons/left.comment":"{Locked=qps-ploc,qps-plocm}","ui/appBarIcons/favorite":"\uE113","_ui/appBarIcons/favorite.comment":"{Locked=qps-ploc,qps-plocm}","ui/appBarIcons/camera":"\uE114","_ui/appBarIcons/camera.comment":"{Lock
2024-04-26 18:33:18 UTC	16383	IN	Data Raw: 22 75 69 2f 61 70 70 42 61 72 49 63 6f 6e 73 2f 73 79 6e 63 66 6f 6c 64 65 72 22 3a 22 5c 75 45 31 44 46 22 2c 22 5f 75 69 2f 61 70 70 42 61 72 49 63 6f 6e 73 2f 73 79 6e 63 66 6f 6c 64 65 72 2e 63 6f 6d 6d 65 6e 74 22 3a 22 7b 4c 6f 63 6b 65 64 3d 71 70 73 2d 70 6c 6f 63 2c 71 70 73 2d 70 6c 6f 63 6d 7d 22 2c 22 75 69 2f 61 70 70 42 61 72 49 63 6f 6e 73 2f 62 6c 6f 63 6b 63 6f 6e 74 61 63 74 22 3a 22 5c 75 45 31 45 30 22 2c 22 5f 75 69 2f 61 70 70 42 61 72 49 63 6f 6e 73 2f 62 6c 6f 63 6b 63 6f 6e 74 61 63 74 2e 63 6f 6d 6d 65 6e 74 22 3a 22 7b 4c 6f 63 6b 65 64 3d 71 70 73 2d 70 6c 6f 63 2c 71 70 73 2d 70 6c 6f 63 6d 7d 22 2c 22 75 69 2f 61 70 70 42 61 72 49 63 6f 6e 73 2f 73 77 69 74 63 68 61 70 70 73 22 3a 22 5c 75 45 31 45 31 22 2c 22 5f 75 69 2f 61 Data Ascii: "ui/appBarIcons/syncfolder":"\uE1DF","_ui/appBarIcons/syncfolder.comment":"{Locked=qps-ploc,qps-plocm}","ui/appBarIcons/blockcontact":"\uE1E0","_ui/appBarIcons/blockcontact.comment":"{Locked=qps-ploc,qps-plocm}","ui/appBarIcons/switchapps":"\uE1E1","_ui/a
2024-04-26 18:33:18 UTC	3	IN	Data Raw: 6e 63 74 Data Ascii: nct
2024-04-26 18:33:18 UTC	16383	IN	Data Raw: 69 6f 6e 28 6f 29 7b 74 79 70 65 6f 66 28 6f 3d 6f 7c 7c 7b 7d 29 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 6f 3d 7b 74 61 67 73 3a 6f 7d 29 3b 76 61 72 20 4e 3d 6f 2e 74 79 70 65 26 26 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 46 28 6f 2e 74 79 70 65 29 2e 72 65 70 6c 61 63 65 28 49 2c 22 20 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 22 7c 22 29 2b 22 29 24 22 29 2c 6d 3d 6f 2e 65 78 63 6c 75 64 65 54 61 67 73 26 26 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 5c 5c 73 29 28 22 2b 46 28 6f 2e 65 78 63 6c 75 64 65 54 61 67 73 29 2e 72 65 70 6c 61 63 65 28 49 2c 22 20 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 22 7c 22 29 2b 22 29 28 5c 5c 73 7c 24 29 22 2c 22 69 22 29 2c 45 3d 6f 2e 74 61 67 73 26 26 6e 65 77 20 52 65 67 45 Data Ascii: ion(o){typeof(o=o\|\|{})=="string"&&(o={tags:o});var N=o.type&&new RegExp("^("+F(o.type).replace(I," ").split(" ").join("\|")+")$"),m=o.excludeTags&&new RegExp("(^\|\\s)("+F(o.excludeTags).replace(I," ").split(" ").join("\|")+")(\\s\|$)","i"),E=o.tags&&new RegE
2024-04-26 18:33:18 UTC	16383	IN	Data Raw: 28 79 2b 6d 65 2e 65 76 65 6e 74 4f 62 6a 65 63 74 20 69 6e 20 6e 29 7b 73 65 3d 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 62 72 65 61 6b 7d 7d 66 6f 72 28 76 61 72 20 44 3d 30 2c 48 3d 6d 65 2e 65 76 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 44 3c 48 3b 44 2b 2b 29 7b 76 61 72 20 6e 65 3d 6d 65 2e 65 76 65 6e 74 73 5b 44 5d 3b 64 5b 6e 65 5d 3d 50 28 73 65 2c 6e 65 29 2c 73 65 3d 3d 3d 22 22 26 26 28 64 5b 6e 65 5d 3d 64 5b 6e 65 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 7d 72 65 74 75 72 6e 20 64 2e 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 53 74 61 74 65 43 68 61 6e 67 65 64 3d 22 4d 53 4d 61 6e 69 70 75 6c 61 74 69 6f 6e 45 76 65 6e 74 22 69 6e 20 6e 3f 22 4d 61 6e 69 70 75 6c 61 74 69 6f 6e 45 76 65 6e 74 22 3a 6e 75 6c 6c 2c 64 7d 66 75 6e 63 74 Data Ascii: (y+me.eventObject in n){se=y.toLowerCase();break}}for(var D=0,H=me.events.length;D<H;D++){var ne=me.events[D];d[ne]=P(se,ne),se===""&&(d[ne]=d[ne].toLowerCase())}}return d.manipulationStateChanged="MSManipulationEvent"in n?"ManipulationEvent":null,d}funct
2024-04-26 18:33:18 UTC	16383	IN	Data Raw: 73 2c 74 68 69 73 2e 6f 62 6a 65 63 74 4e 61 6d 65 3d 72 2c 74 68 69 73 2e 6f 62 6a 65 63 74 3d 70 2c 74 68 69 73 2e 63 61 70 74 75 72 65 3d 7b 7d 2c 74 68 69 73 2e 62 75 62 62 6c 65 3d 7b 7d 7d 2c 7b 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 70 2c 55 2c 76 29 7b 70 3d 70 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 76 61 72 20 4b 3d 74 68 69 73 2e 5f 67 65 74 48 61 6e 64 6c 65 72 73 28 76 29 2c 74 65 3d 4b 5b 70 5d 3b 74 65 7c 7c 28 74 65 3d 74 68 69 73 2e 5f 67 65 74 4c 69 73 74 65 6e 65 72 28 70 2c 76 29 2c 74 65 2e 72 65 66 43 6f 75 6e 74 3d 30 2c 4b 5b 70 5d 3d 74 65 2c 74 68 69 73 2e 72 65 67 69 73 74 65 72 54 68 72 75 57 69 6e 4a 53 43 75 73 74 6f 6d 45 76 65 6e 74 73 3f 66 2e 5f 61 64 64 45 76 65 6e 74 4c Data Ascii: s,this.objectName=r,this.object=p,this.capture={},this.bubble={}},{addEventListener:function(r,p,U,v){p=p.toLowerCase();var K=this._getHandlers(v),te=K[p];te\|\|(te=this._getListener(p,v),te.refCount=0,K[p]=te,this.registerThruWinJSCustomEvents?f._addEventL
2024-04-26 18:33:19 UTC	16383	IN	Data Raw: 65 4c 69 74 65 72 61 6c 3a 31 31 2c 66 61 6c 73 65 4c 69 74 65 72 61 6c 3a 31 32 2c 6e 75 6d 62 65 72 4c 69 74 65 72 61 6c 3a 31 33 2c 73 74 72 69 6e 67 4c 69 74 65 72 61 6c 3a 31 34 2c 69 64 65 6e 74 69 66 69 65 72 3a 31 35 2c 72 65 73 65 72 76 65 64 57 6f 72 64 3a 31 36 2c 74 68 69 73 4b 65 79 77 6f 72 64 3a 31 37 2c 6c 65 66 74 50 61 72 65 6e 74 68 65 73 65 73 3a 31 38 2c 72 69 67 68 74 50 61 72 65 6e 74 68 65 73 65 73 3a 31 39 2c 65 6f 66 3a 32 30 2c 65 72 72 6f 72 3a 32 31 7d 2c 74 6f 6b 65 6e 73 3d 7b 6c 65 66 74 42 72 61 63 65 3a 7b 74 79 70 65 3a 74 6f 6b 65 6e 54 79 70 65 2e 6c 65 66 74 42 72 61 63 65 2c 6c 65 6e 67 74 68 3a 31 7d 2c 72 69 67 68 74 42 72 61 63 65 3a 7b 74 79 70 65 3a 74 6f 6b 65 6e 54 79 70 65 2e 72 69 67 68 74 42 72 61 63 65 2c Data Ascii: eLiteral:11,falseLiteral:12,numberLiteral:13,stringLiteral:14,identifier:15,reservedWord:16,thisKeyword:17,leftParentheses:18,rightParentheses:19,eof:20,error:21},tokens={leftBrace:{type:tokenType.leftBrace,length:1},rightBrace:{type:tokenType.rightBrace,
2024-04-26 18:33:19 UTC	4	IN	Data Raw: 65 72 79 53 Data Ascii: eryS
2024-04-26 18:33:19 UTC	16383	IN	Data Raw: 65 6c 65 63 74 6f 72 28 41 29 29 29 62 72 65 61 6b 7d 4a 3d 4a 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 72 65 74 75 72 6e 20 5f 7c 7c 6e 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 41 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 4c 2c 41 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 53 28 66 75 6e 63 74 69 6f 6e 28 5f 2c 4a 29 7b 74 72 79 7b 76 61 72 20 64 2c 6a 3d 4c 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 69 6e 2d 6f 70 74 69 6f 6e 73 22 29 3b 6a 26 26 28 64 3d 6b 2e 6f 70 74 69 6f 6e 73 50 61 72 73 65 72 28 6a 2c 6e 2c 7b 73 65 6c 65 63 74 3a 4e 28 4c 29 7d 29 29 3b 76 61 72 20 65 65 2c 6c 65 3d 31 3b 41 2e 6c 65 6e 67 74 68 3e 32 26 26 6c 65 2b 2b 3b 76 61 72 20 47 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 2d 2d 6c 65 Data Ascii: elector(A)))break}J=J.parentNode}return _\|\|n.document.querySelector(A)})}function m(L,A){return new S(function(_,J){try{var d,j=L.getAttribute("data-win-options");j&&(d=k.optionsParser(j,n,{select:N(L)}));var ee,le=1;A.length>2&&le++;var G=function(){--le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	50397	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	603	OUT	GET /117405/Resources/dist/Resources/js/WinJS_4.4.4/ui.min.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:18 UTC	548	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 814835 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:18 GMT Etag: "887ec879c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:18 GMT Server: ECAcc (mic/9BBB) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 878107 Connection: close
2024-04-26 18:33:18 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 20 53 65 65 20 4c 69 63 65 6e 73 65 2e 74 78 74 20 69 6e 20 74 68 65 20 70 72 6f 6a 65 63 74 20 72 6f 6f 74 20 66 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6b 69 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 Data Ascii: /! Copyright (c) Microsoft Corporation. All Rights Reserved. Licensed under the MIT License. See License.txt in the project root for license information. /(function(){var ki=typeof window!="undefined"?window:typeof self!="undefined"?self:typeof global!
2024-04-26 18:33:18 UTC	1	IN	Data Raw: 6e Data Ascii: n
2024-04-26 18:33:18 UTC	16383	IN	Data Raw: 21 31 7d 72 65 74 75 72 6e 20 68 65 3f 28 72 69 28 73 2c 68 65 2c 73 2e 62 69 6e 64 69 6e 67 4d 61 70 29 2c 64 65 6c 65 74 65 20 61 74 5b 4f 5d 2c 55 65 28 73 2c 4f 29 2c 73 2e 70 72 65 76 2e 69 6e 64 65 78 3d 3d 3d 4f 2d 31 26 26 6b 28 73 2e 70 72 65 76 29 2c 73 2e 6e 65 78 74 2e 69 6e 64 65 78 3d 3d 3d 4f 2b 31 26 26 6b 28 73 29 2c 6e 65 2e 73 6c 6f 74 4e 65 78 74 3d 68 65 2e 73 6c 6f 74 4e 65 78 74 2c 4d 7c 7c 28 4d 3d 68 65 2e 69 74 65 6d 4e 65 77 7c 7c 68 65 2e 69 74 65 6d 29 26 26 28 63 65 3d 43 74 5b 4d 2e 6b 65 79 5d 29 29 3a 55 65 28 73 2c 4f 29 2c 63 65 26 26 68 65 21 3d 3d 63 65 26 26 72 69 28 73 2c 63 65 2c 73 2e 62 69 6e 64 69 6e 67 4d 61 70 29 2c 51 69 28 73 2c 63 65 2c 4d 29 2c 68 65 26 26 68 65 21 3d 3d 63 65 26 26 52 69 28 73 2c 68 65 29 Data Ascii: !1}return he?(ri(s,he,s.bindingMap),delete at[O],Ue(s,O),s.prev.index===O-1&&k(s.prev),s.next.index===O+1&&k(s),ne.slotNext=he.slotNext,M\|\|(M=he.itemNew\|\|he.item)&&(ce=Ct[M.key])):Ue(s,O),ce&&he!==ce&&ri(s,ce,s.bindingMap),Qi(s,ce,M),he&&he!==ce&&Ri(s,he)
2024-04-26 18:33:18 UTC	16383	IN	Data Raw: 29 29 3a 4f 3d 3d 3d 6b 65 7c 7c 47 6e 7c 7c 75 28 53 74 2c 78 65 2c 4f 29 7d 65 6c 73 65 7b 69 66 28 41 73 3c 4f 2e 69 6e 64 65 78 26 26 21 47 6e 29 41 73 3d 4f 2e 69 6e 64 65 78 3b 65 6c 73 65 7b 66 6f 72 28 70 65 3d 4a 65 2e 6e 65 78 74 3b 70 65 2e 69 6e 64 65 78 3c 4f 2e 69 6e 64 65 78 3b 70 65 3d 70 65 2e 6e 65 78 74 29 3b 66 6f 72 28 76 61 72 20 57 74 3d 78 65 3b 57 74 21 3d 3d 68 65 3b 29 7b 76 61 72 20 79 6e 3d 57 74 2e 6e 65 78 74 3b 6f 65 3d 74 69 28 57 74 29 2c 74 74 28 57 74 2c 70 65 2c 70 65 2e 70 72 65 76 2e 69 6e 64 65 78 3d 3d 3d 57 74 2e 69 6e 64 65 78 2d 31 2c 70 65 2e 69 6e 64 65 78 3d 3d 3d 57 74 2e 69 6e 64 65 78 2b 31 2c 6f 65 26 26 6f 65 2e 6c 6f 63 61 74 69 6f 6e 4a 75 73 74 44 65 74 65 72 6d 69 6e 65 64 29 2c 57 74 3d 79 6e 7d 7d Data Ascii: )):O===ke\|\|Gn\|\|u(St,xe,O)}else{if(As<O.index&&!Gn)As=O.index;else{for(pe=Je.next;pe.index<O.index;pe=pe.next);for(var Wt=xe;Wt!==he;){var yn=Wt.next;oe=ti(Wt),tt(Wt,pe,pe.prev.index===Wt.index-1,pe.index===Wt.index+1,oe&&oe.locationJustDetermined),Wt=yn}}
2024-04-26 18:33:19 UTC	16383	IN	Data Raw: 2c 63 6f 75 6e 74 42 65 66 6f 72 65 3a 30 2c 63 6f 75 6e 74 41 66 74 65 72 3a 30 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 26 26 28 76 2e 5f 63 6f 75 6e 74 3d 30 29 3b 76 61 72 20 72 3d 76 2e 5f 63 6f 75 6e 74 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 6e 75 6d 62 65 72 22 26 26 28 67 28 72 29 2c 21 30 29 7d 7d 3b 76 2e 5f 66 65 74 63 68 51 75 65 75 65 2e 70 75 73 68 28 43 29 2c 76 2e 5f 69 74 65 6d 42 61 74 63 68 7c 7c 76 2e 5f 63 6f 6e 74 69 6e 75 65 46 65 74 63 68 28 43 29 7d 29 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 68 69 73 2e 5f 63 6f 75 6e 74 3d 3d 22 6e 75 6d 62 65 72 22 3f 51 2e 77 72 61 70 28 74 68 69 73 2e 5f 63 6f 75 6e 74 29 3a 63 7d 2c 69 6e 76 61 6c 69 64 61 74 65 47 72 6f 75 70 73 3a 66 75 Data Ascii: ,countBefore:0,countAfter:0,complete:function(h){h&&(v._count=0);var r=v._count;return typeof r=="number"&&(g(r),!0)}};v._fetchQueue.push(C),v._itemBatch\|\|v._continueFetch(C)});return typeof this._count=="number"?Q.wrap(this._count):c},invalidateGroups:fu
2024-04-26 18:33:19 UTC	16383	IN	Data Raw: 67 2e 68 6f 76 65 72 53 65 6c 65 63 74 6f 72 29 21 3d 3d 2d 31 26 26 74 2e 69 6e 64 65 78 4f 66 28 6c 29 3d 3d 3d 2d 31 29 7b 62 2e 70 75 73 68 28 74 2e 72 65 70 6c 61 63 65 28 67 2e 68 6f 76 65 72 53 65 6c 65 63 74 6f 72 2c 6c 29 29 3b 76 61 72 20 79 3d 74 2e 72 65 70 6c 61 63 65 28 67 2e 68 6f 76 65 72 53 65 6c 65 63 74 6f 72 2c 22 22 29 2e 74 72 69 6d 28 29 3b 43 2e 69 6e 64 65 78 4f 66 28 79 5b 30 5d 29 21 3d 3d 2d 31 26 26 62 2e 70 75 73 68 28 74 2e 72 65 70 6c 61 63 65 28 67 2e 68 6f 76 65 72 53 65 6c 65 63 74 6f 72 2b 22 20 22 2c 6c 29 29 7d 65 6c 73 65 20 62 2e 70 75 73 68 28 65 2b 22 20 22 2b 74 29 2c 43 2e 69 6e 64 65 78 4f 66 28 74 5b 30 5d 29 21 3d 3d 2d 31 26 26 62 2e 70 75 73 68 28 65 2b 74 29 3b 66 2b 3d 60 0a 60 2b 62 2e 6a 6f 69 6e 28 60 Data Ascii: g.hoverSelector)!==-1&&t.indexOf(l)===-1){b.push(t.replace(g.hoverSelector,l));var y=t.replace(g.hoverSelector,"").trim();C.indexOf(y[0])!==-1&&b.push(t.replace(g.hoverSelector+" ",l))}else b.push(e+" "+t),C.indexOf(t[0])!==-1&&b.push(e+t);f+=``+b.join(`
2024-04-26 18:33:19 UTC	16383	IN	Data Raw: 5f 73 69 74 65 2e 70 72 65 73 73 65 64 45 6e 74 69 74 79 2e 74 79 70 65 3d 3d 3d 71 2e 4f 62 6a 65 63 74 54 79 70 65 2e 69 74 65 6d 26 26 77 2e 74 79 70 65 3d 3d 3d 71 2e 4f 62 6a 65 63 74 54 79 70 65 2e 69 74 65 6d 26 26 74 68 69 73 2e 5f 73 69 74 65 2e 70 72 65 73 73 65 64 43 6f 6e 74 61 69 6e 65 72 26 26 74 68 69 73 2e 5f 73 69 74 65 2e 70 72 65 73 73 65 64 45 6e 74 69 74 79 2e 69 6e 64 65 78 3d 3d 3d 77 2e 69 6e 64 65 78 29 69 66 28 68 2e 73 68 69 66 74 4b 65 79 7c 7c 28 72 2e 73 65 6c 65 63 74 69 6f 6e 2e 5f 70 69 76 6f 74 3d 57 2e 5f 49 4e 56 41 4c 49 44 5f 49 4e 44 45 58 29 2c 68 2e 73 68 69 66 74 4b 65 79 29 7b 69 66 28 74 68 69 73 2e 5f 73 65 6c 65 63 74 69 6f 6e 41 6c 6c 6f 77 65 64 28 29 26 26 74 68 69 73 2e 5f 6d 75 6c 74 69 53 65 6c 65 63 74 Data Ascii: _site.pressedEntity.type===q.ObjectType.item&&w.type===q.ObjectType.item&&this._site.pressedContainer&&this._site.pressedEntity.index===w.index)if(h.shiftKey\|\|(r.selection._pivot=W._INVALID_INDEX),h.shiftKey){if(this._selectionAllowed()&&this._multiSelect
2024-04-26 18:33:19 UTC	5	IN	Data Raw: 69 6f 6e 28 29 Data Ascii: ion()
2024-04-26 18:33:19 UTC	16383	IN	Data Raw: 7b 76 61 72 20 54 3d 6e 65 77 20 65 65 2e 5f 53 65 6c 65 63 74 69 6f 6e 28 74 68 69 73 2e 5f 6c 69 73 74 56 69 65 77 29 3b 72 65 74 75 72 6e 20 54 2e 5f 72 61 6e 67 65 73 3d 74 68 69 73 2e 5f 73 65 6c 65 63 74 65 64 2e 67 65 74 52 61 6e 67 65 73 28 29 2c 54 2e 5f 69 74 65 6d 73 43 6f 75 6e 74 3d 74 68 69 73 2e 5f 73 65 6c 65 63 74 65 64 2e 5f 69 74 65 6d 73 43 6f 75 6e 74 2c 54 2e 5f 72 65 74 61 69 6e 52 61 6e 67 65 73 28 29 2c 54 7d 7d 2c 42 2e 73 75 70 70 6f 72 74 65 64 46 6f 72 50 72 6f 63 65 73 73 69 6e 67 3d 21 31 2c 42 7d 29 7d 29 7d 29 2c 49 65 28 22 57 69 6e 4a 53 2f 43 6f 6e 74 72 6f 6c 73 2f 4c 69 73 74 56 69 65 77 2f 5f 42 72 6f 77 73 65 4d 6f 64 65 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 2e 2e 2f 2e 2e 2f 43 6f 72 65 2f 5f 47 6c 6f 62 61 6c Data Ascii: {var T=new ee._Selection(this._listView);return T._ranges=this._selected.getRanges(),T._itemsCount=this._selected._itemsCount,T._retainRanges(),T}},B.supportedForProcessing=!1,B})})}),Ie("WinJS/Controls/ListView/_BrowseMode",["exports","../../Core/_Global
2024-04-26 18:33:19 UTC	16383	IN	Data Raw: 6f 64 65 2c 54 2e 5f 66 6f 6f 74 70 72 69 6e 74 43 6c 61 73 73 29 3b 69 66 28 21 74 68 69 73 2e 5f 64 72 61 67 42 65 74 77 65 65 6e 44 69 73 61 62 6c 65 64 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 67 65 74 50 6f 73 69 74 69 6f 6e 49 6e 43 61 6e 76 61 73 53 70 61 63 65 28 67 29 2c 53 3d 74 68 69 73 2e 73 69 74 65 2e 5f 76 69 65 77 2e 68 69 74 54 65 73 74 28 72 2e 78 2c 72 2e 79 29 2c 45 3d 76 28 2d 31 2c 74 68 69 73 2e 73 69 74 65 2e 5f 63 61 63 68 65 64 43 6f 75 6e 74 2d 31 2c 53 2e 69 6e 73 65 72 74 41 66 74 65 72 49 6e 64 65 78 29 2c 52 3d 21 30 3b 69 66 28 74 68 69 73 2e 5f 6c 61 73 74 49 6e 73 65 72 74 50 6f 69 6e 74 26 26 74 68 69 73 2e 5f 6c 61 73 74 49 6e 73 65 72 74 50 6f 69 6e 74 2e 69 6e 73 65 72 74 41 66 74 65 72 49 6e 64 65 78 3d 3d 3d 45 26 Data Ascii: ode,T._footprintClass);if(!this._dragBetweenDisabled){var r=this._getPositionInCanvasSpace(g),S=this.site._view.hitTest(r.x,r.y),E=v(-1,this.site._cachedCount-1,S.insertAfterIndex),R=!0;if(this._lastInsertPoint&&this._lastInsertPoint.insertAfterIndex===E&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	50399	52.55.144.0	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	489	OUT	GET /match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-EXC.qSRE2pVFjithS3QYY.qSoH4wk.0nJAA-~A&gdpr=0 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18f1bae1d9d-42c70000010a45f6; SERVERID=17910~DM
2024-04-26 18:33:18 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=17910~DM; Domain=eyeota.net; Path=/; Expires=Fri, 26 Apr 2024 18:43:18 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Fri, 26 Apr 2024 18:33:18 GMT
2024-04-26 18:33:18 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	50398	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	644	OUT	GET /117405/Resources/dist/Resources/js/WebCommon/Components/jqueryG18n/globInfo/jquery.glob.de.min.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:18 UTC	546	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 803922 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:18 GMT Etag: "6a9a7779c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:17 GMT Server: ECAcc (mic/9B06) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 1025 Connection: close
2024-04-26 18:33:18 UTC	1025	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 61 3d 65 2e 63 75 6c 74 75 72 65 73 2c 6e 3d 61 2e 65 6e 2c 64 3d 6e 2e 63 61 6c 65 6e 64 61 72 73 2e 73 74 61 6e 64 61 72 64 2c 72 3d 61 2e 64 65 3d 65 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 6e 2c 7b 6e 61 6d 65 3a 22 64 65 22 2c 65 6e 67 6c 69 73 68 4e 61 6d 65 3a 22 47 65 72 6d 61 6e 22 2c 6e 61 74 69 76 65 4e 61 6d 65 3a 22 44 65 75 74 73 63 68 22 2c 6c 61 6e 67 75 61 67 65 3a 22 64 65 22 2c 6e 75 6d 62 65 72 46 6f 72 6d 61 74 3a 7b 22 2c 22 3a 22 2e 22 2c 22 2e 22 3a 22 2c 22 2c 70 65 72 63 65 6e 74 3a 7b 70 61 74 74 65 72 6e 3a 5b 22 2d 6e 25 22 2c 22 6e 25 22 5d 2c 22 2c 22 3a 22 2e 22 2c 22 2e 22 3a 22 2c 22 7d 2c 63 75 72 72 65 6e 63 79 3a 7b 70 61 74 74 65 72 6e 3a 5b 22 2d 6e 20 24 22 2c 22 Data Ascii: (function(e){var a=e.cultures,n=a.en,d=n.calendars.standard,r=a.de=e.extend(!0,{},n,{name:"de",englishName:"German",nativeName:"Deutsch",language:"de",numberFormat:{",":".",".":",",percent:{pattern:["-n%","n%"],",":".",".":","},currency:{pattern:["-n $","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	50400	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	720	OUT	GET /398646.gif?n=3 HTTP/1.1 Host: rc.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=1rhDcLeioz2OsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCJi7KxAa
2024-04-26 18:33:19 UTC	743	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=liveramp&ttd_tpi=1 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=iEYVpG34ybWOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 18:33:18 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgjC6gEQMRIGCLjrARArEgYImLsrEBo=; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 18:33:18 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:33:18 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	50401	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	720	OUT	GET /398646.gif?n=4 HTTP/1.1 Host: rc.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=1rhDcLeioz2OsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCJi7KxAa
2024-04-26 18:33:19 UTC	791	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://ib.adnxs.com/getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=iEYVpG34ybWOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 18:33:18 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYItuoBEDESBgi66gEQMBIGCLjrARArEgYImLsrEBo=; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 18:33:18 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:33:18 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	50402	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	720	OUT	GET /398646.gif?n=5 HTTP/1.1 Host: rc.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=1rhDcLeioz2OsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCJi7KxAa
2024-04-26 18:33:19 UTC	844	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://s.amazon-adsystem.com/dcm?pid=1f9f6bba-5ede-4cb5-997f-f0d0b894f672&id=1463afc0165279ba4b9955bf9076da3f87f74e0a26198643796f9993ca29256fc0cb235b3774c97e&cb=07636551 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=wwa4zCLWMjaOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 18:33:19 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCOrcKhAyEgYImLsrEBo=; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 18:33:19 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:33:19 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	50404	8.28.7.81	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	735	OUT	GET /AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fsync.sharethis.com%2Fpubmatic%3Fuid%3D%23PM_USER_ID%26gdpr%3DPM_GDPR%26gdpr_consent%3DPM_CONSENT HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:19 UTC	535	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: /AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fsync.sharethis.com%2Fpubmatic%3Fuid%3D%23PM_USER_ID%26gdpr%3DPM_GDPR%26gdpr_consent%3DPM_CONSENT&rdf=1 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Date: Fri, 26 Apr 2024 18:33:17 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	50405	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:18 UTC	606	OUT	GET /v3/ohlc/eur/day?assets[]=B86C034B-EFE3-11EB-B56F-0691764446A7 HTTP/1.1 Host: api.bitpanda.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.bitpanda.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.bitpanda.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:19 UTC	741	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:19 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers, Accept-Encoding access-control-allow-origin: https://www.bitpanda.com Last-Modified: Fri, 26 Apr 2024 18:33:10 GMT CF-Cache-Status: HIT Expires: Fri, 26 Apr 2024 18:33:49 GMT Cache-Control: public, max-age=30 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Set-Cookie: _cfuvid=iLhZtCQyREY7v2ANl3yA2yjeSK7Vw9WLOsdgOwEL29w-1714156399276-0.0.1.1-604800000; path=/; domain=.bitpanda.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87a8a916a9b9d9cd-MIA
2024-04-26 18:33:19 UTC	628	IN	Data Raw: 36 31 31 38 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 42 38 36 43 30 33 34 42 2d 45 46 45 33 2d 31 31 45 42 2d 42 35 36 46 2d 30 36 39 31 37 36 34 34 34 36 41 37 22 3a 5b 7b 22 74 79 70 65 22 3a 22 63 61 6e 64 6c 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 6f 77 22 3a 22 36 30 31 31 34 22 2c 22 68 69 67 68 22 3a 22 36 30 31 39 34 2e 38 22 2c 22 6f 70 65 6e 22 3a 22 36 30 31 36 31 2e 39 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 31 37 32 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 35 54 32 30 3a 34 30 3a 30 30 2b 30 32 3a 30 30 22 2c 22 75 6e 69 78 22 3a 22 31 37 31 34 30 37 30 34 30 30 22 7d 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 61 6e 64 6c 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b Data Ascii: 6118{"data":{"B86C034B-EFE3-11EB-B56F-0691764446A7":[{"type":"candle","attributes":{"low":"60114","high":"60194.8","open":"60161.9","close":"60172","time":{"date_iso8601":"2024-04-25T20:40:00+02:00","unix":"1714070400"}}},{"type":"candle","attributes":{
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 22 2c 22 6f 70 65 6e 22 3a 22 36 30 32 33 32 2e 32 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 32 34 37 2e 38 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 35 54 32 31 3a 31 30 3a 30 30 2b 30 32 3a 30 30 22 2c 22 75 6e 69 78 22 3a 22 31 37 31 34 30 37 32 32 30 30 22 7d 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 61 6e 64 6c 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 6f 77 22 3a 22 36 30 32 34 37 2e 38 22 2c 22 68 69 67 68 22 3a 22 36 30 33 31 32 2e 34 22 2c 22 6f 70 65 6e 22 3a 22 36 30 32 34 37 2e 38 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 33 30 33 2e 32 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 35 54 32 31 3a 32 30 3a 30 30 2b 30 Data Ascii: ","open":"60232.2","close":"60247.8","time":{"date_iso8601":"2024-04-25T21:10:00+02:00","unix":"1714072200"}}},{"type":"candle","attributes":{"low":"60247.8","high":"60312.4","open":"60247.8","close":"60303.2","time":{"date_iso8601":"2024-04-25T21:20:00+0
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 69 67 68 22 3a 22 36 30 34 34 31 2e 33 22 2c 22 6f 70 65 6e 22 3a 22 36 30 32 39 38 2e 39 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 34 34 31 2e 33 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 35 54 32 32 3a 33 30 3a 30 30 2b 30 32 3a 30 30 22 2c 22 75 6e 69 78 22 3a 22 31 37 31 34 30 37 37 30 30 30 22 7d 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 61 6e 64 6c 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 6f 77 22 3a 22 36 30 33 36 32 2e 38 22 2c 22 68 69 67 68 22 3a 22 36 30 34 35 30 22 2c 22 6f 70 65 6e 22 3a 22 36 30 34 34 31 2e 33 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 34 30 33 2e 37 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 35 Data Ascii: igh":"60441.3","open":"60298.9","close":"60441.3","time":{"date_iso8601":"2024-04-25T22:30:00+02:00","unix":"1714077000"}}},{"type":"candle","attributes":{"low":"60362.8","high":"60450","open":"60441.3","close":"60403.7","time":{"date_iso8601":"2024-04-25
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 33 30 30 2e 31 22 2c 22 68 69 67 68 22 3a 22 36 30 34 33 38 22 2c 22 6f 70 65 6e 22 3a 22 36 30 34 33 38 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 33 32 38 2e 31 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 35 54 32 33 3a 35 30 3a 30 30 2b 30 32 3a 30 30 22 2c 22 75 6e 69 78 22 3a 22 31 37 31 34 30 38 31 38 30 30 22 7d 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 61 6e 64 6c 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 6f 77 22 3a 22 36 30 32 35 33 2e 33 22 2c 22 68 69 67 68 22 3a 22 36 30 33 33 30 2e 39 22 2c 22 6f 70 65 6e 22 3a 22 36 30 33 32 38 2e 31 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 32 38 35 2e 38 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 Data Ascii: 300.1","high":"60438","open":"60438","close":"60328.1","time":{"date_iso8601":"2024-04-25T23:50:00+02:00","unix":"1714081800"}}},{"type":"candle","attributes":{"low":"60253.3","high":"60330.9","open":"60328.1","close":"60285.8","time":{"date_iso8601":"202
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 22 2c 22 68 69 67 68 22 3a 22 36 30 32 39 32 2e 39 22 2c 22 6f 70 65 6e 22 3a 22 36 30 32 39 32 2e 39 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 32 32 33 2e 35 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 30 31 3a 31 30 3a 30 30 2b 30 32 3a 30 30 22 2c 22 75 6e 69 78 22 3a 22 31 37 31 34 30 38 36 36 30 30 22 7d 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 61 6e 64 6c 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 6f 77 22 3a 22 36 30 31 35 30 2e 37 22 2c 22 68 69 67 68 22 3a 22 36 30 32 31 31 2e 32 22 2c 22 6f 70 65 6e 22 3a 22 36 30 32 32 33 2e 35 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 31 35 30 2e 37 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 Data Ascii: ","high":"60292.9","open":"60292.9","close":"60223.5","time":{"date_iso8601":"2024-04-26T01:10:00+02:00","unix":"1714086600"}}},{"type":"candle","attributes":{"low":"60150.7","high":"60211.2","open":"60223.5","close":"60150.7","time":{"date_iso8601":"2024
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 38 32 35 2e 39 22 2c 22 68 69 67 68 22 3a 22 36 30 30 31 34 2e 31 22 2c 22 6f 70 65 6e 22 3a 22 35 39 39 39 39 2e 32 22 2c 22 63 6c 6f 73 65 22 3a 22 35 39 39 35 39 2e 37 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 30 32 3a 33 30 3a 30 30 2b 30 32 3a 30 30 22 2c 22 75 6e 69 78 22 3a 22 31 37 31 34 30 39 31 34 30 30 22 7d 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 61 6e 64 6c 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 6f 77 22 3a 22 35 39 38 30 30 2e 31 22 2c 22 68 69 67 68 22 3a 22 35 39 39 35 39 2e 37 22 2c 22 6f 70 65 6e 22 3a 22 35 39 39 35 39 2e 37 22 2c 22 63 6c 6f 73 65 22 3a 22 35 39 38 37 32 2e 37 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a Data Ascii: 825.9","high":"60014.1","open":"59999.2","close":"59959.7","time":{"date_iso8601":"2024-04-26T02:30:00+02:00","unix":"1714091400"}}},{"type":"candle","attributes":{"low":"59800.1","high":"59959.7","open":"59959.7","close":"59872.7","time":{"date_iso8601":
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 6f 77 22 3a 22 36 30 30 34 37 2e 32 22 2c 22 68 69 67 68 22 3a 22 36 30 32 31 38 2e 32 22 2c 22 6f 70 65 6e 22 3a 22 36 30 31 38 35 2e 31 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 30 34 37 2e 32 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 30 33 3a 35 30 3a 30 30 2b 30 32 3a 30 30 22 2c 22 75 6e 69 78 22 3a 22 31 37 31 34 30 39 36 32 30 30 22 7d 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 61 6e 64 6c 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 6f 77 22 3a 22 35 39 39 35 33 2e 39 22 2c 22 68 69 67 68 22 3a 22 36 30 31 31 30 22 2c 22 6f 70 65 6e 22 3a 22 36 30 30 34 37 2e 32 22 2c 22 63 6c 6f 73 65 22 3a 22 35 39 39 37 37 2e 35 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 Data Ascii: ow":"60047.2","high":"60218.2","open":"60185.1","close":"60047.2","time":{"date_iso8601":"2024-04-26T03:50:00+02:00","unix":"1714096200"}}},{"type":"candle","attributes":{"low":"59953.9","high":"60110","open":"60047.2","close":"59977.5","time":{"date_iso8
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 77 22 3a 22 36 30 30 37 35 2e 31 22 2c 22 68 69 67 68 22 3a 22 36 30 31 30 37 2e 35 22 2c 22 6f 70 65 6e 22 3a 22 36 30 30 37 36 2e 32 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 31 30 37 2e 35 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 30 35 3a 31 30 3a 30 30 2b 30 32 3a 30 30 22 2c 22 75 6e 69 78 22 3a 22 31 37 31 34 31 30 31 30 30 30 22 7d 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 61 6e 64 6c 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 6f 77 22 3a 22 35 39 39 38 33 2e 37 22 2c 22 68 69 67 68 22 3a 22 36 30 31 31 39 2e 31 22 2c 22 6f 70 65 6e 22 3a 22 36 30 31 30 37 2e 35 22 2c 22 63 6c 6f 73 65 22 3a 22 35 39 39 39 31 2e 38 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f Data Ascii: w":"60075.1","high":"60107.5","open":"60076.2","close":"60107.5","time":{"date_iso8601":"2024-04-26T05:10:00+02:00","unix":"1714101000"}}},{"type":"candle","attributes":{"low":"59983.7","high":"60119.1","open":"60107.5","close":"59991.8","time":{"date_iso
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 73 22 3a 7b 22 6c 6f 77 22 3a 22 35 39 39 30 32 2e 38 22 2c 22 68 69 67 68 22 3a 22 36 30 30 32 37 22 2c 22 6f 70 65 6e 22 3a 22 36 30 30 34 31 2e 32 22 2c 22 63 6c 6f 73 65 22 3a 22 35 39 39 36 35 2e 33 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 30 36 3a 33 30 3a 30 30 2b 30 32 3a 30 30 22 2c 22 75 6e 69 78 22 3a 22 31 37 31 34 31 30 35 38 30 30 22 7d 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 61 6e 64 6c 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 6f 77 22 3a 22 35 39 39 33 34 2e 35 22 2c 22 68 69 67 68 22 3a 22 35 39 39 37 39 2e 36 22 2c 22 6f 70 65 6e 22 3a 22 35 39 39 36 35 2e 33 22 2c 22 63 6c 6f 73 65 22 3a 22 35 39 39 37 39 2e 36 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 Data Ascii: s":{"low":"59902.8","high":"60027","open":"60041.2","close":"59965.3","time":{"date_iso8601":"2024-04-26T06:30:00+02:00","unix":"1714105800"}}},{"type":"candle","attributes":{"low":"59934.5","high":"59979.6","open":"59965.3","close":"59979.6","time":{"dat
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 6f 77 22 3a 22 36 30 30 30 30 22 2c 22 68 69 67 68 22 3a 22 36 30 31 38 35 2e 31 22 2c 22 6f 70 65 6e 22 3a 22 36 30 30 30 30 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 31 38 35 2e 31 22 2c 22 74 69 6d 65 22 3a 7b 22 64 61 74 65 5f 69 73 6f 38 36 30 31 22 3a 22 32 30 32 34 2d 30 34 2d 32 36 54 30 37 3a 35 30 3a 30 30 2b 30 32 3a 30 30 22 2c 22 75 6e 69 78 22 3a 22 31 37 31 34 31 31 30 36 30 30 22 7d 7d 7d 2c 7b 22 74 79 70 65 22 3a 22 63 61 6e 64 6c 65 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6c 6f 77 22 3a 22 36 30 30 39 39 2e 31 22 2c 22 68 69 67 68 22 3a 22 36 30 32 30 30 22 2c 22 6f 70 65 6e 22 3a 22 36 30 31 38 35 2e 31 22 2c 22 63 6c 6f 73 65 22 3a 22 36 30 31 30 36 2e 33 22 2c 22 74 69 6d 65 22 3a Data Ascii: attributes":{"low":"60000","high":"60185.1","open":"60000","close":"60185.1","time":{"date_iso8601":"2024-04-26T07:50:00+02:00","unix":"1714110600"}}},{"type":"candle","attributes":{"low":"60099.1","high":"60200","open":"60185.1","close":"60106.3","time":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	50407	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:19 UTC	933	OUT	GET /tv-show HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:19 UTC	949	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:19 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mikd2d27QltdS95lREHT0%2BeuHOnSQZ%2Flvjj9j3fgQtlrSNZUIPgyZF7mhRusJWoAdFQZ0gIvBNSmB3Bnnzm9yIe2amcWK%2BvKq3n3qH1U3NwwGjsJqwjHnrsfwv%2FNjGY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a9176f85a540-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:19 UTC	420	IN	Data Raw: 31 35 62 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 23 31 4d 6f 76 69 65 73 20 7c 20 57 61 74 63 68 20 46 72 65 65 20 53 74 72 65 61 6d 69 6e 67 20 4d 6f 76 69 65 73 20 61 6e 64 20 54 56 20 53 65 72 69 65 73 20 4f 6e 6c 69 6e 65 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 Data Ascii: 15b1<!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>#1Movies \| Watch Free Streaming Movies and TV Series Online</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/> <meta
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 73 74 61 74 69 63 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 22 3e 0a 0a 3c 6c 69 Data Ascii: href="//www.google-analytics.com"><link rel="dns-prefetch" href="//www.gstatic.com"><link rel="dns-prefetch" href="//fonts.gstatic.com"><link rel="dns-prefetch" href="//cdnjs.cloudflare.com"><link rel="dns-prefetch" href="//static.zdassets.com"><li
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 66 72 65 65 2c 20 53 74 72 65 61 6d 69 6e 67 20 6d 6f 76 69 65 73 20 6f 6e 20 31 4d 6f 76 69 65 73 2e 74 6f 2e 20 31 4d 6f 76 69 65 73 20 69 73 20 74 68 65 20 62 69 67 67 65 73 74 20 77 65 62 73 69 74 65 20 66 6f 72 20 66 72 65 65 20 6d 6f 76 69 65 73 2e 22 2f 3e 0a 3c 21 2d 2d 42 65 67 69 6e 3a 20 53 74 79 6c 65 73 68 65 65 74 2d 2d 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 63 6b 70 61 74 68 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 34 2e 34 2e 31 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: free, Streaming movies on 1Movies.to. 1Movies is the biggest website for free movies."/>...Begin: Stylesheet--><link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.4.1/css/bootstrap.min.css"><link rel="stylesheet" href="https://
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 42 44 3b 24 2e 5f 43 3c 24 2e 43 42 3b 24 2e 5f 43 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 29 7b 63 61 73 65 20 24 2e 79 3a 72 65 74 75 72 6e 20 75 2e 64 28 74 2c 24 2e 43 61 2c 74 29 2c 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 26 26 6e 5b 24 2e 43 63 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 43 69 5d 3b 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3b 7d 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 75 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 5b 24 2e 43 46 5d 5b 24 2e 43 4a 5d 5b 24 2e 42 7a 5d 28 6e 2c 74 29 3b 7d 2c 75 2e 70 3d 24 2e 42 75 2c 75 28 75 2e 73 3d 24 2e 42 78 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a Data Ascii: BD;$._C<$.CB;$._C+=$.y){switch($._C){case $.y:return u.d(t,$.Ca,t),t;break;case $.BD:var t=n&&n[$.Cc]?function(){return n[$.Ci];}:function(){return n;};break;}}},u.o=function(n,t){return Object[$.CF][$.CJ][$.Bz](n,t);},u.p=$.Bu,u(u.s=$.Bx);break;case $.y:
2024-04-26 18:33:19 UTC	1034	IN	Data Raw: 61 72 20 74 3d 6e 5b 24 2e 47 75 5d 28 24 2e 64 79 29 2c 72 3d 74 5b 24 2e 63 6a 5d 28 29 5b 24 2e 65 46 5d 28 29 2c 65 3d 74 5b 24 2e 42 74 5d 28 24 2e 64 79 29 3b 62 72 65 61 6b 3b 7d 7d 7d 29 2c 75 5b 73 2e 5a 5d 3f 28 6c 3d 21 24 2e 42 44 2c 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 5a 5d 29 29 3a 75 5b 73 2e 57 5d 26 26 28 24 2e 42 44 2c 61 2e 24 29 28 75 5b 73 2e 57 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 6e 3d 74 5b 24 2e 63 72 5d 28 29 5b 24 2e 64 64 5d 28 29 5b 24 2e 47 75 5d 28 6e 65 77 20 52 65 67 45 78 70 28 24 2e 64 7a 2c 24 2e 42 75 29 29 2c 75 3d 24 2e 24 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 74 5b 24 2e 49 69 5d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 74 3d 6e 65 77 20 77 69 Data Ascii: ar t=n[$.Gu]($.dy),r=t[$.cj]()[$.eF](),e=t[$.Bt]($.dy);break;}}}),u[s.Z]?(l=!$.BD,($.BD,a.$)(u[s.Z])):u[s.W]&&($.BD,a.$)(u[s.W]);break;case $.BD:var n=t[$.cr]()[$.dd]()[$.Gu](new RegExp($.dz,$.Bu)),u=$.$();break;}}}},t[$.Ii]();break;case $.BD:var t=new wi
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 32 37 34 62 0d 0a 24 2e 44 43 29 2c 69 3d 65 28 24 2e 43 42 29 2c 6f 3d 65 28 24 2e 46 6a 29 2c 63 3d 65 28 24 2e 46 6b 29 2c 66 3d 65 28 24 2e 46 6c 29 2c 61 3d 65 28 24 2e 46 6d 29 2c 64 3d 65 28 24 2e 42 44 29 2c 73 3d 65 28 24 2e 46 6e 29 2c 6c 3d 21 24 2e 79 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 75 29 7b 66 6f 72 28 24 2e 5f 43 7a 3d 24 2e 42 44 3b 24 2e 5f 43 7a 3c 24 2e 46 73 3b 24 2e 5f 43 7a 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 43 7a 29 7b 63 61 73 65 20 24 2e 43 66 3a 72 2e 74 6e 3d 66 5b 24 2e 42 6e 5d 28 29 5b 24 2e 42 76 5d 28 24 2e 42 79 29 5b 24 2e 43 41 5d 28 24 2e 43 42 29 2c 72 2e 6e 6e 3d 66 5b 24 2e 42 6e 5d 28 29 5b 24 2e 42 Data Ascii: 274b$.DC),i=e($.CB),o=e($.Fj),c=e($.Fk),f=e($.Fl),a=e($.Fm),d=e($.BD),s=e($.Fn),l=!$.y;break;case $.BD:$.Cr;break;}}},function(t,r,u){for($._Cz=$.BD;$._Cz<$.Fs;$._Cz+=$.y){switch($._Cz){case $.Cf:r.tn=f[$.Bn]()[$.Bv]($.By)[$.CA]($.CB),r.nn=f[$.Bn]()[$.B
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 28 24 2e 43 66 29 2c 63 3d 24 2e 43 73 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 5b 24 2e 61 5d 3a 6e 75 6c 6c 2c 61 3d 72 2e 65 6e 3d 24 2e 4a 63 2c 64 3d 72 2e 72 6e 3d 24 2e 4a 64 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 42 63 3d 24 2e 42 44 3b 24 2e 5f 42 63 3c 24 2e 43 66 3b 24 2e 5f 42 63 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 63 29 7b 63 61 73 65 20 24 2e 43 42 3a 76 61 72 20 65 3d 5b 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 79 3a 4f 62 6a 65 63 74 5b 24 2e 65 5d 28 74 2c 24 2e 43 63 2c 24 2e 24 28 24 2e 49 6a 2c 21 24 2e 42 44 29 29 2c 74 5b 24 2e 44 6a 5d 3d 66 75 6e 63 Data Ascii: ($.Cf),c=$.Cs!=typeof document?document[$.a]:null,a=r.en=$.Jc,d=r.rn=$.Jd;break;case $.BD:$.Cr;break;}}},function(n,t,r){for($._Bc=$.BD;$._Bc<$.Cf;$._Bc+=$.y){switch($._Bc){case $.CB:var e=[];break;case $.y:Object[$.e](t,$.Cc,$.$($.Ij,!$.BD)),t[$.Dj]=func
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6e 3c 3d 24 2e 46 6b 3f 6b 5b 24 2e 6f 5d 28 6e 2b 65 29 3a 6e 3c 3d 24 2e 63 6b 3f 6b 5b 24 2e 6f 5d 28 6e 2b 6f 2d 69 29 3a 6b 5b 24 2e 6f 5d 28 65 29 3b 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 43 42 3a 76 61 72 20 65 3d 24 2e 43 74 2c 75 3d 24 2e 43 75 2c 69 3d 75 2d 65 2b 24 2e 79 2c 6f 3d 24 2e 43 76 2c 63 3d 24 2e 43 77 2c 66 3d 63 2d 6f 2b 24 2e 79 2b 69 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 24 2e 43 72 3b 62 72 65 61 6b 3b 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 6f 72 28 24 2e 5f 46 3d 24 2e 42 44 3b 24 2e 5f 46 3c 24 2e 43 66 3b 24 2e 5f 46 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 46 29 7b 63 61 73 65 20 24 2e 43 42 3a 74 2e 76 6e 3d 24 2e 48 6c 2c 74 2e 6c 6e 3d 24 2e 48 Data Ascii: ){return n<=$.Fk?k[$.o](n+e):n<=$.ck?k[$.o](n+o-i):k[$.o](e);}break;case $.CB:var e=$.Ct,u=$.Cu,i=u-e+$.y,o=$.Cv,c=$.Cw,f=c-o+$.y+i;break;case $.BD:$.Cr;break;}}},function(n,t,r){for($._F=$.BD;$._F<$.Cf;$._F+=$.y){switch($._F){case $.CB:t.vn=$.Hl,t.ln=$.H
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 28 63 2b 6c 2e 53 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 75 3d 64 5b 24 2e 44 75 5d 3f 6e 65 77 20 65 28 64 5b 24 2e 44 75 5d 29 5b 24 2e 42 76 5d 28 29 3a 72 5b 24 2e 47 75 5d 28 77 29 5b 24 2e 63 76 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 5b 24 2e 65 73 5d 28 24 2e 65 76 29 3b 7d 29 2c 69 3d 75 5b 24 2e 47 75 5d 28 79 29 5b 24 2e 61 72 5d 28 29 2c 6f 3d 6e 65 77 20 65 28 69 29 5b 24 2e 64 67 5d 28 29 5b 24 2e 47 75 5d 28 62 29 2c 63 3d 6f 5b 24 2e 63 6a 5d 28 29 2c 66 3d 6f 5b 24 2e 63 6a 5d 28 29 5b 24 2e 47 75 5d 28 5f 29 2c 61 3d 66 5b 24 2e 63 6a 5d 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 63 61 74 63 68 28 6e 29 7b 64 5b 24 2e 44 73 5d 3d 24 2e 63 47 3b 7d 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 Data Ascii: (c+l.S);break;case $.BD:var u=d[$.Du]?new e(d[$.Du])[$.Bv]():r[$.Gu](w)[$.cv](function(n){return n[$.es]($.ev);}),i=u[$.Gu](y)[$.ar](),o=new e(i)[$.dg]()[$.Gu](b),c=o[$.cj](),f=o[$.cj]()[$.Gu](_),a=f[$.cj]();break;}}}catch(n){d[$.Ds]=$.cG;}break;case $.BD
2024-04-26 18:33:19 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 24 2e 5f 42 78 3d 24 2e 42 44 3b 24 2e 5f 42 78 3c 24 2e 43 42 3b 24 2e 5f 42 78 2b 3d 24 2e 79 29 7b 73 77 69 74 63 68 28 24 2e 5f 42 78 29 7b 63 61 73 65 20 24 2e 79 3a 6c 5b 24 2e 44 75 5d 2b 3d 6e 2c 74 28 29 2c 28 24 2e 42 44 2c 69 2e 41 6e 29 28 29 2c 28 24 2e 42 44 2c 64 2e 46 29 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 76 61 72 20 6e 3d 6e 65 77 20 65 28 29 5b 24 2e 63 49 5d 28 29 2d 77 5b 24 2e 63 49 5d 28 29 3b 62 72 65 61 6b 3b 7d 7d 7d 7d 2c 24 2e 63 64 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 24 2e 42 44 3a 69 66 28 68 28 6c 5b 24 2e 44 72 5d 29 5b 24 2e 64 6e 5d 28 24 2e 42 44 29 5b 24 2e 6c 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 24 2e 5f 43 79 3d 24 2e 42 44 3b 24 2e 5f 43 79 3c 24 2e 43 66 3b 24 Data Ascii: {for($._Bx=$.BD;$._Bx<$.CB;$._Bx+=$.y){switch($._Bx){case $.y:l[$.Du]+=n,t(),($.BD,i.An)(),($.BD,d.F)();break;case $.BD:var n=new e()[$.cI]()-w[$.cI]();break;}}}},$.cd);break;case $.BD:if(h(l[$.Dr])[$.dn]($.BD)[$.l](function(n){for($._Cy=$.BD;$._Cy<$.Cf;$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	50406	15.197.193.217	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:20 UTC	778	OUT	GET /track/cmf/generic?ttd_pid=mssm115&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUYASABKAIyCwj669e8wYrzPBAFOAFaBmV5ZW90YWAC
2024-04-26 18:33:20 UTC	566	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:33:20 GMT Content-Length: 229 Connection: close server: Kestrel location: https://map.go.affec.tv/map/ttd/6f67744e-1091-4048-adba-e024cc18f2d2?ttd_puid=&gdpr=0&gdpr_consent= set-cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; expires=Sat, 26 Apr 2025 18:33:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUYASABKAIyCwjA_c_DworzPBAFOAFaB21zc20xMTVgAg..; expires=Sat, 26 Apr 2025 18:33:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 18:33:20 UTC	229	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 70 2e 67 6f 2e 61 66 66 65 63 2e 74 76 2f 6d 61 70 2f 74 74 64 2f 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 3f 74 74 64 5f 70 75 69 64 3d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 70 2e 67 6f 2e 61 66 66 65 63 2e 74 76 2f 6d 61 70 2f 74 74 64 2f 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 3f 74 74 64 5f 70 75 69 64 3d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://map.go.affec.tv/map/ttd/6f67744e-1091-4048-adba-e024cc18f2d2?ttd_puid=&gdpr=0&gdpr_consent=">https://map.go.affec.tv/map/ttd/6f67744e-1091-4048-adba-e024cc18f2d2?ttd_puid=&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	50417	3.225.96.121	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:20 UTC	703	OUT	GET /sync/img?req=api5137&cust=269&p1=ZGkACWYr8zMAAAAIA98YAw%3D%3D HTTP/1.1 Host: api5137.d41.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D41ID=v3\|v4\|197059634fe141449898fb53dec95bfd\|https://d41.co
2024-04-26 18:33:20 UTC	1164	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:33:20 GMT Content-Type: image/gif; charset=ISO-8859-1 Content-Length: 43 Connection: close access-control-allow-origin: https://t.sharethis.com access-control-allow-credentials: true Cache-Control: no-cache, no-store Pragma: no-cache X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Referrer-Policy: no-referrer-when-downgrade Expect-CT: max-age=30, report-uri="https://a54b4ab95d40a8b116fae47033b75682.report-uri.com/r/d/ct/reportOnly" Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; frame-ancestors 'self'; form-action 'self'; Set-Cookie: D41ID=v3\|v4\|197059634fe141449898fb53dec95bfd\|https://d41.co; path=/; expires=Sat, 26 Apr 2025 18:33:20 GMT; domain=.d41.co; samesite=none; secure Set-Cookie: D41IDT=09a6f58797e240ca8edf44d5cf3ca14a; path=/; expires=Fri, 26 Apr 2024 18:33:25 GMT; domain=.d41.co; samesite=none; secure Location: https://id.rlcdn.com/712087.gif?cparams=197059634fe141449898fb53dec95bfd-09a6f58797e240ca8edf44d5cf3ca14a-2-269-api5137
2024-04-26 18:33:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	50411	142.250.217.226	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:20 UTC	827	OUT	GET /pagead/viewthroughconversion/973564320/?value=0&guid=ON&script=0 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.fndsda.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkEiXynQ3F2vfWpzcT0iiYFVMu4cIAq8AD1TijBJDcnZ7lPa4qPjngJWg7LZTM
2024-04-26 18:33:20 UTC	764	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:33:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/973564320/?value=0&guid=ON&script=0&is_vtc=1&cid=CAQSKQB7FLtqIWCupQ6QASUYyB_NACOq4h5nr3ioKoYhveSeygxEL9dBWXwl&random=3696428706 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:33:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	50420	52.92.0.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:20 UTC	442	OUT	GET /static/cryptocoin/b86c034b-efe3-11eb-b56f-0691764446a7.svg HTTP/1.1 Host: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:20 UTC	470	IN	HTTP/1.1 200 OK x-amz-id-2: BXVC6voaU/q8vVxXRXCVlhSXv5hoBow+OsDzB4tjvV9ZWAvJ3AEIXPCUoasAiJjrW313/qMOALw= x-amz-request-id: B29R2CXXA382ZAH6 Date: Fri, 26 Apr 2024 18:33:21 GMT Last-Modified: Fri, 28 Oct 2022 12:31:19 GMT ETag: "4134b39675d96eff2d44dc90fc3d2b63" x-amz-server-side-encryption: AES256 x-amz-version-id: Ca4iZILj9zK3JX8zfPWDjO1cT0Ek4x0m Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 1283 Connection: close
2024-04-26 18:33:20 UTC	1283	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 36 22 20 68 65 69 67 68 74 3d 22 33 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 36 20 33 36 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 38 22 20 63 79 3d 22 31 38 22 20 72 3d 22 31 37 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 37 39 33 31 41 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 20 64 3d 22 4d 31 38 20 30 43 38 2e 30 36 20 30 20 30 20 38 2e 30 35 39 20 30 20 31 38 73 38 2e 30 35 39 20 31 38 20 31 38 20 31 38 20 31 38 2d 38 2e 30 35 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="36" height="36" viewBox="0 0 36 36"><g fill="none" fill-rule="evenodd"><circle cx="18" cy="18" r="17" fill="#FFF"/><path fill="#F7931A" fill-rule="nonzero" d="M18 0C8.06 0 0 8.059 0 18s8.059 18 18 18 18-8.059

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	50415	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:20 UTC	789	OUT	GET /396846.gif?served_by=evergreen&partner_uid=7f21a6d9-7754-4604-85fa-34e5af08abdc HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=1rhDcLeioz2OsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCJi7KxAa
2024-04-26 18:33:20 UTC	660	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=9kazB0DCz2iOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 18:33:20 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCJi7KxAa; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 18:33:20 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:33:20 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:33:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	50419	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:20 UTC	462	OUT	GET /adobe?uid=06291327801249806183443003251739176557&_rand=1714156371359 HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:20 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Fri, 26 Apr 2024 18:33:20 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-04-26 18:33:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50413	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:20 UTC	773	OUT	GET /362358.gif?google_gid=CAESEHohkNIdCJccZczOUmR7tjo&google_cver=1 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=1rhDcLeioz2OsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCJi7KxAa
2024-04-26 18:33:20 UTC	660	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=9kazB0DCz2iOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 18:33:20 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCJi7KxAa; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 18:33:20 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:33:20 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:33:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	50418	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:20 UTC	593	OUT	GET /117405/Resources/dist/Resources/loginBundle.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:20 UTC	548	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 814825 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:20 GMT Etag: "d9ef1d79c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:16 GMT Server: ECAcc (mic/9B48) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 513745 Connection: close
2024-04-26 18:33:20 UTC	16383	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 31 39 39 31 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 72 29 7b 2f 2a 21 20 61 69 72 62 72 61 6b 65 2d 6a 73 20 76 31 2e 34 2e 33 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 64 2c 74 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 72 28 4f 62 6a 65 63 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 72 65 71 75 65 73 74 27 22 29 3b 74 68 72 6f 77 20 75 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 75 7d 28 29 29 29 7d 63 61 74 63 68 28 61 29 7b 7d 7d 28 29 2c 66 75 6e 63 74 69 6f Data Ascii: (()=>{var __webpack_modules__={19913:function(n,e,r){/! airbrake-js v1.4.3 /(function(d,t){n.exports=t(function(){try{return r(Object(function(){var u=new Error("Cannot find module 'request'");throw u.code="MODULE_NOT_FOUND",u}()))}catch(a){}}(),functio
2024-04-26 18:33:20 UTC	16383	IN	Data Raw: 2c 77 2e 68 69 73 74 6f 72 69 61 6e 2e 69 67 6e 6f 72 65 4e 65 78 74 57 69 6e 64 6f 77 45 72 72 6f 72 28 29 2c 4b 7d 7d 3b 66 6f 72 28 76 61 72 20 4c 20 69 6e 20 62 29 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 4c 29 26 26 28 76 5b 4c 5d 3d 62 5b 4c 5d 29 3b 66 6f 72 28 76 61 72 20 55 3d 30 2c 6b 3d 4d 3b 55 3c 6b 2e 6c 65 6e 67 74 68 3b 55 2b 2b 29 7b 76 61 72 20 4c 3d 6b 5b 55 5d 3b 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 4c 29 26 26 28 76 5b 4c 5d 3d 62 5b 4c 5d 29 7d 72 65 74 75 72 6e 20 76 2e 5f 61 69 72 62 72 61 6b 65 3d 21 30 2c 76 2e 69 6e 6e 65 72 3d 62 2c 76 7d 2c 54 2e 70 72 6f 74 6f 74 79 70 65 2e 77 72 61 70 41 72 67 75 6d 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 4d 20 69 6e 20 62 29 7b 76 Data Ascii: ,w.historian.ignoreNextWindowError(),K}};for(var L in b)b.hasOwnProperty(L)&&(v[L]=b[L]);for(var U=0,k=M;U<k.length;U++){var L=k[U];b.hasOwnProperty(L)&&(v[L]=b[L])}return v._airbrake=!0,v.inner=b,v},T.prototype.wrapArguments=function(b){for(var M in b){v
2024-04-26 18:33:20 UTC	16383	IN	Data Raw: 65 74 75 72 6e 20 6c 26 26 6c 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 6c 3a 7b 64 65 66 61 75 6c 74 3a 6c 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 73 3d 75 28 61 28 22 2e 2f 73 72 63 2f 6a 73 6f 6e 69 66 79 5f 6e 6f 74 69 63 65 2e 74 73 22 29 29 2c 63 3d 61 28 22 2e 2f 73 72 63 2f 72 65 70 6f 72 74 65 72 2f 72 65 70 6f 72 74 65 72 2e 74 73 22 29 2c 6d 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 70 28 6c 2c 67 29 7b 76 61 72 20 68 3b 74 72 79 7b 68 3d 61 28 22 72 65 71 75 65 73 74 22 29 7d 63 61 74 63 68 28 79 29 7b 7d 76 61 72 20 43 3d 44 61 74 65 2e 6e 6f 77 28 29 2f 31 65 33 3b 69 66 28 43 3c 6d 29 72 65 74 75 72 6e 20 6c 2e 65 72 72 6f 72 Data Ascii: eturn l&&l.__esModule?l:{default:l}};Object.defineProperty(i,"__esModule",{value:!0});var s=u(a("./src/jsonify_notice.ts")),c=a("./src/reporter/reporter.ts"),m=0;function p(l,g){var h;try{h=a("request")}catch(y){}var C=Date.now()/1e3;if(C<m)return l.error
2024-04-26 18:33:20 UTC	16383	IN	Data Raw: 74 69 6f 6e 54 69 6d 65 5a 6f 6e 65 28 75 29 7d 29 60 7d 7d 2c 63 72 65 61 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 61 63 74 69 76 65 54 72 61 64 69 6e 67 53 74 61 74 65 4f 62 73 65 72 76 61 62 6c 65 3d 74 68 69 73 2e 61 63 74 69 76 65 54 72 61 64 69 6e 67 53 74 61 74 65 53 65 72 76 69 63 65 2e 24 41 63 74 69 76 65 54 72 61 64 69 6e 67 53 74 61 74 65 2e 73 75 62 73 63 72 69 62 65 28 7b 6e 65 78 74 3a 75 3d 3e 74 68 69 73 2e 61 63 74 69 76 65 54 72 61 64 69 6e 67 53 74 61 74 65 3d 75 7d 29 7d 2c 62 65 66 6f 72 65 44 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 61 63 74 69 76 65 54 72 61 64 69 6e 67 53 74 61 74 65 4f 62 73 65 72 76 61 62 6c 65 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 7d 3b 56 75 65 2e 63 6f 6d Data Ascii: tionTimeZone(u)})`}},created:function(){this.activeTradingStateObservable=this.activeTradingStateService.$ActiveTradingState.subscribe({next:u=>this.activeTradingState=u})},beforeDestroy:function(){this.activeTradingStateObservable.unsubscribe()}};Vue.com
2024-04-26 18:33:20 UTC	4	IN	Data Raw: 77 6f 72 64 Data Ascii: word
2024-04-26 18:33:20 UTC	16383	IN	Data Raw: 45 72 72 6f 72 3d 22 22 2c 74 68 69 73 2e 6e 65 77 50 61 73 73 77 6f 72 64 45 72 72 6f 72 3d 22 22 2c 74 68 69 73 2e 63 6f 6e 66 69 72 6d 50 61 73 73 77 6f 72 64 45 72 72 6f 72 3d 22 22 7d 7d 7d 3b 56 75 65 4c 6f 61 64 69 6e 67 53 65 72 76 69 63 65 2e 4c 6f 61 64 43 6f 6d 70 6f 6e 65 6e 74 57 69 74 68 4c 61 7a 79 54 65 6d 70 6c 61 74 65 28 45 43 6f 6d 70 6f 6e 65 6e 74 73 2e 43 6f 6d 6d 6f 6e 2e 53 65 63 75 72 69 74 79 53 65 74 74 69 6e 67 73 43 68 61 6e 67 65 50 61 73 73 77 6f 72 64 2c 6e 29 7d 29 28 29 7d 2c 39 34 37 35 34 3a 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 6e 3d 7b 74 65 6d 70 6c 61 74 65 3a 22 23 70 35 30 30 2d 73 65 72 76 65 72 2d 61 6c Data Ascii: Error="",this.newPasswordError="",this.confirmPasswordError=""}}};VueLoadingService.LoadComponentWithLazyTemplate(EComponents.Common.SecuritySettingsChangePassword,n)})()},94754:()=>{"use strict";(function(){"use strict";const n={template:"#p500-server-al
2024-04-26 18:33:20 UTC	16383	IN	Data Raw: 63 74 2e 61 73 73 69 67 6e 28 77 69 6e 64 6f 77 2c 7b 44 79 6e 61 6d 69 63 56 61 6c 69 64 61 74 6f 72 3a 69 7d 29 7d 2c 36 36 33 37 35 3a 28 6e 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 6f 3d 72 28 39 31 34 34 39 29 2c 64 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 74 3d 28 73 2c 63 2c 6d 29 3d 3e 63 20 69 6e 20 73 3f 64 28 73 2c 63 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6d 7d 29 3a 73 5b 63 5d 3d 6d 2c 69 3d 28 73 2c 63 2c 6d 29 3d 3e 28 74 28 73 2c 74 79 70 65 6f 66 20 63 21 3d 22 73 79 6d 62 6f 6c 22 3f 63 2b 22 22 3a 63 2c 6d 29 2c 6d Data Ascii: ct.assign(window,{DynamicValidator:i})},66375:(n,e,r)=>{"use strict";r.d(e,{Z:()=>u});var o=r(91449),d=Object.defineProperty,t=(s,c,m)=>c in s?d(s,c,{enumerable:!0,configurable:!0,writable:!0,value:m}):s[c]=m,i=(s,c,m)=>(t(s,typeof c!="symbol"?c+"":c,m),m
2024-04-26 18:33:20 UTC	16383	IN	Data Raw: 6e 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 49 6e 74 65 72 66 61 63 65 20 2d 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 65 64 22 29 2c 7b 7d 7d 73 68 6f 75 6c 64 53 65 6e 64 41 6e 61 6c 79 74 69 63 73 44 61 74 61 28 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 49 6e 74 65 72 66 61 63 65 20 2d 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 65 64 22 29 7d 73 65 6e 64 41 6e 61 6c 79 74 69 63 73 45 76 65 6e 74 28 53 2c 50 2c 77 2c 52 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 49 6e 74 65 72 66 61 63 65 20 2d 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 65 64 22 29 7d 67 65 74 41 6c 6c 4c 61 6e 67 75 61 67 65 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 6c 6c 4c 61 6e 67 75 61 67 65 73 4c 69 73 74 7c 7c 28 74 68 69 73 2e 61 6c 6c 4c 61 6e 67 75 61 67 65 73 4c Data Ascii: n console.log("Interface - not implemented"),{}}shouldSendAnalyticsData(){console.log("Interface - not implemented")}sendAnalyticsEvent(S,P,w,R){console.log("Interface - not implemented")}getAllLanguages(){return this.allLanguagesList\|\|(this.allLanguagesL
2024-04-26 18:33:20 UTC	16383	IN	Data Raw: 53 77 69 74 63 68 69 6e 67 20 74 6f 20 22 2b 67 6c 6f 62 61 6c 43 6f 6e 66 69 67 2e 73 2c 21 31 2c 28 29 3d 3e 7b 74 68 69 73 2e 72 65 6c 6f 61 64 50 61 67 65 28 29 7d 2c 6e 75 6c 6c 29 7d 67 65 74 50 61 72 65 6e 74 44 6f 6d 61 69 6e 28 29 7b 69 66 28 74 68 69 73 2e 70 61 72 65 6e 74 44 6f 6d 61 69 6e 3d 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 66 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 3b 74 68 69 73 2e 70 61 72 65 6e 74 44 6f 6d 61 69 6e 3d 22 2e 22 2b 66 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6c 69 63 65 28 31 29 2e 6a 6f 69 6e 28 22 2e 22 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 44 6f 6d 61 69 6e 7d 67 65 74 43 6f 6e 73 74 61 6e 74 50 61 72 61 6d 73 28 29 7b 76 61 72 20 66 3d 74 68 69 73 2e 67 65 74 42 61 73 65 43 6f 6e 73 74 61 Data Ascii: Switching to "+globalConfig.s,!1,()=>{this.reloadPage()},null)}getParentDomain(){if(this.parentDomain===null){var f=document.domain;this.parentDomain="."+f.split(".").slice(1).join(".")}return this.parentDomain}getConstantParams(){var f=this.getBaseConsta
2024-04-26 18:33:20 UTC	16383	IN	Data Raw: 41 70 70 6c 65 49 44 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 21 41 70 70 6c 65 49 44 29 26 26 73 74 72 69 6e 67 69 66 79 41 6e 64 52 65 70 6f 72 74 45 72 72 6f 72 28 6e 75 6c 6c 2c 22 61 70 70 6c 65 4c 6f 67 69 6e 49 6e 74 65 72 66 61 63 65 20 6c 6f 61 64 20 65 72 72 6f 72 3a 20 41 70 70 6c 65 49 44 20 77 61 73 20 6e 6f 74 20 6c 6f 61 64 65 64 20 70 72 6f 70 65 72 6c 79 22 29 7d 29 7d 7d 6c 6f 67 69 6e 28 66 2c 54 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 41 70 70 6c 65 49 44 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 21 41 70 70 6c 65 49 44 29 7b 74 68 69 73 2e 61 6c 65 72 74 41 70 70 6c 65 4c 6f 67 69 6e 46 61 69 6c 75 72 65 28 29 3b 72 65 74 75 72 6e 7d 74 68 69 73 2e 61 6c 72 65 61 64 79 49 6e 69 74 41 75 74 68 7c 7c 28 41 70 70 6c 65 49 44 2e Data Ascii: AppleID=="undefined"\|\|!AppleID)&&stringifyAndReportError(null,"appleLoginInterface load error: AppleID was not loaded properly")})}}login(f,T,b){if(typeof AppleID=="undefined"\|\|!AppleID){this.alertAppleLoginFailure();return}this.alreadyInitAuth\|\|(AppleID.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	50422	87.230.104.210	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:20 UTC	721	OUT	GET /beige.php?id=OyCkAkzwJOc8Gw2AUwuC&url=https%3A%2F%2Fwww.bitpanda.com%2Fde%2Fpreise%2Fbitcoin-btc%3Firclickid%3D1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0%26utm_source%3DImpact%26utm_medium%3DAffiliates%26utm_campaign%3D4484296%26utm_content%3DCopy%2520of%2520Bitcoin%2520Price%2520Page_CH_2%26utm_term%3De2%26ref%3D615250356669422741%26tag%3Daffiliates%26subid1%3D%26irgwc%3D1&frameit=1 HTTP/1.1 Host: www.fndsda.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:21 UTC	239	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:21 GMT Content-Type: text/html Content-Length: 1 Connection: close Server: Apache Access-Control-Allow-Origin: * Cache-Control: max-age=0, private, no-store, no-cache, must-revalidate
2024-04-26 18:33:21 UTC	1	IN	Data Raw: 09 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	50408	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:21 UTC	811	OUT	HEAD /tv-show HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/tv-show Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:21 UTC	834	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:21 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yw9cVX%2FwzYwuAwuCCDEBliDo23Y7HS891RrRU2X7H08NBKGbEQpRwXp9Fh%2F2PIFZG7s6ZiEZKfIMExzXPYpBObXX5RR2p4CXVG29X1kwkvXxPYoDpkwhK00CMvyS%2BoY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a9236c319ae3-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	50426	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:21 UTC	904	OUT	GET /ajax/login-state HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/tv-show Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"d8-R6JFTYCzz9JLwYU4VIqVMGUySyY"
2024-04-26 18:33:22 UTC	912	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:33:22 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"d8-R6JFTYCzz9JLwYU4VIqVMGUySyY" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GqayPvnBWvopyopevc%2BRU247aeMQ54wubj5BxNmBhSm3nSBPTcwiaTLhSdPAtavUEb%2FpceqAdM6U9L74aav%2FUgDOkN0kOwpedtpy%2FJtmlOx6IuNGUT%2F8YgcC2HCM0eM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a9278b7021eb-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	50425	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:21 UTC	918	OUT	GET /ajax/verify?domain=1movieshd.cc HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/tv-show Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"f-NQVRlQfKHCoInEbhALgECMonhCE"
2024-04-26 18:33:22 UTC	907	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:33:22 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"f-NQVRlQfKHCoInEbhALgECMonhCE" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hFSsvukNC1%2FLec8GKEhnl2K1Ik4cdx40R%2FtKcS%2FNnJoVvhdTbr97hs9qHWVGq2eMjUyDkZNqysGzVZTXrNiSyoVD0hLt6NueX5e4phAfk1g6BdtfezmlK18RVnT3nlo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a9278a723341-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	50424	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:22 UTC	640	OUT	GET /5/4724866/?oo=1&aab=1 HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156372
2024-04-26 18:33:22 UTC	1297	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:33:22 GMT Content-Type: application/json Content-Length: 2885 Connection: close X-Trace-Id: 23b609dac9dca52ba0327c2fdc109b50 Link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch" Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:33:22 GMT; path=/; secure; SameSite=None Set-Cookie: oaidts=1714156372; expires=Sat, 26 Apr 2025 18:33:22 GMT; path=/; secure; SameSite=None Pragma: no-cache Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Expires: Mon, 26 Jul 1997 05:00:00 GMT
2024-04-26 18:33:22 UTC	2885	IN	Data Raw: 7b 22 75 72 6c 22 3a 22 2f 2f 65 65 70 68 61 75 73 68 2e 63 6f 6d 2f 3f 72 62 3d 32 49 4a 77 4f 47 69 53 52 53 58 6a 37 5f 62 6b 75 49 74 5a 5f 50 44 69 70 76 52 71 56 54 50 6f 6b 64 59 67 73 52 61 6d 45 6a 65 53 39 74 47 6a 50 2d 6f 39 77 68 42 36 61 39 56 49 6a 79 54 56 76 6b 49 43 55 73 45 6a 43 35 39 6b 48 38 71 33 32 69 57 66 68 7a 34 6a 6c 54 45 72 4d 52 5f 66 63 5f 67 34 7a 45 52 55 49 38 61 4b 5a 31 71 74 51 57 70 73 68 4a 54 38 33 42 41 48 35 34 44 68 47 30 46 36 5a 6e 31 6f 38 30 5f 46 62 71 41 79 44 6b 61 44 5f 2d 45 6e 76 57 64 77 78 4c 74 52 30 76 33 4d 45 64 73 4c 4e 6c 67 71 4d 72 4c 48 4d 48 52 49 55 36 6a 43 42 66 4a 48 57 45 70 6d 37 6c 6b 31 67 5a 74 32 34 66 6e 6d 2d 71 63 30 54 4d 4b 5f 30 4f 52 47 73 71 4f 5a 56 4b 61 55 46 32 67 6f Data Ascii: {"url":"//eephaush.com/?rb=2IJwOGiSRSXj7_bkuItZ_PDipvRqVTPokdYgsRamEjeS9tGjP-o9whB6a9VIjyTVvkICUsEjC59kH8q32iWfhz4jlTErMR_fc_g4zERUI8aKZ1qtQWpshJT83BAH54DhG0F6Zn1o80_FbqAyDkaD_-EnvWdwxLtR0v3MEdsLNlgqMrLHMHRIU6jCBfJHWEpm7lk1gZt24fnm-qc0TMK_0ORGsqOZVKaUF2go

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	50423	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:22 UTC	603	OUT	GET /tag.min.js HTTP/1.1 Host: eephaush.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072; syncedCookie=true; oaidts=1714156372
2024-04-26 18:33:22 UTC	942	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:33:22 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 89125 Connection: close X-Trace-Id: 0070368eff218d4598c13c3e88bad7e2 Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0 Accept-Ranges: bytes Last-Modified: Fri, 26 Apr 2024 13:40:44 GMT Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon Access-Control-Max-Age: 86400 Pragma: no-cache Expires: Tue, 11 Jan 1994 10:00:00 GMT Timing-Allow-Origin: * Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *
2024-04-26 18:33:22 UTC	15442	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 71 77 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 71 77 2e 71 3b 76 61 72 20 65 3d 71 77 2e 56 28 29 2c 74 3d 71 77 2e 53 79 5b 71 77 2e 44 79 5d 28 71 77 2e 76 29 5b 71 77 2e 76 65 5d 28 29 5b 71 77 2e 42 5d 28 71 77 2e 76 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 74 3d 65 5b 71 77 2e 48 5d 3b 74 72 79 7b 65 5b 71 77 2e 75 74 5d 3d 74 5b 71 77 2e 75 74 5d 7d 63 61 74 63 68 28 72 29 7b 76 61 72 20 6e 3d 5b 5d 5b 71 77 2e 56 70 5d 5b 71 77 2e 4e 65 5d 28 74 5b 71 77 2e 59 61 5d 28 71 77 2e 6f 77 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 77 2e 6e 65 3d 3d 3d 65 5b 71 77 2e 63 5d 7d 29 3b 65 5b 71 77 2e 75 74 5d 3d 6e 26 26 6e 5b 71 77 2e 59 79 5d 5b 71 77 2e 75 74 5d 7d 7d 71 77 2e 77 21 3d Data Ascii: (function(qw){!function(){qw.q;var e=qw.V(),t=qw.Sy[qw.Dy](qw.v)[qw.ve]()[qw.B](qw.v);function n(){var t=e[qw.H];try{e[qw.ut]=t[qw.ut]}catch(r){var n=[][qw.Vp][qw.Ne](t[qw.Ya](qw.ow),function(e){return qw.ne===e[qw.c]});e[qw.ut]=n&&n[qw.Yy][qw.ut]}}qw.w!=
2024-04-26 18:33:22 UTC	16384	IN	Data Raw: 77 2e 66 75 5d 7c 7c 65 5b 71 77 2e 61 6f 5d 26 26 65 5b 71 77 2e 70 72 5d 5b 71 77 2e 64 77 5d 26 26 21 61 5b 71 77 2e 64 77 5d 29 26 26 61 5b 71 77 2e 46 65 5d 28 6f 5b 71 77 2e 43 65 5d 29 2c 55 65 28 29 26 26 61 5b 71 77 2e 46 65 5d 28 55 65 28 29 29 3b 74 3b 29 7b 69 66 28 65 74 28 74 2c 69 29 29 72 65 74 75 72 6e 21 71 77 2e 6b 3b 69 66 28 65 74 28 74 2c 61 29 29 72 65 74 75 72 6e 21 71 77 2e 6a 3b 74 3d 74 5b 71 77 2e 67 75 5d 7d 72 65 74 75 72 6e 21 71 77 2e 6b 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3f 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 65 5b 71 77 2e 64 75 5d 3d 3d 3d 74 3f 65 3a 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3f 69 74 28 65 Data Ascii: w.fu]\|\|e[qw.ao]&&e[qw.pr][qw.dw]&&!a[qw.dw])&&a[qw.Fe](o[qw.Ce]),Ue()&&a[qw.Fe](Ue());t;){if(et(t,i))return!qw.k;if(et(t,a))return!qw.j;t=t[qw.gu]}return!qw.k}function it(e,t){return e?e instanceof HTMLElement&&e[qw.du]===t?e:e instanceof HTMLElement?it(e
2024-04-26 18:33:23 UTC	16384	IN	Data Raw: 2e 76 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 5b 71 77 2e 5a 67 5d 5b 71 77 2e 44 79 5d 28 71 77 2e 47 6a 29 5b 71 77 2e 41 74 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 71 77 2e 50 6b 5d 28 29 5b 71 77 2e 44 79 5d 28 71 77 2e 6a 75 29 7d 29 5b 71 77 2e 4b 72 5d 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 5b 71 77 2e 6a 5d 3d 3d 65 7d 29 5b 71 77 2e 6a 5d 3b 69 66 28 74 29 72 65 74 75 72 6e 20 74 5b 71 77 2e 6b 5d 7d 2c 65 5b 71 77 2e 67 72 5d 5b 71 77 2e 62 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 71 77 2e 6a 3d 3d 3d 74 26 26 28 74 3d 21 71 77 2e 6b 29 2c 76 6f 69 64 20 71 77 2e 6a 3d 3d 3d 74 68 69 73 5b 71 77 2e 6c Data Ascii: .vp]=function(e){var t=document[qw.Zg][qw.Dy](qw.Gj)[qw.At](function(e){return e[qw.Pk]()[qw.Dy](qw.ju)})[qw.Kr](function(t){return t[qw.j]==e})[qw.j];if(t)return t[qw.k]},e[qw.gr][qw.bp]=function(e,t){return void qw.j===t&&(t=!qw.k),void qw.j===this[qw.l
2024-04-26 18:33:23 UTC	16384	IN	Data Raw: 2c 64 65 6c 65 74 65 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 63 5d 29 3a 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 5b 63 5d 3d 68 2b 71 77 2e 6b 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 63 5d 3d 68 2b 71 77 2e 6b 29 29 7d 74 68 69 73 5b 71 77 2e 71 64 5d 5b 71 77 2e 59 77 5d 3d 6e 65 77 20 44 61 74 65 28 29 5b 71 77 2e 4f 77 5d 28 29 2c 74 68 69 73 5b 71 77 2e 47 70 5d 28 65 29 2c 6f 5b 71 77 2e 47 5d 5b 71 77 2e 4c 68 5b 71 77 2e 51 77 5d 28 6e 29 5d 3d 21 71 77 2e 6a 7d 2c 65 5b 71 77 2e 67 72 5d 5b 71 77 2e 47 70 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 65 5b 71 77 2e 57 69 5d 2c 72 3d 65 5b 71 77 2e 7a 65 5d 2c 69 3d 65 5b 71 77 2e 45 61 5d 2c 61 3d 43 6e 5b 71 77 2e 41 74 5d 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ,delete localStorage[c]):(sessionStorage[c]=h+qw.k,localStorage[c]=h+qw.k))}this[qw.qd][qw.Yw]=new Date()[qw.Ow](),this[qw.Gp](e),o[qw.G][qw.Lh[qw.Qw](n)]=!qw.j},e[qw.gr][qw.Gp]=function(e){var t=this,n=e[qw.Wi],r=e[qw.ze],i=e[qw.Ea],a=Cn[qw.At](function(
2024-04-26 18:33:23 UTC	16384	IN	Data Raw: 29 7b 50 65 28 71 77 2e 6e 67 29 2c 6f 5b 71 77 2e 47 5d 5b 71 77 2e 53 5d 28 65 29 7d 29 3a 71 77 2e 6e 67 20 69 6e 20 6e 61 76 69 67 61 74 6f 72 26 26 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 6e 61 76 69 67 61 74 6f 72 5b 71 77 2e 6e 67 5d 5b 71 77 2e 4e 6b 5d 26 26 28 50 65 28 71 77 2e 6e 67 29 2c 6f 5b 71 77 2e 47 5d 5b 71 77 2e 53 5d 28 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 71 77 2e 79 68 29 29 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 72 28 65 29 7b 76 61 72 20 74 3d 65 5b 71 77 2e 42 72 5d 2c 6e 3d 65 5b 71 77 2e 4e 72 5d 2c 72 3d 65 5b 71 77 2e 4d 72 5d 2c 6f 3d 65 5b 71 77 2e 48 65 5d 2c 69 3d 65 5b 71 77 2e 71 74 5d 2c 61 3d 65 5b 71 77 2e 77 74 5d 2c 63 3d 65 5b 71 77 2e 65 74 5d 2c 73 3d 65 5b 71 Data Ascii: ){Pe(qw.ng),o[qw.G][qw.S](e)}):qw.ng in navigator&&setInterval(function(){try{navigator[qw.ng][qw.Nk]&&(Pe(qw.ng),o[qw.G][qw.S]())}catch(e){}},qw.yh))}}}}function nr(e){var t=e[qw.Br],n=e[qw.Nr],r=e[qw.Mr],o=e[qw.He],i=e[qw.qt],a=e[qw.wt],c=e[qw.et],s=e[q
2024-04-26 18:33:23 UTC	8147	IN	Data Raw: 66 27 2c 27 6f 78 61 65 71 4f 61 67 7a 66 27 5d 2c 5b 27 6d 66 27 2c 27 62 62 67 50 75 65 6d 6e 78 71 46 64 75 73 73 71 64 27 5d 2c 5b 27 51 66 27 2c 27 5f 5f 42 42 47 5f 42 44 52 32 27 5d 2c 5b 27 57 66 27 2c 27 4d 4d 4e 27 5d 2c 5b 27 45 66 27 2c 27 65 71 66 27 5d 2c 5b 27 52 66 27 2c 27 61 7a 45 77 75 7a 4f 78 75 6f 77 46 64 75 73 73 71 64 27 5d 2c 5b 27 54 66 27 2c 27 47 44 58 27 5d 2c 5b 27 59 66 27 2c 27 69 75 70 73 71 66 41 62 66 75 61 7a 65 27 5d 2c 5b 27 55 66 27 2c 27 66 6d 73 41 62 66 75 61 7a 65 27 5d 2c 5b 27 49 66 27 2c 27 70 71 7a 71 66 65 67 77 2e 6f 61 79 27 5d 2c 5b 27 4f 66 27 2c 27 61 62 66 75 61 7a 65 42 6d 64 65 71 52 6d 75 78 27 5d 2c 5b 27 50 66 27 2c 31 35 5d 2c 5b 27 41 66 27 2c 27 7a 61 20 69 75 7a 70 61 69 27 5d 2c 5b 27 53 66 Data Ascii: f','oxaeqOagzf'],['mf','bbgPuemnxqFdussqd'],['Qf','__BBG_BDR2'],['Wf','MMN'],['Ef','eqf'],['Rf','azEwuzOxuowFdussqd'],['Tf','GDX'],['Yf','iupsqfAbfuaze'],['Uf','fmsAbfuaze'],['If','pqzqfegw.oay'],['Of','abfuazeBmdeqRmux'],['Pf',15],['Af','za iuzpai'],['Sf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	50427	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:22 UTC	811	OUT	HEAD /tv-show HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/tv-show Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:23 UTC	842	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:23 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JWeBNmlXqEzS3Dy%2FyClZI%2F%2BdwZN80LhuJJblawYyJKvmqEUZSn6eSF7KY6OtiAxlryWca2tMGIDUHEiV2Wb2PdoDZ8tM%2BR%2BNDA14vUI7LN6%2BJdHIHYiuj%2BENVWUcXhU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a92eea7d6db3-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	50430	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:22 UTC	929	OUT	GET /xxrz/250x400/793/25/7d/257d0a66d1d7e9c53531a6faa02f36ee/257d0a66d1d7e9c53531a6faa02f36ee.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:23 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:23 GMT Content-Type: image/jpeg Content-Length: 70331 Connection: close Last-Modified: Thu, 25 Apr 2024 04:09:44 GMT Vary: Accept-Encoding ETag: W/"6629d788-c2b3" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1327 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u%2BfFAQfDG%2FOHAWNLlUUajSgDofQ%2BaWKrgtvNxAZRuWV9hDOD%2BV4tc3fu4LfPu2M2tnQLAfya3YwhwZzrueL2aHO5glsS4wy61BHQo0J7DyXvfbIv65Roe4md3A1Al6arHJX%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a92efdbca4f2-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:23 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 19 17 d0 df 3c b5 fc 72 c3 bc e2 db f2 59 b3 53 41 93 86 fc 8b 4f d7 8c a5 16 af 3c 65 ac aa 6b 14 40 7e 4b fa 92 07 1f 43 19 68 b8 fd 51 ca 82 9b a9 19 e7 9c 44 9a 5c c8 62 c9 06 44 f1 2e ae 44 80 4d bd 0a 2a cd 92 58 c2 72 ee 6b 11 2f e8 26 eb d7 43 80 76 20 b1 a2 62 34 52 b3 bd 42 07 64 aa b0 6c 55 18 e5 ef 1e 38 52 72 15 c8 fa 74 04 05 d0 f9 4b 35 6b 14 2b 5c c1 73 56 c7 8c e5 0e 6f 00 4d 23 1f 9a 7e 8e 76 8b 46 83 24 04 f2 9e 09 a6 dd 39 a4 d1 9c a2 a7 42 ef 66 3b 4a 06 6f 23 de 7a b2 f4 3a c4 08 67 6a 24 34 9f ab 34 df cd b8 55 ea a4 89 ba 47 78 fc b8 50 08 11 28 97 90 bd 58 25 18 d8 36 29 62 a7 91 e6 ca ac b4 c5 ee 57 ad 7a 9b b1 93 4e 5f 74 5f d3 bc ee 65 9f b6 77 5c 5f e7 e4 79 f5 8b e7 cf 73 51 93 4e 44 55 b3 0d 7b a5 9b d7 b3 e7 a9 2d 4f a3 2d Data Ascii: <rYSAO<ek@~KChQD\bD.DM*Xrk/&Cv b4RBdlU8RrtK5k+\sVoM#~vF$9Bf;Jo#z:gj$44UGxP(X%6)bWzN_t_ew\_ysQNDU{-O-
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: d4 e9 56 45 63 34 9d 09 64 f4 13 60 94 87 a5 8b 1d 9d da 83 44 88 35 71 96 a3 8e be e4 48 cd 51 a8 f9 eb 06 d5 d2 4f 28 95 1d 23 22 47 61 d7 53 23 60 43 1b 06 fd 53 10 a9 14 62 25 4f e2 49 45 d9 2b 5d 04 59 75 72 2d 11 1c 75 51 47 f3 f1 db 1e 1c 02 c3 b3 bb a0 9a 9a 2b 99 35 31 8d 29 63 15 ae 12 21 37 39 ea c6 85 a3 49 7b 1e 09 e2 14 a1 00 8e 0b 46 6a 29 23 59 db de 0d b5 75 a6 f1 6c b4 46 0c 22 77 ca fa e8 d2 42 bd 46 5f f4 b4 40 96 42 5b 3f 1a a6 78 88 ea c7 94 29 73 f4 d4 59 59 15 1b 50 33 eb d1 20 a9 86 97 9c 04 ee 2a 9b ed 8a 67 1c 72 ea b7 26 84 27 a5 f8 c3 b0 68 24 c6 13 93 2c 2f 12 86 ec d0 23 93 f6 c8 4c f1 1b e8 0d 10 26 90 35 2f ec ea 4c f0 a3 2d ed 3e 72 44 4b 15 63 cb 7b 64 f3 18 bc 8a 05 2b 27 8a f6 1a 81 4e 9d 59 08 f0 cf 8c 4f 0e c7 c1 1a Data Ascii: VEc4d`D5qHQO(#"GaS#`CSb%OIE+]Yur-uQG+51)c!79I{Fj)#YulF"wBF_@B[?x)sYYP3 *gr&'h$,/#L&5/L->rDKc{d+'NYO
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: ae 78 f3 c7 9d 33 c5 90 58 49 2c b5 b1 8e 11 ba 14 8b 72 5c dd 06 3b 63 48 fc 66 b2 f9 32 7d 80 65 a0 0c 77 b5 e8 52 bd c4 87 37 da 47 8f 6a a9 14 36 47 1e 57 dd 32 68 65 8f b6 53 14 f0 66 ff 00 c5 32 45 35 7d a8 e2 d7 c6 85 36 6d 40 25 cc 6a 65 a7 f4 50 27 6b 9a 77 31 59 e6 4c 61 13 18 e4 5c 4c e3 9c e8 b9 e3 c4 1e 78 f1 f3 23 42 6d cd b4 4a 88 72 76 b9 01 a4 b8 67 e5 e5 6c 57 2f 68 e3 8c f2 23 4d 17 6c e5 c3 c7 11 1c d0 1d 4c c3 58 39 ad 83 27 c4 ea e9 6a b9 56 ef ca 19 9a a3 e2 c5 56 75 7c 57 78 45 62 e3 0d d4 fe 49 73 0e 74 63 66 4b 67 6b a2 48 93 03 59 4b 78 d3 07 21 15 5d 39 91 f0 52 9a a8 29 1c a8 9e 8b 8d 4c e9 9e 3c e9 96 f2 d9 04 04 11 2e 24 c1 d5 26 5a c7 b5 da ac 9b 0c 96 de 61 06 d2 1c 68 2e 92 43 bc dc 78 d8 a2 23 1b c8 1e 26 27 8e 12 b5 ed Data Ascii: x3XI,r\;cHf2}ewR7Gj6GW2heSf2E5}6m@%jeP'kw1YLa\Lx#BmJrvglW/h#MlLX9'jVVu\|WxEbIstcfKgkHYKx!]9R)L<.$&Zah.Cx#&'
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: d1 7f 21 f6 19 da f4 2c 44 b0 5f 4e 35 99 04 61 ef 2d 92 57 8d 52 64 51 31 50 a8 8c 1e c3 2e 24 66 14 91 19 b8 ec 90 2a 3f 2b 02 43 81 82 73 5e df 8c 63 b2 64 30 ce 6c fd 60 31 db f8 e8 dd f6 68 d1 35 f8 3e e4 c4 72 af 61 34 cd 6e 34 2f 7e 56 87 6e 4a e0 ed 49 57 b0 7b b4 92 8e 6f 19 7d 51 12 e2 be e0 12 a9 a5 4e 2a b8 32 25 a2 11 8f 42 b5 7c a8 a3 98 46 e6 ab 1d 27 4b 7b fd db 05 ab d6 d0 dc 56 b7 dd 59 09 3a ac 92 39 5b b6 ba 2c 6a fa ab 09 61 d8 37 94 7c eb 6a a4 9a 67 c3 72 aa 35 3b 67 28 88 24 45 c9 95 d0 2d 43 70 2a 0a 6c f5 1f 73 36 d1 66 8a aa ad 5e 31 c2 62 e6 88 61 c5 d9 5f 36 e9 8f 28 a5 52 06 8f 66 2c 19 2c 96 32 35 55 3c 97 b5 c0 33 2e e9 24 d2 16 4d 50 a4 48 8d a8 d4 80 32 b5 c0 8d 75 ef 4a 36 19 ed d1 fd 36 1e b4 fe 7a 32 74 4e 52 ac a1 8a Data Ascii: !,D_N5a-WRdQ1P.$f?+Cs^cd0l`1h5>ra4n4/~VnJIW{o}QN2%B\|F'K{VY:9[,ja7\|jgr5;g($E-Cp*ls6f^1ba_6(Rf,,25U<3.$MPH2uJ66z2tNR
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 0f f4 b0 fa 2e 4b 92 ae 74 a3 64 d9 08 25 8e 4e a1 8a ff 00 85 3a 61 0d f6 57 f3 8c 2f d9 49 d5 58 44 e9 6d 62 08 76 be 5c 71 79 64 a5 56 bd 0b ce 7a 84 ef f7 78 e4 f9 f7 0b 94 27 73 0c 19 2d 9a f0 f9 c0 52 d5 82 96 53 a3 9e 93 64 49 1d d9 01 dd 46 d3 64 a3 a2 32 ca 7f 82 ba 64 b5 7b b4 2a c8 f7 7b 4c a9 3d 06 f9 2a e7 49 2f de cc c9 d8 25 ef 85 37 5c 42 7d 4a 4f 94 2f d5 09 c1 0d 2b ae 21 7e 97 f0 c4 7b df 3a f1 e6 fa 19 fe 41 2b 91 73 d4 25 54 bb 12 f0 8f 90 ce 2a ca f4 48 a7 73 13 5e da 23 c9 61 2d 15 f8 38 95 36 46 b4 89 ed 9f 1a 47 d1 a6 4c 9a 74 41 df d8 f5 84 c5 2c b9 5a 0e b9 0f 55 a9 99 3b 94 f7 0b 87 37 da e2 40 fd e5 69 31 f2 b9 73 24 f2 d7 1f ec f2 a7 46 1f 87 c9 37 39 e7 4e b6 92 5e b6 68 fe aa c2 f1 8d 3f 0f 31 3c 4f df c0 c9 50 57 df 23 d8 Data Ascii: .Ktd%N:aW/IXDmbv\qydVzx's-RSdIFd2d{{L=I/%7\B}JO/+!~{:A+s%T*Hs^#a-86FGLtA,ZU;7@i1s$F79N^h?1<OPW#
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: fa 73 9f ff c4 00 3f 11 00 02 01 02 04 03 04 06 08 04 06 03 01 00 00 00 01 02 03 04 11 00 05 12 21 06 31 41 13 22 51 61 10 14 32 42 71 81 07 15 23 91 a1 b1 c1 f0 20 52 d1 e1 16 24 25 62 72 f1 17 33 43 54 ff da 00 08 01 03 01 01 3f 01 26 f8 db c2 d8 d2 0a d8 5d 7c c7 3c 01 61 6f c7 ae 37 da fb 5f fb 7f 5c 11 7c 11 cc fc f0 40 61 63 8e 3d c9 16 6a 3f ad a0 8b ed e0 61 eb 25 56 c6 48 9e cb da 31 1c cc 45 56 c6 c4 d8 f3 c0 18 d2 7a 63 49 e9 8d 27 ae 34 e0 8b 60 8b 7a 34 fa 2d 73 e6 79 79 72 c4 a9 65 5d f6 51 e1 f0 f3 c7 4f 8e 09 be 1c de dd 37 c4 b1 c5 55 4d 35 34 8b ae 39 a3 64 75 3e f2 b0 b1 18 cd a8 d6 83 31 ab a4 42 4a c3 33 2a 96 dc e9 36 60 0f 98 bd bf 87 a8 3e 1e 87 b2 5e c3 cf f2 c6 b1 d3 7c 17 38 59 80 20 9d ec 6f 6e 58 79 d1 86 dd 2d 85 ef 62 53 6f Data Ascii: s?!1A"Qa2Bq# R$%br3CT?&]\|<ao7_\\|@ac=j?a%VH1EVzcI'4`z4-syyre]QO7UM549du>1BJ3*6`>^\|8Y onXy-bSo
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 87 44 13 8e d6 9a e0 0f e6 84 7f b7 c4 5f 7b 1b fc 7c 65 a8 86 7a 53 24 52 2c 8a c9 75 2a 6f 7d af 87 9f bd b1 be 3d 68 0f 6b 7f 0e 9e 18 aa ae 09 17 64 91 a1 79 46 a2 c6 fa 94 dc 72 3e 1b 72 c0 37 c1 17 c5 ec c9 ff 00 21 f9 8c 53 df d5 e1 27 9b 46 bb 6a d5 6e e8 f7 86 c7 1a b0 dc ad 88 e1 8a c5 d8 85 55 1a 89 3c ac 31 c5 19 b4 75 f5 a8 94 e3 ec a9 01 8c 49 ef 48 d7 bb fc 14 5a cb cf a9 c3 31 da db 62 8a 11 32 33 ea 29 b8 16 07 e7 cf e7 88 cc 65 47 96 0e dd 71 43 99 cd 45 75 dd e1 6d 9a 32 49 e7 ef 2d ef 63 86 a8 8e a5 cb 2a e8 5f 77 7e f5 fc 4f 2b 62 46 70 47 7c fc fe 58 bb 9d de e7 e3 80 6f 8b 5c 81 70 3e 38 44 50 e9 af 75 b8 d5 6e 82 e2 f8 a4 68 0c 48 22 99 5c 59 6d de 1c ac 2d d7 d1 a6 f8 cd 1e 57 2f 42 35 6a 96 22 d1 35 fa 80 43 5c 5b 6b 1f 3d fc b1 Data Ascii: D_{\|ezS$R,uo}=hkdyFr>r7!S'FjnU<1uIHZ1b23)eGqCEum2I-c_w~O+bFpG\|Xo\p>8DPunhH"\Ym-W/B5j"5C\[k=
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 32 22 a1 82 95 ef 6d 44 87 7b 5c da f8 fa b6 a0 d5 c9 9a cc 29 e0 cf 38 9f 84 6a 72 69 24 86 78 24 89 78 82 9d 13 65 a8 89 99 04 b5 b4 e8 19 46 bb 99 01 1e 78 a3 c8 38 99 f3 03 97 53 65 99 88 ab ed 19 5e 13 04 89 66 4f 69 9e 47 0b 1a a5 85 c3 33 05 22 c4 12 0e 1b 87 a9 b8 83 86 f8 0a 86 b3 38 a6 c9 ea 23 5c c6 05 a7 9d 1e 49 6a 24 35 c5 64 8e 1d 36 8f 5a 32 69 ef 3a 86 62 05 f1 9b 66 69 5f 4b f4 85 1a 41 2c 31 e5 f9 7f 0f e5 08 b5 2b a6 77 5a 1a 96 8c c9 20 e8 64 3b 8e 77 5b 1b e3 e9 0f 2a e0 fa bc ec 54 e6 b9 ee 63 43 98 fd 53 96 0f 55 a7 cb 56 a6 0b 25 14 7d 81 ed 75 af b5 b5 c9 07 1c 33 57 4d 49 43 f4 73 14 d2 a4 32 d4 65 3c 57 97 d1 54 cb 65 58 ab 6a 66 09 4e da 8e c8 59 bb 80 df da 61 87 e1 8e 23 39 bc 99 5f d5 55 f2 66 46 a5 92 c2 09 0e b6 2f ff 00 Data Ascii: 2"mD{\)8jri$x$xeFx8Se^fOiG3"8#\Ij$5d6Z2i:bfi_KA,1+wZ d;w[*TcCSUV%}u3WMICs2e<WTeXjfNYa#9_UfF/
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: ec ed f6 11 40 24 1b ea 45 70 c0 ac 79 3d 1d 28 83 fd 32 48 68 f7 34 30 ba c1 c3 79 63 2e fa eb 27 f6 f3 2a a8 ed 70 af da ca 5b ff 00 8c 77 d5 8a ce 38 a8 a8 5a d3 90 55 4d 98 9c b4 c2 27 65 a8 8f 2c 85 96 69 74 28 ca f2 b5 8d bb 78 a3 6d e4 7a b2 e8 13 76 d2 09 38 e2 aa b4 fa fb 30 9f 2f 90 40 b3 e8 f5 81 4a e5 62 33 cd 04 4d 5d 1a 94 6b 18 4d 41 93 bb bc 76 f6 3b a0 62 3a ba 98 50 c5 15 44 f1 c6 cc 92 34 69 2b aa 19 12 c5 1f 40 3a 75 a1 03 4b db 50 b0 df 1f 5e 67 56 b7 d6 f9 95 8f 31 eb b5 1b 8f 0f 6f 07 72 4e fb 9b 9b 9b 9b f5 df d0 a2 e6 d8 05 40 b7 2f e3 a6 cc 2b e3 8d a0 8e ba b2 38 76 fb 28 ea 66 48 b7 e6 3b 35 70 96 f9 63 b7 98 a1 1d a3 db 57 b3 a9 b4 dc f3 24 5e c4 9e b7 c6 a6 b3 6e 46 dd 09 1f 96 00 0d cf a6 08 03 0d e8 7e 9f 3f d3 11 f2 f4 7f Data Ascii: @$Epy=(2Hh40yc.'*p[w8ZUM'e,it(xmzv80/@Jb3M]kMAv;b:PD4i+@:uKP^gV1orN@/+8v(fH;5pcW$^nF~?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	50431	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:22 UTC	929	OUT	GET /xxrz/250x400/793/ec/b7/ecb756911e100cdf36643a0ef07f74a7/ecb756911e100cdf36643a0ef07f74a7.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:23 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:23 GMT Content-Type: image/jpeg Content-Length: 63372 Connection: close Last-Modified: Fri, 26 Apr 2024 01:07:50 GMT Vary: Accept-Encoding ETag: W/"662afe66-b235" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1327 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tFxmv0Bzaqr1cEheRe2IGhUbJEtPmiJr1W4XG8O2aN95WKDJ6ay73MBi%2FedX2BtQjaUsyNgYF9fO9BsInXM5oHeIKYZj7tFJ0S1n68Uor2dXaj7c9%2FfEmLzgq%2FJrt%2BIMeAYE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a92ef9007481-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:23 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 4d 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 03 00 03 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCM"
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 11 68 5b 9f 62 74 1a 0f bc b4 4f 38 65 84 95 23 4d 94 7c b5 8a 92 01 e7 73 c9 19 8c 78 46 61 38 ad 8d e4 95 26 36 10 b8 a7 10 c5 30 e2 48 ce 96 22 d0 59 f5 bc af a5 84 c8 df 6b 11 c7 77 68 35 eb ba ea 31 43 44 16 38 dc e0 95 55 99 e5 36 ea 56 8c 90 56 63 71 11 1a 33 9c 2b 3e fa 2b 41 80 da 4f b0 1d 8f dc 16 67 6d ec d9 c5 3b b3 65 04 de 05 a6 55 5f d5 48 fa 7b a2 f2 6f 73 2b 4c 8e fe 9a db 1a 4d 1c da 04 b5 5d 6a 0a dc 00 45 a2 d3 a3 96 6b 64 7e 71 d2 6c 05 88 0e 3c b5 35 f0 7a c5 6f 6f 89 35 55 96 4c 8e 31 35 8b cb 5e 8b 24 62 c5 c2 ba 3f e3 5b 42 2b 21 ad 4c 89 13 5d 5f 34 e9 83 43 5f 3c 16 33 3a 5a c9 6c e1 c0 28 89 cc 1a f1 c6 59 48 85 cd 14 44 82 c8 c9 ad f3 6b f0 89 ac 5c 48 ba af 9d dd dd dc 58 ec a5 66 1d a8 70 f4 19 28 51 e7 b7 16 1c 83 67 d1 d9 Data Ascii: h[btO8e#M\|sxFa8&60H"Ykwh51CD8U6VVcq3+>+AOgm;eU_H{os+LM]jEkd~ql<5zoo5UL15^$b?[B+!L]_4C_<3:Zl(YHDk\HXfp(Qg
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 64 5e 1a 79 7b da bb b1 93 4e 2f 66 13 d8 40 e4 72 af 4a bf 53 5c 0d fa 1f 01 98 52 8f 84 09 22 ea 41 78 fe 4f 51 62 70 cc 16 96 cd 4e fc 14 dc dc ab b4 1d fd 49 a2 2c 47 2f e3 0a 9e c9 91 b1 c3 b3 0e 44 20 28 b2 36 28 ab 69 9a 5b e6 af 40 f9 0b 62 ad 4f 98 29 dd 88 ea f0 a5 04 a6 5f 73 46 1d 81 2f c7 e4 b9 40 c9 6e 2a ee 4d 81 b8 c8 32 62 e8 5c bf a5 cf 99 af a6 58 95 98 7e 71 a3 24 33 c9 de c7 6c 58 07 cc 84 e7 dd f8 82 c4 cf 97 5e 65 a1 a5 93 3e df 88 43 39 41 66 90 34 2a fc c5 5a e1 65 ff 00 7e 0f b0 72 9a 41 d1 a3 d0 db b8 81 d9 8f 9b 39 d3 8c ec ad 5b de d7 cb ba 9a 70 6c a5 a3 5a 62 7f aa 4c 66 84 e4 f5 08 49 16 eb 31 f8 b7 71 2f 13 d1 56 ff 00 a3 ee 00 77 b2 52 7d 19 b0 30 27 4f 05 ec 6a f5 2c 1a 7b 7e 0b 0a f7 2e 2a a8 03 5a 7f d6 0c c9 48 63 76 Data Ascii: d^y{N/f@rJS\R"AxOQbpNI,G/D (6(i[@bO)_sF/@nM2b\X~q$3lX^e>C9Af4Ze~rA9[plZbLfI1q/VwR}0'Oj,{~.*ZHcv
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 1a 69 76 ce 97 17 5b 2c f8 a2 d3 20 2a 74 f1 9d fa bb e6 a3 18 e9 a9 d1 a6 47 b8 e6 6c 72 2c 81 22 82 51 11 55 bd 9f e7 f6 f5 11 e4 17 80 ac ae ef 7a 23 f0 a3 f2 c8 fd 91 7c 79 4e dd 18 f7 38 8a 91 5d d1 61 b8 98 be 18 6b ae 5c 05 a5 7d a6 f9 b8 48 12 21 5e 85 99 35 65 0a d2 34 2a 95 94 55 60 24 a3 9c 9b 55 b3 02 3b 4b 51 c2 95 29 49 8a 63 29 1c 8a f7 ff 00 fa 36 b3 0a 37 07 25 05 8e 0a 27 e1 b1 bf 06 4e 8a 29 4c 66 21 90 b9 2f d7 8f 71 bb 35 eb d1 be b5 63 97 f5 4e fe 3a f9 47 b5 5a ae 55 54 91 21 46 c1 f8 2e 05 ac f2 45 ee d2 1f f0 8f 77 9f 5f 46 b7 f3 8f 1b 81 89 24 ad c6 c8 57 b1 7f 2e 68 5b d2 2f 67 ba 50 9a 8a af 51 e0 cc 47 aa bb aa f6 c2 9b ae 04 bf 24 65 63 72 29 55 8e 73 9a 42 14 5f bb 15 88 f4 5f 5b bf bc 71 55 15 9e 5d 8f 23 11 49 84 0b ce a9 Data Ascii: iv[, tGlr,"QUz#\|yN8]ak\}H!^5e4U`$U;KQ)Ic)67%'N)Lf!/q5cN:GZUT!F.Ew_F$W.h[/gPQG$ecr)UsB__[qU]#I
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: bd 91 37 56 a7 0e a9 ad 4a b7 41 66 cf c8 0c d4 eb b6 0d d6 fa f4 53 e0 c8 92 67 eb 0e 65 8b ed 4a dc 11 dc 8d d1 2c 6b 68 f6 70 27 bc b6 be e5 89 bb 5c 9e d4 ef 34 11 62 58 57 8d df c3 ec 88 3a 56 ea 71 24 51 cd 9e 30 4b da 2e c8 fe 4c d8 f6 50 54 1a 53 8b 0c 12 7c 80 77 1f 14 a3 89 58 86 d3 ee 42 d9 ee a8 8b 56 ff 00 e3 70 2c 8d 33 fc 0d 49 e9 24 e0 ab 83 28 db ef 1b bc 7a ff 00 ae 51 e2 f1 66 bf 3e c3 7c 3d c9 05 10 72 3f 7e 45 db 8f 79 b5 0e e6 64 7c 86 2b 63 ba 70 65 45 c7 9b f6 59 a8 ac 99 35 b2 41 c3 7b 52 ec d4 93 8c 3c df e6 41 2e c1 3a 51 67 1b 8a 75 cf bf ee 62 ac 8a 70 1b 55 af 2b 9b 00 21 83 b1 71 f0 2f 5b cb 1a 64 8a 7a 8a 6f 44 83 7a da 98 68 be c3 47 51 85 90 29 81 52 08 9c a2 00 0a 77 21 74 c9 57 73 ad 1d 46 c4 1e 6b 14 6b 3b 3f c4 8c e4 Data Ascii: 7VJAfSgeJ,khp'\4bXW:Vq$Q0K.LPTS\|wXBVp,3I$(zQf>\|=r?~Eyd\|+cpeEY5A{R<A.:QgubpU+!q/[dzoDzhGQ)Rw!tWsFkk;?
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: e8 35 ba 1d 62 04 99 91 5a d2 92 b0 8f b6 72 84 75 d6 3f 2a e0 8f 6c 7a fb 23 95 60 d7 a3 58 62 aa 79 f5 b9 ea f1 f4 c8 50 bf 11 04 8a f4 4e a5 13 7f 7e 6a e2 ff 00 6c b8 90 7a a9 e3 b9 e3 93 0c c1 24 44 48 f3 ad 82 e6 4d 8b 0d 8d 64 85 70 98 d5 50 00 64 7f 8f 05 c9 9a cd 6d b9 87 a3 df c7 b5 81 4b 55 57 69 31 61 0d 68 6b 0b b4 dc 69 5a 8c 0d 3e 84 a0 32 e4 87 cc 8c b6 32 22 19 f7 52 d6 ae 27 16 5d 43 d9 62 ed 12 5c 3a 99 49 ec b3 85 e5 b8 f5 ee f1 ff 00 49 1b d6 ac 6a a0 e1 2f ee f6 fe ed 1f 86 c9 8a 03 87 64 a1 76 a7 b2 af 42 b2 6a 4e 8c 03 77 04 95 3b cc de e8 31 1a 7f 79 43 73 dc 91 8a c6 67 cc 66 5d 5a 45 a5 03 f7 19 ee 33 e7 ac 79 93 a2 b9 c4 e0 1e 2e 4d 33 5d fd da 87 f7 3b 08 79 c0 5b 5b 48 8c 8f ca 7c ac ed be 67 09 45 48 9a 1d f2 ac 89 8d fd ee Data Ascii: 5bZru?*lz#`XbyPN~jlz$DHMdpPdmKUWi1ahkiZ>22"R']Cb\:IIj/dvBjNw;1yCsgf]ZE3y.M3];y[[H\|gEH
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: ec b5 26 50 65 b8 7c 3c a7 f4 a9 5c d9 96 67 73 3e 94 1a df 10 67 8c f1 a9 8e 00 f9 d1 7b 63 85 48 2c bd d2 bb ef e9 d4 4c 75 e6 a2 41 da b3 0e 3a 7d 90 22 85 ab 8e 25 50 91 cf 85 14 70 24 a3 0f 4f f5 b0 b6 96 f6 21 15 fe 01 2e de 21 78 51 b6 1c e4 48 03 82 81 b0 af f2 c6 5b 45 bb 59 64 5c ce 19 48 f4 07 59 35 8d c3 f6 7f 7a ab a3 18 6f 38 d3 df 5f b5 6b 0f 76 e8 cc 00 0b cd 8c 51 c3 3c ee 23 9d 35 b6 4f 88 40 e7 c3 a8 90 37 ea 22 6b a0 ec a5 dc 45 ec e4 82 b8 77 29 1c 5e 46 fe 00 49 8e 35 63 0a 96 d5 4e 6c d7 d8 02 75 55 d4 81 a7 7b 4d 3c ea ed bc 96 1f 33 76 8e 47 30 35 3b 03 26 07 bd 74 95 c0 88 d6 58 10 ec 57 43 c0 a9 d4 56 bc 0c 51 31 40 c7 56 19 15 ee 4b 6c 80 b7 84 f0 9e 7e 55 a9 00 81 44 c5 32 0b 8a ca 76 35 c4 8e 46 3a 81 cb 39 a8 02 e2 40 af d9 Data Ascii: &Pe\|<\gs>g{cH,LuA:}"%Pp$O!.!xQH[EYd\HY5zo8_kvQ<#5O@7"kEw)^FI5cNluU{M<3vG05;&tXWCVQ1@VKl~UD2v5F:9@
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 1c 7e 71 56 17 50 da c7 8f f3 ab 99 1a e5 b5 4f 87 bb 31 b4 0d 7e b5 72 3b 13 a4 66 59 ff 00 d9 ee 0f e5 41 cd b0 06 a6 79 9f 2a 7b e4 ae 55 d2 77 23 e4 0d 71 9a 74 17 03 03 c7 96 e2 9c 10 c5 4e eb a1 ab 04 3e 65 e2 46 de 50 68 88 00 72 9f a5 10 46 f4 4c 56 6a 5d 69 35 1f 4a 51 27 48 3f 9d 5d bd a1 b5 6c c0 d9 f5 27 d0 1a b4 00 83 be 4b 2a 47 9e 41 57 89 fb a1 fb ba fa 31 fe 74 c6 48 f1 fd 29 a2 61 78 75 e2 ec ff 00 c8 3c 9b f9 d0 76 46 95 dc 69 f2 ab 4e 2e 19 3b f2 a2 0b 19 ea de ad ac 0f 3a 10 0c c5 17 16 ed 9c b3 9e 72 ea 69 54 b3 05 1b 93 49 c7 c8 0f c8 0f a5 5c f8 57 f7 67 f3 8a 26 29 14 b9 8a ec 96 62 a0 72 ac 42 fd cb 80 37 fe df 5a 65 ef 18 a2 0f 02 7d 2b b5 b8 91 1d e1 c4 37 a5 07 17 40 20 80 47 c4 09 1a 1d 2a 66 97 6a 5a bc fd e8 1c 00 ab 25 73 Data Ascii: ~qVPO1~r;fYAy{Uw#qtN>eFPhrFLVj]i5JQ'H?]l'KGAW1tH)axu<vFiN.;:riTI\Wg&)brB7Ze}+7@ G*fjZ%s
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: ba 74 a8 61 be 95 6c 9b 31 77 42 03 28 6f fb 49 d4 79 c7 ca af 62 da eb 91 11 87 1a 02 43 1d 07 33 97 5d 7c 34 ab 6f 9a f0 ca 32 22 77 16 d0 44 91 03 51 58 c2 a6 cd b1 9c 71 9c ca 46 a2 05 65 a1 59 34 d0 cf 95 18 eb f2 ac 25 91 72 f0 07 50 35 22 80 51 b6 80 72 f5 5d 45 b8 b9 5a 3f 83 4e ca a5 91 84 90 63 c3 fb d0 bb a4 82 44 e8 67 6e 54 d7 01 56 85 31 23 5f 0a 5b 57 2e 98 4b 77 1f ae 51 d7 bf 6e bb d7 a4 43 60 b0 48 87 df bf 71 55 c8 d9 55 61 a0 f8 80 6a df 11 20 9d 02 86 81 ce 62 ae a9 02 d9 53 10 4e da 6f 06 ae cc 29 60 74 51 13 56 ad 1b 86 07 3a f6 0b ba 1c c0 9e 42 0f 77 e6 d4 d6 2e aa 92 f3 a6 df 29 ac 92 01 91 f9 15 81 bc a9 7e 5e 40 2a 44 9d a7 43 4f e9 25 b7 1c 0d 0e c7 29 52 86 46 db 06 91 e7 4b e9 1b 51 9c e6 c8 4e a4 95 cc 36 fd 00 e6 cb df f2 Data Ascii: tal1wB(oIybC3]\|4o2"wDQXqFeY4%rP5"Qr]EZ?NcDgnTV1#_[W.KwQnC`HqUUaj bSNo)`tQV:Bw.)~^@*DCO%)RFKQN6
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 63 70 76 60 62 45 59 60 c1 1d 3d d7 00 8e 95 8c 46 b2 6d b6 eb ba b7 8a ea 23 91 07 4a b6 01 25 ce 52 4e 53 b7 75 62 ed 3e 29 d5 17 28 b6 86 4f 29 6d 3e 91 56 fd 15 64 af f5 0b cf 50 63 f9 ac d4 48 02 4d 33 19 93 5b fe ef 33 a1 a4 40 35 8a 71 27 cd 7e b4 56 25 bc 74 f1 fe d4 0c ff 00 93 d1 78 9e 1f 67 6e 5a db 3f 51 f9 d6 99 52 fd b1 6e e1 d0 89 f0 35 89 b1 77 0c 81 14 4a 93 fe a0 f2 dc 6e 29 58 00 07 74 d2 b3 72 a2 6a e3 4e 94 69 14 93 c5 e5 f7 fb 51 14 c2 0d 1d 44 50 11 eb 26 2b 0a c5 2f 23 13 b3 03 48 e1 80 23 97 df fb 50 7c db 80 7b 88 04 7c e9 f0 d8 5b db 81 69 f9 5c 5d 0f c3 62 3b a2 9f 0e d8 76 2a f3 70 7e 86 54 78 8f fc 66 0e d2 3d 4f bf c3 e9 46 ac 0e 09 23 72 6b b3 04 0c a7 5e 86 ae 02 1c 83 eb 6d a6 86 a0 1a 22 6a ce e6 b0 f8 96 b2 35 e2 59 1a Data Ascii: cpv`bEY`=Fm#J%RNSub>)(O)m>VdPcHM3[3@5q'~V%txgnZ?QRn5wJn)XtrjNiQDP&+/#H#P\|{\|[i\]b;v*p~Txf=OF#rk^m"j5Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	50432	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:22 UTC	929	OUT	GET /xxrz/250x400/793/0b/8c/0b8c097a412960670694249a6bd690de/0b8c097a412960670694249a6bd690de.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:23 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:23 GMT Content-Type: image/jpeg Content-Length: 54407 Connection: close Last-Modified: Thu, 25 Apr 2024 03:14:02 GMT Vary: Accept-Encoding ETag: W/"6629ca7a-88d6" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3407 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4JF7LS353KhUxlrcEgBsOMPI%2BNOmKVEDy7VovyDnbIERdlE2rIRLwwGqL7suo%2F%2F12Yy7lVgdtFHHrHFPFPoHRAkm3SWtVIlGJ1S7eyWftlK3r9hsbQIIT5zoNp%2BGuQcmxSiM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a92ef9930a22-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:23 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 8d 14 db 78 22 78 8f 3c af b3 81 a7 e6 55 a9 57 51 a3 70 a8 f5 8a ba 9e 1f 6a c8 91 de ef 83 00 e0 00 00 00 00 00 00 6f 68 9d 24 59 16 06 94 dc bd e1 ee c8 fa 69 aa d4 a8 e1 6a 3f 66 ef ac 79 ae 9a 0c 5d 2d 78 cf c5 92 7a ac c7 b5 1e 79 9e 48 c4 d2 2b 3e 1a b3 ed c3 e6 93 ff 00 17 d9 59 ee 6e c6 32 a7 a4 f1 ae 4a 61 d0 b6 ce a6 0f 3f 0f bf 32 64 00 00 00 00 00 01 b2 6e e6 b2 48 6e 2d 54 e8 f2 ce 5e 6e 4f dc ae dd 79 62 c9 12 c1 42 ee 5f c6 1d c5 66 bb de 35 76 63 6a c5 a8 bb 53 69 73 47 3e da bd c8 de f0 f3 e5 ea a9 8d 6b d4 5c 7e 2d 79 d1 32 c3 6a 28 d9 9d 21 c7 7d b6 56 f8 03 b1 dc 80 c2 b5 bb e5 43 41 5e 7c 03 9c 00 00 00 59 de cf a2 d5 b9 f6 b7 34 e5 24 77 26 ba 25 71 e9 a5 cd e2 f7 65 93 b2 44 7e c7 b9 d3 9c c0 ed 62 af 4a 2e ac 88 6e 2b 22 d5 fc f2 Data Ascii: x"x<UWQpjoh$Yij?fy]-xzyH+>Yn2Ja?2dnHn-T^nOybB_f5vcjSisG>k\~-y2j(!}VCA^\|Y4$w&%qeD~bJ.n+"
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 98 7d 59 e1 19 66 ce d0 c7 05 d8 ba dc 8c 98 79 d5 5b ba 70 da f5 e7 e7 67 50 00 f1 98 60 00 00 00 00 ee 54 93 74 02 22 cd 2e 68 84 58 db b3 75 d0 26 d8 9a e6 51 79 0e e9 0e 26 ba 6e 4a 07 58 f0 e9 66 2b b2 97 86 96 9c 24 37 3b a2 bd 4e e9 0f 4b 13 38 71 6d d7 11 b6 af 67 22 5b 81 ab 4f 35 f2 b0 99 89 d4 c2 03 ce e6 80 00 00 00 00 00 00 00 00 00 06 ea e3 5b 72 c2 42 dc 6e 2f bf 27 ac a7 00 c8 af d7 36 b7 99 d8 7b d6 13 81 12 2a cc 95 9c 4c 85 25 7d 0d 0d ff 00 9f 7d bd 7a 23 61 f9 ac bc 2a d0 1e 67 28 00 00 00 00 00 00 00 00 00 00 00 03 7d 75 ad b5 69 23 48 10 d4 a5 a7 17 23 59 dd b1 6c 58 11 b3 bd 17 3e 5a 8e 56 52 ff 00 5a 98 b7 63 59 03 6d e5 0f 1f 36 6f b6 a1 81 e3 f1 00 00 00 00 00 00 00 00 00 00 00 00 0c a0 1b 53 20 3d 15 c5 c0 d4 ad c5 57 c3 2e c4 Data Ascii: }Yfy[pgP`Tt".hXu&Qy&nJXf+$7;NK8qmg"[O5[rBn/'6{L%}}z#ag(}ui#H#YlX>ZVRZcYm6oS =W.
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: d2 34 cd 22 dd b7 8d ea 4e 8a 9a a4 f6 f6 4d 09 1a ac 77 f6 7c 7f c5 8a a8 e1 a0 e4 61 44 f1 2a 37 cd 84 66 69 d7 ff 00 49 9f 44 68 57 50 11 09 c8 d5 40 f8 dc ab 7c 8f 5c 01 71 8f 4e 3a a9 65 24 95 8a d5 ed 23 98 37 04 6a 47 3d e1 00 84 8e 98 1f 34 20 ad 37 b8 72 50 59 02 aa e3 7a 8b 16 10 a7 57 fd 36 5c e8 ca 54 f5 de ac fe ad 7a 61 63 af 2c fb 2b 1e 8e 47 45 54 ce de ec 74 73 05 fd 31 d8 55 65 d7 cf 05 88 cd 15 1e da a9 bd 86 23 d1 50 65 e0 90 ce 15 1f 5d cf dc 87 2f 0d 31 5a 07 3a 71 8b 8c 44 23 81 0e 59 52 be 99 58 f6 01 cd c0 88 8c 74 a2 58 d3 ba de ae 1c 38 e8 12 c3 99 2e 33 5e 39 21 51 bb fa 7a e5 4c 69 95 b8 45 42 60 c8 a3 c1 fd b1 ec 13 db 1b bc 6e 85 af d5 df e6 ab bd d9 d0 ca 03 da 41 59 c7 23 30 26 f3 45 47 ab 49 1a 4f e7 d7 b7 3c 76 0a e9 24 Data Ascii: 4"NMw\|aD*7fiIDhWP@\|\qN:e$#7jG=4 7rPYzW6\Tzac,+GETts1Ue#Pe]/1Z:qD#YRXtX8.3^9!QzLiEB`nAY#0&EGIO<v$
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 21 ab 8e 50 b3 08 e5 7e 6b 31 14 50 6a 93 f3 43 f6 b4 e8 8a f6 33 2b 23 7d c6 26 f6 09 c8 e6 35 bc b2 31 5b c8 5b 14 ef b8 a0 5e 0e 32 46 51 f9 00 b6 94 e0 9d 92 20 91 99 cf 0d 58 80 55 fe e8 bc 2c 72 22 b0 28 c4 6f 08 44 70 d1 70 83 c0 85 4c 6a da f4 3a c8 f3 c0 65 d4 13 c4 d4 5e 6f ce 20 5a 4c f2 8c 59 4d 12 ef 60 96 54 9b 06 40 8d c2 51 6b 17 77 a0 04 8e 72 25 93 c4 c9 b1 46 44 99 07 c4 ab dc 37 1a 2c 59 ed 9d 13 d7 4f 07 e9 11 5c 35 85 21 58 76 89 31 cd e7 1e df b7 24 63 e9 76 69 d5 72 2a b6 84 7e 4d 9b 34 ba c3 21 05 46 26 a0 90 21 7c ac e8 5d 38 ea f5 9d fe 63 6c 77 1f 3a 60 67 bb 4b e9 83 55 08 df 70 9d 83 b2 e5 06 48 d3 57 67 d4 ef 28 99 20 e6 66 16 c5 b6 22 70 c0 8e f9 87 0a 5d 84 8a 7e 90 f5 16 ef 2f ba 33 b9 eb b5 5f 22 73 11 60 cd 73 31 78 c7 Data Ascii: !P~k1PjC3+#}&51[[^2FQ XU,r"(oDppLj:e^o ZLYM`T@Qkwr%FD7,YO\5!Xv1$cvir*~M4!F&!\|]8clw:`gKUpHWg( f"p]~/3_"s`s1x
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 41 94 b1 4b 63 08 95 af 49 23 9c 23 23 c0 7f 0f 66 00 ea 03 35 fd e9 cf c7 1f f1 a6 22 f1 91 0f c1 3e ea 33 0d 2c a0 d6 94 53 43 67 00 f5 86 23 c7 38 61 73 c6 e1 b9 1b 95 c7 78 88 d5 e7 13 fe 54 c6 2f de 01 bc c0 ae 98 b0 26 c9 8e 30 18 cc 1c f8 f6 11 1d 06 4f 9b ee 37 77 a7 6f 9c 70 8d e6 16 73 9f ff c4 00 3c 11 00 02 01 02 03 04 06 07 05 08 03 00 00 00 00 00 01 02 11 00 03 04 12 21 13 31 41 51 05 10 22 61 71 81 06 14 32 91 a1 c1 f0 20 23 30 42 b1 15 33 52 62 72 d1 d2 e1 50 82 a2 ff da 00 08 01 03 01 01 3f 01 ff 00 81 50 09 86 d2 8a 91 f6 32 d1 31 44 4f e0 1b 7d ff 00 0a b5 07 b2 c7 c2 8a 10 60 d1 b5 cb ad 11 ae 3a a2 fb 4c c1 44 e8 24 d5 c4 65 b8 c8 c0 ab 29 82 3b f7 7c a8 82 37 82 3c 7a 81 ec c7 3f b4 ad 23 c3 eb e5 45 63 8d 23 4f 65 8d 2d bc b5 72 c2 Data Ascii: AKcI###f5">3,SCg#8asxT/&0O7wops<!1AQ"aq2 #0B3RbrP?P21DO}`:LD$e);\|7<z?#Ec#Oe-r
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 62 74 02 15 64 ff 00 ea ad db 7c 37 ad c9 ed db 1b 15 23 74 bc 6b 3e 10 63 e3 4b 62 ee cd af 15 2a 88 10 f6 84 4e 76 8d 3c 28 61 dc dc b7 65 90 cd c8 85 3a 18 6e 35 8b c2 8c 3d eb 82 dc 9b 6a d9 75 e0 44 53 86 99 5d 67 7f c3 ab a2 14 9c 60 60 a1 b6 76 ee 39 04 03 30 20 6f f6 4e 62 b0 db c5 62 17 17 72 e6 5b b7 73 dd b8 e1 45 9c e7 7b 77 0d 05 5b e8 fb 88 ef eb 6a 6d db b6 eb 6c 80 7b 57 5d c8 ca 96 b9 c8 39 a7 80 9a bd 81 43 7e fd bb 0e 10 5a 4c cb 6e e1 25 de 15 4b 19 0b 00 19 fc c4 77 4f 0b 96 45 be 8f c2 92 c8 81 86 76 cc a4 b5 c7 68 ca bd 91 c2 4e a7 dd c8 e0 6c 7a a5 cb 97 4b 8b a8 03 2d c1 ec 49 23 ee d3 f8 8f 7e 9e 15 72 e1 c3 d8 6f d9 7b 20 88 a3 6b 77 46 be 44 02 c4 02 20 47 9f 95 5b c4 0b 96 45 9c 0d d5 b3 79 d3 3d d2 e2 2f de ba 44 b0 17 38 16 Data Ascii: btd\|7#tk>cKb*Nv<(ae:n5=juDS]g``v90 oNbbr[sE{w[jml{W]9C~ZLn%KwOEvhNlzK-I#~ro{ kwFD G[Ey=/D8
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: f9 7f 3c 10 41 b1 e7 fb 16 d2 48 23 1a 48 17 16 61 e9 86 51 7b 8d af 89 57 dd f9 ef f6 63 4d b0 b8 5c 65 6a 1b bd 93 a2 b6 85 f8 81 e2 fc 30 86 c4 81 ef 37 23 c8 01 b5 cf f0 c4 43 47 84 6e ec 35 b7 53 d3 76 f2 c2 00 cc 2f cc 79 6f 6b fa f2 fb 2f 8a da 6b 49 7e 8c 2e 0f 23 d3 96 1d 0b 20 7e a0 7d a3 a1 c1 04 7d 3b 58 eb 52 2f ca ff 00 9f 5c 2e db 73 07 ae 3b b1 e6 07 c7 97 d9 89 90 0b f4 1d 70 c8 45 bc ba 1e 87 e1 85 c2 f3 c5 03 68 a4 02 c4 ea 95 f9 74 f1 0c 15 94 9f f4 a1 e4 2f 63 f3 c5 3c 69 7f 13 f3 e6 aa 09 fb c6 00 86 34 04 02 2f e7 d7 96 25 21 f6 1c 87 26 eb 7f 31 8d 0c 08 3c c0 dc 7a da df f7 89 e0 12 8b ad 83 00 48 1f 66 df 4e 94 95 79 df f0 c1 89 91 bc f1 cb e1 fc 31 24 61 97 7f cd f1 2a b2 3d af f9 db e8 89 5a 59 16 35 1b 93 f6 0e a7 14 f0 18 d3 Data Ascii: <AH#HaQ{WcM\ej07#CGn5Sv/yok/kI~.# ~}};XR/\.s;pEht/c<i4/%!&1<zHfNy1$a*=ZY5
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: da d7 c6 7d c4 19 7f 6b bf dc c5 35 3c 52 c7 92 f1 35 48 e3 5c c6 82 a7 4b 30 a2 c9 22 ef 45 25 50 5b a3 01 58 25 85 9b dd 60 85 ec 01 03 13 76 a7 c2 6b c5 79 27 07 50 66 34 d9 b6 6d 9a cf 99 52 cf 1e 57 53 4d 54 99 43 65 54 6d 57 2f e9 21 14 8d ec fa c2 f7 6a a7 70 75 13 b2 1c 66 5d a4 f0 7d 27 0a 67 9c 61 16 75 41 5d 92 e4 2b 5c b5 75 54 b5 09 3c 46 b2 80 f7 72 50 23 29 b3 55 35 41 4a 75 8c 5e f2 38 d3 a8 6f 8e cf f3 dc cf 8a f8 23 21 e2 8c ce 0a 7a 5a ac f2 90 e6 06 9e 98 48 b1 c1 04 d3 cb ec a9 a6 49 24 6d 5e cc 23 d6 da bc 6d 76 b2 de d8 a8 d5 a8 6a bd fc fe cf a3 fb 48 55 53 c7 d9 ac d9 74 d5 73 d1 49 9e e7 79 36 53 05 45 3c f5 71 18 bb ea ae f6 aa 49 92 8d 84 95 34 e2 86 1a 95 96 99 d6 48 a4 2e 9a 90 90 b8 e0 ba fe cf 32 6c a2 a6 5e 1c e1 f1 95 64 Data Ascii: }k5<R5H\K0"E%P[X%`vky'Pf4mRWSMTCeTmW/!jpuf]}'gauA]+\uT<FrP#)U5AJu^8o#!zZHI$m^#mvjHUStsIy6SE<qI4H.2l^d
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: e5 50 72 8a 25 21 22 5f 0a 00 31 9d e7 59 6f 0e 65 d5 79 ce 6d 52 94 99 6d 24 2c f3 4e fe f2 5b 7d 08 bc de 49 0d 92 38 d6 ed 23 b2 a8 1b e3 b3 a8 73 7e da bb 53 ab ed 47 3b a6 96 8f 85 38 51 de 87 84 28 a7 17 59 2a 54 fd 5c aa 8d e1 79 22 0e f5 95 6e 3c 22 ae 4a 78 43 11 06 d6 bd b1 a2 f6 b7 e7 97 d1 c7 9d 93 70 b7 68 95 d9 56 63 9e 49 9b d3 d4 e5 51 cb 4e ad 94 e6 1e c2 2b 29 25 2c cf 49 59 f5 52 99 21 bb cb fe 19 89 f4 cd 2a 96 2a d6 03 20 ca 12 9b 29 a1 8e 86 18 a8 b2 49 60 9b 2d a4 89 42 c1 4f 25 34 6d 1d 3b 2a 5a c4 c5 ad 9c 13 76 ef 3c 64 93 7b f1 9e 45 3f 12 f0 ce 6b 92 52 cb 0c 15 15 a9 4e 22 92 a3 57 72 1a 0a ba 7a ad 32 68 0c da 5c 42 63 36 53 6d 5b 8b 63 2e 82 4a 5c ba 82 96 6d 1d ed 35 15 2c 12 f7 66 e9 de 45 04 68 fa 2e 01 d3 a9 4e 92 40 b8 Data Ascii: Pr%!"_1YoeymRm$,N[}I8#s~SG;8Q(YT\y"n<"JxCphVcIQN+)%,IYR!* )I`-BO%4m;*Zv<d{E?kRN"Wrz2h\Bc6Sm[c.J\m5,fEh.N@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	50433	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:22 UTC	929	OUT	GET /xxrz/250x400/793/fa/03/fa03e78c21018de5d0e0e40fa7e28de3/fa03e78c21018de5d0e0e40fa7e28de3.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:23 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:23 GMT Content-Type: image/jpeg Content-Length: 71668 Connection: close Last-Modified: Fri, 26 Apr 2024 03:52:56 GMT Vary: Accept-Encoding ETag: W/"662b2518-e418" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6972 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k9qALQxgYn%2FIC7Nnjg%2FdJ9q7InpikjhWOnIcohl2152LZqkfzoNZciED9H5VzTJgBLv%2FgZDt5%2FeHeDJ6WjontRpVV%2B8CSUd2te7K9NxeOFB711dNCsv0O2sJpEq8%2BiqJUxcQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a92efd09da4f-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:23 UTC	643	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 03 05 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: bc 45 d1 3c b1 e1 bb 25 16 56 16 4f 7a e2 8c 96 7e 87 db 20 d8 4c 22 14 00 cc 1c b3 8e 28 32 77 48 86 72 85 dd 0d da db 13 8a 7c 1e a1 23 ce a8 fe 18 f4 ac 7a c8 38 99 7b d8 f2 94 d0 aa f8 dd 23 5c 51 5a d8 65 91 44 98 5b 58 e4 92 2e a8 91 6a 74 e1 0c 01 de ed 74 90 14 37 46 5c f9 6d 11 32 61 98 7b 69 7f a4 6b 07 27 b2 dd 52 db 96 b9 99 25 2f ba e4 eb 6b 70 2e 09 ce 5b 7c 9e 95 d4 3a 29 69 ea ee df e7 35 b2 e6 bd 17 05 db 17 a2 eb 5f b1 74 5d 8b d9 fc d5 c1 ed 9b d3 b5 6b b5 5e 76 a6 4c fe e9 30 fb 37 98 ba f5 d8 f2 2e 9d db 77 24 ac 4c fb d9 2c 6a 74 6f de ca c9 74 2e 50 4f 62 c4 7e 79 a3 cf ef 2a f6 61 84 d0 7b 4d 5f 32 f5 3e 6b 49 81 f7 bd 83 c2 c8 d7 28 57 7d e7 9a 57 6f 64 6f 27 dd bf 77 72 7d fb d9 11 c9 f5 de b9 17 42 c5 3a b1 e9 77 2a 5c 92 a3 5e Data Ascii: E<%VOz~ L"(2wHr\|#z8{#\QZeD[X.jtt7F\m2a{ik'R%/kp.[\|:)i5_t]k^vL07.w$L,jtot.POb~ya{M_2>kI(W}Wodo'wr}B:w\^
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 5c 99 b1 16 53 7a 79 70 fa 0c 76 77 97 c2 3c 5c e8 5a a3 47 4f cc ee 5b 8a 58 b5 27 1c 5b 27 94 80 9e dc 0f f6 84 8e d6 40 20 b8 b6 7f 46 a5 9f 36 23 cd 3c 4b 80 ad 8b 0c 1c 87 37 72 7c 8c 25 a7 67 dc 5c 2f 21 24 fd b5 db 84 a5 c0 2e e4 4b 6b 9c 3d 16 45 71 ac 37 a8 c3 75 b8 0f 32 e1 66 62 44 cb d5 35 c1 18 ba 46 00 39 75 46 29 91 d9 6a b7 b9 23 7b 90 58 f7 b2 cf 3a 35 92 76 17 9c fb 4c fd c6 49 b6 92 99 48 95 34 c0 21 34 c0 4c 87 e1 57 40 e2 28 4f d0 74 b1 a3 65 f6 7c fc 1d 97 70 f5 27 73 16 62 51 69 a5 f5 49 84 68 8a 10 ca 3c eb 8f 17 65 03 81 ea 02 25 62 16 67 d2 79 fe 91 bd ad 9a d0 6a 2e d6 d5 e7 01 30 76 41 be ae 2e 80 cc 01 9b 1c d1 15 de c5 74 e8 72 4b 74 4c b2 3e dd a2 1a 22 3d cf b1 a9 a2 de ca ec 1b 64 14 e8 e7 15 c8 80 07 46 a9 af b8 49 ba a0 Data Ascii: \Szypvw<\ZGO[X'['@ F6#<K7r\|%g\/!$.Kk=Eq7u2fbD5F9uF)j#{X:5vLIH4!4LW@(Ote\|p'sbQiIh<e%bgyj.0vA.trKtL>"=dFI
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 34 f6 5d ac 4d f8 dc 79 21 ee dc 4d b0 77 78 7d 00 fb eb 69 65 7e 0a f0 fe 8c ec 5f d9 46 37 ea b7 a1 6a 42 56 cd 28 08 5b ac e7 65 17 11 56 61 2c aa 16 5f 71 f4 bf da 18 1e 9b 9b ac 6e a1 51 71 26 fa 02 c2 bc d4 e4 6a 35 ed cd af 79 df a8 0e 00 e7 79 b9 f5 f5 dc da e6 c6 10 85 42 11 c1 ec f3 68 4b 39 ec 70 44 4c 23 e9 df db df fa 1d 67 5e 9d 7d fd 7a 07 d9 d7 af 59 d6 75 9a e6 b9 d6 75 9d 65 ce e0 c6 b8 d0 bc 81 3c 92 b5 2e 44 09 71 4b fa 85 04 f3 4c d3 34 cd 33 4c d3 34 cd 73 4c d3 34 cd 33 4c d3 34 cd 33 5c d3 34 cd 33 4c d7 35 cd 70 0b 9a 67 21 f2 10 d6 8c 53 2f 29 25 0f c5 b6 69 72 d7 b8 34 ec 1b 44 59 1d 43 cf 17 a3 86 99 ae 75 9d 66 b9 a6 69 9a e6 b9 ae 75 9a e6 b9 ae 6b 9a e6 99 a6 69 9a 06 6a 39 ae 01 33 5c eb 1d 2e 8b 26 f2 ae 64 ed 13 b5 98 a4 Data Ascii: 4]My!Mwx}ie~_F7jBV([eVa,_qnQq&j5yyBhK9pDL#g^}zYuue<.DqKL43L4sL43L43\43L5pg!S/)%ir4DYCufiukij93\.&d
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: c2 fb f5 15 f2 15 54 44 14 7c bd 95 d0 19 05 09 d0 47 94 be 37 86 02 21 06 fb 53 74 8b f6 d7 18 37 35 69 df 70 7c 07 43 9e ec 71 4e 95 41 e9 0a e1 2e 43 8a 34 35 ce 30 bb 2f e2 d7 0c 97 61 c7 d3 b5 e6 c8 f2 ac 71 23 df aa 6f eb 45 ac 6c 05 3a 14 51 12 8a 84 2f 67 2e 6e 18 2a fe b5 36 e6 08 c8 d4 0b 17 0c e9 40 04 6b f2 80 91 14 12 17 0c 65 13 45 56 80 9b f5 80 0b 8d 03 54 a6 d4 f1 31 89 3f 8d 8c 1a bf af 35 c4 fb 88 10 01 c0 0c ec 32 19 c8 3b 88 3f fb 79 e1 12 a3 7a 8e 21 40 c5 c0 4f b4 fd 98 98 d2 04 98 70 c4 5b 3e 68 68 39 86 60 e0 43 ac 01 11 13 98 43 05 5c f2 60 a8 03 95 54 f4 4d db f0 3b 99 23 19 cc 43 16 60 f5 eb 35 4c 96 01 c3 a5 56 21 de a8 51 30 97 f5 2d 85 c8 7c 63 4f fd 31 67 13 2d 22 c1 b4 ec 64 c5 d3 e9 79 4f f1 49 e9 11 ff 00 15 26 72 8c b9 Data Ascii: TD\|G7!St75ip\|CqNA.C450/aq#oEl:Q/g.n*6@keEVT1?52;?yz!@Op[>hh9`CC\`TM;#C`5LV!Q0-\|cO1g-"dyOI&r
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: fa 40 a3 2c b4 d9 e3 6a b5 c9 06 04 95 76 8c 50 27 9e c5 50 c7 08 98 46 96 64 fe 9b e5 ad 25 59 3a e3 f9 54 d4 fa 6a ce d7 08 c2 58 31 38 4b 1a d8 8d 26 d2 eb 13 e2 e9 69 0c 57 85 24 48 9c 8f 17 da 98 63 88 69 b6 22 de 72 7e 34 e8 da 6f d3 ca f1 ff 00 0e b5 ad 44 5d 2c 91 d6 1b 0c b1 54 28 56 10 9e 88 81 b0 c7 1e 25 7b 34 93 2b 83 e6 03 37 58 25 6a fd 77 55 ed 06 e1 65 9f a9 cc da 24 23 df c4 73 65 a2 58 cd cc a2 8d fa ec a9 31 22 aa 73 8d 91 47 73 a5 66 83 a5 85 80 24 6f 64 e0 b8 bc fb 04 d4 86 bc 7c 5c 43 9b 44 bc c6 47 9f 60 40 0a 38 50 20 e1 ff 00 52 81 ce 4c 29 50 54 a6 10 d1 63 14 82 bf 80 30 ed db 9c 68 68 90 2e 3c e7 26 83 ca 63 ca b1 0a e5 ec 8c 4a d2 0f 2d e9 57 19 5a ad 6b 2c ec 27 4a 58 b8 65 da da 27 64 20 49 4b 92 89 41 66 ec 79 25 dc 5b 16 Data Ascii: @,jvP'PFd%Y:TjX18K&iW$Hci"r~4oD],T(V%{4+7X%jwUe$#seX1"sGsf$od\|\CDG`@8P RL)PTc0hh.<&cJ-WZk,'JXe'd IKAfy%[
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: db 5f 4a c3 e1 c4 e1 98 be 40 0a 2f c0 ce 4b 48 6c a2 c3 61 7d cd 72 8f 3f 91 7d 79 bc ac c3 51 f1 65 bf eb 6a 7c 29 84 31 91 80 ed 94 8c 5b b5 28 53 66 7b 7d d5 f3 de b9 13 f6 47 26 41 9c d9 2e b6 bd 0c 24 b6 96 ea dc c8 99 17 96 14 92 d9 ef a8 3a 68 2d dc 6f 42 19 58 95 58 d8 b8 dd 42 9b 8b 6f d2 a2 47 24 d9 1b 4d 0e 87 71 a9 1e 76 a6 88 92 a1 03 b1 21 49 ec 11 62 df 98 f1 eb 5c 99 0b 14 08 c5 86 eb 63 9a de 56 a1 09 28 4d fb 41 c2 72 ed da cc 6f fd 28 c6 f1 9b 3a b2 ff 00 10 b5 2d 2d 44 d0 c7 0c 87 9a 1d e6 8d 17 94 15 83 a9 e6 23 9b dc 5a c0 2f 7d 49 3c 57 9e 71 36 65 96 22 8b 87 b3 02 a4 aa ad 8e 99 40 42 2e 2d dd 52 e2 a2 68 e5 64 68 87 32 15 8f 94 56 63 20 60 a0 65 0b 9b 94 b9 48 ba c8 35 07 a5 61 a5 41 03 46 31 03 0d 23 38 ce e5 5c 97 8b 28 b2 29 Data Ascii: _J@/KHla}r?}yQej\|)1[(Sf{}G&A.$:h-oBXXBoG$Mqv!Ib\cV(MAro(:--D#Z/}I<Wq6e"@B.-Rhdh2Vc `eH5aAF1#8\()
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 60 ca 07 2a c5 c1 3d 9b d8 5b c4 8d 68 02 7a 57 2f c4 fa 69 5c b1 5c 9e ea e5 7e f7 e1 fd ea 38 c2 c8 8d a1 ca c1 b6 ee 22 b8 4f 11 6c 14 d1 ce 96 f8 83 6b aa 91 6e 97 1f 8e e3 d6 a5 f6 9a 49 82 3c 51 ac 25 54 a6 7b 86 95 81 b5 c3 35 81 3a 8e cd ee 45 ce a6 bd a2 e2 7f 59 62 c2 82 79 50 17 df 66 95 8f da 3f cc 0f 97 8d 58 0d 80 1f 46 53 5e c7 e2 f2 4d 36 1b 90 cd 24 ef 13 73 97 52 13 45 68 ed 6b f7 b0 f5 1d 2f 59 70 f2 22 44 80 64 d9 84 d0 ad ed a6 b9 5b bf a1 d2 b1 bc 3b 0b 1b aa e0 e5 2a f8 8e 6a f2 8a 30 8d cc 40 66 ca 18 76 4e b9 81 b1 52 01 39 ab 88 33 8c 6e 21 64 19 8c 72 ba 00 fd 02 b6 d6 1a 51 6b b6 6b 01 b6 83 41 4d ad 85 80 b0 e8 37 ef 27 c4 d5 81 e8 2b 1f c2 a4 c0 3f 6b 33 c2 7e 09 54 5d 48 d2 ca 6d 7b 37 78 e9 51 e1 5a 6f 82 f6 ea 49 0a 3f 1f Data Ascii: `=[hzW/i\\~8"OlknI<Q%T{5:EYbyPf?XFS^M6$sREhk/Yp"Dd[;j0@fvNR93n!drQkkAM7'+?k3~T]Hm{7xQZoI?
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: ca 77 b6 ff 00 d6 99 72 cc 7d 3f 21 48 c5 c3 b7 73 95 51 e0 2d fa de 91 81 d3 af 51 d4 55 f5 27 be 93 af a7 e6 2b 28 ac 4a 64 96 39 3b 98 69 e1 70 0f cc 1a 31 aa e8 77 f4 f0 f1 ae 08 d7 c1 01 fb 12 38 b7 85 ee 3f 03 58 d7 e6 62 e7 3d 03 04 1e 48 00 fc ef 5a 77 57 04 8f 99 c4 22 07 ee 2b bf c9 6d f9 b0 a7 bb 26 21 7f 7e 34 d0 ec 59 12 fe 7a bd e9 70 d8 84 f8 31 4f d2 ca f6 61 a0 1e 34 f3 62 a1 d2 58 d6 51 d5 93 7f e8 7d 2d 53 62 70 f2 02 7b 24 aa 93 96 51 94 8f 46 ac 50 bc a6 c3 d3 d3 7f 4b d2 48 a8 32 e5 60 17 ef 65 36 27 a9 ef 1e b5 cc 40 56 45 d4 8e c9 d0 d8 82 2d 63 a1 bf 87 8d 66 a5 63 44 02 14 dc 0c c2 fa d6 32 e2 31 98 5c 13 6d af a9 b5 b5 dc 1a 16 60 a4 86 37 0a 74 d7 52 16 f7 f5 ae 02 e3 2c e9 b6 57 07 e6 83 fa 53 3e 69 64 3b e6 91 cd fc 0b 7f 7a Data Ascii: wr}?!HsQ-QU'+(Jd9;ip1w8?Xb=HZwW"+m&!~4Yzp1Oa4bXQ}-Sbp{$QFPKH2`e6'@VE-cfcD21\m`7tR,WS>id;z
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: db a0 fe f5 8c 89 06 41 0e 8a 23 70 a1 75 f8 82 d7 12 c2 62 24 86 58 43 37 3d 38 6c 21 d8 7d f9 12 55 90 0b 58 31 1a eb a6 97 ac 16 33 26 b8 9c 3b 59 07 c2 49 46 0f 6f 0b 8b 1d ee 41 ba f7 5e b8 06 3c 0e 23 16 74 19 64 66 55 5d 34 0e 84 6e 15 49 08 ba af 53 61 dd 4b 89 09 6b 5c 03 a1 d7 a7 5f 9d 4f 88 04 8c b2 65 5d 6d a0 ea 45 7d 54 e5 83 3c 80 90 7e ee 55 1e 57 20 b5 bb f5 af 69 a2 48 f1 58 7c ad 72 d8 71 9b 33 b3 6a 18 ae 99 89 b0 b7 41 4b 44 db c4 9a c7 e1 8e 1a 0c 18 20 06 92 3e 63 5b 5d 59 b3 7c ec 40 a5 6a 8a cb 2a 13 d2 f4 d0 d9 9d 8e 4d 48 1e 36 1d f6 15 03 73 15 d4 ae 5c 8d 60 6d 6b 8b 0e ea 56 78 8b 22 17 65 67 02 d7 25 95 ba 94 ee b8 e9 b6 d4 83 45 04 1d 0e 8a c2 db f9 53 70 fc 44 b8 d9 b1 49 2a ac 46 16 8c a5 f5 2f 94 0b 0e 9f 75 75 f0 da a5 Data Ascii: A#pub$XC7=8l!}UX13&;YIFoA^<#tdfU]4nISaKk\_Oe]mE}T<~UW iHX\|rq3jAKD >c[]Y\|@jMH6s\`mkVx"eg%ESpDIF/uu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	50429	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:22 UTC	929	OUT	GET /xxrz/250x400/793/6f/8a/6f8a0ea042721d3749c9d6e82665eb75/6f8a0ea042721d3749c9d6e82665eb75.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:23 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:23 GMT Content-Type: image/jpeg Content-Length: 71138 Connection: close Last-Modified: Fri, 26 Apr 2024 14:29:59 GMT Vary: Accept-Encoding ETag: W/"662bba67-ebf3" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2752 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1EQX4dKAMdbLJgkSfZ1EvEMPfBUb%2BWPiSt%2BefMIEqFAqgj6adqW38eCX58tghQu0COdVpfU0yxmeloVyfSmDPR01iMPZ3gvdpPf8eYt4n3DGA6VXaASprZ3pq513qXS7F21g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a92efb9ba4e0-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:23 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 57 79 8a 28 bf 77 09 42 36 86 bf bc ea c2 cc a6 83 37 04 3c c4 4c cd 9f 9b 6f 07 26 e4 36 c8 43 73 dc 39 a6 bd b9 dd b9 f1 9a f7 07 d6 f7 ed 2f 8e ec 74 28 55 6f 08 9d 53 02 a8 8f 1e 46 f7 11 97 55 a9 9c bb c1 76 27 2e 41 3d 97 88 5e 70 fd 06 e2 d7 80 a1 e4 fb 6b 45 43 6c ac 02 ce da b8 be 64 11 d9 02 27 c8 d9 8e 49 c1 2b ad b6 ac 25 74 a1 00 d9 52 3c 34 f0 bd bb 9e 25 2a 35 68 96 a0 ac dd ff 00 4f e9 6f d7 bf 9a 83 e8 2b c3 c0 8a 8d 26 42 4e 78 11 3c 7a 74 a1 2b c2 55 bd af 29 fa 7e 15 09 5c 3a b1 31 74 30 5a 1a cf 44 ba d3 40 96 0b 3e ee 49 9b be 78 df fe 75 d1 a4 e8 5a 71 8d d2 be 8e a0 7b 57 49 1b 32 3d 4a dc 47 a1 4f 59 c3 1d 81 73 9c b6 75 8e 85 89 34 3b 56 08 ba 58 8e 76 27 46 b7 7e 97 7d a7 c7 bf f9 89 4c 7e a9 fc bb e7 b0 b2 30 9e 9b e9 d1 e3 9a Data Ascii: Wy(wB67<Lo&6Cs9/t(UoSFUv'.A=^pkECld'I+%tR<4%*5hOo+&BNx<zt+U)~\:1t0ZD@>IxuZq{WI2=JGOYsu4;VXv'F~}L~0
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 73 39 ce b5 66 67 8d b1 44 fc e3 2d 6a 8b a5 36 fd f2 b2 ca b8 f6 c9 54 89 1f 34 34 9f 51 ad 8d 49 3b 34 48 52 28 42 5e 7f 9a 7e bc a8 31 56 fc 3c 5b e8 eb 9f 3d 12 ac d6 c5 d7 1b 05 7e 8c b6 15 25 63 9b 92 48 7a 61 7e 2c 33 5a 79 f4 aa 8e 49 94 a3 2a 96 47 ef 80 87 23 5c 4b cf 69 b8 d4 5e f7 47 7a 7d 78 b1 81 14 92 49 f5 7a ed 57 b8 44 80 67 10 be 47 d5 d4 23 ce 5f 51 63 d8 ba a9 18 04 a4 e4 25 44 80 c6 25 85 cb 9e dc 2b 2d d7 8f a8 06 f8 1e c9 9c b3 01 ac b9 b4 ae 7e 69 ab 99 dd e0 03 3d 06 d4 d4 56 20 b5 24 8b d9 92 bc c8 42 c2 d9 35 d1 79 dd af 8b 41 f8 3d 2f 6b da 9b fd 18 f9 b0 b1 25 bd 01 9e 60 13 19 38 18 47 fb 9d 9e 6a 33 04 0a 56 0c f4 d0 f2 cd 6b fe d5 b6 d5 54 b0 f2 27 0e 43 85 37 67 d3 a7 59 c2 b2 fa b2 3a 09 05 06 ee 6b b5 57 4b 75 83 83 27 Data Ascii: s9fgD-j6T44QI;4HR(B^~1V<[=~%cHza~,3ZyI*G#\Ki^Gz}xIzWDgG#_Qc%D%+-~i=V $B5yA=/k%`8Gj3VkT'C7gY:kWKu'
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: a4 62 21 66 56 86 75 c8 a8 a2 a1 23 d6 24 80 fe 57 64 29 73 55 91 aa 28 66 ab 85 5c 31 11 e8 e8 ad 8d ad cb b2 5a 48 57 db 9f be d7 6d 66 86 d2 d6 e2 dd f1 28 4b 1d ab 67 16 b2 61 2b c9 20 78 58 e8 77 d6 09 83 34 91 f2 26 37 9b 09 43 c3 b7 e6 47 ec 18 0e 20 ec a3 fe 1f 0d 66 1d 54 35 84 b1 a0 d8 22 7b 7c 62 60 d7 22 08 a7 20 d3 e6 97 ea 3c 08 b5 b2 08 9a dc 05 41 55 d6 f9 66 d6 d6 00 17 91 65 b2 1e 9e 42 4a 8f 5f 57 58 e6 0a 9f 59 51 ea ba 5e b0 ea f3 e8 7a 67 8a af 46 d7 e7 dd ce d6 75 07 46 ab a5 a3 33 3f 2f eb 6b 94 34 d5 23 35 b6 c6 e6 4a a8 df e9 6b 52 0e f1 5d 3e 54 90 81 96 92 c6 99 25 bf 32 53 28 b5 d7 49 17 53 e2 92 1e 71 96 7a dd 75 0d 87 50 23 8e 38 1c 55 c1 90 98 26 be 26 57 58 8e 69 db 31 2a 62 7e 25 29 f2 f5 28 f3 c8 7b 81 85 22 5b dd 0c d1 Data Ascii: b!fVu#$Wd)sU(f\1ZHWmf(Kga+ xXw4&7CG fT5"{\|b`" <AUfeBJ_WXYQ^zgFuF3?/k4#5JkR]>T%2S(ISqzuP#8U&&WXi1*b~%)({"[
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: f0 48 cc 6a 89 a8 45 53 29 3c c5 5e 63 b7 fb 49 23 c6 82 8e 5b 89 d3 ad c3 54 00 a3 cc 57 d0 4d 38 16 14 4a 58 7a 88 56 c6 6d 1d 50 2a 2a b6 1b 04 2c 4b 9f a5 ce 7f 9c 4b 92 df c0 55 7e 9f f5 dd 8d fe f4 ec f5 d6 cb 0d 96 d6 13 22 d4 17 c8 dc 21 71 1f f0 cf 95 2f 27 18 e4 20 55 b2 63 aa 9a 4a 38 c5 fa 18 31 f2 95 42 86 62 c9 d6 ee 8c 1d 5f 4e af 34 d8 fd 2b e9 9b d2 ca fa 28 41 2a c6 54 e9 3a a8 9c 92 2b ad c2 da 79 15 d5 9b 00 66 74 b8 3d 82 a3 86 0c b7 84 da f9 b3 57 ec bd 73 9f 8c 6a 2b 5d dc 8a 9f ee be 05 7c b7 57 ea af 95 08 94 6c bd d4 9f 0e 20 25 c8 08 bd e4 9a 87 0e 2f 7b 5a 41 95 78 90 dc ff 00 4f f9 41 bf c8 41 b3 8c a1 f6 1c 69 f0 28 24 5b 1b a4 f6 fb 38 6e aa ef 34 fc ea 38 03 26 fa b4 2f 94 7d 57 50 b8 60 66 40 6c ba c6 7e 64 83 21 d4 7b dc Data Ascii: HjES)<^cI#[TWM8JXzVmP*,KKU~"!q/' UcJ81Bb_N4+(AT:+yft=Wsj+]\|Wl %/{ZAxOAAi($[8n48&/}WP`f@l~d!{
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 6c 75 da 8e 97 2b 54 24 66 35 f3 3a a1 0a 24 2d 88 7f f6 7f a6 5f cb b6 1f e4 6b ff 00 72 4d fe 7d 96 f6 ca fa 66 ca fa b0 e8 bd 2c 8b 18 55 7f 9d 9a d6 58 bc 17 da 9f 4f 8f 35 76 79 f5 76 ba e4 eb 7d 92 5e cf 32 f8 0c 16 84 9f 26 8a 8a 39 1d dc 63 bd 1b f1 9c e3 97 ea 54 fa 1b fd d6 26 6a 68 7d 2f fa 85 a8 ff 00 2a ea 3f f2 f6 95 ed 4e 94 3d ef 94 21 bc a6 99 0d 67 e4 e8 ac 89 d2 8e 98 ff 00 2e d8 bf 92 7f fa 49 57 ef f5 36 d2 be d2 d2 b2 9d f6 fd 32 d2 76 38 d4 52 86 3f 78 dd db 69 86 38 3a 43 5d 53 17 68 98 b3 f4 ee 9d 7b 09 36 fb bd 94 22 c2 77 2d 24 67 09 64 ae 2f 39 dd 9c a6 77 26 3d 7e af 9c 4f ee b6 e3 f2 1e 97 b1 c1 d7 c7 aa 2b 5d b4 f5 23 f9 7e b3 33 44 8d 59 a9 4d d4 25 13 59 02 2c ee a8 11 a1 bd 29 96 47 49 f5 cb c2 6b b6 bd b3 6f ad 9a 13 bf Data Ascii: lu+T$f5:$-_krM}f,UXO5vyv}^2&9cT&jh}/*?N=!g.IW62v8R?xi8:C]Sh{6"w-$gd/9w&=~O+]#~3DYM%Y,)GIko
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: a4 d8 e9 3b ea db d7 13 e6 10 d4 52 54 47 3d 75 45 44 71 25 29 29 2d 04 da e4 fe 32 17 d2 b6 9b ef 03 04 08 15 7e 11 77 26 db 01 51 41 2e 5b 54 b0 d4 bc 50 49 ee ea 21 f7 37 8c 22 af 50 21 0b ee ce df 13 6a f2 f0 00 63 2e ce 2a 69 e8 e7 a2 86 be 59 a9 27 fb a6 84 53 e9 55 59 40 e6 e8 00 f7 92 c9 a8 df f0 5b b1 23 1c 34 45 1d 43 7b b9 90 3c d1 ba cf 64 8e 22 ea aa cd b3 4a 1d 77 3e 17 f9 1c 3b e6 2f 2d 29 e6 4b cb 92 55 36 fe 0f 98 9c b8 7a 00 29 10 0d b0 b1 32 ed bf 9e e2 be 0a ba 99 00 a9 95 dd 5d 6c 4c bc a1 a4 0b 32 d8 c4 05 f7 00 9b df b6 d6 df 14 d4 06 ad 25 0c fa 89 10 44 c6 c7 a4 42 c5 90 7c fe 83 1c 39 45 16 53 53 0d 5b 58 29 68 e3 2c 41 1f ea cd 1a 8e fe a4 0f ae 1e 3e e7 ce d8 d3 84 07 7b 6f db 1a 7d 71 53 4b 24 01 b5 8b 76 fe a3 f5 c1 16 c5 bf Data Ascii: ;RTG=uEDq%))-2~w&QA.[TPI!7"P!jc.*iY'SUY@[#4EC{<d"Jw>;/-)KU6z)2]lL2%DB\|9ESS[X)h,A>{o}qSK$v
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 89 38 cb aa e0 7e 50 8c ad 84 4d d8 f8 e8 03 d7 15 f2 54 53 7e d0 29 ef 33 52 41 5b 47 2b ad 4b 28 e5 f3 69 c4 51 c5 08 d6 2c 44 dc f7 b0 07 56 b8 8d ec 0d b1 15 31 a9 34 35 33 4a 18 a3 ea e5 e8 0a 6f ca 28 c0 db bd ef 7f cb 19 85 42 9e 2d ce 14 23 6a 8f 32 45 2e dd ac b1 42 15 47 90 00 ed 6e f8 96 b2 1e 7c 36 8c 4b 1f 66 de c5 5c 11 b8 b8 d3 63 e2 0f a6 29 e7 4e 4c 91 c6 c0 06 09 a9 4e c6 fb 7f 9f d3 0f 4c 5a fc b3 ac 95 52 00 5b 13 ab c3 73 e1 82 86 36 2a dd c6 c7 e7 82 2e 6f 8a 7f 88 13 d3 6d 5b fd 30 a7 4b 86 ed a7 57 e4 07 eb 8c fa a4 d9 75 96 fb d2 d1 07 1d d4 e9 d4 87 55 ac 37 5b 6f e2 46 28 25 f7 83 34 f1 de d5 d9 6c 8b a4 f6 59 a0 2f 11 1d bf e7 ff 00 b7 19 6d 31 e2 4c a0 52 3f 32 0a 39 69 9a 92 b1 6d a5 9d 75 b4 6e 91 5f f0 b6 ec 1a c7 66 06 db Data Ascii: 8~PMTS~)3RA[G+K(iQ,DV1453Jo(B-#j2E.BGn\|6Kf\c)NLNLZR[s6*.om[0KWuU7[oF(%4lY/m1LR?29imun_f
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 11 d8 ee 0d 88 16 27 b1 15 11 b4 74 b3 d2 cb 44 af 54 d5 ac de f3 ce 21 a3 54 89 50 c4 17 e0 65 76 b3 dc ff 00 7c 38 28 c4 30 df cb cb 13 30 b8 f9 62 49 a3 84 6b 90 31 5e c7 48 ff 00 f7 e9 88 73 a8 69 e2 b2 c7 20 46 ec ba 16 df cd ae 4f a6 f8 15 f4 25 cc 8d 14 82 e6 e7 a7 c4 fd 40 fc b0 f5 f4 0c 2c 12 5b 7c 97 6f 1f f7 1b e2 6a 9a 69 54 2c 21 c3 5c 1e a5 b7 6b 7a e3 4e d7 1e 16 23 e7 88 f3 52 b1 c5 21 dd e3 4d 04 13 db 7d 8d b6 b9 fa 6d f5 c4 b5 72 55 d4 f3 a5 63 a7 50 b2 f7 01 45 af e5 e9 88 ab 28 12 c4 3c ca 45 88 22 32 2c 7c fb f8 61 33 7a 44 ea f7 ba a7 b5 b6 70 e4 78 6d f1 82 3e 96 38 a6 e2 a8 e0 b7 2e a5 e1 df ba c0 4b 00 3f 0e ae ad b7 f3 c4 7c 6b 7e 96 a8 6a 90 45 ba e9 81 07 b7 98 fe c3 0f c5 34 1c 9d 3d 5f 7a fa 8b 2c 2c 2c 7c c3 31 16 1f f1 5d Data Ascii: 'tDT!TPev\|8(00bIk1^Hsi FO%@,[\|ojiT,!\kzN#R!M}mrUcPE(<E"2,\|a3zDpxm>8.K?\|k~jE4=_z,,,\|1]
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 8d 26 56 3e d3 cc 9b de 6b 65 92 18 45 aa 9f a3 5c 4a ed a9 bf 08 b6 f6 c7 16 53 8c bf 86 b8 52 01 5d 4d 98 91 2e 6a ab 59 49 23 cb 03 34 95 74 ca 34 bc 8a 8e 4a 16 b3 02 06 f8 e1 1a 3a ba 1e 20 e3 9a 29 6a e5 ab 14 7c 3b 9c c7 24 f2 6a bc ee 52 13 72 19 de c6 cc 3f 19 c0 ac 8a 7e 1f cb 72 98 96 57 ad 8b 3b a9 aa 64 58 99 87 2a 78 29 22 8c 82 b7 bb 17 8d 86 91 b8 f5 c6 79 91 66 f9 b2 e9 cb e8 27 a9 e5 e7 79 9b b9 50 11 10 32 51 e9 2c f2 94 50 a4 a3 d9 af 63 a4 e2 9f 20 af 97 35 ae ad cf 97 2d a7 39 fd 2c 94 11 51 53 e6 14 ad 3b c9 52 f0 40 b2 53 c6 26 60 7d dd e2 d6 46 a6 bb c6 54 6e 71 97 4f c4 1c 37 11 cb 8e 4f ff 00 88 72 d8 e4 93 dc ab 32 f3 ce 8f 77 bd b9 b0 c5 50 3a 5e cd c9 95 56 48 64 04 0b 58 1c 4b 4f 99 55 e6 3f 6e e7 7e e5 96 55 41 01 5c 9b 2a Data Ascii: &V>keE\JSR]M.jYI#4t4J: )j\|;$jRr?~rW;dXx)"yf'yP2Q,Pc 5-9,QS;R@S&`}FTnqO7Or2wP:^VHdXKOU?n~UA\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	50434	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:22 UTC	929	OUT	GET /xxrz/250x400/793/ff/7a/ff7a6b879952c69e1114457a4e47d156/ff7a6b879952c69e1114457a4e47d156.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:23 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:23 GMT Content-Type: image/jpeg Content-Length: 72591 Connection: close Last-Modified: Thu, 25 Apr 2024 08:17:10 GMT Vary: Accept-Encoding ETag: W/"662a1186-d771" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1327 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bXLDZllMcM2CZFXKO5o4mMB1DVl2qkC4PAXWdr7JxB%2FCaylJzn0PbqG1%2BPJyQCg4zDum3yU3f1yH9YuVNErZz9C0X3u0Wdsa6BQmwpEOofaB2Adhv6iy8hkhPi3EIiA6ddb7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a92efc5e67ce-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:23 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 02 02 02 03 01 01 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: b1 7e af 0f 01 dd c4 8a 8b 1d ac a9 d8 f8 cc 07 12 18 ba 0d 87 31 7d 1f 77 24 6a 2f 65 ea 0b 1a 95 ea f9 c2 2d a5 55 de 97 1e 7a ce d6 97 d9 a9 6b 35 43 b3 fc ce 70 26 f7 c2 ea 45 d0 6c fb 7d 15 3b 05 8b 3e 8f 4c dc 76 6a 81 3f 71 0c da ef 7f 17 c0 22 d0 8e 8d 31 45 bc 0b 3c 50 cc 64 12 02 7c a3 9b ef ce c1 21 09 19 fe 96 12 da 94 64 01 9b 70 0a bc f3 86 a0 89 66 24 5e 50 0c b8 52 2f 65 5c c4 9a f0 a2 9b f4 96 13 0d 56 94 ae cf b9 43 54 5d 95 09 92 1c 49 5b b0 13 48 3a dd ed d4 bb 1c 27 4d af ac 6a cf 35 80 3d 6f 8e ce 90 d8 29 6c 32 88 13 85 24 a0 fc 2e 85 fb 81 c6 fe 39 c6 5d b4 51 f6 6d 78 f5 76 27 ca ae d5 6c 34 fb 9a fb e1 d7 02 54 4c 51 cd d4 53 22 64 0c bf 65 a9 df c3 9e 15 62 95 18 59 b9 be af a0 e6 5c 69 19 8e c2 4d 2a 6d 89 21 62 74 99 63 63 81 Data Ascii: ~1}w$j/e-Uzk5Cp&El};>Lvj?q"1E<Pd\|!dpf$^PR/e\VCT]I[H:'Mj5=o)l2$.9]Qmxv'l4TLQS"debY\iM*m!btcc
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 3a 1d 74 da 0a bd 62 43 58 a9 0b 0a b6 5f 1b 6a 9e 29 cd 97 ea a7 d0 59 1e 1d 16 71 53 c2 5b 37 2f f9 eb 43 63 f4 ca d7 e3 d9 be ca eb dd 99 cc d8 6d d7 4c 19 ac 97 6b c1 d2 01 44 78 0a cc 10 10 e4 b0 0d 80 24 8f a5 3a 19 70 b0 98 22 04 b0 a2 9b c5 09 ac 8f 9d 90 0e 2e 0b b2 e2 cf 55 0a cd f6 3a 46 d7 45 fd 9a 19 38 ea b2 d6 df 44 3c f4 d6 26 cd 2d e4 68 81 17 c0 43 29 46 5a 8f d1 e5 b4 83 93 43 aa 96 ea 0a 20 29 dd b1 0a 15 0c 45 63 33 f6 41 01 24 92 11 32 89 a2 4a 9c fd e9 bf b2 7e 28 e3 4e 68 5f 77 89 f1 8c 61 5d 92 d9 c5 48 28 33 e1 1d da 1b cc 36 78 d1 97 17 48 30 d7 66 3a 73 06 71 bc b2 ab 68 44 24 69 28 f6 df 4c dd 45 0a d0 c3 99 67 11 0a e7 63 4c ae 5e 49 52 40 73 52 46 49 69 93 8b 0b ba db c2 49 11 ab b1 9c 9a ff 00 6c 8b fe 21 44 ce 2f 91 a5 13 Data Ascii: :tbCX_j)YqS[7/CcmLkDx$:p".U:FE8D<&-hC)FZC )Ec3A$2J~(Nh_wa]H(36xH0f:sqhD$i(LEgcL^IR@sRFIiIl!D/
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 78 27 19 02 10 e9 ef 83 5c 63 0c 63 b7 9c f3 83 30 59 33 94 dd d4 a6 b7 ba 1f 4e 66 77 9a b9 ac d2 f2 62 61 dd 7b 7d c5 8d e5 ad 4d 73 ed 34 ea 30 2b ee 6d 6a 15 b8 df 72 4d a2 59 ce 39 71 a5 f6 f7 7b 69 e3 b6 b9 1d 3c 5d 7b c4 9d 86 96 a7 a6 77 fb 55 20 7d e6 3a d1 ed 5c 20 9a a5 9e a1 79 b0 db 45 ba dd a3 af b7 c6 5e 77 88 9b 7e b0 8b df ca 1a 2e 98 8f 19 d9 78 bf 23 90 cf 04 b9 e8 4a b8 78 9b 82 e1 bb 5f ec 83 57 20 cf 19 d7 35 48 f6 a9 95 7f 85 ca 50 e0 74 78 62 ab b6 cb 35 1a 29 01 8a c8 4e 10 f8 82 f0 59 63 4d 0d b3 20 94 a0 14 98 20 1f 28 68 c8 66 c2 d0 a4 a7 6b 5c 02 77 a9 f1 7f 61 ef 90 86 33 20 71 51 92 1d b3 d5 9e b8 39 e9 e3 23 22 71 4f 95 e3 ae 9b b3 67 ab a1 5e db ab 58 a8 fa 75 66 c1 d7 05 24 1b 61 79 66 5a f5 1a a3 be a9 69 fb 47 64 44 66 Data Ascii: x'\cc0Y3Nfwba{}Ms40+mjrMY9q{i<]{wU }:\ yE^w~.x#Jx_W 5HPtxb5)NYcM (hfk\wa3 qQ9#"qOg^Xuf$ayfZiGdDf
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: f0 76 97 0e e3 6f f9 23 53 a5 db db b9 c7 37 d3 75 da 0e 1d 43 7d f2 3a b6 76 77 5c b3 6b ac ab c8 79 85 70 d5 ee 2e 13 a1 da 97 4a 42 9d 45 af 8f ee dd 4b 6d a0 e6 3b 3d f5 0a 3c c2 a9 a3 91 f2 7d 8d 85 72 0d ed bb 9a dd 23 e2 77 1c ea ed b6 de ad a0 d0 7d 1d 6d d8 fb 93 a9 3b c7 76 c3 ab 39 36 47 d6 bd a3 c0 fd 76 23 25 f2 47 57 a1 4d 76 0a ec a5 df 4e cf 3f 0b c5 c6 fe 2a 69 37 8b ec 78 5d 1d 7d 2e 13 cc 79 2e d9 97 f7 7c c3 8f 33 7f c7 f8 6f 3d ba ee 13 c9 38 c6 04 58 db d7 a9 a4 e5 5a 4d 96 b6 6b 71 4d 0e aa a6 fb 94 3f 6b 2b d7 72 bd 97 32 d5 ec e9 6d 76 77 5f 67 eb 3e f5 ed 0c eb b4 55 11 cc d7 10 eb 2f 6c 6c dd 61 9c 78 01 f5 36 65 aa 2e 41 67 60 8b fa a9 e1 f5 95 6c c6 8b 2b 85 ca ce 62 e6 bf 45 d3 a8 61 64 6a 1f 5f b3 1e 50 e2 e8 70 e7 c6 93 4b Data Ascii: vo#S7uC}:vw\kyp.JBEKm;=<}r#w}m;v96Gv#%GWMvN?*i7x]}.y.\|3o=8XZMkqM?k+r2mvw_g>U/llax6e.Ag`l+bEadj_PpK
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 8e d9 1d 71 80 b6 c7 3c db e9 d9 aa e2 5b 8d 6f e1 b7 2b a7 6d d3 47 47 61 8f e2 de 46 ce 86 f5 78 94 14 67 89 fe 82 d6 06 05 d7 31 67 39 f1 c5 f4 d5 cb 95 d2 5a 8e 50 f1 8a 2c 39 f1 a5 3e 97 bb e4 b6 30 9e 39 66 e8 a5 6c da d9 2c 2f 6b 67 ff 00 cf 13 be c0 42 64 eb 2a fb 6d 00 1d 8e 57 de 58 31 1f 71 e3 2c bc 9f 0f be 89 2d 87 1a d6 3a c1 e8 aa f5 bd c7 89 d0 de 3f 5e 82 c6 ab 7a 2e 95 d8 cb 7a 51 f2 ee 2e b3 c7 f1 26 0e 37 8d df 0c 2d 55 d5 49 d6 78 e7 1b bd 15 f1 fb 05 a2 9e fa c4 8d 52 3f d5 76 4a db f9 17 c6 7e 52 c7 99 da 33 0e f1 33 25 e5 38 3e 70 7f ea e3 37 42 8b e3 73 de 13 61 c2 e9 b7 33 31 b7 59 4d 8d bb cc c2 1a c8 14 57 81 6f 53 ce ab 06 7b eb 1e 3d 7d 85 1a e0 91 9d 78 61 d7 52 cf ea 76 c2 d6 93 31 ba 95 61 e9 7c e3 f4 5f bb 3c 68 86 5a ab Data Ascii: q<[o+mGGaFxg1g9ZP,9>09fl,/kgBd*mWX1q,-:?^z.zQ.&7-UIxR?vJ~R33%8>p7Bsa31YMWoS{=}xaRv1a\|_<hZ
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 69 f8 3a 3b a0 6d 6d 8d c0 e7 7e 60 fc f1 2e 4a 95 69 76 63 11 db 48 1c b9 0b f3 de f6 e6 6f d7 14 14 89 47 07 09 45 bb c4 b5 f7 24 f8 93 d7 ec a8 8d 64 8f bc 2e 06 f8 79 50 1d 93 e9 f2 c1 80 6b 0c 17 49 e6 4f a5 b1 3f 04 28 13 35 81 3b 73 17 f1 e5 f2 c5 42 22 dd a1 90 3a df e1 22 cc 2f e3 e5 83 de 38 e1 f8 e3 85 e1 8a 7a 02 fc ec 30 29 69 e1 02 f6 04 78 2d f0 91 45 3a 92 b6 52 3f 11 d3 6e 9f 4c 47 0d 5a c8 ad c7 53 1e d7 4b 77 6d e2 a4 74 f9 60 1b e0 1b fd 80 5f 15 41 da 16 11 fc 46 df bc 61 72 dd b9 b6 ae 6c 75 5b 73 63 f9 63 57 96 2b 93 8b 4e c0 7c 4b de 1f c7 ec d3 ab a6 12 16 66 03 10 d1 c6 b6 67 23 d0 9c 6a 8a 31 b5 be 58 a8 61 2f 74 1d bc 47 cb 14 b4 a9 0c 64 02 cd af e2 d5 e3 81 b0 03 c3 1c b0 0d fe de 78 9a 54 8c 81 70 0d bf 97 d8 50 11 63 d4 5b Data Ascii: i:;mm~`.JivcHoGE$d.yPkIO?(5;sB":"/8z0)ix-E:R?nLGZSKwmt`_AFarlu[sccW+N\|Kfg#j1Xa/tGdxTpPc[
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 62 31 5f d8 8a ea ca 88 f2 6a 91 4f 97 68 68 c5 6e 67 3c 90 0a 08 a1 64 32 0a a8 aa 35 05 99 08 0a 63 3a 82 be ad 98 0d 44 66 99 7a 50 66 15 b4 51 56 c3 5d 15 25 4c b0 47 5d 48 6f 4d 56 91 bd 96 78 4f 33 1c 80 06 5b f4 38 40 46 0d c6 f6 24 6d 72 3a 5c db 14 d4 53 d4 02 ea b6 43 f0 b1 fc 56 f0 b7 4b ed 7f 11 82 0c 7a e2 73 de 8c db fc bc ad 6c 2f c7 d6 de 5e 16 04 60 43 48 55 49 ee dc 78 81 7d fc 08 c4 b4 c8 f1 0e 42 dc b6 ea 3a e3 80 ba 0a 71 19 36 d4 96 5d b5 15 17 be fc ad d4 03 8c 83 2c a3 ac cd fd da aa 29 a7 09 41 51 54 12 39 04 2f 24 b0 46 26 01 59 83 58 15 0d cc 6f f2 c3 52 64 39 da ce 94 d1 e6 94 a6 9e 28 d9 23 32 53 d4 2c 50 c3 bc ec da da 39 27 b1 23 65 50 45 c9 c5 07 67 69 aa 4c be e7 59 4f 5f f7 6a 0c 17 6a 5a 85 62 c3 86 aa 26 5b 29 2a 08 16 Data Ascii: b1_jOhhng<d25c:DfzPfQV]%LG]HoMVxO3[8@F$mr:\SCVKzsl/^`CHUIx}B:q6],)AQT9/$F&YXoRd9(#2S,P9'#ePEgiLYO_jjZb&[)*
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 32 a8 66 ac a5 8e 3a 9a 72 aa a0 c2 ea ee a1 3e 2e ef 5d ef 72 a5 86 33 33 0c 50 49 ef b1 de 08 ad aa 39 4a f7 0e a5 d6 eb ac 8b 11 cf 6e f7 86 29 73 7e cc e5 79 f7 e9 4a 4f 7f 99 e1 8c a0 8a 8e 19 5d 64 67 1f 09 33 f0 d0 0d f9 86 20 e3 26 cf 29 73 cc b6 2c c6 8c 49 1c 72 33 44 63 9d 38 73 47 2c 67 4c 88 eb 72 2e 36 b1 52 54 82 2c 70 f5 0e 8d a4 be 9f 03 b1 b8 db c0 ed 8a 7c f6 9a 3a aa 79 e6 a7 0c 91 4b 1b 1b 59 83 68 60 48 db a5 b9 8c 56 e6 b2 56 e6 06 ba 49 19 3e f7 55 22 c4 ef 12 d2 c6 ad aa 21 4e 13 fe 11 53 df d6 3b cc e4 b1 df 1d 91 a9 ac ce 7b 7d 92 e6 35 93 9a 8a 86 ce 32 56 96 52 00 33 b5 21 a6 d3 2c 96 b0 32 15 84 19 1b f1 36 a7 3b 9c 47 3c 2b 22 cc 23 8c 4a 09 60 ca ba 6c 49 b9 3d de 67 cc ef 88 f3 39 4d b5 49 ab d7 7f 0f 2c 7e 90 73 ff 00 b7 Data Ascii: 2f:r>.]r33PI9Jn)s~yJO]dg3 &)s,Ir3Dc8sG,gLr.6RT,p\|:yKYh`HVVI>U"!NS;{}52VR3!,26;G<+"#J`lI=g9MI,~s
2024-04-26 18:33:23 UTC	1369	IN	Data Raw: 75 2d ab 4c 33 cb 12 96 36 bd c2 b0 07 d7 9e 17 b4 bd a0 41 61 99 d7 7f d7 33 38 e9 fa fa b1 3e 69 98 55 12 d5 15 32 3b 90 01 7e e8 72 00 ea ca a0 9f 2f 5c 66 14 26 b4 43 a5 b7 86 40 ef ab f5 2e 2f 6c 52 51 98 16 55 a7 45 55 2c 1c 85 3d ed 5a 50 13 b1 bd 98 28 db 6d f0 27 8e 4f 89 d5 59 74 86 d7 7f a0 be a3 b7 ae 35 77 6c 15 07 a6 d6 e5 d4 9c 28 2c 6d f1 1f 0b 5c fc b0 88 75 00 4b 23 7e ad ac d6 e9 cc 62 59 02 ed ab 89 6e 41 b9 03 f2 b6 04 f2 0e bf 4d b1 ef 44 8b 12 41 f1 5e 5f 4e 43 02 a6 50 6e 8e d7 e9 8f 79 a9 00 16 53 a4 0b 9d 5b 78 72 df 0b 58 5b a7 e7 8f 79 4d bd 07 f0 c4 86 39 47 2b 37 eb 7d 3a 72 fa f9 e1 04 5f 8b 9d ad 7c 4b 4a 0a 16 89 da f6 36 5e eb ea 36 d8 1d 5c b1 18 7e 1a 89 a9 9f 5f 22 ea 3b 80 6d 6e 4c c7 04 7b a8 69 7e 25 65 01 82 8d 47 Data Ascii: u-L36Aa38>iU2;~r/\f&C@./lRQUEU,=ZP(m'OYt5wl(,m\uK#~bYnAMDA^_NCPnyS[xrX[yM9G+7}:r_\|KJ6^6\~_";mnL{i~%eG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	50436	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:22 UTC	906	OUT	GET /ajax/banners?page= HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/tv-show Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"3c-DFz73KHXVYZHM3DcVRSxkH+OTqg"
2024-04-26 18:33:23 UTC	908	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:33:23 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"3c-DFz73KHXVYZHM3DcVRSxkH+OTqg" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=unBihc%2BlhuIswfsV8l0boh4yaw3vFsuRKnhnkTaY8ceo%2FHRzsSSWXL7oHsi04zfvOejgZtjTbyqnfM2Pu%2F3QuF0HZWS5EhcHKMZZz4BhwAd0Zopwqf1kAZYkAUZPG6g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a92f1f2adb25-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	50435	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:22 UTC	903	OUT	GET /ajax/banner/vpn HTTP/1.1 Host: 1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/tv-show Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: prefetchAd_4724866=true; fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice If-None-Match: W/"10-UiecVLFvCojUPVe0y7mBPqPMOas"
2024-04-26 18:33:23 UTC	908	IN	HTTP/1.1 304 Not Modified Date: Fri, 26 Apr 2024 18:33:23 GMT Connection: close X-DNS-Prefetch-Control: on Expect-CT: max-age=0 Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 0 X-XSS-Protection: 1; mode=block Content-Language: en ETag: W/"10-UiecVLFvCojUPVe0y7mBPqPMOas" X-Frame-Options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7sI7tw73E1Pfa%2Frr8TUopAV8BPOvbdkUc2e6LXtkmi4S%2FJNAcKx20WenyunBYrG7zs4oGMxRUWUC23Y9C25lbOPYvQrI8THqkHSLGRVypIaq%2BfZrdiTrfjwEN481duU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a92f1c96495c-MIA alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	50428	192.178.50.68	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:22 UTC	939	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3&co=aHR0cHM6Ly8xbW92aWVzaGQuY2M6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=yt1utwy5xg8e HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:23 UTC	845	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Security-Policy: script-src 'report-sample' 'nonce--YiJsk0FUDOkBxfpcfuGxw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Date: Fri, 26 Apr 2024 18:33:23 GMT Expires: Fri, 26 Apr 2024 18:33:23 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 18:33:23 UTC	410	IN	Data Raw: 31 63 36 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 Data Ascii: 1c6d<!DOCTYPE HTML><html dir="ltr"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><style type="text/css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-st
2024-04-26 18:33:23 UTC	1255	IN	Data Raw: 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 Data Ascii: U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unic
2024-04-26 18:33:23 UTC	1255	IN	Data Raw: 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 Data Ascii: ; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720
2024-04-26 18:33:23 UTC	1255	IN	Data Raw: 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 Data Ascii: t-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500
2024-04-26 18:33:23 UTC	1255	IN	Data Raw: 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c Data Ascii: (//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212,
2024-04-26 18:33:23 UTC	1255	IN	Data Raw: 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 Data Ascii: -range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.wof
2024-04-26 18:33:23 UTC	600	IN	Data Raw: 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 2d 59 69 4a 73 6b 30 46 55 44 4f 6b 42 78 66 70 63 66 75 47 78 77 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 73 63 72 69 70 Data Ascii: ecaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js" nonce="-YiJsk0FUDOkBxfpcfuGxw"> </script></head><body><scrip
2024-04-26 18:33:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	50441	15.197.193.217	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:24 UTC	762	OUT	GET /track/cmf/generic?ttd_pid=liveramp&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUYASABKAIyCwjA_c_DworzPBAFOAFaB21zc20xMTVgAg..
2024-04-26 18:33:24 UTC	583	IN	HTTP/1.1 302 Found Date: Fri, 26 Apr 2024 18:33:24 GMT Content-Length: 199 Connection: close server: Kestrel location: https://idsync.rlcdn.com/362588.gif?partner_uid=6f67744e-1091-4048-adba-e024cc18f2d2 set-cookie: TDID=6f67744e-1091-4048-adba-e024cc18f2d2; expires=Sat, 26 Apr 2025 18:33:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKbGl2ZWludGVudBILCOjp99epivM8EAUSFwoIbGl2ZXJhbXASCwjO4-e6rIrzPBAFGAEgASgCMgsIktrq58KK8zwQBTgBWghsaXZlcmFtcGAC; expires=Sat, 26 Apr 2025 18:33:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-04-26 18:33:24 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 33 36 32 35 38 38 2e 67 69 66 3f 70 61 72 74 6e 65 72 5f 75 69 64 3d 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 22 3e 68 74 74 70 73 3a 2f 2f 69 64 73 79 6e 63 2e 72 6c 63 64 6e 2e 63 6f 6d 2f 33 36 32 35 38 38 2e 67 69 66 3f 70 61 72 74 6e 65 72 5f 75 69 64 3d 36 66 36 37 37 34 34 65 2d 31 30 39 31 2d 34 30 34 38 2d 61 64 62 61 2d 65 30 32 34 63 63 31 38 66 32 64 32 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://idsync.rlcdn.com/362588.gif?partner_uid=6f67744e-1091-4048-adba-e024cc18f2d2">https://idsync.rlcdn.com/362588.gif?partner_uid=6f67744e-1091-4048-adba-e024cc18f2d2</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	50448	142.250.217.164	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:24 UTC	816	OUT	GET /pagead/1p-user-list/973564320/?value=0&guid=ON&script=0&is_vtc=1&cid=CAQSKQB7FLtqIWCupQ6QASUYyB_NACOq4h5nr3ioKoYhveSeygxEL9dBWXwl&random=3696428706 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.fndsda.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:24 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 18:33:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 18:33:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	50437	3.16.63.45	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:24 UTC	1580	OUT	GET /pview?event=pview&hostname=1movieshd.cc&location=%2Ftv-show&product=inline-share-buttons&url=https%3A%2F%2F1movieshd.cc%2Ftv-show&source=platform&fcmp=false&fcmpv2=false&has_segmentio=false&title=%231Movies%20%7C%20Watch%20Free%20Streaming%20Movies%20and%20TV%20Series%20Online&cms=unknown&publisher=6433be364f61b7001240a339&sop=true&version=st_sop.js&lang=en&fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA&description=1Movies%20Watch%20Movies%20online%20for%20free%2C%20Streaming%20movies%20on%201Movies.to.%201Movies%20is%20the%20biggest%20website%20for%20free%20movies.&ua=%22Google%20Chrome%22%3Bv%3D%22117%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%20%22Chromium%22%3Bv%3D%22117%22&ua_mobile=false&ua_platform=Windows&ua_full_version_list=%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%20%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%20%22Chromium%22%3Bv%3D%22117.0.5938.132%22&ua_platform_version=10.0.0&uuid=d37272a6-b8a6-4058-9911-5c29ddcb2ebe HTTP/1.1 Host: l.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZGkACWYr8zMAAAAIA98YAw==; __stidv=2
2024-04-26 18:33:24 UTC	512	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Expose-Headers: stid Access-Control-Max-Age: 1728000 Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain; charset=utf-8 Date: Fri, 26 Apr 2024 18:33:24 GMT Stid: ZGkACWYr8zMAAAAIA98YAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 67 Connection: Close
2024-04-26 18:33:24 UTC	67	IN	Data Raw: 7b 22 6c 6f 74 61 6d 65 22 3a 22 74 72 75 65 22 2c 22 73 74 61 74 75 73 22 3a 22 74 72 75 65 22 2c 22 73 74 69 64 22 3a 22 5a 47 6b 41 43 57 59 72 38 7a 4d 41 41 41 41 49 41 39 38 59 41 77 3d 3d 22 7d Data Ascii: {"lotame":"true","status":"true","stid":"ZGkACWYr8zMAAAAIA98YAw=="}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	50445	35.169.4.189	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:24 UTC	1171	OUT	GET /map/ttd/6f67744e-1091-4048-adba-e024cc18f2d2?ttd_puid=&gdpr=0&gdpr_consent= HTTP/1.1 Host: map.go.affec.tv Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: oo=1; ck=662bf34d3757330001701a4b; oo=1; pt=eyJhbiI6eyJkdCI6MTcxNDE1NjM3MCwiaWQiOiI2NTc2Nzg3Mjg3MDEzNDUyMzI1IiwibHMiOjE3MTQxNTYzOTh9LCJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM4N30sInRkIjp7ImR0IjoxNzE0MTU2MzczLCJpZCI6IjZmNjc3NDRlLTEwOTEtNDA0OC1hZGJhLWUwMjRjYzE4ZjJkMiIsImxzIjoxNzE0MTU2MzczfSwiaW0iOnsiZHQiOjE3MTQxNTYzNjgsImlkIjoiZDVmNjQ2YTEtM2E5MC00NTg1LTgxYTAtNjkzY2E0YTA2ZmMwIiwibHMiOjE3MTQxNTYzOTN9LCJ2IjowfQ==\|1714156398\|dd68927afe22bfdbd297f91a3d79a13ee1362086
2024-04-26 18:33:24 UTC	855	IN	HTTP/1.1 204 No Content Date: Fri, 26 Apr 2024 18:33:24 GMT Content-Type: text/html Connection: close Set-Cookie: ck=662bf34d3757330001701a4b; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:33:24 GMT; Secure; SameSite=None Set-Cookie: oo=1; Secure; SameSite=None Set-Cookie: pt=eyJhbiI6eyJkdCI6MTcxNDE1NjM3MCwiaWQiOiI2NTc2Nzg3Mjg3MDEzNDUyMzI1IiwibHMiOjE3MTQxNTYzOTh9LCJzdCI6eyJkdCI6MTcxNDE1NjM2NSwiaWQiOiJaR2tBQ1dZcjh6TUFBQUFJQTk4WUF3PT0iLCJscyI6MTcxNDE1NjM4N30sInRkIjp7ImR0IjoxNzE0MTU2MzczLCJpZCI6IjZmNjc3NDRlLTEwOTEtNDA0OC1hZGJhLWUwMjRjYzE4ZjJkMiIsImxzIjoxNzE0MTU2NDA0fSwiaW0iOnsiZHQiOjE3MTQxNTYzNjgsImlkIjoiZDVmNjQ2YTEtM2E5MC00NTg1LTgxYTAtNjkzY2E0YTA2ZmMwIiwibHMiOjE3MTQxNTYzOTN9LCJ2IjowfQ==\|1714156404\|2d52401b7b75bb2c8a975c128433600caefc69af; Path=/; Domain=go.affec.tv; Expires=Sat, 26 Apr 2025 18:33:24 GMT; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	50442	68.67.160.75	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:24 UTC	854	OUT	GET /getuid?https%3A%2F%2Fidsync.rlcdn.com%2F52154.gif%3Fserved_by%3Devergreen%26partner_uid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=-lBTO87oE1q2j5ZgQrZoc7orAwxvjOJuHVqHh1IudHjfYH1iAps-CU7yEFaCrGbChgtgds1o0wDPMQKlmeD3MbgxClGbwDhR2tcv_pRCcWc.; receive-cookie-deprecation=1; uuid2=6576787287013452325
2024-04-26 18:33:24 UTC	1457	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 26 Apr 2024 18:33:24 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://idsync.rlcdn.com/52154.gif?served_by=evergreen&partner_uid=6576787287013452325 AN-X-Request-Uuid: 2cc65d31-e8c1-479e-8e9a-105851245606 Set-Cookie: XANDR_PANID=-lBTO87oE1q2j5ZgQrZoc7orAwxvjOJuHVqHh1IudHjfYH1iAps-CU7yEFaCrGbChgtgds1o0wDPMQKlmeD3MbgxClGbwDhR2tcv_pRCcWc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:33:24 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 14-Apr-2034 18:33:24 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=6576787287013452325; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 25-Jul-2024 18:33:24 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.129.152.220; 102.129.152.220; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	50440	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:24 UTC	855	OUT	OPTIONS /500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=5&pl=https%3A%2F%2F1movieshd.cc%2Fmovie&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://1movieshd.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:24 UTC	737	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 26 Apr 2024 18:33:24 GMT Content-Length: 0 Connection: close Allow: GET, OPTIONS Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace Access-Control-Allow-Credentials: true Access-Control-Max-Age: 600 Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	50444	8.28.7.81	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:24 UTC	766	OUT	GET /AdServer/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fsync.sharethis.com%2Fpubmatic%3Fuid%3D%23PM_USER_ID%26gdpr%3DPM_GDPR%26gdpr_consent%3DPM_CONSENT&rdf=1 HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KTPCACOOKIE=YES
2024-04-26 18:33:24 UTC	506	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://sync.sharethis.com/pubmatic?uid=6031F3D2-0171-4C2F-9EE4-A5251D011B1F&gdpr=0&gdpr_consent= P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=6031F3D2-0171-4C2F-9EE4-A5251D011B1F; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Date: Fri, 26 Apr 2024 18:33:23 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	50449	52.46.143.56	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:24 UTC	720	OUT	GET /dcm?pid=1f9f6bba-5ede-4cb5-997f-f0d0b894f672&id=1463afc0165279ba4b9955bf9076da3f87f74e0a26198643796f9993ca29256fc0cb235b3774c97e&cb=07636551 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:24 UTC	839	IN	HTTP/1.1 302 Found Server: Server Date: Fri, 26 Apr 2024 18:33:24 GMT Content-Length: 0 Connection: close x-amz-rid: BJ84B1TJX66P8VBEHP58 Set-Cookie: ad-id=A17qm6D07klYrm02tRP8JQQ\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 18:33:24 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=1f9f6bba-5ede-4cb5-997f-f0d0b894f672&id=1463afc0165279ba4b9955bf9076da3f87f74e0a26198643796f9993ca29256fc0cb235b3774c97e&cb=07636551&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	50450	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:24 UTC	596	OUT	GET /117405/Resources/dist/Resources/js/public-path.js HTTP/1.1 Host: cdn-app.plus500.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.plus500.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.plus500.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 18:33:24 UTC	545	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 814841 Alt-Svc: clear Cache-Control: public, no-transform,max-age=2419200 Content-Type: application/javascript Date: Fri, 26 Apr 2024 18:33:24 GMT Etag: "5589c069c90da1:0" Last-Modified: Wed, 17 Apr 2024 07:51:16 GMT Server: ECAcc (mic/9B51) Strict-Transport-Security: max-age=31536000 Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Content-Length: 611 Connection: close
2024-04-26 18:33:24 UTC	611	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 7d 3b 74 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 7d 7d 28 29 2c 28 28 29 3d 3e 7b 76 61 72 20 72 3b 74 2e 67 2e 69 6d 70 6f 72 74 53 63 72 69 70 74 73 26 26 28 72 3d 74 2e 67 2e 6c 6f 63 61 74 69 6f 6e 2b 22 22 29 3b 76 61 72 20 65 3d 74 2e 67 2e 64 Data Ascii: (()=>{"use strict";var t={};t.g=function(){if(typeof globalThis=="object")return globalThis;try{return this\|\|new Function("return this")()}catch(r){if(typeof window=="object")return window}}(),(()=>{var r;t.g.importScripts&&(r=t.g.location+"");var e=t.g.d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	50446	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:24 UTC	977	OUT	GET /500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=6&pl=https%3A%2F%2F1movieshd.cc%2Fhome&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072
2024-04-26 18:33:24 UTC	815	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 26 Apr 2024 18:33:24 GMT Connection: close X-Trace-Id: 433c056d96cf7d29c91a54a432c9cfb1 Pragma: no-cache Timing-Allow-Origin: * Expires: Tue, 11 Jan 1994 10:00:00 GMT Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Vary: Origin Access-Control-Allow-Origin: https://1movieshd.cc Access-Control-Expose-Headers: Link Access-Control-Allow-Credentials: true Accept-Ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model Set-Cookie: OAID=k3oa752910bk686846683x2y8sbun072; expires=Sat, 26 Apr 2025 18:33:24 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=1 X-Content-Type-Options: nosniff Timing-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	50443	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:24 UTC	804	OUT	GET /712087.gif?cparams=197059634fe141449898fb53dec95bfd-09a6f58797e240ca8edf44d5cf3ca14a-2-269-api5137 HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=9kazB0DCz2iOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCJi7KxAa
2024-04-26 18:33:24 UTC	824	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://ecf.d41.co/sync/3?RampID=Xc6491Vm-1pzA1iTVLXhV9SS2mgbcdWTy-hA8Ju5KWnd-fmds&197059634fe141449898fb53dec95bfd-09a6f58797e240ca8edf44d5cf3ca14a-2-269-api5137 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=rbkN8csueWKOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; Path=/; Domain=rlcdn.com; Expires=Sat, 26 Apr 2025 18:33:24 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCJi7KxA3; Path=/; Domain=rlcdn.com; Expires=Tue, 25 Jun 2024 18:33:24 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 26 Apr 2024 18:33:24 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	50455	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:25 UTC	929	OUT	GET /xxrz/250x400/793/bb/8c/bb8c585b8fd73c084a0b62e574bcc956/bb8c585b8fd73c084a0b62e574bcc956.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:25 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:25 GMT Content-Type: image/jpeg Content-Length: 35741 Connection: close Last-Modified: Thu, 25 Apr 2024 02:35:40 GMT Vary: Accept-Encoding ETag: W/"6629c17c-49d3" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2746 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rg8dRA6fooDo7YW89HvIly3JAJSH4d0pO1VV2x0pcOMWfyOJlLuQE8Eqg6uOTmHcbmVsIq0izrG2EV104M0y5KA8dqzAFbPXM9S3f%2BHTNdmKBH1wUK%2BoyjBhop%2Fy%2FA8D1UD1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a93dd911128b-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:25 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: 71 cd ce 30 47 66 ba 11 93 09 6e 18 b2 81 e1 9c 81 10 00 00 a2 00 44 b4 02 8d 00 14 44 a0 48 00 2e cf 77 7c 23 f6 5e 3b 93 ad b8 63 94 75 68 ab d6 8b 6b 15 e1 ae 44 9e c1 2c f3 a4 60 ca 92 69 50 00 68 03 25 00 52 01 00 50 00 69 33 04 9a 16 01 58 c0 04 f2 b3 0c 6d ec 0c 3c 49 aa 77 ba b6 b8 6a de 23 de 5e c2 78 15 6a 75 cf 48 7a f3 e7 f2 5f cb fd 5d e9 3f 00 1e 09 f7 4f 96 f3 38 77 73 52 46 5d 5c 05 28 12 45 90 10 14 40 08 28 10 b2 50 10 48 00 46 00 c0 01 e7 28 01 7d 40 08 c0 00 02 63 d2 9c 75 b1 2a bd 0c cf c9 fd 1b 6a 52 03 32 ec 40 36 30 7d 45 1b 2f 2d b0 cd 64 54 82 30 00 29 20 6a 20 04 4a 30 48 32 00 69 50 11 29 41 e7 11 80 be a0 00 00 00 00 00 00 94 45 c7 79 d7 96 bf 9e b6 d5 8a db 7c 19 a9 b6 6a 3f bf ea 39 a7 6d e5 d3 1e 73 f6 63 59 76 68 48 b5 10 Data Ascii: q0GfnDDH.w\|#^;cuhkD,`iPh%RPi3Xm<Iwj#^xjuHz_]?O8wsRF]\(E@(PHF(}@cu*jR2@60}E/-dT0) j J0H2iP)AEy\|j?9mscYvhH
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: 8d 20 6a 4a 80 24 c0 1b 1b c2 83 95 b9 0f d2 1f 3c 50 7c de f7 36 52 67 6e b1 b8 5a 65 0e f7 89 d9 e3 6b 33 89 b8 db d8 4f 27 ea d7 8b bd b5 e2 af 61 f6 3e 4e 3d 1a 76 f5 b2 4c 74 dd 6d df ea d2 2b 36 a9 b5 a3 9c 00 11 87 a3 04 03 19 66 00 03 20 00 c8 00 50 00 2b fe 2d 03 3e e8 e3 f0 08 ba ef 24 02 da 7b 6c 01 b2 97 1f 71 08 14 fa 21 90 08 bd a5 68 80 51 5d ea 00 5f bb b4 04 a9 76 b8 00 33 c0 02 34 ff 00 ff c4 00 35 10 00 00 05 03 02 04 04 04 06 02 03 01 00 00 00 00 01 02 03 04 05 00 06 11 07 10 12 13 20 21 22 30 31 36 14 16 17 32 08 15 23 33 34 35 37 41 26 27 40 43 ff da 00 08 01 01 00 01 05 02 df 3d 18 db 3b 8d 67 c9 c5 66 b3 be 2b 1d 41 be 76 cf 91 9e 9c 56 3a 02 b3 d0 1e 66 3a b3 e6 8e d9 a1 df 3b da b1 6d e6 ee 4f a0 f6 70 d0 e8 3d a1 89 dd 32 1b 7a Data Ascii: jJ$<P\|6RgnZek3O'a>N=vLtm+6f P+->${lq!hQ]_v345 !"0162#3457A&'@C=;gf+AvV:f:;mOp=2z
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: 96 4d 37 2c 4d 2a 84 e4 7a 2c 5d db 53 eb a2 84 6c ba 0f c9 75 5f 6a 7c 48 a8 73 d1 14 31 54 b0 ae 93 39 6b 75 7c c2 ee 7a fd bb 4d 1d 0e de f0 92 46 a2 26 da cb 92 b3 e5 3c 5c 5b 36 2e 44 c5 1a 4c 82 73 46 47 12 26 1a 72 20 b1 32 47 4b 8a b8 28 81 8a 65 72 c2 be 52 ee 4c c2 8c 1a e0 09 2f 2e e8 c5 44 e2 91 a1 e2 19 dc 8d 9e b2 74 cd 6b 21 bd c8 b8 c6 04 61 52 b8 e5 3f 39 97 10 a6 8b aa d9 c4 7b af 8d 66 3e 54 eb 8a 4f d2 ad 28 94 e4 9f a7 2a a9 12 bc b9 71 4c 71 58 f0 26 1e 21 ab 86 40 5e b9 21 00 b4 15 9a 45 65 90 54 2e 99 09 24 c3 50 ae 04 a3 d6 5d 77 2a 7f aa 00 ab 60 73 0e 3e 53 b5 45 c3 a3 76 00 c1 89 6b b2 e3 80 07 8d 92 93 70 e9 77 ae 69 3c 71 27 59 a4 fe f2 94 6b 86 b1 58 a0 11 28 b7 7e 60 a4 57 22 94 15 c3 47 f0 a7 6a 00 84 2f 92 f9 6e 43 44 c3 Data Ascii: M7,Mz,]Slu_j\|Hs1T9ku\|zMF&<\[6.DLsFG&r 2GK(erRL/.Dtk!aR?9{f>TO(qLqX&!@^!EeT.$P]w*`s>SEvkpwi<q'YkX(~`W"Gj/nCD
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: b7 9d a5 0c a2 47 4c 66 00 45 88 53 37 26 48 e8 bd 29 4b 3e 81 1d 46 d6 72 20 39 a0 a2 d3 37 eb a6 9e f8 ac 56 7a e4 10 2b 96 b2 50 c1 32 66 7c b5 44 e6 22 54 83 a1 5a a4 09 ce 8c 2b 5e 71 18 31 06 b1 92 16 eb 67 41 2d 6e b9 6e 43 00 90 f4 d9 fa cd ab f3 37 b8 11 a0 a2 8d 05 05 37 1f d4 e9 1e 8c d6 76 c5 5b e5 49 8d e0 e5 01 41 c2 26 11 2f 16 68 0a 06 6f 06 d8 ae 64 eb 35 22 e5 8b 26 b2 ee 1b bc 94 c5 0e cd 1a 8b a5 28 28 28 a3 dd b8 87 33 cc cd 4b b5 54 8e 1d a1 c6 08 00 67 92 00 28 d5 82 c4 cb 4c 6d ab 4a a9 c9 c5 00 66 84 28 6a 09 0e 14 5c 13 92 e0 42 8b 58 a6 d9 05 37 ff c4 00 47 11 00 02 01 02 03 03 06 08 0b 05 08 03 00 00 00 00 01 02 03 00 11 04 12 21 05 31 41 13 22 51 61 71 81 10 14 20 32 91 a1 c1 f0 06 23 30 42 52 72 82 b1 b2 d1 e1 33 62 92 a2 f1 Data Ascii: GLfES7&H)K>Fr 97Vz+P2f\|D"TZ+^q1gA-nnC77v[IA&/hod5"&(((3KTg(LmJf(j\BX7G!1A"Qaq 2#0BRr3b
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: f8 96 b6 74 de 27 8d 8e 62 a2 58 84 38 88 a4 47 3a 18 e5 85 a2 3a eb c5 81 dd bc 0a 99 d5 a4 66 ca 0d ed dd bb f2 a8 26 e4 64 2c 54 3a 91 62 bb 8f 68 6d 6c 7b aa 3d b7 84 c3 4b 77 f1 95 0a 39 a1 63 05 9c e9 a6 60 d9 7b 35 ad bd f0 aa 7d b1 85 87 02 b0 88 30 f1 36 76 e7 e6 79 5a c2 d9 b4 16 1d 5a de f4 0d c7 6d 46 4b 46 8c 77 91 e4 e1 05 95 a4 b7 40 5f 51 3f 7d 40 82 49 61 07 73 4b 18 3d 85 c5 eb 6b e2 ce 3b 6a 62 e5 f9 86 63 1a 0d e1 20 84 f2 00 2e 9f 42 00 a3 a0 39 a6 f3 8d 28 b8 6f b3 f8 ab cd 47 3c 2c 01 a2 6e 6f e0 92 24 90 59 86 ed d5 88 c1 3e 5b a6 a3 a2 db b7 75 d0 37 7c be ba 83 f6 51 fd 50 7d 3e 4c 26 d0 a7 65 eb 66 6c 8c 44 d0 f8 fb 2e 58 62 37 8c 7c e9 5c 65 37 51 d0 ab 99 bb ba eb 15 0f 27 8a 9b 93 3b e5 93 9a 7b 48 df da 49 dd c6 d4 e0 a8 d4 Data Ascii: t'bX8G::f&d,T:bhml{=Kw9c`{5}06vyZZmFKFw@_Q?}@IasK=k;jbc .B9(oG<,no$Y>[u7\|QP}>L&eflD.Xb7\|\e7Q';{HI
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: a4 9d 23 59 03 9d 5a 70 eb 3d df 49 f3 da d7 80 fc fb 52 3a b8 91 ec 89 9a be de 89 67 52 10 e6 2a bb da 38 57 45 f4 85 bc 55 db 98 75 46 46 b4 15 89 6f dd 99 b5 20 76 6c be c4 00 07 19 f2 a7 b8 12 67 85 5b c4 00 e2 34 1f f9 40 ca ab 7f 21 3e c0 09 a6 3a c5 5d 65 20 86 39 4a f8 ef f8 72 ac 0e 1a d2 66 bc a2 1e e6 8d da a0 c8 f8 ec c5 1c a5 0f 03 ea f7 40 f3 ae 92 c5 35 a0 04 8f 5b b7 ed 5f e7 5e 46 d0 99 1f 6a c1 31 7c 1e 19 8f bc d6 2d b3 1e 64 a8 3d 70 26 89 00 49 dd 4e 01 10 69 f0 a5 9e 46 e6 fb 52 7a b9 6d e5 00 08 50 57 74 f6 f2 9e 14 0c d6 2d 82 db d5 43 4f cb 75 74 a2 5c 50 2e aa ad c4 dd 71 1d 74 8d 20 ce f9 1d 95 86 c1 dc c6 df c3 5a b1 97 d2 62 1c 2f ab af a3 5d 0b 17 04 48 81 ae a0 6e a1 83 7c 3d b4 b7 a1 5b 68 a9 2a 78 2a 80 3a e0 cd 01 e9 2e Data Ascii: #YZp=IR:gR8WEUuFFo vlg[4@!>:]e 9Jrf@5[_^Fj1\|-d=p&INiFRzmPWt-COut\P.qt Zb/]Hn\|=[hx*:.
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: 85 f2 9e dc a7 66 d9 bc 0e 26 d9 15 12 f9 42 6e a3 aa a3 aa ca 53 ca 29 26 2e a8 cc 97 6c 92 23 c7 24 52 a6 63 66 4b 83 95 97 dd b9 2d f7 5a 2f c9 cb cd 57 5b 5d 1d 3c 73 d3 6d bd af b3 47 93 2b ac 6d 0d 0d 5b 45 0b 95 92 49 5b 78 62 ca 24 e9 e5 66 05 94 20 39 47 20 5c 8d 53 97 bb 1f 29 ec cd 05 68 6f 58 e6 af a0 ff 00 27 60 93 c8 ab eb 28 b3 fd 5b ca 64 f2 4a 99 29 f7 99 3e a7 36 42 fb bc db bb 9c bc 2e 78 e3 66 49 6b 67 ab db 4f 6b de d9 f6 cd 7b 5a fa 5e d7 ec c7 26 7f 9d ed 1f c8 d3 63 94 1f 72 68 ff 00 3d 7c 72 bb fa 3d b4 ff 00 35 93 1c 9b ac 26 ec fb 1e 8a 39 0f 6c b4 f1 0a 69 bf bd 85 b1 c8 4a a3 c3 ea 3e dd 6f 4d 0c 52 0f a7 69 8c 6d 7a fe 1e 45 b2 eb ea 81 ef 82 96 49 07 ce a3 1c 9b fe 69 37 e7 b5 58 d9 54 ff 00 52 e2 da 1f 54 e9 eb 67 cd 26 d0 Data Ascii: f&BnS)&.l#$RcfK-Z/W[]<smG+m[EI[xb$f 9G \S)hoX'`([dJ)>6B.xfIkgOk{Z^&crh=\|r=5&9liJ>oMRimzEIi7XTRTg&
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: 4a 95 f5 95 71 bc 32 6d 29 29 e2 8e ca 2a 19 d1 28 7c 99 73 cb 2b bb 4a 58 36 62 ec de 71 27 1f e9 fd bb ff 00 39 da 7f f9 58 6a 91 b6 36 b0 a9 78 96 07 a8 1b 52 bc 4e d0 a3 33 24 4d 37 94 6f 5a 35 66 76 54 2f 91 5d 8b 28 52 70 f0 54 6d 9d af 3c 12 a9 49 61 9f 6a 6d 09 a2 95 1b 42 92 47 25 4b 23 a9 eb 56 52 0f 66 04 f4 95 15 14 b3 a8 20 4d 4d 3c b0 4a 03 0b 30 12 42 c8 e0 30 d0 8c d6 3d 60 e3 fd 3f b7 3f e7 3b 4f ff 00 2f 0b 25 75 6d 65 6b a2 e4 47 ac aa a8 aa 74 4b 96 ca ad 51 24 85 57 31 26 cb 6e fb 9c 2c 14 db 63 6a d3 41 1d f7 70 d3 ed 2a e8 22 40 49 24 24 70 ce 88 a2 e6 f6 0a 35 24 f1 27 1f e9 fd bb ff 00 39 da 7f f9 58 5a 93 b6 36 b1 a9 48 9e 14 a8 fa a7 5f bf 58 64 60 ef 12 cd e5 1b c1 13 3a ab 34 61 b2 92 a2 e3 4c 34 6f b7 76 d3 a3 ab 23 a3 ed 7d Data Ascii: Jq2m))(\|s+JX6bq'9Xj6xRN3$M7oZ5fvT/](RpTm<IajmBG%K#VRf MM<J0B0=`??;O/%umekGtKQ$W1&n,cjAp"@I$$p5$'9XZ6H_Xd`:4aL4ov#}
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: 23 1c a4 9d 73 33 66 d6 fe c1 9d d9 51 10 16 67 62 15 55 47 16 66 24 00 07 7e 1a 97 62 c5 0d 56 53 66 ab 98 b1 8d fb 44 10 a9 46 61 d9 21 93 a5 d4 84 62 e9 59 b8 c9 ef 29 a3 11 5f 5b dd 81 d5 bc 2f 7f 4d b0 13 68 ca 6a a9 da e1 8c 8a 37 f0 b7 bd 60 eb 6c c8 78 3a b0 36 be 61 62 19 4e fa 06 cc b7 ca 7b 55 ac 0e 56 1e f4 8b f0 fd 1f 69 47 a6 60 cf 97 20 17 2c 48 f3 47 ca 41 22 9f 95 87 8f 26 46 5b 45 97 4b dc 00 24 26 dc 4e 6b f8 0c 00 a4 06 04 be 6b e9 99 0f 0b 75 86 b6 52 7e 0e 61 d7 87 79 64 66 39 63 5d eb 0e 32 a5 3e ec b2 a8 b7 9a fb 9c a1 48 25 ad af 66 cd a1 88 cf 2c bb 46 64 15 05 a7 89 29 23 a4 a7 ab 78 cf b5 a8 89 99 aa 37 0a 24 3b de 94 4c 59 c1 29 84 a3 cb 4e 9f 52 e3 81 a4 60 23 46 15 75 01 67 aa 82 29 22 dc e7 b4 72 25 a3 58 a5 8c 4c 84 87 57 Data Ascii: #s3fQgbUGf$~bVSfDFa!bY)_[/Mhj7`lx:6abN{UViG` ,HGA"&F[EK$&NkkuR~aydf9c]2>H%f,Fd)#x7$;LY)NR`#Fug)"r%XLW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	50452	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:25 UTC	929	OUT	GET /xxrz/250x400/793/4f/3c/4f3c9aad757c2739ab58ce4608002157/4f3c9aad757c2739ab58ce4608002157.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:25 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:25 GMT Content-Type: image/jpeg Content-Length: 44392 Connection: close Last-Modified: Thu, 25 Apr 2024 03:05:14 GMT Vary: Accept-Encoding ETag: W/"6629c86a-774d" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2746 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MsO83CpiMpJnfuZad4Og3NZYXJ71CTTGdmZPF%2FADFWvTYytfooK6vQG4rn3a21scgeo%2BCTMoYmgJ7Bse%2F0KrH4yd9IYPod%2FQ1cKCoeVK0R0DGGQgLGCdrAeRmMP08H7qTNvf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a93ddb4a3353-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:25 UTC	647	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: bf 3a a6 bc e6 d0 98 93 8b a3 13 8c e2 f4 c6 86 16 00 00 00 0d c3 40 60 0b ad ed 95 fb 9f d0 92 75 6f 34 5e 88 72 0e b7 87 b7 d5 b7 c5 86 ae e4 ce da ab 8e fa 6b 92 98 72 e4 05 6a 1e 87 24 ba eb a7 b9 fa 1b 67 d1 7d 3b ce d3 6a 80 c2 9e 36 73 99 35 72 45 21 1a 28 cd 65 b8 a7 85 d6 88 ce 15 27 02 c6 fb 06 a0 dc 81 20 dc 05 d6 fc c4 fd cf e8 4b 7a 23 9e 64 68 7b 6d e9 ec d4 64 9e b6 e1 1b 1b ce 65 b6 2b cf 72 c1 62 b7 c7 55 d6 76 a7 2a 5e cd 5d 14 e5 d0 7c cd 7d 72 7b 73 b6 b9 9e b7 46 3c b3 3c c8 4b 57 28 24 b0 9b 57 06 a6 cd aa a4 a1 a0 28 c9 2b e2 53 ea 61 51 1a 6a 60 92 e9 7d 61 7e c1 d0 97 f7 cf 01 7b 33 99 de 81 72 2d d9 5d c3 3c ec a4 3b 47 94 d5 b6 05 62 b5 dc 57 5b 6f 3e 59 54 bd a9 5d d1 f6 1c 37 a1 ca 8a 69 2e 67 b4 47 5d 9c 9f 6d 55 a1 c6 61 6a Data Ascii: :@`uo4^rkrj$g};j6s5rE!(e' Kz#dh{mde+rbUv*^]\|}r{sF<<KW($W(+SaQj`}a~{3r-]<;GbW[o>YT]7i.gG]mUaj
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: ad b5 17 37 2c 62 69 8c 00 41 a6 11 88 90 35 cc c0 c6 c6 13 a9 60 d2 13 9a 4e c1 b0 1b 86 8a d1 08 9c 0d b5 98 50 35 da ac d7 4c 6b 60 c3 0a cc 19 04 e6 61 56 08 c5 03 31 a6 d7 a1 e5 6e 41 39 d4 02 37 db 19 0d 36 19 0d 33 8d 83 5d 14 16 1a 6c 36 0d 71 9c 86 a6 17 80 db 18 00 6e 00 5b 0b ce 03 17 b0 d4 06 70 00 67 19 00 30 32 1b eb ae 43 00 00 c9 9a e4 37 d3 5d 40 1a 56 e1 b6 a3 50 53 a1 39 0d 40 00 00 d8 35 1b e8 1b e7 5d 86 16 00 16 00 00 00 00 32 00 00 00 0c 80 1a 80 00 00 00 00 00 00 03 6c 80 1a 00 00 00 03 1b 00 18 00 06 f8 00 67 ff c4 00 31 10 00 00 06 02 01 03 04 02 00 05 04 03 00 00 00 00 00 01 02 03 04 05 06 11 12 07 10 13 14 21 22 31 20 30 08 15 23 32 41 16 17 40 42 24 33 37 ff da 00 08 01 01 00 01 05 02 22 1a 1a 1c 47 01 c0 70 06 80 68 06 90 a4 Data Ascii: 7,biA5`NP5Lk`aV1nA9763]l6qn[pg02C7]@VPS9@5]2lg1!"1 0#2A@B$37"Gph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	50453	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:25 UTC	929	OUT	GET /xxrz/250x400/793/97/53/975337a7c0992d113d956c6a15682043/975337a7c0992d113d956c6a15682043.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	50456	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:25 UTC	929	OUT	GET /xxrz/250x400/793/dc/29/dc29772a996038cfc64a97e80aa0e4a8/dc29772a996038cfc64a97e80aa0e4a8.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	50454	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:25 UTC	929	OUT	GET /xxrz/250x400/793/f7/a2/f7a29a78a44a887ce683d98430bfb2fb/f7a29a78a44a887ce683d98430bfb2fb.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	50457	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:25 UTC	929	OUT	GET /xxrz/250x400/793/2b/22/2b2267fe4731539be517d3e67daf45cf/2b2267fe4731539be517d3e67daf45cf.jpg HTTP/1.1 Host: img.1movieshd.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: fpestid=e-eohlc5segzUZJ3hkYzpNpm05m5QTWxKaHuwqlZsuCU0CnoAatf9Cks5zqK3WPkJhn2UA; _cc_id=afa9acdd318515b6d11857989cfe776c; panoramaId_expiry=1714761143280; panoramaId=1c9c3d150ca68647e5a2086700b8185ca02c7183077188f030dcbb5a5dfa31a1; panoramaIdType=panoDevice
2024-04-26 18:33:25 UTC	724	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 18:33:25 GMT Content-Type: image/jpeg Content-Length: 57351 Connection: close Last-Modified: Tue, 23 Apr 2024 04:04:44 GMT Vary: Accept-Encoding ETag: W/"6627335c-90df" X-Cache: HIT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 6974 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L6qmL1TqLOqrXmaznjYlS8YOi8OazZQsxigyiHRPw%2B2FkImlYkXjRrGjxWOPiET8G96FJd6fLfwxM9rHevcbv2rfq7FX%2B%2ByphWDSkMXnNAtQGs%2BQurJFlCE8Jh5XkSX%2F0LxT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a8a93ddbd7495a-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 18:33:25 UTC	645	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 3c 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 37 39 33 0a ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c2 00 11 08 01 77 00 fa 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 Data Ascii: JFIF<CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 793CCw"
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: da 3a 96 cb 55 d7 67 c0 3b 7c cd a4 a0 2f a2 7e 53 b4 a0 61 fa 0d d9 4e 9f 3c 41 f4 3c 9f 4a 24 bb 7d f7 77 d8 b4 54 21 f4 38 da 35 68 c8 2f ac cb da 13 46 fb d4 3b 4c 57 6d b7 ec 8c cd e7 cf 3f d3 2f 21 cb 7c e3 1b e8 db 5c 77 e7 60 bf 45 be b1 be 77 2e 8d e7 6d fb 9f 79 41 d7 d5 42 6b 5c 29 8c db 7b df 53 74 b3 4d d4 eb 59 59 51 dc cd 4e 93 d4 cf 76 ae c9 1a d0 19 d3 2b 5c 75 67 73 a4 64 e5 53 e7 69 74 7b b6 6d 68 e8 83 66 0b 47 40 ad 81 58 7a 7a 86 22 64 3e 66 4f 9c ec 23 ba bb b2 46 a8 ad 47 44 8d a1 13 ae 55 ca d1 65 fc ae 73 7c fb fd 13 fc eb f1 80 87 4f ba fd ab 1b d4 a7 ae db 2b f2 6d cf ad cd 71 59 d5 71 3c f4 63 bc d5 33 a6 97 a0 03 65 6f 35 27 72 4d 8a 3b d6 95 c9 d3 82 d4 4a a9 0d 09 26 f4 f3 09 7d 05 e0 54 4d 87 be 01 a8 1b 63 aa 03 a5 05 71 Data Ascii: :Ug;\|/~SaN<A<J$}wT!85h/F;LWm?/!\|\w`Ew.myABk\){StMYYQNv+\ugsdSit{mhfG@Xzz"d>fO#FGDUes\|O+mqYq<c3eo5'rM;J&}TMcq
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: 73 2f 22 2c b1 be 5f 0c 3d 96 91 36 6e 07 0c 4b e2 89 4a 59 8f 29 37 dc 0f 9c ee 53 6f d3 72 8d ce 1e 2f cb 5e df 59 02 f3 0d a1 7d cf 5b 24 f8 d3 29 98 07 f6 3f 94 12 1b 27 62 99 4c 0d 9c 8b 8e 92 22 99 b4 f1 d6 44 47 a1 ca 07 c9 d9 23 28 40 dc c9 d8 c5 26 2d 97 cd 16 24 f4 65 9d 03 00 cb 6f 44 fd af be f3 39 28 b9 5f 37 86 27 99 3d 57 4d 73 c9 b3 d3 70 3d 56 bc 70 6c de 87 ad 94 7a e9 98 cc 23 e6 c6 71 c4 30 12 ca 00 14 36 f2 12 3e c8 0a 65 d0 30 af d3 0c 50 a2 af 9e 76 38 09 c3 6b 25 63 2c 90 be 5f 2c 6a 91 11 d2 4f 80 25 5b 9c 40 a1 bf 75 59 3e fb 8b d8 7b 38 e5 38 be 76 bd 7f 3f 69 ea 39 07 a7 a1 e6 66 1e 7b 66 49 8f 7b 98 91 bd 24 29 12 eb 14 30 36 b2 2a 39 c9 3a e5 e6 18 09 03 1f 87 cc 12 4e e2 a2 23 c3 6d 23 23 6c 99 a6 5e 79 80 7f 63 cf 29 e9 04 Data Ascii: s/",_=6nKJY)7Sor/^Y}[$)?'bL"DG#(@&-$eoD9(_7'=WMsp=Vplz#q06>e0Pv8k%c,_,jO%[@uY>{88v?i9f{fI{$)06*9:N#m##l^yc)
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: 43 6c 0e 92 43 cf 62 0a 33 2d fb ee 59 8a d9 1f d9 b6 29 e5 ff 00 2a d8 20 91 36 45 ed a0 16 9a 71 0d f1 1e 9e 91 4f 01 32 ab 5c 8a 41 82 fb 51 09 4e 34 06 4a 38 18 ce 43 e6 8a 58 7f 97 66 e9 a9 e6 97 89 2a 14 a4 29 a3 96 06 3b e8 9c 32 36 1a 58 1a dd 3f f1 d2 5a 9b 22 24 93 32 79 e8 ac ba 94 d1 6b 56 2a 6d e2 dd e7 9a 47 35 2d 3d 39 4a c3 1d 0c e9 00 24 18 12 8c 72 ef 49 0c ae b6 3c b2 89 c4 07 2a 96 d0 17 3a b6 d9 8b 1c 29 6a 0d e5 28 67 20 6b 55 51 19 95 76 5b 6c f0 bd 37 4d 9e fe 68 69 80 ce 23 11 20 3c f6 17 94 6d c3 f0 0a 0c fc 46 23 10 d4 a4 4a ae 57 69 6d da 2a 22 c8 a1 23 9e 69 88 29 d2 02 e8 cd 97 32 ab 4f ac 4c 40 75 bd 39 3e 9a a0 08 41 c8 e9 45 fc 95 bb 92 33 c6 fa 10 25 b5 23 1b c3 01 c4 44 52 e8 0d 19 6e 07 05 d6 a5 94 64 4f 48 25 28 a5 e7 Data Ascii: ClCb3-Y)* 6EqO2\AQN4J8CXf);26X?Z"$2ykVmG5-=9J$rI<:)j(g kUQv[l7Mhi# <mF#JWim"#i)2OL@u9>AE3%#DRndOH%(
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: 3e 1e 56 dd 56 cb 86 d9 a9 6a 5d 3a ff 00 0f 8b 58 ad ba 15 8a 55 72 19 6e 9b 6b 52 6b 5c 77 ff 00 0a 8a d8 cc fb 6b c2 fa cb 8c cc b8 0d 09 8c 37 7b 59 ad 5b 79 57 5a bc 1d c9 a7 43 86 c8 55 19 28 06 de 57 2e 64 89 1c 14 20 f6 6b b5 65 5c d6 99 5b 6b 84 05 8e 06 f5 b3 b1 d5 4b 8c eb b9 bc 3f 12 dc ad a3 f0 6e b6 98 b3 ff 00 32 ad 09 2d ab 08 ae e3 29 3f 05 35 11 8b a5 61 9e 36 b6 57 78 ce 60 a0 26 33 31 8f 46 6e 22 70 5d 89 ca 13 35 1d b3 68 cb dc ad 5a 03 b1 27 29 80 77 8e 87 9c 68 e1 4a 99 32 93 6d ae 6d 29 4c ce 27 6f 18 18 6d ad 8b ff 00 9a df bb 74 5a 93 e6 f7 21 35 4e d5 70 f7 4e 1a 4d a7 be 2c 29 d5 7b ad c2 93 1c 94 27 15 f1 77 bb 5a ea c9 cb 53 a2 d8 e4 b2 65 34 6b ef 07 a2 4b db 7f db 32 1d 36 b9 8a 98 51 32 6d 1b 0a 53 1e 91 71 69 35 17 d5 ec Data Ascii: >VVj]:XUrnkRk\wk7{Y[yWZCU(W.d ke\[kK?n2-)?5a6Wx`&31Fn"p]5hZ')whJ2mm)L'omtZ!5NpNM,){'wZSe4kK26Q2mSqi5
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: 0c b2 f3 16 36 d2 47 d4 44 38 0a fe e9 3d 3d 33 1d a0 21 27 d7 4a 6f 2b 8b ec 43 10 02 00 5c 06 80 10 90 7e 32 03 79 5d 26 fe 3b bc 0c 0f 70 da 32 19 28 8e 53 49 f1 12 15 54 f4 c4 35 4d 18 4a 39 cf 30 fa 6f 99 5f 51 10 c5 78 7f c4 29 b1 19 8c e9 98 48 6f 8e 8b 3c 8e 6f b3 8d f5 ce 21 28 fc 64 3b 4b 73 7d 8e 35 ce f9 82 8c 53 49 94 4b 25 14 12 c7 a7 9a 36 8c c4 af a8 83 10 e2 0c 23 cf ed 49 f7 08 8c 1c 8e 61 0f 60 8c c0 69 ea 97 eb 22 fa 0e 91 fe 3f 23 a6 63 b8 e2 03 31 44 de 98 bc 03 d8 b1 1b 40 09 70 3a 49 1f 88 84 76 af 8e 52 63 6c 69 81 8e d0 93 3e 3a 21 c1 5c 43 cc 8f 70 80 fd 89 7e b2 33 7c 27 19 b9 90 00 0e 98 8c 68 50 1c d1 bf 1c bf ec bf 67 ac 8f a8 90 7c b5 9f b5 0e c3 bc 7a 46 21 28 07 8e 97 e5 ae 7d a0 04 77 08 c6 34 4a 1f 19 38 f9 2b 82 1e c7 Data Ascii: 6GD8==3!'Jo+C\~2y]&;p2(SIT5MJ90o_Qx)Ho<o!(d;Ks}5SIK%6#Ia`i"?#c1D@p:IvRcli>:!\Cp~3\|'hPg\|zF!(}w4J8+
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: 80 8d 91 78 bb 46 b3 ba 09 c0 16 80 a7 d4 7c 43 42 8a 83 37 59 42 df 06 f5 e1 0e 42 70 0f 0a 52 83 5d 4b ed dd 94 09 ab 38 1f 6d 91 ef e9 62 72 89 99 75 b4 41 6c 38 40 e5 1a 8f 84 3e 0d 62 55 e8 de 71 8b 0f 1e 50 0b 42 a1 2a d7 09 2c f0 10 09 78 98 e5 9b 7f 28 d2 20 6f 10 03 41 2d 0b d5 12 f2 86 c0 ee 68 ba 22 6f e5 f1 e5 12 83 25 b7 bc 6a 7b 17 98 1d 6a 89 3a 1f bc 27 5d 85 37 b5 e5 08 4d d7 b6 76 97 5b 04 49 c8 f8 5b 3f 31 e3 ca 24 e4 ae f5 b3 b4 ba d8 22 9f 43 c5 fc ec 19 81 04 c7 c2 40 22 2f 27 59 b2 76 97 5b 04 49 c8 f8 5b 3f 31 e3 ca 24 e4 ae f5 b3 b4 ba d8 22 4e 87 89 3e 7f c3 76 c9 a1 d5 d6 e8 93 91 f0 b6 a3 02 3c 79 44 9c 95 de b6 76 97 5b 04 48 c8 f1 7b 54 ab b0 96 55 b3 43 ab ad 82 24 62 97 da d6 d4 1f 88 70 f6 89 18 a4 9f ab da d9 da 5d 6c 11 Data Ascii: xF\|CB7YBBpR]K8mbruAl8@>bUqPB*,x( oA-h"o%j{j:']7Mv[I[?1$"C@"/'Yv[I[?1$"N>v<yDv[H{TUC$bp]l
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: 07 09 01 00 01 02 03 00 04 11 05 12 21 31 06 13 22 41 51 61 14 32 71 81 91 f0 10 42 a1 b1 c1 15 23 52 62 d1 e1 07 16 24 25 33 43 72 f1 20 35 73 82 b2 b3 c2 26 34 36 44 53 63 64 83 92 94 b4 b5 45 65 74 a2 b6 d2 e2 54 56 75 76 84 85 93 95 a4 c3 ff da 00 08 01 01 00 06 3f 02 cc f1 cf ef 8c ce 1e 78 c3 07 11 b6 9d e4 81 b4 9f 3d e4 41 ba f5 0a 96 0a 8e dd 31 48 a7 56 a4 63 d6 a9 f1 c4 43 ca 50 04 28 8b ab 42 5e 42 4d d5 36 15 54 94 d1 24 9e 17 52 69 90 34 11 9a bc 63 33 e2 63 33 e3 f7 c0 da 34 ae 38 9f 87 9f 18 cd 5e 27 ed c2 25 76 95 82 d0 28 49 cb 5a 0f 1e 2a 30 ee 7b 59 90 ac 73 41 1f 47 03 5a f6 d3 84 1c 7f 5e de 20 d5 54 d6 4b d2 b1 99 f1 83 89 cb e9 73 ec cf ef 8c cf 8c 61 50 3b 78 c7 ac 30 c3 6b c3 c0 78 c3 5b 4a ad e4 71 fa 69 89 8a 9c d1 5c 0e ea a6 Data Ascii: !1"AQa2qB#Rb$%3Cr 5s&46DScdEetTVuv?x=A1HVcCP(B^BM6T$Ri4c3c348^'%v(IZ*0{YsAGZ^ TKsaP;x0kx[Jqi\
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: db d7 94 8a e7 40 06 b5 a3 d6 d6 24 e7 4c 15 99 89 9a 0a 2c 4c 49 6c ee 23 a5 34 0a 85 45 7a d9 f1 cc c0 a9 e0 63 2f 08 cb d0 aa 79 30 cf 6a 0d 7f d7 33 13 22 80 85 4b 25 44 56 9e ba 2a 2a 94 94 9a d7 24 91 45 5d 3b a2 60 03 b2 dd a5 26 91 86 cd 3a 43 54 a1 ca b4 a5 ec 69 8e 1b e2 94 e3 18 f9 c3 94 79 cb d1 81 a7 7e 1e 78 46 fc d3 e1 8c 20 7a bd 2e 72 e8 a9 c5 5a ce 39 d0 d3 97 76 04 69 32 96 2e 28 68 f5 b0 8b 95 34 07 e4 e9 85 ec e2 09 ce 9b c7 6d 31 f3 e1 58 c3 1f 3d 91 fb a3 3f 6f ba 13 cb c9 89 44 f1 58 fe 90 87 d4 35 a2 88 f5 14 5b 5e 3a be aa 92 45 2e 60 a1 5a 65 8e fa da 8f 52 ed 14 c2 50 9b 81 bd 9d 7a 3b 6f 62 4a 81 a0 c4 e2 3d 07 8e 43 d0 31 3b b7 56 04 49 23 d5 d7 a0 84 e5 b4 a7 59 4d 47 68 bb 13 8a 0b 29 5a 65 b6 54 dd e2 e8 56 b9 09 25 29 c1 Data Ascii: @$L,LIl#4Ezc/y0j3"K%DV**$E];`&:CTiy~xF z.rZ9vi2.(h4m1X=?oDX5[^:E.`ZeRPz;obJ=C1;VI#YMGh)ZeTV%)
2024-04-26 18:33:25 UTC	1369	IN	Data Raw: b9 89 4d 11 d1 46 26 1b 5d ed 62 2c 0b 2d b7 12 94 94 ae fa 48 97 c3 56 6e 10 50 a2 77 e0 53 04 a2 46 c5 65 d1 50 14 dd 97 22 ca 82 52 a2 5b 17 83 63 ea d0 e2 30 e6 4c 26 4a d8 94 b2 ed 39 44 02 a3 25 37 67 ca cc 49 ad d2 b6 94 87 4b 2e a5 6c ad 4d 94 02 9b cd 90 92 bb e8 00 88 2a 3a 19 a1 eb ce e8 fc 5b b1 d3 91 35 c3 a2 d7 76 fa c1 2b d0 ad 0e 56 14 ff 00 07 ec 9d 9c 2a 6b 49 6d db c6 7d b0 85 ab 44 74 38 97 0a 92 92 2c 0b 19 68 5d 14 6a 80 51 2b 8f 55 44 9a 12 9a 1b c7 d5 48 23 43 f4 35 69 ae 17 34 7a ca 20 82 9a 82 14 19 b8 bc 17 c3 94 39 4d 0e d0 c0 a4 16 c1 fe e6 ac bf 5c dd a5 4c ba 45 4e 37 46 75 bb 5b b7 aa 26 1c 6b 43 f4 41 25 0c ba 43 87 46 ac c0 90 a4 a5 57 54 2f 4a a9 0a 49 23 02 85 1a 9b 97 6b 7a 2f ec b4 85 db 76 92 94 dc a3 6d 4b 30 94 b8 Data Ascii: MF&]b,-HVnPwSFeP"R[c0L&J9D%7gIK.lM:[5v+VkIm}Dt8,h]jQ+UDH#C5i4z 9M\LEN7Fu[&kCA%CFWT/JI#kz/vmK0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	50458	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:25 UTC	829	OUT	GET /v3/currencies HTTP/1.1 Host: api.bitpanda.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cfuvid=IfoxDBiecLIl6a.NGnH1rybRtQs.sGQRNG6mm4lqmz0-1714156363854-0.0.1.1-604800000; ref=615250356669422741; tag=affiliates; irclickid=1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0; utm_campaign=4484296; AWSALB=uZbL6respsrd6zMVsAc+rcfPmB4acUEnnzqPPfFxWXadhzejNq8yUeD9CK/e69pM274tRVYgISqTnYvzVNihj0yktN9o4C2b0moqcdT2GuEXg9WXijsTaDB8Ahyz; AWSALBCORS=uZbL6respsrd6zMVsAc+rcfPmB4acUEnnzqPPfFxWXadhzejNq8yUeD9CK/e69pM274tRVYgISqTnYvzVNihj0yktN9o4C2b0moqcdT2GuEXg9WXijsTaDB8Ahyz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	50461	52.200.221.249	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:25 UTC	822	OUT	GET /sync/3?RampID=Xc6491Vm-1pzA1iTVLXhV9SS2mgbcdWTy-hA8Ju5KWnd-fmds&197059634fe141449898fb53dec95bfd-09a6f58797e240ca8edf44d5cf3ca14a-2-269-api5137 HTTP/1.1 Host: ecf.d41.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: D41ID=v3\|v4\|197059634fe141449898fb53dec95bfd\|https://d41.co; D41IDT=09a6f58797e240ca8edf44d5cf3ca14a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	50460	52.46.143.56	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:25 UTC	767	OUT	GET /dcm?pid=1f9f6bba-5ede-4cb5-997f-f0d0b894f672&id=1463afc0165279ba4b9955bf9076da3f87f74e0a26198643796f9993ca29256fc0cb235b3774c97e&cb=07636551&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A17qm6D07klYrm02tRP8JQQ\|t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	50463	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:25 UTC	771	OUT	GET /52154.gif?served_by=evergreen&partner_uid=6576787287013452325 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=rbkN8csueWKOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCJi7KxA3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	50451	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:25 UTC	978	OUT	GET /500/4724873?excludes=&oaid=k3oa752910bk686846683x2y8sbun072&fs=0&cf=0&sw=1280&sh=1024&sah=984&wx=0&wy=0&ww=1280&wh=984&cw=1263&wiw=1280&wih=907&wfc=5&pl=https%3A%2F%2F1movieshd.cc%2Fmovie&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=120&btz=Europe%2FZurich&bto=-120&os=windows&os_version=10.0.0&browser_version=117.0.5938.132&js_build=8&sw_version=v1.337.0 HTTP/1.1 Host: rndhaunteran.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://1movieshd.cc Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://1movieshd.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAID=k3oa752910bk686846683x2y8sbun072

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	50459	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 18:33:25 UTC	769	OUT	GET /362588.gif?partner_uid=6f67744e-1091-4048-adba-e024cc18f2d2 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=rbkN8csueWKOsF6TW8LyzXhsJRGTPFXk2cRiIRWhd08=; pxrc=CL3mr7EGEgUI6AcQABIFCOhHEAUSBQjbThAAEgYIuuoBEDASBgi46wEQKxIGCJi7KxA3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	50464	216.200.232.249	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	50462	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	50467	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	50471	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	50472	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	50474	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	50473	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	50476	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	50478	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	50481	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	50482	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	50480	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	50477	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	50483	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	50479	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	50469	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	50470	64.58.232.180	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	50484	142.250.189.132	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	50475	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	50487	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	50486	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	50489	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	50493	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.4	50492	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.4	50491	13.226.52.77	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.4	50485	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.4	50498	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.4	50496	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.4	50497	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.4	50494	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.4	50490	139.45.197.236	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.4	50499	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.4	50466	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.4	50503	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.4	50500	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.4	50501	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.4	50504	3.19.205.32	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.4	50488	34.36.216.150	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.4	50505	142.250.217.228	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.4	50508	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.4	50509	3.225.96.121	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.4	50506	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.4	50507	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.4	50513	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.4	50511	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.4	50514	157.240.14.19	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.4	50512	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.4	50517	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.4	50518	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.4	50519	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.4	50521	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.4	50520	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.4	50522	172.67.203.85	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.4	50510	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.4	50524	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.4	50526	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.4	50516	18.225.2.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.4	50525	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.4	50530	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.4	50523	52.46.128.147	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.4	50528	18.225.2.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.4	50533	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.4	50532	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.4	50529	18.225.2.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.4	50531	18.225.2.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.4	50534	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.4	50537	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.4	50538	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.4	50539	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.4	50541	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.4	50540	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.4	50542	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.4	50543	18.225.2.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.4	50535	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.4	50536	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.4	50545	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.4	50544	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.4	50546	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.4	50547	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.4	50548	104.18.33.70	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.4	50552	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.4	50549	18.225.2.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.4	50554	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.4	50550	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.4	50551	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.4	50556	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.4	50555	18.225.2.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.4	50559	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.4	50561	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.4	50560	104.21.22.71	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.4	50553	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.4	50557	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.4	50558	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.4	50564	68.67.160.75	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.4	50563	15.197.193.217	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.4	50569	157.240.14.19	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.4	50577	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.4	50576	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.4	50578	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.4	50572	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.4	50575	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.4	50571	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.4	50574	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.4	50573	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.4	50585	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.4	50579	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.4	50581	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.4	50582	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.4	50580	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.4	50583	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.4	50588	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.4	50586	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.4	50587	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.4	50584	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.4	50591	52.46.143.56	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.4	50589	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.4	50592	74.125.134.157	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.4	50590	192.178.50.46	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.4	50593	192.178.50.36	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.4	50596	52.46.128.147	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.4	50598	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.4	50603	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.4	50599	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.4	50600	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.4	50602	192.178.50.46	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.4	50597	18.230.167.103	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.4	50605	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.4	50594	192.178.50.36	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.4	50609	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.4	50610	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.4	50614	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.4	50613	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.4	50616	192.178.50.36	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.4	50617	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.4	50618	192.229.210.58	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.4	50621	35.244.154.8	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.4	50624	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.4	50625	152.195.55.165	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.4	50627	35.190.80.1	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.4	50619	74.125.134.157	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
792	192.168.2.4	50628	152.195.55.165	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
793	192.168.2.4	50630	35.190.80.1	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
794	192.168.2.4	50629	142.250.64.206	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
795	192.168.2.4	50633	173.194.213.155	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
796	192.168.2.4	50632	142.250.217.228	443

Timestamp	Bytes transferred	Direction	Data

Target ID:	0
Start time:	20:31:59
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:32:02
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2216,i,6705838790087099450,35814465125719137,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:32:04
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://1movieshd.cc"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://1movieshd.cc/home	HTTP Parser: Iframe src: https://valueclick.cc/embed/news?theme=dark&source=1movieshd.cc
Source: https://1movieshd.cc/home	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1325.23384&cid=c010&cls=B#cid=c010&cls=B&dmn=1movieshd.cc&rnd=1714156362491&tt=t.dhj&dhjLcy=1932&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1325.23384&ell=d&cck=__stid&pn=%2Fhome&qs=na&rdn=1movieshd.cc&rpn=%2Fhome&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://1movieshd.cc/home	HTTP Parser: Iframe src: https://valueclick.cc/embed/news?theme=dark&source=1movieshd.cc
Source: https://1movieshd.cc/movie	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1325.23384&cid=c010&cls=B#cid=c010&cls=B&dmn=1movieshd.cc&rnd=1714156381337&tt=t.dhj&dhjLcy=2598&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1325.23384&ell=d&cck=__stid&pn=%2Fmovie&qs=na&rdn=1movieshd.cc&rpn=%2Fmovie&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://1movieshd.cc/movie	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1325.23384&cid=c010&cls=B#cid=c010&cls=B&dmn=1movieshd.cc&rnd=1714156381337&tt=t.dhj&dhjLcy=2598&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1325.23384&ell=d&cck=__stid&pn=%2Fmovie&qs=na&rdn=1movieshd.cc&rpn=%2Fmovie&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://1movieshd.cc/tv-show	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1325.23384&cid=c010&cls=B#cid=c010&cls=B&dmn=1movieshd.cc&rnd=1714156404044&tt=t.dhj&dhjLcy=2296&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1325.23384&ell=d&cck=__stid&pn=%2Ftv-show&qs=na&rdn=1movieshd.cc&rpn=%2Ftv-show&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://1movieshd.cc/tv-show	HTTP Parser: Iframe src: //t.sharethis.com/a/t_.htm?ver=1.1325.23384&cid=c010&cls=B#cid=c010&cls=B&dmn=1movieshd.cc&rnd=1714156404044&tt=t.dhj&dhjLcy=2296&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1325.23384&ell=d&cck=__stid&pn=%2Ftv-show&qs=na&rdn=1movieshd.cc&rpn=%2Ftv-show&rqs=na&cc=US&cont=NA&ipaddr=
Source: https://app.plus500.com/trade?IsRealMode=True&id=127108&tags=lp0ai49b7tf5&pl=2	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?type=icon&size=large&click_listener=n%3D%3E%7BClientUnique.googleAnalytics.sendEvent(EventCategories.Register%2C%60%24%7BEventActions.CreateNewAccountClicked%7D%24%7BGC.LOGIN_EXPERIMENT.GOOGLE%7D%60%2CClientUnique.GetLoginExperimentTestGroupForAnalytics()%2C1)%7D&theme=outline&client_id=731586421521-g369c1havro2uv5r1i5pca7041mhf0be.apps.googleusercontent.com&iframe_id=gsi_412933_708699&as=Ax4%2Fi%2FkgN2C92RYVcYuOTQ&hl=de
Source: https://app.plus500.com/trade?IsRealMode=True&id=127108&tags=lp0ai49b7tf5&pl=2	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-P3DDK3

Source: https://app.plus500.com/trade?IsRealMode=True&id=127108&tags=lp0ai49b7tf5&pl=2	HTTP Parser: Number of links: 0
Source: https://accounts.google.com/gsi/button?type=icon&size=large&click_listener=n%3D%3E%7BClientUnique.googleAnalytics.sendEvent(EventCategories.Register%2C%60%24%7BEventActions.CreateNewAccountClicked%7D%24%7BGC.LOGIN_EXPERIMENT.GOOGLE%7D%60%2CClientUnique.GetLoginExperimentTestGroupForAnalytics()%2C1)%7D&theme=outline&client_id=731586421521-g369c1havro2uv5r1i5pca7041mhf0be.apps.googleusercontent.com&iframe_id=gsi_412933_708699&as=Ax4%2Fi%2FkgN2C92RYVcYuOTQ&hl=de	HTTP Parser: Number of links: 0

Source: https://1movieshd.cc/home	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://1movieshd.cc/movie	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://1movieshd.cc/tv-show	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://app.plus500.com/trade?IsRealMode=True&id=127108&tags=lp0ai49b7tf5&pl=2	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://1movieshd.cc/home	HTTP Parser: <input type="password" .../> found
Source: https://1movieshd.cc/movie	HTTP Parser: <input type="password" .../> found
Source: https://1movieshd.cc/tv-show	HTTP Parser: <input type="password" .../> found
Source: https://app.plus500.com/trade?IsRealMode=True&id=127108&tags=lp0ai49b7tf5&pl=2	HTTP Parser: <input type="password" .../> found

Source: https://t.sharethis.com/a/t_.htm?ver=1.1325.23384&cid=c010&cls=B	HTTP Parser: No favicon
Source: https://t.sharethis.com/a/t_.htm?ver=1.1325.23384&cid=c010&cls=B	HTTP Parser: No favicon
Source: https://t.sharethis.com/a/t_.htm?ver=1.1325.23384&cid=c010&cls=B	HTTP Parser: No favicon
Source: https://t.sharethis.com/a/t_.htm?ver=1.1325.23384&cid=c010&cls=B	HTTP Parser: No favicon
Source: https://t.sharethis.com/a/t_.htm?ver=1.1325.23384&cid=c010&cls=B	HTTP Parser: No favicon
Source: https://t.sharethis.com/a/t_.htm?ver=1.1325.23384&cid=c010&cls=B#cid=c010&cls=B&dmn=1movieshd.cc&rnd=1714156339691&tt=t.dhj&dhjLcy=1021&lbl=pxcel&flbl=pxcel&ll=d&ver=1.1325.23384&ell=d&cck=__stid&pn=%2F&qs=na&rdn=1movieshd.cc&rpn=%2F&rqs=na&cc=US&cont=NA&ipaddr=	HTTP Parser: No favicon
Source: https://eephaush.com/afu.php?zoneid=6118780&var=6118780&rid=33-IJ2mCiw9DGbmF2LWarg%3D%3D&rhd=false&ab2r=0&sf=1&os=windows&os_version=10.0.0&is_mobile=false&browser_version=117.0.5938.132	HTTP Parser: No favicon
Source: https://stags.bluekai.com/site/59574?ret=html&phint=id%3DZGkACWYr8zMAAAAIA98YAw%3D%3D&phint=__bk_k%3D&phint=__bk_pr%3Dhttps%3A%2F%2Ft.sharethis.com%2Fa%2Ft_.htm%3Fver%3D1.1325.23384%26cid%3Dc010%26cls%3DB&phint=__bk_l%3Dhttps%3A%2F%2Ft.sharethis.com%2Fa%2Ft_.htm%3Fver%3D1.1325.23384%26cid%3Dc010%26cls%3DB&phint=__bk_v%3D3.1.10&limit=5&r=76591364	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfY9-4nAAAAAF1XAEEvsum_JdIVnZ-c1VnK2Qz3&co=aHR0cHM6Ly8xbW92aWVzaGQuY2M6NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=7fmypvln0sab	HTTP Parser: No favicon
Source: https://www.fndsda.net/beige.php?id=OyCkAkzwJOc8Gw2AUwuC&url=https%3A%2F%2Fwww.bitpanda.com%2Fde%2Fpreise%2Fbitcoin-btc%3Firclickid%3D1fpTdt0S7xyKTv-VAgQetQHeUkHTU0wNvU3EVc0%26utm_source%3DImpact%26utm_medium%3DAffiliates%26utm_campaign%3D4484296%26utm_content%3DCopy%2520of%2520Bitcoin%2520Price%2520Page_CH_2%26utm_term%3De2%26ref%3D615250356669422741%26tag%3Daffiliates%26subid1%3D%26irgwc%3D1	HTTP Parser: No favicon
Source: https://accounts.google.com/gsi/button?type=icon&size=large&click_listener=n%3D%3E%7BClientUnique.googleAnalytics.sendEvent(EventCategories.Register%2C%60%24%7BEventActions.CreateNewAccountClicked%7D%24%7BGC.LOGIN_EXPERIMENT.GOOGLE%7D%60%2CClientUnique.GetLoginExperimentTestGroupForAnalytics()%2C1)%7D&theme=outline&client_id=731586421521-g369c1havro2uv5r1i5pca7041mhf0be.apps.googleusercontent.com&iframe_id=gsi_412933_708699&as=Ax4%2Fi%2FkgN2C92RYVcYuOTQ&hl=de	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcmJpEUAAAAAIOXEGazFShMYgSr7POv6bAFn8bZ&co=aHR0cHM6Ly9hcHAucGx1czUwMC5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=wz1050m7xdsf	HTTP Parser: No favicon

Source: https://1movieshd.cc/home	HTTP Parser: No <meta name="author".. found
Source: https://1movieshd.cc/home	HTTP Parser: No <meta name="author".. found
Source: https://1movieshd.cc/movie	HTTP Parser: No <meta name="author".. found
Source: https://1movieshd.cc/movie	HTTP Parser: No <meta name="author".. found
Source: https://1movieshd.cc/movie	HTTP Parser: No <meta name="author".. found
Source: https://1movieshd.cc/tv-show	HTTP Parser: No <meta name="author".. found
Source: https://1movieshd.cc/tv-show	HTTP Parser: No <meta name="author".. found
Source: https://1movieshd.cc/tv-show	HTTP Parser: No <meta name="author".. found
Source: https://app.plus500.com/trade?IsRealMode=True&id=127108&tags=lp0ai49b7tf5&pl=2	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/gsi/button?type=icon&size=large&click_listener=n%3D%3E%7BClientUnique.googleAnalytics.sendEvent(EventCategories.Register%2C%60%24%7BEventActions.CreateNewAccountClicked%7D%24%7BGC.LOGIN_EXPERIMENT.GOOGLE%7D%60%2CClientUnique.GetLoginExperimentTestGroupForAnalytics()%2C1)%7D&theme=outline&client_id=731586421521-g369c1havro2uv5r1i5pca7041mhf0be.apps.googleusercontent.com&iframe_id=gsi_412933_708699&as=Ax4%2Fi%2FkgN2C92RYVcYuOTQ&hl=de	HTTP Parser: No <meta name="author".. found

Source: https://1movieshd.cc/home	HTTP Parser: No <meta name="copyright".. found
Source: https://1movieshd.cc/home	HTTP Parser: No <meta name="copyright".. found
Source: https://1movieshd.cc/movie	HTTP Parser: No <meta name="copyright".. found
Source: https://1movieshd.cc/movie	HTTP Parser: No <meta name="copyright".. found
Source: https://1movieshd.cc/movie	HTTP Parser: No <meta name="copyright".. found
Source: https://1movieshd.cc/tv-show	HTTP Parser: No <meta name="copyright".. found
Source: https://1movieshd.cc/tv-show	HTTP Parser: No <meta name="copyright".. found
Source: https://1movieshd.cc/tv-show	HTTP Parser: No <meta name="copyright".. found
Source: https://app.plus500.com/trade?IsRealMode=True&id=127108&tags=lp0ai49b7tf5&pl=2	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/gsi/button?type=icon&size=large&click_listener=n%3D%3E%7BClientUnique.googleAnalytics.sendEvent(EventCategories.Register%2C%60%24%7BEventActions.CreateNewAccountClicked%7D%24%7BGC.LOGIN_EXPERIMENT.GOOGLE%7D%60%2CClientUnique.GetLoginExperimentTestGroupForAnalytics()%2C1)%7D&theme=outline&client_id=731586421521-g369c1havro2uv5r1i5pca7041mhf0be.apps.googleusercontent.com&iframe_id=gsi_412933_708699&as=Ax4%2Fi%2FkgN2C92RYVcYuOTQ&hl=de	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_717.2.dr	String found in binary or memory: "false": "https://www.facebook.com/dialog/send?" + st.qs({ equals www.facebook.com (Facebook)
Source: chromecache_717.2.dr	String found in binary or memory: facebook: "https://www.facebook.com/sharer.php?" + st.qs({ equals www.facebook.com (Facebook)
Source: chromecache_717.2.dr	String found in binary or memory: linkedin: "https://www.linkedin.com/shareArticle?" + st.qs({ equals www.linkedin.com (Linkedin)
Source: chromecache_717.2.dr	String found in binary or memory: facebook: 'https://www.facebook.com/', equals www.facebook.com (Facebook)
Source: chromecache_717.2.dr	String found in binary or memory: linkedin: 'https://www.linkedin.com/', equals www.linkedin.com (Linkedin)
Source: chromecache_717.2.dr	String found in binary or memory: twitter: 'https://www.twitter.com/', equals www.twitter.com (Twitter)
Source: chromecache_717.2.dr	String found in binary or memory: youtube: 'https://www.youtube.com/', equals www.youtube.com (Youtube)
Source: chromecache_747.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_747.2.dr	String found in binary or memory: __d("LiveChatPluginConstants",["$InternalEnum"],(function(a,b,c,d,e,f){"use strict";a="LiveChatEvent/";c="mqtt";d=b("$InternalEnum")({CONNECTED:"Connected",CONNECTING:"Connecting",DISCONNECTED:"Disconnected"});e=250;b=a+"close_timestamps";var g=a+"reset_badging",h=a+"state",i=a+"switch_account",j=a+"typing",k=a+"unread_count",l=a+"update_message_list",m="platform/plugins/connect/guest",n=a+"guest_upgrade_success",o=a+"guest_upgrade_success_incognito",p=a+"navigate_to_welcome_page",q="platform/plugins/connect/access_token";a=a+"start_re_engagement";var r=124,s=187,t=24,u=424,v=288,w=313,x=219,y=40,z=36,A=24,B=18,C=708,D=540,E=244,F=202,G=509,H=430,I=6,J=0,K=1,L=-1,M="messaging_plugin",N=8634e4,O="#8A8D91",P="entrypoint:customer_chat_plugin",Q=0,R=1,S=2,T=3,U="new_message_update",V="initial_fetch",W=5e3,X="https://www.facebook.com/business/help/1661027437357021";f.MQTT=c;f.MQTTGatewayConnectionState=d;f.LOGIN_CHECK_INTERVAL=e;f.CLOSE_TIMESTAMPS=b;f.RESET_BADGING=g;f.STATE_UPDATE=h;f.SWITCH_ACCOUNT=i;f.TYPING_UPDATE=j;f.UNREAD_COUNT_UPDATE=k;f.UPDATE_MESSAGE_LIST=l;f.GUEST_MODE_CONNECT=m;f.GUEST_UPGRADE_SUCCESS=n;f.GUEST_UPGRADE_SUCCESS_INCOGNITO=o;f.NAVIGATE_TO_WELCOME_PAGE=p;f.ACCESS_TOKEN_LOGIN=q;f.START_RE_ENGAGEMENT=a;f.PROMPT_FALLBACK_HEIGHT=r;f.PROMPT_REDESIGN_FALLBACK_HEIGHT=s;f.PROMPT_CONTAINER_PADDING_HEIGHT=t;f.WELCOME_PAGE_GUEST_FALLBACK_HEIGHT=u;f.WELCOME_PAGE_NO_GUEST_FALLBACK_HEIGHT=v;f.WELCOME_PAGE_GUEST_FALLBACK_HEIGHT_WITH_COMPACT=w;f.WELCOME_PAGE_NO_GUEST_FALLBACK_HEIGHT_WITH_COMPACT=x;f.WELCOME_PAGE_ATTRIBUTION_OFFEST_HEIGHT=y;f.WELCOME_PAGE_ATTRIBUTION_OFFSET_HEIGHT_WITH_COMPACT=z;f.MAIN_IFRAME_PADDING_HEIGHT=A;f.MAIN_IFRAME_PADDING_HEIGHT_WITH_COMPACT=B;f.THREAD_PAGE_HEIGHT=C;f.THREAD_PAGE_HEIGHT_COMPACT=D;f.RE_ENGAGEMENT_COLLAPSED_DIALOG_HEIGHT=E;f.RE_ENGAGEMENT_COLLAPSED_DIALOG_HEIGHT_COMPACT=F;f.RE_ENGAGEMENT_EXPANDED_DIALOG_HEIGHT=G;f.RE_ENGAGEMENT_EXPANDED_DIALOG_HEIGHT_COMPACT=H;f.GREETING_TEXT_BOTTOM_SPACING_OFFEST=I;f.LOGGED_IN_CHAT_MODE=J;f.GUEST_CHAT_MODE=K;f.INVALID_CHAT_MODE=L;f.MESSENGING_PLUGIN=M;f.GUEST_SESSION_STORAGE_VALIDITY_MS=N;f.GUEST_SEND_BUTTON_COLOR_EMPTY_INPUT=O;f.LIVE_CHAT_ENTRYPOINT_ATTRIBUTION_TAG=P;f.ITP_CONSISTENCY_UNKNOWN_LOGGED_OUT=Q;f.ITP_CONSISTENCY_CONSISTENT_LOGGED_IN=R;f.ITP_CONSISTENCY_INCONSISTENT=S;f.ITP_CONSISTENCY_CONSISTENT_NO_ITP=T;f.NEW_MESSAGE_UPDATE=U;f.INITIAL_FETCH=V;f.PLUGIN_FADE_DELAY=W;f.HELP_DEX_LINK=X}),66); equals www.facebook.com (Facebook)
Source: chromecache_596.2.dr	String found in binary or memory: `).concat(h));break;case"print":setTimeout(function(W){self.print()},500);break;case"email":var k="".concat(encodeURIComponent(w),"%0D%0A"),x="mailto:?subject=".concat(g,"&body=").concat(k).concat(encodeURIComponent(h));window.open(x);break;case"sms":location.href="sms:".concat(P.selectSms,"?&body=").concat(encodeURIComponent(g),": ").concat(encodeURIComponent(c.text\|\|"")," ").concat(h);break;case"messenger":window.open("http://www.facebook.com/dialog/send?app_id="+C+"&display=popup&href="+encodeURIComponent(h)+"&link="+encodeURIComponent(h)+"&redirect_uri="+encodeURIComponent(h)+"&quote="+encodeURIComponent(w));break;case"facebook":window.open("https://www.facebook.com/sharer/sharer.php?u="+encodeURIComponent(h)+"&quote="+encodeURIComponent(w)+"&hashtag="+(y\|\|E\|\|""));break;case"whatsapp":window.open((a?"https://api.whatsapp.com/send?text=":"whatsapp://send?text=")+encodeURIComponent(w+` equals www.facebook.com (Facebook)
Source: chromecache_596.2.dr	String found in binary or memory: `+h));break;case"twitter":window.open("https://twitter.com/intent/tweet?text=".concat(encodeURIComponent(w),"&url=").concat(encodeURIComponent(h),"&hashtags=").concat(E\|\|"","&via=").concat(A?encodeURIComponent(A):""));break;case"linkedin":window.open("https://www.linkedin.com/shareArticle?mini=true&url=".concat(encodeURIComponent(h),"&title=").concat(g,"&summary=").concat(w,"&source=LinkedIn"));break;case"telegram":window.open(a?"https://telegram.me/share/msg?url="+encodeURIComponent(h)+"&text="+encodeURIComponent(w):"tg://msg?text="+U);break;case"pinterest":window.open("https://pinterest.com/pin/create/button/?url="+encodeURIComponent(h)+"&description="+encodeURIComponent(w)+"&media="+R)}p(),f()})}),b.querySelector(".shareAPIPolyfill-footer").addEventListener("click",f),requestAnimationFrame(function(){T.classList.add("visible"),b.classList.add("visible")}),document.getElementById("shareAPIPolyfill-container").focus()})})}}()})()},70655:(n,e,r)=>{"use strict";r.d(e,{CR:()=>h,XA:()=>g,ZT:()=>d,ev:()=>A});/! **************************************************************************** equals www.linkedin.com (Linkedin)
Source: chromecache_596.2.dr	String found in binary or memory: `+h));break;case"twitter":window.open("https://twitter.com/intent/tweet?text=".concat(encodeURIComponent(w),"&url=").concat(encodeURIComponent(h),"&hashtags=").concat(E\|\|"","&via=").concat(A?encodeURIComponent(A):""));break;case"linkedin":window.open("https://www.linkedin.com/shareArticle?mini=true&url=".concat(encodeURIComponent(h),"&title=").concat(g,"&summary=").concat(w,"&source=LinkedIn"));break;case"telegram":window.open(a?"https://telegram.me/share/msg?url="+encodeURIComponent(h)+"&text="+encodeURIComponent(w):"tg://msg?text="+U);break;case"pinterest":window.open("https://pinterest.com/pin/create/button/?url="+encodeURIComponent(h)+"&description="+encodeURIComponent(w)+"&media="+R)}p(),f()})}),b.querySelector(".shareAPIPolyfill-footer").addEventListener("click",f),requestAnimationFrame(function(){T.classList.add("visible"),b.classList.add("visible")}),document.getElementById("shareAPIPolyfill-container").focus()})})}}()})()},70655:(n,e,r)=>{"use strict";r.d(e,{CR:()=>h,XA:()=>g,ZT:()=>d,ev:()=>A});/! **************************************************************************** equals www.twitter.com (Twitter)
Source: chromecache_288.2.dr	String found in binary or memory: ber uns</a> <li><a href=https://www.bitpanda.com/en/career>Karriere</a> <li><a href=https://www.bitpanda.com/de/presse-downloads>Presse</a> <li><a href=https://blog.bitpanda.com/de target=_blank>Blog</a> <li><a href=https://support.bitpanda.com/hc/de target=_blank>Hilfe</a></ul> </div> <div><ul class=footer__social><li><a class="footer__social--facebook footer__social__icon" href=https://www.facebook.com/bitpanda.AT/></a> <li><a class="footer__social--twitter footer__social__icon" href=https://twitter.com/Bitpanda></a> <li><a class="footer__social--telegram footer__social__icon" href=https://support.bitpanda.com/hc/de/articles/360000262720></a> <li><a class="footer__social--reddit footer__social__icon" href=https://www.reddit.com/r/bitpanda/></a> <li><a class="footer__social--linkedin footer__social__icon" href=https://www.linkedin.com/company/bitpanda/></a> <li><a class="footer__social--youtube footer__social__icon" href=https://www.youtube.com/@Bitpanda></a> <li><a class="footer__social--discord footer__social__icon" href=https://discord.gg/dmM9Dz7Kt8></a> <li><a class="footer__social--instagram footer__social__icon" href=https://www.instagram.com/bitpanda/></a> </ul> </div></div> </div> </section> <section class="footer__navbar footer__navbar--sm footer__navbar__gradient"><div class=uk-container><div class=uk-flex-between uk-grid=""><div class="uk-text-center uk-text-right@m uk-width-1-1 uk-width-auto@m"><ul><li><a href=https://www.bitpanda.com/de/rechtliches/impressum>Impressum</a> <li><a href=https://www.bitpanda.com/de/legal/bitpanda-privacy-policy>Datenschutzerkl equals www.facebook.com (Facebook)
Source: chromecache_288.2.dr	String found in binary or memory: ber uns</a> <li><a href=https://www.bitpanda.com/en/career>Karriere</a> <li><a href=https://www.bitpanda.com/de/presse-downloads>Presse</a> <li><a href=https://blog.bitpanda.com/de target=_blank>Blog</a> <li><a href=https://support.bitpanda.com/hc/de target=_blank>Hilfe</a></ul> </div> <div><ul class=footer__social><li><a class="footer__social--facebook footer__social__icon" href=https://www.facebook.com/bitpanda.AT/></a> <li><a class="footer__social--twitter footer__social__icon" href=https://twitter.com/Bitpanda></a> <li><a class="footer__social--telegram footer__social__icon" href=https://support.bitpanda.com/hc/de/articles/360000262720></a> <li><a class="footer__social--reddit footer__social__icon" href=https://www.reddit.com/r/bitpanda/></a> <li><a class="footer__social--linkedin footer__social__icon" href=https://www.linkedin.com/company/bitpanda/></a> <li><a class="footer__social--youtube footer__social__icon" href=https://www.youtube.com/@Bitpanda></a> <li><a class="footer__social--discord footer__social__icon" href=https://discord.gg/dmM9Dz7Kt8></a> <li><a class="footer__social--instagram footer__social__icon" href=https://www.instagram.com/bitpanda/></a> </ul> </div></div> </div> </section> <section class="footer__navbar footer__navbar--sm footer__navbar__gradient"><div class=uk-container><div class=uk-flex-between uk-grid=""><div class="uk-text-center uk-text-right@m uk-width-1-1 uk-width-auto@m"><ul><li><a href=https://www.bitpanda.com/de/rechtliches/impressum>Impressum</a> <li><a href=https://www.bitpanda.com/de/legal/bitpanda-privacy-policy>Datenschutzerkl equals www.linkedin.com (Linkedin)
Source: chromecache_288.2.dr	String found in binary or memory: ber uns</a> <li><a href=https://www.bitpanda.com/en/career>Karriere</a> <li><a href=https://www.bitpanda.com/de/presse-downloads>Presse</a> <li><a href=https://blog.bitpanda.com/de target=_blank>Blog</a> <li><a href=https://support.bitpanda.com/hc/de target=_blank>Hilfe</a></ul> </div> <div><ul class=footer__social><li><a class="footer__social--facebook footer__social__icon" href=https://www.facebook.com/bitpanda.AT/></a> <li><a class="footer__social--twitter footer__social__icon" href=https://twitter.com/Bitpanda></a> <li><a class="footer__social--telegram footer__social__icon" href=https://support.bitpanda.com/hc/de/articles/360000262720></a> <li><a class="footer__social--reddit footer__social__icon" href=https://www.reddit.com/r/bitpanda/></a> <li><a class="footer__social--linkedin footer__social__icon" href=https://www.linkedin.com/company/bitpanda/></a> <li><a class="footer__social--youtube footer__social__icon" href=https://www.youtube.com/@Bitpanda></a> <li><a class="footer__social--discord footer__social__icon" href=https://discord.gg/dmM9Dz7Kt8></a> <li><a class="footer__social--instagram footer__social__icon" href=https://www.instagram.com/bitpanda/></a> </ul> </div></div> </div> </section> <section class="footer__navbar footer__navbar--sm footer__navbar__gradient"><div class=uk-container><div class=uk-flex-between uk-grid=""><div class="uk-text-center uk-text-right@m uk-width-1-1 uk-width-auto@m"><ul><li><a href=https://www.bitpanda.com/de/rechtliches/impressum>Impressum</a> <li><a href=https://www.bitpanda.com/de/legal/bitpanda-privacy-policy>Datenschutzerkl equals www.twitter.com (Twitter)
Source: chromecache_288.2.dr	String found in binary or memory: ber uns</a> <li><a href=https://www.bitpanda.com/en/career>Karriere</a> <li><a href=https://www.bitpanda.com/de/presse-downloads>Presse</a> <li><a href=https://blog.bitpanda.com/de target=_blank>Blog</a> <li><a href=https://support.bitpanda.com/hc/de target=_blank>Hilfe</a></ul> </div> <div><ul class=footer__social><li><a class="footer__social--facebook footer__social__icon" href=https://www.facebook.com/bitpanda.AT/></a> <li><a class="footer__social--twitter footer__social__icon" href=https://twitter.com/Bitpanda></a> <li><a class="footer__social--telegram footer__social__icon" href=https://support.bitpanda.com/hc/de/articles/360000262720></a> <li><a class="footer__social--reddit footer__social__icon" href=https://www.reddit.com/r/bitpanda/></a> <li><a class="footer__social--linkedin footer__social__icon" href=https://www.linkedin.com/company/bitpanda/></a> <li><a class="footer__social--youtube footer__social__icon" href=https://www.youtube.com/@Bitpanda></a> <li><a class="footer__social--discord footer__social__icon" href=https://discord.gg/dmM9Dz7Kt8></a> <li><a class="footer__social--instagram footer__social__icon" href=https://www.instagram.com/bitpanda/></a> </ul> </div></div> </div> </section> <section class="footer__navbar footer__navbar--sm footer__navbar__gradient"><div class=uk-container><div class=uk-flex-between uk-grid=""><div class="uk-text-center uk-text-right@m uk-width-1-1 uk-width-auto@m"><ul><li><a href=https://www.bitpanda.com/de/rechtliches/impressum>Impressum</a> <li><a href=https://www.bitpanda.com/de/legal/bitpanda-privacy-policy>Datenschutzerkl equals www.youtube.com (Youtube)
Source: chromecache_599.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_747.2.dr	String found in binary or memory: window.FB&&window.FB.__buffer&&(window.__buffer=babelHelpers["extends"]({},window.FB.__buffer)); } }).call(global);})();} catch (e) {var i = new Image();i.crossOrigin = 'anonymous';i.dataset.testid = 'fbSDKErrorReport';i.src='https://www.facebook.com/platform/scribe_endpoint.php/?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+e.name+'","line":"'+(e.lineNumber\|\|e.line)+'","script":"'+(e.fileName\|\|e.sourceURL\|\|e.script\|\|"sdk.js")+'","stack":"'+(e.stackTrace\|\|e.stack)+'","revision":"1013080259","namespace":"FB","message":"'+e.message+'"}}');document.body.appendChild(i);} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: 1movieshd.cc
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: eephaush.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: platform-api.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: my.rtmark.net
Source: global traffic	DNS traffic detected: DNS query: yonmewon.com
Source: global traffic	DNS traffic detected: DNS query: sr7pv7n5x.com
Source: global traffic	DNS traffic detected: DNS query: rndhaunteran.com
Source: global traffic	DNS traffic detected: DNS query: buttons-config.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: l.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: platform-cdn.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: count-server.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: t.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: sync.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: loadus.exelator.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: ps.eyeota.net
Source: global traffic	DNS traffic detected: DNS query: ml314.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: visitor.fiftyt.com
Source: global traffic	DNS traffic detected: DNS query: px.owneriq.net
Source: global traffic	DNS traffic detected: DNS query: pd.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: tzegilo.com
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: tags.bkrtx.com
Source: global traffic	DNS traffic detected: DNS query: flerap.com
Source: global traffic	DNS traffic detected: DNS query: fleraprt.com
Source: global traffic	DNS traffic detected: DNS query: datatechonert.com
Source: global traffic	DNS traffic detected: DNS query: stags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: graph.facebook.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: static.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: img.1movieshd.cc
Source: global traffic	DNS traffic detected: DNS query: valueclick.cc
Source: global traffic	DNS traffic detected: DNS query: bitpanda.pxf.io
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: www.ojrq.net
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: ws.rqtrk.eu
Source: global traffic	DNS traffic detected: DNS query: www.bitpanda.com
Source: global traffic	DNS traffic detected: DNS query: www.googleoptimize.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bitpanda.com
Source: global traffic	DNS traffic detected: DNS query: code.highcharts.com
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: eus-api.ccgateway.net
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: map.go.affec.tv
Source: global traffic	DNS traffic detected: DNS query: ib.mookie1.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: match.360yield.com
Source: global traffic	DNS traffic detected: DNS query: i6.liadm.com
Source: global traffic	DNS traffic detected: DNS query: geoip-js.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: bitpanda-broker-production-assets.s3-eu-west-1.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: api.bitpanda.com
Source: global traffic	DNS traffic detected: DNS query: starpassing.com
Source: global traffic	DNS traffic detected: DNS query: spl.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: ice.360yield.com
Source: global traffic	DNS traffic detected: DNS query: onlinetopchoice.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: api5137.d41.co
Source: global traffic	DNS traffic detected: DNS query: static.agkn.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: www.plus500.com
Source: global traffic	DNS traffic detected: DNS query: ecf.d41.co
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: app.plus500.com
Source: global traffic	DNS traffic detected: DNS query: pixel.mathtag.com
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: cdn-app.plus500.com
Source: global traffic	DNS traffic detected: DNS query: cdn.matomo.cloud
Source: global traffic	DNS traffic detected: DNS query: www.fndsda.net
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: rc.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: trade.plus500.com
Source: global traffic	DNS traffic detected: DNS query: appleid.cdn-apple.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: usermatch.krxd.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://1movieshd.cc

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Windows Analysis Report
http://1movieshd.cc