Edit tour

Windows Analysis Report
https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html%3Fpage%3D2&ved=2ahUKEwin4OyqhYyCAxXzlWoFHdflDIsQFnoECAgQAQ&usg=AOvVaw0aU9VdyHXl9jH_yb4I9bI0

Overview

General Information

Sample URL:	https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html%3Fpage%3D2&ved=2ahUKEwin4Oy
Analysis ID:	1330526
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Stores files to the Windows start menu directory

Found iframes

HTML title does not match URL

Creates files inside the system directory

Uses insecure TLS / SSL version for HTTPS connection

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Classification

Analysis Advice

Uses HTTPS for network communication, use the 'Proxy HTTPS (port 443) to read its encrypted data' cookbook for further analysis

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

Process Tree

System is w10x64_ra

chrome.exe (PID: 3756 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html%3Fpage%3D2&ved=2ahUKEwin4OyqhYyCAxXzlWoFHdflDIsQFnoECAgQAQ&usg=AOvVaw0aU9VdyHXl9jH_yb4I9bI0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1976,i,9506327213485360004,4467633358422175441,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3772 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4188 --field-trial-handle=1976,i,9506327213485360004,4467633358422175441,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6240 --field-trial-handle=1976,i,9506327213485360004,4467633358422175441,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/htmlContent-Length: 13904Date: Mon, 23 Oct 2023 11:28:10 GMTServer: lighttpd/1.4.26Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 72 65 65 3a 20 45 72 72 65 75 72 20 34 30 34 20 2d 20 44 6f 63 75 6d 65 6e 74 20 6e 6f 6e 20 74 72 6f 75 76 26 65 61 63 75 74 65 3b 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 65 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 30 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 69 6d 61 67 65 74 6f 6f 6c 62 61 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 63 72 69 70 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 53 68 6f 72 74 63 75 74 20 49 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 70 61 67 65 70 65 72 73 6f 2e 66 72 65 65 2e 66 72 2f 69 6d 2f 63 73 73 2f 66 72 65 65 2e 63 73 73 22 20 2f 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 62 6f 64 79 22 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 74 6f 70 22 3e 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 2e 66 72 2f 61 64 73 6c 2f 69 6e 64 65 78 2e 68 74 6d 6c 22 20 69 64 3d 22 74 6f 70 2d 6c 6f 67 6f 22 20 74 69 74 6c 65 3d 22 52 65 74 6f 75 72 20 26 61 67 72 61 76 65 3b 20 6c 27 61 63 63 75 65 69 6c 22 3e 20 3c 73 70 61 6e 3e 46 72 65 65 3c 2f 73 70 61 6e 3e 20 3c 2f 61 3e 0a 20 20 3c 64 69 76

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.16:50554 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_3756_518258244

Source: classification engine

Classification label: clean3.win@87/0@904/639

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html%3Fpage%3D2&ved=2ahUKEwin4OyqhYyCAxXzlWoFHdflDIsQFnoECAgQAQ&usg=AOvVaw0aU9VdyHXl9jH_yb4I9bI0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1976,i,9506327213485360004,4467633358422175441,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4188 --field-trial-handle=1976,i,9506327213485360004,4467633358422175441,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6240 --field-trial-handle=1976,i,9506327213485360004,4467633358422175441,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1976,i,9506327213485360004,4467633358422175441,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4188 --field-trial-handle=1976,i,9506327213485360004,4467633358422175441,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6240 --field-trial-handle=1976,i,9506327213485360004,4467633358422175441,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	2 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Source	Detection	Scanner	Label	Link
https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html%3Fpage%3D2&ved=2ahUKEwin4OyqhYyCAxXzlWoFHdflDIsQFnoECAgQAQ&usg=AOvVaw0aU9VdyHXl9jH_yb4I9bI0	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Link
jsdelivr.map.fastly.net	0%	Virustotal	Browse
cdn.galaxiemedia.fr	0%	Virustotal	Browse
46-105-201-224.any.cdn.anycast.me	0%	Virustotal	Browse
cdn.id5-sync.com	0%	Virustotal	Browse
api.privacy-center.org	0%	Virustotal	Browse
fast.nexx360.io	0%	Virustotal	Browse
tag.agrvt.com	0%	Virustotal	Browse
id.agrvt.com	0%	Virustotal	Browse
cdn.nexx360.io	0%	Virustotal	Browse
sdk.privacy-center.org	1%	Virustotal	Browse
lb.mediarithmics.com	0%	Virustotal	Browse
static.mediarithmics.com	0%	Virustotal	Browse
id5-sync.com	0%	Virustotal	Browse
wrufer.com	0%	Virustotal	Browse
gob-njr3.pubmnet.com	0%	Virustotal	Browse
ds-pr-bh.ybp.gysm.yahoodns.net	0%	Virustotal	Browse
match.prod.bidr.io	0%	Virustotal	Browse
lb.eu-1-id5-sync.com	0%	Virustotal	Browse
pug-vac.pubmnet.com	0%	Virustotal	Browse
pugm-vac.pubmnet.com	0%	Virustotal	Browse
dorpat.geo.iponweb.net	0%	Virustotal	Browse
m.deepintent.com	0%	Virustotal	Browse
rtb.adgrx.com	0%	Virustotal	Browse
user-data-us-east.bidswitch.net	0%	Virustotal	Browse
dts.clnmde.com	0%	Virustotal	Browse
a.audrte.com	0%	Virustotal	Browse
dts6.clnmde.com	0%	Virustotal	Browse
ad.mrtnsvr.com	0%	Virustotal	Browse
sync-dmp.mobtrakk.com	0%	Virustotal	Browse
pug-njrpb.pubmnet.com	0%	Virustotal	Browse
ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	0%	Virustotal	Browse
us01.z.antigena.com	0%	Virustotal	Browse
beacon.lynx.cognitivlabs.com	0%	Virustotal	Browse

Name	IP	Active	Malicious	Antivirus Detection	Reputation
um.simpli.fi	35.236.220.17	true	false		high
rtb-csync-use1.smartadserver.com	23.105.12.173	true	false		high
global.px.quantserve.com	192.184.68.215	true	false		high
id5-sync.com	141.95.98.64	true	false	0%, Virustotal, Browse	unknown
us-east-eb2.3lift.com	35.71.139.29	true	false		high
cs.admanmedia.com	80.77.87.166	true	false		high
pixel-a.sitescout.com	207.198.113.86	true	false		high
live.rezync.com	13.32.151.31	true	false		high
id.agrvt.com	13.248.156.27	true	false	0%, Virustotal, Browse	unknown
rtb.openx.net	35.227.252.103	true	false		high
bttrack.com	192.132.33.68	true	false		unknown
stats.g.doubleclick.net	172.253.122.156	true	false		high
askyl.blog.free.fr	212.27.63.51	true	false		high
bidder.va1.vip.prod.criteo.com	74.119.119.129	true	false		high
crb.kargo.com	18.233.16.215	true	false		high
us-east-tlx.3lift.com	34.235.226.222	true	false		high
r.casalemedia.com	104.18.26.193	true	false		high
lga-direct-bgp.contextweb.com	198.148.27.131	true	false		high
dsum.casalemedia.com	104.18.26.193	true	false		high
fast.nexx360.io	172.67.74.219	true	false	0%, Virustotal, Browse	unknown
www.google.com	172.253.115.105	true	false		high
lb.eu-1-id5-sync.com	162.19.138.119	true	false	0%, Virustotal, Browse	unknown
id.rlcdn.com	35.190.60.146	true	false		high
idaas6.cph.liveintent.com	3.92.38.138	true	false		high
tagr-gcp-odr-use1.mookie1.com	35.190.90.30	true	false		high
bcp.crwdcntrl.net	3.215.167.255	true	false		high
match.adsrvr.org	15.197.193.217	true	false		high
rtactivateloadbalancer-2076579973.us-east-1.elb.amazonaws.com	34.202.99.231	true	false		high
match.prod.bidr.io	52.71.19.38	true	false	0%, Virustotal, Browse	unknown
pagead-googlehosted.l.google.com	172.253.115.132	true	false		high
chidc2.outbrain.org	64.74.236.159	true	false		unknown
creativecdn.com	185.184.8.90	true	false		high
pugm-vac.pubmnet.com	8.28.7.81	true	false	0%, Virustotal, Browse	unknown
widget.va1.vip.prod.criteo.com	74.119.119.150	true	false		high
csm.va1.vip.prod.criteo.net	74.119.119.149	true	false		high
cdn.galaxiemedia.fr	51.210.182.196	true	false	0%, Virustotal, Browse	unknown
zeta-ssp-385516103.us-east-1.elb.amazonaws.com	54.86.53.146	true	false		high
m.deepintent.com	169.197.150.8	true	false	0%, Virustotal, Browse	unknown
events-ssc.33across.com	34.117.239.71	true	false		high
t.richaudience.com	116.202.160.46	true	false		high
choices.truste.com	99.84.108.125	true	false		high
trends.revcontent.com	54.236.150.57	true	false		high
d1ykf07e75w7ss.cloudfront.net	18.160.53.102	true	false		high
warp.media.net	23.62.160.23	true	false		high
ssum-sec.casalemedia.com	104.18.26.193	true	false		high
btlr-us-east-1.sharethrough.com	3.232.158.174	true	false		high
googleads.g.doubleclick.net	172.253.62.154	true	false		high
hblg.media.net	23.62.160.23	true	false		high
lg3.media.net	23.219.8.22	true	false		high
rtb.adgrx.com	173.231.178.82	true	false	0%, Virustotal, Browse	unknown
clients.l.google.com	142.251.111.100	true	false		high
match-us-east-1-ecs.sharethrough.com	3.220.223.245	true	false		high
config.aps.amazon-adsystem.com	18.160.10.20	true	false		high
t2.richaudience.com	116.202.160.46	true	false		high
syncsc.aniview.com	96.46.186.182	true	false		high
hb.yahoo.net	23.15.9.48	true	false		high
www.googletagservices.com	172.253.63.154	true	false		high
iad-2-sync.go.sonobi.com	69.166.1.66	true	false		high
us-vip001.taboola.com	141.226.224.48	true	false		high
prebid.smilewanted.com	172.67.10.198	true	false		high
contextual.media.net	23.50.124.22	true	false		high
core.iprom.net	195.5.165.20	true	false		unknown
cat.va1.vip.prod.criteo.com	74.119.119.147	true	false		high
idsync.rlcdn.com	35.190.60.146	true	false		high
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false		high
dts.clnmde.com	34.111.96.116	true	false	0%, Virustotal, Browse	unknown
sync.richaudience.com	138.201.8.249	true	false		high
rtb.adentifi.com	34.198.233.93	true	false		unknown
ad.mrtnsvr.com	34.102.163.6	true	false	0%, Virustotal, Browse	unknown
cx.serverbid.com	159.89.246.130	true	false		unknown
sync.srv.stackadapt.com	54.164.154.71	true	false		high
thrtle.com	54.88.41.1	true	false		unknown
nava.vap.lijit.com	72.251.238.254	true	false		high
io-cookie-sync-1725936127.us-east-1.elb.amazonaws.com	52.204.200.132	true	false		high
cdn.id5-sync.com	172.67.38.106	true	false	0%, Virustotal, Browse	unknown
pixel.tapad.com	34.111.113.62	true	false		high
sync.adotmob.com	45.137.176.88	true	false		high
a.nel.cloudflare.com	35.190.80.1	true	false		high
ssp.ads.betweendigital.com	96.46.183.20	true	false		high
pippio.com	107.178.254.65	true	false		high
sync.ipredictive.com	52.204.59.222	true	false		unknown
accounts.google.com	172.253.115.84	true	false		high
sync-dmp.mobtrakk.com	3.135.132.32	true	false	0%, Virustotal, Browse	unknown
s.amazon-adsystem.com	52.46.130.91	true	false		high
aax-eu.amazon-adsystem.com	52.94.220.185	true	false		high
46-105-201-224.any.cdn.anycast.me	46.105.201.224	true	false	0%, Virustotal, Browse	unknown
dts6.clnmde.com	34.111.96.116	true	false	0%, Virustotal, Browse	unknown
use1.smartadserver.com	23.105.14.97	true	false		high
ssbsync-use1.smartadserver.com	216.22.16.52	true	false		high
ipac.ctnsnet.com	35.186.193.173	true	false		high
dcs-edge-va6-802167536.us-east-1.elb.amazonaws.com	52.70.129.167	true	false		high
spug-njrpb.pubmnet.com	162.248.18.34	true	false		unknown
dxedge-prod-lb-946522505.us-east-1.elb.amazonaws.com	52.7.64.78	true	false		high
global.ib-ibi.com	69.169.86.38	true	false		unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false		high
match.adsby.bidtheatre.com	134.122.57.34	true	false		unknown
d1wsawskf2klzj.cloudfront.net	3.162.112.10	true	false		high
lb.mediarithmics.com	54.36.150.184	true	false	0%, Virustotal, Browse	unknown
ib.anycast.adnxs.com	68.67.160.132	true	false		high
stun2.spamanalyst.com	35.196.212.170	true	false		high

Contacted URLs

Name	Malicious	Reputation
http://askyl.blog.free.fr/themes/default/print.css	false	high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968062842439299535	false	high
http://askyl.blog.free.fr/index.php?pages/lib3dglasses	false	high
http://askyl.blog.free.fr/public/blowup-images/page-t.png	false	high
https://contextual.media.net/checksync.php?vsSync=1&cs=6&cv=31&https=1&cid=8CUF4235B&prvid=99%2C77%2C20000%2C294%2C262%2C460%2C461%2C462%2C4%2C313%2C10000%2C459%2C229%2C9%2C319&itype=ADX&purpose1=1&gdprconsent=1&gdpr=1&gdprstring=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&usp_status=0&usp_consent=1	false	high
https://onetag-sys.com/usync/?pubId=7a4244b2979db22&gdpr=0&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	unknown
http://askyl.blog.free.fr/themes/default/img/page-bg.png	false	high
https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=153376767&consentString=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzNDMmdGw9MTI5NjAw&piggybackCookie=uid:OplwyejCspYluWsCQ_S9&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	false	high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=0d52c67c-7197-11ee-b45c-513f4eadc243	false	high
https://ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
http://askyl.blog.free.fr/public/edim_shades1.jpg	false	high
https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156538&s=156538&gdpr=0&gdprConsent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&predirect=https%3A%2F%2Fsync.richaudience.com%2Fa8c1b6a2754b510b088f624c91944bf3%2F%3FpmUserId%3D	false	high
https://us-u.openx.net/w/1.0/cm?cc=1&id=5263ff89-48b7-4624-96e0-06c74faea01d&ph=2eba3060-f578-4886-93a0-d9a2346966ea&gdpr=0&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&r=https%3A%2F%2Fsync.richaudience.com%2Fa9b03dc9bdef0bcb818e9c4110ca0368%2F%3Fuid%3D	false	high
https://sync.richaudience.com/a8c1b6a2754b510b088f624c91944bf3/?pmUserId=00B65E8F-6939-4A66-84CD-8AF7FC4BFB03	false	high
https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=9778655620&consentString=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://eus.rubiconproject.com/usync.html?p=publicidad&gdpr=0&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
about:srcdoc	false	low
https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=8847165219702995245&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://image2.pubmatic.com/AdServer/Pug?gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=l1B21ZRdctaMVnGClwZo15lUINeMV33SlQd9N6G2	false	high
https://www.google.com/recaptcha/api2/aframe	false	high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AADqHU7KbLEAABfPWG0yAA&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://static.criteo.net/empty.html	false	high
https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.generation-nt.com&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA#{%22uid%22:{%22origin%22:0},%22lwid%22:{%22origin%22:0},%22bundle%22:{%22value%22:%229IQWul9SQ1pJJTJCYnA2Wms3bUZ5VWpZR1hibGVhbFVNdHNwM0tPWm5jbmJLaHkzZFZZT1VJRDNyZ01IaHhnZTY1bDE3VENhWGxDU2k4NkJwUFdWdkElMkI2RVVCSVRxV1FJVHhtNFByN2RoWjdlWEFyTVdSNU42bjN2TEx1TEtCY2JXQkJ5MUVBbHBuYU56bWVudnJ3N2wxODZrczRsTzkxNHhjQlVFNHhCb09MRU0xUFhvJTNE%22,%22origin%22:3},%22optout%22:{%22value%22:false,%22origin%22:0},%22sid%22:{%22origin%22:0},%22tld%22:%22generation-nt.com%22,%22topUrl%22:%22www.generation-nt.com%22,%22version%22:130,%22cw%22:true,%22lsw%22:true,%22origin%22:%22publishertag%22,%22requestId%22:%220.5751910650079322%22}	false	high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=iMeLnXO1DdGUw7d4e1g2ZQ	false	high
https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	false	high
http://askyl.blog.free.fr/public/PC_3D_Glasses_GeForce_x200.jpg	false	high
https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	false	high
about:blank	false	low
https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	false	high
https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156383&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://eus.rubiconproject.com/usync.html?gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://acdn.adnxs.com/dmp/async_usersync.html?gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&seller_id=10589&pub_id=1512908	false	high
https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=91&partneruserid=00B65E8F-6939-4A66-84CD-8AF7FC4BFB03&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7513468111788244511	false	high
http://askyl.blog.free.fr/public/200px-ELSA_Revelator_IR_LCD_Shutter_Glasses.JPG	false	high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9Mjk0NSZ0bD0xMjk2MDA=&piggybackCookie=87fa939f-c704-4ab6-a850-af0363cd4c55&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&gdpr_pd=&us_privacy=#US_PRIVACY	false	high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&gdpr=1	false	high
http://askyl.blog.free.fr/index.php?pages/lib3dglasses	false	high
https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=00B65E8F-6939-4A66-84CD-8AF7FC4BFB03&redir=true&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&dcc=t	false	high
https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_pm-db5_n-simpli.fi_rbd_n-Beeswax_ox-db5_smrt_cnv_sovrn&dcc=t	false	high
https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=9325032323&consentString=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=00B65E8F-6939-4A66-84CD-8AF7FC4BFB03	false	unknown
https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.generation-nt.com&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA#{%22uid%22:{%22origin%22:0},%22lwid%22:{%22origin%22:0},%22bundle%22:{%22value%22:%22QugNTF9SQ1pJJTJCYnA2Wms3bUZ5VWpZR1hibGJFWWolMkZXQUhjTDlBTERhNXJJaW0zWUl4MklDemdjZlQzVWhxcVVxZEExRTJZbEZON0lQJTJCVzdtMTJjV0VrZ0lkaG1IRjRscDQlMkJ0bHU1c2paQ1Rxakl0Unp6cnp4cUR3NzlpZlJRMVNOT1g1WDIlMkZ4UnclMkZaTHdhaEJHZXljRlIxaVVjeDklMkJiVVZrbE56cVdPaG5kZlA0YyUzRA%22,%22origin%22:3},%22optout%22:{%22value%22:false,%22origin%22:0},%22sid%22:{%22origin%22:0},%22tld%22:%22generation-nt.com%22,%22topUrl%22:%22www.generation-nt.com%22,%22version%22:130,%22cw%22:true,%22lsw%22:true,%22origin%22:%22publishertag%22,%22requestId%22:%220.36357780769523984%22}	false	high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzcmdGw9ODY0MDA=&piggybackCookie=205084744231077&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
http://askyl.blog.free.fr/themes/default/img/page-b.png	false	high
https://pxlclnmdecom-a.akamaihd.net/javascripts/bfp_ssn.js?templateId=3	false	high
http://askyl.blog.free.fr/themes/default/js/jquery.cookie.js	false	high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=843714961321	false	high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=6259396724605130130&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
http://askyl.blog.free.fr/themes/default/img/feed.png	false	high
http://askyl.blog.free.fr/favicon.ico	false	high
https://eu-u.openx.net/w/1.0/cm?id=a547219b-814b-4e3e-8a4f-35c044fa1891&ph=ec81d0b7-c42e-4a42-b97a-9305af647d30&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D100%26partneruserid%3D%7BOPENX_ID%7D&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.generation-nt.com&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA#{%22uid%22:{%22origin%22:0},%22lwid%22:{%22origin%22:0},%22bundle%22:{%22origin%22:0},%22optout%22:{%22value%22:false,%22origin%22:0},%22sid%22:{%22origin%22:0},%22tld%22:%22generation-nt.com%22,%22topUrl%22:%22www.generation-nt.com%22,%22version%22:130,%22cw%22:true,%22lsw%22:true,%22origin%22:%22publishertag%22,%22requestId%22:%220.24586333210926758%22}	false	high
http://askyl.blog.free.fr/themes/default/js/post.js	false	high
https://widget.va.us.criteo.com/dis/dis.aspx?pu=189812&cb=65365880e7da71e4a0515602d505c484&gra=1&grv=2&grs=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&r=https%3a%2f%2fwww.generation-nt.com%2f&crossorigin=false	false	high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=1743&dcid=12&iscname=false&cname=&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
http://askyl.blog.free.fr/themes/default/style.css	false	high
https://simage2.pubmatic.com/AdServer/Pug?vcode&piggybackCookie={viewer_token}	false	high
https://eb2.3lift.com/sync?gdpr=true&cmp_cs=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&	false	high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=LE1_OtIRXO1LuZJBl9PiDpoQMVI&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:HQVAqAzI1QUT555&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU7a6e7ab1962e43b88b51bb47ffe1d960	false	high
http://askyl.blog.free.fr/themes/default/img/body-bg.png	false	high
http://askyl.blog.free.fr/themes/default/js/jquery.js	false	high
https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.generation-nt.com&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA#{%22uid%22:{%22origin%22:0},%22lwid%22:{%22origin%22:0},%22bundle%22:{%22value%22:%22DzM2OF9SQ1pJJTJCYnA2Wms3bUZ5VWpZR1hibFltSTVyb3QlMkJ5Nm1GZWpZMmZteUpzTlR4TmQlMkZQZWZ5MG8lMkZqSDcxdlBYNW1uJTJGa1ZSbG52cGRoYmYzNXh5c2slMkY1enFZaG55SVJIdDFETlBGZ2pZVG1GMVNNNnFuWjA5dkpQbHZKNSUyQkhlcSUyQkhDVU5JMzUyYndBa08xUzJWVmQxd1BCcDk3Wm1KNVBJSyUyRndDckVoZDVmTjglM0Q%22,%22origin%22:3},%22optout%22:{%22value%22:false,%22origin%22:0},%22sid%22:{%22origin%22:0},%22tld%22:%22generation-nt.com%22,%22topUrl%22:%22www.generation-nt.com%22,%22version%22:130,%22cw%22:true,%22lsw%22:true,%22origin%22:%22publishertag%22,%22requestId%22:%220.4018015823936263%22}	false	high
https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=961341499&consentString=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high
https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=6028124476&consentString=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.253.62.154	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.171.30.95	unknown	United States	14618	AMAZON-AESUS	false
52.7.162.66	unknown	United States	14618	AMAZON-AESUS	false
18.160.23.201	d1jvc9b8z3vcjs.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.18.24.173	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
172.253.122.132	unknown	United States	15169	GOOGLEUS	false
50.116.194.21	unknown	United States	6336	TURN-US-ASNUS	false
52.204.59.222	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
68.67.179.155	unknown	United States	29990	ASN-APPNEXUS	false
35.236.220.17	um.simpli.fi	United States	15169	GOOGLEUS	false
64.58.232.179	unknown	United States	13649	ASN-VINSUS	false
68.67.161.182	unknown	United States	29990	ASN-APPNEXUS	false
54.81.96.145	unknown	United States	14618	AMAZON-AESUS	false
147.28.146.89	dc13-prebid.a-mx.net	United States	3130	RGNET-SEARGnetSeattleWestinEE	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
63.251.114.182	unknown	United States	29791	VOXEL-DOT-NETUS	false
44.207.131.13	unknown	United States	14618	AMAZON-AESUS	false
159.89.246.130	cx.serverbid.com	United States	14061	DIGITALOCEAN-ASNUS	false
195.244.31.10	unknown	France	63140	IGUANA-WORLDWIDEUS	false
212.27.63.51	askyl.blog.free.fr	France	12322	PROXADFR	false
195.244.31.11	visitor-usa02.omnitagjs.com	France	63140	IGUANA-WORLDWIDEUS	false
142.251.167.132	unknown	United States	15169	GOOGLEUS	false
44.195.188.212	unknown	United States	14618	AMAZON-AESUS	false
54.236.150.57	trends.revcontent.com	United States	14618	AMAZON-AESUS	false
151.101.130.49	unknown	United States	54113	FASTLYUS	false
69.90.254.78	ums.acuityplatform.com	Canada	13768	COGECO-PEER1CA	false
199.38.167.131	unknown	United States	54312	ROCKETFUELUS	false
172.253.122.95	unknown	United States	15169	GOOGLEUS	false
68.67.160.75	unknown	United States	29990	ASN-APPNEXUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
134.122.57.34	match.adsby.bidtheatre.com	United States	14061	DIGITALOCEAN-ASNUS	false
68.67.160.132	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
23.88.86.2	matching.truffle.bid	United States	18978	ENZUINC-US	false
104.26.14.164	unknown	United States	13335	CLOUDFLARENETUS	false
37.157.6.232	unknown	Denmark	198622	ADFORMDK	false
52.95.115.196	unknown	United States	16509	AMAZON-02US	false
141.95.98.64	id5-sync.com	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
3.217.0.89	sync.crwdcntrl.net	United States	14618	AMAZON-AESUS	false
151.101.2.49	unknown	United States	54113	FASTLYUS	false
63.251.28.234	unknown	United States	26558	FREEWHEELUS	false
35.169.99.4	unknown	United States	14618	AMAZON-AESUS	false
8.43.72.97	unknown	United States	26667	RUBICONPROJECTUS	false
3.92.38.138	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
172.67.10.198	prebid.smilewanted.com	United States	13335	CLOUDFLARENETUS	false
107.22.122.125	aorta.clickagy.com	United States	14618	AMAZON-AESUS	false
38.98.69.175	pmp.mxptint.net	United States	174	COGENT-174US	false
96.46.183.20	ssp.ads.betweendigital.com	United States	7979	SERVERS-COMUS	false
54.166.53.84	unknown	United States	14618	AMAZON-AESUS	false
64.74.236.159	chidc2.outbrain.org	United States	22075	AS-OUTBRAINUS	false
3.223.64.119	unknown	United States	14618	AMAZON-AESUS	false
54.230.163.14	unknown	United States	16509	AMAZON-02US	false
34.200.65.202	unknown	United States	14618	AMAZON-AESUS	false
70.42.32.95	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
44.212.249.199	unknown	United States	14618	AMAZON-AESUS	false
13.32.151.31	live.rezync.com	United States	16509	AMAZON-02US	false
54.197.119.22	unknown	United States	14618	AMAZON-AESUS	false
65.108.231.149	unknown	United States	11022	ALABANZA-BALTUS	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
44.216.223.15	ds-pr-bh.ybp.gysm.yahoodns.net	United States	14618	AMAZON-AESUS	false
23.205.106.182	unknown	United States	20940	AKAMAI-ASN1EU	false
172.67.74.219	fast.nexx360.io	United States	13335	CLOUDFLARENETUS	false
52.95.126.138	unknown	United States	16509	AMAZON-02US	false
54.172.79.116	a.audrte.com	United States	14618	AMAZON-AESUS	false
216.239.32.21	jelly.mdhv.io	United States	15169	GOOGLEUS	false
23.50.125.47	unknown	United States	16625	AKAMAI-ASUS	false
35.170.89.243	unknown	United States	14618	AMAZON-AESUS	false
34.102.163.6	ad.mrtnsvr.com	United States	15169	GOOGLEUS	false
143.244.208.184	sid.storygize.net	United States	174	COGENT-174US	false
216.22.16.52	ssbsync-use1.smartadserver.com	United States	30633	LEASEWEB-USA-WDCUS	false
18.154.227.31	dakgga5fc76b3.cloudfront.net	United States	16509	AMAZON-02US	false
208.115.232.150	s.richaudience.com	United States	46475	LIMESTONENETWORKSUS	false
8.18.45.137	unknown	United States	26762	CNVR-US-EASTUS	false
51.210.182.196	cdn.galaxiemedia.fr	France	16276	OVHFR	false
162.19.138.119	lb.eu-1-id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
23.105.12.142	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
142.251.111.100	clients.l.google.com	United States	15169	GOOGLEUS	false
204.79.197.200	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
68.67.160.26	nym1-ib.adnxs.com	United States	29990	ASN-APPNEXUS	false
35.207.24.140	dorpat.geo.iponweb.net	United States	19527	GOOGLE-2US	false
85.114.159.118	dsp.adfarm1.adition.com	Germany	24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	false
18.160.46.96	sdk.privacy-center.org	United States	3	MIT-GATEWAYSUS	false
23.50.124.22	contextual.media.net	United States	16625	AKAMAI-ASUS	false
45.137.176.88	sync.adotmob.com	Spain	60350	VPFR	false
3.232.158.174	btlr-us-east-1.sharethrough.com	United States	14618	AMAZON-AESUS	false
23.92.190.68	unknown	United States	29791	VOXEL-DOT-NETUS	false
18.160.46.86	wrufer.com	United States	3	MIT-GATEWAYSUS	false
23.83.76.84	ssbsync-usw1.smartadserver.com	United States	395954	LEASEWEB-USA-LAX-11US	false
37.157.5.132	unknown	Denmark	198622	ADFORMDK	false
69.173.151.100	unknown	United States	26667	RUBICONPROJECTUS	false
34.237.18.234	rtb.gumgum.com	United States	14618	AMAZON-AESUS	false
68.67.160.186	unknown	United States	29990	ASN-APPNEXUS	false
54.71.192.49	visitor-us-west-2.omnitagjs.com	United States	16509	AMAZON-02US	false
34.202.54.136	unknown	United States	14618	AMAZON-AESUS	false
74.119.119.71	measurement-api.va1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
104.36.115.113	pugm88000nfc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
18.207.68.235	cs.yellowblue.io	United States	14618	AMAZON-AESUS	false
23.105.12.130	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
8.43.72.41	unknown	United States	26667	RUBICONPROJECTUS	false

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1330526
Start date and time:	2023-10-23 13:25:52 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html%3Fpage%3D2&ved=2ahUKEwin4OyqhYyCAxXzlWoFHdflDIsQFnoECAgQAQ&usg=AOvVaw0aU9VdyHXl9jH_yb4I9bI0
Analysis system description:	Windows 10 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled
Analysis Mode:	stream
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@87/0@904/639

Warnings

Exclude process from analysis (whitelisted): SIHClient.exe
Excluded IPs from analysis (whitelisted): 142.251.167.94, 34.104.35.123
Excluded domains from analysis (whitelisted): edgedl.me.gvt1.com, clientservices.googleapis.com
Not all processes where analyzed, report is missing behavior information

Created / dropped Files

⊘No created / dropped files found

Static File Info

⊘No static file info

Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KBRHHXH
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KBRHHXH
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KBRHHXH
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_pm-db5_n-simpli.fi_rbd_n-Beeswax_ox-db5_smrt_cnv_sovrn
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://115099cbf06c4cb9220b4ac44c10c6e0.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KBRHHXH
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://115099cbf06c4cb9220b4ac44c10c6e0.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_pm-db5_n-simpli.fi_rbd_n-Beeswax_ox-db5_smrt_cnv_sovrn
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/aframe
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://115099cbf06c4cb9220b4ac44c10c6e0.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KBRHHXH
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://115099cbf06c4cb9220b4ac44c10c6e0.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_pm-db5_n-simpli.fi_rbd_n-Beeswax_ox-db5_smrt_cnv_sovrn
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/aframe
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.generation-nt.com&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA#{"uid":{"origin":0},"lwid":{"origin":0},"bundle":{"origin":0},"optout":{"value":false,"origin":0},"sid":{"origin":0},"tld":"generation-nt.com","topUrl":"www.generation-nt.com","version":130,"cw":true,"lsw":true,"origin":"publishertag","requestId":"0.24586333210926758"}
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.generation-nt.com&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA#{"uid":{"origin":0},"lwid":{"origin":0},"bundle":{"value":"QugNTF9SQ1pJJTJCYnA2Wms3bUZ5VWpZR1hibGJFWWolMkZXQUhjTDlBTERhNXJJaW0zWUl4MklDemdjZlQzVWhxcVVxZEExRTJZbEZON0lQJTJCVzdtMTJjV0VrZ0lkaG1IRjRscDQlMkJ0bHU1c2paQ1Rxakl0Unp6cnp4cUR3NzlpZlJRMVNOT1g1WDIlMkZ4UnclMkZaTHdhaEJHZXljRlIxaVVjeDklMkJiVVZrbE56cVdPaG5kZlA0YyUzRA","origin":3},"optout":{"value":false,"origin":0},"sid":{"origin":0},"tld":"generation-nt.com","topUrl":"www.generation-nt.com","version":130,"cw":true,"lsw":true,"origin":"publishertag","requestId":"0.36357780769523984"}
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://115099cbf06c4cb9220b4ac44c10c6e0.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KBRHHXH
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://115099cbf06c4cb9220b4ac44c10c6e0.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://s.amazon-adsystem.com/iu3?cm3ppd=1&d=dtb-pub&csif=t&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&dl=n-smaato_n-mediagrid_n-LoopMe_n-onetag_pm-db5_n-simpli.fi_rbd_n-Beeswax_ox-db5_smrt_cnv_sovrn
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://www.google.com/recaptcha/api2/aframe
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.generation-nt.com&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA#{"uid":{"origin":0},"lwid":{"origin":0},"bundle":{"origin":0},"optout":{"value":false,"origin":0},"sid":{"origin":0},"tld":"generation-nt.com","topUrl":"www.generation-nt.com","version":130,"cw":true,"lsw":true,"origin":"publishertag","requestId":"0.24586333210926758"}
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.generation-nt.com&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA#{"uid":{"origin":0},"lwid":{"origin":0},"bundle":{"value":"QugNTF9SQ1pJJTJCYnA2Wms3bUZ5VWpZR1hibGJFWWolMkZXQUhjTDlBTERhNXJJaW0zWUl4MklDemdjZlQzVWhxcVVxZEExRTJZbEZON0lQJTJCVzdtMTJjV0VrZ0lkaG1IRjRscDQlMkJ0bHU1c2paQ1Rxakl0Unp6cnp4cUR3NzlpZlJRMVNOT1g1WDIlMkZ4UnclMkZaTHdhaEJHZXljRlIxaVVjeDklMkJiVVZrbE56cVdPaG5kZlA0YyUzRA","origin":3},"optout":{"value":false,"origin":0},"sid":{"origin":0},"tld":"generation-nt.com","topUrl":"www.generation-nt.com","version":130,"cw":true,"lsw":true,"origin":"publishertag","requestId":"0.36357780769523984"}
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: Iframe src: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html

Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No <meta name="author".. found
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No <meta name="author".. found
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No <meta name="author".. found
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No <meta name="author".. found
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No <meta name="author".. found
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No <meta name="author".. found

Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://115099cbf06c4cb9220b4ac44c10c6e0.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://115099cbf06c4cb9220b4ac44c10c6e0.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://115099cbf06c4cb9220b4ac44c10c6e0.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://contextual.media.net/sr/2722522032/SAFEFRAME.html?ule=3298&&kkdd=*%7C!%7C3nuAH9hW&a6=BGRpNGNKRG44RVKBRGB&iTH=N&CqTr=N&eia=BNRs&2qeQ=yzR4&e6i=pE5Y(GB(G&eTei=uVwn6y-VMtUV16fRk98ZTd%3D%3D&eH6i=G4pBVGpzz&q69Q=z4NZz4N&ee=5g&qe=kE&e-~C=)D_u.1b&T6i=pf.M5KBBE&2T6i=YGOX_VY&-22Tq=B&HHH=fCKRs.tDZCWRAKnc_rGYg-.3T0EiGu3p~D2MnH3H-4(fi_.KsFa2C2E189.k!_wRU30Usqc1Q~6fh.F1WWkFY2uk!EZ7m523N!U-6MV~Vf64VZ~ZuXKA7yvVM9ZiQDr&~qQ=4&!A=B&8i=V&ri2B=pE5mVzK4U&ri2z=RGRVzp4Kz&tir2r=qiz%3D~8!!L68H!v!%3DBNLWQHTC%3DNPNpLiWCvt%3DNPGLqei%3DieLHrQ%3DN%2CNLiWCv!%3DzNLa!zHvqi%3DzNzKBNzzzzL68H!vt%3DpGpPBRL8H!v2ce%3DNL8H!vHzrvt%3DNLq2i%3Dz4p44GzpKNLHr2%3DNPNNN%2CNL6T%3Dz.3CrDLJtt%3DNLH66T8r%3DN%2CNLHe%3Dz%2CGLHTqvqi%3DzNzKBNzKNVLHria%3DNPNNN%2CNL8H!vt%3DBPB4La!zHv8H!vt%3DNL8H!v!%3DBNLq!a%3DBpPzsLer2%3D0BLtt%3DBzpLQHTC%3DNPNpLa!zHv8H!vce%3DNMNLTq6ve%3DV%2CV%2CN%2CN%2CN%2CN%2CN%2CNLtC%3DBLTq6vi%3DVLHcQ%3DN%2CNLrKTvt%3DBPB%2CRRPsRLqi%3DNL86i%3Dz7rl6_1Xm37e5kQKNLea!zHvt%3DNP4zLt2i%3DzzVNRNGRpGBGzVRGzVVBsBNNBppz4GspVssVNpBsGVGKRzGspGKGVG...	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=6&cv=31&https=1&cid=8CUF4235B&prvid=99%2C77%2C20000%2C294%2C262%2C460%2C461%2C462%2C4%2C313%2C10000%2C459%2C229%2C9%2C319&itype=ADX&purpose1=1&gdprconsent=1&gdpr=1&gdprstring=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&usp_status=0&usp_consent=1	HTTP Parser: No favicon
Source: https://pxlclnmdecom-a.akamaihd.net/javascripts/bfp_ssn.js?templateId=3	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156383&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: about:srcdoc	HTTP Parser: No favicon
Source: https://a02fb99540fd78f71b706d4843f80577.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html?n=3	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?gdpr=true&cmp_cs=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://s.amazon-adsystem.com/dcm?pid=3b882453-6770-4785-baf8-a598533c054a&id=00B65E8F-6939-4A66-84CD-8AF7FC4BFB03&redir=true&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&dcc=t	HTTP Parser: No favicon
Source: https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=6028124476&consentString=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=6259396724605130130&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=l1B21ZRdctaMVnGClwZo15lUINeMV33SlQd9N6G2	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=LE1_OtIRXO1LuZJBl9PiDpoQMVI&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://beacon.lynx.cognitivlabs.com/pbmtc.gif?puid=00B65E8F-6939-4A66-84CD-8AF7FC4BFB03	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=968062842439299535	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=0d52c67c-7197-11ee-b45c-513f4eadc243	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzQmdGw9MTI5NjAw&piggybackCookie=uid:HQVAqAzI1QUT555&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156383&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156383&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156383&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzNDMmdGw9MTI5NjAw&piggybackCookie=uid:OplwyejCspYluWsCQ_S9&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQ...	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AADqHU7KbLEAABfPWG0yAA&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPU7a6e7ab1962e43b88b51bb47ffe1d960	HTTP Parser: No favicon
Source: https://us-u.openx.net/w/1.0/cm?cc=1&id=5263ff89-48b7-4624-96e0-06c74faea01d&ph=2eba3060-f578-4886-93a0-d9a2346966ea&gdpr=0&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&r=https%3A%2F%2Fsync.richaudience.com%2Fa9b03dc9bdef0bcb818e9c4110ca0368%2F%3Fuid%3D	HTTP Parser: No favicon
Source: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI5NDcmdGw9MTI5NjAw&piggybackCookie=843714961321	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzcmdGw9ODY0MDA=&piggybackCookie=205084744231077&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDImdGw9MTI5NjAw&piggybackCookie=iMeLnXO1DdGUw7d4e1g2ZQ	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNzMmdGw9MTI5NjAw&piggybackCookie=Q7513468111788244511	HTTP Parser: No favicon
Source: https://widget.va.us.criteo.com/dis/dis.aspx?pu=189812&cb=65365880e7da71e4a0515602d505c484&gra=1&grv=2&grs=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&r=https%3a%2f%2fwww.generation-nt.com%2f&crossorigin=false	HTTP Parser: No favicon
Source: https://ads.us.criteo.com/delivery/r/afr.php?u=%7CAxhKm48xyLu3UmPE3vuAS77ypqpmW9GCftw%2FbgSpZbk%3D%7C&c1=SMhbYeryLxmLAABjYmpwv_AJM6OLFQxg2LENCZJhEzEDgdtchR4f2ySlu1Nnnk3ewYv7LtrWARzjPVvFgyo8TEOjXLLX03uEd2AJ1G6K_qMlY8nU7oQhidh1J-pS41qy7u3sr7OZmZo6bmQgDoCz1To2F_b77pTadHyddwIBOJrHZzm2HDeifwvNTcpND_0MhZAT2LpXhdw4MpQT_jLpHiikaCWlwRxSob3SeEpKwx7t6LkLIGiIunhY6bT5DNRkALVkbyRxTAbbVwyjCaDTqi-jGftTqtL-oYljaKdkUneG7W9dbWQIxyJPc7B0Ry1ICxEuOXuy7sIaWTOHBVla9lu5tW52zncS4IpqxpCynnzQEq5CDQ6NLs8M9AGAAvpEBfoQZGfOj_tz_nk3amiYda0G0zEpU_YklJi89MNK5puxxbfpRS6BXyo7w7RsmbPGnN035bYqtykeqghZ736usueq0KGxWqcBssgEL4zypqkR6ogfRYOFeKJyjTy8vg5ndliP2t01RnSI_aoQCyrWIw7rWLVnqolN1i5lc7-7UaZ9xRy8KSyvWP4yvv5IHPfdr1tcBFuk3yhRRJa95pqGcZ7nZFQ2VaMpHzVj-u38PcNdXRQtMn1dBdcgVW9JvJGw2HbavVhGKXDlu9DRGfGHtSV08e8EBsWhSylvTupjr4NwlrsR0ke0oQciTzpFISkPK9jOcH-zNABA3DyWvwT0qNAtuQfvU8QY7Jvxz1sTLRspp4HzAXsQ6oBlW_bTJ3lTwlnhxctaBYHo2w0jg_-VeqCPNq_UEnrEJ_XKL4pUiMcgApQPipc2oM77D5AmTQQ3pvDBQD_nLX-XnWBHucfnd6LYsxsdzeXJSi4omBWsvpTj5Btxv-bLFNFIkvz1DJqb7zVLkTFGL6kKLypjFT23JLT...	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=publicidad&gdpr=0&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=9325032323&consentString=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://acdn.adnxs.com/dmp/async_usersync.html?gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&seller_id=10589&pub_id=1512908	HTTP Parser: No favicon
Source: https://nym1-ib.adnxs.com/if?an_audit=0&referrer=https%3A%2F%2Fwww.generation-nt.com%2Freponses%2Fon-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html%3Fpage%3D2&e=wqT_3QLgOaDgHAAAAwDWAAUBCIqx2akGELi69cirut6Xahi0r8uvsdjb5wUqNgkAAAECCMk_EQEHNABAxT8ZAAAAgML18D8hERIAKQUJ9LUEAMk_MQAAAOBRuJ4_MLOO1Qc43VJAwAhIUlDHoe_fAVjh1XJgAGiwkowBeJC3BYABAYoBA1VTRJIBA0VVUpgBrAKgAfoBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEA2AK1tQLgApGJVeoCcWh0dHBzOi8vd3d3LmdlbmVyYXRpb24tbnQuY29tL3JlcG9uc2VzL29uLWdub21lLXhmY2Uta2RlLWJpZW50b3Qtbm91cy1hdXJvbnMtd2luZG93cy1lbnRyYWlkZS0zODQ0MjExLmh0bWw_cGFnZT0y8gKhBgoLX19UVERfQ0xLX18SkQYmaW1wPWFhNjE0ZjU0LTMyNDktNDdmZi05ZTViLWI3NDIyNTk3ZGUyMSZhZz1sdDl2bzYzJnNmZT0xNzZkZDg4YSZzaWc9VGV1bHU2R1VETDRYaWdiNW1GckJjenJyNHBab21UYnZJRGdpVWJUZldqay4mY3JpZD14dW4zdmh4YyZjZj01NzMyMTgwJmZxPTAmdD0xJnRkX3M9d3d3LmdlbmVyYXRpb24tbnQuY29tJnJjYXRzPXY4dCx5MjksanRlJm1zdGU9Jm1mbGQ9NCZtc3NpPSZtZnNpPSZzdj1hcHBuZXh1cyZ1aG93PTMxJmFnc2E9JndwPSR7UFJJQ0VfUEFJRH0mcmd6PTU2OTcyJmR0PVBDJm9zZj1XaW5kb3dzJm9zPVdpbmRvd3MxMCZicj1DaHJvb...	HTTP Parser: No favicon
Source: https://nym1-ib.adnxs.com/if?an_audit=0&referrer=https%3A%2F%2Fwww.generation-nt.com%2Freponses%2Fon-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html%3Fpage%3D2&e=wqT_3QLgOaDgHAAAAwDWAAUBCIqx2akGELi69cirut6Xahi0r8uvsdjb5wUqNgkAAAECCMk_EQEHNABAxT8ZAAAAgML18D8hERIAKQUJ9LUEAMk_MQAAAOBRuJ4_MLOO1Qc43VJAwAhIUlDHoe_fAVjh1XJgAGiwkowBeJC3BYABAYoBA1VTRJIBA0VVUpgBrAKgAfoBqAEBsAEAuAECwAEFyAEC0AEJ2AEA4AEA8AEA2AK1tQLgApGJVeoCcWh0dHBzOi8vd3d3LmdlbmVyYXRpb24tbnQuY29tL3JlcG9uc2VzL29uLWdub21lLXhmY2Uta2RlLWJpZW50b3Qtbm91cy1hdXJvbnMtd2luZG93cy1lbnRyYWlkZS0zODQ0MjExLmh0bWw_cGFnZT0y8gKhBgoLX19UVERfQ0xLX18SkQYmaW1wPWFhNjE0ZjU0LTMyNDktNDdmZi05ZTViLWI3NDIyNTk3ZGUyMSZhZz1sdDl2bzYzJnNmZT0xNzZkZDg4YSZzaWc9VGV1bHU2R1VETDRYaWdiNW1GckJjenJyNHBab21UYnZJRGdpVWJUZldqay4mY3JpZD14dW4zdmh4YyZjZj01NzMyMTgwJmZxPTAmdD0xJnRkX3M9d3d3LmdlbmVyYXRpb24tbnQuY29tJnJjYXRzPXY4dCx5MjksanRlJm1zdGU9Jm1mbGQ9NCZtc3NpPSZtZnNpPSZzdj1hcHBuZXh1cyZ1aG93PTMxJmFnc2E9JndwPSR7UFJJQ0VfUEFJRH0mcmd6PTU2OTcyJmR0PVBDJm9zZj1XaW5kb3dzJm9zPVdpbmRvd3MxMCZicj1DaHJvb...	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=156383&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://ads.us.criteo.com/delivery/r/afr.php?u=%7CSkcEWgxCtkfQGi7gIFWc5QKxfsQjj%2Boo%2BHlD%2F5QuuA0%3D%7C&c1=SMhbYeryLxmLAABjYmpwv_AJM6OLFQxg2LENCZJhEzEDgdtchR4f2ySlu1Nnnk3ewYv7LtrWARzjPVvFgyo8TEOjXLLX03uEd2AJ1G6K_qPXOtv4lrD6oLouDas_CtUp8EXoreEB_e_8O7LncrE0VftP9-A_x5YvVn10HzXAf7TXeTSUnFszHRaVV_6hn7r2PS8BCkritA2w8nLKr_VEcnKMSTtRrXRWisJgM_wknPIPxc8Lpeg8eNfyVOlAnugVtvKwj_myrCuVA3qixb2LXdV9alWq8_nQEYypogpniYl9epuZ1Mm6zXIaloZmL4STJYpuduYlCANC6k_HIOcQMLw731pPzb7i7B3l54vAdUcmhTdxZjvNaw3kzvK2OyMAPW8oDjjfYajDgB4EDvURda1daZxtrGqIxD7oNqtSnz0XpYyBnIWpbDf07Qr-yw6pnHx8h9jbef4ZQclnnlWrOtXM2CPu8YMjc677t1o9EKP_3je_yAmBBRYOhmR2xETCgvzzaWGnTF-JR-X05rPtJIlFBBppTKQI3L0CQHUzuqTfb2Ee_GMjPbdOx0OsfH_KgEY2bCGljXIKso3MnZx-iQCoL5p4supJJMR3Gj4HbWoqAl9RMensWzt_pqzgLGUsEC0Ccz3aAg_AX_nJHWV4QR4sORR0gYspsOxn51xyA9khGPB_X3WNeeiMcJx5i8VPs7rzzOtfZdzA3SuTeqyVA8yMWCbgeoIJKSR9tfaY9VOXmG7i-fQ0YWNpGMBRrwp57QC6R7z_5hDJ2vSp2re1STGNybz2wMmiWj_SVrVBHwAqHte25H7DGgMZ9kxD_Z0QBHYBBDm9jDTzzrDWx2vS21z8HevRBwCcS-emPgGkwJuN8qVq5QIC8rSORJgMoYocvspH3agkGc7L5qktLFp...	HTTP Parser: No favicon
Source: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=32&partneruserid=8847165219702995245&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://rtb-csync.smartadserver.com/redir/?issi=1&partnerid=91&partneruserid=00B65E8F-6939-4A66-84CD-8AF7FC4BFB03&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://eu-u.openx.net/w/1.0/cm?id=a547219b-814b-4e3e-8a4f-35c044fa1891&ph=ec81d0b7-c42e-4a42-b97a-9305af647d30&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D100%26partneruserid%3D%7BOPENX_ID%7D&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=1743&dcid=12&iscname=false&cname=&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=9778655620&consentString=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://ssum-sec.casalemedia.com/usermatch?s=179394&cb=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D33%26partneruserid%3D&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://eu-u.openx.net/w/1.0/cm?id=a547219b-814b-4e3e-8a4f-35c044fa1891&ph=ec81d0b7-c42e-4a42-b97a-9305af647d30&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D100%26partneruserid%3D%7BOPENX_ID%7D&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://onetag-sys.com/usync/?pubId=7a4244b2979db22&gdpr=0&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://ads.us.criteo.com/delivery/r/afr.php?u=%7CoxA2KFd8XOAKEmIyNI6enP6ZRpuOoQbBLGVtfWmskw4%3D%7C&c1=SMhbYeryLxmLAABjYmpwv_AJM6OLFQxg2LENCZJhEzEDgdtchR4f2ySlu1Nnnk3ewYv7LtrWARzjPVvFgyo8TEOjXLLX03uEd2AJ1G6K_qPjq52vQQ-OoV4HRiE05kWiNu3N6SEcV7ITbON82SxgOw7Q1o0mGCAN23L6L73B5GVMpkJvd7kbz6lhkJs9ynoYeE4y_Xas12fwN-WWCD1oLlQ6XbV5xDnKatLapjx6gzU3kPBROMKojQ2nWKyi60p9mb3ZhUgO-KDqbMs9fo7-Vd8CXynf7pOUGALt2LzdmMfZLhCVDtlL4tcLxuTG5rG0_TXPcFknt1d-bIwGgxDNJrw_ZSHOpZhgHw4jo0ltjA6sRzK-unGN8moJWTcIwQS4UbyFLgHyiKQEDhk2ryy6F37jNAAM8DP3vTTmITHKBX33V4Y9-gD9LQBSDRTEFlbdd6w2UsEVUCoGXv3jzarAET5U0LQ7sbUARcbnEmVBh1sqylrktM9We5naW-t8WCt-raCSvBfZvnfYdZaFgIrdmEtktgM6y8qkFXWg4m4jOsH6y_AEuvNYapYsxdbgDF1hxImWTv3qFjuMEgH6xfrTzG8nwVjUyyWrbJUZJCWf1T9fIk2OQmQvcS43mJio1ccA7V3bMh9LJqzfdH_WgQQTryxIZXoTBE59h5tjSMfT104M_gJf3vsIU_cWvI8uafw4tkaAnLtRtUyDOTBseXV-hlP5JlqdGfxe6FdtQlisT2aU65EnmUeGLZDplIa0-w4XlGx7FS4KPsc_0554spPinfxJPEt_h91FMUh30zXLpPUgHatOrfXw8MDiKgKQkaA29WKJXQMd4A7_9sAer7AdZRHBVtKVeKmSOvNqgq8IWen8WeHI5l0oAQCz3oZQGl13K3T4H733pyAj7odlS_f_cbZl9...	HTTP Parser: No favicon
Source: https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=153376767&consentString=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156538&s=156538&gdpr=0&gdprConsent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA&predirect=https%3A%2F%2Fsync.richaudience.com%2Fa8c1b6a2754b510b088f624c91944bf3%2F%3FpmUserId%3D	HTTP Parser: No favicon
Source: http://askyl.blog.free.fr/index.php?pages/lib3dglasses	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://eu-u.openx.net/w/1.0/cm?id=a547219b-814b-4e3e-8a4f-35c044fa1891&ph=ec81d0b7-c42e-4a42-b97a-9305af647d30&r=https%3A%2F%2Frtb-csync.smartadserver.com%2Fredir%2F%3Fissi%3D1%26partnerid%3D100%26partneruserid%3D%7BOPENX_ID%7D&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://csync.smartadserver.com/diff/rtb/csync/CookieSync.html?hasrtb=true&nwid=1743&dcid=12&iscname=false&cname=&gdpr=1&gdpr_consent=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon
Source: https://ads.us.criteo.com/delivery/r/afr.php?u=%7Cvx3mqPN48v7aNzl1g9YQUJzH7EBD3S9Cl7rFA3mewkw%3D%7C&c1=SMhbYeryLxmLAABjYmpwv_AJM6OLFQxg2LENCZJhEzEDgdtchR4f2ySlu1Nnnk3ewYv7LtrWARzjPVvFgyo8TEOjXLLX03uEd2AJ1G6K_qOVsLYX4rNhmYf0PlWbu2KMWoFbB5FUWSnR57JdbYAnbCsbK2kGGlz-PUX7Nk3_pZXmV2idLrlSiUr1oXZJBaKm7vuoNF_gaX910OxSM_DlWlF8-mhw48GSSQpIyx-aTwXyQ2KMINrMIXtRDbEwyr46bRvwCAzYKJgjJ5CaOsQR07QdwXkNFqk3rbPy5rORsxmHcvZQlF1UI620wsnLtjBUUWgbka3mDrTpPz2TwyKQ23G1Jt7qzk9V9_q6_i1AzPGfiafkOaVDhv56MciY0Xbnl-s6TCil1JiV7D6i20DMAVGK33BOePFoM5gQJRawtXH5mp6xFIaegrmatU6-AA0UoWRGDz7KJOxHBxqCuk7Ga1XzWxh54LjPzhf_Vwiul7Q24qWzdVm-4SPJADL9KU9vUK86VukSBvc3NYe5XEqTSVvGDL81MLHeEq8hjSughiDlwo_BV2dyBLYTKCIztnrnWH1ECphLQHyWEaJ8V4hN3QLbcVnADOZ6GXM2-ES-k37-UK1Of0GoHwpkvtdi-dwjs8bcgOOb41BsYz_mvFp5r7g7OHwD2r9rMZB-uJIAOOJG9uWk0YvzYNalL8BSqky7C_EpHqQrV5cdMG3j-wqMkX7nBIk8TYyZGxC-rfHJWRsSO0TuBHJmjrhIcfHD2sEcdZbbhOKFmzPKxCbJAp_wP4SYeL-3VS_PeSPf9nb6TrVZmIUhttbSmGjG8Xw62NSsUPtc3YtbOoGXNOTFt158ogh9aEEFlX2KjeDcYzVNeKEkmvZsEaIh13X3oBV9mkxk4iH00uVsZxpJAUdY3tr4C1qyS...	HTTP Parser: No favicon
Source: https://sync.richaudience.com/dcf3528a0b8aa83634892d50e91c306e/?ord=961341499&consentString=CP0GSsAP0GSsAAHABBENDcCsAP_AAH_AAAqIJutf_X__b2_r-_7_f_t0eY1P9_7__-0zjhfdF-8N3f_X_L8X52M5vF36tqoKuR4ku3bBIUdlHPHcTVmw6okVryPsbk2cr7NKJ7PkmlMbM2dYGH9_n9_z-ZKY7___f__z_v-v___9____7-3f3__5__--__e_V_-9zfn9_____9vP___9v-_9_3________3_r9_7_D_-f_87_XW-9-CbgBJhoXEAXYEjITbRhFAgBGFYSFUCgAogEhaIDCF1cFOwuAn1gIgBAigAOCAEMAKMgAQAAAQBIRABIEcCAQCAQCAAEACoQCAAjYABQAWAgEAAoDoWKcUASgWEGRGREKYEIUiQUE9lQglB-oK4QhllgBQaP-KhAQKAGKwIhIWL0OAJAS4SSBbqjfAAQgBQCilCsQSemAAcEjZag8ETAAAA.f_gAD_gAAAAA	HTTP Parser: No favicon

Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No <meta name="copyright".. found
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No <meta name="copyright".. found
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No <meta name="copyright".. found
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No <meta name="copyright".. found
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No <meta name="copyright".. found
Source: https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html?page=2	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.16:49999 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50074 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49999 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50074 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49999 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50074 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49999 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50074 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50972 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49999 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50074 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50972 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:49999 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50074 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.16:50972 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.25
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /index.php?pages/lib3dglasses HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: https://www.generation-nt.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/style.css HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://askyl.blog.free.fr/index.php?pages/lib3dglassesAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/print.css HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://askyl.blog.free.fr/index.php?pages/lib3dglassesAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/js/jquery.js HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://askyl.blog.free.fr/index.php?pages/lib3dglassesAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/js/jquery.cookie.js HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://askyl.blog.free.fr/index.php?pages/lib3dglassesAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/js/post.js HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://askyl.blog.free.fr/index.php?pages/lib3dglassesAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/edim_shades1.jpg HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://askyl.blog.free.fr/index.php?pages/lib3dglassesAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/PC_3D_Glasses_GeForce_x200.jpg HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://askyl.blog.free.fr/index.php?pages/lib3dglassesAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/200px-ELSA_Revelator_IR_LCD_Shutter_Glasses.JPG HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://askyl.blog.free.fr/index.php?pages/lib3dglassesAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/img/body-bg.png HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://askyl.blog.free.fr/themes/default/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/blowup-images/page-t.png HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://askyl.blog.free.fr/index.php?pages/lib3dglassesAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/img/page-bg.png HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://askyl.blog.free.fr/themes/default/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/img/feed.png HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://askyl.blog.free.fr/themes/default/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/img/page-b.png HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://askyl.blog.free.fr/themes/default/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/edim_shades1.jpg HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/PC_3D_Glasses_GeForce_x200.jpg HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/200px-ELSA_Revelator_IR_LCD_Shutter_Glasses.JPG HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/img/body-bg.png HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/img/page-bg.png HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/img/page-b.png HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/default/img/feed.png HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://askyl.blog.free.fr/index.php?pages/lib3dglassesAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/blowup-images/page-t.png HTTP/1.1Host: askyl.blog.free.frConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Network device logs, Network intrusion detection system, Packet capture, Process use of network, SSL/TLS inspection, Web proxy
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in. These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html%3Fpage%3D2&ved=2ahUKEwin4OyqhYyCAxXzlWoFHdflDIsQFnoECAgQAQ&usg=AOvVaw0aU9VdyHXl9jH_yb4I9bI0

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

Process Tree

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

General Information

Warnings

Created / dropped Files

Static File Info

Windows Analysis Report
https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.generation-nt.com/reponses/on-gnome-xfce-kde-bientot-nous-aurons-windows-entraide-3844211.html%3Fpage%3D2&ved=2ahUKEwin4OyqhYyCAxXzlWoFHdflDIsQFnoECAgQAQ&usg=AOvVaw0aU9VdyHXl9jH_yb4I9bI0