cdn23602612.ahacdn.me/500b-bench.jpg
*/alk/g2.php
*/re.php?mk=doublestat*
*/mva_v*/m3011.js
*/nva_v*/m3011.js
*/v1712/g1001.js
*/v1713/g1001.js
POST */c with a base64-encoded body from a Chromium browser
POST */logb.php with a JSON body from a Chromium browser
GET or POST */clce
GET or POST */agg/log/top
*/recConf?uuid=* (RecZap C2, trivex5.online)
*/uninst?uid=*&ei=*&ev=* (RecZap uninstall, trivex5.online)
*/xplorerConfig?uuid=* (FontXplorer C2, fontxplorer.info)
*/fxplorerTrends?uuid=* (FontXplorer, fontxplorer.info)
