support Content_Scanning
malware sock