Play interactive tourEdit tour

Windows Analysis Report
https://docs.google.com/presentation/d/e/2PACX-1vTikKHOuCMRAQnyuWl6bkSnoWXxMBgQaYb36E7fDJr4AK0ZL-qckfBYFvBPAnCFm1lkRHLFNf4FyxqO/pub?start=false&loop=false&delayms=3000&slide=id.p

Overview

General Information

Sample URL:	https://docs.google.com/presentation/d/e/2PACX-1vTikKHOuCMRAQnyuWl6bkSnoWXxMBgQaYb36E7fDJr4AK0ZL-qckfBYFvBPAnCFm1lkRHLFNf4FyxqO/pub?start=false&loop=false&delayms=3000&slide=id.p
Analysis ID:	1324783
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Creates files inside the system directory

Uses insecure TLS / SSL version for HTTPS connection

HTML body with high number of embedded SVGs detected

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://docs.google.com/presentation/d/e/2PACX-1vTikKHOuCMRAQnyuWl6bkSnoWXxMBgQaYb36E7fDJr4AK0ZL-qckfBYFvBPAnCFm1lkRHLFNf4FyxqO/pub?start=false&loop=false&delayms=3000&slide=id.p

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

HTML body with high number of embedded SVGs detected

Source: https://transparencyreport.google.com/safe-browsing/overview

HTTP Parser: Total embedded SVG size: 110269

HTML page is missing a favicon

Source: https://www.google.com/url?q=https://onedrvshare-dataprotect.nl&sa=D&source=editors&ust=1697124085437287&usg=AOvVaw3oI4vlOljCt8Z_5qKKuleV	HTTP Parser: No favicon
Source: https://www.google.com/url?q=https://onedrvshare-dataprotect.nl&sa=D&source=editors&ust=1697124085437287&usg=AOvVaw3oI4vlOljCt8Z_5qKKuleV	HTTP Parser: No favicon
Source: https://safebrowsing.google.com/safebrowsing/report_error/?tpl=websearch&url=https://onedrvshare-dataprotect.nl/&hl=en	HTTP Parser: No favicon
Source: https://safebrowsing.google.com/safebrowsing/report_error/?tpl=websearch&url=https://onedrvshare-dataprotect.nl/&hl=en	HTTP Parser: No favicon
Source: https://safebrowsing.google.com/safebrowsing/report_error/?tpl=websearch&url=https://onedrvshare-dataprotect.nl/&hl=en	HTTP Parser: No favicon
Source: https://safebrowsing.google.com/safebrowsing/report_error/?tpl=websearch&url=https://onedrvshare-dataprotect.nl/&hl=en	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdCiQETAAAAADLZgnQbEQ8zAGa1eL7YA7TtN4N1&co=aHR0cHM6Ly9zYWZlYnJvd3NpbmcuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=lLirU0na9roYU3wDDisGJEVT&size=normal&cb=dd9nnvx5gyrf	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdCiQETAAAAADLZgnQbEQ8zAGa1eL7YA7TtN4N1&co=aHR0cHM6Ly9zYWZlYnJvd3NpbmcuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=lLirU0na9roYU3wDDisGJEVT&size=normal&cb=dd9nnvx5gyrf	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lLirU0na9roYU3wDDisGJEVT&k=6LdCiQETAAAAADLZgnQbEQ8zAGa1eL7YA7TtN4N1	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=lLirU0na9roYU3wDDisGJEVT&k=6LdCiQETAAAAADLZgnQbEQ8zAGa1eL7YA7TtN4N1	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdCiQETAAAAADLZgnQbEQ8zAGa1eL7YA7TtN4N1&co=aHR0cHM6Ly9zYWZlYnJvd3NpbmcuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=lLirU0na9roYU3wDDisGJEVT&size=normal&cb=bj60wjbf5h0q	HTTP Parser: No favicon

Compliance

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 142.250.176.1:443 -> 192.168.2.4:49784 version: TLS 1.0

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 72.247.100.147:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49819 version: TLS 1.2

Networking

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 142.250.176.1:443 -> 192.168.2.4:49784 version: TLS 1.0

Performs DNS lookups

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 72.247.100.147
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.68.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.1

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /presentation/d/e/2PACX-1vTikKHOuCMRAQnyuWl6bkSnoWXxMBgQaYb36E7fDJr4AK0ZL-qckfBYFvBPAnCFm1lkRHLFNf4FyxqO/pub?start=false&loop=false&delayms=3000&slide=id.p HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2023-10-04-09
Source: global traffic	HTTP traffic detected: GET /static/presentation/client/css/3161462383-viewer_css_ltr.css HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.google.com/presentation/d/e/2PACX-1vTikKHOuCMRAQnyuWl6bkSnoWXxMBgQaYb36E7fDJr4AK0ZL-qckfBYFvBPAnCFm1lkRHLFNf4FyxqO/pub?start=false&loop=false&delayms=3000&slide=id.pAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2023-10-04-09; GFE_RTT=267
Source: global traffic	HTTP traffic detected: GET /static/presentation/client/js/1720297846-viewer_core.js HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/presentation/d/e/2PACX-1vTikKHOuCMRAQnyuWl6bkSnoWXxMBgQaYb36E7fDJr4AK0ZL-qckfBYFvBPAnCFm1lkRHLFNf4FyxqO/pub?start=false&loop=false&delayms=3000&slide=id.pAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2023-10-04-09; GFE_RTT=267
Source: global traffic	HTTP traffic detected: GET /nQjMQHWTbdYkGKTCUAOGkTOthwHo74nleOOUUt6hd4m7BlpNwOjRHhIxPbgLI-4zWhO-Y0Sq2iuPtQE04qdGndx77N2zBHDaOzeUACU4c7X1Hn55NRjlz9WkVIPYyUvTX5ZotbSRNN7pq5AhHks=nw HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nQjMQHWTbdYkGKTCUAOGkTOthwHo74nleOOUUt6hd4m7BlpNwOjRHhIxPbgLI-4zWhO-Y0Sq2iuPtQE04qdGndx77N2zBHDaOzeUACU4c7X1Hn55NRjlz9WkVIPYyUvTX5ZotbSRNN7pq5AhHks=nw HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/presentation/client/js/3548397731-viewer_app.js HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/presentation/d/e/2PACX-1vTikKHOuCMRAQnyuWl6bkSnoWXxMBgQaYb36E7fDJr4AK0ZL-qckfBYFvBPAnCFm1lkRHLFNf4FyxqO/pub?start=false&loop=false&delayms=3000&slide=id.pAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2023-10-04-09
Source: global traffic	HTTP traffic detected: GET /static/presentation/client/js/3658468646-viewer_help.js HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/presentation/d/e/2PACX-1vTikKHOuCMRAQnyuWl6bkSnoWXxMBgQaYb36E7fDJr4AK0ZL-qckfBYFvBPAnCFm1lkRHLFNf4FyxqO/pub?start=false&loop=false&delayms=3000&slide=id.pAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /presentation/manifest.json HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://docs.google.com/presentation/d/e/2PACX-1vTikKHOuCMRAQnyuWl6bkSnoWXxMBgQaYb36E7fDJr4AK0ZL-qckfBYFvBPAnCFm1lkRHLFNf4FyxqO/pub?start=false&loop=false&delayms=3000&slide=id.pAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /nQjMQHWTbdYkGKTCUAOGkTOthwHo74nleOOUUt6hd4m7BlpNwOjRHhIxPbgLI-4zWhO-Y0Sq2iuPtQE04qdGndx77N2zBHDaOzeUACU4c7X1Hn55NRjlz9WkVIPYyUvTX5ZotbSRNN7pq5AhHks=nw HTTP/1.1Accept: */*User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35 Safari/537.36Host: lh7-us.googleusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Gl47vYRcnndzmvd&MD=EeHab71a HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /url?q=https://onedrvshare-dataprotect.nl&sa=D&source=editors&ust=1697124085437287&usg=AOvVaw3oI4vlOljCt8Z_5qKKuleV HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /images/phishing_logo.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/url?q=https://onedrvshare-dataprotect.nl&sa=D&source=editors&ust=1697124085437287&usg=AOvVaw3oI4vlOljCt8Z_5qKKuleVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/url?q=https://onedrvshare-dataprotect.nl&sa=D&source=editors&ust=1697124085437287&usg=AOvVaw3oI4vlOljCt8Z_5qKKuleVAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /images/phishing_logo.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /url?q=https://onedrvshare-dataprotect.nl&sa=D&source=editors&ust=1697124085437287&usg=AOvVaw3oI4vlOljCt8Z_5qKKuleV HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /safebrowsing/report_error/?tpl=websearch&url=https://onedrvshare-dataprotect.nl/ HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /safebrowsing/report_error/?tpl=websearch&url=https://onedrvshare-dataprotect.nl/&hl=en HTTP/1.1Host: safebrowsing.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /js/bg/21mMSjfcZkP8uSd7DAhQtto60Pqa34G2w50Go1Kr9uE.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://safebrowsing.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?hl=en HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://safebrowsing.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /images/firefox/moz-header-bg-top.png HTTP/1.1Host: safebrowsing.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://safebrowsing.google.com/safebrowsing/report_error/?tpl=websearch&url=https://onedrvshare-dataprotect.nl/&hl=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /images/firefox/moz-header-bg-bottom.png HTTP/1.1Host: safebrowsing.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://safebrowsing.google.com/safebrowsing/report_error/?tpl=websearch&url=https://onedrvshare-dataprotect.nl/&hl=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /images/firefox/moz-header-bg-bottom.png HTTP/1.1Host: safebrowsing.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /images/firefox/moz-header-bg-top.png HTTP/1.1Host: safebrowsing.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LdCiQETAAAAADLZgnQbEQ8zAGa1eL7YA7TtN4N1&co=aHR0cHM6Ly9zYWZlYnJvd3NpbmcuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=lLirU0na9roYU3wDDisGJEVT&size=normal&cb=dd9nnvx5gyrf HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://safebrowsing.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=lLirU0na9roYU3wDDisGJEVT HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LdCiQETAAAAADLZgnQbEQ8zAGa1eL7YA7TtN4N1&co=aHR0cHM6Ly9zYWZlYnJvd3NpbmcuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=lLirU0na9roYU3wDDisGJEVT&size=normal&cb=dd9nnvx5gyrfAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: safebrowsing.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://safebrowsing.google.com/safebrowsing/report_error/?tpl=websearch&url=https://onedrvshare-dataprotect.nl/&hl=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g; _ga=GA1.3.1832193733.1697122872; _gid=GA1.3.1053652179.1697122872; _gat_gtag_UA_150292050_1=1
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=lLirU0na9roYU3wDDisGJEVT&k=6LdCiQETAAAAADLZgnQbEQ8zAGa1eL7YA7TtN4N1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://safebrowsing.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Gl47vYRcnndzmvd&MD=EeHab71a HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /safebrowsing/report_error/?tpl=websearch&url=https://onedrvshare-dataprotect.nl/&hl=en HTTP/1.1Host: safebrowsing.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g; _ga=GA1.3.1832193733.1697122872; _gid=GA1.3.1053652179.1697122872; _gat_gtag_UA_150292050_1=1
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LdCiQETAAAAADLZgnQbEQ8zAGa1eL7YA7TtN4N1&co=aHR0cHM6Ly9zYWZlYnJvd3NpbmcuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=lLirU0na9roYU3wDDisGJEVT&size=normal&cb=bj60wjbf5h0q HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://safebrowsing.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=lLirU0na9roYU3wDDisGJEVT&k=6LdCiQETAAAAADLZgnQbEQ8zAGa1eL7YA7TtN4N1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://safebrowsing.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /safe-browsing/overview HTTP/1.1Host: transparencyreport.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://transparencyreport.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /transparencyreport/api/v3/safebrowsing/warnings?dataset=users&series=users HTTP/1.1Host: transparencyreport.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://transparencyreport.google.com/safe-browsing/overviewAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g; _ga_XQYF1YFYZF=GS1.1.1697122902.1.0.1697122902.0.0.0; _ga=GA1.3.986974994.1697122902; _gid=GA1.3.1986399426.1697122904; _gat_gtag_UA_81678134_1=1
Source: global traffic	HTTP traffic detected: GET /transparencyreport/api/v3/safebrowsing/notify?dataset=1&series=response HTTP/1.1Host: transparencyreport.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://transparencyreport.google.com/safe-browsing/overviewAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g; _ga_XQYF1YFYZF=GS1.1.1697122902.1.0.1697122902.0.0.0; _ga=GA1.3.986974994.1697122902; _gid=GA1.3.1986399426.1697122904; _gat_gtag_UA_81678134_1=1
Source: global traffic	HTTP traffic detected: GET /transparencyreport/api/v3/safebrowsing/warnings?dataset=users&series=users HTTP/1.1Host: transparencyreport.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g; _ga_XQYF1YFYZF=GS1.1.1697122902.1.0.1697122902.0.0.0; _ga=GA1.3.986974994.1697122902; _gid=GA1.3.1986399426.1697122904; _gat_gtag_UA_81678134_1=1
Source: global traffic	HTTP traffic detected: GET /transparencyreport/api/v3/safebrowsing/notify?dataset=1&series=response HTTP/1.1Host: transparencyreport.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g; _ga_XQYF1YFYZF=GS1.1.1697122902.1.0.1697122902.0.0.0; _ga=GA1.3.986974994.1697122902; _gid=GA1.3.1986399426.1697122904; _gat_gtag_UA_81678134_1=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://transparencyreport.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2023-10-04-09; NID=511=n2_vLLqExbqt2rWkxino85cJHmM86bU55TS9OBp14S6BYz9K7Ty8nwbOmwi1NdeoGopIOiX4Nr_vgGSLf3NoBXzKRTDzBoCn50Jt2NyHRW5-UUSCVM3Q59GtIVdhvEXjAGfTkQ-N2dple-kSON5L8pQ4uWYRepZHxGI7RzUmn9g

Found strings which match to known social media urls

Source: chromecache_98.1.dr	String found in binary or memory: " Process for evaluation ","\ufffd#243\ufffdCommunity guideline flagging.\ufffd/#243\ufffd YouTube\u2019s globally applicable community guidelines are clear, high-level rules available \ufffd#244\ufffdhere\ufffd/#244\ufffd. These guidelines have evolved over time as YouTube has grown and user behavior has changed. Users consent to adhere to these guidelines before opening a YouTube channel. ",["href","https://www.youtube.com/yt/about/policies/"],e,["href","https://support.google.com/youtube/answer/2802002"], equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: "We did not remove the channel."),new _.W("LY","Y2010H1","We received 147 requests to remove more than 1,000 YouTube videos.",'We removed a portion of the videos for violating YouTube\u2019s <ph name="LINK_START"><a target="_blank" href="https://www.youtube.com/t/community_guidelines">Community Guidelines<ph name="LINK_END"></a> but did not remove the rest of the videos.')],[new p2("BR","Y2010H2",'<p>During the October election period in Brazil, the number of court orders issued from electoral courts rose, ordering removal of content related to political campaigns. In addition, one court ordered removal of more than 11,500 photos from Picasa. The lawsuit alleged that the photos contained images of pages from copyrighted books.</p><p>Government requests for content removal are high in Brazil relative to other countries partly because of the popularity of our social networking website, <a href="https://brasil.googleblog.com/2014/06/adeus-ao-orkut.html">Orkut</a>.'), equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: "We did not remove the video."),new p2("DE","Y2011H2","A court order resulted in the removal of 898 search results that linked to forums and blogs containing statements about a government agency and one of its employees that the court determined were not credible."),new _.W("DE","Y2011H2",'We received a request to remove 70 YouTube videos for allegedly violating the <a target="_blank" href="https://www.gesetze-im-internet.de/juschg/index.html">German Children and Young Persons Act</a>.',"We restricted some of the videos from view in Germany in accordance with local laws."), equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: "Y2012H2",'We received several requests from the <a target="_blank" href="https://www.grb.or.kr/english/Default.aspx">Korean Game Rating Board</a> during this reporting period to remove 293 applications from Google Play according to Article 21 of the Act relating to the Promotion of the Game Industry.',"We removed 286 of the applications."),new _.W("KR","Y2012H2","We received a request to remove a YouTube video that allegedly defamed a presidential candidate.","We did not remove the video."),new _.W("LB", equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: "https://www.gesetze-im-internet.de/netzdg/BJNR335210017.html"],[1,"section-links"],["trCta","","routerLink","/netzdg/youtube"]," YouTube ",["trCta","","routerLink","/netzdg/googleplus"],"Google+"],D:function(a,b){a&1&&(_.P(0,"masthead",0),_.M(1,"report-section",1)(2,"p"),_.Dl(3,2),_.P(4,"a",3),_.El(),_.N(),_.M(5,"p",4)(6,"a",5),_.Q(7,6),_.N(),_.M(8,"a",7),_.Q(9,8),_.N()()());a&2&&_.G("trTitle",b.Jc)("longDescription",b.D5)},O:[_.yL,_.IV,_.QV,_.GV],styles:[".section-links[_ngcontent-%COMP%]{text-align:center}.section-links[_ngcontent-%COMP%] a[_ngcontent-%COMP%]{margin:20px}"]});var B2a=new Map([[0,tA("Y2018H1")],[1,tA("Y2018H2")],[2,tA("Y2019H1")],[3,tA("Y2019H2")],[4,tA("Y2020H1")],[5,tA("Y2020H2")],[6,tA("Y2021H1")],[7,tA("Y2021H2")],[8,tA("Y2022H1")],[9,tA("Y2022H2")],[10,tA("Y2023H1")]]),uA=[{Ma:0,type:0,text:"A music video showing a naked man coming out of the ocean was reported several times for illegal sexual content."},{Ma:0,type:0,text:"A speech by Angela Merkel about whether Islam belongs to Germany was reported for hate speech as well as terrorist content because Merkel according to the requestors would endanger the country and lead Germany into a catastrophe."}, equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: 'We had already removed the videos for violating our <a target="_blank" href="https://www.youtube.com/t/community_guidelines">Community Guidelines</a> before we received the government request.')],[new _.W("AE","Y2014H1","We received two requests from UAE authorities to remove two Google+ posts for violating Law no. 5 of 2012 regarding Prevention of IT crimes. The posts contained obscene language and political satire against members of the ruling family of the UAE.","We removed the posts locally from the UAE."), equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: 'We removed the video for violating YouTube\u2019s <a target="_blank" href="https://www.youtube.com/t/community_guidelines">Community Guidelines</a>.'),new _.W("TH","Y2010H2","We received a request from the Ministry of Information, Communication and Technology in Thailand to remove 43 pieces of content because they were mocking or criticizing the king in violation of Thai l\u00e8se-majest\u00e9 laws.","We restricted Thai users from accessing these videos."),new p2("US","Y2010H2","Six court orders resulted in the removal of 1,110 items from Google Groups relating to a case of continuous defamation against a man and his family."), equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: 'We terminated these accounts because they violated YouTube\u2019s <a target="_blank" href="https://www.youtube.com/t/community_guidelines">Community Guidelines</a>, and as a result approximately 640 videos were removed.'),new _.W("PK","Y2011H2",'We received a request from the Government of Pakistan\u2019s <a target="_blank" href="https://www.moitt.gov.pk/">Ministry of Information Technology</a> to remove six YouTube videos that satirized the Pakistan Army and senior politicians.',"We did not remove content in response to this request."), equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: Da:2,od:0});var VV=class{constructor(){this.id=`mat-tab-nav-panel-${aVa++}`}};VV.h=function(a){return new (a||VV)};VV.J=_.v({type:VV,l:[["mat-tab-nav-panel"]],sb:["role","tabpanel",1,"mat-mdc-tab-nav-panel"],mb:2,hb:function(a,b){a&2&&_.Ik("aria-labelledby",b.UIa)("id",b.id)},inputs:{id:"id"},Rb:["matTabNavPanel"],Zb:SV,F:1,G:0,D:function(a){a&1&&(_.Sl(),_.Tl(0))},Da:2,od:0});var WV=class{};WV.h=function(a){return new (a||WV)};WV.La=_.ke({type:WV});WV.Ka=_.wd({imports:[_.$F,OI,JI,kJ,$H,bI,OI]});var XV=class{};XV.h=function(a){return new (a||XV)};XV.La=_.ke({type:XV});XV.Ka=_.wd({Ya:[JV],imports:[_.$F,WV,_.EL]});_.YV=class{};var ZV=class{constructor(a){this.EQa=a}rD(){this.EQa.event(this.Sd,"click",void 0,this.label)}};ZV.h=function(a){return new (a||ZV)(_.F(_.YV))};ZV.Va=_.ne({type:ZV,l:[["","analytics-change",""]],hb:function(a,b){a&1&&_.Ol("click",function(){return b.rD()})},inputs:{Sd:["analytics-click","category"],label:["analytics-label","label"]}});var $V=class{};$V.h=function(a){return new (a||$V)};$V.La=_.ke({type:$V});$V.Ka=_.wd({});var dVa=new Je("googleAnalyticsTrackingId"),aW=class{constructor(a=""){this.S1a=a}event(a,b,c,d){a={event_category:a};"number"===typeof c&&(a.event_value=c);d&&(a.event_label=d);gtag("event",b,a)}};aW.h=function(a){return new (a||aW)(_.t(dVa))};aW.va=_.ud({ua:aW,ea:aW.h});_.bW=class{};_.bW.h=function(a){return new (a||_.bW)};_.bW.La=_.ke({type:_.bW});_.bW.Ka=_.wd({Ya:[{qa:_.YV,Jg:aW}],imports:[$V,$V]});var cW=class{constructor(){this.RR=window}};cW.h=function(a){return new (a||cW)};cW.va=_.ud({ua:cW,ea:cW.h});var eVa,Cia,fVa;eVa={Kla:0,Uka:1,0:"TWITTER",1:"FACEBOOK"};Cia=new Map([[0,"https://twitter.com/intent/tweet?url="],[1,"https://www.facebook.com/sharer/sharer.php?u="]]);fVa=new Map([[0,"Twitter"],[1,"Facebook"]]);_.dW=class{constructor(a){this.Bw=a;this.Fka="Social Action";this.PEa="Call to Action";this.YK=eVa;this.Aaa="Download report data"}V$(a){return fVa.get(a)}Tia(a){return ty(a,this.Bw.RR.location.href)}};_.dW.h=function(a){return new (a||_.dW)(_.F(cW))}; equals www.facebook.com (Facebook)
Source: chromecache_98.1.dr	String found in binary or memory: Da:2,od:0});var VV=class{constructor(){this.id=`mat-tab-nav-panel-${aVa++}`}};VV.h=function(a){return new (a||VV)};VV.J=_.v({type:VV,l:[["mat-tab-nav-panel"]],sb:["role","tabpanel",1,"mat-mdc-tab-nav-panel"],mb:2,hb:function(a,b){a&2&&_.Ik("aria-labelledby",b.UIa)("id",b.id)},inputs:{id:"id"},Rb:["matTabNavPanel"],Zb:SV,F:1,G:0,D:function(a){a&1&&(_.Sl(),_.Tl(0))},Da:2,od:0});var WV=class{};WV.h=function(a){return new (a||WV)};WV.La=_.ke({type:WV});WV.Ka=_.wd({imports:[_.$F,OI,JI,kJ,$H,bI,OI]});var XV=class{};XV.h=function(a){return new (a||XV)};XV.La=_.ke({type:XV});XV.Ka=_.wd({Ya:[JV],imports:[_.$F,WV,_.EL]});_.YV=class{};var ZV=class{constructor(a){this.EQa=a}rD(){this.EQa.event(this.Sd,"click",void 0,this.label)}};ZV.h=function(a){return new (a||ZV)(_.F(_.YV))};ZV.Va=_.ne({type:ZV,l:[["","analytics-change",""]],hb:function(a,b){a&1&&_.Ol("click",function(){return b.rD()})},inputs:{Sd:["analytics-click","category"],label:["analytics-label","label"]}});var $V=class{};$V.h=function(a){return new (a||$V)};$V.La=_.ke({type:$V});$V.Ka=_.wd({});var dVa=new Je("googleAnalyticsTrackingId"),aW=class{constructor(a=""){this.S1a=a}event(a,b,c,d){a={event_category:a};"number"===typeof c&&(a.event_value=c);d&&(a.event_label=d);gtag("event",b,a)}};aW.h=function(a){return new (a||aW)(_.t(dVa))};aW.va=_.ud({ua:aW,ea:aW.h});_.bW=class{};_.bW.h=function(a){return new (a||_.bW)};_.bW.La=_.ke({type:_.bW});_.bW.Ka=_.wd({Ya:[{qa:_.YV,Jg:aW}],imports:[$V,$V]});var cW=class{constructor(){this.RR=window}};cW.h=function(a){return new (a||cW)};cW.va=_.ud({ua:cW,ea:cW.h});var eVa,Cia,fVa;eVa={Kla:0,Uka:1,0:"TWITTER",1:"FACEBOOK"};Cia=new Map([[0,"https://twitter.com/intent/tweet?url="],[1,"https://www.facebook.com/sharer/sharer.php?u="]]);fVa=new Map([[0,"Twitter"],[1,"Facebook"]]);_.dW=class{constructor(a){this.Bw=a;this.Fka="Social Action";this.PEa="Call to Action";this.YK=eVa;this.Aaa="Download report data"}V$(a){return fVa.get(a)}Tia(a){return ty(a,this.Bw.RR.location.href)}};_.dW.h=function(a){return new (a||_.dW)(_.F(cW))}; equals www.twitter.com (Twitter)
Source: chromecache_98.1.dr	String found in binary or memory: Ih:"READ BLOG POST",eh:"https://www.blog.google/topics/google-europe/updating-our-right-be-forgotten-transparency-report/"},{Zc:"2018-04-23",heading:"Enforcing YouTube\u2019s Community Guidelines",content:Qz("On April 23, 2018, we published our first quarterly YouTube Community Guidelines enforcement report, providing data for Q4 of 2017. This report publicly shares aggregate data on our efforts to remove content that violates YouTube\u2019s Community Guidelines and provides insight into how we use a combination of machines and human flaggers to enforce our policies at scale."), equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: ["href","http://www.medien-in-die-schule.de/"]," Back in 2009, YouTube, together with local partners and under the patronship of Chancellor Merkel, first launched the '361 Grad Respekt' initiative, which ran multiple times (from 2010 under the patronship of the acting Family Minister) between 2009 and 2014 and was revived under the name of #NichtEgal in 2016 with two iterations (2016 & 2018). These initiatives aimed to foster respectful behavior both online and offline and encouraged young people to take a stand against hate and discrimination with video competitions and schools workshops. ", equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: ["href","https://www.youtube.com/static?gl=DE&template=terms"],["trTitle","Examples of complaints"]," Each reporting period, we collect a set of examples that better illustrate the decisions we have made regarding allegedly illegal content in order to paint a picture of the breadth of content covered by NetzDG and the types of content we are being asked to remove. ",["visualization","","name","Annotations",3,"config","dataState","deepLink","filterUpdate"],["trTitle","Total items reported",3,"value"], equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: ["trTitle","Industry association membership"]," YouTube is represented via Google in the following associations that are relevant to NetzDG: ",["href","https://www.fsm.de/de"],["href","https://www.eco.de/"],["href","https://www.sicher-im-netz.de/"],["href","https://www.bitkom.org/"]," The FSM and eco operate hotlines where consumers may call and file reports, which are then forwarded to our review teams for evaluation. In each case, we send detailed feedback about our decision to the reporting hotline. ", equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: a;this.xa=b;this.gh=new _.Ph(1);this.VZ=kVa;this.product="YOUTUBE";this.ula=0;this.Lla=1;this.qIa=2;this.Rh=sTa;this.NK="Removals under the Network Enforcement Law";this.BGa='The Network Enforcement Law (NetzDG) came into effect in Germany on October\n 1, 2017. The law requires an effective and transparent procedure to handle\n removal complaints that concern illegal content as defined under NetzDG and\n an obligation for social networks to publish a transparency report on a\n biannual basis. This report provides data on our organization and\n procedures, on the volume of complaints, and on the volume of removed\n content. The report also provides general information about our removal\n practices and policies.\n <p class="highlight-text"><strong>Note on current developments:</strong>\n <br><br>\n With two laws, <a href="https://www.bmj.de/SharedDocs/Gesetzgebungsverfahren/Dokumente/Bgbl_Bekaempfung_Rechtsextremismus_Hasskriminalitaet.pdf?__blob=publicationFile&v=3" target="_blank">the Act to Combat Right-Wing Extremism and Hate\n Crime of March 30, 2021</a> and the <a href="https://www.bmj.de/SharedDocs/Gesetzgebungsverfahren/Dokumente/Bgbl_NetzDG.pdf?__blob=publicationFile&v=2" target="_blank">Act to Amend the\n Network Enforcement Act of June 3, 2021</a>, the NetzDG underwent\n significant changes and additions. Central provisions of the amended NetzDG\n are now the subject of several court proceedings before the Cologne\n Administrative Court. In parallel proceedings for interim legal protection,\n the Cologne Administrative Court issued a temporary injunction and ruled\n that until a final decision is made in the corresponding main proceedings,\n Google Ireland Limited, as the provider of YouTube, may not be required to\n take any measures to comply with new obligations under Section 3a of the\n NetzDG (notification obligation) and Section 3b of the NetzDG (countermotion\n procedure).</p>'; equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: b,["href","https://support.google.com/youtube/contact/netzdg"],["href","https://www.youtube.com/t/impressum?hl=de&gl=DE"]," As a legal layperson, the average user will likely be overwhelmed when confronted with a complete portfolio of complex offenses, or even deterred from any reporting at all. The average user is unlikely to understand and cite relevant statutes of the StGB when submitting a legal NetzDG complaint. Moreover, some notified content may violate more than one of the listed offenses. For instance, a video that tries to recruit new members or supporters for a criminal or terrorist organization (\u00a7 129, 129a StGB) will usually also contain symbols like a flag, which may be punishable under \u00a7\u00a7 86, 86a StGB; it may also fulfill the offense of a preparation of a serious violent offense endangering the state according to \u00a7 89a StGB. These concerns \u2013 which have already been highlighted in previous reports \u2013 have been considerably reinforced by the changes introduced by the Act to Combat Right-Wing Extremism and Hate Crime. For example, a threat within the meaning of \u00a7 241 of the Criminal Code can also be made \u2018via third parties\u2019 if the disclosure to the addressee is encompassed by the perpetrator's intent. The criminal offenses of threat (\u00a7 126 StGB) and menace (\u00a7 241 StGB) therefore lack definiteness and selectivity, especially when the respective content is published on social networks. ", equals www.youtube.com (Youtube)
Source: chromecache_99.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=Ez(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=bb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},Hz=function(){var a=[],b=function(c){return Ga(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_98.1.dr	String found in binary or memory: content:Qz('In July 2012, <a href="https://transparency.twitter.com/">Twitter</a> begins to disclose information about how government requests affect freedom of information on the internet. Over the next year, <a href="https://www.microsoft.com/about/csr/transparencyhub/">Microsoft</a>, <a href="https://www.apple.com/privacy/transparency-reports/">Apple</a>, and <a href="https://govtrequests.facebook.com/about/">Facebook</a> follow, establishing transparency reporting as an industry-wide practice.')}, equals www.facebook.com (Facebook)
Source: chromecache_98.1.dr	String found in binary or memory: content:Qz('In July 2012, <a href="https://transparency.twitter.com/">Twitter</a> begins to disclose information about how government requests affect freedom of information on the internet. Over the next year, <a href="https://www.microsoft.com/about/csr/transparencyhub/">Microsoft</a>, <a href="https://www.apple.com/privacy/transparency-reports/">Apple</a>, and <a href="https://govtrequests.facebook.com/about/">Facebook</a> follow, establishing transparency reporting as an industry-wide practice.')}, equals www.twitter.com (Twitter)
Source: chromecache_128.1.dr	String found in binary or memory: function iR(a,c){sGa(a);var d=new hR(c,a.o);5==c?a.l.callback(d):(a.j.onload=h(),a.j.onerror=h(),hr(a.j),a.o>=a.D?a.l.callback(d):rGa(a))}function sGa(a){clearTimeout(a.v);a.v=null;clearTimeout(a.A);a.A=null}oGa.prototype.getStatus=function(){return this.l&&1!=this.l.l?this.l.getValue():new hR(1,this.o)};var tGa=uj(["https://www.youtube.com/iframe_api"]);function jR(a){a=void 0===a?this.B:a;this.j=0;this.v=a;this.l=this.v();this.A=3;this.o=[]}function uGa(a){for(var c=0;c<a.o.length;c++)a.o[c].callback(a.l.getStatus());a.o=[]}function vGa(a,c){2===a.j&&c.callback(a.l.getStatus());a.o.push(c);1!==a.j&&(a.l=a.v(),a.j=1,ju(qGa(a.l),function(d){2!==d.Fe()&&(a.j=3,uGa(a))}))}jR.prototype.B=function(){return new oGa(this.A)};jR.ia=function(){return zE(jR)};var pGa=Yp(tGa); equals www.youtube.com (Youtube)
Source: chromecache_99.1.dr	String found in binary or memory: f||g.length||h.length))return;var n={Vg:d,Tg:e,Ug:f,Ah:g,Bh:h,ze:m,ib:b},p=z.YT,q=function(){JB(n)};if(p)return p.ready&&p.ready(q),b;var r=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){r&&r();q()};G(function(){for(var t=B.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(MB(w,"iframe_api")||MB(w,"player_api"))return b}for(var x=B.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!DB&&KB(x[A],n.ze))return Jc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: g=_.Ml(g);return[[3,"trTitle","longDescription"],["trTitle","Removing content from YouTube based on the Network Enforcement Law"],a,["href","https://www.gesetze-im-internet.de/netzdg/index.html"],["href","https://www.youtube.com/intl/de/yt/about/policies/#community-guidelines"]," The Act to Combat Right-Wing Extremism and Hate Crime expanded the criminal offenses listed in \u00a7 1 (3) of the NetzDG content-wise. For example, the offense of disturbing public peace by threatening to commit offenses (\u00a7 126) and the offense of rewarding and approving offenses (\u00a7 140) have been amended to now also include the offense of causing dangerous bodily harm (\u00a7 224). Furthermore, \u00a7189 StGB (defiling memory of dead) was added to the criminal offenses listed in the NetzDG on February 1, 2022. These extensions and additions introduce further indeterminate legal terms into the checks to be carried out, which additionally increase the risk of incorrect decisions. ", equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: new _.W("CN","Y2012H1","We received a request from a provincial land bureau to remove a search result for linking to a site that allegedly defames a government official.","We did not remove content in response to this request."),new p2("DE","Y2012H1",'<p>In response to a court order, we removed eight search results for linking to sites allegedly defaming a politician\u2019s wife.</p><p> Separately, we received a court order to remove 111 search results for linking to sites that allegedly contain trademark infringing material. We did not remove content in response to this request because the specified URLs did not relate to the reason for removal cited in the court order.</p><p> We received a request from the <a target="_blank" href="https://www.bundespruefstelle.de/bpjm/meta/en">BPjM</a> (Federal Department for Media Harmful to Young Persons) to remove a YouTube video that contained explicit language in reference to the police. We restricted the YouTube video from view in accordance with local laws. We also received two requests from the youth protection agency <a target="_blank" href="http://jugendschutz.net/">Jugendschutz.net</a> to remove 316 videos for allegedly violating the <a target="_blank" href="https://www.gesetze-im-internet.de/juschg/index.html">German Children and Young Persons Act</a> as well as other local laws. We restricted the majority of the videos from view in Germany in accordance with local laws.'), equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: new _.W("ES","Y2011H2",'We received 14 requests from the <a target="_blank" href="https://www.agpd.es/">Spanish Data Protection Authority</a> to remove 270 search results that linked to blogs and sites referencing individuals and public figures. The Spanish Data Protection Authority also ordered the removal of three blogs published on Blogger and three videos hosted on YouTube.',"We did not remove content in response to these requests."),new _.W("GB","Y2011H2","We received a request from the UK\u2019s Association of Chief Police Officers to remove five user accounts that allegedly promoted terrorism.", equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: new _.W("HK","Y2012H1",'We received a request from the <a target="_blank" href="https://www.customs.gov.hk/">Hong Kong Customs and Excise Department </a> to remove 370 YouTube videos for containing allegedly copyright infringing material.',"We did not remove content in response to this request because the notice was incomplete."),new p2("IN","Y2012H1","In response to a court order, we removed 360 search results. The search results linked to 360 web pages that contained adult videos that allegedly violated an individual\u2019s personal privacy."), equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: new _.W("PL","Y2011H2",'We received a request from the <a target="_blank" href="https://www.parp.gov.pl/">Polish Agency for Enterprise Development</a> to remove a search result that criticized the agency as well as eight more that linked to it.',"We did not remove content in response to this request."),new _.W("TH","Y2011H2","We received four requests from the Ministry of Information, Communication and Technology in Thailand to remove 149 YouTube videos for allegedly insulting the monarchy in violation of Thailand\u2019s l\u00e8se-majest\u00e9 law.", equals www.youtube.com (Youtube)
Source: chromecache_98.1.dr	String found in binary or memory: new p2("DE","Y2010H1","A substantial number of German removal requests resulted from court orders that related to defamation in search results."),new p2("KR","Y2010H1",'The majority of the more than 15,000 individual URLs that Korean government agencies sought to be removed were search results on <ph name="LINK_START"><a target="_blank" href="http://www.google.co.kr/">google.co.kr<ph name="LINK_END"></a> that contained RRNs.'),new _.W("KZ","Y2010H1","We received a request from a local ministry in Kazakhstan to remove the YouTube channel for a TV channel supportive of the opposition.", equals www.youtube.com (Youtube)
Source: chromecache_92.1.dr, chromecache_99.1.dr, chromecache_119.1.dr	String found in binary or memory: return b}AB.F="internal.enableAutoEventOnTimer";var nc=ca(["data-gtm-yt-inspected-"]),BB=["www.youtube.com","www.youtube-nocookie.com"],CB,DB=!1; equals www.youtube.com (Youtube)
Source: chromecache_99.1.dr	String found in binary or memory: var SA=function(a,b,c,d,e){var f=Px("fsl",c?"nv.mwt":"mwt",0),g;g=c?Px("fsl","nv.ids",[]):Px("fsl","ids",[]);if(!g.length)return!0;var h=Lx(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Vw(h,Ww(b, equals www.facebook.com (Facebook)

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable / 403 Forbidden)

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1572Date: Thu, 12 Oct 2023 15:01:16 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

URLs found in memory or binary data

Source: chromecache_114.1.dr	String found in binary or memory: http://...
Source: chromecache_98.1.dr	String found in binary or memory: http://angular.io
Source: chromecache_98.1.dr	String found in binary or memory: http://government.ru/eng/power/86/
Source: chromecache_98.1.dr	String found in binary or memory: http://jugendschutz.net/
Source: chromecache_98.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_98.1.dr	String found in binary or memory: http://www.google.co.kr/
Source: chromecache_101.1.dr	String found in binary or memory: http://www.google.com/safebrowsing/report_error/?tpl=websearch&url=https://onedrvshare-dataprote
Source: chromecache_98.1.dr	String found in binary or memory: http://www.medien-in-die-schule.de/
Source: chromecache_98.1.dr	String found in binary or memory: http://www.weitklick.de
Source: chromecache_128.1.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_98.1.dr	String found in binary or memory: https://adstransparency.google.com/political
Source: chromecache_141.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_98.1.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_128.1.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_98.1.dr	String found in binary or memory: https://blog.youtube/news-and-events/faster-removals-and-tackling-comments/
Source: chromecache_98.1.dr	String found in binary or memory: https://brasil.googleblog.com/2014/06/adeus-ao-orkut.html
Source: chromecache_92.1.dr, chromecache_99.1.dr, chromecache_119.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_133.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_133.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_98.1.dr	String found in binary or memory: https://cloud.google.com/security/transparency/govt-requests/
Source: chromecache_98.1.dr	String found in binary or memory: https://curia.europa.eu/jcms/upload/docs/application/pdf/2014-05/cp140070en.pdf
Source: chromecache_98.1.dr	String found in binary or memory: https://cyber.law.harvard.edu
Source: chromecache_133.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_133.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_133.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_134.1.dr	String found in binary or memory: https://developers.google.com/web/fundamentals/security/hacked
Source: chromecache_98.1.dr	String found in binary or memory: https://europe.googleblog.com/2015/07/implementing-european-not-global-right.html
Source: chromecache_143.1.dr, chromecache_95.1.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_128.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:300
Source: chromecache_143.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v58/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RF
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_106.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_149.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialiconsextended/v149/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVE9eOcEg.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVFNeOcEg.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v19/pxiDypQkot1TnFhsFMOfGShVGdeOcEg.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_104.1.dr, chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_104.1.dr, chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_104.1.dr, chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_104.1.dr, chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_104.1.dr, chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_104.1.dr, chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_104.1.dr, chromecache_95.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_98.1.dr	String found in binary or memory: https://g.co/ng/security#xss)
Source: chromecache_98.1.dr	String found in binary or memory: https://g.co/research/rtbf_report
Source: chromecache_98.1.dr	String found in binary or memory: https://germany.googleblog.com/2018/07/update-netzdg.html
Source: chromecache_98.1.dr	String found in binary or memory: https://github.com/cartant/rxjs-etc
Source: chromecache_98.1.dr	String found in binary or memory: https://gmail.googleblog.com/2008/07/making-security-easier.html
Source: chromecache_98.1.dr	String found in binary or memory: https://gmail.googleblog.com/2010/01/default-https-access-for-gmail.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleblog.blogspot.com/2009/12/meaning-of-open.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleblog.blogspot.com/2010/04/greater-transparency-around-government.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleblog.blogspot.com/2010/06/update-on-china.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleblog.blogspot.com/2011/06/updated-and-more-detailed-transparency.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleblog.blogspot.com/2012/01/dont-censor-web.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleblog.blogspot.com/2013/03/transparency-report-shedding-more-light.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleblog.blogspot.com/2013/06/asking-us-government-to-allow-google-to.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleblog.blogspot.com/2013/06/transparency-report-making-web-safer.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleblog.blogspot.com/2013/06/what.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleblog.blogspot.com/2014/03/staying-at-forefront-of-email-security.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleblog.blogspot.com/2014/06/transparency-report-protecting-emails.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleblog.blogspot.com/2015/06/privacy-security-tools-improvements.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googleindia.blogspot.com/2014/09/preserving-orkuts-history.html
Source: chromecache_134.1.dr	String found in binary or memory: https://googleonlinesecurity.blogspot.com/2009/10/show-me-malware.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googlepolicyeurope.blogspot.com/2015/07/implementing-european-not-global-right.html
Source: chromecache_98.1.dr	String found in binary or memory: https://googlepublicpolicy.blogspot.com/2010/09/tools-to-visualize-access-to.html
Source: chromecache_98.1.dr	String found in binary or memory: https://impactchallenge.withgoogle.com/safety2019
Source: chromecache_128.1.dr	String found in binary or memory: https://itunes.apple.com/app/apple-store/id842842640?pt=9008&ct=docs_mo&mt=8
Source: chromecache_128.1.dr	String found in binary or memory: https://itunes.apple.com/app/apple-store/id842849113?pt=9008&ct=sheets_mo&mt=8
Source: chromecache_128.1.dr	String found in binary or memory: https://itunes.apple.com/app/apple-store/id879478102?pt=9008&ct=slides_mo&mt=8
Source: chromecache_98.1.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?key=%
Source: chromecache_101.1.dr	String found in binary or memory: https://onedrvshare-dataprotect.nl/
Source: chromecache_98.1.dr	String found in binary or memory: https://opensource.org/licenses/ISC
Source: chromecache_92.1.dr, chromecache_99.1.dr, chromecache_119.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_98.1.dr	String found in binary or memory: https://papers.ssrn.com/sol3/papers.cfm?abstract_id=2755628
Source: chromecache_133.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_114.1.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_126.1.dr	String found in binary or memory: https://policies.google.com/privacy?hl=en
Source: chromecache_114.1.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_98.1.dr	String found in binary or memory: https://policies.google.com/terms/information-requests
Source: chromecache_126.1.dr	String found in binary or memory: https://policies.google.com/terms?hl=en
Source: chromecache_98.1.dr	String found in binary or memory: https://protectingchildren.google/
Source: chromecache_98.1.dr	String found in binary or memory: https://publicpolicy.googleblog.com/2014/09/transparency-report-government-demands_15.html
Source: chromecache_133.1.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_134.1.dr	String found in binary or memory: https://safebrowsing.google.com/
Source: chromecache_134.1.dr	String found in binary or memory: https://safebrowsing.google.com;target;_blank;rel;noopener
Source: chromecache_134.1.dr	String found in binary or memory: https://search.google.com/search-console/;target;_blank;rel;noopener
Source: chromecache_98.1.dr	String found in binary or memory: https://security.googleblog.com/2014/06/making-end-to-end-encryption-easier-to.html
Source: chromecache_98.1.dr	String found in binary or memory: https://security.googleblog.com/2016/03/securing-web-together_15.html
Source: chromecache_98.1.dr	String found in binary or memory: https://services.google.com/fh/files/blogs/government_access_technical_whitepaper.pdf
Source: chromecache_98.1.dr	String found in binary or memory: https://services.google.com/fh/files/misc/supplemental_information_geofence_warrants_united_states.p
Source: chromecache_99.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_99.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_141.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_98.1.dr	String found in binary or memory: https://storage.googleapis.com/gweb-uniblog-publish-prod/documents/google_US2016election_work_going_
Source: chromecache_98.1.dr	String found in binary or memory: https://storage.googleapis.com/transparencyreport-userdata/supplemental_information_geofence_warrant
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com
Source: chromecache_126.1.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/$
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/chrome/answer/96817?ref_topic=3421433
Source: chromecache_128.1.dr	String found in binary or memory: https://support.google.com/docs/?p=add_animations
Source: chromecache_126.1.dr	String found in binary or memory: https://support.google.com/docs/answer/1696717?hl=en
Source: chromecache_126.1.dr	String found in binary or memory: https://support.google.com/drive/?hl=en
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/legal/topic/4558877
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/legal/troubleshooter/1114905#ts=1349036
Source: chromecache_133.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_133.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_133.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_133.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/transparencyreport/answer/10330933#zippy=what-is-a-cybertipline-report-an
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/transparencyreport/answer/7380434?ref_topic=7380433/#FISA
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/transparencyreport/answer/7380434?ref_topic=7380433/#NSL
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/174084
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/185111
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/2801927
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/2801939
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/2801964
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/2801999
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/2802002
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/2802008
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/2802167
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/2802268
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/6345162?hl=en
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/7300965
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/7458465
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/7555064?p=Netz_DG
Source: chromecache_98.1.dr	String found in binary or memory: https://support.google.com/youtube/contact/netzdg
Source: chromecache_141.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_92.1.dr, chromecache_99.1.dr, chromecache_119.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_98.1.dr	String found in binary or memory: https://topcontributor.withgoogle.com/
Source: chromecache_98.1.dr	String found in binary or memory: https://transparency.google/
Source: chromecache_98.1.dr	String found in binary or memory: https://transparency.twitter.com/
Source: chromecache_98.1.dr	String found in binary or memory: https://transparencyreport.google.com/android-security/overview/
Source: chromecache_98.1.dr	String found in binary or memory: https://transparencyreport.google.com/child-sexual-abuse-material/
Source: chromecache_98.1.dr	String found in binary or memory: https://transparencyreport.google.com/government-removals/overview/
Source: chromecache_98.1.dr	String found in binary or memory: https://transparencyreport.google.com/report-downloads
Source: chromecache_98.1.dr	String found in binary or memory: https://transparencyreport.google.com/report-downloads/
Source: chromecache_114.1.dr	String found in binary or memory: https://transparencyreport.google.com/safe-browsing/overview
Source: chromecache_98.1.dr	String found in binary or memory: https://transparencyreport.google.com/safe-browsing/search;target;_blank;rel;noopener
Source: chromecache_98.1.dr	String found in binary or memory: https://transparencyreport.google.com/user-data/overview
Source: chromecache_98.1.dr	String found in binary or memory: https://transparencyreport.google.com/youtube-policy/appeals?hl=en
Source: chromecache_98.1.dr	String found in binary or memory: https://transparencyreport.google.com/youtube-policy/overview
Source: chromecache_98.1.dr	String found in binary or memory: https://transparencyreport.google.com/youtube-policy/removals
Source: chromecache_98.1.dr	String found in binary or memory: https://twitter.com/intent/tweet?url=
Source: chromecache_98.1.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_98.1.dr	String found in binary or memory: https://web.dev/enable-https/
Source: chromecache_98.1.dr	String found in binary or memory: https://web.dev/enable-https/;target;_blank;rel;noopener
Source: chromecache_98.1.dr	String found in binary or memory: https://web.dev/why-https-matters/
Source: chromecache_98.1.dr	String found in binary or memory: https://web.dev/why-https-matters/;target;_blank;rel;noopener
Source: chromecache_98.1.dr	String found in binary or memory: https://www.agpd.es/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.bitkom.org/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.blog.google/topics/google-europe/updating-our-right-be-forgotten-transparency-report/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.blueberry.io)
Source: chromecache_98.1.dr	String found in binary or memory: https://www.bmj.de/SharedDocs/Gesetzgebungsverfahren/Dokumente/Bgbl_Bekaempfung_Rechtsextremismus_Ha
Source: chromecache_98.1.dr	String found in binary or memory: https://www.bmj.de/SharedDocs/Gesetzgebungsverfahren/Dokumente/Bgbl_NetzDG.pdf?__blob=publicationFil
Source: chromecache_98.1.dr	String found in binary or memory: https://www.bundespruefstelle.de/bpjm/meta/en
Source: chromecache_98.1.dr	String found in binary or memory: https://www.customs.gov.hk/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.eco.de/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.fsm.de/de
Source: chromecache_98.1.dr	String found in binary or memory: https://www.fsm.de/de/netzdg
Source: chromecache_98.1.dr	String found in binary or memory: https://www.fsm.de/files/2022/11/netzdg0812022_voe.pdf
Source: chromecache_98.1.dr	String found in binary or memory: https://www.fsm.de/files/2022/11/netzdg0892022_voe.pdf
Source: chromecache_98.1.dr	String found in binary or memory: https://www.fsm.de/sites/default/files/netzdg0552021_voe.pdf
Source: chromecache_98.1.dr	String found in binary or memory: https://www.gesetze-im-internet.de/juschg/index.html
Source: chromecache_98.1.dr	String found in binary or memory: https://www.gesetze-im-internet.de/netzdg/BJNR335210017.html
Source: chromecache_98.1.dr	String found in binary or memory: https://www.gesetze-im-internet.de/netzdg/index.html
Source: chromecache_92.1.dr, chromecache_119.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_141.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_141.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_141.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_98.1.dr	String found in binary or memory: https://www.google.cn/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.google.cn/landing/cnexp/indexd.html
Source: chromecache_98.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_98.1.dr	String found in binary or memory: https://www.google.com.hk/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.google.com/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.google.com/about?utm_source=transparencyreport.google.com&utm_medium=referral&utm_campai
Source: chromecache_141.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_133.1.dr, chromecache_128.1.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_98.1.dr	String found in binary or memory: https://www.google.com/policies/privacy/
Source: chromecache_114.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?hl=en
Source: chromecache_128.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&render=
Source: chromecache_130.1.dr, chromecache_133.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_134.1.dr	String found in binary or memory: https://www.google.com/safetycenter/;target;_blank;rel;noopener
Source: chromecache_126.1.dr, chromecache_98.1.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_92.1.dr, chromecache_99.1.dr, chromecache_119.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_141.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_114.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=UA-150292050-1
Source: chromecache_98.1.dr	String found in binary or memory: https://www.grb.or.kr/english/Default.aspx
Source: chromecache_133.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/recaptcha__.
Source: chromecache_98.1.dr	String found in binary or memory: https://www.gstatic.com/charts
Source: chromecache_98.1.dr	String found in binary or memory: https://www.gstatic.com/charts/regioncoder/0/
Source: chromecache_126.1.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_147.1.dr, chromecache_130.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/lLirU0na9roYU3wDDisGJEVT/recaptcha__en.js
Source: chromecache_98.1.dr	String found in binary or memory: https://www.gstatic.com/transparencyreport/additional_reports.svg)
Source: chromecache_98.1.dr	String found in binary or memory: https://www.gstatic.com/transparencyreport/content_removal_reports.svg)
Source: chromecache_98.1.dr	String found in binary or memory: https://www.gstatic.com/transparencyreport/masthead_background.svg)
Source: chromecache_98.1.dr	String found in binary or memory: https://www.gstatic.com/transparencyreport/security_and_privacy_reports.svg)
Source: chromecache_126.1.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/$
Source: chromecache_98.1.dr	String found in binary or memory: https://www.hilfe-info.de/WebS/hilfeinfo/DE/Merkblaetter/37-merkblatt_strafanzeige.html#Anzeige
Source: chromecache_98.1.dr	String found in binary or memory: https://www.justice.gov/criminal-ccips/file/1017511/download
Source: chromecache_98.1.dr	String found in binary or memory: https://www.lumendatabase.org
Source: chromecache_99.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog/mc/collect
Source: chromecache_98.1.dr	String found in binary or memory: https://www.missingkids.org/gethelpnow/cybertipline
Source: chromecache_98.1.dr	String found in binary or memory: https://www.moitt.gov.pk/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.nytimes.com/2006/01/20/technology/20google.html
Source: chromecache_98.1.dr	String found in binary or memory: https://www.parp.gov.pl/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.sicher-im-netz.de/
Source: chromecache_98.1.dr	String found in binary or memory: https://www.theguardian.com/world/2013/jun/06/nsa-phone-records-verizon-court-order
Source: chromecache_98.1.dr	String found in binary or memory: https://www.un.org/en/universal-declaration-human-rights/index.html
Source: chromecache_99.1.dr, chromecache_128.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_98.1.dr	String found in binary or memory: https://www.youtube.com/intl/de/yt/about/policies/#community-guidelines
Source: chromecache_98.1.dr	String found in binary or memory: https://www.youtube.com/static?gl=DE&template=terms
Source: chromecache_98.1.dr	String found in binary or memory: https://www.youtube.com/t/community_guidelines
Source: chromecache_98.1.dr	String found in binary or memory: https://www.youtube.com/t/impressum?hl=de&gl=DE
Source: chromecache_98.1.dr	String found in binary or memory: https://www.youtube.com/yt/about/policies/
Source: chromecache_98.1.dr	String found in binary or memory: https://youtube.googleblog.com/2018/04/more-information-faster-removals-more.html

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2023-10-04-09

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 72.247.100.147:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49819 version: TLS 1.2

System Summary

Creates files inside the system directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_3652_1604664428

Jump to behavior

Classification label

Source: classification engine

Classification label: mal48.win@27/63@28/15

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1816,i,8509668645528241,12350335195615003925,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/presentation/d/e/2PACX-1vTikKHOuCMRAQnyuWl6bkSnoWXxMBgQaYb36E7fDJr4AK0ZL-qckfBYFvBPAnCFm1lkRHLFNf4FyxqO/pub?start=false&loop=false&delayms=3000&slide=id.p
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2728 --field-trial-handle=1816,i,8509668645528241,12350335195615003925,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6056 --field-trial-handle=1816,i,8509668645528241,12350335195615003925,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1816,i,8509668645528241,12350335195615003925,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2728 --field-trial-handle=1816,i,8509668645528241,12350335195615003925,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6056 --field-trial-handle=1816,i,8509668645528241,12350335195615003925,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected