Edit tour

Windows Analysis Report
https://srtuiu.buzz/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJsWjNVMFZLTVV4SWRuQnpOVTFzYW1oNlJWRT0mdWlkPVVTRVIyMDA2MjAyNFVOSVFVRTA5NDgwNjIwMjAyMDI0MjAyNDA2MjA0ODA5MjA=N0123N%5BEMail%5D

Overview

General Information

Sample URL:	https://srtuiu.buzz/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJsWjNVMFZLTVV4SWRuQnpOVTFzYW1oNlJWRT0mdWlkPVVTRVIyMDA2MjAyNFVOSVFVRTA5NDgwNjIwMjAyMDI0MjAyNDA2MjA0ODA5MjA=N0123N%5BEMail%5D
Analysis ID:	1467147
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected suspicious crossdomain redirect

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1792 --field-trial-handle=2012,i,125323118336348657,5182602862392498540,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7084 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://srtuiu.buzz/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJsWjNVMFZLTVV4SWRuQnpOVTFzYW1oNlJWRT0mdWlkPVVTRVIyMDA2MjAyNFVOSVFVRTA5NDgwNjIwMjAyMDI0MjAyNDA2MjA0ODA5MjA=N0123N%5BEMail%5D" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /gen_204?s=webhp&t=cap&atyp=csi&ei=HYKFZpXiHv2Sxc8PyI61iAc&rt=wsrt.1102,cbs.68,cbt.949,hst.67&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"Content-Type: text/plain;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.google.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIkqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6Hw6N9nniAsld8sx8LP--7p4acXF_Q3XwjNlSgIW9cht96uKlutYupE; NID=515=dM-H7oxYW-8mbx9d4xSkcISr-fpgBvd16kQqlVEspNSOePWph1wEA7o1watb2y6mNUa6i_Z7r935xsiNF7pMpKi9bXzjc_S_XnY9p74wNBd_FpZJCwRQqulyBagY5XCYSQ2jxH0tlysVluH9_OB2nW58uvGTTTio4FWsfZxEMqo

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1565Date: Wed, 03 Jul 2024 16:53:37 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: https://google.com/404/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	HTTP Parser: No favicon
Source: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	HTTP Parser: No favicon
Source: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	HTTP Parser: No favicon
Source: https://2542116.fls.doubleclick.net/activityi;dc_pre=CMP5gf2qi4cDFY8W-QAdw68NkA;src=2542116;type=psmith;cat=googl0i8;ord=7294119667818;npa=0;auiddc=1864650459.1720025675;ps=1;pcor=713445238;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4710v9181639514z86906245za201zb6906245;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fstore.google.com%2FUS%2F%3Futm_source%3Dhp_header%26utm_medium%3Dgoogle_ooo%26utm_campaign%3DGS100042%26hl%3Den-US?	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.8:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.8:49723 version: TLS 1.2

Source:	Binary string: 0,m;m=h[k];k++)if(m.name==g\|\|m.id==g){h=m;break a}h=null}e=(e.tagName=="TEXTAREA"\|\|e.tagName=="SELECT"\|\|e.tagName=="A")&&!e.disabled;!h\|\|h.disabled\|\|e\|\|(f=g)}f&&d&&(c=!0,b=this.dispatchEvent(new Vcb(f,String(d.get(f)))))}else e!=this.bP\|\|a.keyCode!=32&&a.key!=" "\|\|Wcb(this);if(b\|\|c)a.stopPropagation(),a.preventDefault();b&&this.setVisible(!1)};_.pdb=function(a,b,c){var d=0,e=function(){d=0};return function(f){d\|\|(d=_.ba.setTimeout(e,b),a.apply(c,arguments))}}; source: chromecache_438.2.dr
Source:	Binary string: var Ynb;_.Gt=function(a,b,c){if(a){var d=a[_.EMa];if(d instanceof _.rnb)return new _.Yo(d,b,c);if(a=_.$c(a,"ved"))return new _.Yo(a,b,c)}};Ynb=function(a){this.Ea=_.n(a)};_.A(Ynb,_.q);var Znb=function(){};Znb.prototype.ka=function(a,b){return _.QNa(_.ONa(new _.Zo,a.Qc()),b.ka)};Znb.prototype.Da=function(){return new _.Xnb};Znb.prototype.wa=function(){return new Ynb};var $nb=function(a,b,c,d){a=new _.Isa(a,b\|\|"0");c&&_.dZa(a,c);d!==void 0&&(a.wa=Math.max(d,1E3));this.ka=a.build();c=_.uia();c!=null&&(this.ka.O4=c);c=_.Vc("cfb2h");c.Lb()&&(c=c.toString(),d=_.ZYa(this.ka.ka),_.De(d,7,c))};_.l=$nb.prototype;_.l.getInstance=function(){return this.ka};_.l.dispatch=function(a){this.ka.dispatch(a)};_.l.flush=function(a,b){this.ka.flush(a,b)};_.l.Heb=function(a){this.ka.Ua=a};_.l.Ieb=function(a){var b=this.ka;b.Ya=a&&b.Ka};_.l.pDb=function(a){this.ka.Qa=a};_.ff(_.UVa);_.aob=function(a){_.In.call(this,a.Oa);a=a.service.configuration;var b=a.b9\|\|-1;this.ka=a.transport\|\|new $nb(b,a.aG\|\|"0",a.oa,a.Za);this.ka.pDb(a.wa);this.ka.Ieb(!1);this.ka.Heb(!1);this.oa=a.Qa\|\|new Znb};_.A(_.aob,_.In);_.aob.Va=_.In.Va;_.aob.Ia=function(){return{service:{configuration:_.Qnb}}};_.Kn(_.oTa,_.aob); source: chromecache_438.2.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_326.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=Q.length,ma=0;ma<oa;ma++)if(!u&&c(Q[ma],E.xe)){$I("https://www.youtube.com/iframe_api");u=!0;break}})}}else I(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_522.2.dr, chromecache_326.2.dr, chromecache_499.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Tj:function(){e=Db()},pd:function(){d()}}};var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_420.2.dr	String found in binary or memory: _.N9=function(a,b,c,d,e,f,g,h,k,l,m,n,q,r){const v=a&&a.Pw;_.aZd(a,b,_.X(w=>{w.Ea("iVsCGf");_.vpc(w,a);w.Fa();var y=w.Fo();y&&(y.nextSibling!=null&&y.nextSibling.nodeType===Node.COMMENT_NODE?y.nextSibling.textContent=" Set up schema for SEO ":y.appendChild(document.createComment(" Set up schema for SEO ")),w.Yx());y="";w.open("script","lnWwIe");w.Aa(bZd\|\|(bZd=["type","application/ld+json"]));v&&w.Ca("nonce",_.xB(v));w.wa();y+='{"@context": "https://schema.org", "@id": "https://store.google.com/#organization", "@type": "Organization", "name": "Google Store", "url": "https://store.google.com/", "parentOrganization": {"@context": "https://schema.org", "@id": "https://www.google.com/#organization", "@type": "parentOrganization", "name": "Google", "url": "https://www.google.com/"}, "sameAs": [ "https://en.wikipedia.org/wiki/Google_Store", "https://www.youtube.com/c/googlenest", "https://www.youtube.com/c/madebygoogle", "https://www.instagram.com/madebygoogle/", "https://twitter.com/madebygoogle" ]}';w.Fo()&& equals www.twitter.com (Twitter)
Source: chromecache_420.2.dr	String found in binary or memory: _.N9=function(a,b,c,d,e,f,g,h,k,l,m,n,q,r){const v=a&&a.Pw;_.aZd(a,b,_.X(w=>{w.Ea("iVsCGf");_.vpc(w,a);w.Fa();var y=w.Fo();y&&(y.nextSibling!=null&&y.nextSibling.nodeType===Node.COMMENT_NODE?y.nextSibling.textContent=" Set up schema for SEO ":y.appendChild(document.createComment(" Set up schema for SEO ")),w.Yx());y="";w.open("script","lnWwIe");w.Aa(bZd\|\|(bZd=["type","application/ld+json"]));v&&w.Ca("nonce",_.xB(v));w.wa();y+='{"@context": "https://schema.org", "@id": "https://store.google.com/#organization", "@type": "Organization", "name": "Google Store", "url": "https://store.google.com/", "parentOrganization": {"@context": "https://schema.org", "@id": "https://www.google.com/#organization", "@type": "parentOrganization", "name": "Google", "url": "https://www.google.com/"}, "sameAs": [ "https://en.wikipedia.org/wiki/Google_Store", "https://www.youtube.com/c/googlenest", "https://www.youtube.com/c/madebygoogle", "https://www.instagram.com/madebygoogle/", "https://twitter.com/madebygoogle" ]}';w.Fo()&& equals www.youtube.com (Youtube)
Source: chromecache_385.2.dr	String found in binary or memory: a.oa.observe(c.previousElementSibling?.previousElementSibling),c.previousElementSibling&&a.oa.observe(c.previousElementSibling),c.previousElementSibling&&a.oa.observe(c))})},Z0=class extends _.kp{static Sa(){return{service:{window:_.Zo},jsdata:{jT:_.ww}}}constructor(a){super(a.Oa);this.Ka=[_.If("https://storage.googleapis.com/"),_.If("https://storage.googleapis.com/%path"),_.If("https://www.youtube.com/")];this.oa=this.Ha=this.Ja=this.Ba=null;this.Qa=[_.If("mannequin/"),_.If("modules/"),_.If("lottie.min.js"), equals www.youtube.com (Youtube)
Source: chromecache_528.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=nA(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Ob(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},qA=function(){var a=[],b=function(c){return tb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_522.2.dr, chromecache_499.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|k.length))return;var n={Rg:d,Pg:e,Qg:f,Fh:g,Gh:k,xe:m,Bb:b},p=F.YT,q=function(){LC(n)};if(p)return p.ready&&p.ready(q),b;var r=F.onYouTubeIframeAPIReady;F.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(OC(w,"iframe_api")\|\|OC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!FC&&MC(x[B],n.xe))return Bc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_408.2.dr	String found in binary or memory: lZb={key:"imprint",Sg:"imprint",xf:!0,url:"https://www.google.%1/contact/impressum.html",jd:void 0};VY={key:"sustainability",Sg:"sustainability_url",xf:!1,url:"/magazine/sustainability",jd:void 0};WY={key:"twitter",xf:!0,url:"https://twitter.com/madebygoogle",size:"0 0 24 24"};XY={key:"instagram",xf:!0,url:"https://instagram.com/madebygoogle",size:"0 0 48 48"};YY={key:"facebook",xf:!0,url:"https://facebook.com/madebygoogle",size:"0 0 18 18"}; equals www.facebook.com (Facebook)
Source: chromecache_408.2.dr	String found in binary or memory: lZb={key:"imprint",Sg:"imprint",xf:!0,url:"https://www.google.%1/contact/impressum.html",jd:void 0};VY={key:"sustainability",Sg:"sustainability_url",xf:!1,url:"/magazine/sustainability",jd:void 0};WY={key:"twitter",xf:!0,url:"https://twitter.com/madebygoogle",size:"0 0 24 24"};XY={key:"instagram",xf:!0,url:"https://instagram.com/madebygoogle",size:"0 0 48 48"};YY={key:"facebook",xf:!0,url:"https://facebook.com/madebygoogle",size:"0 0 18 18"}; equals www.twitter.com (Twitter)
Source: chromecache_440.2.dr	String found in binary or memory: lf=u(["https://sandbox.google.com/tools/feedback/"]),mf=u(["https://www.google.cn/tools/feedback/"]),nf=u(["https://help.youtube.com/tools/feedback/"]),of=u(["https://asx-frontend-staging.corp.google.com/inapp/"]),pf=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),qf=u(["https://localhost.corp.google.com/inapp/"]),rf=u(["https://localhost.proxy.googlers.com/inapp/"]),sf=S(Ue),tf=[S(Ve),S(We)],uf=[S(Xe),S(Ye),S(Ze),S($e),S(af),S(bf),S(cf),S(df),S(ef),S(ff)],vf=[S(gf),S(hf)],wf= equals www.youtube.com (Youtube)
Source: chromecache_315.2.dr, chromecache_322.2.dr, chromecache_363.2.dr, chromecache_528.2.dr	String found in binary or memory: return b}BC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_528.2.dr	String found in binary or memory: var QB=function(a,b,c,d,e){var f=Lz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Lz("fsl","nv.ids",[]):Lz("fsl","ids",[]);if(!g.length)return!0;var k=Qz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!ty(k,uy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: srtuiu.buzz
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ogs.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: about.google
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: store.google.com
Source: global traffic	DNS traffic detected: DNS query: 2542116.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: mail.google.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1792 --field-trial-handle=2012,i,125323118336348657,5182602862392498540,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://srtuiu.buzz/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJsWjNVMFZLTVV4SWRuQnpOVTFzYW1oNlJWRT0mdWlkPVVTRVIyMDA2MjAyNFVOSVFVRTA5NDgwNjIwMjAyMDI0MjAyNDA2MjA0ODA5MjA=N0123N%5BEMail%5D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1792 --field-trial-handle=2012,i,125323118336348657,5182602862392498540,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/annotator.css	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://sandbox.google.com/inapp/%	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://feedback2-test.corp.google.com/tools/feedback/%	0%	URL Reputation	safe
https://www.youtube.com/	0%	URL Reputation	safe
https://plus.google.com	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.de/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.com/inapp/	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/render_frame2.html	0%	URL Reputation	safe
https://sandbox.google.com/tools/feedback/%	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://www.google.com/gen_204?atyp=csi&ei=HYKFZpXiHv2Sxc8PyI61iAc&s=promo&rt=hpbas.6185&zx=1720025635216&opi=89978449	0%	Avira URL Cloud	safe
https://support.google.com/inapp/%	0%	URL Reputation	safe
https://lh3.googleusercontent.com/N_lV5xwErJpAK4jkrNwMMQfbQN7gs0loaMzQHVF768czQNAHsMWW6Kk1FUJnbH0c7u	0%	Avira URL Cloud	safe
https://www.google.com/gmail/about/policy/	0%	Avira URL Cloud	safe
https://ogs.google.com/	0%	Avira URL Cloud	safe
https://support.google.com/store/answer/12436460?hl=en-GB	0%	Avira URL Cloud	safe
https://instagram.com/madebygoogle	0%	Avira URL Cloud	safe
https://support.google.com/store/answer/2664771?hl=%3	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/js/k=xjs.hd.en.MWU7zAcdjPg.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAgBFAAAAAoAAAAAAAAAAAAAIAAIQBAKAAABMABAERAAABAAACAQBCAR7kAAASACQAAAAABAAAKBCBAAAAABAAAAAAoAAAAAAAAAAAAAAAYQAABAAAAAAAAAAAAAAAA6AAAAAACIEAQAAMYCAAABAAAACAPAIIDYJCCAAAAAAAAAAAAAAAAApAgmAsJKAggAAAAAAAAAAAAAAAAgJR0YmED/d=0/dg=0/br=1/rs=ACT90oGr-0QYF5EERG5ofjKDi5upM68tuQ/m=syf4,aLUfP?xjs=s4	0%	Avira URL Cloud	safe
https://ogs.google.com/widget/callout	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKinVM98Qkjr1uN3BhQ3StGXCp1-O_wPwoLZeDQ=rw-e365-w2880	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/YqGm39Z5sh9A5xtQbH_iZFAKj6kwCkY447q5cjzGcb85qccGrZn5xO_N_XwKpx1nd3XA-l6tJyz2qk7Xxk8ThS1-W78mBoEfPVKF4hm4=rw-e365-w2880	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/FU-s_R5k9ZDky6RTNWsdrN8xa9Jp7C2mwd_Kj9NHQe6Cw_EipUIFLjv0L7fGBh7Klo	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/ss/k=xjs.hd.O5pTwBf7VYU.L.B1.O/am=AKYAAAAAAAAAAwAAAAAAAAAAAAAAAABAAAAgAAAAAAAABYBPDgAIAGwIAAAAIABAAAAAAAAAKAAAAIAJAAAAAQBIAAgAEBAAACAAQAQQABAAAhQBJAAKBBlAAABABDAYBkAqAJgCAAAAAggAAAAAwI0ABAgAABEAAXgAAQAE6AABMAAIAABAIAMYCAAAAAAAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAgAKAAAAAAAAAAAAAAAAAAAABA/d=0/br=1/rs=ACT90oEvAjvLMSMTaemOggNySj0ZNEF5hQ/m=syj1,syk8?xjs=s4	0%	Avira URL Cloud	safe
https://www.google.com/gmail/about/static-2.0/js/main.min.js?fingerprint=e40cfb18a2cfd6913beddc27dfb9fc6b	0%	Avira URL Cloud	safe
https://store.google.com/intl/en/ideas/articles/pixel-phone-comparison/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/YqGm39Z5sh9A5xtQbH_iZFAKj6kwCkY447q5cjzGcb85qccGrZn5xO_N_XwKpx1nd3	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=i&ei=HYKFZpXiHv2Sxc8PyI61iAc&ct=slh&v=t1&im=M&pv=0.5341282211545493&me=7:1720025636112,V,0,0,0,0:2536,V,0,0,1280,907:8537,e,B&zx=1720025647185&opi=89978449	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/eZWG4PPJ0azhEJHpJfOUgjB4TTyVCFUTzENXuzjkrjZDryL2kq3AzvQKnI2b1QIZcG	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKi	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/gen_204?atyp=csi&ei=HYKFZpXiHv2Sxc8PyI61iAc&s=promo&rt=hpbas.6185&zx=1720025635216&opi=89978449	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKinVM98Qkjr1uN3BhQ3StGXCp1-O_wPwoLZeDQ=rw-e365-w2880	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/k=xjs.hd.en.MWU7zAcdjPg.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAgBFAAAAAoAAAAAAAAAAAAAIAAIQBAKAAABMABAERAAABAAACAQBCAR7kAAASACQAAAAABAAAKBCBAAAAABAAAAAAoAAAAAAAAAAAAAAAYQAABAAAAAAAAAAAAAAAA6AAAAAACIEAQAAMYCAAABAAAACAPAIIDYJCCAAAAAAAAAAAAAAAAApAgmAsJKAggAAAAAAAAAAAAAAAAgJR0YmED/d=0/dg=0/br=1/rs=ACT90oGr-0QYF5EERG5ofjKDi5upM68tuQ/m=syf4,aLUfP?xjs=s4	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/YqGm39Z5sh9A5xtQbH_iZFAKj6kwCkY447q5cjzGcb85qccGrZn5xO_N_XwKpx1nd3XA-l6tJyz2qk7Xxk8ThS1-W78mBoEfPVKF4hm4=rw-e365-w2880	false	Avira URL Cloud: safe	unknown
https://www.google.com/gmail/about/static-2.0/js/main.min.js?fingerprint=e40cfb18a2cfd6913beddc27dfb9fc6b	false	Avira URL Cloud: safe	unknown
https://srtuiu.buzz/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJsWjNVMFZLTVV4SWRuQnpOVTFzYW1oNlJWRT0mdWlkPVVTRVIyMDA2MjAyNFVOSVFVRTA5NDgwNjIwMjAyMDI0MjAyNDA2MjA0ODA5MjA=N0123N%5BEMail%5D	false		unknown
https://www.google.com/gen_204?atyp=i&ei=HYKFZpXiHv2Sxc8PyI61iAc&ct=slh&v=t1&im=M&pv=0.5341282211545493&me=7:1720025636112,V,0,0,0,0:2536,V,0,0,1280,907:8537,e,B&zx=1720025647185&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/ss/k=xjs.hd.O5pTwBf7VYU.L.B1.O/am=AKYAAAAAAAAAAwAAAAAAAAAAAAAAAABAAAAgAAAAAAAABYBPDgAIAGwIAAAAIABAAAAAAAAAKAAAAIAJAAAAAQBIAAgAEBAAACAAQAQQABAAAhQBJAAKBBlAAABABDAYBkAqAJgCAAAAAggAAAAAwI0ABAgAABEAAXgAAQAE6AABMAAIAABAIAMYCAAAAAAAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAgAKAAAAAAAAAAAAAAAAAAAABA/d=0/br=1/rs=ACT90oEvAjvLMSMTaemOggNySj0ZNEF5hQ/m=syj1,syk8?xjs=s4	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/n39fjkEgTNaaPzx8Y5mVmMpF7QzRNVMK3JfNnB0Ev0a-sirReffWXfbzyUZOR7PTLBRoIMUfrtYMeQjAWIgaeA0q5R7dWPeFw_dTL0dCqXkeVnE_vV8=w1440-l90-sg-rj-c0xffffff	false	Avira URL Cloud: safe	unknown
https://www.google.com/gmail/about/static-2.0/css/partials/app-downloads.css?fingerprint=9a6fb1bb67e1c16f7ce7c44e82c95da2	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/GhfIwA6ZINFkFgE77BVZ596ZtFXFc72Z6OfHGeHh4VO8ZSNBZkXXcRdgWvhzJKDzmy22DROUcJKCaZbeDHpT7raQ-ZKBmj1MM1JqGQ=rw-e365-w2880	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/Wn2n9blGitrv0BHzGAwSVokPNd7dMTQDy8V9Lb-VBDw1riwNjS3ClQgFPKdW2GyZy4-Gi19WCLM5O-JuNoitpnmUpJobn0A2Fg=rw-e365-w3000	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/un_TwWyFxvThry1Tu1bijYCPKWXIJN7AEujVmDygmROvNDmFdxqHFD317YrxjEtfMiwxe1CNv-qpeZmpFuDAHXdiXxb1Z9ZGMmkzhrVYa8pEuuiCo_jT=w1440-l90-sg-rj-c0xffffff	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/xbP3RDfP-xlACZffWJ23xv97pC05mQbHd4YYDwJ-Bj4wIFdCNs-qp8Aui86Ugo5gQYCNK-7pMq1_PBPGrcSZ5zwr2bJihsHGZdrj=rw-e365-w3000	false	Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/Kkh1J0HrlRSnxSQrtnP4DFSMb4SI7Rz0yAT0G6ku1QOARBJJ4To-rDzu0tfCOMWvNCtYvCYaM92ISqiDPr-8KtwNqYO3xuJERwASsfn2=rw-e365-w2880	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=JYKFZsGEAvmG9u8PqLO1sA8&s=async&astyp=hpba&ima=0&imn=0&mem=ujhs.7,tjhs.10,jhsl.2173,dm.8&nv=ne.1,feid.57b32a67-e363-48d5-8edf-3fbbacad1b4d&hp=&rt=ttfb.1434,st.1435,bs.27,aaft.1437,acrt.1440,art.1441&zx=1720025636659&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/k=xjs.hd.en.MWU7zAcdjPg.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAgBFAAAAAoAAAAAAAAAAAAAIAAIQBAKAAABMABAERAAABAAACAQBCAR7kAAASACQAAAAABAAAKBCBAAAAABAAAAAAoAAAAAAAAAAAAAAAYQAABAAAAAAAAAAAAAAAA6AAAAAACIEAQAAMYCAAABAAAACAPAIIDYJCCAAAAAAAAAAAAAAAAApAgmAsJKAggAAAAAAAAAAAAAAAAgJR0YmED/d=0/dg=0/br=1/rs=ACT90oGr-0QYF5EERG5ofjKDi5upM68tuQ/m=sy1b5,P10Owf,sy19u,sy19s,syq7,gSZvdb,syw3,syw2,WlNQGd,sywg,sywe,nabPbb,syqc,syq9,syq8,syq6,DPreE,syvx,syvv,syj1,syk8,CnSW2d,kQvlef,sywf,fXO0xe?xjs=s4	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ei=HYKFZpXiHv2Sxc8PyI61iAc&dt19=2&zx=1720025635224&opi=89978449	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/WRNuvosn1mvN1shz4ve4VqJMb62E7JVVSlU40-VzJDpKj8MA1k32XB1E1ri8oFxDLdlJNG3BUvUKsDzRS-NbNqgL1CztLzYiaQM=rw-e365-w3000	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/Cle-1GLl4P8zbJafbrnN8-7CgfVSduAR1j2DACNepAm5JL37GANl8tIM1h72Cyga71wO2lGcNPONnQl5MKFi_1TGSBQM8mV9qaKdQw=rw-e365-w2880	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/E2J7hG3ZRWpFOO0NBrkg1s6K1ZKYLwEuCK_lAO7LrPVH3C0eTbFCycYgqs4gr8caAr27S-PKLy2yLhIVGCy4byZ5wZ8kzQpnyQk=rw-e365-w3000	false	Avira URL Cloud: safe	unknown
https://www.google.com/async/hpba?vet=10ahUKEwjV5JrlqouHAxV9SfEDHUhHDXEQj-0KCBU..i&ei=HYKFZpXiHv2Sxc8PyI61iAc&opi=89978449&yv=3&cs=0&async=isImageHp:false,eventId:HYKFZpXiHv2Sxc8PyI61iAc,endpoint:overlay,stick:,_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.MWU7zAcdjPg.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAgBFAAAAAoAAAAAAAAAAAAAIAAIQBAKAAABMABAERAAABAAACAQBCAR7kAAASACQAAAAABAAAKBCBAAAAABAAAAAAoAAAAAAAAAAAAAAAYQAABAAAAAAAAAAAAAAAA6AAAAAACIEAQAAMYCAAABAAAACAPAIIDYJCCAAAAAAAAAAAAAAAAApAgmAsJKAggAAAAAAAAAAAAAAAAgJR0YmED%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oGr-0QYF5EERG5ofjKDi5upM68tuQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.O5pTwBf7VYU.L.B1.O%2Fam%3DAKYAAAAAAAAAAwAAAAAAAAAAAAAAAABAAAAgAAAAAAAABYBPDgAIAGwIAAAAIABAAAAAAAAAKAAAAIAJAAAAAQBIAAgAEBAAACAAQAQQABAAAhQBJAAKBBlAAABABDAYBkAqAJgCAAAAAggAAAAAwI0ABAgAABEAAXgAAQAE6AABMAAIAABAIAMYCAAAAAAAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAgAKAAAAAAAAAAAAAAAAAAAABA%2Fbr%3D1%2Frs%3DACT90oEvAjvLMSMTaemOggNySj0ZNEF5hQ,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.MWU7zAcdjPg.O%2Fck%3Dxjs.hd.O5pTwBf7VYU.L.B1.O%2Fam%3DAKYAAAAAAAAAAwAAAAAAAAAAAAAAAABAAAAgAAAAAAAgBdBPDgAoAGwIAAAAIABAAIAAIQBAKAAABMAJAERAAQBIAAiAUBCAR7kAQASQCRAAAhQBJAAKBDlAAABABDAYBkAqAJgCAAAAAggAAAAYwI0BBAgAABEAAXgAAQAE6AABMAAKIEBQIAMYCAAABAAAACAPAIIDYJCCAAAAAAAAAAAAAAAAApAgmAsJKAggAAAAAAAAAAAAAAAAgJR0YmED%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oF4rv9Te7Lvms_fT6ljsVh3WmaVGg,_fmt:prog,_id:a3JU5b	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/en-US/gmail/about/	false		unknown
https://about.google/assets-main/img/glue-icons.svg	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=HYKFZpXiHv2Sxc8PyI61iAc&s=webhp&t=all&imn=11&ima=2&imad=0&imac=0&wh=907&aftie=NF&aft=1&aftp=907&adh=&cls=0.000046949291965270124&ime=1&imeae=0&imeap=0&imex=1&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&imeeb=0&scp=0&cb=203321&ucb=203321&mem=ujhs.7,tjhs.10,jhsl.2173,dm.8&nv=ne.1,feid.57b32a67-e363-48d5-8edf-3fbbacad1b4d&net=dl.1450,ect.3g,rtt.300&hp=&sys=hc.4&p=bs.true&rt=hst.67,cbs.68,cbt.949,prt.1375,afti.1525,aftip.1371,aft.1525,aftqf.1528,xjses.2636,xjsee.2705,xjs.2706,lcp.1547,fcp.1350,wsrt.1102,cst.709,dnst.0,rqst.629,rspt.297,sslt.708,rqstt.770,unt.5,cstt.61,dit.2496&zx=1720025631741&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/tools/feedback/chat_load.js	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://ogs.google.com/	chromecache_243.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/N_lV5xwErJpAK4jkrNwMMQfbQN7gs0loaMzQHVF768czQNAHsMWW6Kk1FUJnbH0c7u	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_522.2.dr, chromecache_499.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/gmail/about/policy/	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/client.js	chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/store/answer/12436460?hl=en-GB	chromecache_420.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com	chromecache_454.2.dr, chromecache_376.2.dr	false	URL Reputation: safe	unknown
https://instagram.com/madebygoogle	chromecache_408.2.dr	false	Avira URL Cloud: safe	unknown
http://localhost.proxy.googlers.com/inapp/	chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://ogs.google.com/widget/callout	chromecache_243.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_519.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/store/answer/2664771?hl=%3	chromecache_408.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/FU-s_R5k9ZDky6RTNWsdrN8xa9Jp7C2mwd_Kj9NHQe6Cw_EipUIFLjv0L7fGBh7Klo	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/eZWG4PPJ0azhEJHpJfOUgjB4TTyVCFUTzENXuzjkrjZDryL2kq3AzvQKnI2b1QIZcG	chromecache_512.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://store.google.com/intl/en/ideas/articles/pixel-phone-comparison/	chromecache_512.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/YqGm39Z5sh9A5xtQbH_iZFAKj6kwCkY447q5cjzGcb85qccGrZn5xO_N_XwKpx1nd3	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKi	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/U1D47vdwu9i7XQZA8Jm2ksh1sgJSzdpw0T2xMIlU9EFBUUdqWd20IQf09-Jxyc-uFT	chromecache_512.2.dr, chromecache_377.2.dr	false	Avira URL Cloud: safe	unknown
https://store.google.com/#organization	chromecache_420.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/store/	chromecache_408.2.dr	false	Avira URL Cloud: safe	unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/hgUtJ1raSgkAHurP6yDzukLnNF1V7vS4MTeqzThHkHTz1sc8nYizzkb6TPElQ0_LzI	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_519.2.dr	false	URL Reputation: safe	unknown
https://one.google.com/about/ai-premium/	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://youtube.com/madebygoogle	chromecache_408.2.dr	false	Avira URL Cloud: safe	unknown
https://nest.com/$s/%2/widget/pro-finder/	chromecache_408.2.dr	false	Avira URL Cloud: safe	unknown
https://workspace.google.com/products/gmail/index.html?utm_source=gmailforwork&utm_medium=et&amp	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/tools/feedback	chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/1n27m9ovZ73GRgjXGsPEwcfY9rDO-8DFeimUp0o1QGdlZZiApOoxjbei1TD8OWBZfl	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://sandbox.google.com/inapp/%	chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://about.google/	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_500.2.dr, chromecache_427.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com	chromecache_414.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/store/answer/12436460?hl=%3	chromecache_408.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/tools/feedback/	chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://workspace.google.com/?utm_source=gmailforwork&utm_medium=et&utm_campaign=body&ut	chromecache_470.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_420.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_440.2.dr	false	URL Reputation: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.46	google.com	United States	15169	GOOGLEUS	false
142.250.185.206	unknown	United States	15169	GOOGLEUS	false
172.217.18.14	play.google.com	United States	15169	GOOGLEUS	false
142.250.181.230	ad.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.37	mail.google.com	United States	15169	GOOGLEUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
142.250.184.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.81	csp.withgoogle.com	United States	15169	GOOGLEUS	false
216.239.32.29	about.google	United States	15169	GOOGLEUS	false
172.67.161.15	srtuiu.buzz	United States	13335	CLOUDFLARENETUS	false
172.217.18.2	unknown	United States	15169	GOOGLEUS	false
216.58.206.46	www3.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.129	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.130	adservice.google.com	United States	15169	GOOGLEUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.166	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Name	IP	Active	Malicious	Reputation
dart.l.doubleclick.net	142.250.186.166	true	false	unknown
google.com	142.250.186.46	true	false	unknown
csp.withgoogle.com	142.250.185.81	true	false	unknown
plus.l.google.com	142.250.186.142	true	false	unknown
ad.doubleclick.net	142.250.181.230	true	false	unknown
mail.google.com	216.58.206.37	true	false	unknown
store.google.com	142.250.184.238	true	false	unknown
adservice.google.com	142.250.185.130	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
about.google	216.239.32.29	true	false	unknown
www3.l.google.com	216.58.206.46	true	false	unknown
play.google.com	172.217.18.14	true	false	unknown
googleads.g.doubleclick.net	142.250.181.226	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
td.doubleclick.net	142.250.184.226	true	false	unknown
srtuiu.buzz	172.67.161.15	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.186.65	true	false	unknown
ogs.google.com	unknown	unknown	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	unknown
2542116.fls.doubleclick.net	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467147
Start date and time:	2024-07-03 18:52:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://srtuiu.buzz/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJsWjNVMFZLTVV4SWRuQnpOVTFzYW1oNlJWRT0mdWlkPVVTRVIyMDA2MjAyNFVOSVFVRTA5NDgwNjIwMjAyMDI0MjAyNDA2MjA0ODA5MjA=N0123N%5BEMail%5D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@22/591@48/19
Cookbook Comments:	Browse: https://www.google.com/ Browse: https://about.google/?fg=1&utm_source=google-US&utm_medium=referral&utm_campaign=hp-header Browse: https://store.google.com/US?utm_source=hp_header&utm_medium=google_ooo&utm_campaign=GS100042&hl=en-US Browse: https://mail.google.com/mail/&ogbl

Input	Output
URL: https://google.com/404/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as it does not request any sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text of the webpage does not create a sense of urgency or interest, as it only states that the requested URL was not found.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Error 404 (Not Found)!!1 OCR: Google That's an error. The requested URL '404/ was not found on this server. That's all we know
URL: https://www.google.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title and text of the webpage do not contain any elements indicating a login form.","There is no language in the text that creates a sense of urgency.","There is no CAPTCHA or other anti-robot detection mechanism present on the webpage."]}
Title: Google OCR: Gmail Images Sign in Store Sign in to Google Save your passwords securely with your Google Account Stay signed out Sign in Google Gtngle Search I'm Feeling Lucky Adveising Business How Search works privacy Our third decade ot climate action: join us Terms Settings
URL: https://store.google.com/US/?utm_source=hp_header&utm_medium=google_ooo&utm_campaign=GS100042&hl=en-US Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that encourage immediate action such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice.'","The webpage does not contain a CAPTCHA or anti-robot detection mechanism, as there are no visual or interactive elements that require user interaction to prove they are not a bot."]}
Title: Google Store for Google Made Devices & Accessories OCR: 0 Q Phones Earbuds Tablets Watches & Trackers Smart Home Accessories Subscriptions Offers Launch is coming. Don't miss the magic. Learn more Google 11

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 15:53:35 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9882671953741142
Encrypted:	false
SSDEEP:	48:8U0dMTwgEHalWidAKZdA1oehwiZUklqehBy+3:8UXv1lFey
MD5:	9CCA61D2D1AFA00614447B17BD1A1D01
SHA1:	722C761E028F38D04272A425816F8596D2F0692B
SHA-256:	E0FA129972911F92B425ED4C4F35B3BE0C2A83B0D78F75CD3F637B0732921AEA
SHA-512:	72384EB75AE9E17C30C7AA5D51430C019B8482C1C9A8CC4144035787020AC95B133E46BC03BB8D02D87F453AA0E36A99D5AABC454F591811D1D6CA709AB3D411
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....X.y.i...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.I.X......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 18:53:35.534024954 CEST	192.168.2.8	1.1.1.1	0xa398	Standard query (0)	srtuiu.buzz	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:35.534228086 CEST	192.168.2.8	1.1.1.1	0xe63d	Standard query (0)	srtuiu.buzz	65	IN (0x0001)	false
Jul 3, 2024 18:53:36.424635887 CEST	192.168.2.8	1.1.1.1	0xa8da	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:36.424802065 CEST	192.168.2.8	1.1.1.1	0xd547	Standard query (0)	google.com	65	IN (0x0001)	false
Jul 3, 2024 18:53:37.816962004 CEST	192.168.2.8	1.1.1.1	0xa58b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:37.820394039 CEST	192.168.2.8	1.1.1.1	0xd779	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 18:53:40.049654007 CEST	192.168.2.8	1.1.1.1	0x522f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:40.050586939 CEST	192.168.2.8	1.1.1.1	0x3b67	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 18:53:52.538332939 CEST	192.168.2.8	1.1.1.1	0x750d	Standard query (0)	ogs.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:52.538645029 CEST	192.168.2.8	1.1.1.1	0x6818	Standard query (0)	ogs.google.com	65	IN (0x0001)	false
Jul 3, 2024 18:53:53.512125969 CEST	192.168.2.8	1.1.1.1	0x3b12	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:53.512341976 CEST	192.168.2.8	1.1.1.1	0xe628	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 3, 2024 18:53:54.004112959 CEST	192.168.2.8	1.1.1.1	0x69cb	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:54.004333973 CEST	192.168.2.8	1.1.1.1	0xecc6	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Jul 3, 2024 18:53:54.508244991 CEST	192.168.2.8	1.1.1.1	0x19a4	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:54.511317968 CEST	192.168.2.8	1.1.1.1	0x1de0	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 3, 2024 18:54:08.399693966 CEST	192.168.2.8	1.1.1.1	0xc66f	Standard query (0)	about.google	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:08.399844885 CEST	192.168.2.8	1.1.1.1	0x9db7	Standard query (0)	about.google	65	IN (0x0001)	false
Jul 3, 2024 18:54:10.359836102 CEST	192.168.2.8	1.1.1.1	0xf6c3	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:10.360076904 CEST	192.168.2.8	1.1.1.1	0xbb8	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Jul 3, 2024 18:54:10.394536972 CEST	192.168.2.8	1.1.1.1	0x22fb	Standard query (0)	store.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:10.395046949 CEST	192.168.2.8	1.1.1.1	0xff50	Standard query (0)	store.google.com	65	IN (0x0001)	false
Jul 3, 2024 18:54:10.685585976 CEST	192.168.2.8	1.1.1.1	0x2723	Standard query (0)	about.google	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:10.685728073 CEST	192.168.2.8	1.1.1.1	0x43eb	Standard query (0)	about.google	65	IN (0x0001)	false
Jul 3, 2024 18:54:11.518625975 CEST	192.168.2.8	1.1.1.1	0x25cd	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:11.518831968 CEST	192.168.2.8	1.1.1.1	0x9626	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Jul 3, 2024 18:54:11.764223099 CEST	192.168.2.8	1.1.1.1	0x3907	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:11.765006065 CEST	192.168.2.8	1.1.1.1	0xd90	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Jul 3, 2024 18:54:31.985627890 CEST	192.168.2.8	1.1.1.1	0xccce	Standard query (0)	store.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:31.985790968 CEST	192.168.2.8	1.1.1.1	0x70d2	Standard query (0)	store.google.com	65	IN (0x0001)	false
Jul 3, 2024 18:54:37.734280109 CEST	192.168.2.8	1.1.1.1	0x88a0	Standard query (0)	2542116.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:37.735238075 CEST	192.168.2.8	1.1.1.1	0xb147	Standard query (0)	2542116.fls.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 18:54:37.736659050 CEST	192.168.2.8	1.1.1.1	0xd9ea	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:37.737055063 CEST	192.168.2.8	1.1.1.1	0x2db2	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 18:54:37.737999916 CEST	192.168.2.8	1.1.1.1	0x4947	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:37.738642931 CEST	192.168.2.8	1.1.1.1	0x1894	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 18:54:38.700086117 CEST	192.168.2.8	1.1.1.1	0x933b	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:38.700242043 CEST	192.168.2.8	1.1.1.1	0xaf8d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 18:54:41.266051054 CEST	192.168.2.8	1.1.1.1	0xa588	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:41.266253948 CEST	192.168.2.8	1.1.1.1	0xe519	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 18:54:41.290201902 CEST	192.168.2.8	1.1.1.1	0x15fc	Standard query (0)	mail.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:41.290458918 CEST	192.168.2.8	1.1.1.1	0x7286	Standard query (0)	mail.google.com	65	IN (0x0001)	false
Jul 3, 2024 18:54:42.216768026 CEST	192.168.2.8	1.1.1.1	0x7e28	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:42.216964006 CEST	192.168.2.8	1.1.1.1	0x7365	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jul 3, 2024 18:54:43.305031061 CEST	192.168.2.8	1.1.1.1	0x7b47	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:43.305358887 CEST	192.168.2.8	1.1.1.1	0xcbc0	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jul 3, 2024 18:54:50.204591036 CEST	192.168.2.8	1.1.1.1	0x1563	Standard query (0)	csp.withgoogle.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:50.205108881 CEST	192.168.2.8	1.1.1.1	0x82a9	Standard query (0)	csp.withgoogle.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 3, 2024 18:53:35.548460007 CEST	1.1.1.1	192.168.2.8	0xa398	No error (0)	srtuiu.buzz		172.67.161.15	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:35.548460007 CEST	1.1.1.1	192.168.2.8	0xa398	No error (0)	srtuiu.buzz		104.21.15.26	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:35.551724911 CEST	1.1.1.1	192.168.2.8	0xe63d	No error (0)	srtuiu.buzz			65	IN (0x0001)	false
Jul 3, 2024 18:53:36.431849957 CEST	1.1.1.1	192.168.2.8	0xa8da	No error (0)	google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:36.432359934 CEST	1.1.1.1	192.168.2.8	0xd547	No error (0)	google.com			65	IN (0x0001)	false
Jul 3, 2024 18:53:37.824541092 CEST	1.1.1.1	192.168.2.8	0xa58b	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:37.826932907 CEST	1.1.1.1	192.168.2.8	0xd779	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 18:53:40.056504965 CEST	1.1.1.1	192.168.2.8	0x522f	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:40.058845043 CEST	1.1.1.1	192.168.2.8	0x3b67	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 18:53:50.050333977 CEST	1.1.1.1	192.168.2.8	0x850f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:53:50.050333977 CEST	1.1.1.1	192.168.2.8	0x850f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:52.546941042 CEST	1.1.1.1	192.168.2.8	0x750d	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:53:52.546941042 CEST	1.1.1.1	192.168.2.8	0x750d	No error (0)	www3.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:52.548072100 CEST	1.1.1.1	192.168.2.8	0x6818	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:53:53.522803068 CEST	1.1.1.1	192.168.2.8	0x3b12	No error (0)	play.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:54.011708021 CEST	1.1.1.1	192.168.2.8	0x69cb	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:53:54.011708021 CEST	1.1.1.1	192.168.2.8	0x69cb	No error (0)	plus.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:53:54.011724949 CEST	1.1.1.1	192.168.2.8	0xecc6	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:53:54.518245935 CEST	1.1.1.1	192.168.2.8	0x19a4	No error (0)	play.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:07.554253101 CEST	1.1.1.1	192.168.2.8	0xd3ad	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:54:07.554253101 CEST	1.1.1.1	192.168.2.8	0xd3ad	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:08.406658888 CEST	1.1.1.1	192.168.2.8	0xc66f	No error (0)	about.google		216.239.32.29	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:10.366923094 CEST	1.1.1.1	192.168.2.8	0xf6c3	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:54:10.366923094 CEST	1.1.1.1	192.168.2.8	0xf6c3	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.65	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:10.367995024 CEST	1.1.1.1	192.168.2.8	0xbb8	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:54:10.402369022 CEST	1.1.1.1	192.168.2.8	0x22fb	No error (0)	store.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:10.692754030 CEST	1.1.1.1	192.168.2.8	0x2723	No error (0)	about.google		216.239.32.29	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:11.525583982 CEST	1.1.1.1	192.168.2.8	0x25cd	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:54:11.525583982 CEST	1.1.1.1	192.168.2.8	0x25cd	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.129	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:11.526951075 CEST	1.1.1.1	192.168.2.8	0x9626	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:54:11.771241903 CEST	1.1.1.1	192.168.2.8	0x3907	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:54:11.771241903 CEST	1.1.1.1	192.168.2.8	0x3907	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.65	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:11.772914886 CEST	1.1.1.1	192.168.2.8	0xd90	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:54:26.322721004 CEST	1.1.1.1	192.168.2.8	0x444d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:54:26.322721004 CEST	1.1.1.1	192.168.2.8	0x444d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:31.993594885 CEST	1.1.1.1	192.168.2.8	0xccce	No error (0)	store.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:37.745721102 CEST	1.1.1.1	192.168.2.8	0xd9ea	No error (0)	td.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:37.747581959 CEST	1.1.1.1	192.168.2.8	0x1894	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jul 3, 2024 18:54:37.749099016 CEST	1.1.1.1	192.168.2.8	0x4947	No error (0)	ad.doubleclick.net		142.250.181.230	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:37.751816988 CEST	1.1.1.1	192.168.2.8	0x88a0	No error (0)	2542116.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:54:37.751816988 CEST	1.1.1.1	192.168.2.8	0x88a0	No error (0)	dart.l.doubleclick.net		142.250.186.166	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:37.756519079 CEST	1.1.1.1	192.168.2.8	0xb147	No error (0)	2542116.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:54:38.713607073 CEST	1.1.1.1	192.168.2.8	0x933b	No error (0)	googleads.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:38.714485884 CEST	1.1.1.1	192.168.2.8	0xaf8d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 3, 2024 18:54:41.273111105 CEST	1.1.1.1	192.168.2.8	0xe519	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jul 3, 2024 18:54:41.273324013 CEST	1.1.1.1	192.168.2.8	0xa588	No error (0)	ad.doubleclick.net		142.250.181.230	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:41.297557116 CEST	1.1.1.1	192.168.2.8	0x15fc	No error (0)	mail.google.com		216.58.206.37	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:42.223670959 CEST	1.1.1.1	192.168.2.8	0x7e28	No error (0)	adservice.google.com		142.250.185.130	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:42.223875046 CEST	1.1.1.1	192.168.2.8	0x7365	No error (0)	adservice.google.com			65	IN (0x0001)	false
Jul 3, 2024 18:54:43.312709093 CEST	1.1.1.1	192.168.2.8	0x7b47	No error (0)	adservice.google.com		172.217.18.2	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:43.313980103 CEST	1.1.1.1	192.168.2.8	0xcbc0	No error (0)	adservice.google.com			65	IN (0x0001)	false
Jul 3, 2024 18:54:49.099061012 CEST	1.1.1.1	192.168.2.8	0x21c1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 18:54:49.099061012 CEST	1.1.1.1	192.168.2.8	0x21c1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 18:54:50.211761951 CEST	1.1.1.1	192.168.2.8	0x1563	No error (0)	csp.withgoogle.com		142.250.185.81	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:36 UTC	806	OUT	GET /m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJsWjNVMFZLTVV4SWRuQnpOVTFzYW1oNlJWRT0mdWlkPVVTRVIyMDA2MjAyNFVOSVFVRTA5NDgwNjIwMjAyMDI0MjAyNDA2MjA0ODA5MjA=N0123N%5BEMail%5D HTTP/1.1 Host: srtuiu.buzz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 16:53:36 UTC	659	IN	HTTP/1.1 302 Found Date: Wed, 03 Jul 2024 16:53:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Cache-Control: no-store Location: https://google.com/404/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sDJHqpgDJjoKai20du3dxVnB9HvC1B7bJ8KNF6gBSaToiEapJOmUMbDYDutXLlQzf%2FSfXoJHHlzXadX49MDPvaJISMPP0GgJVfYbP8a%2BbZhbXketT0LitqGdczKrSA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89d86484a9317d26-EWR alt-svc: h3=":443"; ma=86400
2024-07-03 16:53:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:37 UTC	657	OUT	GET /404/ HTTP/1.1 Host: google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 16:53:37 UTC	231	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1565 Date: Wed, 03 Jul 2024 16:53:37 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 16:53:37 UTC	1159	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 28 4e 6f 74 20 46 6f 75 6e 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 404 (Not Found)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-se
2024-07-03 16:53:37 UTC	406	IN	Data Raw: 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f 67 6c 65 3e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0a 20 20 Data Ascii: .google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Google></span></a>

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:38 UTC	723	OUT	GET /images/errors/robot.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIkqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 16:53:38 UTC	682	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 6327 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:41:14 GMT Expires: Wed, 02 Jul 2025 22:41:14 GMT Cache-Control: public, max-age=31536000 Age: 65544 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 16:53:38 UTC	708	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ab 00 00 00 d5 08 03 00 00 00 1f 1e f0 9a 00 00 00 57 50 4c 54 45 9d c7 ed 7a b3 e7 7a b3 e8 d4 e6 f7 9e c7 ee 32 8a db bb d8 f3 ba d8 f3 bb d8 f4 57 9f e1 7b b3 e8 56 9e e1 d4 e6 f8 d3 e6 f7 7a b2 e7 e9 f3 fb 32 89 da 33 8a db ea f3 fc 56 9f e1 32 8a da 9d c6 ed 9e c7 ed d3 e5 f7 ba d7 f3 e9 f2 fb ea f3 fb 57 9f e2 ff ff ff 3e 60 10 a0 00 00 00 1d 74 52 4e 53 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 59 86 e7 6a 00 00 17 f2 49 44 41 54 78 01 b5 c1 07 42 63 49 0c 40 41 a9 73 ff e4 48 58 e9 dd ff 9c 6b c3 30 63 1b 93 0c 54 09 3f 6e c5 2f 11 7e d6 14 97 1e 62 8c fc 02 e1 47 4d de 47 75 cf 63 e4 e7 09 3f aa 7b 35 88 35 b8 cc fc 34 e1 27 15 6f 3c 93 1c f8 69 Data Ascii: PNGIHDRWPLTEzz2W{Vz23V2W>`tRNSYjIDATxBcI@AsHXk0cT?n/~bGMGuc?{554'o<i
2024-07-03 16:53:38 UTC	1390	IN	Data Raw: 36 a7 9e 7b 28 3c b9 9b b9 85 70 93 e8 06 c3 3a f1 be e6 21 3d 80 d5 bb 31 87 66 fc 11 22 b7 10 6e f2 38 02 da 8d 0f c4 a2 7e 6f b3 bb 4e fc 33 6c b9 85 70 13 5b 0c a6 c4 c1 2a 0a ef 89 da 93 18 a7 a4 72 0b e1 36 8b f1 ac 7a de 14 ae 28 91 67 31 71 41 85 5b 08 9f 11 8b 71 c6 76 2b 9e d8 26 e7 1c b8 42 7b e1 49 8b 5c f0 ca 2d 84 0f c5 ba f4 ec 89 53 d1 79 26 fb bc d9 0b d7 a8 17 8e 4a e2 82 57 6e 21 7c 44 dc bd 98 e4 99 13 e6 2b 9e 14 cf 79 b7 e5 1a d3 1c 39 a8 81 0b c3 1d b7 10 3e 20 eb 6a 1c c8 c6 f8 c7 b4 f1 a4 b8 7b e4 0d c1 0d b8 4b 5c 58 16 6e 21 bc af 65 e5 49 19 2b 27 c6 ca b3 87 6a bc c5 b2 00 2d 70 41 95 5b 08 ef 32 1f 8c a3 38 67 e7 44 4f bc 23 a9 3f 70 10 06 20 05 2e 8c c2 2d 84 77 35 e7 89 64 f7 81 13 bb ca db 34 e7 ec 1c c4 6e d0 9c 0b 21 71 Data Ascii: 6{(<p:!=1f"n8~oN3lp[*r6z(g1qA[qv+&B{I\-Sy&JWn!\|D+y9> j{K\Xn!eI+'j-pA[28gDO#?p .-w5d4n!q
2024-07-03 16:53:38 UTC	1390	IN	Data Raw: d5 c6 51 4b c5 78 43 09 6b 77 31 6e 24 bc a6 ce 1f 75 1c bd 6e 39 30 1e 24 ea c2 13 db 45 2e d9 10 7a 89 1c a4 94 a2 71 5d 7c 18 dd 0b b7 11 5e 8b 63 e2 49 49 36 85 4d d0 a0 1a 7a 1e e3 ca 2b 47 e6 89 2b 24 04 a9 1c 58 d2 12 b9 ce 4a c8 43 04 e6 b8 e2 6b 84 2b 64 9c 01 4b 21 02 2a 83 fa 2e 94 58 13 77 0b 47 d6 13 57 59 0a 5a b7 06 94 94 9a 71 9d 8c 9b 30 0d 29 f2 45 c2 15 31 14 26 19 1a 07 26 40 13 c0 02 d1 13 47 cb 23 6f b0 a2 21 84 95 41 ac 22 91 2b ac 8c 7d b3 5b 1e f9 2a e1 9a fb 2c 65 e2 49 14 20 2a 07 52 79 f4 c8 41 6f bc 6d 5b 54 43 6a 60 55 52 31 4e 59 15 df 6c b4 46 6a e0 ab 84 ab 8a eb 5d e4 a8 0a 10 07 8e ea 14 3d eb 90 24 2f bc 2f a6 10 c2 0a 5b b5 54 66 5e 44 f5 bc c9 a1 19 d0 94 af 12 ae 6b da 47 2d c5 56 8b 01 35 71 d4 c6 30 88 4a 48 3d f0 Data Ascii: QKxCkw1n$un90$E.zq]\|^cII6Mz+G+$XJCk+dK!.XwGWYZq0)E1&&@G#o!A"+}[,eI *RyAom[TCj`UR1NYlFj]=$//[Tf^DkG-V5q0JH=
2024-07-03 16:53:38 UTC	1390	IN	Data Raw: 7a f4 ec 7d e6 2d 51 67 4e a5 ac 5c 30 30 71 0f de 5b b8 07 cc c5 38 b0 31 44 03 84 d7 4c 1b 78 01 9a 72 90 bc f1 09 51 c2 66 3f 84 66 5c 15 84 53 16 02 6f 88 9e 47 37 cc d3 96 a3 28 d9 9b 81 f0 5a 15 48 0b 10 83 01 96 85 3f 6c 9e 92 06 e3 2d 71 f0 9e d7 21 99 71 c2 cc c0 c6 ca 19 49 bc a9 f9 e8 0c f7 3c 69 2e e2 15 10 5e a9 0b c4 60 60 1e 81 d5 30 f0 87 79 77 0f dd b7 bc 29 ca 10 f6 bd 8f 69 e2 45 eb c1 2b 84 3b ce 14 e5 1d 32 78 36 8e 82 37 cc 77 06 c2 2b 21 42 52 b0 70 0f 4c be 18 2f 54 63 35 f3 02 36 f3 a6 47 0d 3e 66 6f 5b 8e cc 83 f9 18 d1 c4 3f 36 63 91 f7 44 cf 62 40 08 11 30 15 10 2e 15 81 38 18 54 01 4c 83 71 14 ff 03 06 0f bd d7 5c b1 e0 c3 7f bc ad ca ac 79 2d 1c 8d 0d 59 cf a4 60 bc 88 a1 f0 91 69 93 13 44 e7 c8 c2 00 c2 05 0b 11 e4 11 18 2a Data Ascii: z}-QgN\00q[81DLxrQf?f\SoG7(ZH?l-q!qI<i.^``0yw)iE+;2x67w+!BRpL/Tc56G>fo[?6cDb@0.8TLq\y-Y`iD*
2024-07-03 16:53:38 UTC	1390	IN	Data Raw: 00 e2 58 78 62 b5 cf bc 4d f8 a7 5a 5d f9 c4 57 cc a3 6d 07 35 2e d4 ae fc 11 bd 1b d8 ae 01 65 a7 de fb 7e 48 c6 1f 41 ad 89 ee 2b cf 6a af bc 4d 78 21 e3 7a 93 3d 0f ad 24 89 ab 15 ac f8 98 05 81 41 38 97 bc 67 e5 8f ba 1e 1f 30 55 20 ad f3 fd e3 1c c5 c3 96 67 c1 d7 3e ba 73 30 27 98 5d 78 9b f0 47 cd e3 22 79 3f a6 c1 47 7f 92 e2 8a 0f cc 6d b3 80 04 4e 58 94 ae 53 71 35 9e c9 5e e1 ce 1b a9 6b e5 c0 dc 57 3c 9b 53 69 b6 04 0e da ba 80 27 de 26 fc e1 79 b6 92 37 01 6c 1b a5 25 a9 3e 7a 08 d5 8c b7 ac da d8 93 c1 e4 c6 3f 45 3d cc 10 47 bf 33 9e 14 0f ff 31 04 5c d8 72 60 a9 71 22 7a 03 6c c8 13 0c 0b 7f cd c5 38 23 1c 95 41 7a dd aa e7 2c fc 13 eb e0 e3 6e b7 a4 d9 78 cd d4 3d a4 b4 34 ee 47 e3 85 dd 29 c6 51 ec d9 1f 23 47 ad ef 28 bd f9 03 4f a2 af Data Ascii: XxbMZ]Wm5.e~HA+jMx!z=$A8g0U g>s0']xG"y?GmNXSq5^kW<Si'&y7l%>z?E=G31\r`q"zl8#Az,nx=4G)Q#G(O
2024-07-03 16:53:38 UTC	59	IN	Data Raw: 25 fc aa e8 62 40 d2 9c 8c ef 12 7e d7 a4 63 35 93 f5 3e f2 6d c2 6f 2b 7d 18 46 99 f9 3e e1 d7 d9 5c b6 fc 84 ff 01 4e de f0 b9 5c 13 aa be 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: %b@~c5>mo+}F>\N\IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:38 UTC	759	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIkqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 16:53:39 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Wed, 03 Jul 2024 16:53:38 GMT Expires: Wed, 03 Jul 2024 16:53:38 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 16:53:39 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-07-03 16:53:39 UTC	1390	IN	Data Raw: df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 ef 89 86 cf 73 dd 53 65 31 b1 5b c5 29 02 22 c7 cd 29 25 d8 85 49 ba 1d d8 91 f8 bc 28 82 23 4d 81 d9 34 ba 40 16 b7 03 9f 23 17 f9 cd e2 1b 58 9f e7 84 50 3c c1 fc 13 6b df 94 b1 67 a4 95 f0 16 4f eb a8 86 df 49 a9 13 3e 2d 9c 02 a2 27 1f 5f e9 51 e1 12 54 ea 79 0f 3d 5a 9e 47 52 7b 5d 14 80 26 74 7d 2a 1a ee c6 e4 bc 8e 94 12 3e 4a 04 9b 21 2c d0 d9 58 36 f3 48 43 a0 1b 24 f1 3a 8e 7d be ec 7a bb da Data Ascii: /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHusSe1[)")%I(#M4@#XP<kgOI>-'_QTy=ZGR{]&t}*>J!,X6HC$:}z
2024-07-03 16:53:39 UTC	1061	IN	Data Raw: ab 50 1a 37 9a 50 9e f0 62 0d d1 67 44 a4 6d b3 e8 52 9d 27 0a 80 0c 90 57 cf 83 f3 85 03 40 9a e0 3e 0f 51 30 cf 8d 8d 03 11 18 1d ea 36 e1 00 74 df 9d 6c 69 a7 3e 30 e6 84 85 36 ca 2d d6 73 a1 28 82 e0 63 b9 00 e9 89 af f4 89 40 0a 0f a0 56 28 a2 38 b0 c9 6f 43 dc d5 5c 13 1c e9 cf 25 26 8c 47 6d ca 2e 59 22 c2 4f 6a e2 6d 17 8a 22 40 f0 8a 62 36 7a 8b ac 7f 9e be d1 aa ac 01 cd 89 31 dd 5d e8 11 2a a2 5f cd c6 7d 4c 91 f5 2f 8c 5c d0 c8 65 75 d4 ad 60 2b 09 a0 9b 81 eb 86 a0 f7 36 89 02 70 f3 c7 b9 4d 25 ae 7f dd f6 54 53 42 fb 83 df 92 8e 29 2b c0 42 31 e4 6a a6 8e 85 b1 c2 06 a8 bf a2 62 61 66 d4 10 4f 1d 5a 2f 9e 10 78 4a 4c d1 56 8e b8 b1 15 19 0b 74 19 f4 c6 a3 be 88 7e 23 fa ec 7c 94 2c 68 61 76 db fd 0c ec c6 48 2c 6d 29 b4 c1 6a 99 b2 03 33 d6 Data Ascii: P7PbgDmR'W@>Q06tli>06-s(c@V(8oC\%&Gm.Y"Ojm"@b6z1]*_}L/\eu`+6pM%TSB)+B1jbafOZ/xJLVt~#\|,havH,m)j3

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://srtuiu.buzz/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJsWjNVMFZLTVV4SWRuQnpOVTFzYW1oNlJWRT0mdWlkPVVTRVIyMDA2MjAyNFVOSVFVRTA5NDgwNjIwMjAyMDI0MjAyNDA2MjA0ODA5MjA=N0123N%5BEMail%5D

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Windows Analysis Report
https://srtuiu.buzz/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVJsWjNVMFZLTVV4SWRuQnpOVTFzYW1oNlJWRT0mdWlkPVVTRVIyMDA2MjAyNFVOSVFVRTA5NDgwNjIwMjAyMDI0MjAyNDA2MjA0ODA5MjA=N0123N%5BEMail%5D

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:40 UTC	679	OUT	GET /favicon.ico HTTP/1.1 Host: google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIkqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 16:53:40 UTC	453	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/favicon.ico Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: sffe Content-Length: 231 X-XSS-Protection: 0 Date: Wed, 03 Jul 2024 16:42:05 GMT Expires: Wed, 03 Jul 2024 17:12:05 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 695 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 16:53:40 UTC	231	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/favicon.ico">here</A>.</BODY></HTML>

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:40 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 16:53:40 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=83784 Date: Wed, 03 Jul 2024 16:53:40 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:41 UTC	681	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIkqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 16:53:41 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 03 Jul 2024 15:27:27 GMT Expires: Thu, 11 Jul 2024 15:27:27 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 5174 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 16:53:41 UTC	685	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-07-03 16:53:41 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J
2024-07-03 16:53:41 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-07-03 16:53:41 UTC	1390	IN	Data Raw: ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBF!4I
2024-07-03 16:53:41 UTC	575	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:41 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 16:53:41 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=83771 Date: Wed, 03 Jul 2024 16:53:41 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-03 16:53:41 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:42 UTC	442	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIkqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 16:53:42 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 03 Jul 2024 15:41:57 GMT Expires: Thu, 11 Jul 2024 15:41:57 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 4305 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 16:53:42 UTC	685	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-07-03 16:53:42 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J
2024-07-03 16:53:42 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-07-03 16:53:42 UTC	1390	IN	Data Raw: ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBF!4I
2024-07-03 16:53:42 UTC	575	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:49 UTC	770	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIkqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 16:53:49 UTC	1664	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 16:53:49 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-RSi6Z_t0shCZRdr109rL0A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AQTF6Hw6N9nniAsld8sx8LP--7p4acXF_Q3XwjNlSgIW9cht96uKlutYupE; expires=Mon, 30-Dec-2024 16:53:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=515=dM-H7oxYW-8mbx9d4xSkcISr-fpgBvd16kQqlVEspNSOePWph1wEA7o1watb2y6mNUa6i_Z7r935xsiNF7pMpKi9bXzjc_S_XnY9p74wNBd_FpZJCwRQqulyBagY5XCYSQ2jxH0tlysVluH9_OB2nW58uvGTTTio4FWsfZxEMqo; expires=Thu, 02-Jan-2025 16:53:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 16:53:49 UTC	1664	IN	Data Raw: 32 32 38 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 2281<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2024-07-03 16:53:49 UTC	1664	IN	Data Raw: 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 61 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 6e 5b 67 5d 7d 3b 61 2e 73 72 63 3d 63 7d 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 62 3b 72 65 74 75 72 6e 20 74 28 22 22 2c 61 2c 62 29 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 79 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 79 3d 5b 5d 3b 67 6f 6f 67 6c 65 2e 78 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 29 76 61 72 20 63 3d 61 2e 69 64 3b 65 6c 73 65 7b 64 6f 20 63 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 77 Data Ascii: length;n[g]=a;a.onerror=a.onload=a.onabort=function(){delete n[g]};a.src=c}};google.logUrl=function(a,b){b=b===void 0?l:b;return t("",a,b)};}).call(this);(function(){google.y={};google.sy=[];google.x=function(a,b){if(a)var c=a.id;else{do c=Math.random();w
2024-07-03 16:53:49 UTC	1664	IN	Data Raw: 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 6e 73 2c 72 3d 71 3f 61 61 7c 7c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 28 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 70 6e 6f 7c 7c 30 29 7d 76 61 72 20 62 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 72 73 2c 75 3d 71 3f 62 61 7c 7c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: google.stvsc.ns,r=q?aa\|\|window.performance.timing.navigationStart:void 0;function t(){return window.performance.now()-(google.stvsc&&google.stvsc.pno\|\|0)}var ba=google.stvsc&&google.stvsc.rs,u=q?ba\|\|window.performance.timing.responseStart:void 0;function
2024-07-03 16:53:49 UTC	1664	IN	Data Raw: 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 3b 76 61 72 20 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 76 3d 5b 5d 3b 74 68 69 73 2e 42 3d 74 68 69 73 2e 67 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 61 66 74 22 29 3b 74 68 69 73 2e 6a 3d 21 21 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 29 3b 76 61 72 20 64 3b 69 66 28 64 3d 21 74 68 69 73 2e 6a 29 61 3a 7b 66 6f 72 28 64 3d 30 3b 64 3c 43 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 69 66 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 43 5b 64 5d 29 29 7b 64 3d 21 30 3b 62 72 65 61 Data Ascii: .attachEvent&&a.detachEvent("on"+b,c)};var la=function(a,b,c){this.g=a;this.v=[];this.B=this.g.hasAttribute("data-noaft");this.j=!!this.g.getAttribute("data-deferred");var d;if(d=!this.j)a:{for(d=0;d<C.length;++d)if(a.getAttribute("data-"+C[d])){d=!0;brea
2024-07-03 16:53:49 UTC	1664	IN	Data Raw: 42 79 54 61 67 4e 61 6d 65 28 22 69 6d 67 22 29 2c 63 3d 30 2c 64 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 61 28 48 28 62 5b 63 5d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 69 66 28 61 26 26 28 61 3d 61 2e 74 61 72 67 65 74 2c 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 49 4d 47 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 46 28 48 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e Data Ascii: ByTagName("img"),c=0,d=b.length;c<d;++c)a(H(b[c]))};function na(a){if(a&&(a=a.target,a.tagName==="IMG")){var b=Date.now();F(H(a,void 0,!0,!0),b)}}function J(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.
2024-07-03 16:53:49 UTC	521	IN	Data Raw: 3b 41 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 50 2c 21 30 29 3b 4f 28 30 29 3b 77 26 26 28 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 3d 6e 61 2c 41 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 6c 6f 61 64 22 2c 4a 2c 21 30 29 2c 41 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 65 72 72 6f 72 22 2c 4a 2c 21 30 29 29 3b 67 6f 6f 67 6c 65 2e 63 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 21 61 7c 7c 21 62 26 26 64 61 28 61 29 29 72 65 74 75 72 6e 20 30 3b 69 66 28 21 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 72 65 74 75 72 6e 20 31 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 Data Ascii: ;A(document,"visibilitychange",P,!0);O(0);w&&(google.c.oil=na,A(document.documentElement,"load",J,!0),A(document.documentElement,"error",J,!0));google.cv=function(a,b,c,d){if(!a\|\|!b&&da(a))return 0;if(!a.getBoundingClientRect)return 1;var e=function(k){re
2024-07-03 16:53:49 UTC	349	IN	Data Raw: 31 35 36 0d 0a 3d 6e 75 6c 6c 7d 7d 67 6f 6f 67 6c 65 2e 63 61 66 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 3d 3d 6e 75 6c 6c 3f 51 28 61 29 3a 28 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 67 6f 6f 67 6c 65 2e 61 66 74 71 7c 7c 5b 5d 2c 67 6f 6f 67 6c 65 2e 61 66 74 71 2e 70 75 73 68 28 61 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 61 76 69 67 61 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 74 79 70 65 7d 3b 76 61 72 20 70 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2c 71 61 3d 22 61 66 74 20 61 66 74 69 20 61 Data Ascii: 156=null}}google.caft=function(a){google.aftq===null?Q(a):(google.aftq=google.aftq\|\|[],google.aftq.push(a))};function R(){return window.performance&&window.performance.navigation&&window.performance.navigation.type};var pa=window.location,qa="aft afti a
2024-07-03 16:53:49 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 61 2b 22 3d 28 5c 5c 64 2b 29 22 29 29 29 3f 4e 75 6d 62 65 72 28 61 5b 31 5d 29 3a 2d 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 54 28 61 29 7b 76 61 72 20 62 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2c 63 3d 62 2e 6d 3b 69 66 28 21 63 7c 7c 21 63 2e 70 72 73 29 7b 63 3d 77 69 6e 64 6f 77 2e 5f 63 73 63 3d 3d 3d 22 61 67 73 61 22 26 26 77 69 6e 64 6f 77 2e 5f 63 73 68 69 64 3b 76 61 72 20 64 3d 52 28 29 7c 7c 63 3f 30 3a 53 28 22 71 73 75 62 74 73 22 29 3b 64 3e 30 26 26 28 63 3d 53 28 22 66 62 74 73 22 29 2c 63 3e 30 26 26 28 62 2e 74 2e 73 74 61 72 74 3d 4d 61 74 68 2e 6d 61 78 28 64 2c 63 29 29 29 3b 76 61 72 20 65 3d 62 2e 74 2c 6b 3d 65 2e 73 74 61 72 Data Ascii: 8000match(new RegExp("[?&]"+a+"=(\\d+)")))?Number(a[1]):-1}function T(a){var b=google.timers.load,c=b.m;if(!c\|\|!c.prs){c=window._csc==="agsa"&&window._cshid;var d=R()\|\|c?0:S("qsubts");d>0&&(c=S("fbts"),c>0&&(b.t.start=Math.max(d,c)));var e=b.t,k=e.star
2024-07-03 16:53:49 UTC	1390	IN	Data Raw: 3a 6c 2e 76 2e 70 75 73 68 28 65 29 29 7d 29 3b 62 28 29 3b 6b 3d 21 31 3b 64 28 29 7d 3b 76 61 72 20 57 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 66 75 6e 63 74 69 6f 6e 20 74 61 28 29 7b 69 66 28 67 6f 6f 67 6c 65 2e 63 2e 63 34 74 26 26 57 26 26 57 2e 6d 61 72 6b 26 26 57 2e 74 69 6d 69 6e 67 29 7b 76 61 72 20 61 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2c 62 3d 61 2e 77 73 72 74 3b 61 3d 61 2e 74 2e 61 66 74 3b 62 26 26 62 3e 30 26 26 61 26 26 61 3e 30 26 26 28 61 2d 3d 57 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 61 3e 30 26 26 28 57 2e 6d 61 72 6b 28 22 53 65 61 72 63 68 41 46 54 53 74 61 72 74 22 2c 7b 73 74 61 72 74 54 69 6d 65 3a 62 7d 29 2c 57 2e 6d 61 72 6b 28 22 74 72 69 67 67 65 Data Ascii: :l.v.push(e))});b();k=!1;d()};var W=window.performance;function ta(){if(google.c.c4t&&W&&W.mark&&W.timing){var a=google.timers.load,b=a.wsrt;a=a.t.aft;b&&b>0&&a&&a>0&&(a-=W.timing.navigationStart,a>0&&(W.mark("SearchAFTStart",{startTime:b}),W.mark("trigge
2024-07-03 16:53:49 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 75 61 7c 7c 28 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 61 66 74 22 29 2c 75 61 3d 21 30 29 3b 59 7c 7c 76 61 28 61 2c 62 29 7d 3b 67 6f 6f 67 6c 65 2e 63 2e 6d 69 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 76 61 72 20 65 3d 45 28 64 29 3b 64 2e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 74 66 22 2c 53 74 72 69 6e 67 28 65 29 29 3b 72 65 74 75 72 6e 20 78 26 26 21 64 2e 42 26 26 28 21 64 2e 6c 7c 7c 64 2e 46 7c 7c 21 21 28 45 28 64 29 26 31 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 78 26 26 79 28 22 69 6d 6c 22 2c 64 7c 7c 61 29 3b 67 6f 6f 67 6c 65 2e 63 2e 75 28 22 69 6d 6c 22 29 7d 77 61 7c 7c 28 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 69 6d 6c 22 Data Ascii: unction(){});ua\|\|(google.c.b("aft"),ua=!0);Y\|\|va(a,b)};google.c.miml=function(a){function b(d){var e=E(d);d.g.setAttribute("data-atf",String(e));return x&&!d.B&&(!d.l\|\|d.F\|\|!!(E(d)&1))}function c(d){x&&y("iml",d\|\|a);google.c.u("iml")}wa\|\|(google.c.b("iml"

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:50 UTC	1618	OUT	GET /xjs/_/ss/k=xjs.hd.O5pTwBf7VYU.L.B1.O/am=AKYAAAAAAAAAAwAAAAAAAAAAAAAAAABAAAAgAAAAAAAABYBPDgAIAGwIAAAAIABAAAAAAAAAKAAAAIAJAAAAAQBIAAgAEBAAACAAQAQQABAAAhQBJAAKBBlAAABABDAYBkAqAJgCAAAAAggAAAAAwI0ABAgAABEAAXgAAQAE6AABMAAIAABAIAMYCAAAAAAAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAgAKAAAAAAAAAAAAAAAAAAAABA/d=1/ed=1/br=1/rs=ACT90oEvAjvLMSMTaemOggNySj0ZNEF5hQ/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIkqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hw6N9nniAsld8sx8LP--7p4acXF_Q3XwjNlSgIW9cht96uKlutYupE; NID=515=dM-H7oxYW-8mbx9d4xSkcISr-fpgBvd16kQqlVEspNSOePWph1wEA7o1watb2y6mNUa6i_Z7r935xsiNF7pMpKi9bXzjc_S_XnY9p74wNBd_FpZJCwRQqulyBagY5XCYSQ2jxH0tlysVluH9_OB2nW58uvGTTTio4FWsfZxEMqo
2024-07-03 16:53:50 UTC	809	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 2429 Date: Wed, 03 Jul 2024 16:53:50 GMT Expires: Thu, 03 Jul 2025 16:53:50 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 04:11:02 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 16:53:50 UTC	581	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 43 4f 45 6d 59 3a 23 32 30 32 31 32 34 3b 2d 2d 78 68 55 47 77 63 3a 23 66 66 66 7d 3a 72 6f 6f 74 7b 2d 2d 67 53 35 6a 58 62 3a 23 64 61 64 63 65 30 3b 2d 2d 41 71 6e 37 78 64 3a 23 64 32 64 32 64 32 3b 2d 2d 45 70 46 4e 57 3a 23 66 66 66 3b 2d 2d 49 58 6f 78 55 65 3a 23 37 30 37 35 37 61 3b 2d 2d 62 62 51 78 41 62 3a 23 34 64 35 31 35 36 3b 2d 2d 59 4c 4e 4e 48 63 3a 23 32 30 32 31 32 34 3b 2d 2d 54 4d 59 53 39 3a 23 31 61 37 33 65 38 3b 2d 2d 4a 4b 71 78 32 3a 23 31 61 30 64 61 62 3b 2d 2d 72 72 4a 4a 55 63 3a 23 31 61 37 33 65 38 3b 2d 2d 6d 58 5a 6b 71 63 3a 23 64 61 64 63 65 30 3b 2d 2d 4e 73 6d 30 63 65 3a 23 34 32 38 35 66 34 3b 2d 2d 58 4b 4d 44 78 63 3a 23 66 37 66 38 66 39 3b 2d 2d 61 59 6e 32 53 3a 23 65 63 65 64 65 65 Data Ascii: :root{--COEmY:#202124;--xhUGwc:#fff}:root{--gS5jXb:#dadce0;--Aqn7xd:#d2d2d2;--EpFNW:#fff;--IXoxUe:#70757a;--bbQxAb:#4d5156;--YLNNHc:#202124;--TMYS9:#1a73e8;--JKqx2:#1a0dab;--rrJJUc:#1a73e8;--mXZkqc:#dadce0;--Nsm0ce:#4285f4;--XKMDxc:#f7f8f9;--aYn2S:#ecedee
2024-07-03 16:53:50 UTC	1390	IN	Data Raw: 74 73 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 2d 63 6f 6e 74 65 6e 74 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 2d 63 6f 6e 74 65 6e 74 7b 74 6f 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 2e 4c 48 Data Ascii: ts:none;transform:translateY(0)}to{transform:translateY(-100%)}}@keyframes g-snackbar-hide{from{transform:translateY(-100%)}to{transform:translateY(0)}}@keyframes g-snackbar-show-content{from{opacity:0}}@keyframes g-snackbar-hide-content{to{opacity:0}}.LH
2024-07-03 16:53:50 UTC	77	IN	Data Raw: 2d 6c 65 66 74 3a 30 7d 2e 6a 68 5a 76 6f 64 7b 6c 65 66 74 3a 31 36 70 78 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 4c 48 33 77 47 2c 2e 4f 78 38 43 79 64 7b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 7d 2e 79 4b 36 6a 71 65 2c 2e 57 Data Ascii: -left:0}.jhZvod{left:16px;right:auto}.LH3wG,.Ox8Cyd{left:0;right:0}.yK6jqe,.W
2024-07-03 16:53:50 UTC	381	IN	Data Raw: 75 30 76 39 62 2c 2e 45 37 48 64 67 62 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 47 39 6a 6f 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 34 70 78 3b 62 6f 74 74 6f 6d 3a 2d 32 34 70 78 3b 6c 65 66 74 3a 2d 32 34 70 78 3b 72 69 67 68 74 3a 2d 32 34 70 78 7d 2e 41 42 4d 46 5a 2e 42 30 35 52 42 62 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 31 30 30 6d 73 2c 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 30 73 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 36 29 7d 2e 41 42 4d 46 5a 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: u0v9b,.E7Hdgb{position:relative}.G9jore{position:absolute;top:-24px;bottom:-24px;left:-24px;right:-24px}.ABMFZ.B05RBb{transition:background-color 100ms,visibility 0s 0s;visibility:inherit;background-color:rgba(0,0,0,0.6)}.ABMFZ{transition:background-color

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:50 UTC	1312	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIkqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hw6N9nniAsld8sx8LP--7p4acXF_Q3XwjNlSgIW9cht96uKlutYupE; NID=515=dM-H7oxYW-8mbx9d4xSkcISr-fpgBvd16kQqlVEspNSOePWph1wEA7o1watb2y6mNUa6i_Z7r935xsiNF7pMpKi9bXzjc_S_XnY9p74wNBd_FpZJCwRQqulyBagY5XCYSQ2jxH0tlysVluH9_OB2nW58uvGTTTio4FWsfZxEMqo
2024-07-03 16:53:51 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5969 Date: Wed, 03 Jul 2024 16:53:51 GMT Expires: Wed, 03 Jul 2024 16:53:51 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 16:53:51 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2024-07-03 16:53:51 UTC	1390	IN	Data Raw: 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 34 34 81 a0 23 96 da 69 9b 71 fd 27 74 d5 a5 75 a0 a1 09 a4 da c5 de 8d c5 54 01 e2 2b 6a f4 41 53 79 6a 54 d3 e9 f6 75 dc e8 28 66 cd 79 c5 ac 75 77 81 1b bf 2d 65 8d 42 c9 b6 2a 85 ac 35 84 57 fc 1d ff 2e fe ff ae a2 6d 7e bd 9c 35 2d 7c 5f 22 3e ff 6a d6 be ad af bd 63 5b 6f fb bc 6d 2b da ef 1e ec 4b fd 76 eb 8a 54 61 6b 5f aa 22 fe 5c 15 7f 1e 14 ab 3c d8 db f6 8c f8 ba 1f 89 75 b1 f8 da e3 f1 7d 2c 01 c0 Data Ascii: Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo4444#iq'tuT+jASyjTu(fyuw-eB*5W.m~5-\|_">jc[om+KvTak_"\<u},
2024-07-03 16:53:51 UTC	1390	IN	Data Raw: 43 0f b1 f7 8a 23 ce 72 99 ca cc 96 87 c6 1d 31 aa d5 c4 4e b1 23 71 fd 11 92 83 b0 09 5a 54 77 92 40 20 90 a4 4b 44 a3 cf 23 ca 0d 59 51 5c 48 8c 42 9e c5 91 aa 36 2c bc 92 96 44 f5 1e 1c f3 11 88 13 5c 3c cc 85 5c 2a 71 21 ef ad 1a 46 8a 35 80 ea ec a3 c6 15 b3 d6 4f 24 7e e6 6d 6c 04 88 68 62 89 c4 b1 e2 9e 46 fb 59 aa 4f b2 94 78 9f fb 24 a2 9d 11 f3 6b 19 c7 3b 55 86 3c a6 3b c1 fe ac 01 80 7c 32 6e f0 56 d3 09 a4 f6 98 91 b5 7c 62 14 fa 5f 88 56 1a e9 db c2 51 9b f2 b3 10 55 d7 3a b0 cf 25 26 51 5f 1e eb 04 62 77 07 5f 67 35 28 e7 26 7e 90 aa f7 28 64 cd 27 11 16 32 02 68 6a 43 e3 19 a2 c8 6c 10 99 fa ba 11 c1 83 6c 7f b2 de 63 45 ea 09 91 93 d8 8d 45 80 a1 5f b3 f1 22 2f f2 3b 6a 14 32 b4 62 fc b0 ee 76 f0 9f 21 b6 5a 78 c8 75 b0 08 20 f6 c2 8c 38 Data Ascii: C#r1N#qZTw@ KD#YQ\HB6,D\<\*q!F5O$~mlhbFYOx$k;U<;\|2nV\|b_VQU:%&Q_bw_g5(&~(d'2hjCllcEE_"/;j2bv!Zxu 8
2024-07-03 16:53:51 UTC	1390	IN	Data Raw: 0d 7f e3 9a a7 13 2f d6 0f 98 42 60 68 10 d1 bf f2 33 ec 6d d8 de 97 3a 9d 56 3e 6d bb 45 71 19 f7 0e ca e7 c0 e7 dd c5 81 2c bf f9 10 e2 3e 7c 89 29 42 6e be 77 64 93 85 64 d8 77 3d 0d 3a f8 3f 02 43 21 9a cc 5d 01 30 40 4a 72 86 c6 d2 d9 cb aa 6d 2c 01 80 7a 51 90 da 6f c9 47 31 a7 72 f2 b0 12 e0 f4 e4 83 89 5d b8 eb c3 74 e1 52 65 c8 d4 b6 ee da 27 cd e6 d5 bb 1d 4c ac 7e bc 25 5a f8 95 7c 7e e4 57 44 72 d4 a3 7c 8e cd cb 77 3b a4 f6 e9 4f 95 17 a0 08 c0 14 00 1a 93 a6 2b 51 73 e6 29 21 88 c3 2f 71 eb 7b 30 5f 8e ff 26 5c 18 7c 40 90 c8 7a c9 6e d6 65 18 f2 c3 62 c4 cc ae 75 7b 71 37 78 44 22 7a 7a 7a b4 06 2c 6a b7 62 39 6b 7e 49 51 33 dd bf 12 37 d0 1f ea 3b b0 b7 bd 42 24 91 73 14 4d bc fb 2a e5 e7 e3 73 d6 73 3f e3 f9 e0 4e 62 1e eb 56 05 f3 75 db Data Ascii: /B`h3m:V>mEq,>\|)Bnwddw=:?C!]0@Jrm,zQoG1r]tRe'L~%Z\|~WDr\|w;O+Qs)!/q{0_&\\|@znebu{q7xD"zzz,jb9k~IQ37;B$sM*ss?NbVu
2024-07-03 16:53:51 UTC	1080	IN	Data Raw: 35 71 cf fd be 90 35 3f c2 54 03 c2 2c 54 56 70 03 c7 73 5c 81 fd bf b7 04 19 75 d6 44 94 b2 1d 27 29 0e 2d 51 3e 5b 8b 11 13 4c 01 44 27 ee 49 22 09 da af 92 38 f0 fe 98 f4 af 46 4c 58 b1 60 2b a1 60 3f 55 60 54 04 55 75 92 08 04 78 79 e6 84 dd f0 30 41 45 44 2d 79 98 37 10 12 a6 d1 13 09 ca a5 b6 eb bd d6 ac 88 03 ea 43 94 7e 59 93 51 33 08 79 11 ca aa 51 db ce 95 b2 e6 95 aa 1b a5 44 3e 62 2f 11 1d 2c c2 78 cb 48 89 03 ef 87 a8 03 93 fe 15 02 33 61 6c d7 ff 56 54 0f af bf 54 1a fd 63 98 00 85 40 90 a8 57 42 20 84 36 8b 02 b7 1e 8e 9a 38 10 e1 14 73 c6 34 16 27 a0 04 84 f0 cb 76 fc 5b b8 1b 94 23 26 8d 6d f0 21 e1 4e 70 4e 6e c1 7a 85 9b 53 be 09 a9 c4 ad 6e 44 24 8d 46 1c c5 ac e9 d4 cc e2 50 0e e8 3d c4 8d df dd 68 44 b2 b3 81 ae 07 fa 90 66 77 91 43 Data Ascii: 5q5?T,TVps\uD')-Q>[LD'I"8FLX`+`?U`TUuxy0AED-y7C~YQ3yQD>b/,xH3alVTTc@WB 68s4'v[#&m!NpNnzSnD$FP=hDfwC

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:51 UTC	3775	OUT	GET /xjs/_/js/k=xjs.hd.en.MWU7zAcdjPg.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAgBFAAAAAoAAAAAAAAAAAAAIAAIQBAKAAABMABAERAAABAAACAQBCAR7kAAASACQAAAAABAAAKBCBAAAAABAAAAAAoAAAAAAAAAAAAAAAYQAABAAAAAAAAAAAAAAAA6AAAAAACIEAQAAMYCAAABAAAACAPAIIDYJCCAAAAAAAAAAAAAAAAApAgmAsJKAggAAAAAAAAAAAAAAAAgJR0YmED/d=1/ed=1/dg=2/br=1/rs=ACT90oGr-0QYF5EERG5ofjKDi5upM68tuQ/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IZrNqe:P8ha2c;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud: [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIkqHLAQiFoM0BCNy9zQEIucrNAQiK080BCMfUzQEIodbNAQio2M0BCPnA1BUYwcvMARi60s0BGMXYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hw6N9nniAsld8sx8LP--7p4acXF_Q3XwjNlSgIW9cht96uKlutYupE; NID=515=dM-H7oxYW-8mbx9d4xSkcISr-fpgBvd16kQqlVEspNSOePWph1wEA7o1watb2y6mNUa6i_Z7r935xsiNF7pMpKi9bXzjc_S_XnY9p74wNBd_FpZJCwRQqulyBagY5XCYSQ2jxH0tlysVluH9_OB2nW58uvGTTTio4FWsfZxEMqo
2024-07-03 16:53:51 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 885267 Date: Wed, 03 Jul 2024 16:53:51 GMT Expires: Thu, 03 Jul 2025 16:53:51 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 23:37:01 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 16:53:51 UTC	572	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 4d 49 54 0a 2a 2f 0a 2f 2a 0a 20 53 Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// Copyright 2024 Google, Inc SPDX-License-Identifier: MIT// S
2024-07-03 16:53:51 UTC	1390	IN	Data Raw: 63 61 2c 4c 63 61 2c 4d 63 61 2c 56 63 61 2c 58 63 61 2c 59 63 61 2c 24 63 61 2c 62 64 61 2c 63 64 61 2c 67 64 61 2c 6a 64 61 2c 64 64 61 2c 69 64 61 2c 68 64 61 2c 66 64 61 2c 65 64 61 2c 6b 64 61 2c 6c 64 61 2c 6d 64 61 2c 6e 64 61 2c 71 64 61 2c 72 64 61 2c 73 64 61 2c 74 64 61 2c 75 64 61 2c 78 64 61 2c 79 64 61 2c 42 64 61 2c 7a 64 61 2c 46 64 61 2c 47 64 61 2c 4d 64 61 2c 4e 64 61 2c 50 64 61 2c 4f 64 61 2c 52 64 61 2c 54 64 61 2c 53 64 61 2c 56 64 61 2c 55 64 61 2c 59 64 61 2c 58 64 61 2c 24 64 61 2c 64 65 61 2c 65 65 61 2c 70 62 2c 69 65 61 2c 6b 65 61 2c 6c 65 61 2c 6e 65 61 2c 70 65 61 2c 7a 65 61 2c 42 65 61 2c 41 65 61 2c 43 65 61 2c 6a 65 61 2c 6d 65 61 2c 41 62 2c 46 65 61 2c 4a 65 61 2c 52 65 61 2c 53 65 61 2c 61 66 61 2c 58 65 61 2c 63 66 Data Ascii: ca,Lca,Mca,Vca,Xca,Yca,$ca,bda,cda,gda,jda,dda,ida,hda,fda,eda,kda,lda,mda,nda,qda,rda,sda,tda,uda,xda,yda,Bda,zda,Fda,Gda,Mda,Nda,Pda,Oda,Rda,Tda,Sda,Vda,Uda,Yda,Xda,$da,dea,eea,pb,iea,kea,lea,nea,pea,zea,Bea,Aea,Cea,jea,mea,Ab,Fea,Jea,Rea,Sea,afa,Xea,cf
2024-07-03 16:53:51 UTC	1390	IN	Data Raw: 65 3d 62 29 7d 3b 5f 2e 61 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 63 2b 3d 61 5b 65 5d 2b 28 65 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 65 5d 3a 22 25 73 22 29 3b 5f 2e 61 61 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2b 61 5b 64 5d 29 7d 3b 62 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 22 29 3b 62 2e 70 75 73 68 28 36 35 35 33 33 29 7d 3b 63 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 62 29 3b 72 65 74 75 72 6e 20 61 3d 3d 6e Data Ascii: e=b)};_.aaa=function(a,b){a=a.split("%s");for(var c="",d=a.length-1,e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");_.aa.call(this,c+a[d])};baa=function(a,b){if(a)throw Error("C");b.push(65533)};caa=function(a,b){b=String.fromCharCode.apply(null,b);return a==n
2024-07-03 16:53:51 UTC	1390	IN	Data Raw: 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 2f 2e 74 65 73 74 28 61 29 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 44 22 29 3b 61 3d 28 6b 61 61 7c 7c 28 6b 61 61 3d 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 29 2e 65 6e 63 6f 64 65 28 61 29 7d 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 33 2a 61 2e 6c 65 6e 67 74 68 29 2c 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3b 69 66 28 66 3c 31 32 38 29 64 5b 63 2b 2b 5d 3d 66 3b 65 6c 73 65 7b 69 66 28 66 3c 32 30 34 38 29 64 5b 63 2b 2b 5d 3d 66 3e 3e 36 7c 31 39 32 3b 65 6c 73 65 7b 69 66 28 66 3e 3d 35 35 32 39 36 26 26 66 3c 3d 35 37 33 34 33 29 Data Ascii: FF](?![\uDC00-\uDFFF])/.test(a)))throw Error("D");a=(kaa\|\|(kaa=new TextEncoder)).encode(a)}else{for(var c=0,d=new Uint8Array(3*a.length),e=0;e<a.length;e++){var f=a.charCodeAt(e);if(f<128)d[c++]=f;else{if(f<2048)d[c++]=f>>6\|192;else{if(f>=55296&&f<=57343)
2024-07-03 16:53:51 UTC	1390	IN	Data Raw: 29 7c 7c 5f 2e 68 61 28 22 46 78 69 4f 53 22 29 7d 3b 5f 2e 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 53 61 66 61 72 69 22 29 26 26 21 28 5f 2e 69 61 28 29 7c 7c 28 5f 2e 71 61 61 28 29 3f 30 3a 5f 2e 68 61 28 22 43 6f 61 73 74 22 29 29 7c 7c 5f 2e 72 61 61 28 29 7c 7c 5f 2e 74 61 61 28 29 7c 7c 5f 2e 75 61 61 28 29 7c 7c 28 5f 2e 71 61 61 28 29 3f 6e 61 61 28 22 4f 70 65 72 61 22 29 3a 5f 2e 68 61 28 22 4f 50 52 22 29 29 7c 7c 5f 2e 76 61 61 28 29 7c 7c 5f 2e 77 61 61 28 29 7c 7c 5f 2e 68 61 28 22 41 6e 64 72 6f 69 64 22 29 29 7d 3b 5f 2e 69 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 71 61 61 28 29 3f 6e 61 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 5f 2e 68 61 28 22 43 68 72 6f 6d 65 22 29 Data Ascii: )\|\|_.ha("FxiOS")};_.ja=function(){return _.ha("Safari")&&!(_.ia()\|\|(_.qaa()?0:_.ha("Coast"))\|\|_.raa()\|\|_.taa()\|\|_.uaa()\|\|(_.qaa()?naa("Opera"):_.ha("OPR"))\|\|_.vaa()\|\|_.waa()\|\|_.ha("Android"))};_.ia=function(){return _.qaa()?naa("Chromium"):(_.ha("Chrome")
2024-07-03 16:53:51 UTC	1390	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 5f 2e 71 61 61 28 29 26 26 61 21 3d 3d 22 53 69 6c 6b 22 29 7b 76 61 72 20 62 3d 5f 2e 65 61 2e 62 72 61 6e 64 73 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 62 72 61 6e 64 3d 3d 3d 61 7d 29 3b 69 66 28 21 62 7c 7c 21 62 2e 76 65 72 73 69 6f 6e 29 72 65 74 75 72 6e 20 4e 61 4e 3b 62 3d 62 2e 76 65 72 73 69 6f 6e 2e 73 70 6c 69 74 28 22 2e 22 29 7d 65 6c 73 65 7b 62 3d 41 61 61 28 61 29 3b 69 66 28 62 3d 3d 3d 22 22 29 72 65 74 75 72 6e 20 4e 61 4e 3b 62 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 7d 72 65 74 75 72 6e 20 62 2e 6c 65 6e 67 74 68 3d 3d 3d 30 3f 4e 61 4e 3a 4e 75 6d 62 65 72 28 62 5b 30 5d 29 7d 3b 43 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: =function(a){if(_.qaa()&&a!=="Silk"){var b=_.ea.brands.find(function(c){return c.brand===a});if(!b\|\|!b.version)return NaN;b=b.version.split(".")}else{b=Aaa(a);if(b==="")return NaN;b=b.split(".")}return b.length===0?NaN:Number(b[0])};Caa=function(){return
2024-07-03 16:53:51 UTC	1390	IN	Data Raw: 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 65 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 2d 2d 65 29 65 20 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 63 2c 64 5b 65 5d 2c 65 2c 61 29 7d 3b 5f 2e 4c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 5f 2e 71 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 62 3c 30 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 63 68 61 72 41 74 28 62 29 3a 61 5b 62 5d 7d 3b 5f 2e 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 61 2e 6c 65 6e 67 74 68 2c 65 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 69 66 28 66 20 69 6e 20 Data Ascii: ing"?a.split(""):a,e=a.length-1;e>=0;--e)e in d&&b.call(c,d[e],e,a)};_.Laa=function(a,b,c){b=_.qa(a,b,c);return b<0?null:typeof a==="string"?a.charAt(b):a[b]};_.qa=function(a,b,c){for(var d=a.length,e=typeof a==="string"?a.split(""):a,f=0;f<d;f++)if(f in
2024-07-03 16:53:51 UTC	1390	IN	Data Raw: 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 61 2c 54 61 61 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 3b 54 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 32 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 29 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 3b 0a 5f 2e 56 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 7c 7c 61 3b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 30 2c 65 3d 7b 7d 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 66 3d 61 5b 64 2b 2b 5d 2c 67 3d 5f 2e 43 61 28 66 29 3f 22 6f 22 2b 5f 2e 44 61 Data Ascii: ray.prototype.splice.apply(a,Taa(arguments,1))};Taa=function(a,b,c){return arguments.length<=2?Array.prototype.slice.call(a,b):Array.prototype.slice.call(a,b,c)};_.Vaa=function(a,b){b=b\|\|a;for(var c=0,d=0,e={};d<a.length;){var f=a[d++],g=_.Ca(f)?"o"+_.Da
2024-07-03 16:53:51 UTC	1390	IN	Data Raw: 70 6c 79 28 6e 75 6c 6c 2c 66 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 62 2e 70 75 73 68 28 66 5b 67 5d 29 7d 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 0a 5f 2e 65 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 66 61 28 5f 2e 64 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 77 65 62 6b 69 74 22 29 26 26 21 5f 2e 68 61 28 22 45 64 67 65 22 29 7d 3b 5f 2e 66 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 47 65 63 6b 6f 22 29 26 26 21 5f 2e 65 62 61 28 29 26 26 21 28 5f 2e 68 61 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 5f 2e 68 61 28 22 4d 53 49 45 22 29 29 26 26 21 5f 2e 68 61 28 22 45 64 67 65 22 29 7d 3b 5f 2e 68 Data Ascii: ply(null,f);for(var g=0;g<f.length;g++)b.push(f[g])}else b.push(d)}return b};_.eba=function(){return _.fa(_.da().toLowerCase(),"webkit")&&!_.ha("Edge")};_.fba=function(){return _.ha("Gecko")&&!_.eba()&&!(_.ha("Trident")\|\|_.ha("MSIE"))&&!_.ha("Edge")};_.h
2024-07-03 16:53:51 UTC	1390	IN	Data Raw: 22 7d 3b 0a 5f 2e 75 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 3e 3e 3e 30 3b 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 61 2d 62 29 2f 34 32 39 34 39 36 37 32 39 36 29 3e 3e 3e 30 3b 5f 2e 4c 61 3d 62 3b 5f 2e 4d 61 3d 61 7d 3b 5f 2e 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 3c 30 3b 61 3d 4d 61 74 68 2e 61 62 73 28 61 29 3b 76 61 72 20 63 3d 61 3e 3e 3e 30 3b 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 61 2d 63 29 2f 34 32 39 34 39 36 37 32 39 36 29 3b 62 26 26 28 63 3d 5f 2e 4e 61 28 76 62 61 28 63 2c 61 29 29 2c 62 3d 63 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 61 3d 63 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 63 3d 62 29 3b 5f 2e 4c 61 3d 63 3e 3e 3e 30 3b 5f 2e 4d 61 3d 61 3e 3e 3e 30 7d 3b 78 62 61 3d Data Ascii: "};_.uba=function(a){var b=a>>>0;a=Math.floor((a-b)/4294967296)>>>0;_.La=b;_.Ma=a};_.Oa=function(a){var b=a<0;a=Math.abs(a);var c=a>>>0;a=Math.floor((a-c)/4294967296);b&&(c=_.Na(vba(c,a)),b=c.next().value,a=c.next().value,c=b);_.La=c>>>0;_.Ma=a>>>0};xba=

Timestamp	Bytes transferred	Direction	Data
2024-07-03 16:53:51 UTC	744	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIkqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hw6N9nniAsld8sx8LP--7p4acXF_Q3XwjNlSgIW9cht96uKlutYupE; NID=515=dM-H7oxYW-8mbx9d4xSkcISr-fpgBvd16kQqlVEspNSOePWph1wEA7o1watb2y6mNUa6i_Z7r935xsiNF7pMpKi9bXzjc_S_XnY9p74wNBd_FpZJCwRQqulyBagY5XCYSQ2jxH0tlysVluH9_OB2nW58uvGTTTio4FWsfZxEMqo
2024-07-03 16:53:52 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5969 Date: Wed, 03 Jul 2024 16:53:52 GMT Expires: Wed, 03 Jul 2024 16:53:52 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 16:53:52 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2024-07-03 16:53:52 UTC	1390	IN	Data Raw: 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 34 34 81 a0 23 96 da 69 9b 71 fd 27 74 d5 a5 75 a0 a1 09 a4 da c5 de 8d c5 54 01 e2 2b 6a f4 41 53 79 6a 54 d3 e9 f6 75 dc e8 28 66 cd 79 c5 ac 75 77 81 1b bf 2d 65 8d 42 c9 b6 2a 85 ac 35 84 57 fc 1d ff 2e fe ff ae a2 6d 7e bd 9c 35 2d 7c 5f 22 3e ff 6a d6 be ad af bd 63 5b 6f fb bc 6d 2b da ef 1e ec 4b fd 76 eb 8a 54 61 6b 5f aa 22 fe 5c 15 7f 1e 14 ab 3c d8 db f6 8c f8 ba 1f 89 75 b1 f8 da e3 f1 7d 2c 01 c0 Data Ascii: Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo4444#iq'tuT+jASyjTu(fyuw-eB*5W.m~5-\|_">jc[om+KvTak_"\<u},
2024-07-03 16:53:52 UTC	1390	IN	Data Raw: 43 0f b1 f7 8a 23 ce 72 99 ca cc 96 87 c6 1d 31 aa d5 c4 4e b1 23 71 fd 11 92 83 b0 09 5a 54 77 92 40 20 90 a4 4b 44 a3 cf 23 ca 0d 59 51 5c 48 8c 42 9e c5 91 aa 36 2c bc 92 96 44 f5 1e 1c f3 11 88 13 5c 3c cc 85 5c 2a 71 21 ef ad 1a 46 8a 35 80 ea ec a3 c6 15 b3 d6 4f 24 7e e6 6d 6c 04 88 68 62 89 c4 b1 e2 9e 46 fb 59 aa 4f b2 94 78 9f fb 24 a2 9d 11 f3 6b 19 c7 3b 55 86 3c a6 3b c1 fe ac 01 80 7c 32 6e f0 56 d3 09 a4 f6 98 91 b5 7c 62 14 fa 5f 88 56 1a e9 db c2 51 9b f2 b3 10 55 d7 3a b0 cf 25 26 51 5f 1e eb 04 62 77 07 5f 67 35 28 e7 26 7e 90 aa f7 28 64 cd 27 11 16 32 02 68 6a 43 e3 19 a2 c8 6c 10 99 fa ba 11 c1 83 6c 7f b2 de 63 45 ea 09 91 93 d8 8d 45 80 a1 5f b3 f1 22 2f f2 3b 6a 14 32 b4 62 fc b0 ee 76 f0 9f 21 b6 5a 78 c8 75 b0 08 20 f6 c2 8c 38 Data Ascii: C#r1N#qZTw@ KD#YQ\HB6,D\<\*q!F5O$~mlhbFYOx$k;U<;\|2nV\|b_VQU:%&Q_bw_g5(&~(d'2hjCllcEE_"/;j2bv!Zxu 8
2024-07-03 16:53:52 UTC	1390	IN	Data Raw: 0d 7f e3 9a a7 13 2f d6 0f 98 42 60 68 10 d1 bf f2 33 ec 6d d8 de 97 3a 9d 56 3e 6d bb 45 71 19 f7 0e ca e7 c0 e7 dd c5 81 2c bf f9 10 e2 3e 7c 89 29 42 6e be 77 64 93 85 64 d8 77 3d 0d 3a f8 3f 02 43 21 9a cc 5d 01 30 40 4a 72 86 c6 d2 d9 cb aa 6d 2c 01 80 7a 51 90 da 6f c9 47 31 a7 72 f2 b0 12 e0 f4 e4 83 89 5d b8 eb c3 74 e1 52 65 c8 d4 b6 ee da 27 cd e6 d5 bb 1d 4c ac 7e bc 25 5a f8 95 7c 7e e4 57 44 72 d4 a3 7c 8e cd cb 77 3b a4 f6 e9 4f 95 17 a0 08 c0 14 00 1a 93 a6 2b 51 73 e6 29 21 88 c3 2f 71 eb 7b 30 5f 8e ff 26 5c 18 7c 40 90 c8 7a c9 6e d6 65 18 f2 c3 62 c4 cc ae 75 7b 71 37 78 44 22 7a 7a 7a b4 06 2c 6a b7 62 39 6b 7e 49 51 33 dd bf 12 37 d0 1f ea 3b b0 b7 bd 42 24 91 73 14 4d bc fb 2a e5 e7 e3 73 d6 73 3f e3 f9 e0 4e 62 1e eb 56 05 f3 75 db Data Ascii: /B`h3m:V>mEq,>\|)Bnwddw=:?C!]0@Jrm,zQoG1r]tRe'L~%Z\|~WDr\|w;O+Qs)!/q{0_&\\|@znebu{q7xD"zzz,jb9k~IQ37;B$sM*ss?NbVu
2024-07-03 16:53:52 UTC	1080	IN	Data Raw: 35 71 cf fd be 90 35 3f c2 54 03 c2 2c 54 56 70 03 c7 73 5c 81 fd bf b7 04 19 75 d6 44 94 b2 1d 27 29 0e 2d 51 3e 5b 8b 11 13 4c 01 44 27 ee 49 22 09 da af 92 38 f0 fe 98 f4 af 46 4c 58 b1 60 2b a1 60 3f 55 60 54 04 55 75 92 08 04 78 79 e6 84 dd f0 30 41 45 44 2d 79 98 37 10 12 a6 d1 13 09 ca a5 b6 eb bd d6 ac 88 03 ea 43 94 7e 59 93 51 33 08 79 11 ca aa 51 db ce 95 b2 e6 95 aa 1b a5 44 3e 62 2f 11 1d 2c c2 78 cb 48 89 03 ef 87 a8 03 93 fe 15 02 33 61 6c d7 ff 56 54 0f af bf 54 1a fd 63 98 00 85 40 90 a8 57 42 20 84 36 8b 02 b7 1e 8e 9a 38 10 e1 14 73 c6 34 16 27 a0 04 84 f0 cb 76 fc 5b b8 1b 94 23 26 8d 6d f0 21 e1 4e 70 4e 6e c1 7a 85 9b 53 be 09 a9 c4 ad 6e 44 24 8d 46 1c c5 ac e9 d4 cc e2 50 0e e8 3d c4 8d df dd 68 44 b2 b3 81 ae 07 fa 90 66 77 91 43 Data Ascii: 5q5?T,TVps\uD')-Q>[LD'I"8FLX`+`?U`TUuxy0AED-y7C~YQ3yQD>b/,xH3alVTTc@WB 68s4'v[#&m!NpNnzSnD$FP=hDfwC