Edit tour

Windows Analysis Report
http://boldlydaisy.com

Overview

General Information

Sample URL:	http://boldlydaisy.com
Analysis ID:	1467268
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1996,i,14038958859018624723,4661621065683990786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3712 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4916 --field-trial-handle=1996,i,14038958859018624723,4661621065683990786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5904 --field-trial-handle=1996,i,14038958859018624723,4661621065683990786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1124 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://boldlydaisy.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /gen_204?s=webhp&t=cap&atyp=csi&ei=nceFZp_nKtXni-gPtb-MyAw&rt=wsrt.2839,cbt.381,hst.380&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"Content-Type: text/plain;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6Hzf6TaakyDx9JJ1ZtAzOF0gNjnJI4nOvQe9sGbxkH4reiItCIvfxA; NID=515=ftd9T__MfWwhRmmTj22LXh81vv2K0dOQjlz7a5xdnnubGe9xh97ZXss8lNU-CKVYEwoF3oD-eIQm_SXSypIsnk4lgMlaL8ZAxOG_cCYG94IXwGmY8-Ted0toiN0RW0QBOEoR-vRGfGe_gYLvwvWzjmJxajjFMHVo-EXCYWDIZmg

Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	HTTP Parser: No favicon
Source: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	HTTP Parser: No favicon
Source: https://ogs.google.com/widget/callout?prid=19037050&pgid=19037049&puid=9ceb59a7585b55bd&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/9n0_I16KvHU?rel=0&vq=hd720&start=0&cc_load_policy=1&playsinline=1&origin=https%3A%2F%2Fabout.google&enablejsapi=1&widgetid=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/9n0_I16KvHU?rel=0&vq=hd720&start=0&cc_load_policy=1&playsinline=1&origin=https%3A%2F%2Fabout.google&enablejsapi=1&widgetid=1	HTTP Parser: No favicon
Source: https://2542116.fls.doubleclick.net/activityi;dc_pre=CM6yr6nti4cDFXdXHgIdNJcLRQ;src=2542116;type=psmith;cat=googl0i8;ord=530139862395;npa=0;auiddc=2118422821.1720043485;ps=1;pcor=931038690;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4710v9181639514z86906245za201zb6906245;gcd=13l3l3l3l1;dma=0;tag_exp=0;epver=2;~oref=https%3A%2F%2Fstore.google.com%2FUS%2F%3Futm_source%3Dhp_header%26utm_medium%3Dgoogle_ooo%26utm_campaign%3DGS100042%26hl%3Den-US?	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49720 version: TLS 1.2

Source:	Binary string: 0,m;m=h[k];k++)if(m.name==g\|\|m.id==g){h=m;break a}h=null}e=(e.tagName=="TEXTAREA"\|\|e.tagName=="SELECT"\|\|e.tagName=="A")&&!e.disabled;!h\|\|h.disabled\|\|e\|\|(f=g)}f&&d&&(c=!0,b=this.dispatchEvent(new Vcb(f,String(d.get(f)))))}else e!=this.bP\|\|a.keyCode!=32&&a.key!=" "\|\|Wcb(this);if(b\|\|c)a.stopPropagation(),a.preventDefault();b&&this.setVisible(!1)};_.pdb=function(a,b,c){var d=0,e=function(){d=0};return function(f){d\|\|(d=_.ba.setTimeout(e,b),a.apply(c,arguments))}}; source: chromecache_651.2.dr
Source:	Binary string: var Ynb;_.Gt=function(a,b,c){if(a){var d=a[_.EMa];if(d instanceof _.rnb)return new _.Yo(d,b,c);if(a=_.$c(a,"ved"))return new _.Yo(a,b,c)}};Ynb=function(a){this.Ea=_.n(a)};_.A(Ynb,_.q);var Znb=function(){};Znb.prototype.ka=function(a,b){return _.QNa(_.ONa(new _.Zo,a.Qc()),b.ka)};Znb.prototype.Da=function(){return new _.Xnb};Znb.prototype.wa=function(){return new Ynb};var $nb=function(a,b,c,d){a=new _.Isa(a,b\|\|"0");c&&_.dZa(a,c);d!==void 0&&(a.wa=Math.max(d,1E3));this.ka=a.build();c=_.uia();c!=null&&(this.ka.O4=c);c=_.Vc("cfb2h");c.Lb()&&(c=c.toString(),d=_.ZYa(this.ka.ka),_.De(d,7,c))};_.l=$nb.prototype;_.l.getInstance=function(){return this.ka};_.l.dispatch=function(a){this.ka.dispatch(a)};_.l.flush=function(a,b){this.ka.flush(a,b)};_.l.Heb=function(a){this.ka.Ua=a};_.l.Ieb=function(a){var b=this.ka;b.Ya=a&&b.Ka};_.l.pDb=function(a){this.ka.Qa=a};_.ff(_.UVa);_.aob=function(a){_.In.call(this,a.Oa);a=a.service.configuration;var b=a.b9\|\|-1;this.ka=a.transport\|\|new $nb(b,a.aG\|\|"0",a.oa,a.Za);this.ka.pDb(a.wa);this.ka.Ieb(!1);this.ka.Heb(!1);this.oa=a.Qa\|\|new Znb};_.A(_.aob,_.In);_.aob.Va=_.In.Va;_.aob.Ia=function(){return{service:{configuration:_.Qnb}}};_.Kn(_.oTa,_.aob); source: chromecache_651.2.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_450.2.dr	String found in binary or memory: href="https://www.youtube.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link" equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: href="https://www.facebook.com/Google" equals www.facebook.com (Facebook)
Source: chromecache_450.2.dr	String found in binary or memory: href="https://www.linkedin.com/company/google" equals www.linkedin.com (Linkedin)
Source: chromecache_450.2.dr	String found in binary or memory: href="https://www.youtube.com/user/Google" equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: "")\|\|KCa(this.rf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=aB(d,h,dVa):h&&(d="embedded");this.Ma=d;rva();h=null;d=b?b.playerStyle:a.ps;f=g.Eb(eVa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.va=(this.K=g.Eb(eVa,this.playerStyle))&&this.playerStyle!=="play"&&this.playerStyle!=="jamboard";this.yp=!this.va;this.Sa=$A(!1,a.disableplaybackui);this.disablePaidContentOverlay=$A(!1,b==null?void 0:b.disablePaidContentOverlay); equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: (g.jq(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.jq(c,"www.youtube.com"),d=c.toString()):(c=TCa(d),PI(c)&&(d=c));c=new g.eP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_616.2.dr	String found in binary or memory: De.prototype.initVideo_=function(a){a={videoId:this.videoElement_.getAttribute("data-glue-yt-video-vid"),playerVars:{controls:1,host:"https://www.youtube.com/",origin:window.location.origin,widget_referrer:window.location.origin,iv_load_policy:3},playerId:"player-"+a,events:{onReady:this.onVideoReady_.bind(this)}};this.ytVideo_=new N(this.videoElement_,a)};De.prototype.onVideoReady_=function(){this.player_=this.ytVideo_.getPlayer()}; equals www.youtube.com (Youtube)
Source: chromecache_410.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=Q.length,ma=0;ma<oa;ma++)if(!u&&c(Q[ma],E.xe)){$I("https://www.youtube.com/iframe_api");u=!0;break}})}}else I(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_630.2.dr, chromecache_410.2.dr, chromecache_663.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Tj:function(){e=Db()},pd:function(){d()}}};var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Bn(a,{hl:d})),this.Dd(MV(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Dd(g.KV(a.errorMessage)):this.Dd(MV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Bn(c, equals www.youtube.com (Youtube)
Source: chromecache_465.2.dr	String found in binary or memory: a.oa.observe(c.previousElementSibling?.previousElementSibling),c.previousElementSibling&&a.oa.observe(c.previousElementSibling),c.previousElementSibling&&a.oa.observe(c))})},Z0=class extends _.lp{static Sa(){return{service:{window:_.$o},jsdata:{jT:_.vw}}}constructor(a){super(a.Oa);this.Ka=[_.Jf("https://storage.googleapis.com/"),_.Jf("https://storage.googleapis.com/%path"),_.Jf("https://www.youtube.com/")];this.oa=this.Ha=this.Ja=this.Ba=null;this.Qa=[_.Jf("mannequin/"),_.Jf("modules/"),_.Jf("lottie.min.js"), equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: a.severity,e,EJ(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Sd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.hC)(),tX(a,"manifest",function(h){b.K=!0;b.oa("pathprobe",h)},function(h){b.Sd(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: aUa=function(a,b){if(!a.j["0"]){var c=new TJ("0","fakesb",{video:new PJ(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new hQ(new g.eP("http://www.youtube.com/videoplayback"),c,"fake"):new sQ(new g.eP("http://www.youtube.com/videoplayback"),c,new VP(0,0),new VP(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.zR(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.jT(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.$I("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_668.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=nA(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Ob(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},qA=function(){var a=[],b=function(c){return tb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_495.2.dr, chromecache_496.2.dr	String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)
Source: chromecache_630.2.dr, chromecache_663.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|k.length))return;var n={Rg:d,Pg:e,Qg:f,Fh:g,Gh:k,xe:m,Bb:b},p=F.YT,q=function(){LC(n)};if(p)return p.ready&&p.ready(q),b;var r=F.onYouTubeIframeAPIReady;F.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(OC(w,"iframe_api")\|\|OC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!FC&&MC(x[B],n.xe))return Bc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: g.KR=function(a){var b=g.zR(a);tVa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",$lb);var DCa=pa(["//tpc.googlesyndication.com/sodar/",""]);var aPa={P7a:0,M7a:1,J7a:2,K7a:3,L7a:4,O7a:5,N7a:6};var Eqa=(new Date).getTime();var Oka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Pka=/\bocr\b/;var Rka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var amb=0,bmb=0,cmb=0;var Yu;Yu=null;g.$u=!1;g.hv=1;g.gv=Symbol("SIGNAL");g.tv={version:0,HZ:0,bl:!1,rg:void 0,gy:void 0,Vm:void 0,WK:0,Zi:void 0,Bu:void 0,Dt:!1,LO:!1,X0:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.zR(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.sR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),xC&&(a=rqa())&&(b.ebc=a));return g.Bn(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: g.zR=function(a){a=xR(a.Ha);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_616.2.dr	String found in binary or memory: gd.TABSET_PANELCONTAINER="glue-tabs__panelgroup";gd.TABSET_PAGE="glue-tabs__panel";var hd,id=hd\|\|(hd={});id.PANELS_KEY="data-glue-expansion-panels-key";id.TOGGLEFOR="data-glue-expansion-panel-toggle-for";id.INITIAL="data-glue-expansion-panel-initial";var jd,kd=jd\|\|(jd={});kd.MISSING_PAGE_LIST="No element with glue-tabpanels__page-list class was found. TabPanels requires a Panels Page List";kd.MISSING_PANEL_LIST="No element with glue-tabpanels__panel-list class was found. TabPanels requires a Panel List";var ld;(ld\|\|(ld={})).IFRAME_SCRIPT_URL="https://www.youtube.com/iframe_api";var md,nd=md\|\|(md={});nd.YT_IFRAME_READY_EVENT="onYouTubeIframeAPIReady";nd.API_INITIALIZED="glue.ui.ytVideo.IframeApiInitalized";nd.IS_VISIBLE="glue.isVisible";nd.IS_HIDDEN="glue.isHidden";var od,pd=od\|\|(od={});pd.VIDEO_ID="glueYtVideoId";pd.PLAYER_ID="glueYtPlayerId";pd.HEIGHT="glueYtVideoHeight";pd.WIDTH="glueYtVideoWidth";pd.PLAYER_VARS="glueYtVideoPlayerVars";function qd(){this.apiInitialized=this.isApiReady();this.videoObjects=new Map;this.init()}qd.getManager=function(){qd.instance\|\|(qd.instance=new qd);return qd.instance};qd.destroyManager=function(){qd.instance=void 0}; equals www.youtube.com (Youtube)
Source: chromecache_553.2.dr	String found in binary or memory: lf=u(["https://sandbox.google.com/tools/feedback/"]),mf=u(["https://www.google.cn/tools/feedback/"]),nf=u(["https://help.youtube.com/tools/feedback/"]),of=u(["https://asx-frontend-staging.corp.google.com/inapp/"]),pf=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),qf=u(["https://localhost.corp.google.com/inapp/"]),rf=u(["https://localhost.proxy.googlers.com/inapp/"]),sf=S(Ue),tf=[S(Ve),S(We)],uf=[S(Xe),S(Ye),S(Ze),S($e),S(af),S(bf),S(cf),S(df),S(ef),S(ff)],vf=[S(gf),S(hf)],wf= equals www.youtube.com (Youtube)
Source: chromecache_616.2.dr	String found in binary or memory: qd.prototype.init=function(){var a=this,c=new Event("Event");c.initEvent(md.API_INITIALIZED,!0,!1);this.apiInitialized?document.dispatchEvent(c):this.apiInitPromise=new Promise(function(e){window.onYouTubeIframeAPIReady=function(){a.apiInitialized=!0;document.dispatchEvent(c);e()}});if(!window.YT){var d=document.createElement("script");document.body.appendChild(d);d.src="https://www.youtube.com/iframe_api"}};qd.prototype.isApiReady=function(){return"object"===typeof window.YT&&"function"===typeof window.YT.Player}; equals www.youtube.com (Youtube)
Source: chromecache_668.2.dr, chromecache_680.2.dr, chromecache_405.2.dr	String found in binary or memory: return b}BC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),DC=["www.youtube.com","www.youtube-nocookie.com"],EC,FC=!1; equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: this.X.Da&&(a.authuser=this.X.Da);this.X.pageId&&(a.pageid=this.X.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.ra=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(VQ(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.ra=!1);b="";g.OQ(this.B)?NQ(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: this.hostLanguage=b?b.hostLanguage\|\|"en":cB("en",a.host_language);this.mp=!this.Cc&&Math.random()<g.nI(this.experiments,"web_player_api_logging_fraction");this.Ya=!this.Cc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(b==null\|\|!b.deviceIsAudioOnly);this.Yd=bB(this.Yd,a.ismb);this.yp?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=xR(this.Ha)\|\|"www.youtube.com")):r="video.google.com";this.Bn=r;iVa(this,a,!0);this.Oa=new XQ;g.M(this,this.Oa);q=b?b.innertubeApiKey:cB("",a.innertube_api_key); equals www.youtube.com (Youtube)
Source: chromecache_527.2.dr	String found in binary or memory: var A3={};var fib=/[&\?]action_proxy=1/,eib=/[&\?]token=([\w-])/,gib=/[&\?]video_id=([\w-])/,hib=/[&\?]index=([\d-])/,iib=/[&\?]m_pos_ms=([\d-])/,kib=/[&\?]vvt=([\w-]*)/,Xhb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),jib="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),$hb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_668.2.dr	String found in binary or memory: var QB=function(a,b,c,d,e){var f=Lz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Lz("fsl","nv.ids",[]):Lz("fsl","ids",[]);if(!g.length)return!0;var k=Qz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!ty(k,uy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: boldlydaisy.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ogs.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: about.google
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: www.blog.google
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com
Source: global traffic	DNS traffic detected: DNS query: blog.google
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: scone-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: store.google.com
Source: global traffic	DNS traffic detected: DNS query: 2542116.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: mail.google.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1996,i,14038958859018624723,4661621065683990786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://boldlydaisy.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4916 --field-trial-handle=1996,i,14038958859018624723,4661621065683990786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5904 --field-trial-handle=1996,i,14038958859018624723,4661621065683990786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1996,i,14038958859018624723,4661621065683990786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4916 --field-trial-handle=1996,i,14038958859018624723,4661621065683990786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5904 --field-trial-handle=1996,i,14038958859018624723,4661621065683990786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://feedback.googleusercontent.com/resources/annotator.css	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://pay.google.com/gp/v/widget/save	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://www.youtube.com/generate_204?cpn=	0%	URL Reputation	safe
https://sandbox.google.com/inapp/%	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://www.youtube.com/subscribe_embed?usegapi=1	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.com/inapp/	0%	URL Reputation	safe
https://support.google.com/inapp/%	0%	URL Reputation	safe
https://support.google.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/inapp/	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
https://domains.google.com/suggest/flow	0%	URL Reputation	safe
https://feedback2-test.corp.google.com/inapp/%	0%	URL Reputation	safe
http://hammerjs.github.io/	0%	URL Reputation	safe
https://sandbox.google.com/inapp/	0%	URL Reputation	safe
http://youtube.com/drm/2012/10/10	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	0%	URL Reputation	safe
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	100%	URL Reputation	phishing
https://blog.google/products/shopping/	0%	Avira URL Cloud	safe
https://apis.google.com/js/googleapis.proxy.js?onload=startup	0%	Avira URL Cloud	safe
https://services.google.com/fb/submissions/thekeywordnewsletterprod/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKinVM98Qkjr1uN3BhQ3StGXCp1-O_wPwoLZeDQ=rw-e365-w2880	0%	Avira URL Cloud	safe
https://ai.google/responsibility/principles/#:~:text=updates%20on%20our%20ai%20principles%3A	0%	Avira URL Cloud	safe
https://blog.google/products/chrome/	0%	Avira URL Cloud	safe
https://safety.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/js/k=xjs.hd.en.AP2X0CdZJ3U.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAgBFAAAAAoAAAAAAAAAAAAAIAAIQBAKAAABMABAERAAABAAACAQBCAR5kAAASACQAAAAABAAAKBCBAAAAABAAAAAAoAAAAAAAAAAAAAAAYQAABAAAAAAAAAAAAAAAA6AAAAAACIEAQAAMYCAAABAAAACAPAIIDYJCCAAAAAAAAAAAAAAAAApAgmAsJKAggAAAAAAAAAAAAAAAAgJR0YmED/d=0/dg=0/br=1/rs=ACT90oEiSEyZOxFvG6a1XMvASCTsQE8VDA/m=sy1b5,P10Owf,sy19u,sy19s,syq7,gSZvdb,syw3,syw2,WlNQGd,sywg,sywe,nabPbb,syqc,syq9,syq8,syq6,DPreE,syvx,syvv,syj1,syk8,CnSW2d,kQvlef,sywf,fXO0xe?xjs=s4	0%	Avira URL Cloud	safe
https://policies.google.com/privacy?utm_source=about&utm_medium=referral&utm_campaign=footer	0%	Avira URL Cloud	safe
https://blog.google/technology/developers/google-gemma-2/	0%	Avira URL Cloud	safe
https://store.google.com/us/category/phones?hl=en-US	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?s=webhp&t=cap&atyp=csi&ei=nceFZp_nKtXni-gPtb-MyAw&rt=wsrt.2839,cbt.381,hst.380&opi=89978449	0%	Avira URL Cloud	safe
https://about.google/assets-main/img/glue-google-solid-logo.svg	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/GhfIwA6ZINFkFgE77BVZ596ZtFXFc72Z6OfHGeHh4VO8ZSNBZkXXcRdgWvhzJKDzmy22DROUcJKCaZbeDHpT7raQ-ZKBmj1MM1JqGQ=rw-e365-w2880	0%	Avira URL Cloud	safe
https://www.google.com/logos/doodles/2019/belarus-independence-day-2019-6245645298958336-2xa.gif	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/un_TwWyFxvThry1Tu1bijYCPKWXIJN7AEujVmDygmROvNDmFdxqHFD317YrxjEtfMiwxe1CNv-qpeZmpFuDAHXdiXxb1Z9ZGMmkzhrVYa8pEuuiCo_jT=w1440-l90-sg-rj-c0xffffff	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/xjs/_/js/k=xjs.hd.en.AP2X0CdZJ3U.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAgBFAAAAAoAAAAAAAAAAAAAIAAIQBAKAAABMABAERAAABAAACAQBCAR5kAAASACQAAAAABAAAKBCBAAAAABAAAAAAoAAAAAAAAAAAAAAAYQAABAAAAAAAAAAAAAAAA6AAAAAACIEAQAAMYCAAABAAAACAPAIIDYJCCAAAAAAAAAAAAAAAAApAgmAsJKAggAAAAAAAAAAAAAAAAgJR0YmED/d=0/dg=0/br=1/rs=ACT90oEiSEyZOxFvG6a1XMvASCTsQE8VDA/m=sy1b5,P10Owf,sy19u,sy19s,syq7,gSZvdb,syw3,syw2,WlNQGd,sywg,sywe,nabPbb,syqc,syq9,syq8,syq6,DPreE,syvx,syvv,syj1,syk8,CnSW2d,kQvlef,sywf,fXO0xe?xjs=s4	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKinVM98Qkjr1uN3BhQ3StGXCp1-O_wPwoLZeDQ=rw-e365-w2880	false	Avira URL Cloud: safe	unknown
https://about.google/assets-main/img/glue-google-solid-logo.svg	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/GhfIwA6ZINFkFgE77BVZ596ZtFXFc72Z6OfHGeHh4VO8ZSNBZkXXcRdgWvhzJKDzmy22DROUcJKCaZbeDHpT7raQ-ZKBmj1MM1JqGQ=rw-e365-w2880	false	Avira URL Cloud: safe	unknown
https://www.google.com/logos/doodles/2019/belarus-independence-day-2019-6245645298958336-2xa.gif	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?s=webhp&t=cap&atyp=csi&ei=nceFZp_nKtXni-gPtb-MyAw&rt=wsrt.2839,cbt.381,hst.380&opi=89978449	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/un_TwWyFxvThry1Tu1bijYCPKWXIJN7AEujVmDygmROvNDmFdxqHFD317YrxjEtfMiwxe1CNv-qpeZmpFuDAHXdiXxb1Z9ZGMmkzhrVYa8pEuuiCo_jT=w1440-l90-sg-rj-c0xffffff	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/nBPsX2BwbNWHOACzAL1yWGacXJBxqaNN3i7o6pOLLeb4VPJE7PBoRPZs72KrA-keylrO-Xv_iGoiqTLC2L8rJ7WA6cdR9Q5249IiV2tpTmvm7LC9cCs=w1440-l80-sg-rp	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/xbP3RDfP-xlACZffWJ23xv97pC05mQbHd4YYDwJ-Bj4wIFdCNs-qp8Aui86Ugo5gQYCNK-7pMq1_PBPGrcSZ5zwr2bJihsHGZdrj=rw-e365-w3000	false	Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/Kkh1J0HrlRSnxSQrtnP4DFSMb4SI7Rz0yAT0G6ku1QOARBJJ4To-rDzu0tfCOMWvNCtYvCYaM92ISqiDPr-8KtwNqYO3xuJERwASsfn2=rw-e365-w2880	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/md=10/k=xjs.hd.en.AP2X0CdZJ3U.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAgBFAAAAAoAAAAAAAAAAAAAIAAIQBAKAAABMABAERAAABAAACAQBCAR5kAAASACQAAAAABAAAKBCBAAAAABAAAAAAoAAAAAAAAAAAAAAAYQAABAAAAAAAAAAAAAAAA6AAAAAACIEAQAAMYCAAABAAAACAPAIIDYJCCAAAAAAAAAAAAAAAAApAgmAsJKAggAAAAAAAAAAAAAAAAgJR0YmED/rs=ACT90oEiSEyZOxFvG6a1XMvASCTsQE8VDA	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/ss/k=xjs.hd.O5pTwBf7VYU.L.B1.O/am=AKYAAAAAAAAAAwAAAAAAAAAAAAAAAABAAAAgAAAAAAAABYBPDgAIAGwIAAAAIABAAAAAAAAAKAAAAIAJAAAAAQBIAAgAEBAAAAAAQAQQABAAAhQBJAAKBBlAAABABDAYBkAqABgCAAAAAggAAAAAwI0ABAgAABEAAXgAAQAE6AABMAAIAABAIAMYCAAAAAAAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAgAKAAAAAAAAAAAAAAAAAAAABA/d=1/ed=1/br=1/rs=ACT90oGWNXYrze4t63nt-W3bikDMbEQwgA/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/WRNuvosn1mvN1shz4ve4VqJMb62E7JVVSlU40-VzJDpKj8MA1k32XB1E1ri8oFxDLdlJNG3BUvUKsDzRS-NbNqgL1CztLzYiaQM=rw-e365-w3000	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=nceFZp_nKtXni-gPtb-MyAw&s=promo&rt=hpbas.4917,hpbarr.1332&zx=1720043426941&opi=89978449	false	Avira URL Cloud: safe	unknown
https://blog.google/api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube	false	Avira URL Cloud: safe	unknown
https://www.google.com/tools/feedback/chat_load.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/logos/doodles/2019/2019-womens-world-cup-day-23-6434906591199232-2xa.gif	false	Avira URL Cloud: safe	unknown
https://store.google.com/_/Gstore/data/batchexecute?rpcids=tJ2cif&source-path=%2FUS%2F&f.sid=-8223288552940820330&bl=boq_gstore-neo_20240702.06_p0&hl=en-US&authuser&_reqid=264285&rt=c	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ei=nceFZp_nKtXni-gPtb-MyAw&ct=slh&v=t1&im=M&pv=0.31223964626582634&me=7:1720043428799,V,0,0,0,0:831,V,0,0,1280,907:8985,e,B&zx=1720043438615&opi=89978449	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/sbusTGfIzIf2EpK3j1EygXk_Qaq1i5WBMRKge7jsMHnU8IvJK2BR-rr7laSFVUBu3U3PmX11b1RBbZOtL9w4a9S3OMQSAb09XNCBJaL3X0JHBpcfGIM=w1440-l90-sg-rj-c0xffffff	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/G-wad136yZ7DsVwL46u_tm9eVesHYmMLlB4_0qIyapVN18tnbclRv3KiCtTOfKu6KS1GTQc5NRRRaEdv17YW3aTFH1eQgJirmguvbabN=s660	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ei=nceFZp_nKtXni-gPtb-MyAw&ct=slh&v=t1&im=M&m=HV&pv=0.31223964626582634&me=1:1720043423073,V,0,0,1280,907:0,B,907:0,N,1,nceFZp_nKtXni-gPtb-MyAw:0,R,1,1,0,0,1280,907:2547,x:3178,e,B&zx=1720043428798&opi=89978449	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/UXRIOQrIizFtAt2snrtInAYGXlUQrMycvoWfegzPoyq5lx_2xv6lbNYsy5BQkH2l2BOV77YJz2Bk-xXGs6RQk1VsGOzKKLREMuSo=rw-e365-w3000	false	Avira URL Cloud: safe	unknown
https://store.google.com/intl/en/ideas/feed/gstorefront-page.json?c=1720043479928	false	Avira URL Cloud: safe	unknown
https://store.google.com/US?utm_source=hp_header&utm_medium=google_ooo&utm_campaign=GS100042&hl=en-US	false	Avira URL Cloud: safe	unknown
https://www.google.com/client_204?cs=1&opi=89978449	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/ZRyB3x_HY1IUsygqV_W2IoW3vhFGiqLKJc2RZVndWfTq5x7PoLzgpP0clM5xFWSh8zIL0Ha3-OI2KbDLKdKob_qjKo10ICrcFWRaPA=rw-e365-w2880	false	Avira URL Cloud: safe	unknown
https://www.google.com/logos/doodles/2017/natalia-goncharovas-136th-birthday-5646485361262592-2x.jpg	false	Avira URL Cloud: safe	unknown
https://about.google/assets-main/css/home.min.css?cache=81d2a13	false	Avira URL Cloud: safe	unknown
https://about.google/?fg=1&utm_source=google-US&utm_medium=referral&utm_campaign=hp-header	false		unknown
https://lh3.googleusercontent.com/N_lV5xwErJpAK4jkrNwMMQfbQN7gs0loaMzQHVF768czQNAHsMWW6Kk1FUJnbH0c7uleBoV0UHjS08oJX368wIdGz_4b1buadd3d5Cw=rw-e365-w2880	false	Avira URL Cloud: safe	unknown
https://store.google.com/_/Gstore/browserinfo?f.sid=-8223288552940820330&bl=boq_gstore-neo_20240702.06_p0&hl=en-US&authuser&_reqid=364285&rt=j	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://blog.google/products/shopping/	chromecache_364.2.dr, chromecache_595.2.dr	false	Avira URL Cloud: safe	unknown
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_553.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/client.js	chromecache_495.2.dr, chromecache_553.2.dr	false	URL Reputation: safe	unknown
https://support.google.com	chromecache_483.2.dr, chromecache_471.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy?utm_source=about&utm_medium=referral&utm_campaign=footer	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://services.google.com/fb/submissions/thekeywordnewsletterprod/	chromecache_616.2.dr	false	Avira URL Cloud: safe	unknown
https://ai.google/responsibility/principles/#:~:text=updates%20on%20our%20ai%20principles%3A	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_553.2.dr	false	URL Reputation: safe	unknown
https://blog.google/products/chrome/	chromecache_364.2.dr, chromecache_595.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_660.2.dr	false	URL Reputation: safe	unknown
https://safety.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://blog.google/technology/developers/google-gemma-2/	chromecache_513.2.dr	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/v/widget/save	chromecache_496.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/U1D47vdwu9i7XQZA8Jm2ksh1sgJSzdpw0T2xMIlU9EFBUUdqWd20IQf09-Jxyc-uFT	chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown
https://store.google.com/us/category/phones?hl=en-US	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_553.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_527.2.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/inapp/%	chromecache_553.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/api.js	chromecache_632.2.dr, chromecache_374.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_495.2.dr, chromecache_496.2.dr	false	URL Reputation: safe	unknown
https://shopping.google.com/?nord=1?utm_source=about&utm_medium=referral&utm_campaign=footer	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_553.2.dr	false	URL Reputation: safe	unknown
https://safety.google	chromecache_471.2.dr	false	Avira URL Cloud: safe	unknown
https://blog.google/inside-google/doodles/	chromecache_364.2.dr, chromecache_595.2.dr, chromecache_513.2.dr	false	Avira URL Cloud: safe	unknown
https://careers.google.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://blog.google/outreach-initiatives/entrepreneurs/	chromecache_513.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com	chromecache_483.2.dr, chromecache_471.2.dr	false	Avira URL Cloud: safe	unknown
https://store.google.com/intl/en/ideas/articles/kw-pixel-8a-launch/	chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown
https://blog.google/products/news/our-testimony-to-the-california-senate-judiciary-committee-on-the-	chromecache_364.2.dr, chromecache_595.2.dr, chromecache_513.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/inapp/%	chromecache_553.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/doodles/history/%	chromecache_616.2.dr	false	Avira URL Cloud: safe	unknown
https://lens.google.com/gen204	chromecache_504.2.dr	false	Avira URL Cloud: safe	unknown
https://youtu.be/	chromecache_527.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_495.2.dr, chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/un_TwWyFxvThry1Tu1bijYCPKWXIJN7AEujVmDygmROvNDmFdxqHFD317YrxjEtfMi	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/kH8ZQlRBgwu_LIZHk4yLRIJa59bpN78ugVx1513pF4FznpTDBh1rfuOC9KewC4Incm	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://www.blog.google/?utm_source=about.google&utm_medium=referral&utm_campaign=nav-the-ke	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://blog.google/outreach-initiatives/sustainability/2024-environmental-report/	chromecache_513.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/inapp/	chromecache_553.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_553.2.dr	false	URL Reputation: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.212.147	ghs-svc-https-sni.ghs-ssl.googlehosted.com	United States	15169	GOOGLEUS	false
142.250.185.182	unknown	United States	15169	GOOGLEUS	false
216.239.36.21	blog.google	United States	15169	GOOGLEUS	false
142.250.184.225	unknown	United States	15169	GOOGLEUS	false
142.250.184.226	unknown	United States	15169	GOOGLEUS	false
142.250.186.78	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.38	ad.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.46	www3.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
142.250.186.86	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.186.102	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.78	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.209	unknown	United States	15169	GOOGLEUS	false
142.250.184.241	csp.withgoogle.com	United States	15169	GOOGLEUS	false
142.250.185.206	unknown	United States	15169	GOOGLEUS	false
216.58.212.166	unknown	United States	15169	GOOGLEUS	false
142.250.185.165	mail.google.com	United States	15169	GOOGLEUS	false
142.250.185.166	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
216.239.34.21	unknown	United States	15169	GOOGLEUS	false
142.250.185.161	unknown	United States	15169	GOOGLEUS	false
142.250.185.162	unknown	United States	15169	GOOGLEUS	false
216.58.212.174	unknown	United States	15169	GOOGLEUS	false
216.239.32.29	about.google	United States	15169	GOOGLEUS	false
172.217.16.206	google.com	United States	15169	GOOGLEUS	false
216.58.206.66	adservice.google.com	United States	15169	GOOGLEUS	false
172.240.108.68	boldlydaisy.com	United States	7979	SERVERS-COMUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.129	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.185.174	unknown	United States	15169	GOOGLEUS	false
142.250.185.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.66	unknown	United States	15169	GOOGLEUS	false
142.250.186.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.185.98	td.doubleclick.net	United States	15169	GOOGLEUS	false

Name	IP	Active	Malicious	Reputation
scone-pa.clients6.google.com	142.250.185.170	true	false	unknown
dart.l.doubleclick.net	142.250.185.166	true	false	unknown
i.ytimg.com	142.250.186.86	true	false	unknown
mail.google.com	142.250.185.165	true	false	unknown
adservice.google.com	216.58.206.66	true	false	unknown
boldlydaisy.com	172.240.108.68	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
about.google	216.239.32.29	true	false	unknown
ghs-svc-https-sni.ghs-ssl.googlehosted.com	216.58.212.147	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.186.129	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
google.com	172.217.16.206	true	false	unknown
csp.withgoogle.com	142.250.184.241	true	false	unknown
plus.l.google.com	142.250.186.78	true	false	unknown
ad.doubleclick.net	142.250.186.38	true	false	unknown
store.google.com	142.250.186.78	true	false	unknown
static.doubleclick.net	142.250.186.102	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
youtube-ui.l.google.com	142.250.185.78	true	false	unknown
www3.l.google.com	216.58.206.46	true	false	unknown
play.google.com	142.250.185.142	true	false	unknown
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.18	true	false	unknown
googleads.g.doubleclick.net	142.250.185.130	true	false	unknown
td.doubleclick.net	142.250.185.98	true	false	unknown
blog.google	216.239.36.21	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.186.65	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
www.blog.google	unknown	unknown	false	unknown
ogs.google.com	unknown	unknown	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	unknown
2542116.fls.doubleclick.net	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467268
Start date and time:	2024-07-03 23:49:27 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://boldlydaisy.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@26/734@94/37
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://about.google/?fg=1&utm_source=google-US&utm_medium=referral&utm_campaign=hp-header Browse: https://store.google.com/US?utm_source=hp_header&utm_medium=google_ooo&utm_campaign=GS100042&hl=en-US Browse: https://mail.google.com/mail/&ogbl

Input	Output
URL: https://www.google.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title and text of the webpage do not contain any elements indicating the presence of a login form, such as explicit requests for sensitive information like passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text of the webpage does not create a sense of urgency or interest by not including any calls to action related to viewing documents, invoices, or other secured content.","There is no evidence of a CAPTCHA or anti-robot detection mechanism in the title or text of the webpage."]}
Title: Google OCR: Gmail Images Sign in Store Google Gtngle Search I'm Feeling Lucky Adveising Business How Search works Our third decade ot climate action: join us privacy Terms Settings
URL: https://www.google.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage title 'Google' and text 'Sign in to Google' suggest that it is a login page, but it does not explicitly request sensitive information, so a login form is not confirmed.","The text does not create a sense of urgency.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: Google OCR: Gmail Images Sign in Store Sign in to Google Save your passwords securely with your Google Account Stay signed out Sign in Google Gtngle Search I'm Feeling Lucky Adveising Business How Search works privacy Our third decade ot climate action: join us Terms Settings
URL: https://store.google.com/US/?utm_source=hp_header&utm_medium=google_ooo&utm_campaign=GS100042&hl=en-US Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as it does not contain phrases such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Google Store for Google Made Devices & Accessories OCR: 0 Q Phones Earbuds Tablets Watches & Trackers Smart Home Accessories Subscriptions Offers Launch is coming. Don't miss the magic. Learn more 11

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 3 20:50:18 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9854672110840794
Encrypted:	false
SSDEEP:	48:87dcTggkH00idAKZdA19ehwiZUklqehAy+3:8SfW/y
MD5:	EEE8C7A882E01A2EC379335A632A356F
SHA1:	03DCDE0B33CA5082A3E9726F84136A3E8710ADF3
SHA-256:	891080D1AC2DADE4DF355595F8F08430A525747C0CCDA9EA2F522ABF2B441DEA
SHA-512:	F2FA2A489E4CD9913AF1ECE82A710DF7B05ABF5FC769E785A0C42FD1A10AF9281308DB884E6890E8FA663E4AFF02B3FAED5888D8B30AFAD49A39C2D7883C38BD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....v\|......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XH.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XH.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XH.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XH............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XJ............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............p......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 23:50:19.052212000 CEST	192.168.2.5	1.1.1.1	0x5574	Standard query (0)	boldlydaisy.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:19.052355051 CEST	192.168.2.5	1.1.1.1	0x9fbb	Standard query (0)	boldlydaisy.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:19.820257902 CEST	192.168.2.5	1.1.1.1	0x6edd	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:19.820440054 CEST	192.168.2.5	1.1.1.1	0x9f15	Standard query (0)	google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:20.862584114 CEST	192.168.2.5	1.1.1.1	0xe7c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:20.862922907 CEST	192.168.2.5	1.1.1.1	0xabeb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:24.464395046 CEST	192.168.2.5	1.1.1.1	0xcb12	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:24.465435028 CEST	192.168.2.5	1.1.1.1	0xd9cc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:25.916259050 CEST	192.168.2.5	1.1.1.1	0x62f1	Standard query (0)	ogs.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:25.916997910 CEST	192.168.2.5	1.1.1.1	0x9afd	Standard query (0)	ogs.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:25.918828011 CEST	192.168.2.5	1.1.1.1	0x93fa	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:25.919914007 CEST	192.168.2.5	1.1.1.1	0x4f99	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:26.876461029 CEST	192.168.2.5	1.1.1.1	0xd8f7	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:26.876698017 CEST	192.168.2.5	1.1.1.1	0xc9c4	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:28.178311110 CEST	192.168.2.5	1.1.1.1	0x8792	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:28.178702116 CEST	192.168.2.5	1.1.1.1	0xf93e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:39.756125927 CEST	192.168.2.5	1.1.1.1	0xb5b9	Standard query (0)	about.google	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:39.756293058 CEST	192.168.2.5	1.1.1.1	0xd1ac	Standard query (0)	about.google	65	IN (0x0001)	false
Jul 3, 2024 23:50:41.642570019 CEST	192.168.2.5	1.1.1.1	0x65e9	Standard query (0)	about.google	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:41.642728090 CEST	192.168.2.5	1.1.1.1	0xd588	Standard query (0)	about.google	65	IN (0x0001)	false
Jul 3, 2024 23:50:41.896054029 CEST	192.168.2.5	1.1.1.1	0xde89	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:41.896219015 CEST	192.168.2.5	1.1.1.1	0xfa47	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:43.334319115 CEST	192.168.2.5	1.1.1.1	0x4950	Standard query (0)	www.blog.google	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:43.334500074 CEST	192.168.2.5	1.1.1.1	0x3bda	Standard query (0)	www.blog.google	65	IN (0x0001)	false
Jul 3, 2024 23:50:43.534404039 CEST	192.168.2.5	1.1.1.1	0xfd04	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:43.534564018 CEST	192.168.2.5	1.1.1.1	0xc22f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:43.536209106 CEST	192.168.2.5	1.1.1.1	0x4f9b	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:43.536381960 CEST	192.168.2.5	1.1.1.1	0x84a4	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:43.797418118 CEST	192.168.2.5	1.1.1.1	0x36c9	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:43.797557116 CEST	192.168.2.5	1.1.1.1	0x2d8b	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:44.071845055 CEST	192.168.2.5	1.1.1.1	0x8ebd	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:44.072103024 CEST	192.168.2.5	1.1.1.1	0x3a6d	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:44.100564003 CEST	192.168.2.5	1.1.1.1	0x8e7a	Standard query (0)	csp.withgoogle.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:44.100719929 CEST	192.168.2.5	1.1.1.1	0xb4b8	Standard query (0)	csp.withgoogle.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:44.411683083 CEST	192.168.2.5	1.1.1.1	0xec6c	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:44.411818981 CEST	192.168.2.5	1.1.1.1	0x60a5	Standard query (0)	blog.google	65	IN (0x0001)	false
Jul 3, 2024 23:50:45.460294008 CEST	192.168.2.5	1.1.1.1	0xc75f	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:45.460598946 CEST	192.168.2.5	1.1.1.1	0x2c6d	Standard query (0)	blog.google	65	IN (0x0001)	false
Jul 3, 2024 23:50:46.753700018 CEST	192.168.2.5	1.1.1.1	0xc9ec	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:46.754256964 CEST	192.168.2.5	1.1.1.1	0xf7de	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:48.518362999 CEST	192.168.2.5	1.1.1.1	0x9565	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:48.518632889 CEST	192.168.2.5	1.1.1.1	0xee	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:49.717174053 CEST	192.168.2.5	1.1.1.1	0xc633	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:49.717382908 CEST	192.168.2.5	1.1.1.1	0x2eb4	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:50.770136118 CEST	192.168.2.5	1.1.1.1	0x253a	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:50.770385027 CEST	192.168.2.5	1.1.1.1	0xa978	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:52.141457081 CEST	192.168.2.5	1.1.1.1	0x346e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:52.141611099 CEST	192.168.2.5	1.1.1.1	0x23e6	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 23:50:52.142126083 CEST	192.168.2.5	1.1.1.1	0x2b01	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:52.142384052 CEST	192.168.2.5	1.1.1.1	0x7302	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 23:50:52.266376972 CEST	192.168.2.5	1.1.1.1	0x44a8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:52.266777992 CEST	192.168.2.5	1.1.1.1	0xd0db	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:52.350996017 CEST	192.168.2.5	1.1.1.1	0x4fb	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:52.351536989 CEST	192.168.2.5	1.1.1.1	0x9aae	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:52.851977110 CEST	192.168.2.5	1.1.1.1	0x7558	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:52.852374077 CEST	192.168.2.5	1.1.1.1	0x824f	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:53.773130894 CEST	192.168.2.5	1.1.1.1	0x31ed	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:53.773794889 CEST	192.168.2.5	1.1.1.1	0x9e01	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:54.543035984 CEST	192.168.2.5	1.1.1.1	0xbb0e	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:54.543277025 CEST	192.168.2.5	1.1.1.1	0x1f02	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:54.553706884 CEST	192.168.2.5	1.1.1.1	0x5787	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:54.553977966 CEST	192.168.2.5	1.1.1.1	0x66f9	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 23:50:55.520447016 CEST	192.168.2.5	1.1.1.1	0xefd9	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:55.520663977 CEST	192.168.2.5	1.1.1.1	0x7808	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:50:56.171802998 CEST	192.168.2.5	1.1.1.1	0xdc10	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:50:56.172035933 CEST	192.168.2.5	1.1.1.1	0x4b82	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 3, 2024 23:51:00.003104925 CEST	192.168.2.5	1.1.1.1	0x7342	Standard query (0)	store.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:00.003367901 CEST	192.168.2.5	1.1.1.1	0xf7ed	Standard query (0)	store.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:51:01.874682903 CEST	192.168.2.5	1.1.1.1	0x2607	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:01.876748085 CEST	192.168.2.5	1.1.1.1	0xaeee	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Jul 3, 2024 23:51:24.781753063 CEST	192.168.2.5	1.1.1.1	0x3e5e	Standard query (0)	store.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:24.782274008 CEST	192.168.2.5	1.1.1.1	0x2f82	Standard query (0)	store.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:51:27.367199898 CEST	192.168.2.5	1.1.1.1	0x4662	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:27.367490053 CEST	192.168.2.5	1.1.1.1	0x6bfc	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:51:28.411401987 CEST	192.168.2.5	1.1.1.1	0xddb8	Standard query (0)	2542116.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:28.411469936 CEST	192.168.2.5	1.1.1.1	0x114c	Standard query (0)	2542116.fls.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 23:51:28.412159920 CEST	192.168.2.5	1.1.1.1	0x351a	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:28.412414074 CEST	192.168.2.5	1.1.1.1	0x3e22	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 23:51:28.438158989 CEST	192.168.2.5	1.1.1.1	0xbf8c	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:28.438158989 CEST	192.168.2.5	1.1.1.1	0xcee4	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 23:51:28.994807959 CEST	192.168.2.5	1.1.1.1	0xaab1	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:28.995049000 CEST	192.168.2.5	1.1.1.1	0x2d28	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 23:51:29.086342096 CEST	192.168.2.5	1.1.1.1	0x305	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:29.086925983 CEST	192.168.2.5	1.1.1.1	0xd1c1	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:51:29.689896107 CEST	192.168.2.5	1.1.1.1	0xfb31	Standard query (0)	mail.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:29.690382004 CEST	192.168.2.5	1.1.1.1	0xc616	Standard query (0)	mail.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:51:29.745533943 CEST	192.168.2.5	1.1.1.1	0x4377	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:29.745832920 CEST	192.168.2.5	1.1.1.1	0x3d2a	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 23:51:30.753875017 CEST	192.168.2.5	1.1.1.1	0x610c	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:30.754477024 CEST	192.168.2.5	1.1.1.1	0x1807	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:51:31.679415941 CEST	192.168.2.5	1.1.1.1	0x87c9	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:31.679999113 CEST	192.168.2.5	1.1.1.1	0x4d65	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jul 3, 2024 23:51:39.717320919 CEST	192.168.2.5	1.1.1.1	0x5574	Standard query (0)	csp.withgoogle.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 23:51:39.723141909 CEST	192.168.2.5	1.1.1.1	0xaf94	Standard query (0)	csp.withgoogle.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 23:50:19.344712973 CEST	430	OUT	GET / HTTP/1.1 Host: boldlydaisy.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 23:50:19.811702013 CEST	595	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.21.6 Date: Wed, 03 Jul 2024 21:50:19 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://google.com Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: fb791347faa249c65c3e32f7f929b603 Cache-Control: max-age=0, private, no-cache Pragma: no-cache Strict-Transport-Security: max-age=0; includeSubdomains Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 31 2e 36 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.21.6</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:20 UTC	653	OUT	GET / HTTP/1.1 Host: google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:20 UTC	854	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/ Content-Type: text/html; charset=UTF-8 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-Lz5ri6DCPy1FFoYysMTnig' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Wed, 03 Jul 2024 21:50:20 GMT Expires: Fri, 02 Aug 2024 21:50:20 GMT Cache-Control: public, max-age=2592000 Server: gws Content-Length: 220 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 21:50:20 UTC	220	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/">here</A>.</BODY></HTML>

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:21 UTC	657	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-03 21:50:21 UTC	1663	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 21:50:21 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-HUj27K4-8p1yEnhDyC0B4g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AQTF6Hzf6TaakyDx9JJ1ZtAzOF0gNjnJI4nOvQe9sGbxkH4reiItCIvfxA; expires=Mon, 30-Dec-2024 21:50:21 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=515=ftd9T__MfWwhRmmTj22LXh81vv2K0dOQjlz7a5xdnnubGe9xh97ZXss8lNU-CKVYEwoF3oD-eIQm_SXSypIsnk4lgMlaL8ZAxOG_cCYG94IXwGmY8-Ted0toiN0RW0QBOEoR-vRGfGe_gYLvwvWzjmJxajjFMHVo-EXCYWDIZmg; expires=Thu, 02-Jan-2025 21:50:21 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 21:50:21 UTC	1663	IN	Data Raw: 32 32 32 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 222c<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2024-07-03 21:50:21 UTC	1663	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 61 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 6e 5b 67 5d 7d 3b 61 2e 73 72 63 3d 63 7d 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 62 3b 72 65 74 75 72 6e 20 74 28 22 22 2c 61 2c 62 29 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 79 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 79 3d 5b 5d 3b 67 6f 6f 67 6c 65 2e 78 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 29 76 61 72 20 63 3d 61 2e 69 64 3b 65 6c 73 65 7b 64 6f 20 63 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b Data Ascii: .length;n[g]=a;a.onerror=a.onload=a.onabort=function(){delete n[g]};a.src=c}};google.logUrl=function(a,b){b=b===void 0?l:b;return t("",a,b)};}).call(this);(function(){google.y={};google.sy=[];google.x=function(a,b){if(a)var c=a.id;else{do c=Math.random();
2024-07-03 21:50:21 UTC	1663	IN	Data Raw: 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 6e 73 2c 72 3d 71 3f 61 61 7c 7c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 28 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 70 6e 6f 7c 7c 30 29 7d 76 61 72 20 62 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 72 73 2c 75 3d 71 3f 62 61 7c 7c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f Data Ascii: &&google.stvsc.ns,r=q?aa\|\|window.performance.timing.navigationStart:void 0;function t(){return window.performance.now()-(google.stvsc&&google.stvsc.pno\|\|0)}var ba=google.stvsc&&google.stvsc.rs,u=q?ba\|\|window.performance.timing.responseStart:void 0;functio
2024-07-03 21:50:21 UTC	1663	IN	Data Raw: 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 3b 76 61 72 20 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 76 3d 5b 5d 3b 74 68 69 73 2e 42 3d 74 68 69 73 2e 67 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 61 66 74 22 29 3b 74 68 69 73 2e 6a 3d 21 21 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 29 3b 76 61 72 20 64 3b 69 66 28 64 3d 21 74 68 69 73 2e 6a 29 61 3a 7b 66 6f 72 28 64 3d 30 3b 64 3c 43 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 69 66 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 43 5b 64 5d 29 29 7b 64 3d 21 30 3b 62 Data Ascii: ):a.attachEvent&&a.detachEvent("on"+b,c)};var la=function(a,b,c){this.g=a;this.v=[];this.B=this.g.hasAttribute("data-noaft");this.j=!!this.g.getAttribute("data-deferred");var d;if(d=!this.j)a:{for(d=0;d<C.length;++d)if(a.getAttribute("data-"+C[d])){d=!0;b
2024-07-03 21:50:21 UTC	1663	IN	Data Raw: 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6d 67 22 29 2c 63 3d 30 2c 64 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 61 28 48 28 62 5b 63 5d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 69 66 28 61 26 26 28 61 3d 61 2e 74 61 72 67 65 74 2c 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 49 4d 47 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 46 28 48 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 Data Ascii: entsByTagName("img"),c=0,d=b.length;c<d;++c)a(H(b[c]))};function na(a){if(a&&(a=a.target,a.tagName==="IMG")){var b=Date.now();F(H(a,void 0,!0,!0),b)}}function J(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:D
2024-07-03 21:50:21 UTC	441	IN	Data Raw: 69 6e 69 74 79 3b 41 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 50 2c 21 30 29 3b 4f 28 30 29 3b 77 26 26 28 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 3d 6e 61 2c 41 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 6c 6f 61 64 22 2c 4a 2c 21 30 29 2c 41 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 65 72 72 6f 72 22 2c 4a 2c 21 30 29 29 3b 67 6f 6f 67 6c 65 2e 63 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 21 61 7c 7c 21 62 26 26 64 61 28 61 29 29 72 65 74 75 72 6e 20 30 3b 69 66 28 21 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 72 65 74 75 72 6e 20 31 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: inity;A(document,"visibilitychange",P,!0);O(0);w&&(google.c.oil=na,A(document.documentElement,"load",J,!0),A(document.documentElement,"error",J,!0));google.cv=function(a,b,c,d){if(!a\|\|!b&&da(a))return 0;if(!a.getBoundingClientRect)return 1;var e=function(
2024-07-03 21:50:21 UTC	365	IN	Data Raw: 31 36 36 0d 0a 22 2c 44 61 74 65 2e 6e 6f 77 28 29 29 3b 66 6f 72 28 76 61 72 20 61 2c 62 3d 30 2c 63 3b 63 3d 28 61 3d 67 6f 6f 67 6c 65 2e 61 66 74 71 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 5b 62 2b 2b 5d 3b 29 51 28 63 29 3b 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 6e 75 6c 6c 7d 7d 67 6f 6f 67 6c 65 2e 63 61 66 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 3d 3d 6e 75 6c 6c 3f 51 28 61 29 3a 28 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 67 6f 6f 67 6c 65 2e 61 66 74 71 7c 7c 5b 5d 2c 67 6f 6f 67 6c 65 2e 61 66 74 71 2e 70 75 73 68 28 61 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e Data Ascii: 166",Date.now());for(var a,b=0,c;c=(a=google.aftq)==null?void 0:a[b++];)Q(c);google.aftq=null}}google.caft=function(a){google.aftq===null?Q(a):(google.aftq=google.aftq\|\|[],google.aftq.push(a))};function R(){return window.performance&&window.performance.
2024-07-03 21:50:21 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 74 73 20 66 72 76 74 20 68 63 74 20 68 73 74 20 70 72 74 20 73 63 74 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 75 6e 63 74 69 6f 6e 20 53 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 70 61 2e 73 65 61 72 63 68 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 5b 3f 26 5d 22 2b 61 2b 22 3d 28 5c 5c 64 2b 29 22 29 29 29 3f 4e 75 6d 62 65 72 28 61 5b 31 5d 29 3a 2d 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 54 28 61 29 7b 76 61 72 20 62 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2c 63 3d 62 2e 6d 3b 69 66 28 21 63 7c 7c 21 63 2e 70 72 73 29 7b 63 3d 77 69 6e 64 6f 77 2e 5f 63 73 63 3d 3d 3d 22 61 67 73 61 22 26 26 77 69 6e 64 6f 77 2e 5f 63 73 68 69 64 3b 76 61 72 20 64 3d 52 28 29 7c 7c 63 3f 30 3a 53 28 22 71 73 75 62 74 73 22 29 Data Ascii: 8000ts frvt hct hst prt sct".split(" ");function S(a){return(a=pa.search.match(new RegExp("[?&]"+a+"=(\\d+)")))?Number(a[1]):-1}function T(a){var b=google.timers.load,c=b.m;if(!c\|\|!c.prs){c=window._csc==="agsa"&&window._cshid;var d=R()\|\|c?0:S("qsubts")
2024-07-03 21:50:21 UTC	1390	IN	Data Raw: 3d 21 30 2c 6d 3d 30 2c 6e 3d 30 2c 68 3d 30 2c 66 3d 30 2c 67 3b 49 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 61 28 6c 29 26 26 28 2b 2b 6d 2c 6c 2e 69 7c 7c 6c 2e 41 3f 65 28 6c 2e 69 7c 7c 30 2c 6c 2e 67 29 3a 6c 2e 76 2e 70 75 73 68 28 65 29 29 7d 29 3b 62 28 29 3b 6b 3d 21 31 3b 64 28 29 7d 3b 76 61 72 20 57 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 66 75 6e 63 74 69 6f 6e 20 74 61 28 29 7b 69 66 28 67 6f 6f 67 6c 65 2e 63 2e 63 34 74 26 26 57 26 26 57 2e 6d 61 72 6b 26 26 57 2e 74 69 6d 69 6e 67 29 7b 76 61 72 20 61 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2c 62 3d 61 2e 77 73 72 74 3b 61 3d 61 2e 74 2e 61 66 74 3b 62 26 26 62 3e 30 26 26 61 26 26 61 3e 30 26 26 28 61 2d 3d 57 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 Data Ascii: =!0,m=0,n=0,h=0,f=0,g;I(function(l){a(l)&&(++m,l.i\|\|l.A?e(l.i\|\|0,l.g):l.v.push(e))});b();k=!1;d()};var W=window.performance;function ta(){if(google.c.c4t&&W&&W.mark&&W.timing){var a=google.timers.load,b=a.wsrt;a=a.t.aft;b&&b>0&&a&&a>0&&(a-=W.timing.naviga
2024-07-03 21:50:21 UTC	1390	IN	Data Raw: 2e 66 6c 6f 6f 72 28 72 2b 41 61 29 29 3b 62 72 65 61 6b 20 61 7d 55 28 29 7d 5a 3d 76 6f 69 64 20 30 7d 67 6f 6f 67 6c 65 2e 63 2e 6d 61 66 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 77 7c 7c 49 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 75 61 7c 7c 28 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 61 66 74 22 29 2c 75 61 3d 21 30 29 3b 59 7c 7c 76 61 28 61 2c 62 29 7d 3b 67 6f 6f 67 6c 65 2e 63 2e 6d 69 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 76 61 72 20 65 3d 45 28 64 29 3b 64 2e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 74 66 22 2c 53 74 72 69 6e 67 28 65 29 29 3b 72 65 74 75 72 6e 20 78 26 26 21 64 2e 42 26 26 28 21 64 2e 6c 7c 7c 64 2e 46 7c 7c 21 21 28 45 28 64 29 26 31 29 29 7d 66 Data Ascii: .floor(r+Aa));break a}U()}Z=void 0}google.c.maft=function(a,b){w\|\|I(function(){});ua\|\|(google.c.b("aft"),ua=!0);Y\|\|va(a,b)};google.c.miml=function(a){function b(d){var e=E(d);d.g.setAttribute("data-atf",String(e));return x&&!d.B&&(!d.l\|\|d.F\|\|!!(E(d)&1))}f

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:23 UTC	1629	OUT	GET /xjs/_/ss/k=xjs.hd.O5pTwBf7VYU.L.B1.O/am=AKYAAAAAAAAAAwAAAAAAAAAAAAAAAABAAAAgAAAAAAAABYBPDgAIAGwIAAAAIABAAAAAAAAAKAAAAIAJAAAAAQBIAAgAEBAAAAAAQAQQABAAAhQBJAAKBBlAAABABDAYBkAqABgCAAAAAggAAAAAwI0ABAgAABEAAXgAAQAE6AABMAAIAABAIAMYCAAAAAAAAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAgAKAAAAAAAAAAAAAAAAAAAABA/d=1/ed=1/br=1/rs=ACT90oGWNXYrze4t63nt-W3bikDMbEQwgA/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hzf6TaakyDx9JJ1ZtAzOF0gNjnJI4nOvQe9sGbxkH4reiItCIvfxA; NID=515=ftd9T__MfWwhRmmTj22LXh81vv2K0dOQjlz7a5xdnnubGe9xh97ZXss8lNU-CKVYEwoF3oD-eIQm_SXSypIsnk4lgMlaL8ZAxOG_cCYG94IXwGmY8-Ted0toiN0RW0QBOEoR-vRGfGe_gYLvwvWzjmJxajjFMHVo-EXCYWDIZmg
2024-07-03 21:50:23 UTC	809	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 2429 Date: Wed, 03 Jul 2024 21:50:23 GMT Expires: Thu, 03 Jul 2025 21:50:23 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 04:11:02 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 21:50:23 UTC	581	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 43 4f 45 6d 59 3a 23 32 30 32 31 32 34 3b 2d 2d 78 68 55 47 77 63 3a 23 66 66 66 7d 3a 72 6f 6f 74 7b 2d 2d 67 53 35 6a 58 62 3a 23 64 61 64 63 65 30 3b 2d 2d 41 71 6e 37 78 64 3a 23 64 32 64 32 64 32 3b 2d 2d 45 70 46 4e 57 3a 23 66 66 66 3b 2d 2d 49 58 6f 78 55 65 3a 23 37 30 37 35 37 61 3b 2d 2d 62 62 51 78 41 62 3a 23 34 64 35 31 35 36 3b 2d 2d 59 4c 4e 4e 48 63 3a 23 32 30 32 31 32 34 3b 2d 2d 54 4d 59 53 39 3a 23 31 61 37 33 65 38 3b 2d 2d 4a 4b 71 78 32 3a 23 31 61 30 64 61 62 3b 2d 2d 72 72 4a 4a 55 63 3a 23 31 61 37 33 65 38 3b 2d 2d 6d 58 5a 6b 71 63 3a 23 64 61 64 63 65 30 3b 2d 2d 4e 73 6d 30 63 65 3a 23 34 32 38 35 66 34 3b 2d 2d 58 4b 4d 44 78 63 3a 23 66 37 66 38 66 39 3b 2d 2d 61 59 6e 32 53 3a 23 65 63 65 64 65 65 Data Ascii: :root{--COEmY:#202124;--xhUGwc:#fff}:root{--gS5jXb:#dadce0;--Aqn7xd:#d2d2d2;--EpFNW:#fff;--IXoxUe:#70757a;--bbQxAb:#4d5156;--YLNNHc:#202124;--TMYS9:#1a73e8;--JKqx2:#1a0dab;--rrJJUc:#1a73e8;--mXZkqc:#dadce0;--Nsm0ce:#4285f4;--XKMDxc:#f7f8f9;--aYn2S:#ecedee
2024-07-03 21:50:23 UTC	1390	IN	Data Raw: 74 73 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 2d 63 6f 6e 74 65 6e 74 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 68 69 64 65 2d 63 6f 6e 74 65 6e 74 7b 74 6f 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 2e 4c 48 Data Ascii: ts:none;transform:translateY(0)}to{transform:translateY(-100%)}}@keyframes g-snackbar-hide{from{transform:translateY(-100%)}to{transform:translateY(0)}}@keyframes g-snackbar-show-content{from{opacity:0}}@keyframes g-snackbar-hide-content{to{opacity:0}}.LH
2024-07-03 21:50:23 UTC	77	IN	Data Raw: 2d 6c 65 66 74 3a 30 7d 2e 6a 68 5a 76 6f 64 7b 6c 65 66 74 3a 31 36 70 78 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 4c 48 33 77 47 2c 2e 4f 78 38 43 79 64 7b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 7d 2e 79 4b 36 6a 71 65 2c 2e 57 Data Ascii: -left:0}.jhZvod{left:16px;right:auto}.LH3wG,.Ox8Cyd{left:0;right:0}.yK6jqe,.W
2024-07-03 21:50:23 UTC	381	IN	Data Raw: 75 30 76 39 62 2c 2e 45 37 48 64 67 62 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 47 39 6a 6f 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 34 70 78 3b 62 6f 74 74 6f 6d 3a 2d 32 34 70 78 3b 6c 65 66 74 3a 2d 32 34 70 78 3b 72 69 67 68 74 3a 2d 32 34 70 78 7d 2e 41 42 4d 46 5a 2e 42 30 35 52 42 62 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 31 30 30 6d 73 2c 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 30 73 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 36 29 7d 2e 41 42 4d 46 5a 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: u0v9b,.E7Hdgb{position:relative}.G9jore{position:absolute;top:-24px;bottom:-24px;left:-24px;right:-24px}.ABMFZ.B05RBb{transition:background-color 100ms,visibility 0s 0s;visibility:inherit;background-color:rgba(0,0,0,0.6)}.ABMFZ{transition:background-color

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:23 UTC	1323	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hzf6TaakyDx9JJ1ZtAzOF0gNjnJI4nOvQe9sGbxkH4reiItCIvfxA; NID=515=ftd9T__MfWwhRmmTj22LXh81vv2K0dOQjlz7a5xdnnubGe9xh97ZXss8lNU-CKVYEwoF3oD-eIQm_SXSypIsnk4lgMlaL8ZAxOG_cCYG94IXwGmY8-Ted0toiN0RW0QBOEoR-vRGfGe_gYLvwvWzjmJxajjFMHVo-EXCYWDIZmg
2024-07-03 21:50:23 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5969 Date: Wed, 03 Jul 2024 21:50:23 GMT Expires: Wed, 03 Jul 2024 21:50:23 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 21:50:23 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2024-07-03 21:50:23 UTC	1390	IN	Data Raw: 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 34 34 81 a0 23 96 da 69 9b 71 fd 27 74 d5 a5 75 a0 a1 09 a4 da c5 de 8d c5 54 01 e2 2b 6a f4 41 53 79 6a 54 d3 e9 f6 75 dc e8 28 66 cd 79 c5 ac 75 77 81 1b bf 2d 65 8d 42 c9 b6 2a 85 ac 35 84 57 fc 1d ff 2e fe ff ae a2 6d 7e bd 9c 35 2d 7c 5f 22 3e ff 6a d6 be ad af bd 63 5b 6f fb bc 6d 2b da ef 1e ec 4b fd 76 eb 8a 54 61 6b 5f aa 22 fe 5c 15 7f 1e 14 ab 3c d8 db f6 8c f8 ba 1f 89 75 b1 f8 da e3 f1 7d 2c 01 c0 Data Ascii: Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo4444#iq'tuT+jASyjTu(fyuw-eB*5W.m~5-\|_">jc[om+KvTak_"\<u},
2024-07-03 21:50:23 UTC	1390	IN	Data Raw: 43 0f b1 f7 8a 23 ce 72 99 ca cc 96 87 c6 1d 31 aa d5 c4 4e b1 23 71 fd 11 92 83 b0 09 5a 54 77 92 40 20 90 a4 4b 44 a3 cf 23 ca 0d 59 51 5c 48 8c 42 9e c5 91 aa 36 2c bc 92 96 44 f5 1e 1c f3 11 88 13 5c 3c cc 85 5c 2a 71 21 ef ad 1a 46 8a 35 80 ea ec a3 c6 15 b3 d6 4f 24 7e e6 6d 6c 04 88 68 62 89 c4 b1 e2 9e 46 fb 59 aa 4f b2 94 78 9f fb 24 a2 9d 11 f3 6b 19 c7 3b 55 86 3c a6 3b c1 fe ac 01 80 7c 32 6e f0 56 d3 09 a4 f6 98 91 b5 7c 62 14 fa 5f 88 56 1a e9 db c2 51 9b f2 b3 10 55 d7 3a b0 cf 25 26 51 5f 1e eb 04 62 77 07 5f 67 35 28 e7 26 7e 90 aa f7 28 64 cd 27 11 16 32 02 68 6a 43 e3 19 a2 c8 6c 10 99 fa ba 11 c1 83 6c 7f b2 de 63 45 ea 09 91 93 d8 8d 45 80 a1 5f b3 f1 22 2f f2 3b 6a 14 32 b4 62 fc b0 ee 76 f0 9f 21 b6 5a 78 c8 75 b0 08 20 f6 c2 8c 38 Data Ascii: C#r1N#qZTw@ KD#YQ\HB6,D\<\*q!F5O$~mlhbFYOx$k;U<;\|2nV\|b_VQU:%&Q_bw_g5(&~(d'2hjCllcEE_"/;j2bv!Zxu 8
2024-07-03 21:50:23 UTC	1390	IN	Data Raw: 0d 7f e3 9a a7 13 2f d6 0f 98 42 60 68 10 d1 bf f2 33 ec 6d d8 de 97 3a 9d 56 3e 6d bb 45 71 19 f7 0e ca e7 c0 e7 dd c5 81 2c bf f9 10 e2 3e 7c 89 29 42 6e be 77 64 93 85 64 d8 77 3d 0d 3a f8 3f 02 43 21 9a cc 5d 01 30 40 4a 72 86 c6 d2 d9 cb aa 6d 2c 01 80 7a 51 90 da 6f c9 47 31 a7 72 f2 b0 12 e0 f4 e4 83 89 5d b8 eb c3 74 e1 52 65 c8 d4 b6 ee da 27 cd e6 d5 bb 1d 4c ac 7e bc 25 5a f8 95 7c 7e e4 57 44 72 d4 a3 7c 8e cd cb 77 3b a4 f6 e9 4f 95 17 a0 08 c0 14 00 1a 93 a6 2b 51 73 e6 29 21 88 c3 2f 71 eb 7b 30 5f 8e ff 26 5c 18 7c 40 90 c8 7a c9 6e d6 65 18 f2 c3 62 c4 cc ae 75 7b 71 37 78 44 22 7a 7a 7a b4 06 2c 6a b7 62 39 6b 7e 49 51 33 dd bf 12 37 d0 1f ea 3b b0 b7 bd 42 24 91 73 14 4d bc fb 2a e5 e7 e3 73 d6 73 3f e3 f9 e0 4e 62 1e eb 56 05 f3 75 db Data Ascii: /B`h3m:V>mEq,>\|)Bnwddw=:?C!]0@Jrm,zQoG1r]tRe'L~%Z\|~WDr\|w;O+Qs)!/q{0_&\\|@znebu{q7xD"zzz,jb9k~IQ37;B$sM*ss?NbVu
2024-07-03 21:50:23 UTC	1080	IN	Data Raw: 35 71 cf fd be 90 35 3f c2 54 03 c2 2c 54 56 70 03 c7 73 5c 81 fd bf b7 04 19 75 d6 44 94 b2 1d 27 29 0e 2d 51 3e 5b 8b 11 13 4c 01 44 27 ee 49 22 09 da af 92 38 f0 fe 98 f4 af 46 4c 58 b1 60 2b a1 60 3f 55 60 54 04 55 75 92 08 04 78 79 e6 84 dd f0 30 41 45 44 2d 79 98 37 10 12 a6 d1 13 09 ca a5 b6 eb bd d6 ac 88 03 ea 43 94 7e 59 93 51 33 08 79 11 ca aa 51 db ce 95 b2 e6 95 aa 1b a5 44 3e 62 2f 11 1d 2c c2 78 cb 48 89 03 ef 87 a8 03 93 fe 15 02 33 61 6c d7 ff 56 54 0f af bf 54 1a fd 63 98 00 85 40 90 a8 57 42 20 84 36 8b 02 b7 1e 8e 9a 38 10 e1 14 73 c6 34 16 27 a0 04 84 f0 cb 76 fc 5b b8 1b 94 23 26 8d 6d f0 21 e1 4e 70 4e 6e c1 7a 85 9b 53 be 09 a9 c4 ad 6e 44 24 8d 46 1c c5 ac e9 d4 cc e2 50 0e e8 3d c4 8d df dd 68 44 b2 b3 81 ae 07 fa 90 66 77 91 43 Data Ascii: 5q5?T,TVps\uD')-Q>[LD'I"8FLX`+`?U`TUuxy0AED-y7C~YQ3yQD>b/,xH3alVTTc@WB 68s4'v[#&m!NpNnzSnD$FP=hDfwC

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://boldlydaisy.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Windows Analysis Report
http://boldlydaisy.com

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 21:50:23 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=65921 Date: Wed, 03 Jul 2024 21:50:23 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:23 UTC	3786	OUT	GET /xjs/_/js/k=xjs.hd.en.AP2X0CdZJ3U.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAgBFAAAAAoAAAAAAAAAAAAAIAAIQBAKAAABMABAERAAABAAACAQBCAR5kAAASACQAAAAABAAAKBCBAAAAABAAAAAAoAAAAAAAAAAAAAAAYQAABAAAAAAAAAAAAAAAA6AAAAAACIEAQAAMYCAAABAAAACAPAIIDYJCCAAAAAAAAAAAAAAAAApAgmAsJKAggAAAAAAAAAAAAAAAAgJR0YmED/d=1/ed=1/dg=2/br=1/rs=ACT90oEiSEyZOxFvG6a1XMvASCTsQE8VDA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IZrNqe:P8ha2c;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud: [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hzf6TaakyDx9JJ1ZtAzOF0gNjnJI4nOvQe9sGbxkH4reiItCIvfxA; NID=515=ftd9T__MfWwhRmmTj22LXh81vv2K0dOQjlz7a5xdnnubGe9xh97ZXss8lNU-CKVYEwoF3oD-eIQm_SXSypIsnk4lgMlaL8ZAxOG_cCYG94IXwGmY8-Ted0toiN0RW0QBOEoR-vRGfGe_gYLvwvWzjmJxajjFMHVo-EXCYWDIZmg
2024-07-03 21:50:23 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 885267 Date: Wed, 03 Jul 2024 21:50:23 GMT Expires: Thu, 03 Jul 2025 21:50:23 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Wed, 03 Jul 2024 20:42:15 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 21:50:23 UTC	572	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 4d 49 54 0a 2a 2f 0a 2f 2a 0a 20 53 Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// Copyright 2024 Google, Inc SPDX-License-Identifier: MIT// S
2024-07-03 21:50:23 UTC	1390	IN	Data Raw: 63 61 2c 4c 63 61 2c 4d 63 61 2c 56 63 61 2c 58 63 61 2c 59 63 61 2c 24 63 61 2c 62 64 61 2c 63 64 61 2c 67 64 61 2c 6a 64 61 2c 64 64 61 2c 69 64 61 2c 68 64 61 2c 66 64 61 2c 65 64 61 2c 6b 64 61 2c 6c 64 61 2c 6d 64 61 2c 6e 64 61 2c 71 64 61 2c 72 64 61 2c 73 64 61 2c 74 64 61 2c 75 64 61 2c 78 64 61 2c 79 64 61 2c 42 64 61 2c 7a 64 61 2c 46 64 61 2c 47 64 61 2c 4d 64 61 2c 4e 64 61 2c 50 64 61 2c 4f 64 61 2c 52 64 61 2c 54 64 61 2c 53 64 61 2c 56 64 61 2c 55 64 61 2c 59 64 61 2c 58 64 61 2c 24 64 61 2c 64 65 61 2c 65 65 61 2c 70 62 2c 69 65 61 2c 6b 65 61 2c 6c 65 61 2c 6e 65 61 2c 70 65 61 2c 7a 65 61 2c 42 65 61 2c 41 65 61 2c 43 65 61 2c 6a 65 61 2c 6d 65 61 2c 41 62 2c 46 65 61 2c 4a 65 61 2c 52 65 61 2c 53 65 61 2c 61 66 61 2c 58 65 61 2c 63 66 Data Ascii: ca,Lca,Mca,Vca,Xca,Yca,$ca,bda,cda,gda,jda,dda,ida,hda,fda,eda,kda,lda,mda,nda,qda,rda,sda,tda,uda,xda,yda,Bda,zda,Fda,Gda,Mda,Nda,Pda,Oda,Rda,Tda,Sda,Vda,Uda,Yda,Xda,$da,dea,eea,pb,iea,kea,lea,nea,pea,zea,Bea,Aea,Cea,jea,mea,Ab,Fea,Jea,Rea,Sea,afa,Xea,cf
2024-07-03 21:50:23 UTC	1390	IN	Data Raw: 65 3d 62 29 7d 3b 5f 2e 61 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 63 2b 3d 61 5b 65 5d 2b 28 65 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 65 5d 3a 22 25 73 22 29 3b 5f 2e 61 61 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2b 61 5b 64 5d 29 7d 3b 62 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 22 29 3b 62 2e 70 75 73 68 28 36 35 35 33 33 29 7d 3b 63 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 62 29 3b 72 65 74 75 72 6e 20 61 3d 3d 6e Data Ascii: e=b)};_.aaa=function(a,b){a=a.split("%s");for(var c="",d=a.length-1,e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");_.aa.call(this,c+a[d])};baa=function(a,b){if(a)throw Error("C");b.push(65533)};caa=function(a,b){b=String.fromCharCode.apply(null,b);return a==n
2024-07-03 21:50:23 UTC	1390	IN	Data Raw: 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 2f 2e 74 65 73 74 28 61 29 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 44 22 29 3b 61 3d 28 6b 61 61 7c 7c 28 6b 61 61 3d 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 29 2e 65 6e 63 6f 64 65 28 61 29 7d 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 33 2a 61 2e 6c 65 6e 67 74 68 29 2c 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3b 69 66 28 66 3c 31 32 38 29 64 5b 63 2b 2b 5d 3d 66 3b 65 6c 73 65 7b 69 66 28 66 3c 32 30 34 38 29 64 5b 63 2b 2b 5d 3d 66 3e 3e 36 7c 31 39 32 3b 65 6c 73 65 7b 69 66 28 66 3e 3d 35 35 32 39 36 26 26 66 3c 3d 35 37 33 34 33 29 Data Ascii: FF](?![\uDC00-\uDFFF])/.test(a)))throw Error("D");a=(kaa\|\|(kaa=new TextEncoder)).encode(a)}else{for(var c=0,d=new Uint8Array(3*a.length),e=0;e<a.length;e++){var f=a.charCodeAt(e);if(f<128)d[c++]=f;else{if(f<2048)d[c++]=f>>6\|192;else{if(f>=55296&&f<=57343)
2024-07-03 21:50:23 UTC	12	IN	Data Raw: 29 7c 7c 5f 2e 68 61 28 22 46 78 69 Data Ascii: )\|\|_.ha("Fxi
2024-07-03 21:50:23 UTC	1390	IN	Data Raw: 4f 53 22 29 7d 3b 5f 2e 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 53 61 66 61 72 69 22 29 26 26 21 28 5f 2e 69 61 28 29 7c 7c 28 5f 2e 71 61 61 28 29 3f 30 3a 5f 2e 68 61 28 22 43 6f 61 73 74 22 29 29 7c 7c 5f 2e 72 61 61 28 29 7c 7c 5f 2e 74 61 61 28 29 7c 7c 5f 2e 75 61 61 28 29 7c 7c 28 5f 2e 71 61 61 28 29 3f 6e 61 61 28 22 4f 70 65 72 61 22 29 3a 5f 2e 68 61 28 22 4f 50 52 22 29 29 7c 7c 5f 2e 76 61 61 28 29 7c 7c 5f 2e 77 61 61 28 29 7c 7c 5f 2e 68 61 28 22 41 6e 64 72 6f 69 64 22 29 29 7d 3b 5f 2e 69 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 71 61 61 28 29 3f 6e 61 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 5f 2e 68 61 28 22 43 68 72 6f 6d 65 22 29 7c 7c 5f 2e 68 61 28 22 43 72 69 4f Data Ascii: OS")};_.ja=function(){return _.ha("Safari")&&!(_.ia()\|\|(_.qaa()?0:_.ha("Coast"))\|\|_.raa()\|\|_.taa()\|\|_.uaa()\|\|(_.qaa()?naa("Opera"):_.ha("OPR"))\|\|_.vaa()\|\|_.waa()\|\|_.ha("Android"))};_.ia=function(){return _.qaa()?naa("Chromium"):(_.ha("Chrome")\|\|_.ha("CriO
2024-07-03 21:50:23 UTC	1390	IN	Data Raw: 7b 69 66 28 5f 2e 71 61 61 28 29 26 26 61 21 3d 3d 22 53 69 6c 6b 22 29 7b 76 61 72 20 62 3d 5f 2e 65 61 2e 62 72 61 6e 64 73 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 62 72 61 6e 64 3d 3d 3d 61 7d 29 3b 69 66 28 21 62 7c 7c 21 62 2e 76 65 72 73 69 6f 6e 29 72 65 74 75 72 6e 20 4e 61 4e 3b 62 3d 62 2e 76 65 72 73 69 6f 6e 2e 73 70 6c 69 74 28 22 2e 22 29 7d 65 6c 73 65 7b 62 3d 41 61 61 28 61 29 3b 69 66 28 62 3d 3d 3d 22 22 29 72 65 74 75 72 6e 20 4e 61 4e 3b 62 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 7d 72 65 74 75 72 6e 20 62 2e 6c 65 6e 67 74 68 3d 3d 3d 30 3f 4e 61 4e 3a 4e 75 6d 62 65 72 28 62 5b 30 5d 29 7d 3b 43 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 61 61 3f 21 21 5f 2e 65 61 Data Ascii: {if(_.qaa()&&a!=="Silk"){var b=_.ea.brands.find(function(c){return c.brand===a});if(!b\|\|!b.version)return NaN;b=b.version.split(".")}else{b=Aaa(a);if(b==="")return NaN;b=b.split(".")}return b.length===0?NaN:Number(b[0])};Caa=function(){return _.maa?!!_.ea
2024-07-03 21:50:23 UTC	1390	IN	Data Raw: 28 22 22 29 3a 61 2c 65 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 2d 2d 65 29 65 20 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 63 2c 64 5b 65 5d 2c 65 2c 61 29 7d 3b 5f 2e 4c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 5f 2e 71 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 62 3c 30 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 63 68 61 72 41 74 28 62 29 3a 61 5b 62 5d 7d 3b 5f 2e 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 61 2e 6c 65 6e 67 74 68 2c 65 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 69 66 28 66 20 69 6e 20 65 26 26 62 2e 63 61 6c 6c 28 63 2c Data Ascii: (""):a,e=a.length-1;e>=0;--e)e in d&&b.call(c,d[e],e,a)};_.Laa=function(a,b,c){b=_.qa(a,b,c);return b<0?null:typeof a==="string"?a.charAt(b):a[b]};_.qa=function(a,b,c){for(var d=a.length,e=typeof a==="string"?a.split(""):a,f=0;f<d;f++)if(f in e&&b.call(c,
2024-07-03 21:50:23 UTC	1390	IN	Data Raw: 65 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 61 2c 54 61 61 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 3b 54 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 32 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 29 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 3b 0a 5f 2e 56 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 7c 7c 61 3b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 30 2c 65 3d 7b 7d 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 66 3d 61 5b 64 2b 2b 5d 2c 67 3d 5f 2e 43 61 28 66 29 3f 22 6f 22 2b 5f 2e 44 61 28 66 29 3a 28 74 79 70 65 6f 66 20 Data Ascii: e.splice.apply(a,Taa(arguments,1))};Taa=function(a,b,c){return arguments.length<=2?Array.prototype.slice.call(a,b):Array.prototype.slice.call(a,b,c)};_.Vaa=function(a,b){b=b\|\|a;for(var c=0,d=0,e={};d<a.length;){var f=a[d++],g=_.Ca(f)?"o"+_.Da(f):(typeof
2024-07-03 21:50:23 UTC	1390	IN	Data Raw: 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 62 2e 70 75 73 68 28 66 5b 67 5d 29 7d 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 0a 5f 2e 65 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 66 61 28 5f 2e 64 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 77 65 62 6b 69 74 22 29 26 26 21 5f 2e 68 61 28 22 45 64 67 65 22 29 7d 3b 5f 2e 66 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 47 65 63 6b 6f 22 29 26 26 21 5f 2e 65 62 61 28 29 26 26 21 28 5f 2e 68 61 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 5f 2e 68 61 28 22 4d 53 49 45 22 29 29 26 26 21 5f 2e 68 61 28 22 45 64 67 65 22 29 7d 3b 5f 2e 68 62 61 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: for(var g=0;g<f.length;g++)b.push(f[g])}else b.push(d)}return b};_.eba=function(){return _.fa(_.da().toLowerCase(),"webkit")&&!_.ha("Edge")};_.fba=function(){return _.ha("Gecko")&&!_.eba()&&!(_.ha("Trident")\|\|_.ha("MSIE"))&&!_.ha("Edge")};_.hba=function(

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:23 UTC	1394	OUT	POST /gen_204?s=webhp&t=cap&atyp=csi&ei=nceFZp_nKtXni-gPtb-MyAw&rt=wsrt.2839,cbt.381,hst.380&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hzf6TaakyDx9JJ1ZtAzOF0gNjnJI4nOvQe9sGbxkH4reiItCIvfxA; NID=515=ftd9T__MfWwhRmmTj22LXh81vv2K0dOQjlz7a5xdnnubGe9xh97ZXss8lNU-CKVYEwoF3oD-eIQm_SXSypIsnk4lgMlaL8ZAxOG_cCYG94IXwGmY8-Ted0toiN0RW0QBOEoR-vRGfGe_gYLvwvWzjmJxajjFMHVo-EXCYWDIZmg
2024-07-03 21:50:23 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-IwX7f3mPhvuBqSF6FCgctg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Wed, 03 Jul 2024 21:50:23 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-03 21:50:24 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=65930 Date: Wed, 03 Jul 2024 21:50:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-03 21:50:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:25 UTC	1317	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hzf6TaakyDx9JJ1ZtAzOF0gNjnJI4nOvQe9sGbxkH4reiItCIvfxA; NID=515=ftd9T__MfWwhRmmTj22LXh81vv2K0dOQjlz7a5xdnnubGe9xh97ZXss8lNU-CKVYEwoF3oD-eIQm_SXSypIsnk4lgMlaL8ZAxOG_cCYG94IXwGmY8-Ted0toiN0RW0QBOEoR-vRGfGe_gYLvwvWzjmJxajjFMHVo-EXCYWDIZmg
2024-07-03 21:50:25 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 660 Date: Wed, 03 Jul 2024 21:50:25 GMT Expires: Wed, 03 Jul 2024 21:50:25 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 22 Apr 2020 22:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 21:50:25 UTC	660	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:25 UTC	1328	OUT	GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=nceFZp_nKtXni-gPtb-MyAw.1720043423628&dpr=1&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hzf6TaakyDx9JJ1ZtAzOF0gNjnJI4nOvQe9sGbxkH4reiItCIvfxA; NID=515=ftd9T__MfWwhRmmTj22LXh81vv2K0dOQjlz7a5xdnnubGe9xh97ZXss8lNU-CKVYEwoF3oD-eIQm_SXSypIsnk4lgMlaL8ZAxOG_cCYG94IXwGmY8-Ted0toiN0RW0QBOEoR-vRGfGe_gYLvwvWzjmJxajjFMHVo-EXCYWDIZmg
2024-07-03 21:50:25 UTC	1230	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Date: Wed, 03 Jul 2024 21:50:25 GMT Expires: Wed, 03 Jul 2024 21:50:25 GMT Cache-Control: private, max-age=3600 Content-Type: application/json; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-q4hrZqD0LudPpFmzslx2xA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-03 21:50:25 UTC	160	IN	Data Raw: 65 37 35 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 6f 6b 6c 61 68 6f 6d 61 20 73 74 61 74 65 20 72 75 6e 6e 69 6e 67 20 62 61 63 6b 20 6f 6c 6c 69 65 20 67 6f 72 64 6f 6e 22 2c 34 36 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 6c 6d 22 3a 5b 5d 2c 22 7a 66 22 3a 33 33 2c 22 7a 68 22 3a 22 6f 6b 6c 61 68 6f 6d 61 20 73 74 61 74 65 20 72 75 6e 6e 69 6e 67 20 62 61 63 6b 20 6f 6c 6c 69 65 20 67 6f 72 64 6f 6e 22 2c 22 7a 69 22 3a 22 4f 6c 6c 69 65 20 47 6f 72 64 Data Ascii: e75)]}'[[["oklahoma state running back ollie gordon",46,[3,357,362,396,143],{"lm":[],"zf":33,"zh":"oklahoma state running back ollie gordon","zi":"Ollie Gord
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 6f 6e 20 5c 75 32 30 31 34 20 46 6f 6f 74 62 61 6c 6c 20 70 6c 61 79 65 72 22 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 70 22 3a 22 65 4a 7a 6a 34 74 56 50 31 7a 63 30 7a 44 4b 31 71 43 77 30 4c 53 67 30 59 50 54 53 79 4d 5f 4f 53 63 7a 49 7a 30 31 55 4b 43 35 4a 4c 45 6c 56 4b 43 72 4e 79 38 76 4d 53 31 64 49 53 6b 7a 4f 56 73 6a 50 79 63 6c 4d 56 55 6a 50 4c 30 72 4a 7a 77 4d 41 49 38 38 54 39 67 22 7d 2c 22 7a 73 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 6a 70 65 67 3b 62 61 73 65 36 34 2c 2f 39 6a 2f 34 41 41 51 53 6b 5a 4a 52 67 41 42 41 51 41 41 41 51 41 42 41 41 44 2f 32 77 43 45 41 41 6b 47 42 77 67 48 42 67 6b 49 42 77 67 4b 43 67 6b 4c 44 52 59 50 44 51 77 4d 44 52 73 55 46 52 41 57 49 42 30 69 49 69 41 64 48 78 38 6b 4b 44 51 Data Ascii: on \u2014 Football player","zl":8,"zp":{"gs_ssp":"eJzj4tVP1zc0zDK1qCw0LSg0YPTSyM_OSczIz01UKC5JLElVKCrNy8vMS1dISkzOVsjPyclMVUjPL0rJzwMAI88T9g"},"zs":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAkGBwgHBgkIBwgKCgkLDRYPDQwMDRsUFRAWIB0iIiAdHx8kKDQ
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 70 61 56 5a 67 67 64 64 39 6d 32 49 2b 75 43 2f 52 77 78 7a 69 43 61 6f 68 55 7a 77 2b 43 53 31 6d 58 7a 41 50 4f 78 36 6a 6b 63 43 33 68 4b 6d 65 71 72 36 65 4e 30 42 62 38 30 6a 61 6b 55 67 4d 6f 4a 4e 37 48 63 62 59 4d 4d 63 65 6b 43 32 4c 59 39 6c 48 6d 35 75 36 78 33 48 73 4d 53 78 41 75 47 4b 33 36 46 72 32 49 39 73 52 69 59 31 6b 49 47 79 71 51 4c 6e 66 48 41 4a 49 32 47 4d 48 6c 79 76 6a 4f 47 47 71 34 30 6b 30 4d 72 37 37 4b 32 6e 5a 6a 35 44 47 47 46 58 34 36 79 2f 74 34 36 65 71 65 4c 55 45 4a 51 67 48 6b 57 48 64 4e 78 75 4e 78 62 34 34 6f 73 55 7a 52 56 4a 44 62 64 30 61 68 66 72 67 74 5a 68 61 70 6f 58 73 6c 77 77 33 52 67 44 38 78 67 50 35 71 78 69 72 5a 6c 6b 48 66 51 6b 4d 50 2f 65 6d 41 6e 6a 75 4c 5a 54 68 79 30 30 76 77 32 45 73 76 2b Data Ascii: paVZggdd9m2I+uC/RwxziCaohUzw+CS1mXzAPOx6jkcC3hKmeqr6eN0Bb80jakUgMoJN7HcbYMMcekC2LY9lHm5u6x3HsMSxAuGK36Fr2I9sRiY1kIGyqQLnfHAJI2GMHlyvjOGGq40k0Mr77K2nZj5DGGFX46y/t46eqeLUEJQgHkWHdNxuNxb44osUzRVJDbd0ahfrgtZhapoXslww3RgD8xgP5qxirZlkHfQkMP/emAnjuLZThy00vw2Esv+
2024-07-03 21:50:25 UTC	768	IN	Data Raw: 6d 30 6b 75 44 71 55 32 39 43 50 54 46 70 34 41 67 6b 4e 56 58 53 4a 79 57 4e 54 66 31 31 62 66 62 41 7a 65 71 73 4b 45 64 35 4b 4a 2f 39 6b 5c 75 30 30 33 64 22 7d 5d 2c 5b 22 6d 69 6c 65 73 20 62 72 69 64 67 65 73 20 63 6c 69 70 70 65 72 73 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 6e 65 74 66 6c 69 78 20 73 75 69 74 73 20 73 65 61 73 6f 6e 20 39 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 77 77 65 20 6d 6f 6e 65 79 20 69 6e 20 74 68 65 20 62 61 6e 6b 20 32 30 32 34 Data Ascii: m0kuDqU29CPTFp4AgkNVXSJyWNTf11bfbAzeqsKEd5KJ/9k\u003d"}],["miles bridges clippers",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["netflix suits season 9",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["wwe money in the bank 2024
2024-07-03 21:50:25 UTC	99	IN	Data Raw: 35 64 0d 0a 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 46 41 41 41 41 41 72 43 41 4d 41 41 41 44 59 4b 76 2b 64 41 41 41 41 6e 46 42 4d 56 45 58 2f 2f 2f 38 45 48 6b 4b 2f 44 54 34 41 44 6a 70 7a 65 59 67 41 41 44 58 65 6e 71 6c 31 0d 0a Data Ascii: 5dg;base64,iVBORw0KGgoAAAANSUhEUgAAAFAAAAArCAMAAADYKv+dAAAAnFBMVEX///8EHkK/DT4ADjpzeYgAADXenql1
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 62 65 39 0d 0a 66 49 75 39 41 44 4b 6f 72 4c 58 54 64 49 61 39 41 44 61 38 41 43 38 41 41 43 30 41 41 44 45 41 45 7a 7a 6b 72 72 67 41 41 43 6f 41 47 6b 44 66 34 65 54 71 78 4d 72 79 32 74 36 63 6f 4b 72 50 5a 48 6e 49 79 73 2f 78 38 76 4f 37 41 43 71 52 6c 61 41 41 41 43 61 36 41 43 43 47 69 35 66 33 2b 50 6c 5a 59 58 54 34 36 75 33 68 70 72 44 31 34 75 55 65 4c 6b 31 6d 62 48 33 45 4d 46 49 73 4f 56 52 42 53 6d 46 4d 56 57 6d 79 74 72 30 4e 49 30 55 41 41 43 44 6c 74 72 37 4d 57 47 2f 42 47 30 58 4a 53 6d 54 59 69 4a 66 76 30 4e 57 33 41 41 61 7a 39 52 54 2f 41 41 41 43 49 30 6c 45 51 56 52 49 69 64 57 57 61 5a 2f 61 49 42 44 47 63 56 6b 38 56 67 36 54 72 45 6f 75 6b 37 57 78 65 32 68 62 32 33 37 2f 37 39 59 41 38 63 68 41 43 74 6c 58 37 66 4d 71 50 35 Data Ascii: be9fIu9ADKorLXTdIa9ADa8AC8AAC0AADEAEzzkrrgAACoAGkDf4eTqxMry2t6coKrPZHnIys/x8vO7ACqRlaAAACa6ACCGi5f3+PlZYXT46u3hprD14uUeLk1mbH3EMFIsOVRBSmFMVWmytr0NI0UAACDltr7MWG/BG0XJSmTYiJfv0NW3AAaz9RT/AAACI0lEQVRIidWWaZ/aIBDGcVk8Vg6TrEouk7Wxe2hb237/79YA8chACtlX7fMqP5
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 7a 63 33 4e 7a 63 33 4e 7a 63 33 4e 7a 63 33 4e 7a 63 33 4e 2f 2f 41 41 42 45 49 41 46 41 41 55 41 4d 42 49 67 41 43 45 51 45 44 45 51 48 2f 78 41 41 63 41 41 41 43 41 67 4d 42 41 51 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 77 45 47 42 41 55 49 41 67 50 2f 78 41 41 33 45 41 41 42 41 77 4d 43 41 67 63 47 41 77 6b 41 41 41 41 41 41 41 41 42 41 67 4d 45 41 41 55 52 42 69 45 53 4d 51 63 54 46 45 46 52 63 5a 45 49 49 6a 4a 43 59 59 45 6a 73 65 45 56 4a 44 4e 53 6b 71 47 69 77 74 48 2f 78 41 41 57 41 51 45 42 41 51 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 51 4c 2f 78 41 41 57 45 51 45 42 41 51 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 51 4c 2f 32 67 41 4d 41 77 45 41 41 68 45 44 45 51 41 2f 41 45 33 45 6d 53 6f 54 68 63 68 79 Data Ascii: zc3Nzc3Nzc3Nzc3Nzc3N//AABEIAFAAUAMBIgACEQEDEQH/xAAcAAACAgMBAQAAAAAAAAAAAAAABwEGBAUIAgP/xAA3EAABAwMCAgcGAwkAAAAAAAABAgMEAAURBiESMQcTFEFRcZEIIjJCYYEjseEVJDNSkqGiwtH/xAAWAQEBAQAAAAAAAAAAAAAAAAAAAQL/xAAWEQEBAQAAAAAAAAAAAAAAAAAAAQL/2gAMAwEAAhEDEQA/AE3EmSoThchy
2024-07-03 21:50:25 UTC	276	IN	Data Raw: 6a 4b 63 35 7a 35 43 6b 58 71 53 31 46 79 51 39 4a 6a 75 4b 57 41 4f 4a 51 57 65 56 4e 61 39 47 48 5a 59 54 7a 34 6d 79 6d 79 68 42 4b 57 48 7a 78 63 52 2b 6d 64 2f 76 6d 6b 70 64 62 6c 49 6d 79 48 33 6e 48 46 66 6a 48 4b 6b 5a 32 72 56 47 72 4f 39 46 52 75 44 55 31 6b 46 46 46 46 42 2f 2f 32 51 5c 75 30 30 33 64 5c 75 30 30 33 64 22 7d 5d 2c 5b 22 77 6f 6f 64 20 62 72 6f 74 68 65 72 73 20 72 61 63 69 6e 67 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 5d 2c 7b 22 61 67 22 3a 7b 22 61 22 3a 7b 22 38 22 3a 5b 22 54 72 65 6e 64 69 6e 67 20 73 65 61 72 63 68 65 73 22 5d 7d 7d 2c 22 71 22 3a 22 5a 74 79 6f 53 42 41 44 5a 36 54 Data Ascii: jKc5z5CkXqS1FyQ9JjuKWAOJQWeVNa9GHZYTz4mymyhBKWHzxcR+md/vmkpdblImyH3nHFfjHKkZ2rVGrO9FRuDU1kFFFFB//2Q\u003d\u003d"}],["wood brothers racing",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}]],{"ag":{"a":{"8":["Trending searches"]}},"q":"ZtyoSBADZ6T
2024-07-03 21:50:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:25 UTC	1538	OUT	GET /xjs/_/js/md=10/k=xjs.hd.en.AP2X0CdZJ3U.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAgBFAAAAAoAAAAAAAAAAAAAIAAIQBAKAAABMABAERAAABAAACAQBCAR5kAAASACQAAAAABAAAKBCBAAAAABAAAAAAoAAAAAAAAAAAAAAAYQAABAAAAAAAAAAAAAAAA6AAAAAACIEAQAAMYCAAABAAAACAPAIIDYJCCAAAAAAAAAAAAAAAAApAgmAsJKAggAAAAAAAAAAAAAAAAgJR0YmED/rs=ACT90oEiSEyZOxFvG6a1XMvASCTsQE8VDA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hzf6TaakyDx9JJ1ZtAzOF0gNjnJI4nOvQe9sGbxkH4reiItCIvfxA; NID=515=ftd9T__MfWwhRmmTj22LXh81vv2K0dOQjlz7a5xdnnubGe9xh97ZXss8lNU-CKVYEwoF3oD-eIQm_SXSypIsnk4lgMlaL8ZAxOG_cCYG94IXwGmY8-Ted0toiN0RW0QBOEoR-vRGfGe_gYLvwvWzjmJxajjFMHVo-EXCYWDIZmg
2024-07-03 21:50:25 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 145046 Date: Wed, 03 Jul 2024 21:50:25 GMT Expires: Thu, 03 Jul 2025 21:50:25 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Wed, 03 Jul 2024 20:42:15 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 21:50:25 UTC	572	IN	Data Raw: 7b 22 63 68 75 6e 6b 54 79 70 65 73 22 3a 22 31 30 30 30 30 31 31 31 31 31 31 31 30 30 31 31 31 31 30 30 30 31 30 30 30 30 31 30 31 31 30 31 30 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 30 31 31 31 31 31 31 31 31 31 31 31 30 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: {"chunkTypes":"100001111111001111000100001011010000001111111111111111111111111111111011011111111111010111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 31 32 32 31 32 32 31 32 31 31 31 32 32 31 32 32 31 31 32 32 31 32 32 32 31 32 31 32 31 32 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 32 32 32 32 32 32 32 32 32 31 32 32 31 32 31 32 31 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 32 32 32 32 32 32 31 33 33 32 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 32 31 31 31 32 32 32 32 31 31 32 32 32 31 31 32 31 32 31 32 31 32 31 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 31 32 31 32 31 32 31 32 32 Data Ascii: 212121212121212221212121212121212221212212212111221221122122212121222212121212121212221222222222212212121222121212121212121211211121212121212121212121212121222222222133233333333333333333211122221122211212121212212121212121212112121212121212121211121212122
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 32 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 32 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 32 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 211111111111112111111111111111111111111111111132111111111111111111111111111113111213111111111111111311111113111111111111111111111111111111121112121111111111111111111111111111111311111111111111111211111111111111111111111111101111111111111111111111111111111
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 32 32 32 32 32 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 31 31 31 31 31 31 31 31 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 33 31 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 32 32 32 31 32 32 32 32 32 32 31 31 32 32 32 32 32 32 32 32 32 32 31 31 32 31 32 31 31 33 32 32 32 32 32 32 32 33 32 32 32 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 32 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 222221112222222222222222222111111111331111111111111111111011111111111111111111111111111111111111111111111111111113111111113133111111111111111131111112221222222112222222222112121132222222322231111111111111111111312122222222222222222222222222111111111111111
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 32 32 31 32 32 31 32 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 31 31 31 32 32 32 32 32 32 32 32 31 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 32 31 32 31 32 31 32 31 32 31 31 32 31 31 31 31 31 31 31 31 31 31 31 32 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 32 31 32 32 31 31 32 32 31 31 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 32 32 32 31 32 32 32 31 32 32 32 32 32 32 32 32 32 31 32 32 31 32 32 32 32 32 32 31 32 32 32 32 32 32 32 31 32 32 32 32 32 32 32 32 32 32 32 32 31 31 32 32 32 31 32 Data Ascii: 221221211111111112111111111111111111122222222222222222222222211112222222212222111111111111111111111112111111111121212121212121211212121212112111111111112122222222222222121221122112221111111111112111112221222122222222212212222221222222212222222222221122212
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 33 32 33 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 33 31 31 32 31 31 31 31 33 31 31 33 31 31 31 31 32 33 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 32 32 33 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 32 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 33 31 31 31 31 31 31 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 32 32 32 32 31 31 31 31 31 31 31 32 31 31 31 31 31 33 31 31 31 31 31 31 31 31 32 32 32 31 31 31 31 31 31 33 33 31 Data Ascii: 111111111111111111213231111111112222222222222222222222222222222222222311211113113111123113111111111111111111111111131112231131111111111111111111111111111131111111211111311111111111111112311111122111111111111111131111122221111111211111311111111222111111331
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 32 31 31 33 31 31 31 31 32 32 32 33 32 32 32 32 32 32 32 32 32 32 32 31 31 31 32 33 31 33 31 33 31 31 31 31 31 30 30 30 32 30 32 30 30 30 30 30 30 30 30 32 30 30 30 30 32 30 30 30 32 30 30 30 30 30 30 30 30 30 32 32 32 32 30 32 30 32 32 32 30 32 32 32 32 30 30 30 30 30 30 30 30 30 30 30 30 30 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 32 33 31 32 33 31 31 33 31 31 31 31 31 31 31 31 31 31 31 33 31 33 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111122222113111122232222222222211123131311111000202000000002000020002000000000222202022202222000000000000011111111211111123123113111111111113131111111311111111111111113311111111111111111111111111111111111111111111111111
2024-07-03 21:50:25 UTC	1390	IN	Data Raw: 33 31 33 31 33 31 31 33 33 33 32 32 32 32 32 33 31 31 31 32 32 33 31 31 32 32 32 32 32 32 32 32 32 32 32 32 33 31 31 31 31 31 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 33 31 31 31 31 31 31 33 22 2c 22 6d 6f 64 75 6c 65 47 72 61 70 68 22 3a 22 64 24 71 75 61 6e 74 75 6d 2f 74 37 78 67 49 65 2f 77 73 39 54 6c 63 2f 63 45 74 39 30 62 2f 71 64 64 67 4b 65 2f 79 78 54 63 68 66 2f 2b 32 37 30 2f 3a 2f 2f 78 51 74 5a 62 3a 2c 2c 32 2f 2f 52 39 59 48 4a 63 3a 2c 33 2f 4b 55 4d 37 5a 2f 77 72 7a 45 58 62 2f 54 78 43 4a 66 64 2f 57 56 44 79 4b 65 2f 2f 56 6a 39 68 70 64 3a 2c 2f 74 61 66 50 72 66 2f 64 74 6c 30 68 64 2f 6c 4c 51 57 46 65 2f 49 6c 31 4d 34 62 2f 65 48 44 66 6c 2f 46 4f 4e 45 64 66 3a 34 2f 4a 69 56 4c 6a 64 3a 35 2f 46 41 55 64 57 3a 36 2f 5a 31 Data Ascii: 31313113332222231112231122222222222231111100000000000000131111113","moduleGraph":"d$quantum/t7xgIe/ws9Tlc/cEt90b/qddgKe/yxTchf/+270/://xQtZb:,,2//R9YHJc:,3/KUM7Z/wrzEXb/TxCJfd/WVDyKe//Vj9hpd:,/tafPrf/dtl0hd/lLQWFe/Il1M4b/eHDfl/FONEdf:4/JiVLjd:5/FAUdW:6/Z1

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:25 UTC	3930	OUT	GET /xjs/_/js/k=xjs.hd.en.AP2X0CdZJ3U.O/ck=xjs.hd.O5pTwBf7VYU.L.B1.O/am=AKYAAAAAAAAAAwAAAAAAAAAAAAAAAABAAAAgAAAAAAAgBdBPDgAoAGwIAAAAIABAAIAAIQBAKAAABMAJAERAAQBIAAiAUBCAR5kAQASQCRAAAhQBJAAKBDlAAABABDAYBkAqABgCAAAAAggAAAAYwI0BBAgAABEAAXgAAQAE6AABMAAKIEBQIAMYCAAABAAAACAPAIIDYJCCAAAAAAAAAAAAAAAAApAgmAsJKAggAAAAAAAAAAAAAAAAgJR0YmED/d=1/exm=SNUn3,cEt90b,cdos,csi,d,dtl0hd,eHDfl,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/ed=1/dg=0/br=1/ujg=1/rs=ACT90oFcgoeZ7ZqF5H0rbchPAIXc5e0Tgw/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IZrNqe:P8ha2c;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwH [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hzf6TaakyDx9JJ1ZtAzOF0gNjnJI4nOvQe9sGbxkH4reiItCIvfxA; NID=515=ftd9T__MfWwhRmmTj22LXh81vv2K0dOQjlz7a5xdnnubGe9xh97ZXss8lNU-CKVYEwoF3oD-eIQm_SXSypIsnk4lgMlaL8ZAxOG_cCYG94IXwGmY8-Ted0toiN0RW0QBOEoR-vRGfGe_gYLvwvWzjmJxajjFMHVo-EXCYWDIZmg
2024-07-03 21:50:26 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 500390 Date: Wed, 03 Jul 2024 21:50:26 GMT Expires: Thu, 03 Jul 2025 21:50:26 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 04:11:02 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-03 21:50:26 UTC	572	IN	Data Raw: 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 2e 6a 62 42 49 74 66 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 44 55 30 4e 4a 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 6c 50 33 4a 6f 66 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6e 4e 4d 75 4f 64 7b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 6f 74 61 74 65 20 31 35 36 38 2e 32 33 35 32 39 34 31 31 37 36 6d 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 6c 69 2d 63 6f 6e 74 61 69 6e 65 72 2d Data Ascii: _F_installCss(".jbBItf{display:block;position:relative}.DU0NJ{bottom:0;left:0;position:absolute;right:0;top:0}.lP3Jof{display:inline-block;position:relative}.nNMuOd{animation:qli-container-rotate 1568.2352941176ms linear infinite}@keyframes qli-container-
2024-07-03 21:50:26 UTC	1390	IN	Data Raw: 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 2c 71 6c 69 2d 72 65 64 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 7d 2e 6e 4e 4d 75 4f 64 20 2e 73 6d 6f 63 73 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 66 69 6c 6c 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 2c 71 6c 69 2d 79 65 6c 6c 6f 77 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 Data Ascii: -unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-red-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.nNMuOd .smocse{animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-yellow-fade-in-out 5332ms
2024-07-03 21:50:26 UTC	1390	IN	Data Raw: 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 35 30 25 7d 2e 46 63 58 66 69 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 34 35 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 25 7d 2e 53 50 4b 46 6d 63 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 3a 33 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 40 6d 65 64 69 61 20 28 66 6f 72 63 65 64 2d 63 6f 6c 6f 72 73 3a 61 63 74 69 76 65 29 2c 28 70 72 65 66 65 72 73 2d 63 6f 6e 74 72 61 73 74 3a 6d 6f 72 65 29 7b Data Ascii: tion:relative;width:50%}.FcXfi{box-sizing:border-box;height:100%;left:45%;overflow:hidden;position:absolute;top:0;width:10%}.SPKFmc{border-radius:50%;border:3px solid transparent;box-sizing:border-box}@media (forced-colors:active),(prefers-contrast:more){
2024-07-03 21:50:26 UTC	1390	IN	Data Raw: 72 6f 74 61 74 65 28 31 33 30 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 33 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 6c 69 2d 72 69 67 68 74 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 7d 7d 63 2d 77 69 7a 7b 63 6f 6e 74 61 69 6e 3a 73 74 79 6c 65 7d 63 2d 77 69 7a 3e 63 2d 64 61 74 61 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 72 45 54 53 44 7b 63 6f 6e 74 61 69 6e 3a 6e Data Ascii: rotate(130deg)}50%{transform:rotate(-5deg)}100%{transform:rotate(130deg)}}@keyframes qli-right-spin{0%{transform:rotate(-130deg)}50%{transform:rotate(5deg)}100%{transform:rotate(-130deg)}}c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.rETSD{contain:n
2024-07-03 21:50:26 UTC	1390	IN	Data Raw: 30 25 7d 2e 5a 65 56 42 74 63 7b 63 6f 6c 6f 72 3a 72 67 62 28 39 35 2c 39 39 2c 31 30 34 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 47 6f 6f 67 6c 65 20 53 61 6e 73 5c 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 61 6c 54 42 51 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 32 2c 32 33 32 2c 32 33 30 29 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 38 70 78 3b 6a 75 73 74 69 66 79 Data Ascii: 0%}.ZeVBtc{color:rgb(95,99,104);font-family:\"Google Sans\",Roboto,Arial,sans-serif;font-size:16px;line-height:25px;max-width:300px}.alTBQe{align-items:center;background-color:rgb(252,232,230);border-top-left-radius:8px;border-top-right-radius:8px;justify
2024-07-03 21:50:26 UTC	1390	IN	Data Raw: 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 50 58 54 36 63 64 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 34 70 78 7d 2e 63 42 39 4d 37 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 28 32 31 38 2c 32 32 30 2c 32 32 34 29 3b 63 6f 6c 6f 72 3a 72 67 62 28 36 30 2c 36 34 2c 36 37 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 36 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 66 61 Data Ascii: ,sans-serif;font-size:14px;margin-left:20px;margin-right:20px}.PXT6cd{display:flex;margin-top:14px}.cB9M7{background-color:#fff;border:1px solid rgb(218,220,224);color:rgb(60,64,67);border-radius:36px;display:inline-flex;flex-grow:1;font-size:14px;font-fa
2024-07-03 21:50:26 UTC	1390	IN	Data Raw: 74 72 79 7b 0a 5f 2e 79 28 22 42 32 71 6c 50 65 22 29 3b 0a 76 61 72 20 75 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 6f 66 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4f 61 29 7d 3b 5f 2e 41 28 75 74 62 2c 5f 2e 6f 66 29 3b 75 74 62 2e 49 61 3d 5f 2e 6f 66 2e 49 61 3b 75 74 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 5f 2e 24 64 28 22 73 22 2c 5f 2e 24 45 61 29 2c 62 3d 5f 2e 4e 61 28 61 29 2c 63 3d 62 2e 6e 65 78 74 28 29 3b 21 63 2e 64 6f 6e 65 3b 63 3d 62 2e 6e 65 78 74 28 29 29 63 3d 63 2e 76 61 6c 75 65 2c 63 2e 6b 65 79 2e 69 6e 63 6c 75 64 65 73 28 22 54 77 64 49 46 43 22 29 26 26 21 63 2e 6b 65 79 2e 69 6e 63 6c 75 64 65 73 28 28 30 2c 5f 2e 6d 6d 2e 66 42 29 28 29 29 26 26 61 2e Data Ascii: try{_.y("B2qlPe");var utb=function(a){_.of.call(this,a.Oa)};_.A(utb,_.of);utb.Ia=_.of.Ia;utb.prototype.tf=function(){for(var a=_.$d("s",_.$Ea),b=_.Na(a),c=b.next();!c.done;c=b.next())c=c.value,c.key.includes("TwdIFC")&&!c.key.includes((0,_.mm.fB)())&&a.
2024-07-03 21:50:26 UTC	1390	IN	Data Raw: 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 61 26 26 74 68 69 73 2e 6f 61 26 26 74 68 69 73 2e 59 61 2e 70 75 73 68 28 74 68 69 73 2e 6f 61 2e 6c 69 73 74 65 6e 28 61 2c 62 2c 63 2c 64 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 64 2c 65 29 29 7d 3b 5f 2e 41 58 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 6f 61 26 26 61 2e 77 62 2e 70 75 73 68 28 7a 58 62 28 62 2c 63 29 29 7d 3b 5f 2e 42 58 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 65 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 65 3b 69 66 28 61 2e 51 61 5b 64 5d 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 28 65 3d 61 2e 51 61 5b 64 5d 29 26 26 5f 2e 62 61 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 61 2e 51 61 5b 64 5d 3d 7a 58 Data Ascii: tener=function(a,b,c,d,e){a&&this.oa&&this.Ya.push(this.oa.listen(a,b,c,d===void 0?!1:d,e))};_.AXb=function(a,b,c){a.oa&&a.wb.push(zXb(b,c))};_.BXb=function(a,b,c,d,e){e=e===void 0?!1:e;if(a.Qa[d]){if(!e)return;(e=a.Qa[d])&&_.ba.clearTimeout(e)}a.Qa[d]=zX
2024-07-03 21:50:26 UTC	1390	IN	Data Raw: 2c 65 3d 6e 75 6c 6c 3b 63 2e 68 61 6e 64 6c 65 72 26 26 28 65 3d 63 2e 68 61 6e 64 6c 65 72 29 3b 64 2e 63 61 6c 6c 28 65 2c 6e 65 77 20 5f 2e 4b 6b 28 62 29 29 7d 29 7d 3b 5f 2e 47 58 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 77 69 74 63 68 28 5f 2e 71 64 28 29 2e 67 65 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 28 29 29 7b 63 61 73 65 20 22 75 6e 6c 6f 61 64 65 64 22 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 75 6e 6c 6f 61 64 26 26 48 58 62 28 74 68 69 73 2c 22 61 74 74 6e 2d 69 76 69 73 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 68 69 64 64 65 6e 22 3a 48 58 62 28 74 68 69 73 2c 22 61 74 74 6e 2d 69 76 69 73 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 76 69 73 69 62 6c 65 22 3a 48 58 62 28 74 68 69 73 2c Data Ascii: ,e=null;c.handler&&(e=c.handler);d.call(e,new _.Kk(b))})};_.GXb.prototype.Da=function(){switch(_.qd().getVisibilityState()){case "unloaded":this.options.unload&&HXb(this,"attn-ivis");break;case "hidden":HXb(this,"attn-ivis");break;case "visible":HXb(this,
2024-07-03 21:50:26 UTC	1390	IN	Data Raw: 61 29 7b 76 61 72 20 62 3d 5f 2e 67 6d 28 5f 2e 56 63 28 22 53 30 36 47 72 62 22 29 2c 22 22 29 3f 22 6c 22 3a 22 73 22 3b 72 65 74 75 72 6e 20 5f 2e 24 64 28 62 2c 61 2e 77 61 29 7d 3b 76 61 72 20 4a 58 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 73 78 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 7d 3b 5f 2e 41 28 4a 58 62 2c 5f 2e 73 78 29 3b 4a 58 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 4b 58 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 79 3d 74 68 69 73 2e 78 3d 74 68 69 73 2e 6b 61 3d 30 7d 3b 5f 2e 74 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 65 76 65 6e 74 54 79 70 65 3d 22 22 3b 74 68 69 73 2e 6b 61 3d 30 7d 3b 5f 2e 74 78 2e 70 72 6f 74 6f 74 79 70 65 2e 44 61 3d 66 75 6e Data Ascii: a){var b=_.gm(_.Vc("S06Grb"),"")?"l":"s";return _.$d(b,a.wa)};var JXb=function(a){_.sx.call(this,a)};_.A(JXb,_.sx);JXb.prototype.ka=function(){};var KXb=function(){this.y=this.x=this.ka=0};_.tx=function(){this.eventType="";this.ka=0};_.tx.prototype.Da=fun

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:26 UTC	1338	OUT	GET /client_204?atyp=i&biw=1280&bih=907&ei=nceFZp_nKtXni-gPtb-MyAw&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hzf6TaakyDx9JJ1ZtAzOF0gNjnJI4nOvQe9sGbxkH4reiItCIvfxA; NID=515=ftd9T__MfWwhRmmTj22LXh81vv2K0dOQjlz7a5xdnnubGe9xh97ZXss8lNU-CKVYEwoF3oD-eIQm_SXSypIsnk4lgMlaL8ZAxOG_cCYG94IXwGmY8-Ted0toiN0RW0QBOEoR-vRGfGe_gYLvwvWzjmJxajjFMHVo-EXCYWDIZmg
2024-07-03 21:50:26 UTC	758	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-h3laXu2aB8wVm_OH8XwJ7g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Wed, 03 Jul 2024 21:50:26 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-07-03 21:50:26 UTC	1479	OUT	POST /gen_204?s=webhp&t=aft&atyp=csi&ei=nceFZp_nKtXni-gPtb-MyAw&rt=wsrt.2839,aft.2382,afti.2277,cbt.381,hst.380,prt.2382&imn=11&ima=2&imad=0&imac=0&wh=907&aftie=NF&aft=1&aftp=-1&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6Hzf6TaakyDx9JJ1ZtAzOF0gNjnJI4nOvQe9sGbxkH4reiItCIvfxA; NID=515=ftd9T__MfWwhRmmTj22LXh81vv2K0dOQjlz7a5xdnnubGe9xh97ZXss8lNU-CKVYEwoF3oD-eIQm_SXSypIsnk4lgMlaL8ZAxOG_cCYG94IXwGmY8-Ted0toiN0RW0QBOEoR-vRGfGe_gYLvwvWzjmJxajjFMHVo-EXCYWDIZmg
2024-07-03 21:50:26 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-pwRd5UPluxCBTZ3ea1i2aw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Wed, 03 Jul 2024 21:50:26 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close