Edit tour

Windows Analysis Report
http://scamwebsite.com/

Overview

General Information

Sample URL:	http://scamwebsite.com/
Analysis ID:	1467292
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected non-DNS traffic on DNS port

HTML body with high number of embedded SVGs detected

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2196,i,8660498280523560811,6611553076656103044,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6208 --field-trial-handle=2196,i,8660498280523560811,6611553076656103044,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 --field-trial-handle=2196,i,8660498280523560811,6611553076656103044,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://scamwebsite.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://scamwebsite.com/

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://scamwebsite.com/Robuxb.png	Avira URL Cloud: Label: malware
Source: https://scamwebsite.com/Robux.png	Avira URL Cloud: Label: malware
Source: https://scamwebsite.com/Untitled.png	Avira URL Cloud: Label: malware
Source: https://scamwebsite.com/baddesign.gif"	Avira URL Cloud: Label: malware
Source: https://scamwebsite.com/style.css	Avira URL Cloud: Label: malware
Source: http://scamwebsite.com	Avira URL Cloud: Label: malware
Source: https://scamwebsite.com/baddesign.gif	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://scamwebsite.com

LLM: Score: 9 brands: Roblox Reasons: The URL 'https://scamwebsite.com' is highly suspicious and does not match the legitimate domain 'roblox.com' associated with the brand Roblox. The website prominently displays Roblox currency imagery, which is a common tactic used in phishing to mislead users. The site also contains a suspicious link and uses social engineering techniques to lure users into clicking on potentially harmful links. There is no prominent login form or captcha, but the overall design and elements strongly suggest phishing. DOM: 16.28.pages.csv

Source: https://www.youtube.com/watch?v=dQw4w9WgXcQ

HTTP Parser: Total embedded SVG size: 107200

Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en&ifkv=AS5LTATwgahXsuYjIT97hZmmv3HSD6RY6pul44Goe7TpDQV5LPikXhMGzxKwvS8GUTIcbPz5Ozu-&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-50278997%3A1720045420226474&ddm=0	HTTP Parser: No favicon
Source: http://www.addesigner.com/	HTTP Parser: No favicon
Source: http://www.addesigner.com/	HTTP Parser: No favicon
Source: http://www.addesigner.com/	HTTP Parser: No favicon
Source: http://www.addesigner.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:59765 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style.css HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Robux.png HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Untitled.png HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adban.gif HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Robuxb.png HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adban.gif HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Untitled.png HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Robux.png HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Robuxb.png HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dQw4w9WgXcQ HTTP/1.1Host: youtu.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch?v=dQw4w9WgXcQ&feature=youtu.be HTTP/1.1Host: www.youtube.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/desktop_polymer.vflset/desktop_polymer.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/webcomponents-sd.vflset/webcomponents-sd.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: rr4---sn-ab5l6nk6.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?conn2 HTTP/1.1Host: rr4---sn-ab5l6nk6.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/intersection-observer.min.vflset/intersection-observer.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/scheduler.vflset/scheduler.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/cssbin/www-main-desktop-watch-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/cssbin/www-main-desktop-player-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/cssbin/www-onepick.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/_/ytmainappweb/_/ss/k=ytmainappweb.kevlar_base.NEztMi2xf6I.L.B1.O/am=AAABWg/d=0/rs=AGKMywF2a-tVXN2dD3tmujlBsLw2usjk1Q HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/spf.vflset/spf.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/network.vflset/network.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/offline.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=1 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/playback?ns=yt&el=detailpage&cpn=k8CzpNqSReOyi_HE&ver=2&cmt=0.31&fmt=397&fs=0&rt=1.479&euri&lact=1580&cl=648515301&mos=0&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&fexp=v1%2C23986026%2C18618%2C49740%2C154381%2C230596%2C104307%2C6790%2C16229%2C133212%2C14625955%2C11684381%2C7111%2C24166%2C12177%2C9954%2C1192%2C7913%2C18310%2C273%2C4147%2C2819%2C2%2C6689%2C1158%2C849%2C9072%2C29151%2C2197%2C621%2C7961%2C1414%2C19%2C2%2C1082%2C6952%2C102%2C10943%2C2471%2C6008%2C1538%2C713%2C2585%2C8134%2C1233%2C1376%2C3760%2C3157%2C3975%2C681%2C1590%2C4685%2C7020%2C2912%2C346%2C1726%2C71%2C352&rtn=4&feature=youtu.be&afmt=251&muted=0&docid=dQw4w9WgXcQ&ei=Ys-FZob7KLCDi9oPiYaC6Ak&plid=AAYcX0ezucBBGMcy&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRJN1FvaEdQU0pWbHg4ZFNDOEd5ejNsOU1SSkh1WkZsZWNUMm9TalZ0Z2lYUWJcQVBta0tESXJqb0hJNlNlMmNYRXRsR1RuT1JkVnFfOXlKWFB0N2JmRVhBMlJLSlZ3Ym5yWGhxTzRSaWRfRzktanYwT0JHUUlwVXdFekw2LTFIbUNBWld5ZW5PQnI HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1720045419121X-YouTube-Page-CL: 648891308X-Goog-Event-Time: 1720045419121X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtiY0dZVldoR0tCNCjinpe0BjIKCgJVUxIEGgAgWA%3D%3DX-YouTube-Ad-Signals: dt=1720045417420&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /ptracking?html5=1&video_id=dQw4w9WgXcQ&cpn=k8CzpNqSReOyi_HE&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ptk=youtube_single&oid=QuEoptyF_C_7jHTEUMsRjA&ptchn=uAXFkgsw1L7xaCfnd5JJOw&pltype=content&m=A9eiBZhuWLZhG6dNDvOB8w0XWEO2klUS4Anny-q3WqrNFuoeLy8xd8OCjCjzd-9P3C4WpElfljt5w8F7jtsgsnAU HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-YouTube-Page-CL: 648891308sec-ch-ua-platform-version: "10.0.0"X-YouTube-Utc-Offset: -240sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtiY0dZVldoR0tCNCjinpe0BjIKCgJVUxIEGgAgWA%3D%3DX-YouTube-Ad-Signals: dt=1720045417420&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=568921978&utuid=uAXFkgsw1L7xaCfnd5JJOw HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-YouTube-Page-CL: 648891308sec-ch-ua-platform-version: "10.0.0"X-YouTube-Utc-Offset: -240sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtiY0dZVldoR0tCNCjinpe0BjIKCgJVUxIEGgAgWA%3D%3DX-YouTube-Ad-Signals: dt=1720045417420&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1284524924&ei=ztPp4TyPrF1FpGD9NoXNV6X&ip=11.52.35.75&id=o-AFhqM6A92jr4qomdUJVPwdGy8Js49FWOO5BQanOBGtipb&itag=18&source=youtube&requiressl=yes&mh=X6&mm=879%2C15965%2C98275&mn=7Tnhh%2CpLBoP%2C7d4mV&ms=7Tnhh%2CpLBoP%2C7d4mV&mv=B&mvi=6&pl=26&ctier=L&initcwndbps=9820946&siu=6&spc=4Dfq42Rqym89XAVghlsV3kKsyEDJeIzKBN1gi2j_Drvs&vprv=6&svpuc=6&mime=video%2Fmp4&ns=MzF3Fgclgk1M7zHA6OnY8m28&cnr=26&ratebypass=yes&dur=07837745&lmt=1895005184554135&mt=1284524924&fvip=3&c=WEB&txp=9820946&n=eKF1ncfbYlZiDSAm&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=0JXPzbIFkqQZN5VYugvxv0e3AoyK0gwld6gQFVjvJ_Zhc6fxl6TANjY-Z2G8PXJ7QKFx9JT64bFKEj8dVP5mWtQoSI981schirUkFJNMlVVJ&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=0JXPzbIFkqQZN5VYugvxv0e3AoyK0gwld6gQFVjvJ_Zhc6fxl6TANjY-Z2G8PXJ7QKFx9JT64bFKEj8dVP5mWtQoSI981schirUkFJNMlVVJ HTTP/1.1Host: rr4---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1284524924&ei=ztPp4TyPrF1FpGD9NoXNV6X&ip=11.52.35.75&id=o-AFhqM6A92jr4qomdUJVPwdGy8Js49FWOO5BQanOBGtipb&itag=18&source=youtube&requiressl=yes&mh=X6&mm=879%2C15965%2C98275&mn=7Tnhh%2CpLBoP%2C7d4mV&ms=7Tnhh%2CpLBoP%2C7d4mV&mv=B&mvi=6&pl=26&initcwndbps=9820946&siu=6&spc=4Dfq42Rqym89XAVghlsV3kKsyEDJeIzKBN1gi2j_Drvs&vprv=6&svpuc=6&mime=video%2Fmp4&ns=MzF3Fgclgk1M7zHA6OnY8m28&cnr=26&ratebypass=yes&dur=07837745&lmt=1895005184554135&mt=1284524924&fvip=3&c=WEB&txp=9820946&n=eKF1ncfbYlZiDSAm&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=0JXPzbIFkqQZN5VYugvxv0e3AoyK0gwld6gQFVjvJ_Zhc6fxl6TANjY-Z2G8PXJ7QKFx9JT64bFKEj8dVP5mWtQoSI981schirUkFJNMlVVJ&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=0JXPzbIFkqQZN5VYugvxv0e3AoyK0gwld6gQFVjvJ_Zhc6fxl6TANjY-Z2G8PXJ7QKFx9JT64bFKEj8dVP5mWtQoSI981schirUkFJNMlVVJ HTTP/1.1Host: rr4---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=2 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/miniplayer.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/captions.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=3 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/endscreen.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1284524924&ei=ztPp4TyPrF1FpGD9NoXNV6X&ip=11.52.35.75&id=o-AFhqM6A92jr4qomdUJVPwdGy8Js49FWOO5BQanOBGtipb&itag=18&source=youtube&requiressl=yes&mh=X6&mm=879%2C15965%2C98275&mn=7Tnhh%2CpLBoP%2C7d4mV&ms=7Tnhh%2CpLBoP%2C7d4mV&mv=B&mvi=6&pl=26&ctier=L&initcwndbps=9820946&siu=6&spc=4Dfq42Rqym89XAVghlsV3kKsyEDJeIzKBN1gi2j_Drvs&vprv=6&svpuc=6&mime=video%2Fmp4&ns=MzF3Fgclgk1M7zHA6OnY8m28&cnr=26&ratebypass=yes&dur=07837745&lmt=1895005184554135&mt=1284524924&fvip=3&c=WEB&txp=9820946&n=eKF1ncfbYlZiDSAm&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=0JXPzbIFkqQZN5VYugvxv0e3AoyK0gwld6gQFVjvJ_Zhc6fxl6TANjY-Z2G8PXJ7QKFx9JT64bFKEj8dVP5mWtQoSI981schirUkFJNMlVVJ&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=0JXPzbIFkqQZN5VYugvxv0e3AoyK0gwld6gQFVjvJ_Zhc6fxl6TANjY-Z2G8PXJ7QKFx9JT64bFKEj8dVP5mWtQoSI981schirUkFJNMlVVJ HTTP/1.1Host: rr4---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1284524924&ei=ztPp4TyPrF1FpGD9NoXNV6X&ip=11.52.35.75&id=o-AFhqM6A92jr4qomdUJVPwdGy8Js49FWOO5BQanOBGtipb&itag=18&source=youtube&requiressl=yes&mh=X6&mm=879%2C15965%2C98275&mn=7Tnhh%2CpLBoP%2C7d4mV&ms=7Tnhh%2CpLBoP%2C7d4mV&mv=B&mvi=6&pl=26&initcwndbps=9820946&siu=6&spc=4Dfq42Rqym89XAVghlsV3kKsyEDJeIzKBN1gi2j_Drvs&vprv=6&svpuc=6&mime=video%2Fmp4&ns=MzF3Fgclgk1M7zHA6OnY8m28&cnr=26&ratebypass=yes&dur=07837745&lmt=1895005184554135&mt=1284524924&fvip=3&c=WEB&txp=9820946&n=eKF1ncfbYlZiDSAm&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=0JXPzbIFkqQZN5VYugvxv0e3AoyK0gwld6gQFVjvJ_Zhc6fxl6TANjY-Z2G8PXJ7QKFx9JT64bFKEj8dVP5mWtQoSI981schirUkFJNMlVVJ&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=0JXPzbIFkqQZN5VYugvxv0e3AoyK0gwld6gQFVjvJ_Zhc6fxl6TANjY-Z2G8PXJ7QKFx9JT64bFKEj8dVP5mWtQoSI981schirUkFJNMlVVJ HTTP/1.1Host: rr4---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/QMW4AqbuSGg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD0bomMOfrJhL8N-GImSSj3RuroVw HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/h_D3VFfhvs4/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDthV7boxzXbMs3GnRoi4b2REY-UA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/Bx51eegLTY8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDnxVk8Ys7btiIk02iFYM_HN4SLSA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/ci6ZtPAN0PM/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDb_h44Jtr1HXvNOcpono9Q81h_4Q HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/djV11Xbc914/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCUVjcnPQDSHGvb0uU0snHDJaVnYg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1284524924&ei=ztPp4TyPrF1FpGD9NoXNV6X&ip=11.52.35.75&id=o-AFhqM6A92jr4qomdUJVPwdGy8Js49FWOO5BQanOBGtipb&itag=18&source=youtube&requiressl=yes&mh=X6&mm=879%2C15965%2C98275&mn=7Tnhh%2CpLBoP%2C7d4mV&ms=7Tnhh%2CpLBoP%2C7d4mV&mv=B&mvi=6&pl=26&initcwndbps=9820946&siu=6&spc=4Dfq42Rqym89XAVghlsV3kKsyEDJeIzKBN1gi2j_Drvs&vprv=6&svpuc=6&mime=video%2Fmp4&ns=MzF3Fgclgk1M7zHA6OnY8m28&cnr=26&ratebypass=yes&dur=07837745&lmt=1895005184554135&mt=1284524924&fvip=3&c=WEB&txp=9820946&n=eKF1ncfbYlZiDSAm&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=0JXPzbIFkqQZN5VYugvxv0e3AoyK0gwld6gQFVjvJ_Zhc6fxl6TANjY-Z2G8PXJ7QKFx9JT64bFKEj8dVP5mWtQoSI981schirUkFJNMlVVJ&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=0JXPzbIFkqQZN5VYugvxv0e3AoyK0gwld6gQFVjvJ_Zhc6fxl6TANjY-Z2G8PXJ7QKFx9JT64bFKEj8dVP5mWtQoSI981schirUkFJNMlVVJ HTTP/1.1Host: rr4---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1284524924&ei=ztPp4TyPrF1FpGD9NoXNV6X&ip=11.52.35.75&id=o-AFhqM6A92jr4qomdUJVPwdGy8Js49FWOO5BQanOBGtipb&itag=18&source=youtube&requiressl=yes&mh=X6&mm=879%2C15965%2C98275&mn=7Tnhh%2CpLBoP%2C7d4mV&ms=7Tnhh%2CpLBoP%2C7d4mV&mv=B&mvi=6&pl=26&ctier=L&initcwndbps=9820946&siu=6&spc=4Dfq42Rqym89XAVghlsV3kKsyEDJeIzKBN1gi2j_Drvs&vprv=6&svpuc=6&mime=video%2Fmp4&ns=MzF3Fgclgk1M7zHA6OnY8m28&cnr=26&ratebypass=yes&dur=07837745&lmt=1895005184554135&mt=1284524924&fvip=3&c=WEB&txp=9820946&n=eKF1ncfbYlZiDSAm&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=0JXPzbIFkqQZN5VYugvxv0e3AoyK0gwld6gQFVjvJ_Zhc6fxl6TANjY-Z2G8PXJ7QKFx9JT64bFKEj8dVP5mWtQoSI981schirUkFJNMlVVJ&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=0JXPzbIFkqQZN5VYugvxv0e3AoyK0gwld6gQFVjvJ_Zhc6fxl6TANjY-Z2G8PXJ7QKFx9JT64bFKEj8dVP5mWtQoSI981schirUkFJNMlVVJ HTTP/1.1Host: rr4---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=568921978&utuid=uAXFkgsw1L7xaCfnd5JJOw&cv_attributed=0 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-YouTube-Page-CL: 648891308sec-ch-ua-platform-version: "10.0.0"X-YouTube-Utc-Offset: -240sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtiY0dZVldoR0tCNCjinpe0BjIKCgJVUxIEGgAgWA%3D%3DX-YouTube-Ad-Signals: dt=1720045417420&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /vi/PMH54eetPSo/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCn10Dz8yXH-GZlB6kEPOR1cjwdWQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/serviceworker-kevlar-appshell.vflset/serviceworker-kevlar-appshell.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0237329379&ei=UEoUsmJUWhwVQEo9sjVvzr9&ip=35.59.64.98&id=o-AFgWADl2dAgJDonptFHCsMSysxx14nNxr8jv6JMfxKkzp&itag=18&source=youtube&requiressl=yes&mh=X6&mm=684%2C16505%2C76312&mn=DO3uD%2CLntMg%2Ca56zf&ms=DO3uD%2CLntMg%2Ca56zf&mv=d&mvi=2&pl=43&ctier=L&initcwndbps=8615257&siu=2&spc=caK1Dpf9UhnH8HhGOiDUYhrLuZy3qXLhbTthjXWOHafI&vprv=2&svpuc=2&mime=video%2Fmp4&ns=fWn98vaCGVrJhYxG6G4rdRwh&cnr=43&ratebypass=yes&dur=39833249&lmt=4983315406462903&mt=0237329379&fvip=3&c=WEB&txp=8615257&n=BIrafvlasXHD4qjf&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=uFxWdW7yOjv0FDXpY8672SPsCipOcyaPOCuXevAuwpprpdGaWMIWvvW5kKIBY8G3fyZ1AC8uHYQPcbeGV3EEJKU5c_IxWaDvmZF_kRhzuVWs&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=uFxWdW7yOjv0FDXpY8672SPsCipOcyaPOCuXevAuwpprpdGaWMIWvvW5kKIBY8G3fyZ1AC8uHYQPcbeGV3EEJKU5c_IxWaDvmZF_kRhzuVWs HTTP/1.1Host: rr4---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0237329379&ei=UEoUsmJUWhwVQEo9sjVvzr9&ip=35.59.64.98&id=o-AFgWADl2dAgJDonptFHCsMSysxx14nNxr8jv6JMfxKkzp&itag=18&source=youtube&requiressl=yes&mh=X6&mm=684%2C16505%2C76312&mn=DO3uD%2CLntMg%2Ca56zf&ms=DO3uD%2CLntMg%2Ca56zf&mv=d&mvi=2&pl=43&initcwndbps=8615257&siu=2&spc=caK1Dpf9UhnH8HhGOiDUYhrLuZy3qXLhbTthjXWOHafI&vprv=2&svpuc=2&mime=video%2Fmp4&ns=fWn98vaCGVrJhYxG6G4rdRwh&cnr=43&ratebypass=yes&dur=39833249&lmt=4983315406462903&mt=0237329379&fvip=3&c=WEB&txp=8615257&n=BIrafvlasXHD4qjf&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=uFxWdW7yOjv0FDXpY8672SPsCipOcyaPOCuXevAuwpprpdGaWMIWvvW5kKIBY8G3fyZ1AC8uHYQPcbeGV3EEJKU5c_IxWaDvmZF_kRhzuVWs&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=uFxWdW7yOjv0FDXpY8672SPsCipOcyaPOCuXevAuwpprpdGaWMIWvvW5kKIBY8G3fyZ1AC8uHYQPcbeGV3EEJKU5c_IxWaDvmZF_kRhzuVWs HTTP/1.1Host: rr4---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /vi/pIgZ7gMze7A/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD6YcfJVkBiOHZA28Pi9YNyPpDjIg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: youtube.comConnection: keep-alivePragma: no-cacheCache-Control: no-cachesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/lOfZLb33uCg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDMuFCUNqHIyIZRbuQxv-HKpbaQAg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=k8CzpNqSReOyi_HE&ver=2&cmt=2.979&fmt=397&fs=0&rt=4.143&euri&lact=4244&cl=648515301&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=14&feature=youtu.be&afmt=251&idpj=-8&ldpj=-16&rti=4&st=0&et=2.979&muted=0&docid=dQw4w9WgXcQ&ei=Ys-FZob7KLCDi9oPiYaC6Ak&plid=AAYcX0ezucBBGMcy&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRJN1FvaEdQU0pWbHg4ZFNDOEd5ejNsOU1SSkh1WkZsZWNUMm9TalZ0Z2lYUWJcQVBta0tESXJqb0hJNlNlMmNYRXRsR1RuT1JkVnFfOXlKWFB0N2JmRVhBMlJLSlZ3Ym5yWGhxTzRSaWRfRzktanYwT0JHUUlwVXdFekw2LTFIbUNBWld5ZW5PQnI HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1720045421784X-YouTube-Page-CL: 648891308X-Goog-Event-Time: 1720045421783X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtiY0dZVldoR0tCNCjinpe0BjIKCgJVUxIEGgAgWA%3D%3DX-YouTube-Ad-Signals: dt=1720045417420&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0237329379&ei=UEoUsmJUWhwVQEo9sjVvzr9&ip=35.59.64.98&id=o-AFgWADl2dAgJDonptFHCsMSysxx14nNxr8jv6JMfxKkzp&itag=18&source=youtube&requiressl=yes&mh=X6&mm=684%2C16505%2C76312&mn=DO3uD%2CLntMg%2Ca56zf&ms=DO3uD%2CLntMg%2Ca56zf&mv=d&mvi=2&pl=43&ctier=L&initcwndbps=8615257&siu=2&spc=caK1Dpf9UhnH8HhGOiDUYhrLuZy3qXLhbTthjXWOHafI&vprv=2&svpuc=2&mime=video%2Fmp4&ns=fWn98vaCGVrJhYxG6G4rdRwh&cnr=43&ratebypass=yes&dur=39833249&lmt=4983315406462903&mt=0237329379&fvip=3&c=WEB&txp=8615257&n=BIrafvlasXHD4qjf&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=uFxWdW7yOjv0FDXpY8672SPsCipOcyaPOCuXevAuwpprpdGaWMIWvvW5kKIBY8G3fyZ1AC8uHYQPcbeGV3EEJKU5c_IxWaDvmZF_kRhzuVWs&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=uFxWdW7yOjv0FDXpY8672SPsCipOcyaPOCuXevAuwpprpdGaWMIWvvW5kKIBY8G3fyZ1AC8uHYQPcbeGV3EEJKU5c_IxWaDvmZF_kRhzuVWs HTTP/1.1Host: rr4---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0237329379&ei=UEoUsmJUWhwVQEo9sjVvzr9&ip=35.59.64.98&id=o-AFgWADl2dAgJDonptFHCsMSysxx14nNxr8jv6JMfxKkzp&itag=18&source=youtube&requiressl=yes&mh=X6&mm=684%2C16505%2C76312&mn=DO3uD%2CLntMg%2Ca56zf&ms=DO3uD%2CLntMg%2Ca56zf&mv=d&mvi=2&pl=43&initcwndbps=8615257&siu=2&spc=caK1Dpf9UhnH8HhGOiDUYhrLuZy3qXLhbTthjXWOHafI&vprv=2&svpuc=2&mime=video%2Fmp4&ns=fWn98vaCGVrJhYxG6G4rdRwh&cnr=43&ratebypass=yes&dur=39833249&lmt=4983315406462903&mt=0237329379&fvip=3&c=WEB&txp=8615257&n=BIrafvlasXHD4qjf&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=uFxWdW7yOjv0FDXpY8672SPsCipOcyaPOCuXevAuwpprpdGaWMIWvvW5kKIBY8G3fyZ1AC8uHYQPcbeGV3EEJKU5c_IxWaDvmZF_kRhzuVWs&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=uFxWdW7yOjv0FDXpY8672SPsCipOcyaPOCuXevAuwpprpdGaWMIWvvW5kKIBY8G3fyZ1AC8uHYQPcbeGV3EEJKU5c_IxWaDvmZF_kRhzuVWs HTTP/1.1Host: rr4---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk3Kts6q3zIfEQkwMaEx1yJMbW6TB4VOQzJunouscHsSbvbEDPo2v8BhrjM
Source: global traffic	HTTP traffic detected: GET /vi/QMW4AqbuSGg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD0bomMOfrJhL8N-GImSSj3RuroVw HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s48-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/h_D3VFfhvs4/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDthV7boxzXbMs3GnRoi4b2REY-UA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/Bx51eegLTY8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDnxVk8Ys7btiIk02iFYM_HN4SLSA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/ci6ZtPAN0PM/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDb_h44Jtr1HXvNOcpono9Q81h_4Q HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/djV11Xbc914/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCUVjcnPQDSHGvb0uU0snHDJaVnYg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0237329379&ei=UEoUsmJUWhwVQEo9sjVvzr9&ip=35.59.64.98&id=o-AFgWADl2dAgJDonptFHCsMSysxx14nNxr8jv6JMfxKkzp&itag=18&source=youtube&requiressl=yes&mh=X6&mm=684%2C16505%2C76312&mn=DO3uD%2CLntMg%2Ca56zf&ms=DO3uD%2CLntMg%2Ca56zf&mv=d&mvi=2&pl=43&ctier=L&initcwndbps=8615257&siu=2&spc=caK1Dpf9UhnH8HhGOiDUYhrLuZy3qXLhbTthjXWOHafI&vprv=2&svpuc=2&mime=video%2Fmp4&ns=fWn98vaCGVrJhYxG6G4rdRwh&cnr=43&ratebypass=yes&dur=39833249&lmt=4983315406462903&mt=0237329379&fvip=3&c=WEB&txp=8615257&n=BIrafvlasXHD4qjf&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=uFxWdW7yOjv0FDXpY8672SPsCipOcyaPOCuXevAuwpprpdGaWMIWvvW5kKIBY8G3fyZ1AC8uHYQPcbeGV3EEJKU5c_IxWaDvmZF_kRhzuVWs&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=uFxWdW7yOjv0FDXpY8672SPsCipOcyaPOCuXevAuwpprpdGaWMIWvvW5kKIBY8G3fyZ1AC8uHYQPcbeGV3EEJKU5c_IxWaDvmZF_kRhzuVWs HTTP/1.1Host: rr4---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0237329379&ei=UEoUsmJUWhwVQEo9sjVvzr9&ip=35.59.64.98&id=o-AFgWADl2dAgJDonptFHCsMSysxx14nNxr8jv6JMfxKkzp&itag=18&source=youtube&requiressl=yes&mh=X6&mm=684%2C16505%2C76312&mn=DO3uD%2CLntMg%2Ca56zf&ms=DO3uD%2CLntMg%2Ca56zf&mv=d&mvi=2&pl=43&initcwndbps=8615257&siu=2&spc=caK1Dpf9UhnH8HhGOiDUYhrLuZy3qXLhbTthjXWOHafI&vprv=2&svpuc=2&mime=video%2Fmp4&ns=fWn98vaCGVrJhYxG6G4rdRwh&cnr=43&ratebypass=yes&dur=39833249&lmt=4983315406462903&mt=0237329379&fvip=3&c=WEB&txp=8615257&n=BIrafvlasXHD4qjf&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=uFxWdW7yOjv0FDXpY8672SPsCipOcyaPOCuXevAuwpprpdGaWMIWvvW5kKIBY8G3fyZ1AC8uHYQPcbeGV3EEJKU5c_IxWaDvmZF_kRhzuVWs&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=uFxWdW7yOjv0FDXpY8672SPsCipOcyaPOCuXevAuwpprpdGaWMIWvvW5kKIBY8G3fyZ1AC8uHYQPcbeGV3EEJKU5c_IxWaDvmZF_kRhzuVWs HTTP/1.1Host: rr4---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app_shell HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/annotations_module.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /vi/PMH54eetPSo/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCn10Dz8yXH-GZlB6kEPOR1cjwdWQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/lOfZLb33uCg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDMuFCUNqHIyIZRbuQxv-HKpbaQAg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/pIgZ7gMze7A/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD6YcfJVkBiOHZA28Pi9YNyPpDjIg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/www-tampering.vflset/www-tampering.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/cssbin/www-main-desktop-home-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /s/search/audio/failure.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/no_input.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk3Kts6q3zIfEQkwMaEx1yJMbW6TB4VOQzJunouscHsSbvbEDPo2v8BhrjM
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&is_vtc=0&ptype=f_view&random=615820270&utuid=uAXFkgsw1L7xaCfnd5JJOw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=JVphAbPLyX9ZEtD2_qayTgkYecl2k0Uva6Fs462ZQ8ArxOLiLAalZEZwsz9gNwEOjUv7Ny5Xxd1-qqyvWRRejTzgcuFDddO7pIYFLkwLAZUlYct6erHdhr_aVJZYhWx8gsaI___iHJl6iQIJ0MY8pLrjr4wfTi-KnjxotEwq-1s
Source: global traffic	HTTP traffic detected: GET /s/search/audio/success.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/open.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /vi/mIHHfNVfhPk/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/QJjrf9RkzGo/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=4 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&is_vtc=0&ptype=f_view&random=615820270&utuid=uAXFkgsw1L7xaCfnd5JJOw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=JVphAbPLyX9ZEtD2_qayTgkYecl2k0Uva6Fs462ZQ8ArxOLiLAalZEZwsz9gNwEOjUv7Ny5Xxd1-qqyvWRRejTzgcuFDddO7pIYFLkwLAZUlYct6erHdhr_aVJZYhWx8gsaI___iHJl6iQIJ0MY8pLrjr4wfTi-KnjxotEwq-1s
Source: global traffic	HTTP traffic detected: GET /js/th/hzjQZNzHt19psfpfR5oo69Qcd64VWx28ZcUY6yu_JzU.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=JVphAbPLyX9ZEtD2_qayTgkYecl2k0Uva6Fs462ZQ8ArxOLiLAalZEZwsz9gNwEOjUv7Ny5Xxd1-qqyvWRRejTzgcuFDddO7pIYFLkwLAZUlYct6erHdhr_aVJZYhWx8gsaI___iHJl6iQIJ0MY8pLrjr4wfTi-KnjxotEwq-1s
Source: global traffic	HTTP traffic detected: GET /an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/www-searchbox.vflset/www-searchbox.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=5 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtwX0h5ry3uaYRXPNtaZh2vQT2yCWLVBPpgfmpFsBovl3_Po4LV3kpF99inefb6scUJ5axI7BoCsBUmleutwJEudAfDhkA&req_ts=1720045411&pg=MainAppBootstrap%3AWatch&az=1&sigh=AB9vU42QjeSxHzWBbqs_Nm5RMRdFqhgc6A HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=JVphAbPLyX9ZEtD2_qayTgkYecl2k0Uva6Fs462ZQ8ArxOLiLAalZEZwsz9gNwEOjUv7Ny5Xxd1-qqyvWRRejTzgcuFDddO7pIYFLkwLAZUlYct6erHdhr_aVJZYhWx8gsaI___iHJl6iQIJ0MY8pLrjr4wfTi-KnjxotEwq-1s
Source: global traffic	HTTP traffic detected: GET /vi_webp/QJjrf9RkzGo/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/mIHHfNVfhPk/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtwX0h5ry3uaYRXPNtaZh2vQT2yCWLVBPpgfmpFsBovl3_Po4LV3kpF99inefb6scUJ5axI7BoCsBUmleutwJEudAfDhkA&req_ts=1720045411&pg=MainAppBootstrap%3AWatch&az=1&sigh=AB9vU42QjeSxHzWBbqs_Nm5RMRdFqhgc6A HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=RVT5ySJkjInj3OuLj9eD8-Uewk5lDR5MpXynvJooBjWFpQF-7oAqr9uyRW1abB6E7qP3N8TKXE2ea2z3Gn3cbiogJMi-ecZ1XZdG5ptlISr4EodYkY02fwp_g8yR69wvpWQlztZfz_y-OMHo18gC1aCC7sLcq-WYvhua2lflTXU
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=k8CzpNqSReOyi_HE&ver=2&cmt=12.446&fmt=397&fs=0&rt=14.015&euri&lact=14117&cl=648515301&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=24&feature=youtu.be&afmt=251&idpj=-8&ldpj=-16&rti=14&st=2.979&et=12.446&muted=0&docid=dQw4w9WgXcQ&ei=Ys-FZob7KLCDi9oPiYaC6Ak&plid=AAYcX0ezucBBGMcy&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRJN1FvaEdQU0pWbHg4ZFNDOEd5ejNsOU1SSkh1WkZsZWNUMm9TalZ0Z2lYUWJcQVBta0tESXJqb0hJNlNlMmNYRXRsR1RuT1JkVnFfOXlKWFB0N2JmRVhBMlJLSlZ3Ym5yWGhxTzRSaWRfRzktanYwT0JHUUlwVXdFekw2LTFIbUNBWld5ZW5PQnI HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1720045431656X-YouTube-Page-CL: 648891308X-Goog-Event-Time: 1720045431656X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtiY0dZVldoR0tCNCjinpe0BjIKCgJVUxIEGgAgWA%3D%3DX-YouTube-Ad-Signals: dt=1720045417420&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/img/favicon.ico HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=6 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=7 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notindex.html HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notindex HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=8 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=9 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=k8CzpNqSReOyi_HE&ver=2&cmt=22.444&fmt=397&fs=0&rt=24.015&euri&lact=4170&cl=648515301&state=playing&volume=100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=56&feature=youtu.be&afmt=251&idpj=-8&ldpj=-16&rti=24&st=12.446%2C18.927&et=18.927%2C22.444&muted=0%2C0&vis=0%2C3&docid=dQw4w9WgXcQ&ei=Ys-FZob7KLCDi9oPiYaC6Ak&plid=AAYcX0ezucBBGMcy&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRJN1FvaEdQU0pWbHg4ZFNDOEd5ejNsOU1SSkh1WkZsZWNUMm9TalZ0Z2lYUWJcQVBta0tESXJqb0hJNlNlMmNYRXRsR1RuT1JkVnFfOXlKWFB0N2JmRVhBMlJLSlZ3Ym5yWGhxTzRSaWRfRzktanYwT0JHUUlwVXdFekw2LTFIbUNBWld5ZW5PQnI HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1720045441655X-YouTube-Page-CL: 648891308X-Goog-Event-Time: 1720045441655X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtiY0dZVldoR0tCNCjinpe0BjIKCgJVUxIEGgAgWA%3D%3DX-YouTube-Ad-Signals: dt=1720045417420&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&wgl=true&ca_type=imageAccept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /generate_204?6Z11tQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /generate_204?7ezEhQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/img/favicon_144x144.png HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/img/favicon_32x32.png HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20240702/r20110914/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk3Kts6q3zIfEQkwMaEx1yJMbW6TB4VOQzJunouscHsSbvbEDPo2v8BhrjM
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-8002465305224946&output=html&h=60&adk=1230845626&adf=4156384376&w=468&lmt=1720045447&format=468x60_as&url=http%3A%2F%2Fwww.addesigner.com%2F&wgl=1&dt=1720045444197&bpp=1361&bdt=1450&idt=2880&shv=r20240702&mjsv=m202406270101&ptt=5&saldr=sd&abxe=1&cookie_enabled=1&eoidce=1&correlator=126410881231&frm=20&pv=2&ga_vid=1447034126.1720045447&ga_sid=1720045447&ga_hid=1006280641&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=479&ady=26&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44798934%2C95330414%2C95334510%2C95334527%2C95334565%2C95334572%2C95334829%2C31084996%2C95336522%2C31078668%2C31078670%2C31084997&oid=2&pvsid=1832973287643267&tmod=1184736665&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=d%7Cd%7CeE%7C&abl=NS&pfx=0&fu=0&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=2906 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk3Kts6q3zIfEQkwMaEx1yJMbW6TB4VOQzJunouscHsSbvbEDPo2v8BhrjM
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-8002465305224946&output=html&h=90&slotname=3303653530&adk=110678862&adf=2436630289&pi=t.ma~as.3303653530&w=728&lmt=1720045447&url=http%3A%2F%2Fwww.addesigner.com%2F&wgl=1&dt=1720045444203&bpp=1356&bdt=1455&idt=2909&shv=r20240702&mjsv=m202406270101&ptt=5&saldr=sd&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=468x60_as&correlator=126410881231&frm=20&pv=1&ga_vid=1447034126.1720045447&ga_sid=1720045447&ga_hid=1006280641&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=268&ady=955&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44798934%2C95330414%2C95334510%2C95334527%2C95334565%2C95334572%2C95334829%2C31084996%2C95336522%2C31078668%2C31078670%2C31084997&oid=2&pvsid=1832973287643267&tmod=1184736665&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=d%7C%7CeEbr%7C&abl=CS&pfx=0&fu=0&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=2913 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk3Kts6q3zIfEQkwMaEx1yJMbW6TB4VOQzJunouscHsSbvbEDPo2v8BhrjM
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-8002465305224946&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1720045447&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=289x816_l%7C327x816_r&format=0x0&url=http%3A%2F%2Fwww.addesigner.com%2F&pra=7&wgl=1&easpi=0&aihb=0&asro=0&ailel=32~30~31~27~29~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aiael=32~30~31~27~29~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aifxl=32_18~30_5~31_2~27_8~29_11&aiixl=32_9~30_6~31_8~27_3~29_5&aslmct=0.7&asamct=0.7&aisaib=1&dt=1720045445559&bpp=2&bdt=2811&idt=1566&shv=r20240702&mjsv=m202406270101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=468x60_as&prev_slotnames=3303653530&nras=1&correlator=126410881231&frm=20&pv=1&ga_vid=1447034126.1720045447&ga_sid=1720045447&ga_hid=1006280641&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44798934%2C95330414%2C95334510%2C95334527%2C95334565%2C95334572%2C95334829%2C31084996%2C95336522%2C31078668%2C31078670&oid=2&pvsid=1832973287643267&tmod=1184736665&uas=0&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1576 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk3Kts6q3zIfEQkwMaEx1yJMbW6TB4VOQzJunouscHsSbvbEDPo2v8BhrjM
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=RVT5ySJkjInj3OuLj9eD8-Uewk5lDR5MpXynvJooBjWFpQF-7oAqr9uyRW1abB6E7qP3N8TKXE2ea2z3Gn3cbiogJMi-ecZ1XZdG5ptlISr4EodYkY02fwp_g8yR69wvpWQlztZfz_y-OMHo18gC1aCC7sLcq-WYvhua2lflTXU
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=10 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ltu HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=11 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /baddesign.gif HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/ltuAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /baddesign.gif HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=12 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=13 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=k8CzpNqSReOyi_HE&ver=2&cmt=54.116&fmt=397&fs=0&rt=56.016&euri&lact=36172&cl=648515301&state=playing&volume=100%2C100%2C100%2C100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=96&feature=youtu.be&afmt=251&idpj=-8&ldpj=-16&rti=56&st=22.444%2C27.521%2C27.721%2C35.481%2C36.152%2C39.039&et=27.521%2C27.721%2C35.481%2C36.152%2C39.039%2C54.116&muted=0%2C0%2C0%2C0%2C0%2C0&vis=3%2C0%2C3%2C0%2C3%2C3&docid=dQw4w9WgXcQ&ei=Ys-FZob7KLCDi9oPiYaC6Ak&plid=AAYcX0ezucBBGMcy&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRJN1FvaEdQU0pWbHg4ZFNDOEd5ejNsOU1SSkh1WkZsZWNUMm9TalZ0Z2lYUWJcQVBta0tESXJqb0hJNlNlMmNYRXRsR1RuT1JkVnFfOXlKWFB0N2JmRVhBMlJLSlZ3Ym5yWGhxTzRSaWRfRzktanYwT0JHUUlwVXdFekw2LTFIbUNBWld5ZW5PQnI HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1720045473658X-YouTube-Page-CL: 648891308X-Goog-Event-Time: 1720045473657X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtiY0dZVldoR0tCNCjinpe0BjIKCgJVUxIEGgAgWA%3D%3DX-YouTube-Ad-Signals: dt=1720045417420&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&wgl=true&ca_type=imageAccept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=NfT_MOcPMqw; VISITOR_INFO1_LIVE=bcGYVWhGKB4; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgWA%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9tsPRwd2Xx5LQdttMmhuL5gOgRcU_xNy4oFOGhIAZg6gntQYYP2sWLFd7TQa8573F-pPuAg1x9vWWItbh6BndTgP_ANhXBk35eRdoHtmvGcdaPtwrya0cFI1k-U9NwSOY7dS2_LScf996noDr4
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=14 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=15 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=16 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=17 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=18 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=19 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=20 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=21 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=22 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-samp.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-des.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-tips.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-free.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-help.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-link.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-samp.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/hdr-welc.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/housead3l.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-blnk.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/blank.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butsamp2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-des.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-free.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-help.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-tips.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-link.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/but-line2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butdes2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/buttips2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-blnk.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butfree2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/buthelp2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/housead3l.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/hdr-welc.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/blank.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butlink2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butsamp2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/3bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bullstr2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/1bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/buttips2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/but-line2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butdes2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butfree2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/buthelp2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butlink2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/3bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bullstr2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/1bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_454.2.dr	String found in binary or memory: "")\|\|KCa(this.rf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=aB(d,h,dVa):h&&(d="embedded");this.Ma=d;rva();h=null;d=b?b.playerStyle:a.ps;f=g.Eb(eVa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.va=(this.K=g.Eb(eVa,this.playerStyle))&&this.playerStyle!=="play"&&this.playerStyle!=="jamboard";this.yp=!this.va;this.Sa=$A(!1,a.disableplaybackui);this.disablePaidContentOverlay=$A(!1,b==null?void 0:b.disablePaidContentOverlay); equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: "&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+qb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: "&sig="+Oa+"&ad_cpn=[AD_CPN]&id="+jd+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+la},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+jd+"&avm="+la+"&dc_pubid="+la+"&dc_exteid="+vb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: "&uga="+lb+"&vm="+Qb},videostatsDelayplayUrl:{baseUrl:"https://s.youtube.com/api/stats/delayplay?cl="+tc+"&docid="+z+"&ei="+V+"&feature="+m+"&fexp="+Ke+"&ns="+Ha+"&plid="+J+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Tc+"&el="+sd+"&len="+bc+"&of="+Gb+"&uga="+lb+"&vm="+Qb},videostatsWatchtimeUrl:{baseUrl:"https://s.youtube.com/api/stats/watchtime?cl="+tc+"&docid="+z+"&ei="+V+"&feature="+m+"&fexp="+Ke+"&ns="+Ha+"&plid="+J+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: "=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Wc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(oe.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ha+"&origin=www.youtube.com&ata_theme="+me,oe),trackingParams:ob+"="}},popupType:"DIALOG"}},trackingParams:ob+"="}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: "="},trackingParams:ob+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:me},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+qb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],layoutId:"1ID7Gdwk2vV7OZ1A"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: "="}},hoverText:{runs:[{text:Uc}]},trackingParams:ob+"="}},adVideoId:Uc,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=video_companion_reshow_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Da},isContentVideoCompanion:!0,associatedCompositePlayerBytesLayoutId:Vc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:xd}}}],adBreakHeartbeatParams:"Q0FBJTNE",frameworkUpdates:{entityBatchUpdate:{mutations:[{entityKey:Ad, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ha+"&origin=www.youtube.com&ata_theme="+me,jg),trackingParams:ob+"="}},popupType:"DIALOG"}},icon:{iconType:"INFO_OUTLINE"},trackingParams:ob+"="}},hoverText:{runs:[{text:Da}]},trackingParams:ob+"="}},flyoutCtaRenderer:{flyoutCtaRenderer:{image:{thumbnail:{thumbnails:[{url:"https://yt3.ggpht.com/ytc/"+Le+"=s176-c-k-c0x00ffffff-no-rj"}]},trackingParams:ob+"="},headline:{text:xe,isTemplated:!1,trackingParams:ob+"="},description:{text:Vc, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ha+"&origin=www.youtube.com&ata_theme="+me,wh),trackingParams:ob+"="}},popupType:"DIALOG"}},trackingParams:ob+"="}},hoverText:{runs:[{text:Da}]},trackingParams:ob+"="}},adVideoId:Uc,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:ld},associatedCompositePlayerBytesLayoutId:Vc}}, equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: (g.jq(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.jq(c,"www.youtube.com"),d=c.toString()):(c=TCa(d),PI(c)&&(d=c));c=new g.eP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_460.2.dr	String found in binary or memory: ;var Q=A.window,R,S,T=(Q==null?void 0:(R=Q.yt)==null?void 0:R.config_)\|\|(Q==null?void 0:(S=Q.ytcfg)==null?void 0:S.data_)\|\|{};B("yt.config_",T);var U=Object.freeze("document.appendChild document.body.appendChild document.querySelector document.querySelectorAll history.back history.go".split(" ")),V=Object.freeze("fonts.googleapis.com s0.2mdn.net securepubads.g.doubleclick.net ssl.google-analytics.com static.doubleclick.net www.google-analytics.com www.googletagservices.com www.youtube.com youtube.com".split(" ")),W=Object.freeze(["pkedcjkdefgpdelpbcmbmeomcjbeemfm","fjhoaacokmgbjemoflkofnenfaiekifl","enhhojjnijigcajfphajepfemndkmdlo"]),X= equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+la+"&ns="+la+"&event="+la+"&device="+la+"&content_v="+z+"&el="+sd+"&ei="+V+"&devicever="+c+"&bti="+qb+"&format="+jc+"&break_type="+la+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+la+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+rb+"&slot_pos="+la+"&slot_len="+la+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+Dd+"&ad_len="+Yb+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+qb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: Dd+"&ad_len="+Yb+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+Uc+"&aqi="+V+"&ad_rmp="+la+"&sli="+la}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: FR.prototype.publish=function(a,b){return this.isDisposed()?!1:this.pubSub_.publish.apply(this.pubSub_,arguments)};var $8b=ea(["https://www.youtube.com/iframe_api"]),GR=function(){this.playerResolver_=xj();this.playerPromise_=this.playerResolver_.promise;this.playerVars_=null;this.playbackEndedCallback_=ah;this.playbackDurationSeconds_=0},a9b=function(a){var b=function(){return window.YT&&typeof window.YT.ready==="function"}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: IPb.prototype.openToast=function(){var a;(a=this.currentToast)!=null&&a.opened\|\|(this.queue.length?(this.currentToast=this.queue.shift(),this.currentToast.open()):this.currentPersistentToast&&this.currentPersistentToast.open())};var LPb=new pq("TOAST_MANAGER_TOKEN");var MPb=["https://fonts.gstatic.com","https://tv.youtube.com","https://www.gstatic.com","https://www.youtube.com"],NPb=Ll("wil_icon_max_concurrent_fetches",Infinity),PPb=function(a,b){var c=this;this.iconSet=a;this.appDirection=b;this.responsePromises={};this.iconCache={};this.queuedResponseResolvers={};this.numFetches=this.counter=0;this.cacheStorageAvailable=!!Aa.caches;this.cacheStorageAsync=Promise.resolve(void 0);this.cacheStorageSync=void 0;this.requestAninmationFrameResolver=null;this.renderingMode= equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: I_.prototype.navigateToAboutTheseResultsPage=function(){var a=wba("https://www.youtube.com/howyoutubeworks/product-features/search/");a?Jc(window,a,"_blank"):Bl(Error("Could not get url for 'About These Results' help center"))}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: J+".json",loop:!1,autoplay:!1,rendererSettings:{viewBoxOnly:!0,className:"animated-like-icon"}}},totalFrames:V?60:119,lazyLoad:!0};break a;case"NOTIFICATION_BELL":J={lottiePlayerProps:{animationConfig:{name:O?"notification_bell_dark":"notification_bell_light",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_"+(O?"dark":"light")+".json",loop:!1,autoplay:!1,rendererSettings:{className:"animated-subscribe-icon"}}},totalFrames:79,lazyLoad:!1};break a;}J=void 0}return J}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: Object.assign({},{name:"INCORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_LightTheme_01a.json",renderer:"svg"},Iec,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"26 26 80 80"}});a.correctnessAnimationProps=[];a.correctnessAnimationRefs=[];return a}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: Tc+"&el="+sd+"&len="+bc+"&of="+Gb+"&uga="+lb+"&vm="+Qb},ptrackingUrl:{baseUrl:"https://www.youtube.com/ptracking?ei="+V+"&m="+sb+"&oid="+Gb+"&plid="+J+"&pltype="+ld+"&ptchn="+Gb+"&ptk="+G+"&video_id="+z},qoeUrl:{baseUrl:"https://s.youtube.com/api/stats/qoe?cl="+tc+"&docid="+z+"&ei="+V+"&event="+Sd+"&feature="+m+"&fexp="+Ke+"&ns="+Ha+"&plid="+J+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Tc},atrUrl:{baseUrl:"https://s.youtube.com/api/stats/atr?docid="+z+"&ei="+V+"&feature="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: Uc+"&aqi="+V+"&ad_rmp="+la+"&sli="+la}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: ["NOTIFICATION_BELL",{name:"notification_bell_light",nameDarkTheme:"notification_bell_dark",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"NOTIFICATION_BELL",totalFrames:79,lazyLoad:!1}]]);var nub=ea(["https://www.gstatic.com/external_hosted/lottie/lottie_light.js"]),oub=gh(nub),fH;function pub(){return fH?fH:window.lottie?fH=Promise.resolve(window.lottie):fH=new Promise(function(a,b){var c=document.createElement("script");c.addEventListener("load",function(){a(lottie)}); equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Bn(a,{hl:d})),this.Dd(MV(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Dd(g.KV(a.errorMessage)):this.Dd(MV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Bn(c, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: a.content.firstChild);return Dec=a},{mode:2});var Hec;var Iec={autoplay:!1,loop:!1},Jec={simpleText:""},Kec=function(){var a=N.apply(this,arguments)\|\|this;a.isLoading=!1;a.usesPanelLockup=!1;a.enableRefreshWeb=F("enable_cairo_refresh_web");a.selectedItemIndex=-1;a.baseCorrectLottiePlayerAnimationConfig=Object.assign({},{name:"CORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_LightTheme_01a.json",renderer:"svg"},Iec,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"12 20 80 80"}});a.baseIncorrectLottiePlayerAnimationConfig= equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: a.content.firstChild);return Mzc=a},{mode:1});var Pzc;var Qzc=function(){var a=N.apply(this,arguments)\|\|this;a.rightSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg";a.rightSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg";a.leftSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg";a.leftSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg";a.leftSquiggly=a.leftSquigglyLight;a.rightSquiggly=a.rightSquigglyLight; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: a.content.firstChild);return Pzc=a},{mode:1});var Rzc;var Szc=function(){var a=N.apply(this,arguments)\|\|this;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.image0DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg";a.image0LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg";a.image1DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg";a.image1LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg"; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: a.content.firstChild);return lFc=a},{mode:kG("kevlar_poly_si_batch_j033")?1:2});var nFc;var oFc=jD(YB("DELETE_FROM_DOWNLOADS",{},"Delete from downloads"));var pFc={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: a.content.firstChild);return oMc=a},{mode:1});var qMc;var w1=function(){var a=N.apply(this,arguments)\|\|this;a.dark=!1;a.headerBackgroundLight="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.headerBackgroundDark="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: a.content.insertBefore(W().content.cloneNode(!0),a.content.firstChild);return Tzc=a},{mode:1});var Vzc;var Wzc=function(){var a=N.apply(this,arguments)\|\|this;a.JSC$16180_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg";a.JSC$16180_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.squigglyBackground=a.JSC$16180_squigglyBackgroundLight;return a}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: a.content.insertBefore(W().content.cloneNode(!0),a.content.firstChild);return Vzc=a},{mode:kG("kevlar_poly_si_batch_j022")?1:2});var Xzc;var Yzc=function(){var a=N.apply(this,arguments)\|\|this;a.JSC$16183_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg";a.JSC$16183_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg";a.squigglyBackground=a.JSC$16183_squigglyBackgroundLight;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: a.image3DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg";a.image3LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg";a.image0SquigglyBackground=a.image0LightSquigglyBackground;a.image1SquigglyBackground=a.image1LightSquigglyBackground;a.image3SquigglyBackground=a.image3LightSquigglyBackground;return a}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: a.message.includes("cannot be created in a document with origin 'https://www.youtube.com' and URL 'about:blank'")&&b.includes("<anonymous>"))return!0;if(b.includes("https://www.youtube.com"))return!1;a=b.split("\n");if(!a.length)return!1;if(a.length<=3&&b.includes("s.onloadeddata"))return!0;b=0;for(var c=h(a),d=c.next();!d.done;d=c.next())d=d.value,(d.includes("https://")\|\|d.includes("http://"))&&b++;return b/a.length>.95}, equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: a.severity,e,EJ(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Sd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.hC)(),tX(a,"manifest",function(h){b.K=!0;b.oa("pathprobe",h)},function(h){b.Sd(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: aUa=function(a,b){if(!a.j["0"]){var c=new TJ("0","fakesb",{video:new PJ(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new hQ(new g.eP("http://www.youtube.com/videoplayback"),c,"fake"):new sQ(new g.eP("http://www.youtube.com/videoplayback"),c,new VP(0,0),new VP(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"LigQMVuP3nAx3LwQfSGhgYmqsEWANi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"65",offsetEndMilliseconds:"30"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"51",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"LigQMVuP3nAx3LwQfSGhgYmqsEWANi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_START",adTimeOffset:{offsetStartMilliseconds:"330100",offsetEndMilliseconds:"594666"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"0",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"by"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"73",offsetEndMilliseconds:"64"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"67",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"cn"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"59",offsetEndMilliseconds:"8"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"26",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"fp"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"66",offsetEndMilliseconds:"35"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"98",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"go"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"14",offsetEndMilliseconds:"87"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"79",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"nh"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_END",adTimeOffset:{offsetStartMilliseconds:"25",offsetEndMilliseconds:"13"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"32",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"nl"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"50",offsetEndMilliseconds:"67"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"96",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"ov"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"13",offsetEndMilliseconds:"2"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"52",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"ti"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"47",offsetEndMilliseconds:"84"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"uc"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"10",offsetEndMilliseconds:"zo"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"22",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wg"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"56",offsetEndMilliseconds:"86"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"25",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"34",offsetEndMilliseconds:"12"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"27",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wz"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"84",offsetEndMilliseconds:"90"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"92",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: animationConfig:{name:"animated-actions-background",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_container_"+(jfc()?"dark":"light")+(F("enable_cairo_refresh_signature_moments_web")?"_v4":"")+".json"}}})}),d),Bt(a,function(){return K(ifc,{lottiePlayerProps:{animationRef:c, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: animationConfig:{name:"animated-actions-foreground",autoplay:!1,loop:!1,path:F("enable_cairo_refresh_signature_moments_web")?"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkles_"+(jfc()?"dark":"light")+"_v4.json":"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkle_"+(jfc()?"dark":"light")+".json"}}})}))} equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: b:{d=/api\/stats\/ads/;var p,q,r,x;e=(m=BD().objectRepresentation.adPlacements)==null?void 0:(p=m[0])==null?void 0:(q=p.adPlacementRenderer)==null?void 0:(r=q.renderer)==null?void 0:(x=r.linearAdSequenceRenderer)==null?void 0:x.linearAds;if(e!=null&&e.length&&(m=H(e[0],O3a))&&(m=m.pings,m!=null&&m.impressionPings))for(p=[].concat(ia(m.impressionPings)),m.progressPings&&(p=[].concat(ia(p),ia(m.progressPings))),m=h(p),p=m.next();!p.done;p=m.next())if(p=p.value,p.baseUrl&&d.test(p.baseUrl)){m=p.baseUrl.replace("https://www.youtube.com", equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.zR(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.jT(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.$I("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: c+"&m_pos_ms="+jc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Pe}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:jc,offsetEndMilliseconds:lb},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+Pb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: c+"&m_pos_ms="+jc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Vd}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:jc,offsetEndMilliseconds:jc},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+Pb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: c+"&m_pos_ms="+jc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:qa}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_END",adTimeOffset:{offsetStartMilliseconds:lb,offsetEndMilliseconds:lb},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+lb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: c+"&m_pos_ms="+jc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:qa}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:jc,offsetEndMilliseconds:jc},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+Pb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: chc.idomCompat=!0;var dhc={LIKE:"LIKE",NOTIFICATION_BELL:"NOTIFICATION_BELL"};function ehc(a){var b=a.animatedIconType;var c=a.active;var d=a.themeOverride;var e=a.animationRef===void 0?{}:a.animationRef;var g=a.staticIconFn;var k=function(){a:{var J=b();var O=d==null?void 0:d(),V;O=(O==null?void 0:O.useDarkTheme)\|\|((V=rq().resolve(qq(NH)))==null?void 0:V());V=F("enable_cairo_refresh_signature_moments_web");switch(J){case"LIKE":J="animated_like_icon_";J=V?J+(O?"dark_v4":"light_v4"):J+(O?"v2_dark":"v2_light");J={lottiePlayerProps:{animationConfig:{name:J,path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: completePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=videoplaytime100&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewTracking:{trafficType:"ACTIVE_VIEW_TRAFFIC_TYPE_VIDEO"}},clickthroughEndpoint:{clickTrackingParams:Wc, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Oa+"&ad_cpn=[AD_CPN]&id="+jd+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+la},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+jd+"&avm="+la+"&dc_pubid="+la+"&dc_exteid="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: f.created=function(){this.embedHost_=Msd[xl("INNERTUBE_CLIENT_NAME")]\|\|"www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: f.maybeInitializeQuizLotties=function(a){var b=this;this.isDarkTheme&&(this.baseCorrectLottiePlayerAnimationConfig.path="https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_DarkTheme_01a.json",this.baseIncorrectLottiePlayerAnimationConfig.path="https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_DarkTheme_01a.json");this.correctnessAnimationProps=a.map(function(c){return{animationConfig:c.isCorrect?b.baseCorrectLottiePlayerAnimationConfig:b.baseIncorrectLottiePlayerAnimationConfig, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewViewablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Oa+"&ad_cpn=[AD_CPN]&id="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: function LCc(a){return K("div",{class:"MessageRendererWizChatbot"},Bt(!1,function(){return K("img",{class:"MessageRendererWizChatbotIcon",alt:"Chatbot icon",src:"https://www.gstatic.com/youtube/img/chat/2x/sparkle_red.png"})}),K("div",{class:"MessageRendererWizChatbotText"},K(qCc,{text:a.text}),Bt(a.webResponseData,function(){return K(MCc,{data:a.webResponseData})})))} equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: function e9b(a){if(a.urlEndpoint){if(a=El(a.urlEndpoint.url),a.adurl)return Rc(a.adurl)}else if(a.watchEndpoint)return"//www.youtube.com/watch?v="+a.watchEndpoint.videoId;return null} equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: function uJb(a){a="loading_animation_"+a;return{name:a,path:"https://www.gstatic.com/youtube/img/lottie/playables_loading_animation/"+a+".json",loop:!0,autoplay:!0}} equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: function ugb(){var a,b,c,d,e,g,k,m,p,q,r;return t(function(x){switch(x.nextAddress){case 1:pa(x,2),a=h(Jgb()),b=a.next();case 4:if(b.done)return x.return(1);d=c=b.value;e=d.jsonRepresentation;g=d.objectRepresentation;k=btoa(e);m="data:application/json;base64,"+k;p=new Request(m);Object.defineProperty(p,"url",{get:function(){return"https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false"}}); equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: g.KR=function(a){var b=g.zR(a);tVa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",$lb);var DCa=pa(["//tpc.googlesyndication.com/sodar/",""]);var aPa={P7a:0,M7a:1,J7a:2,K7a:3,L7a:4,O7a:5,N7a:6};var Eqa=(new Date).getTime();var Oka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Pka=/\bocr\b/;var Rka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var amb=0,bmb=0,cmb=0;var Yu;Yu=null;g.$u=!1;g.hv=1;g.gv=Symbol("SIGNAL");g.tv={version:0,HZ:0,bl:!1,rg:void 0,gy:void 0,Vm:void 0,WK:0,Zi:void 0,Bu:void 0,Dt:!1,LO:!1,X0:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.zR(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.sR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),xC&&(a=rqa())&&(b.ebc=a));return g.Bn(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: g.zR=function(a){a=xR(a.Ha);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: ha+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: hoverText:{runs:[{text:Pe}]},trackingParams:ob+"="}},adVideoId:Uc,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:qd},associatedCompositePlayerBytesLayoutId:Vc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Sd}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_SELF_START"}},renderer:{actionCompanionAdRenderer:{headline:{text:eb, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: if(b){var c=iub.get(b);c\|\|(c=[],iub.set(b,c));var d=xl("ELEMENT_POOL_CONFIG")\|\|{};c.length>=(d[b]!==void 0?d[b]:xl("ELEMENT_POOL_DEFAULT_CAP",0))\|\|c.push(a)}else Gq(new Im("Element pool should only handle custom elements:",a.nodeName))},iub=new Map,kub=0,jub=0;var mub=F("enable_cairo_refresh_signature_moments_web"),eH=new Map([["FACE_HAPPY",{name:"animated_face_happy_light",nameDarkTheme:"animated_face_happy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_happy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_happy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_HAPPY",totalFrames:121,lazyLoad:!1}],["FACE_MEH",{name:"animated_face_meh_light", equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: isTemplated:!0,trackingParams:ob+"="}},trackingParams:ob+"="}},adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,serviceEndpoint:{clickTrackingParams:Wc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(Xf.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ha+"&origin=www.youtube.com&ata_theme="+me,Xf),trackingParams:ob+"="}},popupType:"DIALOG"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: jd+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+jd+"&dc_pubid="+la+"&dc_exteid="+vb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: l(hyd,N);f=hyd.prototype;f.created=function(){var a=rq();F("kevlar_clear_duplicate_pref_cookie")&&Mm(Ti,function(){var b=wi.get("PREF");b&&!/f\d=/.test(b)&&(b=Ml("kevlar_duplicate_pref_cookie_domain_override"),document.cookie=b?"PREF=null;domain="+b+";expires=Thu, 01 Jan 1970 00:00:01 GMT":"PREF=null;domain=.www.youtube.com;expires=Thu, 01 Jan 1970 00:00:01 GMT")}); equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: l(tcc,N);tcc.prototype.maybeLoadAnimationBackground=function(){this.useAnimationBackground?this.lottieAnimation\|\|(this.lottieAnimation=lottie.loadAnimation({container:this.animationBackground,loop:!0,renderer:"svg",path:"https://www.gstatic.com/youtube/img/livestream/live_chat/lottie_animation/shimmer_background.json",autoplay:!0})):this.lottieAnimation&&this.lottieAnimation.destroy()}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: lL.prototype.getUrl=function(a,b){return"https://www.gstatic.com/youtube/img/icons/web/"+b.style+"/"+a+"/v"+b.version+"/"+b.size+"px.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: la+"&cid="+ha+"&ad_cpn=%5BAD_CPN%5D&sig="+Y+"&adurl="+kd+"&label=video_click_to_advertiser_site&ctype="+Pb+"&ms=[CLICK_MS]",target:"TARGET_NEW_WINDOW",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}},trackingParams:ob+"=",backgroundImage:{thumbnail:{thumbnails:[{url:""}]},trackingParams:ob+"="},abandonCommands:{commands:[{clickTrackingParams:Wc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],thirdQuartilePings:[{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+jc+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],completePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=videoplaytime100&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+jc+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+jc+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pingingEndpoint:{hack:!0}}]},adRendererCommands:{impressionCommand:{clickTrackingParams:Wc,commandExecutorCommand:{commands:[{clickTrackingParams:Wc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=video_card_endcap_impression"}],pingingEndpoint:{hack:!0}}]}}},skipButton:{skipButtonRenderer:{message:{text:xd,isTemplated:!1,trackingParams:ob+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_UNHAPPY",totalFrames:121,lazyLoad:!1}],["FACE_VERY_HAPPY",{name:"animated_face_very_happy_light",nameDarkTheme:"animated_face_very_happy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_very_happy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_very_happy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_VERY_HAPPY", equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: lottiePlayerProps:{animationRef:k,animationConfig:{name:e.uniqueId+"-background",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_container_"+(rCb()?"dark":"light")+".json",rendererSettings:{viewBoxOnly:!0}}}}))}),K("div",{class:"smartimation__content"},a))} equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: loudnessDb:-3.7800007}]},playerAds:[{playerLegacyDesktopWatchAdsRenderer:{playerAdParams:{showContentThumbnail:!0,enabledEngageTypes:"3,6,4,5,17,1"},gutParams:{tag:"\\4061\\ytpwmpu"},showCompanion:!0,showInstream:!0,useGut:!0}}],playbackTracking:{videostatsPlaybackUrl:{baseUrl:"https://s.youtube.com/api/stats/playback?cl="+tc+"&docid="+z+"&ei="+V+"&feature="+m+"&fexp="+Ke+"&ns="+Ha+"&plid="+J+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Tc+"&el="+sd+"&len="+bc+"&of="+Gb+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: m+"&len="+bc+"&ns="+Ha+"&plid="+J+"&ver="+la,elapsedMediaTimeSeconds:5},videostatsScheduledFlushWalltimeSeconds:[10,20,30],videostatsDefaultFlushIntervalSeconds:40},captions:{playerCaptionsTracklistRenderer:{captionTracks:[{baseUrl:"https://www.youtube.com/api/timedtext?v="+z+"&caps="+Eb+"&opi="+tc+"&xoaf="+la+"&hl="+Ha+"&ip="+rb+"&ipbits="+la+"&expire="+Kb+"&sparams=ip,ipbits,expire,v,caps,opi,xoaf&signature="+rb+"&key="+Eb+"&lang="+Ba,name:{simpleText:eb},vssId:".en-US",languageCode:"en-US",isTranslatable:!0, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: nameDarkTheme:"animated_face_meh_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_meh.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_meh.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_MEH",totalFrames:121,lazyLoad:!1}],["FACE_SAD",{name:"animated_face_sad_light",nameDarkTheme:"animated_face_sad_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_sad.json", equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: null?void 0:G.baseUrl);var J;q.push(p==null?void 0:(J=p.qoeUrl)==null?void 0:J.baseUrl);var O;q.push(p==null?void 0:(O=p.atrUrl)==null?void 0:O.baseUrl);z=h(q);for(C=z.next();!C.done;C=z.next())if((C=C.value)&&m.test(C)){z=C.replace("https://www.youtube.com","").replace("https://s.youtube.com","");break b}}z=void 0}z&&c.push({testUrl:""+Aa.location.origin+z,baseUrl:Aa.location.origin+"/feed/download",method:"GET"})}c=c.length!==0?c[Math.floor(Math.random()*c.length)]:void 0;return(a=c)?b.return(Ngb(a.testUrl, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_sad.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_SAD",totalFrames:121,lazyLoad:!1}],["FACE_UNHAPPY",{name:"animated_face_unhappy_light",nameDarkTheme:"animated_face_unhappy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_unhappy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_unhappy.json", equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: pingingEndpoint:{hack:!0}}]}}},skipButton:{skipButtonRenderer:{message:{text:Uc,isTemplated:!1,trackingParams:ob+"="},trackingParams:ob+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:ld},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: pings:{impressionPings:[{baseUrl:"https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid="+tc+";dc_trk_cid="+tc+";dc_dbm_token="+x+";ord="+Kb+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+la+";dc_rui="+la+";dc_exteid="+vb+";dc_av="+Pb+";dc_sk="+la+";dc_ctype="+lb+";dc_ref=http://www.youtube.com/video/"+Uc+";dc_pubid="+la+";dc_btype=23?gclid="+La+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"},{baseUrl:"https://www.youtube.com/pagead/adview?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=video_skip_shown&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]",offsetMilliseconds:5E3},{baseUrl:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+D+"AxAA&ase=2&num="+la+"&cid="+ha+"&ad_cpn=%5BAD_CPN%5D&sig="+Y+"&adurl="+kd+"&ctype="+Pb+"&ms=[CLICK_MS]&label=video_10s_engaged_view&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=",offsetMilliseconds:1E4, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+lb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+c+"&m_pos_ms="+Yb}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Sd}}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: return K("yt-smartimation",{class:CCb(p,r,e)},Bt(e.experimentEnabled,function(){return K("div",{class:"smartimation__border"},K(Wub,{className:"smartimation__border-gradient",lottiePlayerProps:{animationRef:g,animationConfig:{name:e.uniqueId+"-border",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_border_"+(rCb()?"dark":"light")+(F("enable_cairo_refresh_signature_moments_web")?"_v2":"")+".json"}}}))}),Bt(e.experimentEnabled&&r,function(){return K("div", equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: rootVe:83769}},urlEndpoint:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+D+"AxAA&ase=2&num="+la+"&cid="+ha+"&ad_cpn=%5BAD_CPN%5D&sig="+Y+"&adurl="+kd+"&label=video_click_to_advertiser_site&ctype="+Pb+"&ms=[CLICK_MS]",target:"TARGET_NEW_WINDOW",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}},trackingParams:ob+"="}},durationMilliseconds:7E3,countdownRenderer:{timedPieCountdownRenderer:{trackingParams:ob+"="}},navigationEndpoint:{clickTrackingParams:Wc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: tc+";dc_dbm_token="+x+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+la+";ord="+tc+";dc_rui="+la+";dc_exteid="+vb+";dc_av="+la+";dc_sk="+la+";dc_ctype="+lb+";dc_pubid="+la+";dc_btype=3?gclid="+La+"&ase=2"},{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=video_card_endcap_action_headline_click"}],commandMetadata:{webCommandMetadata:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: tc+";dc_trk_cid="+tc+";dc_dbm_token="+x+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+la+";ord="+tc+";dc_rui="+la+";dc_exteid="+Nb+";dc_av="+la+";dc_sk="+la+";dc_ctype="+lb+";dc_pubid="+la+";dc_btype=3?gclid="+La+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}],fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: this.X.Da&&(a.authuser=this.X.Da);this.X.pageId&&(a.pageid=this.X.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.ra=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(VQ(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.ra=!1);b="";g.OQ(this.B)?NQ(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: this.hostLanguage=b?b.hostLanguage\|\|"en":cB("en",a.host_language);this.mp=!this.Cc&&Math.random()<g.nI(this.experiments,"web_player_api_logging_fraction");this.Ya=!this.Cc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(b==null\|\|!b.deviceIsAudioOnly);this.Yd=bB(this.Yd,a.ismb);this.yp?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=xR(this.Ha)\|\|"www.youtube.com")):r="video.google.com";this.Bn=r;iVa(this,a,!0);this.Oa=new XQ;g.M(this,this.Oa);q=b?b.innertubeApiKey:cB("",a.innertube_api_key); equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: totalFrames:121,lazyLoad:!1}],["LIKE",{name:"animated_like_light",nameDarkTheme:"animated_like_dark",path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+(mub?"animated_like_icon_light_v4":"animated_like_icon_v2_light")+".json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+(mub?"animated_like_icon_dark_v4":"animated_like_icon_v2_dark")+".json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"LIKE",totalFrames:mub?60:119,lazyLoad:F("web_animated_like_lazy_load")}], equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: trackName:""},{baseUrl:"https://www.youtube.com/api/timedtext?v="+z+"&caps="+Eb+"&opi="+tc+"&xoaf="+la+"&hl="+Ha+"&ip="+rb+"&ipbits="+la+"&expire="+Kb+"&sparams=ip,ipbits,expire,v,caps,opi,xoaf&signature="+rb+"&key="+Eb+"&kind="+Eb+"&lang="+Ha,name:{simpleText:Uc},vssId:"a.it",languageCode:"it",kind:"asr",isTranslatable:!0,trackName:""}],audioTracks:[{captionTrackIndices:[0,1],defaultCaptionTrackIndex:0,visibility:"UNKNOWN",hasDefaultTrack:!0,captionsInitialState:"CAPTIONS_INITIAL_STATE_OFF_RECOMMENDED"}], equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: trackingParams:ob+"=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Wc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(Lh.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ha+"&origin=www.youtube.com&ata_theme="+me,Lh),trackingParams:ob+"="}},popupType:"DIALOG"}},trackingParams:ob+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: trackingParams:ob+"=",backgroundImage:{thumbnail:{thumbnails:[{url:""}]},trackingParams:ob+"="},abandonCommands:{commands:[{clickTrackingParams:Wc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: vE&&vE.snapshotAndFlush()}},b),(c.flush_logs={callback:function(){Cq()}},c))}},zRb);var BRb={},CRb=(BRb.rendered={priority:0,callback:function(){var a=new bKa;a.increment("STARTED");if(xl("LOGGED_IN")&&xl("SERVER_VERSION")!=="test"&&xl("SERVER_VERSION")!=="dev"&&!Zja()&&!Yja()){a.increment("EXECUTING");var b=document.createElement("iframe");b.style.display="none";oca(b,2,Ub("https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid="+xl("INNERTUBE_CONTEXT_CLIENT_NAME")));document.body&&document.body.appendChild(b);a.increment("DONE")}}},BRb);var DRb={},ERb=(DRb.rendered={callback:function(){gNb().resume()}},DRb);var FRb={acknowledgeChannelTouStrikeCommand:RE(eN),addToPlaylistServiceEndpoint:RE(iO),addToPlaylistEndpoint:RE(iO),addUpcomingEventReminderEndpoint:RE(FN),browseEndpoint:RE(fMb),channelCreationFormEndpoint:RE(YM),channelCreationServiceEndpoint:RE(ZM),claimLegacyYoutubeChannelEndpoint:RE(LM),clearSearchHistoryEndpoint:RE(xN),clearWatchHistoryEndpoint:RE(yN),commerceActionCommand:SE(oO),createBackstagePostEndpoint:RE(FM),createCommentEndpoint:RE(UM),createCommentReplyEndpoint:RE(TM),createLiveChatPollEndpoint:RE(GN), equals www.youtube.com (Youtube)
Source: chromecache_454.2.dr	String found in binary or memory: var A3={};var fib=/[&\?]action_proxy=1/,eib=/[&\?]token=([\w-])/,gib=/[&\?]video_id=([\w-])/,hib=/[&\?]index=([\d-])/,iib=/[&\?]m_pos_ms=([\d-])/,kib=/[&\?]vvt=([\w-]*)/,Xhb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),jib="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),$hb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: var MLb={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.gif"}; equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: vb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: wE.prototype.remove=function(a){this.JSC$10625_expiringStorage.remove(a)};var Yjb=ea(["https://www.youtube.com/",""]),Zjb=ea(["https://studio.youtube.com/",""]);function $jb(){if(akb())Gq(Error("persist identity iframe is inserted more than once"));else{var a=document.createElement("iframe");a.style.display="none";var b=b===void 0?window.location.href:b;var c=Sk(xl("PERSIST_IDENTITY_IFRAME_URL"));b=c?c:new URL(b).host.indexOf("studio")===0?gh(Yjb,"persist_identity"):gh(Zjb,"persist_identity");oca(a,1,b);a.id="persist_identity";var d;(d=document.body)==null\|\|d.appendChild(a)}} equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: weight:0},{messageRegExp:/.wtd-div./,weight:0},{messageRegExp:/.Blocked a frame with origin "https:\/\/www.youtube.com" from accessing a cross-origin frame./,weight:0},{messageRegExp:/.disguiseToken./,weight:0},{messageRegExp:/Identifier 'YTNonstop' has already been declared/,weight:1E3}],callbackWeights:[{callback:function(a){var b=a.stack;if(b.includes("chrome://")\|\|b.includes("chrome-extension://")\|\|a.message.includes("chrome-extension://")\|\|b.includes("moz-extension://")\|\|b.includes("local.adguard.org")\|\| equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: weight:500},{callback:function(a){if(!a.stack)return!1;var b=a.stack.trim().split("\n");b.length&&b[0].endsWith("Error: "+a.message)&&b.shift();b.length&&b[b.length-1].includes("at window.onerror (")&&b.pop();if(!b.length)return!0;if(a.message==="Script error.")return b[0].includes("www.youtube.com")\|\|b.length>=2&&b[0].startsWith("at new")&&b[1].startsWith("at window.onerror");if(a.message==="Unexpected token")return!0;a=h(b);for(b=a.next();!b.done;b=a.next())if(b=b.value,!(b.includes("<anonymous>")\|\| equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: z+"/maxresdefault.jpg",width:1280,height:720}]},embed:{iframeUrl:"https://www.youtube.com/embed/"+Uc,width:1280,height:720},title:{simpleText:qa},description:{simpleText:xd},lengthSeconds:"1156",ownerProfileUrl:"http://www.youtube.com/@"+Vc,externalChannelId:jb,isFamilySafe:!0,availableCountries:"AD AE AF AG AI AL AM AO AQ AR AS AT AU AW AX AZ BA BB BD BE BF BG BH BI BJ BL BM BN BO BQ BR BS BT BV BW BY BZ CA CC CD CF CG CH CI CK CL CM CN CO CR CU CV CW CX CY CZ DE DJ DK DM DO DZ EC EE EG EH ER ES ET FI FJ FK FM FO FR GA GB GD GE GF GG GH GI GL GM GN GP GQ GR GS GT GU GW GY HK HM HN HR HT HU ID IE IL IM IN IO IQ IR IS IT JE JM JO JP KE KG KH KI KM KN KP KR KW KY KZ LA LB LC LI LK LR LS LT LU LV LY MA MC MD ME MF MG MH MK ML MM MN MO MP MQ MR MS MT MU MV MW MX MY MZ NA NC NE NF NG NI NL NO NP NR NU NZ OM PA PE PF PG PH PK PL PM PN PR PS PT PW PY QA RE RO RS RU RW SA SB SC SD SE SG SH SI SJ SK SL SM SN SO SR SS ST SV SX SY SZ TC TD TF TG TH TJ TK TL TM TN TO TR TT TV TW TZ UA UG UM US UY UZ VA VC VE VG VI VN VU WF WS YE YT ZA ZM ZW".split(" "), equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: z,target:"TARGET_NEW_WINDOW"}},trackingParams:ob+"="}},trackingParams:ob+"="}}}},endscreen:{endscreenRenderer:{elements:[{endscreenElementRenderer:{style:"CHANNEL",image:{thumbnails:[{url:"https://yt3.ggpht.com/"+Ma+"=s250-c-k-c0x00ffffff-no-rj",width:250,height:250},{url:"https://yt3.ggpht.com/"+Ma+"=s400-c-k-c0x00ffffff-no-rj",width:400,height:400}]},icon:{thumbnails:[{url:"https://www.gstatic.com/youtube/img/annotations/youtube.png"}]},left:.030214407,width:.15438597,top:.37587035,aspectRatio:1, equals www.youtube.com (Youtube)
Source: chromecache_741.2.dr	String found in binary or memory: {"name":"YouTube","short_name":"YouTube","background_color":"#FFFFFF","display":"minimal-ui","start_url":"/?feature\u003dytca","scope":"/","icons":[{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png","sizes":"144x144","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_192x192.png","sizes":"192x192","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_16x16.png","sizes":"16x16","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_32x32.png","sizes":"32x32","type":"image/png","purpose":"monochrome"},{"src":"https://fonts.gstatic.com/s/i/googlematerialicons/video_youtube/v11/white-48dp/1x/gm_video_youtube_white_48dp.png","sizes":"48x48","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_512x512.png","sizes":"512x512","type":"image/png","purpose":"monochrome"}],"theme_color":"#FF0000","gcm_sender_id":"402845223712","gcm_user_visible_only":true,"related_applications":[],"capture_links":"none","shortcuts":[{"name":"Subscriptions","url":"/feed/subscriptions?feature\u003dapp_shortcuts","icons":[{"src":"https://www.gstatic.com/youtube/img/web/shortcuts/subscriptions_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]},{"name":"Explore","url":"/feed/explore?feature\u003dapp_shortcuts","icons":[{"src":"https://www.gstatic.com/youtube/img/web/shortcuts/explore_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]}]} equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: {adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:jc,offsetEndMilliseconds:jc},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+Pb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: {adPlacementRenderer:{config:{adPlacementConfig:{kind:"zf",adTimeOffset:{offsetStartMilliseconds:"63",offsetEndMilliseconds:"83"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"59",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Oa+"&ad_cpn=[AD_CPN]&id="+jd+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avgm="+la},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+jd+"&dc_pubid="+la+"&dc_exteid="+vb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewViewablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Oa+"&ad_cpn=[AD_CPN]&id="+jd+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+jd+"&dc_pubid="+la+"&dc_exteid="+vb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pingingEndpoint:{hack:!0}}]},adRendererCommands:{impressionCommand:{clickTrackingParams:Wc,commandExecutorCommand:{commands:[{clickTrackingParams:Wc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=video_card_endcap_impression"}], equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: {baseUrl:"https://www.youtube.com/pagead/adview?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+la+"&ns="+la+"&event="+la+"&device="+la+"&content_v="+z+"&el="+sd+"&ei="+V+"&devicever="+c+"&bti="+qb+"&format="+jc+"&break_type="+la+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+la+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+rb+"&slot_pos="+la+"&slot_len="+la+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+ equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: {instreamVideoAdRenderer:{skipOffsetMilliseconds:5E3,pings:{impressionPings:[{baseUrl:"https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid="+tc+";dc_trk_cid="+tc+";ord="+Kb+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+la+";dc_rui="+la+";dc_exteid="+vb+";dc_av="+Pb+";dc_sk="+la+";dc_ctype="+lb+";dc_ref=http://www.youtube.com/video/"+Uc+";dc_pubid="+la+";dc_btype=23?gclid="+La+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}, equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr	String found in binary or memory: {query:a.browseEndpoint.query})),e&&a.browseEndpoint.params&&(e=Ox(e,{params:a.browseEndpoint.params}));else{if(a.urlEndpoint)return a.urlEndpoint.url;a.signInEndpoint?(e="https://accounts.google.com/ServiceLogin",d={},uc.extend(d,b\|\|{},{"continue":window.location.href.split("#")[0],action_handle_signin:!0,passive:!0}),b=d):a.uploadEndpoint?e="//www.youtube.com/upload":a.liveChatEndpoint?(e=a.liveChatEndpoint,d=uc.clone(e),Pa(e.continuation)&&(g=Object.keys(e.continuation)[0],d.continuation=e.continuation[g].continuation), equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: scamwebsite.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: youtu.be
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: rr4---sn-ab5l6nk6.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: rr3---sn-ab5sznly.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: rr4---sn-q4flrnee.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.addesigner.com

Source: unknown

HTTP traffic detected: POST /videoplayback?expire=1720067010&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ip=8.46.123.33&id=o-AHvumgPkK3P18PYvDEdI5Ck65T0igptZ08KztcBtJQ27&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5sznly%2Csn-vgqsknse&ms=au%2Conr&mv=u&mvi=3&pl=23&spc=NO7bAaSif0H0ubiLZDj-3rIIgHlaCqO7fAWrUwr72ALFOO4Qr_C1D2RNQ_hv&svpuc=1&ns=NZ9xwAhmvZVsm4qlu5buIK0Q&sabr=1&rqh=1&mt=1720044387&fvip=3&keepalive=yes&c=WEB&smc=1&n=L7qDALqkr0Eq2Q&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIgMbQeFp-o9Yn7Z5AtOcGLHFuCcYbPewqpguHDrtbIXvACIQDqRx1XDAoVSeP9K6dvoJ0jboNgshfsiz5WK4ohpJsnSQ%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRgIhALhXr0Cj5sB70Hia0qCPtmVGACF0_pVpSMeIrmb0uYqcAiEA4QDYTgIZEKIx_KNUsXUdfpXhpVklS-oKszUNNEHauSI%3D&cpn=k8CzpNqSReOyi_HE&cver=2.20240702.09.00&rn=1 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveContent-Length: 1662sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Wed, 03 Jul 2024 22:23:40 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Wed, 03 Jul 2024 22:23:40 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Wed, 03 Jul 2024 22:23:41 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Wed, 03 Jul 2024 22:23:41 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Wed, 03 Jul 2024 22:23:42 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Wed, 03 Jul 2024 22:23:42 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Wed, 03 Jul 2024 22:23:43 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Wed, 03 Jul 2024 22:23:43 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Wed, 03 Jul 2024 22:23:44 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Wed, 03 Jul 2024 22:23:44 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Wed, 03 Jul 2024 22:23:45 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Wed, 03 Jul 2024 22:23:45 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 03 Jul 2024 22:24:09 GMTServer: Apache/2.2.15 (CentOS)Accept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 37 0d 0a 3c 68 74 6d 6c 3e 0a 0d 0a 37 0d 0a 3c 68 65 61 64 3e 0a 0d 0a Data Ascii: 7<html>7<head>

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2196,i,8660498280523560811,6611553076656103044,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://scamwebsite.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6208 --field-trial-handle=2196,i,8660498280523560811,6611553076656103044,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 --field-trial-handle=2196,i,8660498280523560811,6611553076656103044,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2196,i,8660498280523560811,6611553076656103044,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6208 --field-trial-handle=2196,i,8660498280523560811,6611553076656103044,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 --field-trial-handle=2196,i,8660498280523560811,6611553076656103044,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://www.youtube.com/embed/	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://www.youtube.com	0%	URL Reputation	safe
https://admin.youtube.com	0%	URL Reputation	safe
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://youtube.com/	0%	URL Reputation	safe
https://yurt.corp.google.com	0%	URL Reputation	safe
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js	0%	Avira URL Cloud	safe
https://fundingchoicesmessages.google.com/i/%	0%	Avira URL Cloud	safe
https://www.youtube.com/generate_204?cpn=	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
http://www.addesigner.com/images/inf-tips.gif	0%	Avira URL Cloud	safe
https://s.youtube.com/api/stats/delayplay?cl=	0%	Avira URL Cloud	safe
https://www.youtube.com/sw.js	0%	Avira URL Cloud	safe
https://support.google.com/adsense/answer/9190028.	0%	Avira URL Cloud	safe
https://scamwebsite.com/Robuxb.png	100%	Avira URL Cloud	malware
https://www.google.com/get/videoqualityreport/?v=	0%	Avira URL Cloud	safe
https://scamwebsite.com/Robux.png	100%	Avira URL Cloud	malware
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://www.youtube.com/	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe
https://i.ytimg.com/vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ	0%	Avira URL Cloud	safe
https://support.google.com/youtube/?p=report_playback	0%	URL Reputation	safe
https://www.youtube.com/api/stats/watchtime?ns=yt&el=detailpage&cpn=k8CzpNqSReOyi_HE&ver=2&cmt=12.446&fmt=397&fs=0&rt=14.015&euri&lact=14117&cl=648515301&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=24&feature=youtu.be&afmt=251&idpj=-8&ldpj=-16&rti=14&st=2.979&et=12.446&muted=0&docid=dQw4w9WgXcQ&ei=Ys-FZob7KLCDi9oPiYaC6Ak&plid=AAYcX0ezucBBGMcy&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRJN1FvaEdQU0pWbHg4ZFNDOEd5ejNsOU1SSkh1WkZsZWNUMm9TalZ0Z2lYUWJcQVBta0tESXJqb0hJNlNlMmNYRXRsR1RuT1JkVnFfOXlKWFB0N2JmRVhBMlJLSlZ3Ym5yWGhxTzRSaWRfRzktanYwT0JHUUlwVXdFekw2LTFIbUNBWld5ZW5PQnI	0%	Avira URL Cloud	safe
http://youtube.com/streaming/metadata/segment/102015	0%	URL Reputation	safe
https://yt3.ggpht.com/coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj	0%	Avira URL Cloud	safe
https://www.youtube.com/api/stats/ads?ver=	0%	Avira URL Cloud	safe
https://www.youtube.com/api/stats/watchtime?ns=yt&el=detailpage&cpn=k8CzpNqSReOyi_HE&ver=2&cmt=22.444&fmt=397&fs=0&rt=24.015&euri&lact=4170&cl=648515301&state=playing&volume=100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=56&feature=youtu.be&afmt=251&idpj=-8&ldpj=-16&rti=24&st=12.446%2C18.927&et=18.927%2C22.444&muted=0%2C0&vis=0%2C3&docid=dQw4w9WgXcQ&ei=Ys-FZob7KLCDi9oPiYaC6Ak&plid=AAYcX0ezucBBGMcy&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRJN1FvaEdQU0pWbHg4ZFNDOEd5ejNsOU1SSkh1WkZsZWNUMm9TalZ0Z2lYUWJcQVBta0tESXJqb0hJNlNlMmNYRXRsR1RuT1JkVnFfOXlKWFB0N2JmRVhBMlJLSlZ3Ym5yWGhxTzRSaWRfRzktanYwT0JHUUlwVXdFekw2LTFIbUNBWld5ZW5PQnI	0%	Avira URL Cloud	safe
https://www.youtube.com/youtubei/v1/feedback?prettyPrint=false	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/endscreen.js	0%	Avira URL Cloud	safe
https://apis.google.com	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
https://s.youtube.com	0%	Avira URL Cloud	safe
https://cdn.ampproject.org/amp4ads-host-v0.js	0%	Avira URL Cloud	safe
https://i.ytimg.com/an/	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	0%	Avira URL Cloud	safe
https://www.google.com/tools/feedback	0%	Avira URL Cloud	safe
https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/1d05d8a6/cssbin/www-main-desktop-player-skeleton.css	0%	Avira URL Cloud	safe
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	0%	Avira URL Cloud	safe
https://www.youtube.com/pagead/interaction/?ai=C	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js?trustedtypes=true	0%	Avira URL Cloud	safe
http://www.addesigner.com/images/blank.gif	0%	Avira URL Cloud	safe
https://www.youtube.com/generate_204?6Z11tQ	0%	Avira URL Cloud	safe
http://www.addesigner.com/images/2bullet.gif	0%	Avira URL Cloud	safe
https://docs.google.com/picker	0%	Avira URL Cloud	safe
https://s.youtube.com/api/stats/qoe?cl=	0%	Avira URL Cloud	safe
https://www.youtube.com/pcs/activeview?xai=	0%	Avira URL Cloud	safe
https://www.youtube.com/app_shell	0%	Avira URL Cloud	safe
https://www.youtube.com/ptracking?ei=	0%	Avira URL Cloud	safe
https://www.google.com/adsense/search/async-ads.js	0%	Avira URL Cloud	safe
https://www.youtube.com/youtubei/v1/notification_registration/set_registration?prettyPrint=false	0%	Avira URL Cloud	safe
https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A	0%	Avira URL Cloud	safe
https://i.ytimg.com/an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a	0%	Avira URL Cloud	safe
http://www.addesigner.com	0%	Avira URL Cloud	safe
https://www.youtube.com/s/search/audio/success.mp3	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/www-searchbox.vflset/www-searchbox.js	0%	Avira URL Cloud	safe
http://googleads.g.doubleclick.net	0%	Avira URL Cloud	safe
https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be	0%	Avira URL Cloud	safe
https://s.youtube.com/api/stats/watchtime?cl=	0%	Avira URL Cloud	safe
https://scamwebsite.com/Untitled.png	100%	Avira URL Cloud	malware
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/webcomponents-sd.vflset/webcomponents-sd.js	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/www-tampering.vflset/www-tampering.js	0%	Avira URL Cloud	safe
https://play.google.com	0%	Avira URL Cloud	safe
http://google.com	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js	0%	Avira URL Cloud	safe
https://www.youtube.com/api/stats/watchtime?ns=yt&el=detailpage&cpn=k8CzpNqSReOyi_HE&ver=2&cmt=2.979&fmt=397&fs=0&rt=4.143&euri&lact=4244&cl=648515301&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=14&feature=youtu.be&afmt=251&idpj=-8&ldpj=-16&rti=4&st=0&et=2.979&muted=0&docid=dQw4w9WgXcQ&ei=Ys-FZob7KLCDi9oPiYaC6Ak&plid=AAYcX0ezucBBGMcy&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRJN1FvaEdQU0pWbHg4ZFNDOEd5ejNsOU1SSkh1WkZsZWNUMm9TalZ0Z2lYUWJcQVBta0tESXJqb0hJNlNlMmNYRXRsR1RuT1JkVnFfOXlKWFB0N2JmRVhBMlJLSlZ3Ym5yWGhxTzRSaWRfRzktanYwT0JHUUlwVXdFekw2LTFIbUNBWld5ZW5PQnI	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/remote.js	0%	Avira URL Cloud	safe
https://youtu.be/	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/base.js	0%	Avira URL Cloud	safe
https://scamwebsite.com/baddesign.gif"	100%	Avira URL Cloud	malware
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/offline.js	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/h_D3VFfhvs4/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDthV7boxzXbMs3GnRoi4b2REY-UA	0%	Avira URL Cloud	safe
http://mths.be/fromcodepoint	0%	Avira URL Cloud	safe
https://scamwebsite.com/style.css	100%	Avira URL Cloud	malware
http://scamwebsite.com	100%	Avira URL Cloud	malware
https://www.youtube.com/pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=568921978&utuid=uAXFkgsw1L7xaCfnd5JJOw	0%	Avira URL Cloud	safe
https://scamwebsite.com/baddesign.gif	100%	Avira URL Cloud	malware
https://www.youtube.com/ptracking?html5=1&video_id=dQw4w9WgXcQ&cpn=k8CzpNqSReOyi_HE&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ptk=youtube_single&oid=QuEoptyF_C_7jHTEUMsRjA&ptchn=uAXFkgsw1L7xaCfnd5JJOw&pltype=content&m=A9eiBZhuWLZhG6dNDvOB8w0XWEO2klUS4Anny-q3WqrNFuoeLy8xd8OCjCjzd-9P3C4WpElfljt5w8F7jtsgsnAU	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	0%	Avira URL Cloud	safe
https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/mIHHfNVfhPk/maxresdefault.jpg	0%	Avira URL Cloud	safe
https://yt3.ggpht.com/coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s48-c-k-c0x00ffffff-no-rj	0%	Avira URL Cloud	safe
https://oauth-redirect-test.googleusercontent.com	0%	Avira URL Cloud	safe
https://mathiasbynens.be/	0%	Avira URL Cloud	safe
https://www.youtube.com/get_midroll_info?ei=	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
rr3.sn-ab5sznly.googlevideo.com	74.125.0.200	true	false	unknown
rr4.sn-ab5l6nk6.googlevideo.com	74.125.0.137	true	false	unknown
addesigner.com	107.161.28.66	true	false	unknown
i.ytimg.com	172.217.23.118	true	false	unknown
static.doubleclick.net	142.250.184.198	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
youtube.com	142.250.184.206	true	false	unknown
youtu.be	216.58.206.78	true	false	unknown
youtube-ui.l.google.com	142.250.185.238	true	false	unknown
rr4.sn-q4flrnee.googlevideo.com	209.85.165.201	true	false	unknown
googleads.g.doubleclick.net	172.217.18.2	true	false	unknown
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.18	true	false	unknown
play.google.com	216.58.206.78	true	false	unknown
scamwebsite.com	198.51.233.1	true	true	unknown
photos-ugc.l.googleusercontent.com	216.58.206.33	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
rr4---sn-ab5l6nk6.googlevideo.com	unknown	unknown	false	unknown
rr3---sn-ab5sznly.googlevideo.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
rr4---sn-q4flrnee.googlevideo.com	unknown	unknown	false	unknown
www.addesigner.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://www.youtube.com/sw.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/Robuxb.png	true	Avira URL Cloud: malware	unknown
https://scamwebsite.com/	true		unknown
http://www.addesigner.com/images/inf-tips.gif	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/Robux.png	true	Avira URL Cloud: malware	unknown
http://www.addesigner.com/	false		unknown
https://i.ytimg.com/vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/api/stats/watchtime?ns=yt&el=detailpage&cpn=k8CzpNqSReOyi_HE&ver=2&cmt=12.446&fmt=397&fs=0&rt=14.015&euri&lact=14117&cl=648515301&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=24&feature=youtu.be&afmt=251&idpj=-8&ldpj=-16&rti=14&st=2.979&et=12.446&muted=0&docid=dQw4w9WgXcQ&ei=Ys-FZob7KLCDi9oPiYaC6Ak&plid=AAYcX0ezucBBGMcy&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRJN1FvaEdQU0pWbHg4ZFNDOEd5ejNsOU1SSkh1WkZsZWNUMm9TalZ0Z2lYUWJcQVBta0tESXJqb0hJNlNlMmNYRXRsR1RuT1JkVnFfOXlKWFB0N2JmRVhBMlJLSlZ3Ym5yWGhxTzRSaWRfRzktanYwT0JHUUlwVXdFekw2LTFIbUNBWld5ZW5PQnI	false	Avira URL Cloud: safe	unknown
https://yt3.ggpht.com/coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false	URL Reputation: safe	unknown
https://www.youtube.com/youtubei/v1/feedback?prettyPrint=false	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/api/stats/watchtime?ns=yt&el=detailpage&cpn=k8CzpNqSReOyi_HE&ver=2&cmt=22.444&fmt=397&fs=0&rt=24.015&euri&lact=4170&cl=648515301&state=playing&volume=100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=56&feature=youtu.be&afmt=251&idpj=-8&ldpj=-16&rti=24&st=12.446%2C18.927&et=18.927%2C22.444&muted=0%2C0&vis=0%2C3&docid=dQw4w9WgXcQ&ei=Ys-FZob7KLCDi9oPiYaC6Ak&plid=AAYcX0ezucBBGMcy&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRJN1FvaEdQU0pWbHg4ZFNDOEd5ejNsOU1SSkh1WkZsZWNUMm9TalZ0Z2lYUWJcQVBta0tESXJqb0hJNlNlMmNYRXRsR1RuT1JkVnFfOXlKWFB0N2JmRVhBMlJLSlZ3Ym5yWGhxTzRSaWRfRzktanYwT0JHUUlwVXdFekw2LTFIbUNBWld5ZW5PQnI	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/endscreen.js	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	Avira URL Cloud: safe	unknown
https://youtube.com/	false	URL Reputation: safe	unknown
https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/1d05d8a6/cssbin/www-main-desktop-player-skeleton.css	false	Avira URL Cloud: safe	unknown
http://www.addesigner.com/images/blank.gif	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?6Z11tQ	false	Avira URL Cloud: safe	unknown
http://www.addesigner.com/images/2bullet.gif	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/youtubei/v1/notification_registration/set_registration?prettyPrint=false	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-8002465305224946&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1720045447&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=289x816_l%7C327x816_r&format=0x0&url=http%3A%2F%2Fwww.addesigner.com%2F&pra=7&wgl=1&easpi=0&aihb=0&asro=0&ailel=32~30~31~27~29~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aiael=32~30~31~27~29~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aifxl=32_18~30_5~31_2~27_8~29_11&aiixl=32_9~30_6~31_8~27_3~29_5&aslmct=0.7&asamct=0.7&aisaib=1&dt=1720045445559&bpp=2&bdt=2811&idt=1566&shv=r20240702&mjsv=m202406270101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=468x60_as&prev_slotnames=3303653530&nras=1&correlator=126410881231&frm=20&pv=1&ga_vid=1447034126.1720045447&ga_sid=1720045447&ga_hid=1006280641&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44798934%2C95330414%2C95334510%2C95334527%2C95334565%2C95334572%2C95334829%2C31084996%2C95336522%2C31078668%2C31078670&oid=2&pvsid=1832973287643267&tmod=1184736665&uas=0&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1576	false		unknown
https://www.youtube.com/app_shell	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/www-tampering.vflset/www-tampering.js	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/search/audio/success.mp3	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/www-searchbox.vflset/www-searchbox.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/Untitled.png	true	Avira URL Cloud: malware	unknown
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/webcomponents-sd.vflset/webcomponents-sd.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/api/stats/watchtime?ns=yt&el=detailpage&cpn=k8CzpNqSReOyi_HE&ver=2&cmt=2.979&fmt=397&fs=0&rt=4.143&euri&lact=4244&cl=648515301&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=14&feature=youtu.be&afmt=251&idpj=-8&ldpj=-16&rti=4&st=0&et=2.979&muted=0&docid=dQw4w9WgXcQ&ei=Ys-FZob7KLCDi9oPiYaC6Ak&plid=AAYcX0ezucBBGMcy&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRJN1FvaEdQU0pWbHg4ZFNDOEd5ejNsOU1SSkh1WkZsZWNUMm9TalZ0Z2lYUWJcQVBta0tESXJqb0hJNlNlMmNYRXRsR1RuT1JkVnFfOXlKWFB0N2JmRVhBMlJLSlZ3Ym5yWGhxTzRSaWRfRzktanYwT0JHUUlwVXdFekw2LTFIbUNBWld5ZW5PQnI	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/remote.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/base.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/offline.js	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/h_D3VFfhvs4/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDthV7boxzXbMs3GnRoi4b2REY-UA	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/style.css	true	Avira URL Cloud: malware	unknown
https://www.youtube.com/pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=568921978&utuid=uAXFkgsw1L7xaCfnd5JJOw	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/ltu	true		unknown
https://scamwebsite.com/baddesign.gif	true	Avira URL Cloud: malware	unknown
https://www.youtube.com/ptracking?html5=1&video_id=dQw4w9WgXcQ&cpn=k8CzpNqSReOyi_HE&ei=Ys-FZob7KLCDi9oPiYaC6Ak&ptk=youtube_single&oid=QuEoptyF_C_7jHTEUMsRjA&ptchn=uAXFkgsw1L7xaCfnd5JJOw&pltype=content&m=A9eiBZhuWLZhG6dNDvOB8w0XWEO2klUS4Anny-q3WqrNFuoeLy8xd8OCjCjzd-9P3C4WpElfljt5w8F7jtsgsnAU	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/mIHHfNVfhPk/maxresdefault.jpg	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/watch?v=dQw4w9WgXcQ	false		unknown
https://yt3.ggpht.com/coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s48-c-k-c0x00ffffff-no-rj	false	Avira URL Cloud: safe	unknown
http://scamwebsite.com/	true		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_474.2.dr, chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/delayplay?cl=	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com	chromecache_474.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/embed/	chromecache_474.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_474.2.dr, chromecache_448.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com	chromecache_474.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/adsense/answer/9190028.	chromecache_364.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/get/videoqualityreport/?v=	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/i/%	chromecache_684.2.dr, chromecache_407.2.dr	false	Avira URL Cloud: safe	unknown
https://admin.youtube.com	chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_474.2.dr, chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/an/	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/api/stats/ads?ver=	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_684.2.dr, chromecache_407.2.dr	false	Avira URL Cloud: safe	unknown
https://yurt.corp.google.com	chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/pagead/interaction/?ai=C	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_474.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_474.2.dr, chromecache_448.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/qoe?cl=	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://docs.google.com/picker	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_474.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/	chromecache_474.2.dr	false	URL Reputation: safe	unknown
http://mathiasbynens.be/	chromecache_684.2.dr, chromecache_474.2.dr, chromecache_407.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/adsense/search/async-ads.js	chromecache_684.2.dr, chromecache_407.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/ptracking?ei=	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
http://tools.ietf.org/html/rfc1950	chromecache_396.2.dr, chromecache_474.2.dr, chromecache_454.2.dr, chromecache_489.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/pcs/activeview?xai=	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
http://www.addesigner.com	chromecache_445.2.dr	false	Avira URL Cloud: safe	unknown
http://googleads.g.doubleclick.net	chromecache_684.2.dr, chromecache_407.2.dr	false	Avira URL Cloud: safe	unknown
https://s.youtube.com/api/stats/watchtime?cl=	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/youtube/?p=report_playback	chromecache_454.2.dr	false	URL Reputation: safe	unknown
http://google.com	chromecache_684.2.dr, chromecache_407.2.dr	false	Avira URL Cloud: safe	unknown
http://youtube.com/streaming/metadata/segment/102015	chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://scamwebsite.com/baddesign.gif"	chromecache_623.2.dr	true	Avira URL Cloud: malware	unknown
https://youtu.be/	chromecache_454.2.dr	false	Avira URL Cloud: safe	unknown
http://mths.be/fromcodepoint	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
http://scamwebsite.com	chromecache_623.2.dr	false	Avira URL Cloud: malware	unknown
https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com	chromecache_474.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_474.2.dr, chromecache_448.2.dr	false	URL Reputation: safe	unknown
https://oauth-redirect-test.googleusercontent.com	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://mathiasbynens.be/	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/get_midroll_info?ei=	chromecache_474.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
107.161.28.66	addesigner.com	United States	3842	RAMNODEUS	false
142.250.185.226	unknown	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
74.125.0.200	rr3.sn-ab5sznly.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.186.34	unknown	United States	15169	GOOGLEUS	false
142.250.184.198	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.238	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
172.217.18.2	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.18.1	unknown	United States	15169	GOOGLEUS	false
142.250.181.246	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
74.125.0.137	rr4.sn-ab5l6nk6.googlevideo.com	United States	15169	GOOGLEUS	false
216.58.206.78	youtu.be	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
142.250.184.206	youtube.com	United States	15169	GOOGLEUS	false
209.85.165.201	rr4.sn-q4flrnee.googlevideo.com	United States	15169	GOOGLEUS	false
172.217.23.118	i.ytimg.com	United States	15169	GOOGLEUS	false
198.51.233.1	scamwebsite.com	United States	395409	NEOCITIESUS	true
142.250.185.130	unknown	United States	15169	GOOGLEUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467292
Start date and time:	2024-07-04 00:22:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://scamwebsite.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@37/634@64/24
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://youtu.be/dQw4w9WgXcQ Browse: https://scamwebsite.com/notindex.html Browse: http://www.addesigner.com/ Browse: https://scamwebsite.com/ltu

Input	Output
URL: https://www.youtube.com/watch?v=dQw4w9WgXcQ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, so the loginform field is set to false.","The text of the webpage does not create a sense of urgency, so the urgency field is set to false.","There is no CAPTCHA or anti-robot detection mechanism on the webpage, so the captcha field is set to false.","The webpage is a YouTube video page for the song 'Never Gonna Give You Up' by Rick Astley, and does not contain any elements that would suggest it is attempting to deceive or trick the user."]}
Title: Rick Astley - Never Gonna Give You Up (Official Music Video) - YouTube OCR: Search Sign in The Story of the Best Meme THE GRAtEST EVER: "Never Gonna Give youm EME OF Alfo Malia LL-TJME 46M views 4 years ago 11:08 Rick Astley - Together Forever (Official HD Video) Rick Astley 12M views 4 years ago 3:24 Michael Jackson - Smooth Criminal (Official Video) Michael Jackson 961M views 13 years ago Berlin - Take My Breath Away (Official Video - Top Gun) Berlin 429M views 10 years ago 4:12 RickRolled by an Ad... Beluga 16M views 2years ago Rick Astley - Never Gonna Give You Up (Official Music Video) skip Ad Rick Astley Subscribe Share 17M Save a-ha - Take On Me (Official 4.12M subscribers Video) [Remastered in 4K] 1,550,564,014 views 14 years ago #NeverGonnaGiveYouUp #RickAstley #0fficialMusicVideo 1.9B views 14 years ago The official video for "Never Gonna Give You up" by Rick Astley. Rick Rolled (Cat Version) ThereY AaronsAnimals We reimagined cable. Try it free.* 3.1M views 1 year ago Live TV from 100+ channels. No cable box or long-term contract required. Cancel anytime. Wham! - Wake Me Up Before You Go-GO (Official Video) WHAM! Dismiss Try it free 483M views 14years ago
URL: https://scamwebsite.com/ltu Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": true,"captcha": false,"reasons": ["The title 'FREE ROBUC' is attention-grabbing and could create a sense of urgency.","The text 'to scamwebsite.cpm' suggests that the link leads to a suspicious website.","The text '303542754 F 303542754 F 303542754 F' is repeated multiple times, which could be an attempt to create a sense of urgency or interest.","The text 'Open the link to see your invoice' is a common tactic used to create a sense of urgency."]}
Title: FREE ROBUC OCR: it mywe ox ox ADOESIGNER OX ox 'hrefhttp : / / scamwebsite . ht s: // scamwebsite . com/baddesgn : kif e" to scamwebsite.cpm a > ger ate ve back ox OX ox 303542754 F 303542754 F 303542754 F OX OX OX 303542754 F ' , OX OX , OX 30351-2754 F 303542754 F 30351-2754 F
URL: https://scamwebsite.com Model: gpt-4o	```json{ "phishing_score": 9, "brands": "Roblox", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": false, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "roblox.com", "reasons": "The URL 'https://scamwebsite.com' is highly suspicious and does not match the legitimate domain 'roblox.com' associated with the brand Roblox. The website prominently displays Roblox currency imagery, which is a common tactic used in phishing to mislead users. The site also contains a suspicious link and uses social engineering techniques to lure users into clicking on potentially harmful links. There is no prominent login form or captcha, but the overall design and elements strongly suggest phishing."}

IP
192.168.2.4
192.168.2.5

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.966965284633015
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHtRUhVNBz2SVMzLSQQQEK/:tI9mc4slhohC/vmI4LUhVNBz1VOGQQQz
MD5:	36830448E3F7A1A3A2D487003A091E9C
SHA1:	5E890C51BC88F472775B79639B6C1FC51F08DC05
SHA-256:	31264354C77C510E3AE936076B8C10048515F7F6F5B6EE3EC34FD184144DF96E
SHA-512:	D3AA088237953AC48F2E66B6C3DFBB3A18A11F508E2F2DC650596EE5CE5908D2BEDF2AA01107F0A89DC7B113BBF63C2CB71DA113AD6625047707D3C3E4690F5B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/download/v9/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17 18v1H6v-1h11zm-.5-6.6-.7-.7-3.8 3.7V4h-1v10.4l-3.8-3.8-.7.7 5 5 5-4.9z"/></svg>

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	182
Entropy (8bit):	4.96992883918624
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHPaWzKU2IoQfaUXxRTnRuOZ1zcN/:tI9mc4slhohC/vmI4PaV99HUXxqW1wN/
MD5:	54F9C6C4788C54E7AEB26919C5C2C24F
SHA1:	3883C98E351DF0B47E9B79CD4403073914311327
SHA-256:	CFBF09095F6C33F6917DEEAD4CBAD82F4BE3F538E528980C0300A5B6A3409B3A
SHA-512:	CE0772B5CF958706075AE2C05DF1DD26A272909589113F57050A344DF6776F97505368733C57047554AE59CCB5B32213A973880E7D00A3108B589A40E61670A5
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M21 21H3V3h9v2H5v14h14v-7h2v9zM15 3v2h2.61l-6.68 6.68 1.41 1.41L19 6.44V9h2V3h-6z"/></svg>

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2339)
Category:	downloaded
Size (bytes):	39846
Entropy (8bit):	5.397267278583563
Encrypted:	false
SSDEEP:	768:uqKbUtOcQg0hAIhun+isqxGYgEg7vjiwOpNFt6btRb:u+mg0hNaxG/nmdpHti
MD5:	BF025EF658DDB27110200E1687069834
SHA1:	DA4204F7ADAB89B2805B193FF5E843BE51E692C0
SHA-256:	BD0AA35D6B45603AF59C4D945DC2E8A672827ACA624AE6E8E7B8E9B212B1BF72
SHA-512:	F6A1F96709144D14D1964A4DE8DF900E908A2D146CF7EA38F38FBE5D00E2EECDCE7808D556661188B769AD64327378A1E4A50EDFFFAFABC1DF66DA5282CF166D
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/1d05d8a6/jsbin/spf.vflset/spf.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof l&&l];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function ea(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.ea("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})}if(a)return a;c.protot

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 4, 2024 00:23:15.900218010 CEST	192.168.2.4	1.1.1.1	0xfd26	Standard query (0)	scamwebsite.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:15.900335073 CEST	192.168.2.4	1.1.1.1	0x6f4	Standard query (0)	scamwebsite.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:16.642271042 CEST	192.168.2.4	1.1.1.1	0x7da3	Standard query (0)	scamwebsite.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:16.642533064 CEST	192.168.2.4	1.1.1.1	0xdff	Standard query (0)	scamwebsite.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:18.321346998 CEST	192.168.2.4	1.1.1.1	0x9de0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:18.321700096 CEST	192.168.2.4	1.1.1.1	0x36ab	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:18.636570930 CEST	192.168.2.4	1.1.1.1	0x71d6	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:18.636996031 CEST	192.168.2.4	1.1.1.1	0x5c1a	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 4, 2024 00:23:19.147490978 CEST	192.168.2.4	1.1.1.1	0x6e7	Standard query (0)	scamwebsite.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:19.147845984 CEST	192.168.2.4	1.1.1.1	0x77c2	Standard query (0)	scamwebsite.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:21.081352949 CEST	192.168.2.4	1.1.1.1	0x9d87	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:21.081590891 CEST	192.168.2.4	1.1.1.1	0xf2fb	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 4, 2024 00:23:24.749921083 CEST	192.168.2.4	1.1.1.1	0x27a6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:24.750159979 CEST	192.168.2.4	1.1.1.1	0x7fd8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:28.212404013 CEST	192.168.2.4	1.1.1.1	0x11a	Standard query (0)	youtu.be	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:28.212543011 CEST	192.168.2.4	1.1.1.1	0xd1d7	Standard query (0)	youtu.be	65	IN (0x0001)	false
Jul 4, 2024 00:23:29.784250975 CEST	192.168.2.4	1.1.1.1	0x1cfb	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:29.784827948 CEST	192.168.2.4	1.1.1.1	0x9060	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:31.190314054 CEST	192.168.2.4	1.1.1.1	0xb866	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:31.190717936 CEST	192.168.2.4	1.1.1.1	0xcf45	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:31.355882883 CEST	192.168.2.4	1.1.1.1	0x8065	Standard query (0)	rr4---sn-ab5l6nk6.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:31.356081009 CEST	192.168.2.4	1.1.1.1	0x997f	Standard query (0)	rr4---sn-ab5l6nk6.googlevideo.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:32.421933889 CEST	192.168.2.4	1.1.1.1	0xae70	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:32.422252893 CEST	192.168.2.4	1.1.1.1	0x4b78	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:38.226926088 CEST	192.168.2.4	1.1.1.1	0x8adc	Standard query (0)	rr3---sn-ab5sznly.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:38.227066994 CEST	192.168.2.4	1.1.1.1	0xd0fb	Standard query (0)	rr3---sn-ab5sznly.googlevideo.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:39.413186073 CEST	192.168.2.4	1.1.1.1	0x9c9a	Standard query (0)	rr3---sn-ab5sznly.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:39.413371086 CEST	192.168.2.4	1.1.1.1	0x1769	Standard query (0)	rr3---sn-ab5sznly.googlevideo.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:39.749643087 CEST	192.168.2.4	1.1.1.1	0x2a00	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:39.749828100 CEST	192.168.2.4	1.1.1.1	0x4cd9	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 4, 2024 00:23:39.946587086 CEST	192.168.2.4	1.1.1.1	0x181a	Standard query (0)	rr4---sn-q4flrnee.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:39.947649956 CEST	192.168.2.4	1.1.1.1	0xc4e0	Standard query (0)	rr4---sn-q4flrnee.googlevideo.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:40.832468987 CEST	192.168.2.4	1.1.1.1	0x1d1e	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:40.832612038 CEST	192.168.2.4	1.1.1.1	0x3adf	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:41.133541107 CEST	192.168.2.4	1.1.1.1	0x70ec	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:41.133671045 CEST	192.168.2.4	1.1.1.1	0xe5d	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:41.150024891 CEST	192.168.2.4	1.1.1.1	0x58c1	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:41.150194883 CEST	192.168.2.4	1.1.1.1	0x5193	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:42.844630957 CEST	192.168.2.4	1.1.1.1	0x6223	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:42.844763994 CEST	192.168.2.4	1.1.1.1	0x4d3a	Standard query (0)	youtube.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:44.215017080 CEST	192.168.2.4	1.1.1.1	0x2dc4	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:44.215181112 CEST	192.168.2.4	1.1.1.1	0x3b5e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 4, 2024 00:23:44.216794968 CEST	192.168.2.4	1.1.1.1	0x9021	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:44.216996908 CEST	192.168.2.4	1.1.1.1	0xe0c6	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:44.226228952 CEST	192.168.2.4	1.1.1.1	0x1a6f	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:44.226427078 CEST	192.168.2.4	1.1.1.1	0x8db2	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:45.588005066 CEST	192.168.2.4	1.1.1.1	0x1075	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:45.588155985 CEST	192.168.2.4	1.1.1.1	0x5070	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jul 4, 2024 00:23:45.590101004 CEST	192.168.2.4	1.1.1.1	0x756a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:45.590223074 CEST	192.168.2.4	1.1.1.1	0x8e95	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 4, 2024 00:23:46.859714031 CEST	192.168.2.4	1.1.1.1	0x528f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:23:46.859842062 CEST	192.168.2.4	1.1.1.1	0xa54b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 4, 2024 00:24:02.192960978 CEST	192.168.2.4	1.1.1.1	0xa3e9	Standard query (0)	www.addesigner.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:24:02.193100929 CEST	192.168.2.4	1.1.1.1	0x502c	Standard query (0)	www.addesigner.com	65	IN (0x0001)	false
Jul 4, 2024 00:24:03.648118019 CEST	192.168.2.4	1.1.1.1	0x6450	Standard query (0)	www.addesigner.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:24:03.648274899 CEST	192.168.2.4	1.1.1.1	0x3f55	Standard query (0)	www.addesigner.com	65	IN (0x0001)	false
Jul 4, 2024 00:24:05.848280907 CEST	192.168.2.4	1.1.1.1	0x2ff0	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:24:05.848414898 CEST	192.168.2.4	1.1.1.1	0x9cf1	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 4, 2024 00:24:07.660950899 CEST	192.168.2.4	1.1.1.1	0xa3c3	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:24:07.661118031 CEST	192.168.2.4	1.1.1.1	0xfda9	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 4, 2024 00:24:11.902460098 CEST	192.168.2.4	1.1.1.1	0x24e9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:24:11.902710915 CEST	192.168.2.4	1.1.1.1	0x1cbf	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 4, 2024 00:25:08.227495909 CEST	192.168.2.4	1.1.1.1	0xd70b	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 4, 2024 00:25:08.227648973 CEST	192.168.2.4	1.1.1.1	0x4d36	Standard query (0)	www.youtube.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:23:15.948869944 CEST	430	OUT	GET / HTTP/1.1 Host: scamwebsite.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:23:16.638637066 CEST	362	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 03 Jul 2024 22:23:16 GMT Content-Type: text/html Content-Length: 166 Connection: keep-alive Location: https://scamwebsite.com/ Server: neocities Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>openresty</center></body></html>
Jul 4, 2024 00:23:16.639419079 CEST	362	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 03 Jul 2024 22:23:16 GMT Content-Type: text/html Content-Length: 166 Connection: keep-alive Location: https://scamwebsite.com/ Server: neocities Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>openresty</center></body></html>
Jul 4, 2024 00:24:01.801445007 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:02.668840885 CEST	433	OUT	GET / HTTP/1.1 Host: www.addesigner.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:03.242419958 CEST	209	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:03 GMT Server: Apache/2.2.15 (CentOS) Accept-Ranges: bytes Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 37 0d 0a 3c 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 7<html>
Jul 4, 2024 00:24:03.260006905 CEST	1236	IN	Data Raw: 37 0d 0a 3c 68 65 61 64 3e 0a 0d 0a 34 64 0d 0a 3c 74 69 74 6c 65 3e 41 64 44 65 73 69 67 6e 65 72 2e 63 6f 6d 20 2d 20 44 65 73 69 67 6e 20 61 6e 64 20 64 6f 77 6e 6c 6f 61 64 20 66 72 65 65 20 62 61 6e 6e 65 72 73 20 69 6e 20 73 65 63 6f 6e 64 Data Ascii: 7<head>4d<title>AdDesigner.com - Design and download free banners in seconds!</title>f2<meta name="description" content="FREE banner ads for your website in seconds! Choose from 91 unique, fully-animated designs, customized with th
Jul 4, 2024 00:24:03.260040998 CEST	1029	IN	Data Raw: 67 5f 6c 69 6e 6b 74 6f 75 73 5f 6f 6e 2e 73 72 63 20 3d 20 22 2f 69 6d 61 67 65 73 2f 69 6e 66 2d 6c 69 6e 6b 2e 67 69 66 22 3b 0a 0d 0a 34 33 0d 0a 69 6d 67 5f 69 6e 66 6f 5f 6f 66 66 3d 6e 65 77 20 49 6d 61 67 65 28 29 3b 20 69 6d 67 5f 69 6e Data Ascii: g_linktous_on.src = "/images/inf-link.gif";43img_info_off=new Image(); img_info_off.src="/images/inf-blnk.gif";11b function donothing() {}5d function mousein(name) { document.images["info"].src = eval("img_" + name + "_
Jul 4, 2024 00:24:03.260051966 CEST	1236	IN	Data Raw: 36 27 3b 0a 67 6f 6f 67 6c 65 5f 61 64 5f 77 69 64 74 68 20 3d 20 34 36 38 3b 0a 67 6f 6f 67 6c 65 5f 61 64 5f 68 65 69 67 68 74 20 3d 20 36 30 3b 0a 67 6f 6f 67 6c 65 5f 61 64 5f 66 6f 72 6d 61 74 20 3d 20 22 34 36 38 78 36 30 5f 61 73 22 3b 0a Data Ascii: 6';google_ad_width = 468;google_ad_height = 60;google_ad_format = "468x60_as";// --></script><script type="text/javascript" src="http://pagead2.googlesyndication.com/pagead/show_ads.js"></script><hr> </div>12
Jul 4, 2024 00:24:03.260142088 CEST	224	IN	Data Raw: 22 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 62 75 74 64 65 73 32 2e 67 69 66 22 20 77 69 64 74 68 3d 22 31 31 39 22 20 68 65 69 67 68 74 3d 22 31 38 22 0a 0d 0a 33 39 0d 0a 62 6f 72 64 65 72 3d 22 30 22 20 61 6c 74 3d 22 44 65 73 69 67 6e 20 79 Data Ascii: " src="/images/butdes2.gif" width="119" height="18"39border="0" alt="Design your own custom ad now!"></a><img36src="/images/but-line2.gif" width="22" height="18"><a31href="/tips.shtml" onMouseOver="mousein('ti
Jul 4, 2024 00:24:03.260150909 CEST	1236	IN	Data Raw: 70 73 27 29 22 0a 0d 0a 33 39 0d 0a 6f 6e 4d 6f 75 73 65 4f 75 74 3d 22 6d 6f 75 73 65 6f 75 74 28 27 74 69 70 73 27 29 22 20 6f 6e 46 6f 63 75 73 3d 22 74 68 69 73 2e 62 6c 75 72 28 29 22 3e 3c 69 6d 67 0a 0d 0a 33 65 0d 0a 6e 61 6d 65 3d 22 74 Data Ascii: ps')"39onMouseOut="mouseout('tips')" onFocus="this.blur()"><img3ename="tips" src="/images/buttips2.gif" width="95" height="18"3bborder="0" alt="Expert tips for making great ads"></a><img36src="/images/but-line2.gif" width="
Jul 4, 2024 00:24:03.260160923 CEST	1236	IN	Data Raw: 30 22 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d 22 30 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 30 22 3e 0a 0d 0a 39 0d 0a 20 20 20 20 3c 74 72 3e 0a 0d 0a 34 32 0d 0a 20 20 20 20 20 20 3c 74 64 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 69 6d 61 67 65 Data Ascii: 0" cellspacing="0" cellpadding="0">9 <tr>42 <td><img src="/images/blank.gif" width="1" height="5"></td>a </tr>a <tr> c <td> 7b <div align="center"><img src="/images/hdr-welc.gif" width="4
Jul 4, 2024 00:24:03.260171890 CEST	1236	IN	Data Raw: 20 61 6e 79 77 68 65 72 65 20 65 6c 73 65 2e 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 0d 0a 35 34 0d 0a 20 20 20 20 20 20 20 20 3c 70 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 Data Ascii: anywhere else.</font></p>54 <p><font face="Arial, Helvetica, sans-serif" size="2">Use the high-quality 53 banner ads you design at AdDesigner.com to get <b> higher click-through 5c rates</b> (which mean
Jul 4, 2024 00:24:03.260183096 CEST	672	IN	Data Raw: 32 30 22 3e 20 3c 62 3e 43 68 6f 6f 73 65 20 61 6e 20 0a 0d 0a 34 61 0d 0a 20 20 20 20 20 20 20 20 20 20 61 64 20 73 74 79 6c 65 20 3c 2f 62 3e 20 66 72 6f 6d 20 6f 75 72 20 76 61 73 74 20 6c 69 62 72 61 72 79 20 6f 66 20 3c 62 3e 39 31 3c 2f 62 Data Ascii: 20"> <b>Choose an 4a ad style </b> from our vast library of <b>91</b> high-quality, 33 attention-grabbing animated choices;<br>180 </font> <font face="Arial, Helvetica, sans-serif" size="2"><img s
Jul 4, 2024 00:24:03.267565012 CEST	1236	IN	Data Raw: 62 3e 49 6e 73 74 61 6e 74 6c 79 20 0a 0d 0a 31 0d 0a 0a 0d 0a 35 30 0d 0a 20 20 20 20 20 20 20 20 20 20 64 6f 77 6e 6c 6f 61 64 3c 2f 62 3e 20 28 6f 72 20 72 65 63 65 69 76 65 20 76 69 61 20 65 6d 61 69 6c 29 20 79 6f 75 72 20 63 75 73 74 6f 6d Data Ascii: b>Instantly 150 download</b> (or receive via email) your custom banner ad.</font></p>14e <p><font face="Arial, Helvetica, sans-serif" size="2">But don't think14f that just because we've ma
Jul 4, 2024 00:24:03.267576933 CEST	1236	IN	Data Raw: 6e 27 74 20 65 76 65 6e 20 68 61 76 65 20 0a 0d 0a 35 30 0d 0a 20 20 20 20 20 20 20 20 20 20 74 6f 20 77 6f 72 72 79 20 61 62 6f 75 74 20 77 68 65 74 68 65 72 20 79 6f 75 72 20 61 64 73 20 6d 65 65 74 20 79 6f 75 72 20 62 61 6e 6e 65 72 20 73 65 Data Ascii: n't even have 50 to worry about whether your ads meet your banner service's technical 4b requirements - <i><b>that's truly fool-proof!</b></i></font></p>15c <p><font face="Arial, Helvetica, sans-ser

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:03.530786991 CEST	388	OUT	GET /images/inf-samp.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:03.643209934 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:03 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d3b-5a6-38c0fed506900" Accept-Ranges: bytes Content-Length: 1446 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 44 44 44 75 75 75 ba ba ba 30 30 30 10 10 10 ce ce ce ee ee ee 20 20 20 aa aa aa 89 89 89 99 99 99 d9 d9 d9 de de de 65 65 65 55 55 55 67 67 67 c9 c9 c9 d6 d6 d6 8b 8b 8b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df df 84 20 61 95 1b 76 85 01 e4 68 98 c7 0a 02 65 80 30 02 77 34 09 05 55 02 89 70 8d 8e 6d 0c 01 92 0c 55 03 01 81 39 09 92 04 47 02 01 03 31 04 01 65 a2 2f 96 0a 35 08 01 8c 52 01 9c 8f b0 b1 63 10 01 08 03 0e 98 53 96 b9 37 96 0c bc 30 ae 31 9e a0 30 a5 64 c7 2d b4 0b 35 07 08 74 53 c2 b2 d3 d4 5a 96 cc 25 76 24 da 27 83 23 7d 28 05 d0 85 d9 b9 bb 23 8b db e4 27 7d ac e7 ec c0 00 ed 22 d2 29 e2 24 c4 27 eb df 85 c9 de 2f 02 [TRUNCATED] Data Ascii: GIF89aDDDuuu000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zn avhe0w4UpmU9G1e/5RcS7010d-5tSZ%v$'#}(#'}")$'/=H n&mc"J<`$\(bw:p`Q>Dp"R&ruGR;{(0uO?}JlC\2'Y%80S0:vUUFY_x\:D#Pb$M1E%aSJ(c5P@OQ>P(j-El$jAr[k`IXxIDz#2n{fxtOyb]3T-Yn#Vg_@IkbVr,[OxD#\|rBdqIb"hE0(0B(wZ^Sh%IfpM$qngF\e`tk`X\Y%kP(4H(.c0PP2Ct3@O{96Lk[>xI(b*gG~zbZ=lN\|zK#X0eqbM{id3 +,
Jul 4, 2024 00:24:03.643270016 CEST	466	IN	Data Raw: e0 c0 33 b2 76 ec f1 09 2e 11 80 9e 01 b8 51 92 1c 6f 26 8b 6b c0 00 02 b8 b9 22 03 e3 11 1b b0 4a cf 81 25 1d 4c 05 30 90 c8 03 03 cc fb 90 76 dc 15 6c 82 5a 30 e3 37 ed 02 0c 80 32 16 8b 44 f3 d6 ef 7b 01 d3 2b 72 7d 13 fa da 72 7c 81 86 78 6e Data Ascii: 3v.Qo&k"J%L0vlZ072D{+r}r\|xnth?"Ba#Tm:3`SU@DP!-1G.]y1BoIB$Ubw&<3;qURmb:^`I\O/b"p;{4Bq$pS6@

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:03.534594059 CEST	384	OUT	GET /images/logo.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.050939083 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:03 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:42 GMT ETag: "880d43-c0c-38c0fec00b780" Accept-Ranges: bytes Content-Length: 3084 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 a0 00 64 00 c4 00 00 00 00 00 33 03 03 2c 2b 2b 4c 05 05 6f 05 05 48 32 32 74 29 29 44 44 44 61 40 40 66 66 66 9a 00 00 b1 0a 0a 82 27 27 bb 32 32 d2 03 03 e5 13 13 cd 30 30 fa 2f 2f b0 51 51 cc 53 53 ff 4a 4a d4 73 73 fa 6d 6d 8a 8a 8a be 8f 8f bc bc bc f5 9b 9b d5 d5 d5 fa cb cb fb fb fb 00 00 00 00 00 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 a0 00 64 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 8e 76 7c bf 6d ad 5e 67 93 20 09 04 81 a4 32 a9 43 21 95 cd 28 4e 20 e4 fd 82 56 22 89 67 a1 78 29 91 c7 42 11 90 8a 0e 1d 0e c5 e1 28 9b df 30 aa f0 b7 11 b0 7c da 91 46 03 7e f8 1f 6c 0e 0b 03 66 03 1a 16 80 6d 70 8b 2d 09 78 74 07 77 43 3f 45 23 5e 7e 81 6c 89 0b 6e 4d 03 61 81 9d 8c a3 26 17 8f 94 92 74 95 22 7d 81 0b 9a 81 0a 52 01 99 8a a4 b7 24 19 a7 1b 17 26 02 07 09 09 07 72 aa 24 ad 6c 03 04 0e 98 6c 66 04 cf cf b8 d2 22 1b bb 19 25 09 d5 56 a6 93 79 ac a0 6c 65 0e e0 b6 22 4b 4c 27 [TRUNCATED] Data Ascii: GIF89ad3,++LoH22t))DDDa@@fff''2200//QQSSJJssmm!Ulead GIF SmartSaver Ver 2.0,d dihlp,tmxv\|m^g 2C!(N V"gx)B(0\|F~lfmp-xtwC?E#^~lnMa&t"}R$&r$llf"%Vyle"KL'OP-K'#7W#r>)@{, @Ca0N"2pa%j$\|( 4B>pbpt@ _:2+f`@h`2IRWlHG@" ADzJ^&EP:v-@e&,Ab;.6]V6D='GF;)jD[@JV`L"p0pmdT]@GuM5]x<7L(X7xr~e5'Gv?w ?}'[x}W`H{Z\|x24"\HO3h`u`"O%&'_GV)2aO&7_Ixr73>04dQ$oxLiWy4t`.cjGF6KYR'O3htWR`Dig3:Y'rXN%ehv(^eci4btZi(}EM&jc^rBrl<\|!imI&@
Jul 4, 2024 00:24:04.051260948 CEST	224	IN	Data Raw: 6d 38 b2 1a 36 c0 c2 ea cd c0 ae 82 3d 36 68 a8 b3 ae aa 36 af 99 81 44 80 18 a0 05 12 37 c8 08 c3 56 ca 2b c0 f6 85 05 6c 9e e4 68 8c 71 a3 3a 38 f8 c3 23 dc c1 1b b1 c5 27 d2 4b ce 6f 8f 8a 30 40 be b5 b0 15 72 38 fe ce 99 e9 af e0 0a 44 5c 1b Data Ascii: m86=6h6D7V+lhq:8#'Ko0@r8D\pO\#{m+M9'm\LBPY5,w4IucJ~/Ly2uDw(^`OAzTn
Jul 4, 2024 00:24:04.051270008 CEST	1236	IN	Data Raw: 07 eb 69 00 10 85 43 b2 0e 83 fe 30 5a f0 a7 3e 8d 78 d4 12 5e fc b6 9f fc 61 06 1f 9e 22 fc 56 32 d0 79 fb 1a 76 d1 9e 1e 86 a7 d9 9f df c0 ee 68 a1 17 81 ba e2 6e 4b eb e7 8a 3c a5 18 29 04 d6 8b fc 6f fb 27 f2 2d 2c 9f 81 db e0 72 5c a1 f7 32 Data Ascii: iC0Z>x^a"V2yvhnK<)o'-,r\2~'0S>l&%((Qa)1k}um[!`~5xBc@r2!f0G\J<:'rli8 d-!t6%)P}PkGZ,ig0
Jul 4, 2024 00:24:04.052015066 CEST	644	IN	Data Raw: 0b e8 05 76 d0 1f 84 68 da f2 1a c7 04 bf 86 cc ff e5 dc 63 45 f7 a2 db 75 b0 f6 8d 97 3c 70 7d f7 73 ce 68 4e 6c 9f 37 4d 53 32 eb 7a d4 75 b9 35 aa 9d 1d 89 6c 3f 1b dd 1d c0 73 77 52 8a 61 ac 4f 19 e6 d3 ce b6 d3 69 02 e6 5a b7 dc ce 58 96 39 Data Ascii: vhcEu<p}shNl7MS2zu5l?swRaOiZX9>}cs.PQck\i^mdk:,~g0qhcX,RZ[ZbNcyj)_nGUO}[CqOMmFhm\6>r

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:03.534645081 CEST	387	OUT	GET /images/inf-des.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.045190096 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:03 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d37-4cf-38c0fed506900" Accept-Ranges: bytes Content-Length: 1231 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 75 75 75 44 44 44 ba ba ba 30 30 30 10 10 10 ee ee ee 20 20 20 ce ce ce 99 99 99 de de de d9 d9 d9 89 89 89 65 65 65 aa aa aa 55 55 55 67 67 67 8b 8b 8b c9 c9 c9 d6 d6 d6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 b8 d1 30 d0 15 ea b0 41 61 77 c7 d2 11 3c 02 01 02 52 7f 31 7a 72 89 8a 8b 4c 01 8e 01 0f 78 2e 0f 83 39 04 01 31 01 04 3b 97 58 03 95 3b 82 84 51 9f a3 2f 9a 8c a9 aa ab 3c 8f 8f 10 2f 0d 01 b0 34 a8 00 9d 30 b6 99 9b 25 b8 56 a5 3c 10 b3 52 c0 b9 bc ac c8 c9 ca 2a 8e 00 08 0a 01 0b 23 86 23 7d 27 74 28 05 80 26 b6 9d 03 db 22 08 03 06 27 9a 74 e4 23 e2 e8 22 88 22 ba 23 de e0 00 da d7 92 d3 f6 00 ed 24 7b 25 08 fc fb 77 [TRUNCATED] Data Ascii: GIF89auuuDDD000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zn0Aaw<R1zrLx.91;X;Q/</40%V<R##}'t(&"'t#""#${%w@L$D_RH`WW5 9!+@r4-M]te<7"Zr)EtD$4BuFE"pLxA ~00VGGK/`x!a3Jh:?7Pz0ViNit?5[x&Y> $h: G@?Zn0xY6AH@,J8%DO@JqwwZVFiGar!DZERzrfTs$da\|X6D,0R_66WtH0&2@@a.X}aV(]{B("9dh)F3@#'&@,VGQ\|I&&(@3,&\ME>cu#rNA'(,Fh^<FSk\,ru*[c\|;+L]w57'mmo :fXpqj7j\|7bvpG&pby6`^%]6niA
Jul 4, 2024 00:24:04.045502901 CEST	251	IN	Data Raw: 54 e0 b0 c6 76 ec 71 12 ae 48 f8 58 48 06 8f 75 12 a6 42 46 e8 18 5c 13 87 08 a8 9f 02 8b c4 4d 63 43 6d 53 12 7c 7b a1 6a 2e 59 c3 b0 87 57 25 15 b3 1b 5a 01 d3 9e 5c 2f 09 90 d9 32 d6 53 28 84 37 4d 5b 6f ed 75 32 98 e0 10 ed c8 d4 d5 14 bd 0e Data Ascii: TvqHXHuBF\McCmS\|{j.YW%Z\/2S(7M[ou2_@c+'h58CCD@O50CBND+,*D$\|k!HU~wy8LICn;~J/hD@'<LGoWog}

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:03.534712076 CEST	388	OUT	GET /images/inf-tips.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.024930000 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:03 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:05 GMT ETag: "880d3c-513-38c0fed5fab40" Accept-Ranges: bytes Content-Length: 1299 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 44 44 44 75 75 75 ba ba ba 10 10 10 ee ee ee ce ce ce 20 20 20 30 30 30 d9 d9 d9 65 65 65 de de de 89 89 89 99 99 99 aa aa aa 55 55 55 67 67 67 8b 8b 8b d6 d6 d6 c9 c9 c9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 fa 5a 10 20 d6 36 84 a0 50 9a 83 13 03 88 08 af 97 d9 7f 02 09 70 83 84 85 54 01 01 47 02 01 03 86 31 03 01 02 24 90 0f 5f 08 88 04 00 97 01 99 8f 01 95 3f 9c 8e a3 a4 a5 40 88 43 90 92 8b 8d 4f a2 2b 04 89 40 aa 24 10 01 0d 5f 90 0e 92 ba 92 2d b4 b6 b8 a1 9d a6 c5 c6 c7 2e a8 24 6d 6f 23 6d 27 08 74 23 7f 93 91 00 ac 72 75 82 27 cc 24 72 d2 22 72 cd 22 05 cd dd 22 af 00 09 be 25 b1 24 eb e0 d0 db 09 e3 d7 f1 b4 2a cf ce ec 29 f4 22 d4 9a [TRUNCATED] Data Ascii: GIF89aDDDuuu 000eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.Z 6PpTG1$_?@CO+@$_-.$mo#m't#ru'$r"r""%$)"v@#O+MR:2j,lD}<p@V,2`@E\|U`>`"\|"@:Cb0(j>6xWI\yEJ&k'?vBzX}0H2Dt"z-a&:KA8lw'W67j<#@zWjh`)9ACWcu-$ pjI{jP@V%Eu."h(-wd0e!mBw@P7}7V#QgVBiUI,@("G@I$Be!S--IGwG$B(:Iqgl&-$NefI#i(Qcq%yB(S&dY1p9-T`=#j%r21\|3ZeyF1TQ(ON(IYXNrY@<Y%s.OqF+9bH4"NvF1S@tp@JIBk[8M4rKGk]G(
Jul 4, 2024 00:24:04.026055098 CEST	319	IN	Data Raw: 15 9e ac b6 0d 69 5e a5 92 14 b6 92 67 22 d0 9a e5 7c f5 49 86 cf be fd 46 c7 b2 bf d0 c6 0c c9 02 05 38 a0 87 4f 07 a4 0a ed bd b1 f4 f5 19 54 0e 5f 58 16 bd 1b 8a b2 dc 72 6d a6 ab f4 d2 46 ac 2b 9f 4e 7d b1 45 12 b1 90 de 6b ad 96 d6 34 68 58 Data Ascii: i^g"\|IF8OT_XrmF+N}Ek4hXTWnPCJNUXr`%']J,_'K&U?mS;8a5eUT1FH4U=`t@#\|^B6,C2,JG3E:;og@7SGog

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:03.534758091 CEST	388	OUT	GET /images/inf-free.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.035161018 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:03 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d38-71b-38c0fed506900" Accept-Ranges: bytes Content-Length: 1819 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 d5 00 00 00 00 00 10 10 10 20 20 00 20 20 20 30 30 30 60 60 0a 76 76 31 44 44 44 50 50 40 55 55 55 65 65 65 75 75 75 9a 9a 24 b4 b4 3e 8e 8e 4a 98 98 42 9a 9a 55 da da 1f ff ff 00 fe fe 0f ff ff 11 ec ec 31 f2 f2 37 f6 f6 3b df df 55 da da 64 ff ff 45 f9 f9 4f f2 f2 59 89 89 89 99 99 99 aa aa aa ba ba ba c8 c8 c8 ce ce ce d6 d6 d6 d9 d9 d9 de de de ee ee ee ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1d 42 75 69 6c 74 20 77 69 74 68 20 47 49 46 20 4d 6f 76 69 65 20 47 65 61 72 20 32 2e 36 00 21 f9 04 00 4b 00 00 00 2c 00 00 00 00 80 02 19 00 00 06 fe 40 80 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 b8 7c 4e af db ef f8 bc 7e cf ef fb ff 80 81 82 83 84 [TRUNCATED] Data Ascii: GIF89a 000``vv1DDDPP@UUUeeeuuu$>JBU17;UdEOY!NETSCAPE2.0!Built with GIF Movie Gear 2.6!K,@pH,rl:tJZvzxL.zn\|N~HwVIQFMJ ''"'%'v'P%IO'&F' M']B 'Iv''"'N&"^Dg_5D5.[\2(RNDjH&WDqdB2F+h2SE"$iJLH)rH{\|"r&b!VtI:$ihaS-['VR:[ )'=kB<q]"l%+Fv&nl-;IeuiuO,gL!dXMB]! 6bQ%}d^J:+\OHg\|]!q}pQR2&DcF)J=-"gWRqp[_%$0x pl9 G;6ZTu%A@;(p&VU_v{#w.\|`B&\|98?5O&vB'"S1(D=!'~ojy`hi6-J~,c1m).QI#$b
Jul 4, 2024 00:24:04.035377026 CEST	839	IN	Data Raw: 5f 7e d2 9a 9b 39 91 11 57 cf 70 70 a1 49 d1 2d bf fc 58 d0 39 3c 21 5b d0 96 a4 72 f7 c1 2f e3 2d 20 49 50 b3 ba ca 94 6f b6 98 f0 01 60 50 22 8a cf 94 21 05 56 ad 30 89 dd b2 ac b4 fe c0 e6 78 82 57 d0 24 66 57 43 e7 91 27 5e 2c e1 f5 85 6c ad Data Ascii: _~9WppI-X9<![r/- IPo`P"!V0xW$fWC'^,l joqS+6Cxxde(Zg[c`q(^+Tjeu-\!zy \H=zV!m>=CoBE3*-A<I_'_ljpk,XW#

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:03.534904957 CEST	388	OUT	GET /images/inf-help.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.029232025 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:03 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:05 GMT ETag: "880d39-4c4-38c0fed5fab40" Accept-Ranges: bytes Content-Length: 1220 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 75 75 75 44 44 44 ba ba ba de de de 30 30 30 10 10 10 ee ee ee 20 20 20 99 99 99 d9 d9 d9 65 65 65 89 89 89 ce ce ce 55 55 55 aa aa aa 67 67 67 8b 8b 8b d6 d6 d6 c9 c9 c9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a 9d 1e 0c 0e b7 81 81 ad 95 97 0e 83 84 fa 4d ef fb ff 6c 02 08 01 84 02 36 01 04 80 55 88 25 03 01 86 68 02 01 10 8a 95 96 97 57 92 01 05 04 84 0d 28 8e 90 23 a1 22 8c 60 92 03 62 a6 a3 8f 65 a8 00 0f 01 9f 98 b4 b5 b6 45 09 84 0c 22 09 10 73 bc 7c 00 a4 24 c3 88 78 70 23 06 a9 28 06 7a 26 78 24 09 c1 2d d2 c8 23 09 d6 00 af c0 ce 2f 6e 2e d8 27 d2 26 bf c2 cb a5 04 c7 22 c3 00 ca cf cb 09 e5 26 df 77 dd c9 f2 2a 76 d7 c1 db 25 d2 f6 bc [TRUNCATED] Data Ascii: GIF89auuuDDD000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zMl6U%hW(#"`beE"s\|$xp#(z&x$-#/n.'&"&wv%HIN0 `<Lid9&9C(X@yg PvLA%DnU1al@APD%:TD'bx>SCriI<-;b JjA9imP?%([TtWV cKE%df$9wI)lk @`&"fr2DK:d^?@,0!)SvUL" ~AfRymI&g5U+KI$4@92KFglu#qy0pOm#xcpTBFM2rN`$eNL) #S9"yI6$8QI"&V@\8r<0p$W9oGBG6mi+UIcAn)]hI!_@ynmB^))mJXQflm'X8wyd,][W;,nwX0 z,eJ\|I[YLU_L}
Jul 4, 2024 00:24:04.029496908 CEST	240	IN	Data Raw: 54 42 56 20 21 0b 93 c6 da fc 06 c1 6f 38 e9 62 14 9b cb e8 a5 93 3f 14 bf 36 95 08 70 69 84 8c b8 eb 4c c2 14 1c db b8 cc 98 56 71 9d 78 71 c6 73 4c a7 a9 bd 64 11 15 eb c6 1f f9 05 93 97 2e 6f f5 f1 1c af 0c a3 72 b5 f1 36 6c f5 d5 4b d0 13 cd Data Ascii: TBV !o8b?6piLVqxqsLd.or6lK45@(5:4)hMG*4N5#`-+Qx7x`_w~.AG:.~n[dD@o$7/S;

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:03.650191069 CEST	388	OUT	GET /images/inf-link.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.139605999 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:05 GMT ETag: "880d3a-59b-38c0fed5fab40" Accept-Ranges: bytes Content-Length: 1435 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 75 75 75 44 44 44 ba ba ba 10 10 10 ee ee ee 20 20 20 ce ce ce 89 89 89 65 65 65 99 99 99 30 30 30 de de de d9 d9 d9 aa aa aa 55 55 55 67 67 67 d6 d6 d6 c9 c9 c9 8b 8b 8b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 18 75 18 1c 46 03 c6 38 9c 2e 15 cc b1 f7 19 30 28 a4 ca f6 f5 52 ae ef fb ff 58 0b 01 83 0b 22 01 04 80 5b 87 25 03 01 02 31 8d 8f 02 01 0f 29 93 03 89 46 91 99 9c 9d 9e 3f 10 01 06 02 0d 98 00 8b 9f 37 97 3a a8 68 8e 90 af a1 09 96 01 a6 26 ab a9 34 9b b9 bc bd be b7 01 b3 24 87 6f 79 22 65 73 3a 0c 75 2d 07 c6 22 7c 2c c5 25 65 25 cb cf 00 05 67 b8 2d 6f 26 d5 ad 0c cb af 26 0c c9 8c e4 26 de 22 dc 25 dc c8 30 cb 77 70 d4 6a 2f 6f f6 2c f9 2f f2 22 91 d5 d6 [TRUNCATED] Data Ascii: GIF89auuuDDD eee000UUUggg!, dihlp,tmx\|pH,rl:tJZvzuF8.0(RX"[%1)F?7:h&4$oy"es:u-"\|,%e%g-o&&&"%0wpj/o,/"hd(c'`t(h1!D0x`F)_B@F&"R4tLhO0U5LT8zQVj4;6gM$`g0gHTf]Ud)A,j<dQC <x#3<`G >``Jpn8`tz>Dv4hh/;jb]xGkLOgv&O87k$R!~5}j[ rL]jdLQ%\|Mrg(&)"(#U+6:N,,B]TH_15uO-"wek]'V}APS5tI&pd]-Z6y_6:YFDf)$Ib"H 0GnKedc>$FkM9LY3kk]K$)mKg$KBOe#@O-jWY4Z&`L+[ikItnj#DEi\T9
Jul 4, 2024 00:24:04.139616966 CEST	455	IN	Data Raw: 77 86 45 c5 8d d5 30 23 02 14 d0 2d c7 a3 79 44 9c 71 19 95 fa 4a c6 b6 05 7b 6d 75 0e 5d 37 a2 ca 88 84 37 1e 09 62 99 76 b3 5d 0e 27 f8 ee 00 41 61 b3 8a 7e 83 8d 10 0a 02 16 3d 58 80 52 5f 96 40 34 7f e5 5a 49 42 c0 e4 b0 66 80 81 63 35 b9 e1 Data Ascii: wE0#-yDqJ{mu]77bv]'Aa~=XR_@4ZIBfc563 sW!qW( L[$xgVq@GJ$r[yM3XL=PBg.e<1E1soKe-UYBa%85 \|gt.<m

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://scamwebsite.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 346

Chrome Cache Entry: 347

Chrome Cache Entry: 348

Chrome Cache Entry: 349

Chrome Cache Entry: 350

Chrome Cache Entry: 351

Chrome Cache Entry: 352

Chrome Cache Entry: 353

Chrome Cache Entry: 354

Chrome Cache Entry: 355

Chrome Cache Entry: 356

Chrome Cache Entry: 357

Chrome Cache Entry: 358

Chrome Cache Entry: 359

Chrome Cache Entry: 360

Chrome Cache Entry: 361

Chrome Cache Entry: 362

Chrome Cache Entry: 363

Chrome Cache Entry: 364

Chrome Cache Entry: 365

Chrome Cache Entry: 366

Chrome Cache Entry: 367

Chrome Cache Entry: 368

Chrome Cache Entry: 369

Chrome Cache Entry: 370

Chrome Cache Entry: 371

Chrome Cache Entry: 372

Windows Analysis Report
http://scamwebsite.com/

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:04.132776022 CEST	290	OUT	GET /images/inf-samp.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.609595060 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d3b-5a6-38c0fed506900" Accept-Ranges: bytes Content-Length: 1446 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 44 44 44 75 75 75 ba ba ba 30 30 30 10 10 10 ce ce ce ee ee ee 20 20 20 aa aa aa 89 89 89 99 99 99 d9 d9 d9 de de de 65 65 65 55 55 55 67 67 67 c9 c9 c9 d6 d6 d6 8b 8b 8b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df df 84 20 61 95 1b 76 85 01 e4 68 98 c7 0a 02 65 80 30 02 77 34 09 05 55 02 89 70 8d 8e 6d 0c 01 92 0c 55 03 01 81 39 09 92 04 47 02 01 03 31 04 01 65 a2 2f 96 0a 35 08 01 8c 52 01 9c 8f b0 b1 63 10 01 08 03 0e 98 53 96 b9 37 96 0c bc 30 ae 31 9e a0 30 a5 64 c7 2d b4 0b 35 07 08 74 53 c2 b2 d3 d4 5a 96 cc 25 76 24 da 27 83 23 7d 28 05 d0 85 d9 b9 bb 23 8b db e4 27 7d ac e7 ec c0 00 ed 22 d2 29 e2 24 c4 27 eb df 85 c9 de 2f 02 [TRUNCATED] Data Ascii: GIF89aDDDuuu000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zn avhe0w4UpmU9G1e/5RcS7010d-5tSZ%v$'#}(#'}")$'/=H n&mc"J<`$\(bw:p`Q>Dp"R&ruGR;{(0uO?}JlC\2'Y%80S0:vUUFY_x\:D#Pb$M1E%aSJ(c5P@OQ>P(j-El$jAr[k`IXxIDz#2n{fxtOyb]3T-Yn#Vg_@IkbVr,[OxD#\|rBdqIb"hE0(0B(wZ^Sh%IfpM$qngF\e`tk`X\Y%kP(4H(.c0PP2Ct3@O{96Lk[>xI(b*gG~zbZ=lN\|zK#X0eqbM{id3 +,
Jul 4, 2024 00:24:04.609658003 CEST	466	IN	Data Raw: e0 c0 33 b2 76 ec f1 09 2e 11 80 9e 01 b8 51 92 1c 6f 26 8b 6b c0 00 02 b8 b9 22 03 e3 11 1b b0 4a cf 81 25 1d 4c 05 30 90 c8 03 03 cc fb 90 76 dc 15 6c 82 5a 30 e3 37 ed 02 0c 80 32 16 8b 44 f3 d6 ef 7b 01 d3 2b 72 7d 13 fa da 72 7c 81 86 78 6e Data Ascii: 3v.Qo&k"J%L0vlZ072D{+r}r\|xnth?"Ba#Tm:3`SU@DP!-1G.]y1BoIB$Ubw&<3;qURmb:^`I\O/b"p;{4Bq$pS6@

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:04.154587030 CEST	388	OUT	GET /images/hdr-welc.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.665265083 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:07 GMT ETag: "880d2a-69d-38c0fed7e2fc0" Accept-Ranges: bytes Content-Length: 1693 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 90 01 2d 00 c4 00 00 03 b0 b6 03 d7 d9 06 8b 93 03 6c 76 00 00 00 1c 25 2e 2a 39 46 00 00 17 4c 5d 6f 23 2e 39 0c 5a 67 08 4a 59 32 42 52 0c 7c 83 00 00 24 01 3b 4d 08 9c a3 28 67 74 37 4f 60 02 ed ee 16 1d 24 09 bc c0 00 00 0b 0b 0f 13 10 16 1b 00 01 2e 06 07 09 00 21 3c 00 1e 29 00 ff ff d9 d9 d9 00 19 40 21 f9 04 00 00 00 00 00 2c 00 00 00 00 90 01 2d 00 00 05 ff 20 21 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff 40 9e 66 48 0c 1a 8f c8 a4 72 c9 6c 3a 5b c4 a8 54 fa ac 5a af d8 ac 76 9b 9a 12 2f e0 8b 77 68 1a 6b ac 63 ae 7a cd 6e 3f a5 e1 b8 3c 6c ae 17 93 76 b2 7b cf ef fb 5f 51 71 18 83 84 85 72 66 73 62 79 8b 8c 53 87 51 7f 91 92 93 6c 5f 60 84 14 99 9a 9b 84 89 9e 89 8d a1 8e 9f 60 77 94 a7 a8 a9 47 96 17 18 9a 05 b0 b1 b1 9a 9d 73 85 b7 18 a4 ba bb a4 b8 b9 a5 7a aa c2 c3 c4 32 43 97 ae 14 b0 09 cc cd cd b0 b4 be c9 9b 99 86 ba d2 d8 b6 85 d4 14 83 c0 67 c5 e1 e2 e3 22 96 ae cb 06 e9 ea ea cf 05 d1 dc b2 d0 d1 d8 b7 dc f6 be f0 f2 dd b9 c1 e4 fe ff 94 [TRUNCATED] Data Ascii: GIF89a-lv%.9FL]o#.9ZgJY2BR\|$;M(gt7O`$.!<)@!,- !dihlp,tmx\|@fHrl:[TZv/whkczn?<lv{_QqrfsbySQl_``wGsz2Cg"R,KU,g,,/vSG>_<(]b[:)S;~s"P" P,PH` b.`/K1@%T!vL^+Te\'.J@v.r&vQQJf`uSV@vL6 (NKm2W(-bfa@<-rlfD@?XA~4Kz vUhdxI\eAIyXA:u03'~\!J"s,`@f!x`H&L6PF)etZ! %b(0#p@d#9!vA.BSj&eIu5nvZg%2Vi]&PYlv^F@@8+YJ67J=yW@QXN(zkZeF0\\fWQ`8 _Xt.Puc] W]
Jul 4, 2024 00:24:04.665293932 CEST	713	IN	Data Raw: 30 ab 5c 22 74 a9 c1 7d f9 5d f0 00 69 cc 2a 70 41 a6 17 bc 46 c0 99 98 92 a6 e6 01 1c a4 97 41 06 b6 8a db 6e c3 38 87 d3 eb 4f 0c 44 dc 56 9f 72 fd 69 c1 c8 37 fa 69 c1 a9 22 20 4d 82 06 ad 2e d0 27 07 c5 b2 15 c0 ca d8 6d 99 74 d1 00 1c 40 74 Data Ascii: 0\"t}]ipAFAn8ODVri7i" M.'mt@tL,Ez8A}{y\|V}^`cYl:^jA@x@A1MoY #x>Lsz]z.1f[)f=Z{el9tn

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:04.158087015 CEST	389	OUT	GET /images/housead3l.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.652092934 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:16 GMT ETag: "880d31-261c-38c0fee078400" Accept-Ranges: bytes Content-Length: 9756 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 d4 01 3c 00 f3 00 00 66 00 00 ff ff cc 66 99 99 66 33 66 cc cc cc 00 33 33 33 33 00 66 66 00 cc cc 66 00 00 00 99 99 00 ff ff 00 cc cc 00 ff ff ff cc 99 cc 99 cc ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 04 77 01 ff 00 2c 00 00 00 00 d4 01 3c 00 00 04 ff 10 c8 49 ab bd 38 eb cd bb ff 60 28 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 38 55 68 14 34 e5 f3 55 60 c6 a5 c7 f0 b8 ae a0 46 d7 4b 89 86 40 93 df 93 e8 41 04 0d 03 38 7d 41 80 72 89 55 82 1b 65 04 29 04 8f 1a 91 25 8c 40 82 77 35 94 97 0d 8a 4e 06 07 08 a2 07 06 72 6c 84 13 74 09 13 03 7a 26 05 91 98 02 99 b0 91 66 b3 22 98 a9 3c ba 35 b5 b2 99 1d 03 7e 28 bd 00 c1 9e 42 05 01 cc cc c8 5f 65 c4 65 ae 12 6c cf c7 d5 04 ab 74 75 b5 0d df 6d 14 de e0 c1 88 18 bd d1 02 da c7 e6 16 ed 1c 65 a8 14 98 dc 19 ef 8d 83 15 e3 df e5 d7 00 8c f5 42 d4 41 47 4d 02 b7 55 c9 7a 08 68 c6 0c 41 a9 38 0d 24 [TRUNCATED] Data Ascii: GIF89a<fff3f3333fff!NETSCAPE2.0!w,<I8`(dihlp,tmx\|pH,rl:tJZvz8Uh4U`FK@A8}ArUe)%@w5Nrltz&f"<5~(B_eeltumeBAGMUzhA8$`qBEqht%H8w])NE6o(SfS\|xLl^8ub}vV~TNCs,d!ybIh%UWx86JAdL W^"%\|.pL7k!V`5~jn8 ,T<K.u%7aT7himT\KXyD=GP3>ess=;]+=<x\JA g(X2F .J/aIvXptQZbilGCj8#BGABcIGFOQP1`[?#E%J"^0<l)dCr6Hy6`VdU+g\ZfNinGTVdde:Q xMNIAIQivpCy9# j:hBX&-*#Z=l!mq&aK5Z Xp%N!-"Kjx4\|8,,o[LYv0j!0z<.SDh
Jul 4, 2024 00:24:04.652180910 CEST	1236	IN	Data Raw: d6 71 0c 2f 0b f4 b6 ac 5a 18 14 2d 2b 5c 60 eb 91 96 57 85 8b 12 63 12 6f 82 be 07 13 9d c8 51 47 16 ce 15 7b f8 11 79 53 f5 8b 01 a0 a9 20 e4 73 44 48 9b 87 57 7e 3b a7 68 d5 9c 29 f5 14 53 79 ab d0 3c da 4e 9a 09 8d d3 72 b3 b2 93 df ca 1d 6c Data Ascii: q/Z-+\`WcoQG{yS sDHW~;h)Sy<Nrla$+Fb>yzGvaM,}N]#d"I1c:-dkC{.`3yB/^z/<\|BEo @Lk{
Jul 4, 2024 00:24:04.652190924 CEST	448	IN	Data Raw: 5b da c3 9a 71 20 70 90 16 f5 aa 3f 44 07 58 97 23 d4 23 18 35 b7 f2 e0 69 e1 71 51 bd cd f8 ed 13 0e e6 0e 58 97 8e 03 d4 b6 87 b5 6d ad 05 07 8e 20 01 66 3c c1 e8 4c c2 ed 16 8c fb da 99 8e 4b b4 2d f0 ec 2a 64 fb 04 ef ae 93 02 d3 0d bc ad 80 Data Ascii: [q p?DX##5iqQXm f<LK-dQL1H~~^SR] 8x_;MP}1 _A?@+,#\|hvGNbK!l/8pf\|9N'B'"7+WM/ GZio:4K>L\|3
Jul 4, 2024 00:24:04.652759075 CEST	1236	IN	Data Raw: 27 c0 62 79 87 e1 36 b1 10 0d 8e 90 4b 1e b1 11 3d 24 79 19 f1 23 c1 01 15 a7 95 2d 31 d4 7e 14 18 03 9b a7 06 7e 17 7f 00 30 7d d5 f0 00 d2 87 1d c5 a7 06 c7 c7 77 24 74 29 dd f7 4b 1d 31 5c fc b0 1c 3f 92 51 51 e2 4d de e4 58 da a0 16 d1 52 11 Data Ascii: 'by6K=$y#-1~~0}w$t)K1\?QQMXR4sV<b4zC}tQK!p,E'I8`(dihlp,tmx\|pH,rl&8mvL.kWR\|No^BPtgPVP
Jul 4, 2024 00:24:04.652770042 CEST	1236	IN	Data Raw: f4 bb f8 61 b8 b8 2e 97 25 51 59 7c 67 ae 9f c2 5a a2 17 17 b5 79 d6 6e 36 be 9a a3 52 d0 53 3e ad 0f 77 88 60 e7 78 fe 6f c4 78 6c 7e bf 0b e3 bf fa ac e1 6f d4 2e ed 97 63 58 95 56 15 3a ac 38 2e 6d da e8 df 2b 04 c5 28 92 dd ee 69 8d 21 9f 08 Data Ascii: a.%QY\|gZyn6RS>w`xoxl~o.cXV:8.m+(i!V7ea o4UX.l(y?f@uj;p=`3Sfi-TZ*9UR2f%qj`-,rB2y$lYG(l E+Rh$b#\aHh
Jul 4, 2024 00:24:04.652779102 CEST	1236	IN	Data Raw: 89 06 54 83 23 2c 88 89 89 08 8b 52 8d 21 06 5f 91 9a 80 94 4a 96 20 99 3f 03 90 9b 03 9d 48 9f 1f 3d 38 2f 9b 01 a6 56 a6 9e a9 1d 05 3e 30 07 a5 7a 68 37 02 2f 47 b4 1e 06 73 08 5e 9a 93 44 bc 3f 2e 45 c1 1e 36 04 8b a1 7f a7 09 35 7e 57 ce 21 Data Ascii: T#,R!_J ?H=8/V>0zh7/Gs^D?.E65~W!Hzq Fh.>-fL?`OWU"(?gkB.Tt9m@=!i!/#YR *0I!C-ED9-4(W+/Xu4 yO/ae4
Jul 4, 2024 00:24:04.652789116 CEST	672	IN	Data Raw: a9 af 38 8f 74 c7 a8 6d 51 2a c5 ab 9d 78 21 de 0d cc 41 52 11 74 89 62 95 dd 01 91 c0 5a c6 19 88 44 8b b2 99 f3 e4 0a 7e 06 26 9a 8b 99 82 0f 70 69 17 6b 40 4d a7 d1 e7 d2 88 54 10 43 8c a2 c0 4d d2 b0 f9 c5 f5 d1 b5 6e e8 00 b8 73 f3 b3 14 25 Data Ascii: 8tmQ*x!ARtbZD~&pik@MTCMns%xKHc!,a(I8}AaThrEe xOG,x V3K>.V3o'MSR`z%4=~#-YR
Jul 4, 2024 00:24:04.652800083 CEST	1236	IN	Data Raw: 7b 11 8a 38 62 85 b8 45 00 00 21 f9 04 05 00 00 0d 00 2c e3 00 0b 00 5d 00 28 00 00 04 ff 10 c8 49 ab bd 38 eb cd bb ff 60 28 8e 64 69 9e 68 aa 52 46 71 18 c6 2a cf 93 81 04 f8 41 ef ea 80 e3 08 9e d0 74 fb 11 86 48 51 11 77 4c 3a 3b 82 5f 00 d1 Data Ascii: {8bE!,](I8`(dihRFq*AtHQwL:;_ZXf`6;^Cx${NZCW:,WwK\|j-uVQ}tWq@k>90KtXu?1]80
Jul 4, 2024 00:24:04.652811050 CEST	1236	IN	Data Raw: 7f 20 3c 07 02 04 82 3d 84 35 0a 6e 99 6e 89 8d 8e 1a 06 07 08 08 93 76 50 08 3b 28 0c 0a 7d 33 09 a0 7b 6e 0c 7d 9d 8e a0 68 a5 b8 95 22 9a 89 97 0b 0c 7e 9e 39 b7 b8 b8 08 ba 21 07 98 63 60 2d b4 9e 1a 75 c5 d3 a6 c8 1e 13 83 cd 26 d0 1d d2 51 Data Ascii: <=5nnvP;(}3{n}h"~9!c`-u&Q?.OG<h dP}}F\|&B`GDHcu=*L6 %.sf`2hGG#t:4[q)H;84ZT$wqMiua-etD&\
Jul 4, 2024 00:24:04.653426886 CEST	241	IN	Data Raw: 4d 3b ba e8 e6 00 42 2f bb 8f 5b c1 b2 d3 40 d0 f7 dd dc 6f fa ed d6 db 67 bd a1 27 df 82 0c 36 58 d6 6c 00 7a c7 df 7d f4 e9 46 0f 84 cb 74 67 88 85 f4 b9 a6 4e 36 b1 e9 d6 1d 86 d8 58 e8 5d 84 0e a6 a8 e2 8a 3d f9 57 9f 7d 1e 8a d6 21 78 de c1 Data Ascii: M;B/[@og'6Xlz}FtgN6X]=W}!xtx`n@Z0l$};^cf'$XNk&62k(&)%6f Wf)'%Fyes&zkvhzr~>mvJgZg(F*.;

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:04.158144951 CEST	388	OUT	GET /images/inf-blnk.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.648283005 CEST	496	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:15 GMT ETag: "880d36-f2-38c0fedf841c0" Accept-Ranges: bytes Content-Length: 242 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 b3 03 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 03 00 2c 00 00 00 00 80 02 19 00 00 04 9f f0 c9 49 ab bd 38 eb cd bb ff 60 28 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 b8 7c 4e af db ef f8 bc 7e cf ef fb ff 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae af b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf c0 c1 c2 55 11 00 3b Data Ascii: GIF89a!,I8`(dihlp,tmx\|pH,rl:tJZvzxL.zn\|N~U;

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:04.160995960 CEST	385	OUT	GET /images/blank.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.679143906 CEST	379	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:27 GMT ETag: "880cec-7d-38c0feb1bd5c0" Accept-Ranges: bytes Content-Length: 125 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 0a 00 0a 00 b3 00 00 ff ff ff 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 03 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 0a 00 0a 00 40 04 0a 70 c8 49 ab bd 38 eb cd 7b 8e 00 3b Data Ascii: GIF89a!!Ulead GIF SmartSaver Ver 2.0,@pI8{;

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:04.168752909 CEST	388	OUT	GET /images/butsamp2.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.687129021 CEST	1004	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:58 GMT ETag: "880d04-2ed-38c0fecf4db80" Accept-Ranges: bytes Content-Length: 749 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 5d 00 12 00 c4 00 00 8d 8a 00 6d 6b 01 ce ca 01 fb f8 54 23 23 03 c4 c0 00 4b 4a 0b f9 f4 02 fa f7 3d fa f5 16 c8 c5 3a fa f6 2c 89 87 28 e9 e5 01 a6 a2 00 bb b7 00 fa f7 6b cc c9 4e aa a8 44 75 73 23 9a 97 00 e0 db 01 62 61 03 bf bc 2b a8 a5 17 f2 ed 00 b0 ac 00 7e 7c 13 3f 3d 01 e0 de 5e ea e6 30 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 5d 00 12 00 00 05 ff e0 27 8e a4 48 18 06 51 ae 6c eb be 70 2c af 44 34 20 c8 02 cc 73 04 1d 33 03 64 30 00 96 84 8b 00 0f 26 41 54 1c 82 83 40 b5 7c 29 12 8e d9 04 71 38 68 56 06 84 c0 52 75 5d 1f 9c 4d 02 fd 21 4c 18 0c f2 07 3e 79 a7 e0 2a 03 a3 1e 17 5d b3 1f 1c 70 0c 54 25 0c 0b 5d 05 1c 26 83 62 72 6f 7d 65 1f 57 02 06 6a 1a 1c 04 10 88 09 0b 05 1f 9b 09 9d 0b 1e 39 15 04 0c 03 a2 0b 0b 5f 7f 1f 12 aa 9d 09 06 2b 17 09 19 52 72 1d 08 a2 09 63 1f bc ab 9f 65 b7 0d 1a 16 14 1b a8 08 05 16 0e 09 8a 08 0d 0e 01 bf 00 d0 68 87 05 01 15 5e 93 58 a0 07 14 06 09 15 3b 25 11 07 05 ba 22 03 19 d5 bf 16 06 03 e7 d0 8a 65 e5 07 19 e8 73 0b 68 1b [TRUNCATED] Data Ascii: GIF89a]mkT##KJ=:,(kNDus#ba+~\|?=^0!,]'HQlp,D4 s3d0&AT@\|)q8hVRu]M!L>y]pT%]&bro}eWj9_+Rrceh^X;%"eshqp`+ KC@.Dl@alq!,P40u+(.8\F-5 `Da'vxPG,jr?T(5nAp _&`i\P2[jT(aG6[vCZ*7!<8B+C@k:.ijN2Wez-!hRrzgiAg/?[w3Q~U`,@j&<PA@jAA(9h@gA<DX@@%($pp^ C dA:(dQP8EFi3p`IbYT;

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:04.183954000 CEST	286	OUT	GET /images/logo.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.676882029 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:42 GMT ETag: "880d43-c0c-38c0fec00b780" Accept-Ranges: bytes Content-Length: 3084 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 a0 00 64 00 c4 00 00 00 00 00 33 03 03 2c 2b 2b 4c 05 05 6f 05 05 48 32 32 74 29 29 44 44 44 61 40 40 66 66 66 9a 00 00 b1 0a 0a 82 27 27 bb 32 32 d2 03 03 e5 13 13 cd 30 30 fa 2f 2f b0 51 51 cc 53 53 ff 4a 4a d4 73 73 fa 6d 6d 8a 8a 8a be 8f 8f bc bc bc f5 9b 9b d5 d5 d5 fa cb cb fb fb fb 00 00 00 00 00 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 a0 00 64 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 8e 76 7c bf 6d ad 5e 67 93 20 09 04 81 a4 32 a9 43 21 95 cd 28 4e 20 e4 fd 82 56 22 89 67 a1 78 29 91 c7 42 11 90 8a 0e 1d 0e c5 e1 28 9b df 30 aa f0 b7 11 b0 7c da 91 46 03 7e f8 1f 6c 0e 0b 03 66 03 1a 16 80 6d 70 8b 2d 09 78 74 07 77 43 3f 45 23 5e 7e 81 6c 89 0b 6e 4d 03 61 81 9d 8c a3 26 17 8f 94 92 74 95 22 7d 81 0b 9a 81 0a 52 01 99 8a a4 b7 24 19 a7 1b 17 26 02 07 09 09 07 72 aa 24 ad 6c 03 04 0e 98 6c 66 04 cf cf b8 d2 22 1b bb 19 25 09 d5 56 a6 93 79 ac a0 6c 65 0e e0 b6 22 4b 4c 27 [TRUNCATED] Data Ascii: GIF89ad3,++LoH22t))DDDa@@fff''2200//QQSSJJssmm!Ulead GIF SmartSaver Ver 2.0,d dihlp,tmxv\|m^g 2C!(N V"gx)B(0\|F~lfmp-xtwC?E#^~lnMa&t"}R$&r$llf"%Vyle"KL'OP-K'#7W#r>)@{, @Ca0N"2pa%j$\|( 4B>pbpt@ _:2+f`@h`2IRWlHG@" ADzJ^&EP:v-@e&,Ab;.6]V6D='GF;)jD[@JV`L"p0pmdT]@GuM5]x<7L(X7xr~e5'Gv?w ?}'[x}W`H{Z\|x24"\HO3h`u`"O%&'_GV)2aO&7_Ixr73>04dQ$oxLiWy4t`.cjGF6KYR'O3htWR`Dig3:Y'rXN%ehv(^eci4btZi(}EM&jc^rBrl<\|!imI&@
Jul 4, 2024 00:24:04.677112103 CEST	1236	IN	Data Raw: 6d 38 b2 1a 36 c0 c2 ea cd c0 ae 82 3d 36 68 a8 b3 ae aa 36 af 99 81 44 80 18 a0 05 12 37 c8 08 c3 56 ca 2b c0 f6 85 05 6c 9e e4 68 8c 71 a3 3a 38 f8 c3 23 dc c1 1b b1 c5 27 d2 4b ce 6f 8f 8a 30 40 be b5 b0 15 72 38 fe ce 99 e9 af e0 0a 44 5c 1b Data Ascii: m86=6h6D7V+lhq:8#'Ko0@r8D\pO\#{m+M9'm\LBPY5,w4IucJ~/Ly2uDw(^`OAzTniC0Z>x
Jul 4, 2024 00:24:04.677123070 CEST	868	IN	Data Raw: 68 47 73 a7 c7 97 5c 72 89 8b 88 e1 7f 4a 98 0a 5b ae f2 08 a8 3c 65 08 23 ba ce 10 7a a3 4c 0f e2 69 52 c7 19 d0 1f 86 e3 a4 67 13 33 09 72 98 a6 57 de 75 a5 7b cd 67 5a 8f 7a d4 a6 2e 2a 73 b3 9c 0d 00 fc c2 d9 ad c6 32 9a 1d 01 6b 5e 27 b6 cb Data Ascii: hGs\rJ[<e#zLiRg3rWu{gZz.*s2k^'2vLcI3;0`4S9V@Mi^miu90vZMR8%^$.G_ 1@:WWyr6{kcEvh

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:04.184500933 CEST	289	OUT	GET /images/inf-des.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.705984116 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d37-4cf-38c0fed506900" Accept-Ranges: bytes Content-Length: 1231 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 75 75 75 44 44 44 ba ba ba 30 30 30 10 10 10 ee ee ee 20 20 20 ce ce ce 99 99 99 de de de d9 d9 d9 89 89 89 65 65 65 aa aa aa 55 55 55 67 67 67 8b 8b 8b c9 c9 c9 d6 d6 d6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 b8 d1 30 d0 15 ea b0 41 61 77 c7 d2 11 3c 02 01 02 52 7f 31 7a 72 89 8a 8b 4c 01 8e 01 0f 78 2e 0f 83 39 04 01 31 01 04 3b 97 58 03 95 3b 82 84 51 9f a3 2f 9a 8c a9 aa ab 3c 8f 8f 10 2f 0d 01 b0 34 a8 00 9d 30 b6 99 9b 25 b8 56 a5 3c 10 b3 52 c0 b9 bc ac c8 c9 ca 2a 8e 00 08 0a 01 0b 23 86 23 7d 27 74 28 05 80 26 b6 9d 03 db 22 08 03 06 27 9a 74 e4 23 e2 e8 22 88 22 ba 23 de e0 00 da d7 92 d3 f6 00 ed 24 7b 25 08 fc fb 77 [TRUNCATED] Data Ascii: GIF89auuuDDD000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zn0Aaw<R1zrLx.91;X;Q/</40%V<R##}'t(&"'t#""#${%w@L$D_RH`WW5 9!+@r4-M]te<7"Zr)EtD$4BuFE"pLxA ~00VGGK/`x!a3Jh:?7Pz0ViNit?5[x&Y> $h: G@?Zn0xY6AH@,J8%DO@JqwwZVFiGar!DZERzrfTs$da\|X6D,0R_66WtH0&2@@a.X}aV(]{B("9dh)F3@#'&@,VGQ\|I&&(@3,&\ME>cu#rNA'(,Fh^<FSk\,ru*[c\|;+L]w57'mmo :fXpqj7j\|7bvpG&pby6`^%]6niA
Jul 4, 2024 00:24:04.706052065 CEST	251	IN	Data Raw: 54 e0 b0 c6 76 ec 71 12 ae 48 f8 58 48 06 8f 75 12 a6 42 46 e8 18 5c 13 87 08 a8 9f 02 8b c4 4d 63 43 6d 53 12 7c 7b a1 6a 2e 59 c3 b0 87 57 25 15 b3 1b 5a 01 d3 9e 5c 2f 09 90 d9 32 d6 53 28 84 37 4d 5b 6f ed 75 32 98 e0 10 ed c8 d4 d5 14 bd 0e Data Ascii: TvqHXHuBF\McCmS\|{j.YW%Z\/2S(7M[ou2_@c+'h58CCD@O50CBND+,*D$\|k!HU~wy8LICn;~J/hD@'<LGoWog}

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:04.186347008 CEST	290	OUT	GET /images/inf-free.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.697068930 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d38-71b-38c0fed506900" Accept-Ranges: bytes Content-Length: 1819 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 d5 00 00 00 00 00 10 10 10 20 20 00 20 20 20 30 30 30 60 60 0a 76 76 31 44 44 44 50 50 40 55 55 55 65 65 65 75 75 75 9a 9a 24 b4 b4 3e 8e 8e 4a 98 98 42 9a 9a 55 da da 1f ff ff 00 fe fe 0f ff ff 11 ec ec 31 f2 f2 37 f6 f6 3b df df 55 da da 64 ff ff 45 f9 f9 4f f2 f2 59 89 89 89 99 99 99 aa aa aa ba ba ba c8 c8 c8 ce ce ce d6 d6 d6 d9 d9 d9 de de de ee ee ee ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1d 42 75 69 6c 74 20 77 69 74 68 20 47 49 46 20 4d 6f 76 69 65 20 47 65 61 72 20 32 2e 36 00 21 f9 04 00 4b 00 00 00 2c 00 00 00 00 80 02 19 00 00 06 fe 40 80 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 b8 7c 4e af db ef f8 bc 7e cf ef fb ff 80 81 82 83 84 [TRUNCATED] Data Ascii: GIF89a 000``vv1DDDPP@UUUeeeuuu$>JBU17;UdEOY!NETSCAPE2.0!Built with GIF Movie Gear 2.6!K,@pH,rl:tJZvzxL.zn\|N~HwVIQFMJ ''"'%'v'P%IO'&F' M']B 'Iv''"'N&"^Dg_5D5.[\2(RNDjH&WDqdB2F+h2SE"$iJLH)rH{\|"r&b!VtI:$ihaS-['VR:[ )'=kB<q]"l%+Fv&nl-;IeuiuO,gL!dXMB]! 6bQ%}d^J:+\OHg\|]!q}pQR2&DcF)J=-"gWRqp[_%$0x pl9 G;6ZTu%A@;(p&VU_v{#w.\|`B&\|98?5O&vB'"S1(D=!'~ojy`hi6-J~,c1m).QI#$b
Jul 4, 2024 00:24:04.697110891 CEST	839	IN	Data Raw: 5f 7e d2 9a 9b 39 91 11 57 cf 70 70 a1 49 d1 2d bf fc 58 d0 39 3c 21 5b d0 96 a4 72 f7 c1 2f e3 2d 20 49 50 b3 ba ca 94 6f b6 98 f0 01 60 50 22 8a cf 94 21 05 56 ad 30 89 dd b2 ac b4 fe c0 e6 78 82 57 d0 24 66 57 43 e7 91 27 5e 2c e1 f5 85 6c ad Data Ascii: _~9WppI-X9<![r/- IPo`P"!V0xW$fWC'^,l joqS+6Cxxde(Zg[c`q(^+Tjeu-\!zy \H=zV!m>=CoBE3*-A<I_'_ljpk,XW#

Timestamp	Bytes transferred	Direction	Data
Jul 4, 2024 00:24:04.190220118 CEST	290	OUT	GET /images/inf-help.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 4, 2024 00:24:04.692451954 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 03 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:05 GMT ETag: "880d39-4c4-38c0fed5fab40" Accept-Ranges: bytes Content-Length: 1220 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 75 75 75 44 44 44 ba ba ba de de de 30 30 30 10 10 10 ee ee ee 20 20 20 99 99 99 d9 d9 d9 65 65 65 89 89 89 ce ce ce 55 55 55 aa aa aa 67 67 67 8b 8b 8b d6 d6 d6 c9 c9 c9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a 9d 1e 0c 0e b7 81 81 ad 95 97 0e 83 84 fa 4d ef fb ff 6c 02 08 01 84 02 36 01 04 80 55 88 25 03 01 86 68 02 01 10 8a 95 96 97 57 92 01 05 04 84 0d 28 8e 90 23 a1 22 8c 60 92 03 62 a6 a3 8f 65 a8 00 0f 01 9f 98 b4 b5 b6 45 09 84 0c 22 09 10 73 bc 7c 00 a4 24 c3 88 78 70 23 06 a9 28 06 7a 26 78 24 09 c1 2d d2 c8 23 09 d6 00 af c0 ce 2f 6e 2e d8 27 d2 26 bf c2 cb a5 04 c7 22 c3 00 ca cf cb 09 e5 26 df 77 dd c9 f2 2a 76 d7 c1 db 25 d2 f6 bc [TRUNCATED] Data Ascii: GIF89auuuDDD000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zMl6U%hW(#"`beE"s\|$xp#(z&x$-#/n.'&"&wv%HIN0 `<Lid9&9C(X@yg PvLA%DnU1al@APD%:TD'bx>SCriI<-;b JjA9imP?%([TtWV cKE%df$9wI)lk @`&"fr2DK:d^?@,0!)SvUL" ~AfRymI&g5U+KI$4@92KFglu#qy0pOm#xcpTBFM2rN`$eNL) #S9"yI6$8QI"&V@\8r<0p$W9oGBG6mi+UIcAn)]hI!_@ynmB^))mJXQflm'X8wyd,][W;,nwX0 z,eJ\|I[YLU_L}
Jul 4, 2024 00:24:04.692462921 CEST	240	IN	Data Raw: 54 42 56 20 21 0b 93 c6 da fc 06 c1 6f 38 e9 62 14 9b cb e8 a5 93 3f 14 bf 36 95 08 70 69 84 8c b8 eb 4c c2 14 1c db b8 cc 98 56 71 9d 78 71 c6 73 4c a7 a9 bd 64 11 15 eb c6 1f f9 05 93 97 2e 6f f5 f1 1c af 0c a3 72 b5 f1 36 6c f5 d5 4b d0 13 cd Data Ascii: TBV !o8b?6piLVqxqsLd.or6lK45@(5:4)hMG*4N5#`-+Qx7x`_w~.AG:.~n[dD@o$7/S;