Edit tour

Windows Analysis Report
http://scamwebsite.com/

Overview

General Information

Sample URL:	http://scamwebsite.com/
Analysis ID:	1468408
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body with high number of embedded SVGs detected

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6768 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1976 --field-trial-handle=1908,i,5134368397912986906,1571857433472792922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6268 --field-trial-handle=1908,i,5134368397912986906,1571857433472792922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6504 --field-trial-handle=1908,i,5134368397912986906,1571857433472792922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3636 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://scamwebsite.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://scamwebsite.com/

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://scamwebsite.com/baddesign.gif	Avira URL Cloud: Label: malware
Source: https://scamwebsite.com/style.css	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://scamwebsite.com

LLM: Score: 9 brands: Roblox Reasons: The URL 'https://scamwebsite.com' is highly suspicious and does not match the legitimate domain 'roblox.com'. The page contains multiple elements that are indicative of phishing, such as the use of the brand name 'Roblox' in a misleading manner, and the presence of suspicious links. The site uses social usering techniques to mislead users into clicking on potentially harmful links. The overall design and content of the page are unprofessional and inconsistent with the legitimate brand's website. Therefore, it is concluded that this site is a phishing site. DOM: 16.26.pages.csv

Source: https://www.youtube.com/watch?v=dQw4w9WgXcQ	HTTP Parser: Total embedded SVG size: 107200
Source: https://www.youtube.com/	HTTP Parser: Total embedded SVG size: 142627

Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en&ifkv=AdF4I77FxEWI2uljz0hCW4Mo5yudEi2pWYfqB5YUPrp9mcgLiVilYdQ-VXb6wqtQrAaBlHIO1hccLQ&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-703722021%3A1720218213706676&ddm=0	HTTP Parser: No favicon
Source: http://www.addesigner.com/	HTTP Parser: No favicon
Source: http://www.addesigner.com/	HTTP Parser: No favicon
Source: http://www.addesigner.com/	HTTP Parser: No favicon
Source: http://www.addesigner.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:59678 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.6:49727 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:54809 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:62581 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:59529 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style.css HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Robux.png HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Untitled.png HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adban.gif HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Robuxb.png HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Robux.png HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Untitled.png HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adban.gif HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Robuxb.png HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20240702/r20110914/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-3935057531723584&output=html&adk=1812271804&adf=1573534164&abgtt=6&lmt=1718826837&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&plas=404x714_l%7C404x714_r&format=0x0&url=https%3A%2F%2Fscamwebsite.com%2F&pra=5&wgl=1&easpi=0&aihb=0&asro=0&ailel=27~29~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~30&aiael=27~29~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~30&aifxl=27_9~29_10~30_19&aiixl=27_3~29_5~30_6&aslmct=0.7&asamct=0.7&aisaib=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1720218192098&bpp=11&bdt=1903&idt=1964&shv=r20240702&mjsv=m202407030101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=611572420916&frm=20&pv=2&ga_vid=1317398878.1720218194&ga_sid=1720218194&ga_hid=1817107277&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759842%2C44795922%2C95330413%2C95330414%2C95331689%2C95334511%2C95334526%2C95334564%2C95337026%2C31085085%2C31084184%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=2845697940934312&tmod=894593943&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=2165 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-3935057531723584&output=html&h=600&slotname=6407757917&adk=730000781&adf=3025194257&pi=t.ma~as.6407757917&w=1200&abgtt=6&cr_col=4&cr_row=2&fwrn=2&lmt=1718826837&rafmt=9&format=1200x600&url=https%3A%2F%2Fscamwebsite.com%2F&crui=image_stacked&fwr=0&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1720218192109&bpp=7&bdt=1914&idt=2165&shv=r20240702&mjsv=m202407030101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=611572420916&frm=20&pv=1&ga_vid=1317398878.1720218194&ga_sid=1720218194&ga_hid=1817107277&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=863&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759842%2C44795922%2C95330413%2C95330414%2C95331689%2C95334511%2C95334526%2C95334564%2C95337026%2C31085085%2C31084184%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=2845697940934312&tmod=894593943&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CEe%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=2172 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dQw4w9WgXcQ HTTP/1.1Host: youtu.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch?v=dQw4w9WgXcQ&feature=youtu.be HTTP/1.1Host: www.youtube.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: rr4---sn-ab5l6nk6.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?conn2 HTTP/1.1Host: rr4---sn-ab5l6nk6.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/cssbin/www-main-desktop-watch-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/cssbin/www-main-desktop-player-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/cssbin/www-onepick.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/_/ytmainappweb/_/ss/k=ytmainappweb.kevlar_base.NEztMi2xf6I.L.B1.O/am=AAABWg/d=0/rs=AGKMywF2a-tVXN2dD3tmujlBsLw2usjk1Q HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/desktop_polymer.vflset/desktop_polymer.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/webcomponents-sd.vflset/webcomponents-sd.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/scheduler.vflset/scheduler.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/intersection-observer.min.vflset/intersection-observer.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/spf.vflset/spf.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/network.vflset/network.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/offline.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/miniplayer.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/captions.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /sb/dQw4w9WgXcQ/storyboard3_L1/M0.jpg?sqp=-oaymwENSDfyq4qpAwVwAcABBqLzl_8DBginqfCoBg==&sigh=rs%24AOn4CLBDzoUQQHE8XWHw2U31Ra19yy-sOg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/playback?ns=yt&el=detailpage&cpn=RW_NGME8hNxndfs2&ver=2&cmt=0.006&fmt=397&fs=0&rt=1.537&euri&lact=922&cl=648515301&mos=0&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&fexp=v1%2C23986033%2C18611%2C49740%2C154381%2C230596%2C104308%2C6789%2C16229%2C133212%2C14625955%2C11684381%2C7111%2C24166%2C12177%2C9954%2C1192%2C7913%2C340%2C17970%2C273%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C13180%2C15972%2C2196%2C9996%2C19%2C2%2C1082%2C6953%2C101%2C3100%2C7843%2C2471%2C6008%2C150%2C1388%2C142%2C571%2C2585%2C8134%2C145%2C1088%2C1375%2C3761%2C3157%2C3975%2C681%2C1590%2C3370%2C374%2C3134%2C4327%2C500%2C2465%2C793%2C1782%2C15%2C322&rtn=4&feature=youtu.be&afmt=251&muted=0&docid=dQw4w9WgXcQ&ei=XXKIZu6yKKbOi9oPrqS3gAM&plid=AAYch4MV_DQN78_g&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRMM0JCOVNtSm9DSmhJc2ZBcGtCMXlmZ2lMeU9SWlYzUVI5X0tUTkUxZ3h0QWJcQVBta0tESVl4WU1HQmVDNGE1dGh4bzRmekVRalZxMFJQR2ZhNEw4OExmOVVSVDhFb3pPVWVYWWMxWkpvZ0FnMFM3OFFaMlVNZzFZS1ZtdDNjUHE2X3I3RmkyeVE HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1720218212356X-YouTube-Page-CL: 648891308X-Goog-Event-Time: 1720218212356X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.134"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtPcTZSSzhLNzNqVSjd5KG0BjIKCgJVUxIEGgAgHg%3D%3DX-YouTube-Ad-Signals: dt=1720218210579&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /ptracking?html5=1&video_id=dQw4w9WgXcQ&cpn=RW_NGME8hNxndfs2&ei=XXKIZu6yKKbOi9oPrqS3gAM&ptk=youtube_single&oid=QuEoptyF_C_7jHTEUMsRjA&ptchn=uAXFkgsw1L7xaCfnd5JJOw&pltype=content&m=A8iV7gBqrooRskisHYSMQfUIMG01BteETyqQX3ZnGc4BRfyZZsXGL1jK8QlX4pBTp1Z9FuWHfjmzQow-WGE32POf HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-YouTube-Page-CL: 648891308sec-ch-ua-platform-version: "10.0.0"X-YouTube-Utc-Offset: -240sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.134"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtPcTZSSzhLNzNqVSjd5KG0BjIKCgJVUxIEGgAgHg%3D%3DX-YouTube-Ad-Signals: dt=1720218210579&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=1 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sb/dQw4w9WgXcQ/storyboard3_L1/M0.jpg?sqp=-oaymwENSDfyq4qpAwVwAcABBqLzl_8DBginqfCoBg==&sigh=rs%24AOn4CLBDzoUQQHE8XWHw2U31Ra19yy-sOg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=1018028261&utuid=uAXFkgsw1L7xaCfnd5JJOw HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-YouTube-Page-CL: 648891308sec-ch-ua-platform-version: "10.0.0"X-YouTube-Utc-Offset: -240sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.134"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtPcTZSSzhLNzNqVSjd5KG0BjIKCgJVUxIEGgAgHg%3D%3DX-YouTube-Ad-Signals: dt=1720218210579&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/endscreen.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/annotations_module.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&is_vtc=0&ptype=f_view&random=862977133&utuid=uAXFkgsw1L7xaCfnd5JJOw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/QJjrf9RkzGo/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/mIHHfNVfhPk/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&is_vtc=0&ptype=f_view&random=862977133&utuid=uAXFkgsw1L7xaCfnd5JJOw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/QJjrf9RkzGo/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=RW_NGME8hNxndfs2&ver=2&cmt=2.688&fmt=397&fs=0&rt=4.247&euri&lact=2560&cl=648515301&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=14&feature=youtu.be&afmt=251&idpj=-8&ldpj=-1&rti=4&st=0&et=2.688&muted=0&docid=dQw4w9WgXcQ&ei=XXKIZu6yKKbOi9oPrqS3gAM&plid=AAYch4MV_DQN78_g&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRMM0JCOVNtSm9DSmhJc2ZBcGtCMXlmZ2lMeU9SWlYzUVI5X0tUTkUxZ3h0QWJcQVBta0tESVl4WU1HQmVDNGE1dGh4bzRmekVRalZxMFJQR2ZhNEw4OExmOVVSVDhFb3pPVWVYWWMxWkpvZ0FnMFM3OFFaMlVNZzFZS1ZtdDNjUHE2X3I3RmkyeVE HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1720218215066X-YouTube-Page-CL: 648891308X-Goog-Event-Time: 1720218215066X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.134"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtPcTZSSzhLNzNqVSjd5KG0BjIKCgJVUxIEGgAgHg%3D%3DX-YouTube-Ad-Signals: dt=1720218210579&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/search/audio/failure.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /vi/mIHHfNVfhPk/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/no_input.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/open.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/QMW4AqbuSGg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD0bomMOfrJhL8N-GImSSj3RuroVw HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/success.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /vi/QaZJgj2GfGQ/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBNJxOfo5dWZskA3a-beb64l5qjgQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/F2AitTPI5U0/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDf2BSkI4bT2L_XH4zQ9mxl1iDvwQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/2WN0T-Ee3q4/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDBJhetB_Ij-EZIiulWIHnRpjcgeQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=2 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/YHusMq92Seo/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDeDZlGg0yjWPFilNQp8C34s90xCA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/h_D3VFfhvs4/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDthV7boxzXbMs3GnRoi4b2REY-UA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=3 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=nEHtZ4CSdXTZ2zvAz6dsPbQmRaJPeesN5y6JKo0wmVVx1TDq3SuZsQOjacRdaTbQQddNhZg4sZkYurDqBcgf-EvB3Vl2MzlaHqLN6EcjqvUka2ExP0K8T-ZSBqsIMWUsMzq610uYyVxwEgBPPepxWNZGpG2_dqibccWZjZ6pNY4
Source: global traffic	HTTP traffic detected: GET /vi/QMW4AqbuSGg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD0bomMOfrJhL8N-GImSSj3RuroVw HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s48-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/djV11Xbc914/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCUVjcnPQDSHGvb0uU0snHDJaVnYg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEWCKgBEF5IWvKriqkDCQgBFQAAiEIYAQ==&rs=AOn4CLBf45ycDkHw60O072DkeCeAw0TV-w HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/QaZJgj2GfGQ/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBNJxOfo5dWZskA3a-beb64l5qjgQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0618555145&ei=kCGaja5SAFUJGa1cMI0ahNX&ip=96.84.16.66&id=o-AFc2wFIAKHRaggdp6GzoOHRfSfUK094fk0o8Y2FFSiJgq&itag=18&source=youtube&requiressl=yes&mh=X6&mm=997%2C38384%2C55302&mn=7Jqo5%2CxiEOs%2CdbWN0&ms=7Jqo5%2CxiEOs%2CdbWN0&mv=1&mvi=6&pl=47&ctier=L&initcwndbps=0241649&siu=6&spc=RWjmFLTNshyy5L6D_bmDBmB9X8wQG0c8VoSJoEOvvYyy&vprv=6&svpuc=6&mime=video%2Fmp4&ns=BQNtaDwuL2nv4j5HpQcshLLR&cnr=47&ratebypass=yes&dur=29407534&lmt=2916674324818561&mt=0618555145&fvip=3&c=WEB&txp=0241649&n=6X1YA94dmMKsABqZ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=kqWGYsUjcdx0e3KpKZlw5TgknVuyQeFdB3gY3-qU1yRDWe9iUgnzgpNh0ghE0QEUXhlwmy_1EwrZp4UDlHINz5HWfPEFcKzPfTXXQ9h64rrI&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=kqWGYsUjcdx0e3KpKZlw5TgknVuyQeFdB3gY3-qU1yRDWe9iUgnzgpNh0ghE0QEUXhlwmy_1EwrZp4UDlHINz5HWfPEFcKzPfTXXQ9h64rrI HTTP/1.1Host: rr2---sn-ntqe6nee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0618555145&ei=kCGaja5SAFUJGa1cMI0ahNX&ip=96.84.16.66&id=o-AFc2wFIAKHRaggdp6GzoOHRfSfUK094fk0o8Y2FFSiJgq&itag=18&source=youtube&requiressl=yes&mh=X6&mm=997%2C38384%2C55302&mn=7Jqo5%2CxiEOs%2CdbWN0&ms=7Jqo5%2CxiEOs%2CdbWN0&mv=1&mvi=6&pl=47&initcwndbps=0241649&siu=6&spc=RWjmFLTNshyy5L6D_bmDBmB9X8wQG0c8VoSJoEOvvYyy&vprv=6&svpuc=6&mime=video%2Fmp4&ns=BQNtaDwuL2nv4j5HpQcshLLR&cnr=47&ratebypass=yes&dur=29407534&lmt=2916674324818561&mt=0618555145&fvip=3&c=WEB&txp=0241649&n=6X1YA94dmMKsABqZ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=kqWGYsUjcdx0e3KpKZlw5TgknVuyQeFdB3gY3-qU1yRDWe9iUgnzgpNh0ghE0QEUXhlwmy_1EwrZp4UDlHINz5HWfPEFcKzPfTXXQ9h64rrI&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=kqWGYsUjcdx0e3KpKZlw5TgknVuyQeFdB3gY3-qU1yRDWe9iUgnzgpNh0ghE0QEUXhlwmy_1EwrZp4UDlHINz5HWfPEFcKzPfTXXQ9h64rrI HTTP/1.1Host: rr2---sn-ntqe6nee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/2WN0T-Ee3q4/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDBJhetB_Ij-EZIiulWIHnRpjcgeQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/F2AitTPI5U0/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDf2BSkI4bT2L_XH4zQ9mxl1iDvwQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/feedback?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /vi/YHusMq92Seo/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDeDZlGg0yjWPFilNQp8C34s90xCA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/h_D3VFfhvs4/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDthV7boxzXbMs3GnRoi4b2REY-UA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=nEHtZ4CSdXTZ2zvAz6dsPbQmRaJPeesN5y6JKo0wmVVx1TDq3SuZsQOjacRdaTbQQddNhZg4sZkYurDqBcgf-EvB3Vl2MzlaHqLN6EcjqvUka2ExP0K8T-ZSBqsIMWUsMzq610uYyVxwEgBPPepxWNZGpG2_dqibccWZjZ6pNY4
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/serviceworker-kevlar-appshell.vflset/serviceworker-kevlar-appshell.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEWCKgBEF5IWvKriqkDCQgBFQAAiEIYAQ==&rs=AOn4CLBf45ycDkHw60O072DkeCeAw0TV-w HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0618555145&ei=kCGaja5SAFUJGa1cMI0ahNX&ip=96.84.16.66&id=o-AFc2wFIAKHRaggdp6GzoOHRfSfUK094fk0o8Y2FFSiJgq&itag=18&source=youtube&requiressl=yes&mh=X6&mm=997%2C38384%2C55302&mn=7Jqo5%2CxiEOs%2CdbWN0&ms=7Jqo5%2CxiEOs%2CdbWN0&mv=1&mvi=6&pl=47&initcwndbps=0241649&siu=6&spc=RWjmFLTNshyy5L6D_bmDBmB9X8wQG0c8VoSJoEOvvYyy&vprv=6&svpuc=6&mime=video%2Fmp4&ns=BQNtaDwuL2nv4j5HpQcshLLR&cnr=47&ratebypass=yes&dur=29407534&lmt=2916674324818561&mt=0618555145&fvip=3&c=WEB&txp=0241649&n=6X1YA94dmMKsABqZ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=kqWGYsUjcdx0e3KpKZlw5TgknVuyQeFdB3gY3-qU1yRDWe9iUgnzgpNh0ghE0QEUXhlwmy_1EwrZp4UDlHINz5HWfPEFcKzPfTXXQ9h64rrI&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=kqWGYsUjcdx0e3KpKZlw5TgknVuyQeFdB3gY3-qU1yRDWe9iUgnzgpNh0ghE0QEUXhlwmy_1EwrZp4UDlHINz5HWfPEFcKzPfTXXQ9h64rrI HTTP/1.1Host: rr2---sn-ntqe6nee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0618555145&ei=kCGaja5SAFUJGa1cMI0ahNX&ip=96.84.16.66&id=o-AFc2wFIAKHRaggdp6GzoOHRfSfUK094fk0o8Y2FFSiJgq&itag=18&source=youtube&requiressl=yes&mh=X6&mm=997%2C38384%2C55302&mn=7Jqo5%2CxiEOs%2CdbWN0&ms=7Jqo5%2CxiEOs%2CdbWN0&mv=1&mvi=6&pl=47&ctier=L&initcwndbps=0241649&siu=6&spc=RWjmFLTNshyy5L6D_bmDBmB9X8wQG0c8VoSJoEOvvYyy&vprv=6&svpuc=6&mime=video%2Fmp4&ns=BQNtaDwuL2nv4j5HpQcshLLR&cnr=47&ratebypass=yes&dur=29407534&lmt=2916674324818561&mt=0618555145&fvip=3&c=WEB&txp=0241649&n=6X1YA94dmMKsABqZ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=kqWGYsUjcdx0e3KpKZlw5TgknVuyQeFdB3gY3-qU1yRDWe9iUgnzgpNh0ghE0QEUXhlwmy_1EwrZp4UDlHINz5HWfPEFcKzPfTXXQ9h64rrI&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=kqWGYsUjcdx0e3KpKZlw5TgknVuyQeFdB3gY3-qU1yRDWe9iUgnzgpNh0ghE0QEUXhlwmy_1EwrZp4UDlHINz5HWfPEFcKzPfTXXQ9h64rrI HTTP/1.1Host: rr2---sn-ntqe6nee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/djV11Xbc914/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCUVjcnPQDSHGvb0uU0snHDJaVnYg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0618555145&ei=kCGaja5SAFUJGa1cMI0ahNX&ip=96.84.16.66&id=o-AFc2wFIAKHRaggdp6GzoOHRfSfUK094fk0o8Y2FFSiJgq&itag=18&source=youtube&requiressl=yes&mh=X6&mm=997%2C38384%2C55302&mn=7Jqo5%2CxiEOs%2CdbWN0&ms=7Jqo5%2CxiEOs%2CdbWN0&mv=1&mvi=6&pl=47&ctier=L&initcwndbps=0241649&siu=6&spc=RWjmFLTNshyy5L6D_bmDBmB9X8wQG0c8VoSJoEOvvYyy&vprv=6&svpuc=6&mime=video%2Fmp4&ns=BQNtaDwuL2nv4j5HpQcshLLR&cnr=47&ratebypass=yes&dur=29407534&lmt=2916674324818561&mt=0618555145&fvip=3&c=WEB&txp=0241649&n=6X1YA94dmMKsABqZ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=kqWGYsUjcdx0e3KpKZlw5TgknVuyQeFdB3gY3-qU1yRDWe9iUgnzgpNh0ghE0QEUXhlwmy_1EwrZp4UDlHINz5HWfPEFcKzPfTXXQ9h64rrI&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=kqWGYsUjcdx0e3KpKZlw5TgknVuyQeFdB3gY3-qU1yRDWe9iUgnzgpNh0ghE0QEUXhlwmy_1EwrZp4UDlHINz5HWfPEFcKzPfTXXQ9h64rrI HTTP/1.1Host: rr2---sn-ntqe6nee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0618555145&ei=kCGaja5SAFUJGa1cMI0ahNX&ip=96.84.16.66&id=o-AFc2wFIAKHRaggdp6GzoOHRfSfUK094fk0o8Y2FFSiJgq&itag=18&source=youtube&requiressl=yes&mh=X6&mm=997%2C38384%2C55302&mn=7Jqo5%2CxiEOs%2CdbWN0&ms=7Jqo5%2CxiEOs%2CdbWN0&mv=1&mvi=6&pl=47&initcwndbps=0241649&siu=6&spc=RWjmFLTNshyy5L6D_bmDBmB9X8wQG0c8VoSJoEOvvYyy&vprv=6&svpuc=6&mime=video%2Fmp4&ns=BQNtaDwuL2nv4j5HpQcshLLR&cnr=47&ratebypass=yes&dur=29407534&lmt=2916674324818561&mt=0618555145&fvip=3&c=WEB&txp=0241649&n=6X1YA94dmMKsABqZ&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=kqWGYsUjcdx0e3KpKZlw5TgknVuyQeFdB3gY3-qU1yRDWe9iUgnzgpNh0ghE0QEUXhlwmy_1EwrZp4UDlHINz5HWfPEFcKzPfTXXQ9h64rrI&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=kqWGYsUjcdx0e3KpKZlw5TgknVuyQeFdB3gY3-qU1yRDWe9iUgnzgpNh0ghE0QEUXhlwmy_1EwrZp4UDlHINz5HWfPEFcKzPfTXXQ9h64rrI HTTP/1.1Host: rr2---sn-ntqe6nee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=4 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app_shell HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /js/th/jRfVs40gTXMRpWu0B8K2-2MIOM9vkusCAZGFEOBnG6M.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=nEHtZ4CSdXTZ2zvAz6dsPbQmRaJPeesN5y6JKo0wmVVx1TDq3SuZsQOjacRdaTbQQddNhZg4sZkYurDqBcgf-EvB3Vl2MzlaHqLN6EcjqvUka2ExP0K8T-ZSBqsIMWUsMzq610uYyVxwEgBPPepxWNZGpG2_dqibccWZjZ6pNY4
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtwNF7xXp6gvVdDyMh2_7BTen556Y25zHaEvw2bQk8e5QU4ZUdaGLitj_64P2PhOMz97BcZCx7-5h8ROQIucSyvbSpFF4Q&req_ts=1720218206&pg=MainAppBootstrap%3AWatch&az=1&sigh=AB9vU43GUnvVZv3F882xkpShb9ncdJnDjw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=nEHtZ4CSdXTZ2zvAz6dsPbQmRaJPeesN5y6JKo0wmVVx1TDq3SuZsQOjacRdaTbQQddNhZg4sZkYurDqBcgf-EvB3Vl2MzlaHqLN6EcjqvUka2ExP0K8T-ZSBqsIMWUsMzq610uYyVxwEgBPPepxWNZGpG2_dqibccWZjZ6pNY4
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/www-tampering.vflset/www-tampering.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/cssbin/www-main-desktop-home-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=RW_NGME8hNxndfs2&ver=2&cmt=12.404&fmt=397&fs=0&rt=14.029&euri&lact=12342&cl=648515301&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=24&feature=youtu.be&afmt=251&idpj=-8&ldpj=-1&rti=14&st=2.688&et=12.404&muted=0&docid=dQw4w9WgXcQ&ei=XXKIZu6yKKbOi9oPrqS3gAM&plid=AAYch4MV_DQN78_g&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRMM0JCOVNtSm9DSmhJc2ZBcGtCMXlmZ2lMeU9SWlYzUVI5X0tUTkUxZ3h0QWJcQVBta0tESVl4WU1HQmVDNGE1dGh4bzRmekVRalZxMFJQR2ZhNEw4OExmOVVSVDhFb3pPVWVYWWMxWkpvZ0FnMFM3OFFaMlVNZzFZS1ZtdDNjUHE2X3I3RmkyeVE HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1720218224848X-YouTube-Page-CL: 648891308X-Goog-Event-Time: 1720218224848X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.134"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtPcTZSSzhLNzNqVSjd5KG0BjIKCgJVUxIEGgAgHg%3D%3DX-YouTube-Ad-Signals: dt=1720218210579&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image&bid=ANyPxKq-yyR2KqDQGEH8VwAnYT2tU_QZgt5KsKZUJm3__krXsY75Ean2X9Qt6mk0FMa-Vyl3lBWSWvhqusfJ07K42iMDzqQIdQAccept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtwNF7xXp6gvVdDyMh2_7BTen556Y25zHaEvw2bQk8e5QU4ZUdaGLitj_64P2PhOMz97BcZCx7-5h8ROQIucSyvbSpFF4Q&req_ts=1720218206&pg=MainAppBootstrap%3AWatch&az=1&sigh=AB9vU43GUnvVZv3F882xkpShb9ncdJnDjw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=EaLv305y5Usr4Nci3lNjJNk0m8looHcXoI5v-UbAaZC7GxriuCCc219061_fFtSUWtJjLdP1-l6l-LTkoRKDlyFT4w2c9tq-y51uiD3kDILJbrC7tc_thPeEPWC0grSkdSbuhxPgsKHH6yovVaCt_G-emprrzINbsz0aGvoTZpE
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=EaLv305y5Usr4Nci3lNjJNk0m8looHcXoI5v-UbAaZC7GxriuCCc219061_fFtSUWtJjLdP1-l6l-LTkoRKDlyFT4w2c9tq-y51uiD3kDILJbrC7tc_thPeEPWC0grSkdSbuhxPgsKHH6yovVaCt_G-emprrzINbsz0aGvoTZpE
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/jsbin/www-searchbox.vflset/www-searchbox.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=5 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=EaLv305y5Usr4Nci3lNjJNk0m8looHcXoI5v-UbAaZC7GxriuCCc219061_fFtSUWtJjLdP1-l6l-LTkoRKDlyFT4w2c9tq-y51uiD3kDILJbrC7tc_thPeEPWC0grSkdSbuhxPgsKHH6yovVaCt_G-emprrzINbsz0aGvoTZpE
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/img/favicon.ico HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=6 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=7 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?Odk3GQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /notindex.html HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notindex HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/img/favicon_144x144.png HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/img/favicon_32x32.png HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-3935057531723584&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1713318382&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=404x510_l%7C404x510_r&format=0x0&url=https%3A%2F%2Fscamwebsite.com%2Fnotindex&pra=5&wgl=1&easpi=0&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~30&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~30&aifxl=30_19&aiixl=30_6&aslmct=0.7&asamct=0.7&aisaib=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&dt=1720218233070&bpp=3&bdt=59&idt=30&shv=r20240702&mjsv=m202407030101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=4066799335906&frm=20&pv=2&ga_vid=1561357126.1720218233&ga_sid=1720218233&ga_hid=51239124&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759842%2C44795921%2C95334508%2C95334524%2C95335888%2C31085085%2C31084186%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=1758442631681702&tmod=894593943&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=65 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkitP2fR1IYBTn4KhrwJ3PFU9PuiiaukHupgZzWbZ3WKMUZeeGWt5rizozA
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/img/favicon_32x32.png HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /s/desktop/1d05d8a6/img/favicon_144x144.png HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=RW_NGME8hNxndfs2&ver=2&cmt=22.393&fmt=397&fs=0&rt=24.017&euri&lact=3939&cl=648515301&state=playing&volume=100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=71&feature=youtu.be&afmt=251&idpj=-8&ldpj=-1&rti=24&st=12.404%2C19.317%2C21.717&et=19.317%2C21.717%2C22.393&muted=0%2C0%2C0&vis=0%2C3%2C3&docid=dQw4w9WgXcQ&ei=XXKIZu6yKKbOi9oPrqS3gAM&plid=AAYch4MV_DQN78_g&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRMM0JCOVNtSm9DSmhJc2ZBcGtCMXlmZ2lMeU9SWlYzUVI5X0tUTkUxZ3h0QWJcQVBta0tESVl4WU1HQmVDNGE1dGh4bzRmekVRalZxMFJQR2ZhNEw4OExmOVVSVDhFb3pPVWVYWWMxWkpvZ0FnMFM3OFFaMlVNZzFZS1ZtdDNjUHE2X3I3RmkyeVE HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_09_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1720218234836X-YouTube-Page-CL: 648891308X-Goog-Event-Time: 1720218234836X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.134"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.09.00X-Goog-Visitor-Id: CgtPcTZSSzhLNzNqVSjd5KG0BjIKCgJVUxIEGgAgHg%3D%3DX-YouTube-Ad-Signals: dt=1720218210579&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&wgl=true&ca_type=image&bid=ANyPxKq-yyR2KqDQGEH8VwAnYT2tU_QZgt5KsKZUJm3__krXsY75Ean2X9Qt6mk0FMa-Vyl3lBWSWvhqusfJ07K42iMDzqQIdQAccept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=8 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=9 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=10 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=EaLv305y5Usr4Nci3lNjJNk0m8looHcXoI5v-UbAaZC7GxriuCCc219061_fFtSUWtJjLdP1-l6l-LTkoRKDlyFT4w2c9tq-y51uiD3kDILJbrC7tc_thPeEPWC0grSkdSbuhxPgsKHH6yovVaCt_G-emprrzINbsz0aGvoTZpE
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=11 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20240702/r20110914/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkitP2fR1IYBTn4KhrwJ3PFU9PuiiaukHupgZzWbZ3WKMUZeeGWt5rizozA
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-8002465305224946&output=html&h=60&adk=1230845626&adf=4156384376&w=468&lmt=1720218246&format=468x60_as&url=http%3A%2F%2Fwww.addesigner.com%2F&wgl=1&dt=1720218244135&bpp=1329&bdt=1465&idt=2808&shv=r20240702&mjsv=m202406250101&ptt=5&saldr=sd&abxe=1&cookie_enabled=1&eoidce=1&correlator=352788349469&frm=20&pv=2&ga_vid=1584590920.1720218247&ga_sid=1720218247&ga_hid=635695332&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=479&ady=26&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C42532523%2C95334510%2C95334527%2C95334578%2C95334829%2C95335887%2C31084890%2C31084186%2C31078668%2C31078670%2C31084996&oid=2&pvsid=2245644661681476&tmod=1180304199&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=d%7Cd%7CeE%7C&abl=NS&pfx=0&fu=0&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=2831 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkitP2fR1IYBTn4KhrwJ3PFU9PuiiaukHupgZzWbZ3WKMUZeeGWt5rizozA
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-8002465305224946&output=html&h=90&slotname=3303653530&adk=110678862&adf=2436630289&pi=t.ma~as.3303653530&w=728&lmt=1720218246&url=http%3A%2F%2Fwww.addesigner.com%2F&wgl=1&dt=1720218244140&bpp=1325&bdt=1470&idt=2836&shv=r20240702&mjsv=m202406250101&ptt=5&saldr=sd&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=468x60_as&correlator=352788349469&frm=20&pv=1&ga_vid=1584590920.1720218247&ga_sid=1720218247&ga_hid=635695332&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=268&ady=955&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C42532523%2C95334510%2C95334527%2C95334578%2C95334829%2C95335887%2C31084890%2C31084186%2C31078668%2C31078670%2C31084996&oid=2&pvsid=2245644661681476&tmod=1180304199&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=d%7C%7CeEbr%7C&abl=CS&pfx=0&fu=0&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=2840 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkitP2fR1IYBTn4KhrwJ3PFU9PuiiaukHupgZzWbZ3WKMUZeeGWt5rizozA
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-8002465305224946&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1720218246&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=289x816_l%7C327x816_r&format=0x0&url=http%3A%2F%2Fwww.addesigner.com%2F&pra=7&wgl=1&easpi=0&aihb=0&asro=0&ailel=32~27~29~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~30&aiael=32~27~29~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~30&aifxl=32_18~27_8~29_11~30_19&aiixl=32_9~27_3~29_5~30_6&aslmct=0.7&asamct=0.7&aisaib=1&dt=1720218245465&bpp=2&bdt=2795&idt=1524&shv=r20240702&mjsv=m202406250101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=468x60_as&prev_slotnames=3303653530&nras=1&correlator=352788349469&frm=20&pv=1&ga_vid=1584590920.1720218247&ga_sid=1720218247&ga_hid=635695332&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759842%2C42532523%2C95334510%2C95334527%2C95334578%2C95334829%2C95335887%2C31084890%2C31084186%2C31078668%2C31078670&oid=2&pvsid=2245644661681476&tmod=1180304199&uas=0&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1532 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkitP2fR1IYBTn4KhrwJ3PFU9PuiiaukHupgZzWbZ3WKMUZeeGWt5rizozA
Source: global traffic	HTTP traffic detected: GET /ltu HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /baddesign.gif HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/ltuAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=EaLv305y5Usr4Nci3lNjJNk0m8looHcXoI5v-UbAaZC7GxriuCCc219061_fFtSUWtJjLdP1-l6l-LTkoRKDlyFT4w2c9tq-y51uiD3kDILJbrC7tc_thPeEPWC0grSkdSbuhxPgsKHH6yovVaCt_G-emprrzINbsz0aGvoTZpE
Source: global traffic	HTTP traffic detected: GET /baddesign.gif HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=12 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=EaLv305y5Usr4Nci3lNjJNk0m8looHcXoI5v-UbAaZC7GxriuCCc219061_fFtSUWtJjLdP1-l6l-LTkoRKDlyFT4w2c9tq-y51uiD3kDILJbrC7tc_thPeEPWC0grSkdSbuhxPgsKHH6yovVaCt_G-emprrzINbsz0aGvoTZpE
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=13 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Service-Worker-Navigation-Preload: trueX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=14 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/failure.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/Accept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=tjXUFwmPLpA; VISITOR_INFO1_LIVE=Oq6RK8K73jU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgHg%3D%3D; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSgRange: bytes=0-6528If-Modified-Since: Wed, 12 Jan 2022 21:08:00 GMT
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0205984127&ei=hJVg0061v_LnvUEbJSaElLv&ip=57.16.82.48&id=o-AFnmq2rLopZMoIpJoTf3R7aOQ1e0YDCKDvTmeaweRgnLK&itag=18&source=youtube&requiressl=yes&mh=X6&mm=298%2C88849%2C59322&mn=3yeR5%2CFQUxi%2CBtoZS&ms=3yeR5%2CFQUxi%2CBtoZS&mv=d&mvi=5&pl=63&ctier=L&initcwndbps=8668621&siu=5&spc=1liLuZ-oLdw8tgPvfGBiMkW8tvCrOn8lSH0TJ_6MwQIT&vprv=5&svpuc=5&mime=video%2Fmp4&ns=lo0Q6hZYM3HSwsqGUFgeFT28&cnr=63&ratebypass=yes&dur=46574650&lmt=1794265536180006&mt=0205984127&fvip=3&c=WEB&txp=8668621&n=NvyQNygBmk6Ii_B1&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=fjk3Hq15JEPD9hTko1IxuVLKjpZ-kjU30oOrSJYdOvED08JHHsFdd9JGM168JpPPZJHSsmKtS5y4ndG8S0Vwwn3Vcklc9Y912ruhZnDDtnt7&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=fjk3Hq15JEPD9hTko1IxuVLKjpZ-kjU30oOrSJYdOvED08JHHsFdd9JGM168JpPPZJHSsmKtS5y4ndG8S0Vwwn3Vcklc9Y912ruhZnDDtnt7 HTTP/1.1Host: rr5---sn-5hne6nz6.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0205984127&ei=hJVg0061v_LnvUEbJSaElLv&ip=57.16.82.48&id=o-AFnmq2rLopZMoIpJoTf3R7aOQ1e0YDCKDvTmeaweRgnLK&itag=18&source=youtube&requiressl=yes&mh=X6&mm=298%2C88849%2C59322&mn=3yeR5%2CFQUxi%2CBtoZS&ms=3yeR5%2CFQUxi%2CBtoZS&mv=d&mvi=5&pl=63&initcwndbps=8668621&siu=5&spc=1liLuZ-oLdw8tgPvfGBiMkW8tvCrOn8lSH0TJ_6MwQIT&vprv=5&svpuc=5&mime=video%2Fmp4&ns=lo0Q6hZYM3HSwsqGUFgeFT28&cnr=63&ratebypass=yes&dur=46574650&lmt=1794265536180006&mt=0205984127&fvip=3&c=WEB&txp=8668621&n=NvyQNygBmk6Ii_B1&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=fjk3Hq15JEPD9hTko1IxuVLKjpZ-kjU30oOrSJYdOvED08JHHsFdd9JGM168JpPPZJHSsmKtS5y4ndG8S0Vwwn3Vcklc9Y912ruhZnDDtnt7&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=fjk3Hq15JEPD9hTko1IxuVLKjpZ-kjU30oOrSJYdOvED08JHHsFdd9JGM168JpPPZJHSsmKtS5y4ndG8S0Vwwn3Vcklc9Y912ruhZnDDtnt7 HTTP/1.1Host: rr5---sn-5hne6nz6.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0205984127&ei=hJVg0061v_LnvUEbJSaElLv&ip=57.16.82.48&id=o-AFnmq2rLopZMoIpJoTf3R7aOQ1e0YDCKDvTmeaweRgnLK&itag=18&source=youtube&requiressl=yes&mh=X6&mm=298%2C88849%2C59322&mn=3yeR5%2CFQUxi%2CBtoZS&ms=3yeR5%2CFQUxi%2CBtoZS&mv=d&mvi=5&pl=63&initcwndbps=8668621&siu=5&spc=1liLuZ-oLdw8tgPvfGBiMkW8tvCrOn8lSH0TJ_6MwQIT&vprv=5&svpuc=5&mime=video%2Fmp4&ns=lo0Q6hZYM3HSwsqGUFgeFT28&cnr=63&ratebypass=yes&dur=46574650&lmt=1794265536180006&mt=0205984127&fvip=3&c=WEB&txp=8668621&n=NvyQNygBmk6Ii_B1&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=fjk3Hq15JEPD9hTko1IxuVLKjpZ-kjU30oOrSJYdOvED08JHHsFdd9JGM168JpPPZJHSsmKtS5y4ndG8S0Vwwn3Vcklc9Y912ruhZnDDtnt7&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=fjk3Hq15JEPD9hTko1IxuVLKjpZ-kjU30oOrSJYdOvED08JHHsFdd9JGM168JpPPZJHSsmKtS5y4ndG8S0Vwwn3Vcklc9Y912ruhZnDDtnt7 HTTP/1.1Host: rr5---sn-5hne6nz6.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0205984127&ei=hJVg0061v_LnvUEbJSaElLv&ip=57.16.82.48&id=o-AFnmq2rLopZMoIpJoTf3R7aOQ1e0YDCKDvTmeaweRgnLK&itag=18&source=youtube&requiressl=yes&mh=X6&mm=298%2C88849%2C59322&mn=3yeR5%2CFQUxi%2CBtoZS&ms=3yeR5%2CFQUxi%2CBtoZS&mv=d&mvi=5&pl=63&ctier=L&initcwndbps=8668621&siu=5&spc=1liLuZ-oLdw8tgPvfGBiMkW8tvCrOn8lSH0TJ_6MwQIT&vprv=5&svpuc=5&mime=video%2Fmp4&ns=lo0Q6hZYM3HSwsqGUFgeFT28&cnr=63&ratebypass=yes&dur=46574650&lmt=1794265536180006&mt=0205984127&fvip=3&c=WEB&txp=8668621&n=NvyQNygBmk6Ii_B1&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=fjk3Hq15JEPD9hTko1IxuVLKjpZ-kjU30oOrSJYdOvED08JHHsFdd9JGM168JpPPZJHSsmKtS5y4ndG8S0Vwwn3Vcklc9Y912ruhZnDDtnt7&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=fjk3Hq15JEPD9hTko1IxuVLKjpZ-kjU30oOrSJYdOvED08JHHsFdd9JGM168JpPPZJHSsmKtS5y4ndG8S0Vwwn3Vcklc9Y912ruhZnDDtnt7 HTTP/1.1Host: rr5---sn-5hne6nz6.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/guide?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/feedback?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York; CONSISTENCY=AKreu9uA-57dvrQrMCSNkNqlVPrTWQTfZBRHqWPuDdGBvuVpQIBAQgTQKh9bFkvC2YXSEMsz8JYHHhJf_LH4Yf1qS7h5wa4QEJ7TxIq8nHsbjJJo8hJojO_XpAMO8-e65FLbYn4CKu5fdOe6gP9ZSg
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0205984127&ei=hJVg0061v_LnvUEbJSaElLv&ip=57.16.82.48&id=o-AFnmq2rLopZMoIpJoTf3R7aOQ1e0YDCKDvTmeaweRgnLK&itag=18&source=youtube&requiressl=yes&mh=X6&mm=298%2C88849%2C59322&mn=3yeR5%2CFQUxi%2CBtoZS&ms=3yeR5%2CFQUxi%2CBtoZS&mv=d&mvi=5&pl=63&ctier=L&initcwndbps=8668621&siu=5&spc=1liLuZ-oLdw8tgPvfGBiMkW8tvCrOn8lSH0TJ_6MwQIT&vprv=5&svpuc=5&mime=video%2Fmp4&ns=lo0Q6hZYM3HSwsqGUFgeFT28&cnr=63&ratebypass=yes&dur=46574650&lmt=1794265536180006&mt=0205984127&fvip=3&c=WEB&txp=8668621&n=NvyQNygBmk6Ii_B1&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=fjk3Hq15JEPD9hTko1IxuVLKjpZ-kjU30oOrSJYdOvED08JHHsFdd9JGM168JpPPZJHSsmKtS5y4ndG8S0Vwwn3Vcklc9Y912ruhZnDDtnt7&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=fjk3Hq15JEPD9hTko1IxuVLKjpZ-kjU30oOrSJYdOvED08JHHsFdd9JGM168JpPPZJHSsmKtS5y4ndG8S0Vwwn3Vcklc9Y912ruhZnDDtnt7 HTTP/1.1Host: rr5---sn-5hne6nz6.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=0205984127&ei=hJVg0061v_LnvUEbJSaElLv&ip=57.16.82.48&id=o-AFnmq2rLopZMoIpJoTf3R7aOQ1e0YDCKDvTmeaweRgnLK&itag=18&source=youtube&requiressl=yes&mh=X6&mm=298%2C88849%2C59322&mn=3yeR5%2CFQUxi%2CBtoZS&ms=3yeR5%2CFQUxi%2CBtoZS&mv=d&mvi=5&pl=63&initcwndbps=8668621&siu=5&spc=1liLuZ-oLdw8tgPvfGBiMkW8tvCrOn8lSH0TJ_6MwQIT&vprv=5&svpuc=5&mime=video%2Fmp4&ns=lo0Q6hZYM3HSwsqGUFgeFT28&cnr=63&ratebypass=yes&dur=46574650&lmt=1794265536180006&mt=0205984127&fvip=3&c=WEB&txp=8668621&n=NvyQNygBmk6Ii_B1&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=fjk3Hq15JEPD9hTko1IxuVLKjpZ-kjU30oOrSJYdOvED08JHHsFdd9JGM168JpPPZJHSsmKtS5y4ndG8S0Vwwn3Vcklc9Y912ruhZnDDtnt7&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=fjk3Hq15JEPD9hTko1IxuVLKjpZ-kjU30oOrSJYdOvED08JHHsFdd9JGM168JpPPZJHSsmKtS5y4ndG8S0Vwwn3Vcklc9Y912ruhZnDDtnt7 HTTP/1.1Host: rr5---sn-5hne6nz6.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtzR7Bppvd0lnuQYuwH2shxV28hXw4a4Ap51zhb_js60rOt65Kz3E6csvF9ssXk5Rtrh01vXGulXaWyKyPVs2Nu609Q9nA&req_ts=1720218264&pg=MainAppBootstrap%3AHome&az=1&sigh=AB9vU40GGxmNozloek9fWIrNGHMw9habew HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=EaLv305y5Usr4Nci3lNjJNk0m8looHcXoI5v-UbAaZC7GxriuCCc219061_fFtSUWtJjLdP1-l6l-LTkoRKDlyFT4w2c9tq-y51uiD3kDILJbrC7tc_thPeEPWC0grSkdSbuhxPgsKHH6yovVaCt_G-emprrzINbsz0aGvoTZpE
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=EaLv305y5Usr4Nci3lNjJNk0m8looHcXoI5v-UbAaZC7GxriuCCc219061_fFtSUWtJjLdP1-l6l-LTkoRKDlyFT4w2c9tq-y51uiD3kDILJbrC7tc_thPeEPWC0grSkdSbuhxPgsKHH6yovVaCt_G-emprrzINbsz0aGvoTZpE
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=15 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtzR7Bppvd0lnuQYuwH2shxV28hXw4a4Ap51zhb_js60rOt65Kz3E6csvF9ssXk5Rtrh01vXGulXaWyKyPVs2Nu609Q9nA&req_ts=1720218264&pg=MainAppBootstrap%3AHome&az=1&sigh=AB9vU40GGxmNozloek9fWIrNGHMw9habew HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=EaLv305y5Usr4Nci3lNjJNk0m8looHcXoI5v-UbAaZC7GxriuCCc219061_fFtSUWtJjLdP1-l6l-LTkoRKDlyFT4w2c9tq-y51uiD3kDILJbrC7tc_thPeEPWC0grSkdSbuhxPgsKHH6yovVaCt_G-emprrzINbsz0aGvoTZpE
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=EaLv305y5Usr4Nci3lNjJNk0m8looHcXoI5v-UbAaZC7GxriuCCc219061_fFtSUWtJjLdP1-l6l-LTkoRKDlyFT4w2c9tq-y51uiD3kDILJbrC7tc_thPeEPWC0grSkdSbuhxPgsKHH6yovVaCt_G-emprrzINbsz0aGvoTZpE
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=EaLv305y5Usr4Nci3lNjJNk0m8looHcXoI5v-UbAaZC7GxriuCCc219061_fFtSUWtJjLdP1-l6l-LTkoRKDlyFT4w2c9tq-y51uiD3kDILJbrC7tc_thPeEPWC0grSkdSbuhxPgsKHH6yovVaCt_G-emprrzINbsz0aGvoTZpE
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=16 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=17 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-samp.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-des.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-tips.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-free.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-help.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-link.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-samp.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/hdr-welc.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/housead3l.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-blnk.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/blank.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butsamp2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-free.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-tips.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-des.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-link.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/but-line2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-help.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/buthelp2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butfree2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bullstr2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butdes2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/hdr-welc.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butsamp2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-blnk.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/blank.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/housead3l.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/buttips2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/but-line2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/3bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/1bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butlink2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/buthelp2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butfree2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bullstr2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butdes2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/buttips2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/3bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/1bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butlink2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_452.2.dr	String found in binary or memory: "")\|\|KCa(this.rf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=aB(d,h,dVa):h&&(d="embedded");this.Ma=d;rva();h=null;d=b?b.playerStyle:a.ps;f=g.Eb(eVa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.va=(this.K=g.Eb(eVa,this.playerStyle))&&this.playerStyle!=="play"&&this.playerStyle!=="jamboard";this.yp=!this.va;this.Sa=$A(!1,a.disableplaybackui);this.disablePaidContentOverlay=$A(!1,b==null?void 0:b.disablePaidContentOverlay); equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: "&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+qb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: "&sig="+Oa+"&ad_cpn=[AD_CPN]&id="+jd+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+la},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+jd+"&avm="+la+"&dc_pubid="+la+"&dc_exteid="+vb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: "&uga="+lb+"&vm="+Qb},videostatsDelayplayUrl:{baseUrl:"https://s.youtube.com/api/stats/delayplay?cl="+tc+"&docid="+z+"&ei="+V+"&feature="+m+"&fexp="+Ke+"&ns="+Ha+"&plid="+J+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Tc+"&el="+sd+"&len="+bc+"&of="+Gb+"&uga="+lb+"&vm="+Qb},videostatsWatchtimeUrl:{baseUrl:"https://s.youtube.com/api/stats/watchtime?cl="+tc+"&docid="+z+"&ei="+V+"&feature="+m+"&fexp="+Ke+"&ns="+Ha+"&plid="+J+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: "=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Wc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(oe.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ha+"&origin=www.youtube.com&ata_theme="+me,oe),trackingParams:ob+"="}},popupType:"DIALOG"}},trackingParams:ob+"="}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: "="},trackingParams:ob+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:me},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+qb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],layoutId:"1ID7Gdwk2vV7OZ1A"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: "="}},hoverText:{runs:[{text:Uc}]},trackingParams:ob+"="}},adVideoId:Uc,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=video_companion_reshow_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Da},isContentVideoCompanion:!0,associatedCompositePlayerBytesLayoutId:Vc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:xd}}}],adBreakHeartbeatParams:"Q0FBJTNE",frameworkUpdates:{entityBatchUpdate:{mutations:[{entityKey:Ad, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ha+"&origin=www.youtube.com&ata_theme="+me,jg),trackingParams:ob+"="}},popupType:"DIALOG"}},icon:{iconType:"INFO_OUTLINE"},trackingParams:ob+"="}},hoverText:{runs:[{text:Da}]},trackingParams:ob+"="}},flyoutCtaRenderer:{flyoutCtaRenderer:{image:{thumbnail:{thumbnails:[{url:"https://yt3.ggpht.com/ytc/"+Le+"=s176-c-k-c0x00ffffff-no-rj"}]},trackingParams:ob+"="},headline:{text:xe,isTemplated:!1,trackingParams:ob+"="},description:{text:Vc, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ha+"&origin=www.youtube.com&ata_theme="+me,wh),trackingParams:ob+"="}},popupType:"DIALOG"}},trackingParams:ob+"="}},hoverText:{runs:[{text:Da}]},trackingParams:ob+"="}},adVideoId:Uc,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:ld},associatedCompositePlayerBytesLayoutId:Vc}}, equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: (g.jq(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.jq(c,"www.youtube.com"),d=c.toString()):(c=TCa(d),PI(c)&&(d=c));c=new g.eP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_461.2.dr	String found in binary or memory: ;var Q=A.window,R,S,T=(Q==null?void 0:(R=Q.yt)==null?void 0:R.config_)\|\|(Q==null?void 0:(S=Q.ytcfg)==null?void 0:S.data_)\|\|{};B("yt.config_",T);var U=Object.freeze("document.appendChild document.body.appendChild document.querySelector document.querySelectorAll history.back history.go".split(" ")),V=Object.freeze("fonts.googleapis.com s0.2mdn.net securepubads.g.doubleclick.net ssl.google-analytics.com static.doubleclick.net www.google-analytics.com www.googletagservices.com www.youtube.com youtube.com".split(" ")),W=Object.freeze(["pkedcjkdefgpdelpbcmbmeomcjbeemfm","fjhoaacokmgbjemoflkofnenfaiekifl","enhhojjnijigcajfphajepfemndkmdlo"]),X= equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr	String found in binary or memory: <?xml version="1.0" encoding="UTF-8"?><OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/"><ShortName>YouTube</ShortName><Description>Search for videos on YouTube</Description><Tags>youtube video</Tags><Image height="16" width="16" type="image/vnd.microsoft.icon">https://www.youtube.com/favicon.ico</Image><Url type="text/html" template="https://www.youtube.com/results?search_query={searchTerms}&page={startPage?}&utm_source=opensearch"></Url><Query role="example" searchTerms="cat"></Query></OpenSearchDescription> equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+la+"&ns="+la+"&event="+la+"&device="+la+"&content_v="+z+"&el="+sd+"&ei="+V+"&devicever="+c+"&bti="+qb+"&format="+jc+"&break_type="+la+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+la+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+rb+"&slot_pos="+la+"&slot_len="+la+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+Dd+"&ad_len="+Yb+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+qb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: Dd+"&ad_len="+Yb+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+Uc+"&aqi="+V+"&ad_rmp="+la+"&sli="+la}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: FR.prototype.publish=function(a,b){return this.isDisposed()?!1:this.pubSub_.publish.apply(this.pubSub_,arguments)};var $8b=ea(["https://www.youtube.com/iframe_api"]),GR=function(){this.playerResolver_=xj();this.playerPromise_=this.playerResolver_.promise;this.playerVars_=null;this.playbackEndedCallback_=ah;this.playbackDurationSeconds_=0},a9b=function(a){var b=function(){return window.YT&&typeof window.YT.ready==="function"}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: IPb.prototype.openToast=function(){var a;(a=this.currentToast)!=null&&a.opened\|\|(this.queue.length?(this.currentToast=this.queue.shift(),this.currentToast.open()):this.currentPersistentToast&&this.currentPersistentToast.open())};var LPb=new pq("TOAST_MANAGER_TOKEN");var MPb=["https://fonts.gstatic.com","https://tv.youtube.com","https://www.gstatic.com","https://www.youtube.com"],NPb=Ll("wil_icon_max_concurrent_fetches",Infinity),PPb=function(a,b){var c=this;this.iconSet=a;this.appDirection=b;this.responsePromises={};this.iconCache={};this.queuedResponseResolvers={};this.numFetches=this.counter=0;this.cacheStorageAvailable=!!Aa.caches;this.cacheStorageAsync=Promise.resolve(void 0);this.cacheStorageSync=void 0;this.requestAninmationFrameResolver=null;this.renderingMode= equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: I_.prototype.navigateToAboutTheseResultsPage=function(){var a=wba("https://www.youtube.com/howyoutubeworks/product-features/search/");a?Jc(window,a,"_blank"):Bl(Error("Could not get url for 'About These Results' help center"))}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: J+".json",loop:!1,autoplay:!1,rendererSettings:{viewBoxOnly:!0,className:"animated-like-icon"}}},totalFrames:V?60:119,lazyLoad:!0};break a;case"NOTIFICATION_BELL":J={lottiePlayerProps:{animationConfig:{name:O?"notification_bell_dark":"notification_bell_light",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_"+(O?"dark":"light")+".json",loop:!1,autoplay:!1,rendererSettings:{className:"animated-subscribe-icon"}}},totalFrames:79,lazyLoad:!1};break a;}J=void 0}return J}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: Object.assign({},{name:"INCORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_LightTheme_01a.json",renderer:"svg"},Iec,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"26 26 80 80"}});a.correctnessAnimationProps=[];a.correctnessAnimationRefs=[];return a}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: Tc+"&el="+sd+"&len="+bc+"&of="+Gb+"&uga="+lb+"&vm="+Qb},ptrackingUrl:{baseUrl:"https://www.youtube.com/ptracking?ei="+V+"&m="+sb+"&oid="+Gb+"&plid="+J+"&pltype="+ld+"&ptchn="+Gb+"&ptk="+G+"&video_id="+z},qoeUrl:{baseUrl:"https://s.youtube.com/api/stats/qoe?cl="+tc+"&docid="+z+"&ei="+V+"&event="+Sd+"&feature="+m+"&fexp="+Ke+"&ns="+Ha+"&plid="+J+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Tc},atrUrl:{baseUrl:"https://s.youtube.com/api/stats/atr?docid="+z+"&ei="+V+"&feature="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: Uc+"&aqi="+V+"&ad_rmp="+la+"&sli="+la}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: ["NOTIFICATION_BELL",{name:"notification_bell_light",nameDarkTheme:"notification_bell_dark",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"NOTIFICATION_BELL",totalFrames:79,lazyLoad:!1}]]);var nub=ea(["https://www.gstatic.com/external_hosted/lottie/lottie_light.js"]),oub=gh(nub),fH;function pub(){return fH?fH:window.lottie?fH=Promise.resolve(window.lottie):fH=new Promise(function(a,b){var c=document.createElement("script");c.addEventListener("load",function(){a(lottie)}); equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Bn(a,{hl:d})),this.Dd(MV(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Dd(g.KV(a.errorMessage)):this.Dd(MV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Bn(c, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: a.content.firstChild);return Dec=a},{mode:2});var Hec;var Iec={autoplay:!1,loop:!1},Jec={simpleText:""},Kec=function(){var a=N.apply(this,arguments)\|\|this;a.isLoading=!1;a.usesPanelLockup=!1;a.enableRefreshWeb=F("enable_cairo_refresh_web");a.selectedItemIndex=-1;a.baseCorrectLottiePlayerAnimationConfig=Object.assign({},{name:"CORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_LightTheme_01a.json",renderer:"svg"},Iec,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"12 20 80 80"}});a.baseIncorrectLottiePlayerAnimationConfig= equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: a.content.firstChild);return Mzc=a},{mode:1});var Pzc;var Qzc=function(){var a=N.apply(this,arguments)\|\|this;a.rightSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg";a.rightSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg";a.leftSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg";a.leftSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg";a.leftSquiggly=a.leftSquigglyLight;a.rightSquiggly=a.rightSquigglyLight; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: a.content.firstChild);return Pzc=a},{mode:1});var Rzc;var Szc=function(){var a=N.apply(this,arguments)\|\|this;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.image0DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg";a.image0LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg";a.image1DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg";a.image1LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg"; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: a.content.firstChild);return lFc=a},{mode:kG("kevlar_poly_si_batch_j033")?1:2});var nFc;var oFc=jD(YB("DELETE_FROM_DOWNLOADS",{},"Delete from downloads"));var pFc={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: a.content.firstChild);return oMc=a},{mode:1});var qMc;var w1=function(){var a=N.apply(this,arguments)\|\|this;a.dark=!1;a.headerBackgroundLight="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.headerBackgroundDark="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: a.content.insertBefore(W().content.cloneNode(!0),a.content.firstChild);return Tzc=a},{mode:1});var Vzc;var Wzc=function(){var a=N.apply(this,arguments)\|\|this;a.JSC$16180_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg";a.JSC$16180_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.squigglyBackground=a.JSC$16180_squigglyBackgroundLight;return a}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: a.content.insertBefore(W().content.cloneNode(!0),a.content.firstChild);return Vzc=a},{mode:kG("kevlar_poly_si_batch_j022")?1:2});var Xzc;var Yzc=function(){var a=N.apply(this,arguments)\|\|this;a.JSC$16183_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg";a.JSC$16183_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg";a.squigglyBackground=a.JSC$16183_squigglyBackgroundLight;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: a.image3DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg";a.image3LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg";a.image0SquigglyBackground=a.image0LightSquigglyBackground;a.image1SquigglyBackground=a.image1LightSquigglyBackground;a.image3SquigglyBackground=a.image3LightSquigglyBackground;return a}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: a.message.includes("cannot be created in a document with origin 'https://www.youtube.com' and URL 'about:blank'")&&b.includes("<anonymous>"))return!0;if(b.includes("https://www.youtube.com"))return!1;a=b.split("\n");if(!a.length)return!1;if(a.length<=3&&b.includes("s.onloadeddata"))return!0;b=0;for(var c=h(a),d=c.next();!d.done;d=c.next())d=d.value,(d.includes("https://")\|\|d.includes("http://"))&&b++;return b/a.length>.95}, equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: a.severity,e,EJ(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Sd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.hC)(),tX(a,"manifest",function(h){b.K=!0;b.oa("pathprobe",h)},function(h){b.Sd(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: aUa=function(a,b){if(!a.j["0"]){var c=new TJ("0","fakesb",{video:new PJ(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new hQ(new g.eP("http://www.youtube.com/videoplayback"),c,"fake"):new sQ(new g.eP("http://www.youtube.com/videoplayback"),c,new VP(0,0),new VP(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"LigQMVuP3nAx3LwQfSGhgYmqsEWANi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"65",offsetEndMilliseconds:"30"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"51",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"LigQMVuP3nAx3LwQfSGhgYmqsEWANi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_START",adTimeOffset:{offsetStartMilliseconds:"330100",offsetEndMilliseconds:"594666"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"0",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"by"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"73",offsetEndMilliseconds:"64"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"67",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"cn"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"59",offsetEndMilliseconds:"8"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"26",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"fp"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"66",offsetEndMilliseconds:"35"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"98",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"go"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"14",offsetEndMilliseconds:"87"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"79",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"nh"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_END",adTimeOffset:{offsetStartMilliseconds:"25",offsetEndMilliseconds:"13"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"32",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"nl"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"50",offsetEndMilliseconds:"67"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"96",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"ov"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"13",offsetEndMilliseconds:"2"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"52",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"ti"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"47",offsetEndMilliseconds:"84"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"uc"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"10",offsetEndMilliseconds:"zo"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"22",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wg"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"56",offsetEndMilliseconds:"86"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"25",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"34",offsetEndMilliseconds:"12"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"27",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wz"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"84",offsetEndMilliseconds:"90"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"92",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: animationConfig:{name:"animated-actions-background",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_container_"+(jfc()?"dark":"light")+(F("enable_cairo_refresh_signature_moments_web")?"_v4":"")+".json"}}})}),d),Bt(a,function(){return K(ifc,{lottiePlayerProps:{animationRef:c, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: animationConfig:{name:"animated-actions-foreground",autoplay:!1,loop:!1,path:F("enable_cairo_refresh_signature_moments_web")?"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkles_"+(jfc()?"dark":"light")+"_v4.json":"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkle_"+(jfc()?"dark":"light")+".json"}}})}))} equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: b:{d=/api\/stats\/ads/;var p,q,r,x;e=(m=BD().objectRepresentation.adPlacements)==null?void 0:(p=m[0])==null?void 0:(q=p.adPlacementRenderer)==null?void 0:(r=q.renderer)==null?void 0:(x=r.linearAdSequenceRenderer)==null?void 0:x.linearAds;if(e!=null&&e.length&&(m=H(e[0],O3a))&&(m=m.pings,m!=null&&m.impressionPings))for(p=[].concat(ia(m.impressionPings)),m.progressPings&&(p=[].concat(ia(p),ia(m.progressPings))),m=h(p),p=m.next();!p.done;p=m.next())if(p=p.value,p.baseUrl&&d.test(p.baseUrl)){m=p.baseUrl.replace("https://www.youtube.com", equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.zR(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.jT(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.$I("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: c+"&m_pos_ms="+jc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Pe}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:jc,offsetEndMilliseconds:lb},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+Pb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: c+"&m_pos_ms="+jc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Vd}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:jc,offsetEndMilliseconds:jc},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+Pb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: c+"&m_pos_ms="+jc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:qa}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_END",adTimeOffset:{offsetStartMilliseconds:lb,offsetEndMilliseconds:lb},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+lb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: c+"&m_pos_ms="+jc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:qa}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:jc,offsetEndMilliseconds:jc},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+Pb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: chc.idomCompat=!0;var dhc={LIKE:"LIKE",NOTIFICATION_BELL:"NOTIFICATION_BELL"};function ehc(a){var b=a.animatedIconType;var c=a.active;var d=a.themeOverride;var e=a.animationRef===void 0?{}:a.animationRef;var g=a.staticIconFn;var k=function(){a:{var J=b();var O=d==null?void 0:d(),V;O=(O==null?void 0:O.useDarkTheme)\|\|((V=rq().resolve(qq(NH)))==null?void 0:V());V=F("enable_cairo_refresh_signature_moments_web");switch(J){case"LIKE":J="animated_like_icon_";J=V?J+(O?"dark_v4":"light_v4"):J+(O?"v2_dark":"v2_light");J={lottiePlayerProps:{animationConfig:{name:J,path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: completePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=videoplaytime100&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewTracking:{trafficType:"ACTIVE_VIEW_TRAFFIC_TYPE_VIDEO"}},clickthroughEndpoint:{clickTrackingParams:Wc, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Oa+"&ad_cpn=[AD_CPN]&id="+jd+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+la},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+jd+"&avm="+la+"&dc_pubid="+la+"&dc_exteid="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: f.created=function(){this.embedHost_=Msd[xl("INNERTUBE_CLIENT_NAME")]\|\|"www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: f.maybeInitializeQuizLotties=function(a){var b=this;this.isDarkTheme&&(this.baseCorrectLottiePlayerAnimationConfig.path="https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_DarkTheme_01a.json",this.baseIncorrectLottiePlayerAnimationConfig.path="https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_DarkTheme_01a.json");this.correctnessAnimationProps=a.map(function(c){return{animationConfig:c.isCorrect?b.baseCorrectLottiePlayerAnimationConfig:b.baseIncorrectLottiePlayerAnimationConfig, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewViewablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Oa+"&ad_cpn=[AD_CPN]&id="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: function LCc(a){return K("div",{class:"MessageRendererWizChatbot"},Bt(!1,function(){return K("img",{class:"MessageRendererWizChatbotIcon",alt:"Chatbot icon",src:"https://www.gstatic.com/youtube/img/chat/2x/sparkle_red.png"})}),K("div",{class:"MessageRendererWizChatbotText"},K(qCc,{text:a.text}),Bt(a.webResponseData,function(){return K(MCc,{data:a.webResponseData})})))} equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: function e9b(a){if(a.urlEndpoint){if(a=El(a.urlEndpoint.url),a.adurl)return Rc(a.adurl)}else if(a.watchEndpoint)return"//www.youtube.com/watch?v="+a.watchEndpoint.videoId;return null} equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: function uJb(a){a="loading_animation_"+a;return{name:a,path:"https://www.gstatic.com/youtube/img/lottie/playables_loading_animation/"+a+".json",loop:!0,autoplay:!0}} equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: function ugb(){var a,b,c,d,e,g,k,m,p,q,r;return t(function(x){switch(x.nextAddress){case 1:pa(x,2),a=h(Jgb()),b=a.next();case 4:if(b.done)return x.return(1);d=c=b.value;e=d.jsonRepresentation;g=d.objectRepresentation;k=btoa(e);m="data:application/json;base64,"+k;p=new Request(m);Object.defineProperty(p,"url",{get:function(){return"https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false"}}); equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: g.KR=function(a){var b=g.zR(a);tVa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",$lb);var DCa=pa(["//tpc.googlesyndication.com/sodar/",""]);var aPa={P7a:0,M7a:1,J7a:2,K7a:3,L7a:4,O7a:5,N7a:6};var Eqa=(new Date).getTime();var Oka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Pka=/\bocr\b/;var Rka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var amb=0,bmb=0,cmb=0;var Yu;Yu=null;g.$u=!1;g.hv=1;g.gv=Symbol("SIGNAL");g.tv={version:0,HZ:0,bl:!1,rg:void 0,gy:void 0,Vm:void 0,WK:0,Zi:void 0,Bu:void 0,Dt:!1,LO:!1,X0:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.zR(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.sR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),xC&&(a=rqa())&&(b.ebc=a));return g.Bn(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: g.zR=function(a){a=xR(a.Ha);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: ha+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: hoverText:{runs:[{text:Pe}]},trackingParams:ob+"="}},adVideoId:Uc,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:qd},associatedCompositePlayerBytesLayoutId:Vc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Sd}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_SELF_START"}},renderer:{actionCompanionAdRenderer:{headline:{text:eb, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: if(b){var c=iub.get(b);c\|\|(c=[],iub.set(b,c));var d=xl("ELEMENT_POOL_CONFIG")\|\|{};c.length>=(d[b]!==void 0?d[b]:xl("ELEMENT_POOL_DEFAULT_CAP",0))\|\|c.push(a)}else Gq(new Im("Element pool should only handle custom elements:",a.nodeName))},iub=new Map,kub=0,jub=0;var mub=F("enable_cairo_refresh_signature_moments_web"),eH=new Map([["FACE_HAPPY",{name:"animated_face_happy_light",nameDarkTheme:"animated_face_happy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_happy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_happy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_HAPPY",totalFrames:121,lazyLoad:!1}],["FACE_MEH",{name:"animated_face_meh_light", equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: isTemplated:!0,trackingParams:ob+"="}},trackingParams:ob+"="}},adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,serviceEndpoint:{clickTrackingParams:Wc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(Xf.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ha+"&origin=www.youtube.com&ata_theme="+me,Xf),trackingParams:ob+"="}},popupType:"DIALOG"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: jd+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+jd+"&dc_pubid="+la+"&dc_exteid="+vb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: l(hyd,N);f=hyd.prototype;f.created=function(){var a=rq();F("kevlar_clear_duplicate_pref_cookie")&&Mm(Ti,function(){var b=wi.get("PREF");b&&!/f\d=/.test(b)&&(b=Ml("kevlar_duplicate_pref_cookie_domain_override"),document.cookie=b?"PREF=null;domain="+b+";expires=Thu, 01 Jan 1970 00:00:01 GMT":"PREF=null;domain=.www.youtube.com;expires=Thu, 01 Jan 1970 00:00:01 GMT")}); equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: l(tcc,N);tcc.prototype.maybeLoadAnimationBackground=function(){this.useAnimationBackground?this.lottieAnimation\|\|(this.lottieAnimation=lottie.loadAnimation({container:this.animationBackground,loop:!0,renderer:"svg",path:"https://www.gstatic.com/youtube/img/livestream/live_chat/lottie_animation/shimmer_background.json",autoplay:!0})):this.lottieAnimation&&this.lottieAnimation.destroy()}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: lL.prototype.getUrl=function(a,b){return"https://www.gstatic.com/youtube/img/icons/web/"+b.style+"/"+a+"/v"+b.version+"/"+b.size+"px.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: la+"&cid="+ha+"&ad_cpn=%5BAD_CPN%5D&sig="+Y+"&adurl="+kd+"&label=video_click_to_advertiser_site&ctype="+Pb+"&ms=[CLICK_MS]",target:"TARGET_NEW_WINDOW",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}},trackingParams:ob+"=",backgroundImage:{thumbnail:{thumbnails:[{url:""}]},trackingParams:ob+"="},abandonCommands:{commands:[{clickTrackingParams:Wc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],thirdQuartilePings:[{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+jc+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],completePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=videoplaytime100&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+jc+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+jc+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pingingEndpoint:{hack:!0}}]},adRendererCommands:{impressionCommand:{clickTrackingParams:Wc,commandExecutorCommand:{commands:[{clickTrackingParams:Wc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=video_card_endcap_impression"}],pingingEndpoint:{hack:!0}}]}}},skipButton:{skipButtonRenderer:{message:{text:xd,isTemplated:!1,trackingParams:ob+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_UNHAPPY",totalFrames:121,lazyLoad:!1}],["FACE_VERY_HAPPY",{name:"animated_face_very_happy_light",nameDarkTheme:"animated_face_very_happy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_very_happy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_very_happy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_VERY_HAPPY", equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: lottiePlayerProps:{animationRef:k,animationConfig:{name:e.uniqueId+"-background",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_container_"+(rCb()?"dark":"light")+".json",rendererSettings:{viewBoxOnly:!0}}}}))}),K("div",{class:"smartimation__content"},a))} equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: loudnessDb:-3.7800007}]},playerAds:[{playerLegacyDesktopWatchAdsRenderer:{playerAdParams:{showContentThumbnail:!0,enabledEngageTypes:"3,6,4,5,17,1"},gutParams:{tag:"\\4061\\ytpwmpu"},showCompanion:!0,showInstream:!0,useGut:!0}}],playbackTracking:{videostatsPlaybackUrl:{baseUrl:"https://s.youtube.com/api/stats/playback?cl="+tc+"&docid="+z+"&ei="+V+"&feature="+m+"&fexp="+Ke+"&ns="+Ha+"&plid="+J+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Tc+"&el="+sd+"&len="+bc+"&of="+Gb+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: m+"&len="+bc+"&ns="+Ha+"&plid="+J+"&ver="+la,elapsedMediaTimeSeconds:5},videostatsScheduledFlushWalltimeSeconds:[10,20,30],videostatsDefaultFlushIntervalSeconds:40},captions:{playerCaptionsTracklistRenderer:{captionTracks:[{baseUrl:"https://www.youtube.com/api/timedtext?v="+z+"&caps="+Eb+"&opi="+tc+"&xoaf="+la+"&hl="+Ha+"&ip="+rb+"&ipbits="+la+"&expire="+Kb+"&sparams=ip,ipbits,expire,v,caps,opi,xoaf&signature="+rb+"&key="+Eb+"&lang="+Ba,name:{simpleText:eb},vssId:".en-US",languageCode:"en-US",isTranslatable:!0, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: nameDarkTheme:"animated_face_meh_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_meh.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_meh.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_MEH",totalFrames:121,lazyLoad:!1}],["FACE_SAD",{name:"animated_face_sad_light",nameDarkTheme:"animated_face_sad_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_sad.json", equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: null?void 0:G.baseUrl);var J;q.push(p==null?void 0:(J=p.qoeUrl)==null?void 0:J.baseUrl);var O;q.push(p==null?void 0:(O=p.atrUrl)==null?void 0:O.baseUrl);z=h(q);for(C=z.next();!C.done;C=z.next())if((C=C.value)&&m.test(C)){z=C.replace("https://www.youtube.com","").replace("https://s.youtube.com","");break b}}z=void 0}z&&c.push({testUrl:""+Aa.location.origin+z,baseUrl:Aa.location.origin+"/feed/download",method:"GET"})}c=c.length!==0?c[Math.floor(Math.random()*c.length)]:void 0;return(a=c)?b.return(Ngb(a.testUrl, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_sad.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_SAD",totalFrames:121,lazyLoad:!1}],["FACE_UNHAPPY",{name:"animated_face_unhappy_light",nameDarkTheme:"animated_face_unhappy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_unhappy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_unhappy.json", equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: pingingEndpoint:{hack:!0}}]}}},skipButton:{skipButtonRenderer:{message:{text:Uc,isTemplated:!1,trackingParams:ob+"="},trackingParams:ob+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:ld},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: pings:{impressionPings:[{baseUrl:"https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid="+tc+";dc_trk_cid="+tc+";dc_dbm_token="+x+";ord="+Kb+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+la+";dc_rui="+la+";dc_exteid="+vb+";dc_av="+Pb+";dc_sk="+la+";dc_ctype="+lb+";dc_ref=http://www.youtube.com/video/"+Uc+";dc_pubid="+la+";dc_btype=23?gclid="+La+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"},{baseUrl:"https://www.youtube.com/pagead/adview?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=video_skip_shown&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]",offsetMilliseconds:5E3},{baseUrl:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+D+"AxAA&ase=2&num="+la+"&cid="+ha+"&ad_cpn=%5BAD_CPN%5D&sig="+Y+"&adurl="+kd+"&ctype="+Pb+"&ms=[CLICK_MS]&label=video_10s_engaged_view&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=",offsetMilliseconds:1E4, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+lb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+c+"&m_pos_ms="+Yb}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Sd}}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: return K("yt-smartimation",{class:CCb(p,r,e)},Bt(e.experimentEnabled,function(){return K("div",{class:"smartimation__border"},K(Wub,{className:"smartimation__border-gradient",lottiePlayerProps:{animationRef:g,animationConfig:{name:e.uniqueId+"-border",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_border_"+(rCb()?"dark":"light")+(F("enable_cairo_refresh_signature_moments_web")?"_v2":"")+".json"}}}))}),Bt(e.experimentEnabled&&r,function(){return K("div", equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: rootVe:83769}},urlEndpoint:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+D+"AxAA&ase=2&num="+la+"&cid="+ha+"&ad_cpn=%5BAD_CPN%5D&sig="+Y+"&adurl="+kd+"&label=video_click_to_advertiser_site&ctype="+Pb+"&ms=[CLICK_MS]",target:"TARGET_NEW_WINDOW",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}},trackingParams:ob+"="}},durationMilliseconds:7E3,countdownRenderer:{timedPieCountdownRenderer:{trackingParams:ob+"="}},navigationEndpoint:{clickTrackingParams:Wc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: tc+";dc_dbm_token="+x+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+la+";ord="+tc+";dc_rui="+la+";dc_exteid="+vb+";dc_av="+la+";dc_sk="+la+";dc_ctype="+lb+";dc_pubid="+la+";dc_btype=3?gclid="+La+"&ase=2"},{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=video_card_endcap_action_headline_click"}],commandMetadata:{webCommandMetadata:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: tc+";dc_trk_cid="+tc+";dc_dbm_token="+x+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+la+";ord="+tc+";dc_rui="+la+";dc_exteid="+Nb+";dc_av="+la+";dc_sk="+la+";dc_ctype="+lb+";dc_pubid="+la+";dc_btype=3?gclid="+La+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}],fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: this.X.Da&&(a.authuser=this.X.Da);this.X.pageId&&(a.pageid=this.X.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.ra=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(VQ(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.ra=!1);b="";g.OQ(this.B)?NQ(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: this.hostLanguage=b?b.hostLanguage\|\|"en":cB("en",a.host_language);this.mp=!this.Cc&&Math.random()<g.nI(this.experiments,"web_player_api_logging_fraction");this.Ya=!this.Cc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(b==null\|\|!b.deviceIsAudioOnly);this.Yd=bB(this.Yd,a.ismb);this.yp?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=xR(this.Ha)\|\|"www.youtube.com")):r="video.google.com";this.Bn=r;iVa(this,a,!0);this.Oa=new XQ;g.M(this,this.Oa);q=b?b.innertubeApiKey:cB("",a.innertube_api_key); equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: totalFrames:121,lazyLoad:!1}],["LIKE",{name:"animated_like_light",nameDarkTheme:"animated_like_dark",path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+(mub?"animated_like_icon_light_v4":"animated_like_icon_v2_light")+".json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+(mub?"animated_like_icon_dark_v4":"animated_like_icon_v2_dark")+".json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"LIKE",totalFrames:mub?60:119,lazyLoad:F("web_animated_like_lazy_load")}], equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: trackName:""},{baseUrl:"https://www.youtube.com/api/timedtext?v="+z+"&caps="+Eb+"&opi="+tc+"&xoaf="+la+"&hl="+Ha+"&ip="+rb+"&ipbits="+la+"&expire="+Kb+"&sparams=ip,ipbits,expire,v,caps,opi,xoaf&signature="+rb+"&key="+Eb+"&kind="+Eb+"&lang="+Ha,name:{simpleText:Uc},vssId:"a.it",languageCode:"it",kind:"asr",isTranslatable:!0,trackName:""}],audioTracks:[{captionTrackIndices:[0,1],defaultCaptionTrackIndex:0,visibility:"UNKNOWN",hasDefaultTrack:!0,captionsInitialState:"CAPTIONS_INITIAL_STATE_OFF_RECOMMENDED"}], equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: trackingParams:ob+"=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Wc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(Lh.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ha+"&origin=www.youtube.com&ata_theme="+me,Lh),trackingParams:ob+"="}},popupType:"DIALOG"}},trackingParams:ob+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: trackingParams:ob+"=",backgroundImage:{thumbnail:{thumbnails:[{url:""}]},trackingParams:ob+"="},abandonCommands:{commands:[{clickTrackingParams:Wc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: vE&&vE.snapshotAndFlush()}},b),(c.flush_logs={callback:function(){Cq()}},c))}},zRb);var BRb={},CRb=(BRb.rendered={priority:0,callback:function(){var a=new bKa;a.increment("STARTED");if(xl("LOGGED_IN")&&xl("SERVER_VERSION")!=="test"&&xl("SERVER_VERSION")!=="dev"&&!Zja()&&!Yja()){a.increment("EXECUTING");var b=document.createElement("iframe");b.style.display="none";oca(b,2,Ub("https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid="+xl("INNERTUBE_CONTEXT_CLIENT_NAME")));document.body&&document.body.appendChild(b);a.increment("DONE")}}},BRb);var DRb={},ERb=(DRb.rendered={callback:function(){gNb().resume()}},DRb);var FRb={acknowledgeChannelTouStrikeCommand:RE(eN),addToPlaylistServiceEndpoint:RE(iO),addToPlaylistEndpoint:RE(iO),addUpcomingEventReminderEndpoint:RE(FN),browseEndpoint:RE(fMb),channelCreationFormEndpoint:RE(YM),channelCreationServiceEndpoint:RE(ZM),claimLegacyYoutubeChannelEndpoint:RE(LM),clearSearchHistoryEndpoint:RE(xN),clearWatchHistoryEndpoint:RE(yN),commerceActionCommand:SE(oO),createBackstagePostEndpoint:RE(FM),createCommentEndpoint:RE(UM),createCommentReplyEndpoint:RE(TM),createLiveChatPollEndpoint:RE(GN), equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: var A3={};var fib=/[&\?]action_proxy=1/,eib=/[&\?]token=([\w-])/,gib=/[&\?]video_id=([\w-])/,hib=/[&\?]index=([\d-])/,iib=/[&\?]m_pos_ms=([\d-])/,kib=/[&\?]vvt=([\w-]*)/,Xhb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),jib="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),$hb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: var MLb={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.gif"}; equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: vb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+z+"&cid="+ha+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: wE.prototype.remove=function(a){this.JSC$10625_expiringStorage.remove(a)};var Yjb=ea(["https://www.youtube.com/",""]),Zjb=ea(["https://studio.youtube.com/",""]);function $jb(){if(akb())Gq(Error("persist identity iframe is inserted more than once"));else{var a=document.createElement("iframe");a.style.display="none";var b=b===void 0?window.location.href:b;var c=Sk(xl("PERSIST_IDENTITY_IFRAME_URL"));b=c?c:new URL(b).host.indexOf("studio")===0?gh(Yjb,"persist_identity"):gh(Zjb,"persist_identity");oca(a,1,b);a.id="persist_identity";var d;(d=document.body)==null\|\|d.appendChild(a)}} equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: weight:0},{messageRegExp:/.wtd-div./,weight:0},{messageRegExp:/.Blocked a frame with origin "https:\/\/www.youtube.com" from accessing a cross-origin frame./,weight:0},{messageRegExp:/.disguiseToken./,weight:0},{messageRegExp:/Identifier 'YTNonstop' has already been declared/,weight:1E3}],callbackWeights:[{callback:function(a){var b=a.stack;if(b.includes("chrome://")\|\|b.includes("chrome-extension://")\|\|a.message.includes("chrome-extension://")\|\|b.includes("moz-extension://")\|\|b.includes("local.adguard.org")\|\| equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: weight:500},{callback:function(a){if(!a.stack)return!1;var b=a.stack.trim().split("\n");b.length&&b[0].endsWith("Error: "+a.message)&&b.shift();b.length&&b[b.length-1].includes("at window.onerror (")&&b.pop();if(!b.length)return!0;if(a.message==="Script error.")return b[0].includes("www.youtube.com")\|\|b.length>=2&&b[0].startsWith("at new")&&b[1].startsWith("at window.onerror");if(a.message==="Unexpected token")return!0;a=h(b);for(b=a.next();!b.done;b=a.next())if(b=b.value,!(b.includes("<anonymous>")\|\| equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: z+"/maxresdefault.jpg",width:1280,height:720}]},embed:{iframeUrl:"https://www.youtube.com/embed/"+Uc,width:1280,height:720},title:{simpleText:qa},description:{simpleText:xd},lengthSeconds:"1156",ownerProfileUrl:"http://www.youtube.com/@"+Vc,externalChannelId:jb,isFamilySafe:!0,availableCountries:"AD AE AF AG AI AL AM AO AQ AR AS AT AU AW AX AZ BA BB BD BE BF BG BH BI BJ BL BM BN BO BQ BR BS BT BV BW BY BZ CA CC CD CF CG CH CI CK CL CM CN CO CR CU CV CW CX CY CZ DE DJ DK DM DO DZ EC EE EG EH ER ES ET FI FJ FK FM FO FR GA GB GD GE GF GG GH GI GL GM GN GP GQ GR GS GT GU GW GY HK HM HN HR HT HU ID IE IL IM IN IO IQ IR IS IT JE JM JO JP KE KG KH KI KM KN KP KR KW KY KZ LA LB LC LI LK LR LS LT LU LV LY MA MC MD ME MF MG MH MK ML MM MN MO MP MQ MR MS MT MU MV MW MX MY MZ NA NC NE NF NG NI NL NO NP NR NU NZ OM PA PE PF PG PH PK PL PM PN PR PS PT PW PY QA RE RO RS RU RW SA SB SC SD SE SG SH SI SJ SK SL SM SN SO SR SS ST SV SX SY SZ TC TD TF TG TH TJ TK TL TM TN TO TR TT TV TW TZ UA UG UM US UY UZ VA VC VE VG VI VN VU WF WS YE YT ZA ZM ZW".split(" "), equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: z,target:"TARGET_NEW_WINDOW"}},trackingParams:ob+"="}},trackingParams:ob+"="}}}},endscreen:{endscreenRenderer:{elements:[{endscreenElementRenderer:{style:"CHANNEL",image:{thumbnails:[{url:"https://yt3.ggpht.com/"+Ma+"=s250-c-k-c0x00ffffff-no-rj",width:250,height:250},{url:"https://yt3.ggpht.com/"+Ma+"=s400-c-k-c0x00ffffff-no-rj",width:400,height:400}]},icon:{thumbnails:[{url:"https://www.gstatic.com/youtube/img/annotations/youtube.png"}]},left:.030214407,width:.15438597,top:.37587035,aspectRatio:1, equals www.youtube.com (Youtube)
Source: chromecache_749.2.dr	String found in binary or memory: {"name":"YouTube","short_name":"YouTube","background_color":"#FFFFFF","display":"minimal-ui","start_url":"/?feature\u003dytca","scope":"/","icons":[{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png","sizes":"144x144","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_192x192.png","sizes":"192x192","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_16x16.png","sizes":"16x16","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_32x32.png","sizes":"32x32","type":"image/png","purpose":"monochrome"},{"src":"https://fonts.gstatic.com/s/i/googlematerialicons/video_youtube/v11/white-48dp/1x/gm_video_youtube_white_48dp.png","sizes":"48x48","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_512x512.png","sizes":"512x512","type":"image/png","purpose":"monochrome"}],"theme_color":"#FF0000","gcm_sender_id":"402845223712","gcm_user_visible_only":true,"related_applications":[],"capture_links":"none","shortcuts":[{"name":"Subscriptions","url":"/feed/subscriptions?feature\u003dapp_shortcuts","icons":[{"src":"https://www.gstatic.com/youtube/img/web/shortcuts/subscriptions_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]},{"name":"Explore","url":"/feed/explore?feature\u003dapp_shortcuts","icons":[{"src":"https://www.gstatic.com/youtube/img/web/shortcuts/explore_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]}]} equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: {adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:jc,offsetEndMilliseconds:jc},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+Pb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: {adPlacementRenderer:{config:{adPlacementConfig:{kind:"zf",adTimeOffset:{offsetStartMilliseconds:"63",offsetEndMilliseconds:"83"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"59",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Oa+"&ad_cpn=[AD_CPN]&id="+jd+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avgm="+la},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+jd+"&dc_pubid="+la+"&dc_exteid="+vb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewViewablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Oa+"&ad_cpn=[AD_CPN]&id="+jd+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+jd+"&dc_pubid="+la+"&dc_exteid="+vb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+vb+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+lb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pingingEndpoint:{hack:!0}}]},adRendererCommands:{impressionCommand:{clickTrackingParams:Wc,commandExecutorCommand:{commands:[{clickTrackingParams:Wc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&label=video_card_endcap_impression"}], equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: {baseUrl:"https://www.youtube.com/pagead/adview?ai=C"+C+"____________"+D+"AxAA&sigh="+Uc+"&cid="+ha+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+la+"&ns="+la+"&event="+la+"&device="+la+"&content_v="+z+"&el="+sd+"&ei="+V+"&devicever="+c+"&bti="+qb+"&format="+jc+"&break_type="+la+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+la+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+rb+"&slot_pos="+la+"&slot_len="+la+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+ equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: {instreamVideoAdRenderer:{skipOffsetMilliseconds:5E3,pings:{impressionPings:[{baseUrl:"https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid="+tc+";dc_trk_cid="+tc+";ord="+Kb+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+la+";dc_rui="+la+";dc_exteid="+vb+";dc_av="+Pb+";dc_sk="+la+";dc_ctype="+lb+";dc_ref=http://www.youtube.com/video/"+Uc+";dc_pubid="+la+";dc_btype=23?gclid="+La+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}, equals www.youtube.com (Youtube)
Source: chromecache_475.2.dr	String found in binary or memory: {query:a.browseEndpoint.query})),e&&a.browseEndpoint.params&&(e=Ox(e,{params:a.browseEndpoint.params}));else{if(a.urlEndpoint)return a.urlEndpoint.url;a.signInEndpoint?(e="https://accounts.google.com/ServiceLogin",d={},uc.extend(d,b\|\|{},{"continue":window.location.href.split("#")[0],action_handle_signin:!0,passive:!0}),b=d):a.uploadEndpoint?e="//www.youtube.com/upload":a.liveChatEndpoint?(e=a.liveChatEndpoint,d=uc.clone(e),Pa(e.continuation)&&(g=Object.keys(e.continuation)[0],d.continuation=e.continuation[g].continuation), equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: scamwebsite.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: youtu.be
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: rr4---sn-ab5l6nk6.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: rr3---sn-ab5sznly.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: rr2---sn-ntqe6nee.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: www.addesigner.com
Source: global traffic	DNS traffic detected: DNS query: rr5---sn-5hne6nz6.googlevideo.com

Source: unknown

HTTP traffic detected: POST /videoplayback?expire=1720239805&ei=XXKIZu6yKKbOi9oPrqS3gAM&ip=8.46.123.33&id=o-AL34YXUuQsAvKEr4PQfrksAKu8oYnaUEexJQ9h1_EzOx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C29&mn=sn-ab5sznly%2Csn-ab5l6nkd&ms=au%2Crdu&mv=u&mvi=3&pl=23&spc=NO7bAVdoph7UdOSvlApOuo5lsT8VS2WXbD_8NVtM2EflnRt1PAq0QiYxi2zt&svpuc=1&ns=hGOTzZS8X5T04xMDmAZwwaEQ&sabr=1&rqh=1&mt=1720217610&fvip=5&keepalive=yes&c=WEB&smc=1&n=KFZ77SIPaCqkmA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRQIhAJpmvhJ_7BFKADlO5ihsiJaxZOnJFqlD46HvT_sE_oGWAiBILvwb3KGUfL8Sal2VTJlYyd-fVj4WupSUJSBcZocX5w%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRQIhANXkCcYDKPVMDS0QAIo72zL1xjI9LDyBAIA6fC5bc-9sAiAVbgkISogTBZPR0kNMOF2-1TAOtWNN5Z41Ur3y9_tNyw%3D%3D&cpn=RW_NGME8hNxndfs2&cver=2.20240702.09.00&rn=1 HTTP/1.1Host: rr3---sn-ab5sznly.googlevideo.comConnection: keep-aliveContent-Length: 1688sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 05 Jul 2024 22:23:39 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 05 Jul 2024 22:23:39 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 05 Jul 2024 22:23:41 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 05 Jul 2024 22:23:41 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 05 Jul 2024 22:23:43 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 05 Jul 2024 22:23:43 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 05 Jul 2024 22:24:26 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 05 Jul 2024 22:24:26 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 05 Jul 2024 22:24:27 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 05 Jul 2024 22:24:27 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 05 Jul 2024 22:24:28 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Fri, 05 Jul 2024 22:24:28 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 05 Jul 2024 22:24:09 GMTServer: Apache/2.2.15 (CentOS)Accept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 37 0d 0a 3c 68 74 6d 6c 3e 0a 0d 0a 37 0d 0a 3c 68 65 61 64 3e 0a 0d 0a Data Ascii: 7<html>7<head>

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6768_1438638809	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6768_1438638809\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6768_1438638809\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6768_1438638809\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6768_1438638809\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6768_1438638809\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6768_1438638809\manifest.fingerprint	Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1976 --field-trial-handle=1908,i,5134368397912986906,1571857433472792922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://scamwebsite.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6268 --field-trial-handle=1908,i,5134368397912986906,1571857433472792922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6504 --field-trial-handle=1908,i,5134368397912986906,1571857433472792922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1976 --field-trial-handle=1908,i,5134368397912986906,1571857433472792922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6268 --field-trial-handle=1908,i,5134368397912986906,1571857433472792922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6504 --field-trial-handle=1908,i,5134368397912986906,1571857433472792922,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://www.youtube.com/	0%	URL Reputation	safe
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://www.youtube.com/generate_204?cpn=	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://www.youtube.com/api/stats/watchtime?ns=yt&el=detailpage&cpn=RW_NGME8hNxndfs2&ver=2&cmt=22.393&fmt=397&fs=0&rt=24.017&euri&lact=3939&cl=648515301&state=playing&volume=100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=71&feature=youtu.be&afmt=251&idpj=-8&ldpj=-1&rti=24&st=12.404%2C19.317%2C21.717&et=19.317%2C21.717%2C22.393&muted=0%2C0%2C0&vis=0%2C3%2C3&docid=dQw4w9WgXcQ&ei=XXKIZu6yKKbOi9oPrqS3gAM&plid=AAYch4MV_DQN78_g&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRMM0JCOVNtSm9DSmhJc2ZBcGtCMXlmZ2lMeU9SWlYzUVI5X0tUTkUxZ3h0QWJcQVBta0tESVl4WU1HQmVDNGE1dGh4bzRmekVRalZxMFJQR2ZhNEw4OExmOVVSVDhFb3pPVWVYWWMxWkpvZ0FnMFM3OFFaMlVNZzFZS1ZtdDNjUHE2X3I3RmkyeVE	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js	0%	Avira URL Cloud	safe
https://www.youtube.com/favicon.ico	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/F2AitTPI5U0/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDf2BSkI4bT2L_XH4zQ9mxl1iDvwQ	0%	Avira URL Cloud	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://yt3.ggpht.com/coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj	0%	Avira URL Cloud	safe
https://fundingchoicesmessages.google.com/i/%	0%	Avira URL Cloud	safe
https://support.google.com/adsense/answer/9190028.	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ	0%	Avira URL Cloud	safe
https://nlc.hu	0%	Avira URL Cloud	safe
http://www.addesigner.com/images/inf-tips.gif	0%	Avira URL Cloud	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://24.hu	0%	Avira URL Cloud	safe
https://s.youtube.com	0%	Avira URL Cloud	safe
https://i.ytimg.com/an/	0%	Avira URL Cloud	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe
https://hj.rs	0%	URL Reputation	safe
https://www.google.com/recaptcha/api.js?trustedtypes=true	0%	Avira URL Cloud	safe
https://hearty.me	0%	URL Reputation	safe
https://s.youtube.com/api/stats/qoe?cl=	0%	Avira URL Cloud	safe
https://mercadolibre.com.gt	0%	URL Reputation	safe
https://indiatodayne.in	0%	URL Reputation	safe
https://idbs-staging.com	0%	URL Reputation	safe
https://mercadolibre.co.cr	0%	URL Reputation	safe
https://prisjakt.no	0%	URL Reputation	safe
https://kompas.com	0%	URL Reputation	safe
https://naukri.com	0%	Avira URL Cloud	safe
https://apis.google.com	0%	URL Reputation	safe
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/www-tampering.vflset/www-tampering.js	0%	Avira URL Cloud	safe
https://www.youtube.com/app_shell	0%	Avira URL Cloud	safe
http://www.addesigner.com	0%	Avira URL Cloud	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
https://www.youtube.com/pcs/activeview?xai=	0%	Avira URL Cloud	safe
https://www.youtube.com/s/search/audio/success.mp3	0%	Avira URL Cloud	safe
http://googleads.g.doubleclick.net	0%	Avira URL Cloud	safe
https://s.youtube.com/api/stats/watchtime?cl=	0%	Avira URL Cloud	safe
https://tucarro.com.co	0%	URL Reputation	safe
https://play.google.com	0%	Avira URL Cloud	safe
http://hammerjs.github.io/	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	Avira URL Cloud	safe
https://youtu.be/	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/offline.js	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/2WN0T-Ee3q4/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDBJhetB_Ij-EZIiulWIHnRpjcgeQ	0%	Avira URL Cloud	safe
http://mths.be/fromcodepoint	0%	Avira URL Cloud	safe
https://scamwebsite.com/baddesign.gif	100%	Avira URL Cloud	malware
https://i.ytimg.com/vi/mIHHfNVfhPk/maxresdefault.jpg	0%	Avira URL Cloud	safe
https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista	0%	Avira URL Cloud	safe
https://scamwebsite.com/style.css	100%	Avira URL Cloud	malware
https://mercadopago.com.ar	0%	Avira URL Cloud	safe
https://oauth-redirect-test.googleusercontent.com	0%	Avira URL Cloud	safe
https://mercadolibre.com.hn	0%	Avira URL Cloud	safe
https://www.youtube.com/get_midroll_info?ei=	0%	Avira URL Cloud	safe
http://www.addesigner.com/images/inf-blnk.gif	0%	Avira URL Cloud	safe
https://www.youtube.com/pagead/adview?ai=C	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/QMW4AqbuSGg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD0bomMOfrJhL8N-GImSSj3RuroVw	0%	Avira URL Cloud	safe
https://cse.google.com/cse.js	0%	Avira URL Cloud	safe
https://cdn.ampproject.org/rtv/$	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
rr3.sn-ab5sznly.googlevideo.com	74.125.0.200	true	false	unknown
rr4.sn-ab5l6nk6.googlevideo.com	74.125.0.137	true	false	unknown
addesigner.com	107.161.28.66	true	false	unknown
i.ytimg.com	172.217.16.150	true	false	unknown
rr5.sn-5hne6nz6.googlevideo.com	74.125.100.202	true	false	unknown
static.doubleclick.net	142.250.185.166	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
youtube.com	142.250.186.46	true	false	unknown
youtu.be	142.250.184.238	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
youtube-ui.l.google.com	216.58.206.46	true	false	unknown
googleads.g.doubleclick.net	142.250.185.162	true	false	unknown
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.34	true	false	unknown
play.google.com	216.58.206.46	true	false	unknown
scamwebsite.com	198.51.233.1	true	true	unknown
rr2.sn-ntqe6nee.googlevideo.com	74.125.109.103	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.186.129	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
rr4---sn-ab5l6nk6.googlevideo.com	unknown	unknown	false	unknown
rr5---sn-5hne6nz6.googlevideo.com	unknown	unknown	false	unknown
rr3---sn-ab5sznly.googlevideo.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
rr2---sn-ntqe6nee.googlevideo.com	unknown	unknown	false	unknown
www.addesigner.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/	true		unknown
https://www.youtube.com/api/stats/watchtime?ns=yt&el=detailpage&cpn=RW_NGME8hNxndfs2&ver=2&cmt=22.393&fmt=397&fs=0&rt=24.017&euri&lact=3939&cl=648515301&state=playing&volume=100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.09.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=71&feature=youtu.be&afmt=251&idpj=-8&ldpj=-1&rti=24&st=12.404%2C19.317%2C21.717&et=19.317%2C21.717%2C22.393&muted=0%2C0%2C0&vis=0%2C3%2C3&docid=dQw4w9WgXcQ&ei=XXKIZu6yKKbOi9oPrqS3gAM&plid=AAYch4MV_DQN78_g&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRMM0JCOVNtSm9DSmhJc2ZBcGtCMXlmZ2lMeU9SWlYzUVI5X0tUTkUxZ3h0QWJcQVBta0tESVl4WU1HQmVDNGE1dGh4bzRmekVRalZxMFJQR2ZhNEw4OExmOVVSVDhFb3pPVWVYWWMxWkpvZ0FnMFM3OFFaMlVNZzFZS1ZtdDNjUHE2X3I3RmkyeVE	false	Avira URL Cloud: safe	unknown
http://www.addesigner.com/images/inf-tips.gif	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/F2AitTPI5U0/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDf2BSkI4bT2L_XH4zQ9mxl1iDvwQ	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ	false	Avira URL Cloud: safe	unknown
https://yt3.ggpht.com/coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/app_shell	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/www-tampering.vflset/www-tampering.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/search/audio/success.mp3	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/offline.js	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/2WN0T-Ee3q4/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDBJhetB_Ij-EZIiulWIHnRpjcgeQ	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/style.css	true	Avira URL Cloud: malware	unknown
https://www.youtube.com/s/desktop/1d05d8a6/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/baddesign.gif	true	Avira URL Cloud: malware	unknown
https://i.ytimg.com/vi/mIHHfNVfhPk/maxresdefault.jpg	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/watch?v=dQw4w9WgXcQ	false		unknown
http://scamwebsite.com/	true		unknown
http://www.addesigner.com/images/inf-blnk.gif	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/QMW4AqbuSGg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD0bomMOfrJhL8N-GImSSj3RuroVw	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://support.google.com	chromecache_475.2.dr	false	URL Reputation: safe	unknown
https://mercadolivre.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_475.2.dr	false	URL Reputation: safe	unknown
https://johndeere.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://support.google.com/adsense/answer/9190028.	chromecache_367.2.dr	false	Avira URL Cloud: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://fundingchoicesmessages.google.com/i/%	chromecache_573.2.dr, chromecache_389.2.dr	false	Avira URL Cloud: safe	unknown
https://bolasport.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/favicon.ico	chromecache_510.2.dr	false	Avira URL Cloud: safe	unknown
https://desimartini.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://s.youtube.com	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/an/	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://p106.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.0.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_452.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_475.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_475.2.dr	false	URL Reputation: safe	unknown
https://mightytext.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/qoe?cl=	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://hazipatika.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://chennien.com	sets.json.0.dr	false	URL Reputation: safe	unknown
http://mathiasbynens.be/	chromecache_573.2.dr, chromecache_475.2.dr, chromecache_389.2.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://bonvivir.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/pcs/activeview?xai=	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://poalim.site	sets.json.0.dr	false	URL Reputation: safe	unknown
https://infoedgeindia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	URL Reputation: safe	unknown
http://www.addesigner.com	chromecache_444.2.dr	false	Avira URL Cloud: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
http://googleads.g.doubleclick.net	chromecache_573.2.dr, chromecache_389.2.dr	false	Avira URL Cloud: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/watchtime?cl=	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://play.google.com	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://mercadolivre.com.br	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://salemovefinancial.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hj.rs	sets.json.0.dr	false	URL Reputation: safe	unknown
https://youtu.be/	chromecache_452.2.dr	false	Avira URL Cloud: safe	unknown
https://hearty.me	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadolibre.com.gt	sets.json.0.dr	false	URL Reputation: safe	unknown
https://indiatodayne.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://idbs-staging.com	sets.json.0.dr	false	URL Reputation: safe	unknown
http://mths.be/fromcodepoint	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://mercadolibre.co.cr	sets.json.0.dr	false	URL Reputation: safe	unknown
https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://prisjakt.no	sets.json.0.dr	false	URL Reputation: safe	unknown
https://kompas.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://apis.google.com	chromecache_475.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_475.2.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.ar	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://mercadolibre.com.hn	sets.json.0.dr	false	Avira URL Cloud: safe	unknown
https://oauth-redirect-test.googleusercontent.com	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/get_midroll_info?ei=	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://tucarro.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/pagead/adview?ai=C	chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://cse.google.com/cse.js	chromecache_573.2.dr, chromecache_389.2.dr	false	Avira URL Cloud: safe	unknown
http://hammerjs.github.io/	chromecache_475.2.dr	false	URL Reputation: safe	unknown
https://cdn.ampproject.org/rtv/$	chromecache_573.2.dr, chromecache_389.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
107.161.28.66	addesigner.com	United States	3842	RAMNODEUS	false
74.125.109.103	rr2.sn-ntqe6nee.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.185.65	unknown	United States	15169	GOOGLEUS	false
74.125.0.200	rr3.sn-ab5sznly.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.186.182	unknown	United States	15169	GOOGLEUS	false
142.250.184.194	unknown	United States	15169	GOOGLEUS	false
216.58.206.46	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
142.250.184.238	youtu.be	United States	15169	GOOGLEUS	false
172.217.16.150	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
74.125.0.137	rr4.sn-ab5l6nk6.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.185.166	static.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
74.125.100.202	rr5.sn-5hne6nz6.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.185.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
172.217.16.206	unknown	United States	15169	GOOGLEUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
198.51.233.1	scamwebsite.com	United States	395409	NEOCITIESUS	true
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
172.217.16.130	unknown	United States	15169	GOOGLEUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1468408
Start date and time:	2024-07-06 00:22:17 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://scamwebsite.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@40/652@66/25
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://youtu.be/dQw4w9WgXcQ Browse: https://scamwebsite.com/notindex.html Browse: http://www.addesigner.com/ Browse: https://scamwebsite.com/ltu Browse: https://www.youtube.com/

IP
192.168.2.6
192.168.2.5

Input	Output
URL: https://www.youtube.com/watch?v=dQw4w9WgXcQ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form.","The text does not create a sense of urgency.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Rick Astley - Never Gonna Give You Up (Official Music Video) - YouTube OCR: Search Sign in The Story of the Best Meme CD THE GRAtEST Rick Astley-Are We There Yet? EVER: 'Never Gonna Give youm EME OF Alfo Malia LL-TJME 46M views 4 years ago 11:08 REACH FOR REACH FOR THE VIBRANT STARS (Recolors) REMIX Xzerixan 196 views 2days ago 4:20 Michael Jackson - Black Or White (Official Video Michael Jackson 475M views 14years ago Limahl - Never Ending Story (Official Music Video) RHINO 36M views 4 years ago Rick Astley - Together Forever (Official HD Video) Rick Astley Rick Astley - Never Gonna Give You Up (Official Music Video) 12M views 4 years ago 3:24 Rick Astley Subscribe Share 17M Save WHOA! When Judges 4.12M subscribers KNOW YOU!! Recognize Voices of FAMOUS. 1,551,190,393 views 14 years ago #NeverGonnaGiveYouUp #RickAstley #0fficialMusicVideo Top Talent 4.6M views 2monthsago The official video for "Never Gonna Give You up" by Rick Astley. 18m Michael Jackson - Smooth Criminal (Official Video) It's cable reimagined Michael Jackson 961M views 13 years ago No DVR space limits. No long-term contract. No hidden fees. No YouTubeTV cable box. No problems. Rick Astley GREA Mix - Rick Astley - Never Gonna RICK S8.99 ASTLEY Give You Up (Official Musicm Merchbar Cyndi Lauper, Rick Astley, A-ha, and Dismiss Try it free more Mix
URL: https://www.youtube.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as it does not request any sensitive information.","The text does not create a sense of urgency, as it only suggests searching and watching videos.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: YouTube OCR: YouTube @ Sign in Search Try searching to get started Start watching videos to help us build a feed of videos you'll love.
URL: https://scamwebsite.com/ltu Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": true,"captcha": false,"reasons": ["The title 'FREE ROBUC' is attention-grabbing and could create a sense of urgency.","The text 'to scamwebsite.cpm' suggests that the link leads to a suspicious website.","The text 'a > ger ate ve back' is incoherent and likely an attempt to obfuscate the true intent of the link.","The presence of seemingly random strings and characters in the text, such as '303542754 F 303542754 F 303542754 F OX OX OX 303542754 F ' and 'OX OX , OX 30351-2754 F 303542754 F 30351-2754 F', may indicate an attempt to evade analysis or detection.","Overall, the webpage appears to be attempting to trick users into clicking a suspicious link, potentially for phishing or other malicious purposes."]}
Title: FREE ROBUC OCR: it mywe ox ox ADOESIGNER OX ox 'hrefhttp : / / scamwebsite . ht s: // scamwebsite . com/baddesgn : kif e" to scamwebsite.cpm a > ger ate ve back ox OX ox 303542754 F 303542754 F 303542754 F OX OX OX 303542754 F ' , OX OX , OX 30351-2754 F 303542754 F 30351-2754 F
URL: https://scamwebsite.com Model: gpt-4o	```json{ "phishing_score": 9, "brands": "Roblox", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": false, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "roblox.com", "reasons": "The URL 'https://scamwebsite.com' is highly suspicious and does not match the legitimate domain 'roblox.com'. The page contains multiple elements that are indicative of phishing, such as the use of the brand name 'Roblox' in a misleading manner, and the presence of suspicious links. The site uses social usering techniques to mislead users into clicking on potentially harmful links. The overall design and content of the page are unprofessional and inconsistent with the legitimate brand's website. Therefore, it is concluded that this site is a phishing site."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.0157277397082884
Encrypted:	false
SSDEEP:	48:p/hUI15ul1AdIj7ak+wsdrtra1cuUX0eYDAA98gkXhVdEXeXF:RnQQIj7aL11ayjgDzUSXYF
MD5:	4CBD807685B88243CC9EA3E4B60FE8FD
SHA1:	B02FB2A85ECBEA61424F9F14A32590FA2041C068
SHA-256:	8E9B53C9DCD85F58E64164CEAF4E327B52B88C98946EF1067B112B3C9BDC5FEE
SHA-512:	61B4E345BB2AE6BD8907C1D23582709D21089504B23497EC0906D489C096CE981F31CE0D2A2FB5B97E3E5B8D71B36ECC1B0393F55AE9007D36D790FA0B7C4161
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"JwsfiQnUWfcg0_PuT83D82ftcuaZ7vEsE_gMNDBSQyf3yMBDUgfqYwvvVFJbiHScUgP70t-BqLn6UQvY0bPu6W8oxy6WzuhegflPkarNrUr5BrTQ6T6GUQS5rb5hsCNYhNq2yDXc6JRw2fVbWfO5BsQ7VSpW8gO0oN3x3Ju-4Lr72tesPWvv_g2rkIXZLJHw4z1oZoKx1T2xY6ncKsFBbLnmD1gUSN3iAPPZ9zHg41a62wpcpb9uWRD

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 6, 2024 00:23:09.618724108 CEST	192.168.2.6	1.1.1.1	0xeacd	Standard query (0)	scamwebsite.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:09.624629021 CEST	192.168.2.6	1.1.1.1	0x5653	Standard query (0)	scamwebsite.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:10.175616980 CEST	192.168.2.6	1.1.1.1	0x6667	Standard query (0)	scamwebsite.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:10.175616980 CEST	192.168.2.6	1.1.1.1	0x174e	Standard query (0)	scamwebsite.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:12.427319050 CEST	192.168.2.6	1.1.1.1	0xe9b4	Standard query (0)	scamwebsite.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:12.427644968 CEST	192.168.2.6	1.1.1.1	0x3e37	Standard query (0)	scamwebsite.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:12.718569040 CEST	192.168.2.6	1.1.1.1	0x39d1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:12.719422102 CEST	192.168.2.6	1.1.1.1	0xc73	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:12.811264992 CEST	192.168.2.6	1.1.1.1	0x75fd	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:12.815418959 CEST	192.168.2.6	1.1.1.1	0x9e1c	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 6, 2024 00:23:15.453136921 CEST	192.168.2.6	1.1.1.1	0x9437	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:15.454360008 CEST	192.168.2.6	1.1.1.1	0x73b6	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 6, 2024 00:23:18.959717035 CEST	192.168.2.6	1.1.1.1	0xa2f7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:18.959975958 CEST	192.168.2.6	1.1.1.1	0x8e33	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:23.804203033 CEST	192.168.2.6	1.1.1.1	0xb835	Standard query (0)	youtu.be	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:23.804203033 CEST	192.168.2.6	1.1.1.1	0x21c0	Standard query (0)	youtu.be	65	IN (0x0001)	false
Jul 6, 2024 00:23:24.776556015 CEST	192.168.2.6	1.1.1.1	0x9bc9	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:24.776854992 CEST	192.168.2.6	1.1.1.1	0xc63e	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:26.122570038 CEST	192.168.2.6	1.1.1.1	0xb48b	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:26.122673035 CEST	192.168.2.6	1.1.1.1	0xb3f5	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:26.380836010 CEST	192.168.2.6	1.1.1.1	0xadf9	Standard query (0)	rr4---sn-ab5l6nk6.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:26.381198883 CEST	192.168.2.6	1.1.1.1	0xa89b	Standard query (0)	rr4---sn-ab5l6nk6.googlevideo.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:27.404267073 CEST	192.168.2.6	1.1.1.1	0xecea	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:27.404500961 CEST	192.168.2.6	1.1.1.1	0xdeb4	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:31.806536913 CEST	192.168.2.6	1.1.1.1	0xdf0c	Standard query (0)	rr3---sn-ab5sznly.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:31.806730986 CEST	192.168.2.6	1.1.1.1	0xbfc8	Standard query (0)	rr3---sn-ab5sznly.googlevideo.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:32.004635096 CEST	192.168.2.6	1.1.1.1	0xb331	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:32.004990101 CEST	192.168.2.6	1.1.1.1	0xdb42	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jul 6, 2024 00:23:33.424884081 CEST	192.168.2.6	1.1.1.1	0x7322	Standard query (0)	rr3---sn-ab5sznly.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:33.425040007 CEST	192.168.2.6	1.1.1.1	0x9a5a	Standard query (0)	rr3---sn-ab5sznly.googlevideo.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:34.191065073 CEST	192.168.2.6	1.1.1.1	0xa6f4	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:34.191205025 CEST	192.168.2.6	1.1.1.1	0x5a84	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 6, 2024 00:23:34.482309103 CEST	192.168.2.6	1.1.1.1	0xa5c2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:34.482460022 CEST	192.168.2.6	1.1.1.1	0xe604	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:34.489039898 CEST	192.168.2.6	1.1.1.1	0x5dd2	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:34.489176035 CEST	192.168.2.6	1.1.1.1	0xddea	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:35.508979082 CEST	192.168.2.6	1.1.1.1	0xf9b2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:35.509124994 CEST	192.168.2.6	1.1.1.1	0x90de	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:35.670237064 CEST	192.168.2.6	1.1.1.1	0xa773	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:35.670532942 CEST	192.168.2.6	1.1.1.1	0x3a15	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:36.137418032 CEST	192.168.2.6	1.1.1.1	0xe002	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:36.137690067 CEST	192.168.2.6	1.1.1.1	0xca97	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:36.228579044 CEST	192.168.2.6	1.1.1.1	0x3d75	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:36.228741884 CEST	192.168.2.6	1.1.1.1	0x8bdd	Standard query (0)	youtube.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:36.874280930 CEST	192.168.2.6	1.1.1.1	0x4507	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:36.874547005 CEST	192.168.2.6	1.1.1.1	0xfb73	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:38.365329981 CEST	192.168.2.6	1.1.1.1	0x3fc2	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:38.365497112 CEST	192.168.2.6	1.1.1.1	0x9715	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 6, 2024 00:23:38.371534109 CEST	192.168.2.6	1.1.1.1	0xbc5c	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:38.371675968 CEST	192.168.2.6	1.1.1.1	0xcad9	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 6, 2024 00:23:38.597026110 CEST	192.168.2.6	1.1.1.1	0x8872	Standard query (0)	rr2---sn-ntqe6nee.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:23:38.597176075 CEST	192.168.2.6	1.1.1.1	0x14bb	Standard query (0)	rr2---sn-ntqe6nee.googlevideo.com	65	IN (0x0001)	false
Jul 6, 2024 00:24:02.474694967 CEST	192.168.2.6	1.1.1.1	0xfa82	Standard query (0)	www.addesigner.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:24:02.474838018 CEST	192.168.2.6	1.1.1.1	0x9c0c	Standard query (0)	www.addesigner.com	65	IN (0x0001)	false
Jul 6, 2024 00:24:04.014019966 CEST	192.168.2.6	1.1.1.1	0x6eed	Standard query (0)	www.addesigner.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:24:04.014154911 CEST	192.168.2.6	1.1.1.1	0x4d98	Standard query (0)	www.addesigner.com	65	IN (0x0001)	false
Jul 6, 2024 00:24:06.103653908 CEST	192.168.2.6	1.1.1.1	0x3616	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:24:06.103780985 CEST	192.168.2.6	1.1.1.1	0x4b03	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 6, 2024 00:24:07.927896023 CEST	192.168.2.6	1.1.1.1	0xd119	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:24:07.928037882 CEST	192.168.2.6	1.1.1.1	0x527	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 6, 2024 00:24:11.123708010 CEST	192.168.2.6	1.1.1.1	0xeabe	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:24:11.123853922 CEST	192.168.2.6	1.1.1.1	0xa204	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 6, 2024 00:24:25.907562971 CEST	192.168.2.6	1.1.1.1	0xd781	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:24:25.907562971 CEST	192.168.2.6	1.1.1.1	0x18e4	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 6, 2024 00:24:25.953356028 CEST	192.168.2.6	1.1.1.1	0x87f8	Standard query (0)	rr5---sn-5hne6nz6.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 6, 2024 00:24:25.953515053 CEST	192.168.2.6	1.1.1.1	0x1b70	Standard query (0)	rr5---sn-5hne6nz6.googlevideo.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:23:09.643887997 CEST	430	OUT	GET / HTTP/1.1 Host: scamwebsite.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:23:10.169333935 CEST	362	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 05 Jul 2024 22:23:10 GMT Content-Type: text/html Content-Length: 166 Connection: keep-alive Location: https://scamwebsite.com/ Server: neocities Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>openresty</center></body></html>
Jul 6, 2024 00:23:10.379242897 CEST	362	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 05 Jul 2024 22:23:10 GMT Content-Type: text/html Content-Length: 166 Connection: keep-alive Location: https://scamwebsite.com/ Server: neocities Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>openresty</center></body></html>
Jul 6, 2024 00:23:55.178375959 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:03.087363005 CEST	433	OUT	GET / HTTP/1.1 Host: www.addesigner.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:03.626648903 CEST	221	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:03 GMT Server: Apache/2.2.15 (CentOS) Accept-Ranges: bytes Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 37 0d 0a 3c 68 74 6d 6c 3e 0a 0d 0a 37 0d 0a 3c 68 65 61 64 3e 0a 0d 0a Data Ascii: 7<html>7<head>
Jul 6, 2024 00:24:03.643858910 CEST	1236	IN	Data Raw: 34 64 0d 0a 3c 74 69 74 6c 65 3e 41 64 44 65 73 69 67 6e 65 72 2e 63 6f 6d 20 2d 20 44 65 73 69 67 6e 20 61 6e 64 20 64 6f 77 6e 6c 6f 61 64 20 66 72 65 65 20 62 61 6e 6e 65 72 73 20 69 6e 20 73 65 63 6f 6e 64 73 21 3c 2f 74 69 74 6c 65 3e 0a 0d Data Ascii: 4d<title>AdDesigner.com - Design and download free banners in seconds!</title>f2<meta name="description" content="FREE banner ads for your website in seconds! Choose from 91 unique, fully-animated designs, customized with the text and f
Jul 6, 2024 00:24:03.643872023 CEST	1236	IN	Data Raw: 6e 2e 73 72 63 20 3d 20 22 2f 69 6d 61 67 65 73 2f 69 6e 66 2d 6c 69 6e 6b 2e 67 69 66 22 3b 0a 0d 0a 34 33 0d 0a 69 6d 67 5f 69 6e 66 6f 5f 6f 66 66 3d 6e 65 77 20 49 6d 61 67 65 28 29 3b 20 69 6d 67 5f 69 6e 66 6f 5f 6f 66 66 2e 73 72 63 3d 22 Data Ascii: n.src = "/images/inf-link.gif";43img_info_off=new Image(); img_info_off.src="/images/inf-blnk.gif";11b function donothing() {}5d function mousein(name) { document.images["info"].src = eval("img_" + name + "_on.src"); }
Jul 6, 2024 00:24:03.643883944 CEST	1236	IN	Data Raw: 20 20 0a 0a 3c 2f 64 69 76 3e 0a 0d 0a 31 32 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 64 3e 0a 0d 0a 31 30 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 74 72 3e 0a 0d 0a 31 31 0d 0a 20 20 20 20 20 20 20 20 3c 2f 74 61 62 6c 65 3e 0a 0d 0a Data Ascii: </div>12 </td>10 </tr>11 </table>c </td>a </tr>b </table>5c <table width="640" border="0" cellspacing="0" cellpadding="0" height="30" align="center">a <tr>
Jul 6, 2024 00:24:03.644128084 CEST	1236	IN	Data Raw: 6e 28 27 74 69 70 73 27 29 22 0a 0d 0a 33 39 0d 0a 6f 6e 4d 6f 75 73 65 4f 75 74 3d 22 6d 6f 75 73 65 6f 75 74 28 27 74 69 70 73 27 29 22 20 6f 6e 46 6f 63 75 73 3d 22 74 68 69 73 2e 62 6c 75 72 28 29 22 3e 3c 69 6d 67 0a 0d 0a 33 65 0d 0a 6e 61 Data Ascii: n('tips')"39onMouseOut="mouseout('tips')" onFocus="this.blur()"><img3ename="tips" src="/images/buttips2.gif" width="95" height="18"3bborder="0" alt="Expert tips for making great ads"></a><img36src="/images/but-line2.gif" wi
Jul 6, 2024 00:24:03.644148111 CEST	1236	IN	Data Raw: 64 65 72 3d 22 30 22 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d 22 30 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 30 22 3e 0a 0d 0a 39 0d 0a 20 20 20 20 3c 74 72 3e 0a 0d 0a 34 32 0d 0a 20 20 20 20 20 20 3c 74 64 3e 3c 69 6d 67 20 73 72 63 3d 22 2f Data Ascii: der="0" cellspacing="0" cellpadding="0">9 <tr>42 <td><img src="/images/blank.gif" width="1" height="5"></td>a </tr>a <tr> c <td> 7b <div align="center"><img src="/images/hdr-welc.gif" wid
Jul 6, 2024 00:24:03.644165993 CEST	1236	IN	Data Raw: 6e 2c 20 6f 72 20 61 6e 79 77 68 65 72 65 20 65 6c 73 65 2e 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 0d 0a 35 34 0d 0a 20 20 20 20 20 20 20 20 3c 70 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e Data Ascii: n, or anywhere else.</font></p>54 <p><font face="Arial, Helvetica, sans-serif" size="2">Use the high-quality 53 banner ads you design at AdDesigner.com to get <b> higher click-through 5c rates</b> (which
Jul 6, 2024 00:24:03.644176960 CEST	1236	IN	Data Raw: 67 68 74 3d 22 32 30 22 3e 20 3c 62 3e 43 68 6f 6f 73 65 20 61 6e 20 0a 0d 0a 34 61 0d 0a 20 20 20 20 20 20 20 20 20 20 61 64 20 73 74 79 6c 65 20 3c 2f 62 3e 20 66 72 6f 6d 20 6f 75 72 20 76 61 73 74 20 6c 69 62 72 61 72 79 20 6f 66 20 3c 62 3e Data Ascii: ght="20"> <b>Choose an 4a ad style </b> from our vast library of <b>91</b> high-quality, 33 attention-grabbing animated choices;<br>180 </font> <font face="Arial, Helvetica, sans-serif" size="2"><
Jul 6, 2024 00:24:03.644190073 CEST	1236	IN	Data Raw: 0d 0a 35 31 0d 0a 20 20 20 20 20 20 20 20 20 20 77 65 72 65 20 63 72 65 61 74 65 64 20 62 79 20 61 64 76 65 72 74 69 73 69 6e 67 20 70 72 6f 73 20 74 6f 20 67 72 61 62 20 74 68 65 20 76 69 65 77 65 72 27 73 20 61 74 74 65 6e 74 69 6f 6e 2c 20 6d Data Ascii: 51 were created by advertising pros to grab the viewer's attention, make 123 a memorable impact, <br>14d and encourage him/her to click through to your website.</font></p>153
Jul 6, 2024 00:24:03.666721106 CEST	1236	IN	Data Raw: 6f 66 20 61 6c 6c 2c 20 0a 0d 0a 35 64 0d 0a 20 20 20 20 20 20 20 20 20 20 73 69 67 6e 20 75 70 20 72 69 67 68 74 20 6e 6f 77 20 74 6f 20 62 65 63 6f 6d 65 20 61 20 6d 65 6d 62 65 72 20 6f 66 20 3c 62 3e 20 41 64 44 65 73 69 67 6e 65 72 2e 63 6f Data Ascii: of all, 5d sign up right now to become a member of <b> AdDesigner.com <font color="#FFFF00"> 53 <font size="3">absolutely free!</font></font></b> Other banner services 5e charge up to $100 <i>per ad</i
Jul 6, 2024 00:24:03.667068958 CEST	1236	IN	Data Raw: 22 32 22 3e 3c 62 3e 3c 66 6f 6e 74 20 73 69 7a 65 3d 22 33 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 62 75 6c 6c 73 74 72 32 2e 67 69 66 22 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 3e 3c 2f 66 6f 6e Data Ascii: "2"><b><font size="3"><img src="/images/bullstr2.gif" width="20" height="20"></font></b></font><font size="3"><img src="/images/bullstr2.gif" width="20" height="20"></font><font size="3"><br>54 </font></b></font><font face="Arial

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:03.728102922 CEST	388	OUT	GET /images/inf-samp.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:03.843540907 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:03 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d3b-5a6-38c0fed506900" Accept-Ranges: bytes Content-Length: 1446 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 44 44 44 75 75 75 ba ba ba 30 30 30 10 10 10 ce ce ce ee ee ee 20 20 20 aa aa aa 89 89 89 99 99 99 d9 d9 d9 de de de 65 65 65 55 55 55 67 67 67 c9 c9 c9 d6 d6 d6 8b 8b 8b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df df 84 20 61 95 1b 76 85 01 e4 68 98 c7 0a 02 65 80 30 02 77 34 09 05 55 02 89 70 8d 8e 6d 0c 01 92 0c 55 03 01 81 39 09 92 04 47 02 01 03 31 04 01 65 a2 2f 96 0a 35 08 01 8c 52 01 9c 8f b0 b1 63 10 01 08 03 0e 98 53 96 b9 37 96 0c bc 30 ae 31 9e a0 30 a5 64 c7 2d b4 0b 35 07 08 74 53 c2 b2 d3 d4 5a 96 cc 25 76 24 da 27 83 23 7d 28 05 d0 85 d9 b9 bb 23 8b db e4 27 7d ac e7 ec c0 00 ed 22 d2 29 e2 24 c4 27 eb df 85 c9 de 2f 02 [TRUNCATED] Data Ascii: GIF89aDDDuuu000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zn avhe0w4UpmU9G1e/5RcS7010d-5tSZ%v$'#}(#'}")$'/=H n&mc"J<`$\(bw:p`Q>Dp"R&ruGR;{(0uO?}JlC\2'Y%80S0:vUUFY_x\:D#Pb$M1E%aSJ(c5P@OQ>P(j-El$jAr[k`IXxIDz#2n{fxtOyb]3T-Yn#Vg_@IkbVr,[OxD#\|rBdqIb"hE0(0B(wZ^Sh%IfpM$qngF\e`tk`X\Y%kP(4H(.c0PP2Ct3@O{96Lk[>xI(b*gG~zbZ=lN\|zK#X0eqbM{id3 +,
Jul 6, 2024 00:24:03.843594074 CEST	466	IN	Data Raw: e0 c0 33 b2 76 ec f1 09 2e 11 80 9e 01 b8 51 92 1c 6f 26 8b 6b c0 00 02 b8 b9 22 03 e3 11 1b b0 4a cf 81 25 1d 4c 05 30 90 c8 03 03 cc fb 90 76 dc 15 6c 82 5a 30 e3 37 ed 02 0c 80 32 16 8b 44 f3 d6 ef 7b 01 d3 2b 72 7d 13 fa da 72 7c 81 86 78 6e Data Ascii: 3v.Qo&k"J%L0vlZ072D{+r}r\|xnth?"Ba#Tm:3`SU@DP!-1G.]y1BoIB$Ubw&<3;qURmb:^`I\O/b"p;{4Bq$pS6@

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:03.815395117 CEST	384	OUT	GET /images/logo.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:04.648673058 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:42 GMT ETag: "880d43-c0c-38c0fec00b780" Accept-Ranges: bytes Content-Length: 3084 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 a0 00 64 00 c4 00 00 00 00 00 33 03 03 2c 2b 2b 4c 05 05 6f 05 05 48 32 32 74 29 29 44 44 44 61 40 40 66 66 66 9a 00 00 b1 0a 0a 82 27 27 bb 32 32 d2 03 03 e5 13 13 cd 30 30 fa 2f 2f b0 51 51 cc 53 53 ff 4a 4a d4 73 73 fa 6d 6d 8a 8a 8a be 8f 8f bc bc bc f5 9b 9b d5 d5 d5 fa cb cb fb fb fb 00 00 00 00 00 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 a0 00 64 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 8e 76 7c bf 6d ad 5e 67 93 20 09 04 81 a4 32 a9 43 21 95 cd 28 4e 20 e4 fd 82 56 22 89 67 a1 78 29 91 c7 42 11 90 8a 0e 1d 0e c5 e1 28 9b df 30 aa f0 b7 11 b0 7c da 91 46 03 7e f8 1f 6c 0e 0b 03 66 03 1a 16 80 6d 70 8b 2d 09 78 74 07 77 43 3f 45 23 5e 7e 81 6c 89 0b 6e 4d 03 61 81 9d 8c a3 26 17 8f 94 92 74 95 22 7d 81 0b 9a 81 0a 52 01 99 8a a4 b7 24 19 a7 1b 17 26 02 07 09 09 07 72 aa 24 ad 6c 03 04 0e 98 6c 66 04 cf cf b8 d2 22 1b bb 19 25 09 d5 56 a6 93 79 ac a0 6c 65 0e e0 b6 22 4b 4c 27 [TRUNCATED] Data Ascii: GIF89ad3,++LoH22t))DDDa@@fff''2200//QQSSJJssmm!Ulead GIF SmartSaver Ver 2.0,d dihlp,tmxv\|m^g 2C!(N V"gx)B(0\|F~lfmp-xtwC?E#^~lnMa&t"}R$&r$llf"%Vyle"KL'OP-K'#7W#r>)@{, @Ca0N"2pa%j$\|( 4B>pbpt@ _:2+f`@h`2IRWlHG@" ADzJ^&EP:v-@e&,Ab;.6]V6D='GF;)jD[@JV`L"p0pmdT]@GuM5]x<7L(X7xr~e5'Gv?w ?}'[x}W`H{Z\|x24"\HO3h`u`"O%&'_GV)2aO&7_Ixr73>04dQ$oxLiWy4t`.cjGF6KYR'O3htWR`Dig3:Y'rXN%ehv(^eci4btZi(}EM&jc^rBrl<\|!imI&@
Jul 6, 2024 00:24:04.648683071 CEST	224	IN	Data Raw: 6d 38 b2 1a 36 c0 c2 ea cd c0 ae 82 3d 36 68 a8 b3 ae aa 36 af 99 81 44 80 18 a0 05 12 37 c8 08 c3 56 ca 2b c0 f6 85 05 6c 9e e4 68 8c 71 a3 3a 38 f8 c3 23 dc c1 1b b1 c5 27 d2 4b ce 6f 8f 8a 30 40 be b5 b0 15 72 38 fe ce 99 e9 af e0 0a 44 5c 1b Data Ascii: m86=6h6D7V+lhq:8#'Ko0@r8D\pO\#{m+M9'm\LBPY5,w4IucJ~/Ly2uDw(^`OAzTn
Jul 6, 2024 00:24:04.648693085 CEST	1236	IN	Data Raw: 07 eb 69 00 10 85 43 b2 0e 83 fe 30 5a f0 a7 3e 8d 78 d4 12 5e fc b6 9f fc 61 06 1f 9e 22 fc 56 32 d0 79 fb 1a 76 d1 9e 1e 86 a7 d9 9f df c0 ee 68 a1 17 81 ba e2 6e 4b eb e7 8a 3c a5 18 29 04 d6 8b fc 6f fb 27 f2 2d 2c 9f 81 db e0 72 5c a1 f7 32 Data Ascii: iC0Z>x^a"V2yvhnK<)o'-,r\2~'0S>l&%((Qa)1k}um[!`~5xBc@r2!f0G\J<:'rli8 d-!t6%)P}PkGZ,ig0
Jul 6, 2024 00:24:04.648705959 CEST	644	IN	Data Raw: 0b e8 05 76 d0 1f 84 68 da f2 1a c7 04 bf 86 cc ff e5 dc 63 45 f7 a2 db 75 b0 f6 8d 97 3c 70 7d f7 73 ce 68 4e 6c 9f 37 4d 53 32 eb 7a d4 75 b9 35 aa 9d 1d 89 6c 3f 1b dd 1d c0 73 77 52 8a 61 ac 4f 19 e6 d3 ce b6 d3 69 02 e6 5a b7 dc ce 58 96 39 Data Ascii: vhcEu<p}shNl7MS2zu5l?swRaOiZX9>}cs.PQck\i^mdk:,~g0qhcX,RZ[ZbNcyj)_nGUO}[CqOMmFhm\6>r

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:03.815498114 CEST	387	OUT	GET /images/inf-des.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:04.648729086 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d37-4cf-38c0fed506900" Accept-Ranges: bytes Content-Length: 1231 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 75 75 75 44 44 44 ba ba ba 30 30 30 10 10 10 ee ee ee 20 20 20 ce ce ce 99 99 99 de de de d9 d9 d9 89 89 89 65 65 65 aa aa aa 55 55 55 67 67 67 8b 8b 8b c9 c9 c9 d6 d6 d6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 b8 d1 30 d0 15 ea b0 41 61 77 c7 d2 11 3c 02 01 02 52 7f 31 7a 72 89 8a 8b 4c 01 8e 01 0f 78 2e 0f 83 39 04 01 31 01 04 3b 97 58 03 95 3b 82 84 51 9f a3 2f 9a 8c a9 aa ab 3c 8f 8f 10 2f 0d 01 b0 34 a8 00 9d 30 b6 99 9b 25 b8 56 a5 3c 10 b3 52 c0 b9 bc ac c8 c9 ca 2a 8e 00 08 0a 01 0b 23 86 23 7d 27 74 28 05 80 26 b6 9d 03 db 22 08 03 06 27 9a 74 e4 23 e2 e8 22 88 22 ba 23 de e0 00 da d7 92 d3 f6 00 ed 24 7b 25 08 fc fb 77 [TRUNCATED] Data Ascii: GIF89auuuDDD000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zn0Aaw<R1zrLx.91;X;Q/</40%V<R##}'t(&"'t#""#${%w@L$D_RH`WW5 9!+@r4-M]te<7"Zr)EtD$4BuFE"pLxA ~00VGGK/`x!a3Jh:?7Pz0ViNit?5[x&Y> $h: G@?Zn0xY6AH@,J8%DO@JqwwZVFiGar!DZERzrfTs$da\|X6D,0R_66WtH0&2@@a.X}aV(]{B("9dh)F3@#'&@,VGQ\|I&&(@3,&\ME>cu#rNA'(,Fh^<FSk\,ru*[c\|;+L]w57'mmo :fXpqj7j\|7bvpG&pby6`^%]6niA
Jul 6, 2024 00:24:04.648746014 CEST	251	IN	Data Raw: 54 e0 b0 c6 76 ec 71 12 ae 48 f8 58 48 06 8f 75 12 a6 42 46 e8 18 5c 13 87 08 a8 9f 02 8b c4 4d 63 43 6d 53 12 7c 7b a1 6a 2e 59 c3 b0 87 57 25 15 b3 1b 5a 01 d3 9e 5c 2f 09 90 d9 32 d6 53 28 84 37 4d 5b 6f ed 75 32 98 e0 10 ed c8 d4 d5 14 bd 0e Data Ascii: TvqHXHuBF\McCmS\|{j.YW%Z\/2S(7M[ou2_@c+'h58CCD@O50CBND+,*D$\|k!HU~wy8LICn;~J/hD@'<LGoWog}

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:03.815582991 CEST	388	OUT	GET /images/inf-tips.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:04.648361921 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:05 GMT ETag: "880d3c-513-38c0fed5fab40" Accept-Ranges: bytes Content-Length: 1299 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 44 44 44 75 75 75 ba ba ba 10 10 10 ee ee ee ce ce ce 20 20 20 30 30 30 d9 d9 d9 65 65 65 de de de 89 89 89 99 99 99 aa aa aa 55 55 55 67 67 67 8b 8b 8b d6 d6 d6 c9 c9 c9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 fa 5a 10 20 d6 36 84 a0 50 9a 83 13 03 88 08 af 97 d9 7f 02 09 70 83 84 85 54 01 01 47 02 01 03 86 31 03 01 02 24 90 0f 5f 08 88 04 00 97 01 99 8f 01 95 3f 9c 8e a3 a4 a5 40 88 43 90 92 8b 8d 4f a2 2b 04 89 40 aa 24 10 01 0d 5f 90 0e 92 ba 92 2d b4 b6 b8 a1 9d a6 c5 c6 c7 2e a8 24 6d 6f 23 6d 27 08 74 23 7f 93 91 00 ac 72 75 82 27 cc 24 72 d2 22 72 cd 22 05 cd dd 22 af 00 09 be 25 b1 24 eb e0 d0 db 09 e3 d7 f1 b4 2a cf ce ec 29 f4 22 d4 9a [TRUNCATED] Data Ascii: GIF89aDDDuuu 000eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.Z 6PpTG1$_?@CO+@$_-.$mo#m't#ru'$r"r""%$)"v@#O+MR:2j,lD}<p@V,2`@E\|U`>`"\|"@:Cb0(j>6xWI\yEJ&k'?vBzX}0H2Dt"z-a&:KA8lw'W67j<#@zWjh`)9ACWcu-$ pjI{jP@V%Eu."h(-wd0e!mBw@P7}7V#QgVBiUI,@("G@I$Be!S--IGwG$B(:Iqgl&-$NefI#i(Qcq%yB(S&dY1p9-T`=#j%r21\|3ZeyF1TQ(ON(IYXNrY@<Y%s.OqF+9bH4"NvF1S@tp@JIBk[8M4rKGk]G(
Jul 6, 2024 00:24:04.648464918 CEST	319	IN	Data Raw: 15 9e ac b6 0d 69 5e a5 92 14 b6 92 67 22 d0 9a e5 7c f5 49 86 cf be fd 46 c7 b2 bf d0 c6 0c c9 02 05 38 a0 87 4f 07 a4 0a ed bd b1 f4 f5 19 54 0e 5f 58 16 bd 1b 8a b2 dc 72 6d a6 ab f4 d2 46 ac 2b 9f 4e 7d b1 45 12 b1 90 de 6b ad 96 d6 34 68 58 Data Ascii: i^g"\|IF8OT_XrmF+N}Ek4hXTWnPCJNUXr`%']J,_'K&U?mS;8a5eUT1FH4U=`t@#\|^B6,C2,JG3E:;og@7SGog

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:03.815635920 CEST	388	OUT	GET /images/inf-free.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:04.648152113 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d38-71b-38c0fed506900" Accept-Ranges: bytes Content-Length: 1819 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 d5 00 00 00 00 00 10 10 10 20 20 00 20 20 20 30 30 30 60 60 0a 76 76 31 44 44 44 50 50 40 55 55 55 65 65 65 75 75 75 9a 9a 24 b4 b4 3e 8e 8e 4a 98 98 42 9a 9a 55 da da 1f ff ff 00 fe fe 0f ff ff 11 ec ec 31 f2 f2 37 f6 f6 3b df df 55 da da 64 ff ff 45 f9 f9 4f f2 f2 59 89 89 89 99 99 99 aa aa aa ba ba ba c8 c8 c8 ce ce ce d6 d6 d6 d9 d9 d9 de de de ee ee ee ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1d 42 75 69 6c 74 20 77 69 74 68 20 47 49 46 20 4d 6f 76 69 65 20 47 65 61 72 20 32 2e 36 00 21 f9 04 00 4b 00 00 00 2c 00 00 00 00 80 02 19 00 00 06 fe 40 80 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 b8 7c 4e af db ef f8 bc 7e cf ef fb ff 80 81 82 83 84 [TRUNCATED] Data Ascii: GIF89a 000``vv1DDDPP@UUUeeeuuu$>JBU17;UdEOY!NETSCAPE2.0!Built with GIF Movie Gear 2.6!K,@pH,rl:tJZvzxL.zn\|N~HwVIQFMJ ''"'%'v'P%IO'&F' M']B 'Iv''"'N&"^Dg_5D5.[\2(RNDjH&WDqdB2F+h2SE"$iJLH)rH{\|"r&b!VtI:$ihaS-['VR:[ )'=kB<q]"l%+Fv&nl-;IeuiuO,gL!dXMB]! 6bQ%}d^J:+\OHg\|]!q}pQR2&DcF)J=-"gWRqp[_%$0x pl9 G;6ZTu%A@;(p&VU_v{#w.\|`B&\|98?5O&vB'"S1(D=!'~ojy`hi6-J~,c1m).QI#$b
Jul 6, 2024 00:24:04.648338079 CEST	839	IN	Data Raw: 5f 7e d2 9a 9b 39 91 11 57 cf 70 70 a1 49 d1 2d bf fc 58 d0 39 3c 21 5b d0 96 a4 72 f7 c1 2f e3 2d 20 49 50 b3 ba ca 94 6f b6 98 f0 01 60 50 22 8a cf 94 21 05 56 ad 30 89 dd b2 ac b4 fe c0 e6 78 82 57 d0 24 66 57 43 e7 91 27 5e 2c e1 f5 85 6c ad Data Ascii: _~9WppI-X9<![r/- IPo`P"!V0xW$fWC'^,l joqS+6Cxxde(Zg[c`q(^+Tjeu-\!zy \H=zV!m>=CoBE3*-A<I_'_ljpk,XW#

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:03.860438108 CEST	388	OUT	GET /images/inf-help.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:04.648951054 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:05 GMT ETag: "880d39-4c4-38c0fed5fab40" Accept-Ranges: bytes Content-Length: 1220 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 75 75 75 44 44 44 ba ba ba de de de 30 30 30 10 10 10 ee ee ee 20 20 20 99 99 99 d9 d9 d9 65 65 65 89 89 89 ce ce ce 55 55 55 aa aa aa 67 67 67 8b 8b 8b d6 d6 d6 c9 c9 c9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a 9d 1e 0c 0e b7 81 81 ad 95 97 0e 83 84 fa 4d ef fb ff 6c 02 08 01 84 02 36 01 04 80 55 88 25 03 01 86 68 02 01 10 8a 95 96 97 57 92 01 05 04 84 0d 28 8e 90 23 a1 22 8c 60 92 03 62 a6 a3 8f 65 a8 00 0f 01 9f 98 b4 b5 b6 45 09 84 0c 22 09 10 73 bc 7c 00 a4 24 c3 88 78 70 23 06 a9 28 06 7a 26 78 24 09 c1 2d d2 c8 23 09 d6 00 af c0 ce 2f 6e 2e d8 27 d2 26 bf c2 cb a5 04 c7 22 c3 00 ca cf cb 09 e5 26 df 77 dd c9 f2 2a 76 d7 c1 db 25 d2 f6 bc [TRUNCATED] Data Ascii: GIF89auuuDDD000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zMl6U%hW(#"`beE"s\|$xp#(z&x$-#/n.'&"&wv%HIN0 `<Lid9&9C(X@yg PvLA%DnU1al@APD%:TD'bx>SCriI<-;b JjA9imP?%([TtWV cKE%df$9wI)lk @`&"fr2DK:d^?@,0!)SvUL" ~AfRymI&g5U+KI$4@92KFglu#qy0pOm#xcpTBFM2rN`$eNL) #S9"yI6$8QI"&V@\8r<0p$W9oGBG6mi+UIcAn)]hI!_@ynmB^))mJXQflm'X8wyd,][W;,nwX0 z,eJ\|I[YLU_L}
Jul 6, 2024 00:24:04.648961067 CEST	240	IN	Data Raw: 54 42 56 20 21 0b 93 c6 da fc 06 c1 6f 38 e9 62 14 9b cb e8 a5 93 3f 14 bf 36 95 08 70 69 84 8c b8 eb 4c c2 14 1c db b8 cc 98 56 71 9d 78 71 c6 73 4c a7 a9 bd 64 11 15 eb c6 1f f9 05 93 97 2e 6f f5 f1 1c af 0c a3 72 b5 f1 36 6c f5 d5 4b d0 13 cd Data Ascii: TBV !o8b?6piLVqxqsLd.or6lK45@(5:4)hMG*4N5#`-+Qx7x`_w~.AG:.~n[dD@o$7/S;

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:03.911006927 CEST	388	OUT	GET /images/inf-link.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:04.649092913 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:04 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:05 GMT ETag: "880d3a-59b-38c0fed5fab40" Accept-Ranges: bytes Content-Length: 1435 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 75 75 75 44 44 44 ba ba ba 10 10 10 ee ee ee 20 20 20 ce ce ce 89 89 89 65 65 65 99 99 99 30 30 30 de de de d9 d9 d9 aa aa aa 55 55 55 67 67 67 d6 d6 d6 c9 c9 c9 8b 8b 8b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 18 75 18 1c 46 03 c6 38 9c 2e 15 cc b1 f7 19 30 28 a4 ca f6 f5 52 ae ef fb ff 58 0b 01 83 0b 22 01 04 80 5b 87 25 03 01 02 31 8d 8f 02 01 0f 29 93 03 89 46 91 99 9c 9d 9e 3f 10 01 06 02 0d 98 00 8b 9f 37 97 3a a8 68 8e 90 af a1 09 96 01 a6 26 ab a9 34 9b b9 bc bd be b7 01 b3 24 87 6f 79 22 65 73 3a 0c 75 2d 07 c6 22 7c 2c c5 25 65 25 cb cf 00 05 67 b8 2d 6f 26 d5 ad 0c cb af 26 0c c9 8c e4 26 de 22 dc 25 dc c8 30 cb 77 70 d4 6a 2f 6f f6 2c f9 2f f2 22 91 d5 d6 [TRUNCATED] Data Ascii: GIF89auuuDDD eee000UUUggg!, dihlp,tmx\|pH,rl:tJZvzuF8.0(RX"[%1)F?7:h&4$oy"es:u-"\|,%e%g-o&&&"%0wpj/o,/"hd(c'`t(h1!D0x`F)_B@F&"R4tLhO0U5LT8zQVj4;6gM$`g0gHTf]Ud)A,j<dQC <x#3<`G >``Jpn8`tz>Dv4hh/;jb]xGkLOgv&O87k$R!~5}j[ rL]jdLQ%\|Mrg(&)"(#U+6:N,,B]TH_15uO-"wek]'V}APS5tI&pd]-Z6y_6:YFDf)$Ib"H 0GnKedc>$FkM9LY3kk]K$)mKg$KBOe#@O-jWY4Z&`L+[ikItnj#DEi\T9
Jul 6, 2024 00:24:04.649105072 CEST	455	IN	Data Raw: 77 86 45 c5 8d d5 30 23 02 14 d0 2d c7 a3 79 44 9c 71 19 95 fa 4a c6 b6 05 7b 6d 75 0e 5d 37 a2 ca 88 84 37 1e 09 62 99 76 b3 5d 0e 27 f8 ee 00 41 61 b3 8a 7e 83 8d 10 0a 02 16 3d 58 80 52 5f 96 40 34 7f e5 5a 49 42 c0 e4 b0 66 80 81 63 35 b9 e1 Data Ascii: wE0#-yDqJ{mu]77bv]'Aa~=XR_@4ZIBfc563 sW!qW( L[$xgVq@GJ$r[yM3XL=PBg.e<1E1soKe-UYBa%85 \|gt.<m

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://scamwebsite.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6768_1438638809\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6768_1438638809\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6768_1438638809\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6768_1438638809\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6768_1438638809\sets.json

Chrome Cache Entry: 347

Chrome Cache Entry: 348

Chrome Cache Entry: 349

Chrome Cache Entry: 350

Chrome Cache Entry: 351

Chrome Cache Entry: 352

Chrome Cache Entry: 353

Chrome Cache Entry: 354

Chrome Cache Entry: 355

Chrome Cache Entry: 356

Chrome Cache Entry: 357

Chrome Cache Entry: 358

Chrome Cache Entry: 359

Chrome Cache Entry: 360

Chrome Cache Entry: 361

Chrome Cache Entry: 362

Chrome Cache Entry: 363

Chrome Cache Entry: 364

Chrome Cache Entry: 365

Chrome Cache Entry: 366

Chrome Cache Entry: 367

Chrome Cache Entry: 368

Windows Analysis Report
http://scamwebsite.com/

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:04.663526058 CEST	290	OUT	GET /images/inf-samp.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:05.218357086 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:05 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d3b-5a6-38c0fed506900" Accept-Ranges: bytes Content-Length: 1446 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 44 44 44 75 75 75 ba ba ba 30 30 30 10 10 10 ce ce ce ee ee ee 20 20 20 aa aa aa 89 89 89 99 99 99 d9 d9 d9 de de de 65 65 65 55 55 55 67 67 67 c9 c9 c9 d6 d6 d6 8b 8b 8b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df df 84 20 61 95 1b 76 85 01 e4 68 98 c7 0a 02 65 80 30 02 77 34 09 05 55 02 89 70 8d 8e 6d 0c 01 92 0c 55 03 01 81 39 09 92 04 47 02 01 03 31 04 01 65 a2 2f 96 0a 35 08 01 8c 52 01 9c 8f b0 b1 63 10 01 08 03 0e 98 53 96 b9 37 96 0c bc 30 ae 31 9e a0 30 a5 64 c7 2d b4 0b 35 07 08 74 53 c2 b2 d3 d4 5a 96 cc 25 76 24 da 27 83 23 7d 28 05 d0 85 d9 b9 bb 23 8b db e4 27 7d ac e7 ec c0 00 ed 22 d2 29 e2 24 c4 27 eb df 85 c9 de 2f 02 [TRUNCATED] Data Ascii: GIF89aDDDuuu000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zn avhe0w4UpmU9G1e/5RcS7010d-5tSZ%v$'#}(#'}")$'/=H n&mc"J<`$\(bw:p`Q>Dp"R&ruGR;{(0uO?}JlC\2'Y%80S0:vUUFY_x\:D#Pb$M1E%aSJ(c5P@OQ>P(j-El$jAr[k`IXxIDz#2n{fxtOyb]3T-Yn#Vg_@IkbVr,[OxD#\|rBdqIb"hE0(0B(wZ^Sh%IfpM$qngF\e`tk`X\Y%kP(4H(.c0PP2Ct3@O{96Lk[>xI(b*gG~zbZ=lN\|zK#X0eqbM{id3 +,
Jul 6, 2024 00:24:05.218379974 CEST	466	IN	Data Raw: e0 c0 33 b2 76 ec f1 09 2e 11 80 9e 01 b8 51 92 1c 6f 26 8b 6b c0 00 02 b8 b9 22 03 e3 11 1b b0 4a cf 81 25 1d 4c 05 30 90 c8 03 03 cc fb 90 76 dc 15 6c 82 5a 30 e3 37 ed 02 0c 80 32 16 8b 44 f3 d6 ef 7b 01 d3 2b 72 7d 13 fa da 72 7c 81 86 78 6e Data Ascii: 3v.Qo&k"J%L0vlZ072D{+r}r\|xnth?"Ba#Tm:3`SU@DP!-1G.]y1BoIB$Ubw&<3;qURmb:^`I\O/b"p;{4Bq$pS6@

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:04.672226906 CEST	388	OUT	GET /images/hdr-welc.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:05.238215923 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:05 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:07 GMT ETag: "880d2a-69d-38c0fed7e2fc0" Accept-Ranges: bytes Content-Length: 1693 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 90 01 2d 00 c4 00 00 03 b0 b6 03 d7 d9 06 8b 93 03 6c 76 00 00 00 1c 25 2e 2a 39 46 00 00 17 4c 5d 6f 23 2e 39 0c 5a 67 08 4a 59 32 42 52 0c 7c 83 00 00 24 01 3b 4d 08 9c a3 28 67 74 37 4f 60 02 ed ee 16 1d 24 09 bc c0 00 00 0b 0b 0f 13 10 16 1b 00 01 2e 06 07 09 00 21 3c 00 1e 29 00 ff ff d9 d9 d9 00 19 40 21 f9 04 00 00 00 00 00 2c 00 00 00 00 90 01 2d 00 00 05 ff 20 21 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff 40 9e 66 48 0c 1a 8f c8 a4 72 c9 6c 3a 5b c4 a8 54 fa ac 5a af d8 ac 76 9b 9a 12 2f e0 8b 77 68 1a 6b ac 63 ae 7a cd 6e 3f a5 e1 b8 3c 6c ae 17 93 76 b2 7b cf ef fb 5f 51 71 18 83 84 85 72 66 73 62 79 8b 8c 53 87 51 7f 91 92 93 6c 5f 60 84 14 99 9a 9b 84 89 9e 89 8d a1 8e 9f 60 77 94 a7 a8 a9 47 96 17 18 9a 05 b0 b1 b1 9a 9d 73 85 b7 18 a4 ba bb a4 b8 b9 a5 7a aa c2 c3 c4 32 43 97 ae 14 b0 09 cc cd cd b0 b4 be c9 9b 99 86 ba d2 d8 b6 85 d4 14 83 c0 67 c5 e1 e2 e3 22 96 ae cb 06 e9 ea ea cf 05 d1 dc b2 d0 d1 d8 b7 dc f6 be f0 f2 dd b9 c1 e4 fe ff 94 [TRUNCATED] Data Ascii: GIF89a-lv%.9FL]o#.9ZgJY2BR\|$;M(gt7O`$.!<)@!,- !dihlp,tmx\|@fHrl:[TZv/whkczn?<lv{_QqrfsbySQl_``wGsz2Cg"R,KU,g,,/vSG>_<(]b[:)S;~s"P" P,PH` b.`/K1@%T!vL^+Te\'.J@v.r&vQQJf`uSV@vL6 (NKm2W(-bfa@<-rlfD@?XA~4Kz vUhdxI\eAIyXA:u03'~\!J"s,`@f!x`H&L6PF)etZ! %b(0#p@d#9!vA.BSj&eIu5nvZg%2Vi]&PYlv^F@@8+YJ67J=yW@QXN(zkZeF0\\fWQ`8 _Xt.Puc] W]
Jul 6, 2024 00:24:05.238229990 CEST	713	IN	Data Raw: 30 ab 5c 22 74 a9 c1 7d f9 5d f0 00 69 cc 2a 70 41 a6 17 bc 46 c0 99 98 92 a6 e6 01 1c a4 97 41 06 b6 8a db 6e c3 38 87 d3 eb 4f 0c 44 dc 56 9f 72 fd 69 c1 c8 37 fa 69 c1 a9 22 20 4d 82 06 ad 2e d0 27 07 c5 b2 15 c0 ca d8 6d 99 74 d1 00 1c 40 74 Data Ascii: 0\"t}]ipAFAn8ODVri7i" M.'mt@tL,Ez8A}{y\|V}^`cYl:^jA@x@A1MoY #x>Lsz]z.1f[)f=Z{el9tn

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:04.688360929 CEST	389	OUT	GET /images/housead3l.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:05.297390938 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:05 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:16 GMT ETag: "880d31-261c-38c0fee078400" Accept-Ranges: bytes Content-Length: 9756 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 d4 01 3c 00 f3 00 00 66 00 00 ff ff cc 66 99 99 66 33 66 cc cc cc 00 33 33 33 33 00 66 66 00 cc cc 66 00 00 00 99 99 00 ff ff 00 cc cc 00 ff ff ff cc 99 cc 99 cc ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 04 77 01 ff 00 2c 00 00 00 00 d4 01 3c 00 00 04 ff 10 c8 49 ab bd 38 eb cd bb ff 60 28 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 38 55 68 14 34 e5 f3 55 60 c6 a5 c7 f0 b8 ae a0 46 d7 4b 89 86 40 93 df 93 e8 41 04 0d 03 38 7d 41 80 72 89 55 82 1b 65 04 29 04 8f 1a 91 25 8c 40 82 77 35 94 97 0d 8a 4e 06 07 08 a2 07 06 72 6c 84 13 74 09 13 03 7a 26 05 91 98 02 99 b0 91 66 b3 22 98 a9 3c ba 35 b5 b2 99 1d 03 7e 28 bd 00 c1 9e 42 05 01 cc cc c8 5f 65 c4 65 ae 12 6c cf c7 d5 04 ab 74 75 b5 0d df 6d 14 de e0 c1 88 18 bd d1 02 da c7 e6 16 ed 1c 65 a8 14 98 dc 19 ef 8d 83 15 e3 df e5 d7 00 8c f5 42 d4 41 47 4d 02 b7 55 c9 7a 08 68 c6 0c 41 a9 38 0d 24 [TRUNCATED] Data Ascii: GIF89a<fff3f3333fff!NETSCAPE2.0!w,<I8`(dihlp,tmx\|pH,rl:tJZvz8Uh4U`FK@A8}ArUe)%@w5Nrltz&f"<5~(B_eeltumeBAGMUzhA8$`qBEqht%H8w])NE6o(SfS\|xLl^8ub}vV~TNCs,d!ybIh%UWx86JAdL W^"%\|.pL7k!V`5~jn8 ,T<K.u%7aT7himT\KXyD=GP3>ess=;]+=<x\JA g(X2F .J/aIvXptQZbilGCj8#BGABcIGFOQP1`[?#E%J"^0<l)dCr6Hy6`VdU+g\ZfNinGTVdde:Q xMNIAIQivpCy9# j:hBX&-*#Z=l!mq&aK5Z Xp%N!-"Kjx4\|8,,o[LYv0j!0z<.SDh
Jul 6, 2024 00:24:05.297568083 CEST	1236	IN	Data Raw: d6 71 0c 2f 0b f4 b6 ac 5a 18 14 2d 2b 5c 60 eb 91 96 57 85 8b 12 63 12 6f 82 be 07 13 9d c8 51 47 16 ce 15 7b f8 11 79 53 f5 8b 01 a0 a9 20 e4 73 44 48 9b 87 57 7e 3b a7 68 d5 9c 29 f5 14 53 79 ab d0 3c da 4e 9a 09 8d d3 72 b3 b2 93 df ca 1d 6c Data Ascii: q/Z-+\`WcoQG{yS sDHW~;h)Sy<Nrla$+Fb>yzGvaM,}N]#d"I1c:-dkC{.`3yB/^z/<\|BEo @Lk{
Jul 6, 2024 00:24:05.297585964 CEST	1236	IN	Data Raw: 5b da c3 9a 71 20 70 90 16 f5 aa 3f 44 07 58 97 23 d4 23 18 35 b7 f2 e0 69 e1 71 51 bd cd f8 ed 13 0e e6 0e 58 97 8e 03 d4 b6 87 b5 6d ad 05 07 8e 20 01 66 3c c1 e8 4c c2 ed 16 8c fb da 99 8e 4b b4 2d f0 ec 2a 64 fb 04 ef ae 93 02 d3 0d bc ad 80 Data Ascii: [q p?DX##5iqQXm f<LK-dQL1H~~^SR] 8x_;MP}1 _A?@+,#\|hvGNbK!l/8pf\|9N'B'"7+WM/ GZio:4K>L\|3
Jul 6, 2024 00:24:05.297605038 CEST	672	IN	Data Raw: 22 00 2c 1a 08 65 97 d9 bc c3 d6 7b 3c 46 32 41 33 4d ca f8 26 9b 4b be 29 a7 61 17 b1 a3 e6 24 7c ba c7 60 94 28 94 a5 cb 1d 52 78 26 68 56 14 5a f7 d9 3c 82 4d 40 a4 94 77 9d a6 67 06 7c aa 74 80 57 69 a1 47 55 a9 97 50 e5 25 80 ec 90 ba 50 5a Data Ascii: ",e{<F2A3M&K)a$\|`(Rx&hVZ<M@wg\|tWiGUP%PZ[&Ra8S>"X0NGlpyB'.?6@g1TU]f-+B[/3Vk9j:x&g,vfw18z{Pp.
Jul 6, 2024 00:24:05.297626019 CEST	1236	IN	Data Raw: a3 52 e2 68 24 62 00 0d 23 5c ca 61 b1 02 13 48 68 91 0d 8e 26 21 c5 9d 54 12 35 b6 e8 4f 5d 8d d1 9a 4f ec a6 9f 62 75 20 8f ea 22 56 92 26 c4 1e 39 f1 cf 60 51 2a 4a 1d 43 90 ae 92 bc 2f 14 a2 2b 06 65 34 b2 b9 15 88 d1 01 65 fc 20 e1 5c 66 ae Data Ascii: Rh$b#\aHh&!T5O]Obu "V&9`Q*JC/+e4e \f4pzhu=^Q0UB/cJ>6hsf#`=Q{hsZlO>qeKZZy.kY\|$k4X(zaj#\%Hh9k
Jul 6, 2024 00:24:05.297636986 CEST	1236	IN	Data Raw: ee 05 9f aa 34 20 79 dc c0 8b 4f 2f b0 61 e5 65 d5 f0 34 40 01 b4 13 0a 10 40 60 12 04 c8 40 6b e1 ae b0 31 49 6f 8a 17 79 fd 0a 1e 4c b8 b0 9d 08 00 21 f9 04 05 00 00 0e 00 2c 40 00 0b 00 5d 00 28 00 00 04 ff 10 c8 49 ab bd 38 eb 3d cd 41 e0 61 Data Ascii: 4 yO/ae4@@`@k1IoyL!,@](I8=AaThbEe xNOG,rx :t%cL.gznk}}wKM}my~%4=#-ufZw UzoqU(nH.{*m (Zg^J
Jul 6, 2024 00:24:05.297646999 CEST	448	IN	Data Raw: 25 02 34 3d 7e 23 2d 59 87 97 98 89 52 0b 8b 00 05 20 91 58 a2 08 03 7d 44 0b 0b 0c 1a 0c a9 9d 71 a2 b0 58 02 a7 ad 19 ac aa 1e 98 ba 98 48 b1 be 2e 02 bb 84 5d a8 aa b6 a9 0a a8 c2 cb 83 91 20 bf b0 c1 cc a8 76 00 c5 ab a8 c5 cc cc 65 4a 7f 02 Data Ascii: %4=~#-YR X}DqXH.] veJ~a#MRA+$$cf&*?TX0Exj6#$+:R"!T3=\& ['#mR9!9E]TA?W
Jul 6, 2024 00:24:05.297713041 CEST	1236	IN	Data Raw: 7b 11 8a 38 62 85 b8 45 00 00 21 f9 04 05 00 00 0d 00 2c e3 00 0b 00 5d 00 28 00 00 04 ff 10 c8 49 ab bd 38 eb cd bb ff 60 28 8e 64 69 9e 68 aa 52 46 71 18 c6 2a cf 93 81 04 f8 41 ef ea 80 e3 08 9e d0 74 fb 11 86 48 51 11 77 4c 3a 3b 82 5f 00 d1 Data Ascii: {8bE!,](I8`(dihRFq*AtHQwL:;_ZXf`6;^Cx${NZCW:,WwK\|j-uVQ}tWq@k>90KtXu?1]80
Jul 6, 2024 00:24:05.297724962 CEST	1236	IN	Data Raw: 7f 20 3c 07 02 04 82 3d 84 35 0a 6e 99 6e 89 8d 8e 1a 06 07 08 08 93 76 50 08 3b 28 0c 0a 7d 33 09 a0 7b 6e 0c 7d 9d 8e a0 68 a5 b8 95 22 9a 89 97 0b 0c 7e 9e 39 b7 b8 b8 08 ba 21 07 98 63 60 2d b4 9e 1a 75 c5 d3 a6 c8 1e 13 83 cd 26 d0 1d d2 51 Data Ascii: <=5nnvP;(}3{n}h"~9!c`-u&Q?.OG<h dP}}F\|&B`GDHcu=*L6 %.sf`2hGG#t:4[q)H;84ZT$wqMiua-etD&\
Jul 6, 2024 00:24:05.297735929 CEST	241	IN	Data Raw: 4d 3b ba e8 e6 00 42 2f bb 8f 5b c1 b2 d3 40 d0 f7 dd dc 6f fa ed d6 db 67 bd a1 27 df 82 0c 36 58 d6 6c 00 7a c7 df 7d f4 e9 46 0f 84 cb 74 67 88 85 f4 b9 a6 4e 36 b1 e9 d6 1d 86 d8 58 e8 5d 84 0e a6 a8 e2 8a 3d f9 57 9f 7d 1e 8a d6 21 78 de c1 Data Ascii: M;B/[@og'6Xlz}FtgN6X]=W}!xtx`n@Z0l$};^cf'$XNk&62k(&)%6f Wf)'%Fyes&zkvhzr~>mvJgZg(F*.;

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:04.688383102 CEST	388	OUT	GET /images/inf-blnk.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:05.284442902 CEST	496	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:05 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:15 GMT ETag: "880d36-f2-38c0fedf841c0" Accept-Ranges: bytes Content-Length: 242 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 b3 03 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 03 00 2c 00 00 00 00 80 02 19 00 00 04 9f f0 c9 49 ab bd 38 eb cd bb ff 60 28 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 b8 7c 4e af db ef f8 bc 7e cf ef fb ff 80 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae af b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf c0 c1 c2 55 11 00 3b Data Ascii: GIF89a!,I8`(dihlp,tmx\|pH,rl:tJZvzxL.zn\|N~U;

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:04.688438892 CEST	385	OUT	GET /images/blank.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:05.326092958 CEST	379	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:05 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:27 GMT ETag: "880cec-7d-38c0feb1bd5c0" Accept-Ranges: bytes Content-Length: 125 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 0a 00 0a 00 b3 00 00 ff ff ff 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 03 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 0a 00 0a 00 40 04 0a 70 c8 49 ab bd 38 eb cd 7b 8e 00 3b Data Ascii: GIF89a!!Ulead GIF SmartSaver Ver 2.0,@pI8{;

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:04.688484907 CEST	388	OUT	GET /images/butsamp2.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:05.255105019 CEST	1004	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:05 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:58 GMT ETag: "880d04-2ed-38c0fecf4db80" Accept-Ranges: bytes Content-Length: 749 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 5d 00 12 00 c4 00 00 8d 8a 00 6d 6b 01 ce ca 01 fb f8 54 23 23 03 c4 c0 00 4b 4a 0b f9 f4 02 fa f7 3d fa f5 16 c8 c5 3a fa f6 2c 89 87 28 e9 e5 01 a6 a2 00 bb b7 00 fa f7 6b cc c9 4e aa a8 44 75 73 23 9a 97 00 e0 db 01 62 61 03 bf bc 2b a8 a5 17 f2 ed 00 b0 ac 00 7e 7c 13 3f 3d 01 e0 de 5e ea e6 30 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 5d 00 12 00 00 05 ff e0 27 8e a4 48 18 06 51 ae 6c eb be 70 2c af 44 34 20 c8 02 cc 73 04 1d 33 03 64 30 00 96 84 8b 00 0f 26 41 54 1c 82 83 40 b5 7c 29 12 8e d9 04 71 38 68 56 06 84 c0 52 75 5d 1f 9c 4d 02 fd 21 4c 18 0c f2 07 3e 79 a7 e0 2a 03 a3 1e 17 5d b3 1f 1c 70 0c 54 25 0c 0b 5d 05 1c 26 83 62 72 6f 7d 65 1f 57 02 06 6a 1a 1c 04 10 88 09 0b 05 1f 9b 09 9d 0b 1e 39 15 04 0c 03 a2 0b 0b 5f 7f 1f 12 aa 9d 09 06 2b 17 09 19 52 72 1d 08 a2 09 63 1f bc ab 9f 65 b7 0d 1a 16 14 1b a8 08 05 16 0e 09 8a 08 0d 0e 01 bf 00 d0 68 87 05 01 15 5e 93 58 a0 07 14 06 09 15 3b 25 11 07 05 ba 22 03 19 d5 bf 16 06 03 e7 d0 8a 65 e5 07 19 e8 73 0b 68 1b [TRUNCATED] Data Ascii: GIF89a]mkT##KJ=:,(kNDus#ba+~\|?=^0!,]'HQlp,D4 s3d0&AT@\|)q8hVRu]M!L>y]pT%]&bro}eWj9_+Rrceh^X;%"eshqp`+ KC@.Dl@alq!,P40u+(.8\F-5 `Da'vxPG,jr?T(5nAp _&`i\P2[jT(aG6[vCZ*7!<8B+C@k:.ijN2Wez-!hRrzgiAg/?[w3Q~U`,@j&<PA@jAA(9h@gA<DX@@%($pp^ C dA:(dQP8EFi3p`IbYT;

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:04.881381989 CEST	290	OUT	GET /images/inf-free.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:05.430748940 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:05 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d38-71b-38c0fed506900" Accept-Ranges: bytes Content-Length: 1819 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 d5 00 00 00 00 00 10 10 10 20 20 00 20 20 20 30 30 30 60 60 0a 76 76 31 44 44 44 50 50 40 55 55 55 65 65 65 75 75 75 9a 9a 24 b4 b4 3e 8e 8e 4a 98 98 42 9a 9a 55 da da 1f ff ff 00 fe fe 0f ff ff 11 ec ec 31 f2 f2 37 f6 f6 3b df df 55 da da 64 ff ff 45 f9 f9 4f f2 f2 59 89 89 89 99 99 99 aa aa aa ba ba ba c8 c8 c8 ce ce ce d6 d6 d6 d9 d9 d9 de de de ee ee ee ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1d 42 75 69 6c 74 20 77 69 74 68 20 47 49 46 20 4d 6f 76 69 65 20 47 65 61 72 20 32 2e 36 00 21 f9 04 00 4b 00 00 00 2c 00 00 00 00 80 02 19 00 00 06 fe 40 80 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 b8 7c 4e af db ef f8 bc 7e cf ef fb ff 80 81 82 83 84 [TRUNCATED] Data Ascii: GIF89a 000``vv1DDDPP@UUUeeeuuu$>JBU17;UdEOY!NETSCAPE2.0!Built with GIF Movie Gear 2.6!K,@pH,rl:tJZvzxL.zn\|N~HwVIQFMJ ''"'%'v'P%IO'&F' M']B 'Iv''"'N&"^Dg_5D5.[\2(RNDjH&WDqdB2F+h2SE"$iJLH)rH{\|"r&b!VtI:$ihaS-['VR:[ )'=kB<q]"l%+Fv&nl-;IeuiuO,gL!dXMB]! 6bQ%}d^J:+\OHg\|]!q}pQR2&DcF)J=-"gWRqp[_%$0x pl9 G;6ZTu%A@;(p&VU_v{#w.\|`B&\|98?5O&vB'"S1(D=!'~ojy`hi6-J~,c1m).QI#$b
Jul 6, 2024 00:24:05.430771112 CEST	839	IN	Data Raw: 5f 7e d2 9a 9b 39 91 11 57 cf 70 70 a1 49 d1 2d bf fc 58 d0 39 3c 21 5b d0 96 a4 72 f7 c1 2f e3 2d 20 49 50 b3 ba ca 94 6f b6 98 f0 01 60 50 22 8a cf 94 21 05 56 ad 30 89 dd b2 ac b4 fe c0 e6 78 82 57 d0 24 66 57 43 e7 91 27 5e 2c e1 f5 85 6c ad Data Ascii: _~9WppI-X9<![r/- IPo`P"!V0xW$fWC'^,l joqS+6Cxxde(Zg[c`q(^+Tjeu-\!zy \H=zV!m>=CoBE3*-A<I_'_ljpk,XW#

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:04.884588957 CEST	290	OUT	GET /images/inf-tips.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:05.454118013 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:05 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:05 GMT ETag: "880d3c-513-38c0fed5fab40" Accept-Ranges: bytes Content-Length: 1299 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 44 44 44 75 75 75 ba ba ba 10 10 10 ee ee ee ce ce ce 20 20 20 30 30 30 d9 d9 d9 65 65 65 de de de 89 89 89 99 99 99 aa aa aa 55 55 55 67 67 67 8b 8b 8b d6 d6 d6 c9 c9 c9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 fa 5a 10 20 d6 36 84 a0 50 9a 83 13 03 88 08 af 97 d9 7f 02 09 70 83 84 85 54 01 01 47 02 01 03 86 31 03 01 02 24 90 0f 5f 08 88 04 00 97 01 99 8f 01 95 3f 9c 8e a3 a4 a5 40 88 43 90 92 8b 8d 4f a2 2b 04 89 40 aa 24 10 01 0d 5f 90 0e 92 ba 92 2d b4 b6 b8 a1 9d a6 c5 c6 c7 2e a8 24 6d 6f 23 6d 27 08 74 23 7f 93 91 00 ac 72 75 82 27 cc 24 72 d2 22 72 cd 22 05 cd dd 22 af 00 09 be 25 b1 24 eb e0 d0 db 09 e3 d7 f1 b4 2a cf ce ec 29 f4 22 d4 9a [TRUNCATED] Data Ascii: GIF89aDDDuuu 000eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.Z 6PpTG1$_?@CO+@$_-.$mo#m't#ru'$r"r""%$)"v@#O+MR:2j,lD}<p@V,2`@E\|U`>`"\|"@:Cb0(j>6xWI\yEJ&k'?vBzX}0H2Dt"z-a&:KA8lw'W67j<#@zWjh`)9ACWcu-$ pjI{jP@V%Eu."h(-wd0e!mBw@P7}7V#QgVBiUI,@("G@I$Be!S--IGwG$B(:Iqgl&-$NefI#i(Qcq%yB(S&dY1p9-T`=#j%r21\|3ZeyF1TQ(ON(IYXNrY@<Y%s.OqF+9bH4"NvF1S@tp@JIBk[8M4rKGk]G(
Jul 6, 2024 00:24:05.454206944 CEST	319	IN	Data Raw: 15 9e ac b6 0d 69 5e a5 92 14 b6 92 67 22 d0 9a e5 7c f5 49 86 cf be fd 46 c7 b2 bf d0 c6 0c c9 02 05 38 a0 87 4f 07 a4 0a ed bd b1 f4 f5 19 54 0e 5f 58 16 bd 1b 8a b2 dc 72 6d a6 ab f4 d2 46 ac 2b 9f 4e 7d b1 45 12 b1 90 de 6b ad 96 d6 34 68 58 Data Ascii: i^g"\|IF8OT_XrmF+N}Ek4hXTWnPCJNUXr`%']J,_'K&U?mS;8a5eUT1FH4U=`t@#\|^B6,C2,JG3E:;og@7SGog

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:04.898763895 CEST	289	OUT	GET /images/inf-des.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:05.588198900 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:05 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d37-4cf-38c0fed506900" Accept-Ranges: bytes Content-Length: 1231 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 75 75 75 44 44 44 ba ba ba 30 30 30 10 10 10 ee ee ee 20 20 20 ce ce ce 99 99 99 de de de d9 d9 d9 89 89 89 65 65 65 aa aa aa 55 55 55 67 67 67 8b 8b 8b c9 c9 c9 d6 d6 d6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df f0 b8 d1 30 d0 15 ea b0 41 61 77 c7 d2 11 3c 02 01 02 52 7f 31 7a 72 89 8a 8b 4c 01 8e 01 0f 78 2e 0f 83 39 04 01 31 01 04 3b 97 58 03 95 3b 82 84 51 9f a3 2f 9a 8c a9 aa ab 3c 8f 8f 10 2f 0d 01 b0 34 a8 00 9d 30 b6 99 9b 25 b8 56 a5 3c 10 b3 52 c0 b9 bc ac c8 c9 ca 2a 8e 00 08 0a 01 0b 23 86 23 7d 27 74 28 05 80 26 b6 9d 03 db 22 08 03 06 27 9a 74 e4 23 e2 e8 22 88 22 ba 23 de e0 00 da d7 92 d3 f6 00 ed 24 7b 25 08 fc fb 77 [TRUNCATED] Data Ascii: GIF89auuuDDD000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zn0Aaw<R1zrLx.91;X;Q/</40%V<R##}'t(&"'t#""#${%w@L$D_RH`WW5 9!+@r4-M]te<7"Zr)EtD$4BuFE"pLxA ~00VGGK/`x!a3Jh:?7Pz0ViNit?5[x&Y> $h: G@?Zn0xY6AH@,J8%DO@JqwwZVFiGar!DZERzrfTs$da\|X6D,0R_66WtH0&2@@a.X}aV(]{B("9dh)F3@#'&@,VGQ\|I&&(@3,&\ME>cu#rNA'(,Fh^<FSk\,ru*[c\|;+L]w57'mmo :fXpqj7j\|7bvpG&pby6`^%]6niA
Jul 6, 2024 00:24:05.588213921 CEST	251	IN	Data Raw: 54 e0 b0 c6 76 ec 71 12 ae 48 f8 58 48 06 8f 75 12 a6 42 46 e8 18 5c 13 87 08 a8 9f 02 8b c4 4d 63 43 6d 53 12 7c 7b a1 6a 2e 59 c3 b0 87 57 25 15 b3 1b 5a 01 d3 9e 5c 2f 09 90 d9 32 d6 53 28 84 37 4d 5b 6f ed 75 32 98 e0 10 ed c8 d4 d5 14 bd 0e Data Ascii: TvqHXHuBF\McCmS\|{j.YW%Z\/2S(7M[ou2_@c+'h58CCD@O50CBND+,*D$\|k!HU~wy8LICn;~J/hD@'<LGoWog}

Timestamp	Bytes transferred	Direction	Data
Jul 6, 2024 00:24:04.899163008 CEST	286	OUT	GET /images/logo.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 6, 2024 00:24:05.567861080 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 05 Jul 2024 22:24:05 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:42 GMT ETag: "880d43-c0c-38c0fec00b780" Accept-Ranges: bytes Content-Length: 3084 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 a0 00 64 00 c4 00 00 00 00 00 33 03 03 2c 2b 2b 4c 05 05 6f 05 05 48 32 32 74 29 29 44 44 44 61 40 40 66 66 66 9a 00 00 b1 0a 0a 82 27 27 bb 32 32 d2 03 03 e5 13 13 cd 30 30 fa 2f 2f b0 51 51 cc 53 53 ff 4a 4a d4 73 73 fa 6d 6d 8a 8a 8a be 8f 8f bc bc bc f5 9b 9b d5 d5 d5 fa cb cb fb fb fb 00 00 00 00 00 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 a0 00 64 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 8e 76 7c bf 6d ad 5e 67 93 20 09 04 81 a4 32 a9 43 21 95 cd 28 4e 20 e4 fd 82 56 22 89 67 a1 78 29 91 c7 42 11 90 8a 0e 1d 0e c5 e1 28 9b df 30 aa f0 b7 11 b0 7c da 91 46 03 7e f8 1f 6c 0e 0b 03 66 03 1a 16 80 6d 70 8b 2d 09 78 74 07 77 43 3f 45 23 5e 7e 81 6c 89 0b 6e 4d 03 61 81 9d 8c a3 26 17 8f 94 92 74 95 22 7d 81 0b 9a 81 0a 52 01 99 8a a4 b7 24 19 a7 1b 17 26 02 07 09 09 07 72 aa 24 ad 6c 03 04 0e 98 6c 66 04 cf cf b8 d2 22 1b bb 19 25 09 d5 56 a6 93 79 ac a0 6c 65 0e e0 b6 22 4b 4c 27 [TRUNCATED] Data Ascii: GIF89ad3,++LoH22t))DDDa@@fff''2200//QQSSJJssmm!Ulead GIF SmartSaver Ver 2.0,d dihlp,tmxv\|m^g 2C!(N V"gx)B(0\|F~lfmp-xtwC?E#^~lnMa&t"}R$&r$llf"%Vyle"KL'OP-K'#7W#r>)@{, @Ca0N"2pa%j$\|( 4B>pbpt@ _:2+f`@h`2IRWlHG@" ADzJ^&EP:v-@e&,Ab;.6]V6D='GF;)jD[@JV`L"p0pmdT]@GuM5]x<7L(X7xr~e5'Gv?w ?}'[x}W`H{Z\|x24"\HO3h`u`"O%&'_GV)2aO&7_Ixr73>04dQ$oxLiWy4t`.cjGF6KYR'O3htWR`Dig3:Y'rXN%ehv(^eci4btZi(}EM&jc^rBrl<\|!imI&@
Jul 6, 2024 00:24:05.567898035 CEST	1236	IN	Data Raw: 6d 38 b2 1a 36 c0 c2 ea cd c0 ae 82 3d 36 68 a8 b3 ae aa 36 af 99 81 44 80 18 a0 05 12 37 c8 08 c3 56 ca 2b c0 f6 85 05 6c 9e e4 68 8c 71 a3 3a 38 f8 c3 23 dc c1 1b b1 c5 27 d2 4b ce 6f 8f 8a 30 40 be b5 b0 15 72 38 fe ce 99 e9 af e0 0a 44 5c 1b Data Ascii: m86=6h6D7V+lhq:8#'Ko0@r8D\pO\#{m+M9'm\LBPY5,w4IucJ~/Ly2uDw(^`OAzTniC0Z>x
Jul 6, 2024 00:24:05.567934990 CEST	868	IN	Data Raw: 68 47 73 a7 c7 97 5c 72 89 8b 88 e1 7f 4a 98 0a 5b ae f2 08 a8 3c 65 08 23 ba ce 10 7a a3 4c 0f e2 69 52 c7 19 d0 1f 86 e3 a4 67 13 33 09 72 98 a6 57 de 75 a5 7b cd 67 5a 8f 7a d4 a6 2e 2a 73 b3 9c 0d 00 fc c2 d9 ad c6 32 9a 1d 01 6b 5e 27 b6 cb Data Ascii: hGs\rJ[<e#zLiRg3rWu{gZz.*s2k^'2vLcI3;0`4S9V@Mi^miu90vZMR8%^$.G_ 1@:WWyr6{kcEvh