Edit tour

Windows Analysis Report
https://dgpopup.app.link/hVidoedgAT

Overview

General Information

Sample URL:	https://dgpopup.app.link/hVidoedgAT
Analysis ID:	1475632
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2708 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1788,i,14683446140847902835,6872214354368846153,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dgpopup.app.link/hVidoedgAT" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://dgpopup.app.link/hVidoedgAT MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1976,i,9617755207975311864,8278058680908410500,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /_/PlayStoreUi/cspreport/fine-allowlist HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 2391sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"Content-Type: application/csp-reportsec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://play.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: reportReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=XhwPU9MAa4ll8xGRfwcUYoCYBb9yB8fBOSAuqc5WcBeZJYy0Aio41uLV3SBiDJk84xQIuelHSDssmtj-OWvNOtmDo_0GeozYWLofs7U__ufIUAtuujZR8-k0RHLuofmkShFg-21JorkNjrITHOU_Y1BwJPWVpQRU4uoTMeDjgfM

Source: https://dgpopup.app.link/hVidoedgAT	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/double-good/id1401184723	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/double-good/id1401184723	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/double-good/id1401184723	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=yaxayboz60pm	HTTP Parser: No favicon
Source: https://www.apple.com/	HTTP Parser: No favicon
Source: https://www.apple.com/	HTTP Parser: No favicon
Source: https://www.apple.com/	HTTP Parser: No favicon
Source: https://www.apple.com/	HTTP Parser: No favicon
Source: https://www.apple.com/store	HTTP Parser: No favicon
Source: https://www.apple.com/store	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49750 version: TLS 1.2

Source:	Binary string: oDb=function(a=Infinity){return _.qW(_.bW,a)};_.pDb=function(...a){return oDb(1)(hW(a,jW(a)))}; source: chromecache_302.2.dr
Source:	Binary string: yDb=function({bufferSize:a=Infinity,lH:b=Infinity,JM:c,scheduler:d}){let e,f=0,g;return(h,k)=>{f++;let m;e?m=e.subscribe(k):(e=new _.ADb(a,b,d),m=e.subscribe(k),g=h.subscribe({next(n){e.next(n)},error(n){const p=e;e=g=void 0;p.error(n)},complete(){g=void 0;e.complete()}}),g.closed&&(g=void 0));k.add(()=>{f--;m.unsubscribe();c&&f===0&&g&&(g.unsubscribe(),e=g=void 0)})}};_.zW=function(...a){const b=jW(a);return _.mW((c,d)=>{(b?_.pDb(a,c,b):_.pDb(a,c)).subscribe(d)})}; source: chromecache_302.2.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_333.2.dr	String found in binary or memory: "https://www.facebook.com/Apple", equals www.facebook.com (Facebook)
Source: chromecache_333.2.dr	String found in binary or memory: "https://www.linkedin.com/company/apple", equals www.linkedin.com (Linkedin)
Source: chromecache_333.2.dr	String found in binary or memory: "https://www.twitter.com/Apple" equals www.twitter.com (Twitter)
Source: chromecache_333.2.dr	String found in binary or memory: "https://www.youtube.com/user/Apple", equals www.youtube.com (Youtube)
Source: chromecache_679.2.dr	String found in binary or memory: "https://www.facebook.com/AppStore/" equals www.facebook.com (Facebook)
Source: chromecache_538.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),oa=R.length,ma=0;ma<oa;ma++)if(!u&&c(R[ma],E.xe)){CI("https://www.youtube.com/iframe_api");u=!0;break}})}}else J(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr, chromecache_538.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Vj:function(){e=Cb()},od:function(){d()}}};var lc=ja(["data-gtm-yt-inspected-"]),gC=["www.youtube.com","www.youtube-nocookie.com"],hC,iC=!1; equals www.youtube.com (Youtube)
Source: chromecache_216.2.dr	String found in binary or memory: return a=n===l.CARD_DISPLAY_STYLES.appOfTheDay?_:n===l.CARD_DISPLAY_STYLES.gameOfTheDay?P:n===l.CARD_DISPLAY_STYLES.inAppPurchase?k:this.getTitleKey(e),this.i18n.t(a,{appName:r,storyTitle:i,_disableSafeString:!0})}getOGType(){return i.default.meta.og.type.story}getTwitterSite(){return this.appViewState.isMacAppStoreView?this.i18n.t("WEA.EditorialItemProductPages.Twitter.site.macOs",{_disableSafeString:!0}):super.getTwitterSite(...arguments)}getTwitterTitle(){return this.getOGTitle(...arguments)}getSchemaTags(e){const{product:t}=e.viewModel,r=E(t),[i]=r,n=(0,l.hasShelfDisplay)(i,"collectionLockup"),{lastPublishedDate:a}=t,o={"@type":"Organization",name:"Apple Inc",url:"http://www.apple.com",logo:{"@type":"ImageObject",url:"https://www.apple.com/ac/structured-data/images/knowledge_graph_logo.png"}},s=this.getOGImageTags(e).find((e=>"og:image"===e.name))\|\|{},p={"@context":"http://schema.org",name:this.getSeoTitle(e)??this.getTitle(e),description:this.getSeoDescription(e)??this.getDescription(e),image:s.content,author:o,publisher:o,headline:this.getOGTitle(e),dateModified:a,datePublished:a} equals www.twitter.com (Twitter)
Source: chromecache_529.2.dr	String found in binary or memory: return b}eC.J="internal.enableAutoEventOnTimer";var lc=ja(["data-gtm-yt-inspected-"]),gC=["www.youtube.com","www.youtube-nocookie.com"],hC,iC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: dgpopup.app.link
Source: global traffic	DNS traffic detected: DNS query: cdn.branch.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: calleis.dgpopup.com
Source: global traffic	DNS traffic detected: DNS query: is1-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is2-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is5-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is4-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is3-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: play-lh.googleusercontent.com

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1788,i,14683446140847902835,6872214354368846153,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dgpopup.app.link/hVidoedgAT"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1976,i,9617755207975311864,8278058680908410500,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1788,i,14683446140847902835,6872214354368846153,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1976,i,9617755207975311864,8278058680908410500,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://dgpopup.app.link/hVidoedgAT	0%	Avira URL Cloud	safe
https://dgpopup.app.link/hVidoedgAT	0%	Virustotal		Browse

IP	Domain	Country	ASN	ASN Name	Malicious
99.86.4.74	dgpopup.app.link	United States	16509	AMAZON-02US	false
216.58.206.54	play-lh.googleusercontent.com	United States	15169	GOOGLEUS	false
18.245.31.99	calleis.dgpopup.com	United States	16509	AMAZON-02US	false
99.86.4.58	unknown	United States	16509	AMAZON-02US	false
142.250.185.142	play.google.com	United States	15169	GOOGLEUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
108.138.26.116	cdn.branch.io	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
108.138.26.79	unknown	United States	16509	AMAZON-02US	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1475632
Start date and time:	2024-07-18 06:27:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://dgpopup.app.link/hVidoedgAT
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@26/748@34/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://apps.apple.com/app/id1401184723 Browse: https://play.google.com/store/apps/details?id=com.doublegood.nativeapp Browse: https://www.apple.com/ Browse: https://www.apple.com/us/shop/goto/store

Input	Output
URL: https://dgpopup.app.link/hVidoedgAT Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form explicitly requesting sensitive information.","The text does not create a sense of urgency or interest by offering to view documents or invoices.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: dgpopup.app.link/hVidoedgAT OCR: Scan to download the app DOUBLE GOOD Double Good Virtual Fundraising Download on Download on App Store Google play
URL: https://apps.apple.com/us/app/double-good/id1401184723 Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, so there is no request for sensitive information.","The text does not create a sense of urgency, as it is just a description of the Double Good app and its features.","There is no CAPTCHA or any other anti-robot detection mechanism on the webpage."]}
Title: Double Good on the AppStore OCR: S tore iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support App Store Preview Open the Mac App Store to buy and download apps. Double Good #1 Virtual Fundraising App Double Good Designed for iPhone #137 in Productivity iPhone Screenshots Hello The Leaderboard Anastasia Philipps I. Cooch Doni SL312 2. Coopet Donin 9225 3. Larson SL123 4. Giana Bothman Sl,ogs $1,312 Enter an Event Code S, On-tar Joan team'S 6, Ahmad Gouse am raising tho funds tor my Organize an Event Track team at Katella High Makenna Donin a for
URL: https://apps.apple.com/us/app/double-good/id1401184723 Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form explicitly requesting sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV).","The text does not create a sense of urgency by not including phrases like 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Double Good on the AppStore OCR: S tore iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support App Store Preview Open the Mac App Store to buy and download apps. Double Good #1 Virtual Fundraising App Double Good Designed for iPhone #137 in Productivity 25.9K Ratings iPhone Screenshots Hello The Leaderboard Anastasia Philipps I. Cooch Doni SL312 2. Coopet Donin 9225 3. Larson SL123 4. Giana Bothman Sl,ogs $1,312 Enter an Event Code S, On-tar Joan team'S 6, Ahmad Gouse am raising tho funds tor my Organize an Event Track team at Katella High Makenna Donin a for
URL: https://play.google.com/store/apps/details?id=com.doublegood.nativeapp Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that encourage immediate action such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Double Good - Apps on Google Play OCR: Google Play O Q Games Apps Movies & TV Books Kids Good Double Double Good Technologies, LLC 4.9 100K* Everyone O 5.08K reviews Downloads Install Share Add to wishlist App support Philipps Similar apps Rubio's sl,sn Rubio's Restaurants, Inc. Tijuana Flats uc.NA Tijuana Flats 4.6 Colgate Connect About this app Colgate-Palmolive Company 4.6 Double Good is the #1 product-based virtual fundraising platform! An app designed to help youth teams and organizations do more ot what they love by selling our premium gourmet popcom to friends and family anywhere in the USA. So, say goodbye to the headaches of traditional fundraising! With Double Good, you
URL: https://play.google.com/store/apps/details?id=com.doublegood.nativeapp Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, so there is no request for sensitive information.","The text does not create a sense of urgency, it is informative and promotional in nature.","There is no CAPTCHA or any other anti-robot detection mechanism present on the webpage."]}
Title: Double Good - Apps on Google Play OCR: Google Play O Q Games Apps Movies & TV Books Kids Double Good Double Good Technologies, LLC 4.9 100K* Everyone O 5.08K reviews Downloads Install Share Add to wishlist App support Philipps Similar apps Rubio's sl,sn Rubio's Restaurants, Inc. Tijuana Flats Tijuana Flats Colgate Connect About this app Colgate-Palmolive Company Double Good is the #1 product-based virtual fundraising platform! An app designed to help youth teams and organizations do more of what they love by selling our premium gourmet popcorn to friends and family anywhere in the USA. So, say goodbye to the headaches of traditional fundraising! With Double Good, you
URL: https://www.apple.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that encourage immediate action such as 'Click here to view document' or 'To view secured document click here'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism.","The text 'You've never seen everything like this before. Learn more' is informative and does not create a sense of urgency."]}
Title: Apple OCR: S tore iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support ii..Q 'Vision Pro fYOu've neverseeryeverything like thi before. Learn more
URL: https://www.apple.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as it does not request any sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as it does not use phrases such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Apple OCR: S tore iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support 'Vision Pro ou've never seenyverything like this before. Learn more
URL: https://www.apple.com/store Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, so the value for loginform is set to false.","The text 'Store Mac iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support Store. The best way to buy the Need shopping help? Ask a Specialist Z products you love. Visit an Apple Store Find one near you AirPods iPhone iPad Apple Watch Apple Vision Pro AirTag Apple TV 4K Mac The latest. Take a look at what's new, right now. APPLE VISION PRO Welcome to spatial computing. From $3499 or $291.58/mo. for 12 mo.* ' does not create a sense of urgency, so the value for urgency is set to false.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism, so the value for captcha is set to false."]}
Title: Apple Store Online - Apple OCR: S tore Mac iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support Store. The best way to buy the Need shopping help? Ask a Specialist Z products you love. Visit an Apple Store Find one near you AirPods iPhone iPad Apple Watch Apple Vision Pro AirTag Apple TV 4K Mac The latest. Take a look at what's new, right now. APPLE VISION PRO Welcome to spatial computing. From $3499 or $291.58/mo. for 12 mo.*
URL: https://www.apple.com/store Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text does not create a sense of urgency, as there are no phrases that encourage immediate action such as 'Click here to view document' or 'To view secured document click here'.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Apple Store Online - Apple OCR: S tore Mac iPad iPhone Watch Vision AirPods TV & Home Entertainment Accessories Support Store. The best way to buy the Need shopping help? Ask a Specialist products you love. Visit an Apple Store Find one near you > AirPods iPhone iPad Apple Watch Apple Vision Pro AirTag Apple TV 4K Mac The latest. Take a look at what's new, right now. IPAD PRO IPHONE 15 PRO APPLE VISION PRO Titanium Thinpossible. Welcome to spatial computing. From $999 or $83.25/mo. for 12 mo.* From $999 or $41.62/mo. for 24 mo.* From $3499 or $291.58/mo. for 12 mo.*

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2916)
Category:	downloaded
Size (bytes):	7201
Entropy (8bit):	5.323614922185539
Encrypted:	false
SSDEEP:	192:ri9TDfZmRHx+tvDbXKzB7fk+sI4F1G6q/w:IeW7bXKpfk+sIi1/r
MD5:	CD86F4C84B8F7DF760E5F75A751DCB8D
SHA1:	319D6E15F9A24DE90F6242F034B9333E0435611E
SHA-256:	FFC4C06C650C9C84C44D48EB37A939922FD68651F49CCC456AF1E3DBFA1F65BC
SHA-512:	A8BE715C0BBC34803EF61B93E0F09AB6BEDE07A447EBCD86237ED4D4078B8E9FE3CF853B7738E15F02DD76DE85F946AA251DBF135D3D1DB6B1281E135C457410
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.143.51ab2213649d58cc21f3.js
Preview:	var __ember_auto_import__.!function(){var e,n,t,r,i,o={9605:function(e,n,t){e.exports=function(){var e=_eai_d,n=_eai_r.function r(e){return e&&e.__esModule?e:Object.assign({default:e},e)}window.emberAutoImportDynamic=function(e){return 1===arguments.length?n("_eai_dyn_"+e):n("_eai_dynt_"+e)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(e){return n("_eai_sync_"+e)(Array.prototype.slice.call(arguments,1))},e("@amp/affiliate-util",[],(function(){return r(t(2353))})),e("@amp/foundation/-internals/network",[],(function(){return r(t(73624))})),e("@amp/foundation/-internals/storage",[],(function(){return r(t(92141))})),e("@amp/media-api-config-amp-books-realm",[],(function(){return r(t(52215))})),e("@amp/media-api-config-amp-podcasts-realm",[],(function(){return r(t(61384))})),e("@amp/media-api-config-apps-realm",[],(function(){return r(t(61069))})),e("@amp/media-api-legacy",[],(function(){return r(t(89176))})),e("@amp/web-apps-featurekit",[],(function(){return

Source	Detection	Scanner	Label	Link
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://www.youtube.com/iframe_api	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://www.apache.org/licenses/	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://npms.io/search?q=ponyfill.	0%	URL Reputation	safe
http://schema.org	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.	0%	URL Reputation	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
http://www.apache.org/licenses/LICENSE-2.0	0%	URL Reputation	safe
https://play.google.com/	0%	Avira URL Cloud	safe
https://myaccount.google.com/termsofservice	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js?trustedtypes=true&render=$	0%	Avira URL Cloud	safe
https://play.google.com/	0%	Virustotal		Browse
https://is2-ssl.mzstatic.com	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/Purple112/v4/a3/55/1b/a3551b0f-be17-5459-5fe1-80be760c77a1/	0%	Avira URL Cloud	safe
https://www.doublegood.com	0%	Avira URL Cloud	safe
https://www.youtube.com/user/Apple	0%	Avira URL Cloud	safe
https://is2-ssl.mzstatic.com	0%	Virustotal		Browse
about:blank	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/a9/87/84/a98784ca-b930-ca49-3f3a-edd89dd	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/vzhhZ5bXQHq-FXyv9nFxE4JSE8-WuOrcYqaOivoV_HJObVnQZi3R5Eg_pPr08OPIJPM=s64-rw	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	0%	Avira URL Cloud	safe
https://myaccount.google.com/termsofservice	0%	Virustotal		Browse
https://www.youtube.com/user/Apple	0%	Virustotal		Browse
https://www.google.com	0%	Avira URL Cloud	safe
https://www.doublegood.com	0%	Virustotal		Browse
https://www.google.com	0%	Virustotal		Browse
https://play.google.com/about/comment-posting-policy?hl=	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	0%	Virustotal		Browse
https://play-lh.googleusercontent.com/G4t8bo6LHFmJagnaSIZyd5KT_pXEFHzNP70zsnOAK1cJifUtsd1eXLCI7u06ZRdj2t4=w526-h296-rw	0%	Avira URL Cloud	safe
https://www.linkedin.com/company/apple	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/tr0VoNqq3gBqmraVhqR91OC2LHxGuVd7zOKX5OsH5GMttiksSo0qbiXNmVW8mfQP-GM=w240-h480-rw	0%	Avira URL Cloud	safe
https://github.com/w3c/IntersectionObserver.	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/ef/8f/4b/ef8f4b61-961d-a364-92e2-f8c36b8d9c07/	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/Y4yB0iYXDTH3XtWxB9gEbRbV6AifRp1KpYrtLMSm8HGX0sjz3hRDAzbXH43tVBNXtaJU=s64-rw	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/QBx-arbJ1aLnRz_LhY5JmeLRrD1hvljiNZ73MShZdTSKgkPI4EVnySC_Qy6uOPUcTUc=s64-rw	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/a-/ALV-UjUUbkNyE3PaaH17Kuqf51kOJYDi8N58L3xMtxMYteoZ5qaz81_v=s32-rw	0%	Avira URL Cloud	safe
https://www.linkedin.com/company/apple	0%	Virustotal		Browse
https://policies.google.com/terms;target;_blank;class;cOP9Jc	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw	0%	Avira URL Cloud	safe
https://github.com/w3c/IntersectionObserver.	0%	Virustotal		Browse
https://calleis.dgpopup.com/fundraising-platform/static/fb-share-kernel-chi-town-chow-down.png?o=%7B	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/f0/7f/e9/f07fe907-86e5-d725-4d7a-8549f619150b/	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/4b/e2/ef/4be2efef-e4b7-9df0-5ab5-804a537	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw	0%	Virustotal		Browse
https://support.google.com/googleplay/?p=report_content	0%	Avira URL Cloud	safe
https://www.twitter.com/Apple	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/1c/ac/81/1cac81d8-ece3-8d4c-26ed-7e824bb5cc79/	0%	Avira URL Cloud	safe
https://git.io/fxCyr	0%	Avira URL Cloud	safe
https://play.google.com/_/PlayStoreUi/browserinfo?f.sid=6606219330935926145&bl=boq_playuiserver_20240716.01_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=1728&rt=j	0%	Avira URL Cloud	safe
https://support.google.com/googleplay/?p=report_content	0%	Virustotal		Browse
https://git.io/fjule	0%	Avira URL Cloud	safe
https://raw.github.com/emberjs/ember.js/master/LICENSE	0%	Avira URL Cloud	safe
https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.	0%	Avira URL Cloud	safe
https://support.google.com/googleplay/?p=remote_install_error	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/N33Lq9SyPb_gs3x--sCVG8ccFr2ocSOO-uIZUrVddoLfXmCnJW_NZmHCrND9gFf5JQw=s64-rw	0%	Avira URL Cloud	safe
https://is5-ssl.mzstatic.com	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/6e/5a/b1/6e5ab123-bce4-0801-c924-99d93b8	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/EGemoI2NTXmTsBVtJqk8jxF9rh8ApRWfsIMQSt2uE4OcpQqbFu7f7NbTK05lx80nuSijCz7sc3a277R67g=s32-rw	0%	Avira URL Cloud	safe
https://play.google.com/about/play-terms/index.html	0%	Avira URL Cloud	safe
https://cdn.branch.io/branch-assets/1659570097391-og_image.png	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/4f/4b/b0/4f4bb01f-6496-dcee-2780-4384275	0%	Avira URL Cloud	safe
https://www.google.%/ads/ga-audiences	0%	Avira URL Cloud	safe
https://support.google.com/googleplay/answer/10066529	0%	Avira URL Cloud	safe
https://www.doublegood.com/privacy/	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/0apCRgnn7rmfimpMKLWLoxIgZT38zy43viBiFEWrlBz78etDfabSeBuV9JIbxXRlIg=w526-h296-rw	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/20JTuTxzqjXT2g9EWKqGLb8777WozXNGcXu9vl4L47jf7RjpXoI2DK3N8_QNSFEv_yE=w526-h296-rw	0%	Avira URL Cloud	safe
https://payments.sandbox.google.com/payments/v4/js/integrator.js?rk=1	0%	Avira URL Cloud	safe
https://play.google.com	0%	Avira URL Cloud	safe
http://www.wikidata.org/entity/Q312	0%	Avira URL Cloud	safe
https://dgpopup.app.link/favicon.ico	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com	0%	Avira URL Cloud	safe
https://www.goldmansachs.com/terms-and-conditions/Apple-Card-Customer-Agreement.pdf	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/49/4c/bc/494cbcf1-b774-6b4c-dd73-e42982b9ebbc/	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	Avira URL Cloud	safe
https://play.google.com/_/PlayStoreUi/cspreport/fine-allowlist	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/ekBs763SFdG0zWgd3la3tYKqlUmt5VqJqVH-STUbVs1kMRX_TpoY5QMcWT48-yAOwtM=w526-h296-rw	0%	Avira URL Cloud	safe
https://www.wikidata.org/wiki/Q368215	0%	Avira URL Cloud	safe
https://www.google.com/tools/feedback/chat_load.js	0%	Avira URL Cloud	safe
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/34/c0/7d/34c07d29-920d-8256-85b2-eb06131c97a1/	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0	0%	Avira URL Cloud	safe
https://support.google.com/googleplay/answer/6014972	0%	Avira URL Cloud	safe
https://support.google.com/googleplay?p=eligibility_requirements	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/2lOS0z6kF8J2xo5dJjzcsbsf8MB4DFC1Aw71XwtM_GabHRTsnKevS6fID1kl6XiuZ64=w526-h296-rw	0%	Avira URL Cloud	safe
https://play-lh.googleusercontent.com/a-/ALV-UjWuDlmlBYEPhLxKZUvX-UZkfsKyvu02TgJE-VZhnsYRbq-07T0jYg=s32-rw	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Antivirus Detection	Reputation
play.google.com	142.250.185.142	true	false	0%, Virustotal, Browse	unknown
cdn.branch.io	108.138.26.116	true	false	0%, Virustotal, Browse	unknown
dgpopup.app.link	99.86.4.74	true	false	0%, Virustotal, Browse	unknown
play-lh.googleusercontent.com	216.58.206.54	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.164	true	false	0%, Virustotal, Browse	unknown
calleis.dgpopup.com	18.245.31.99	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
is2-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
is3-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
is1-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
is5-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
is4-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Name	Malicious	Antivirus Detection	Reputation
about:blank	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/vzhhZ5bXQHq-FXyv9nFxE4JSE8-WuOrcYqaOivoV_HJObVnQZi3R5Eg_pPr08OPIJPM=s64-rw	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/G4t8bo6LHFmJagnaSIZyd5KT_pXEFHzNP70zsnOAK1cJifUtsd1eXLCI7u06ZRdj2t4=w526-h296-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/tr0VoNqq3gBqmraVhqR91OC2LHxGuVd7zOKX5OsH5GMttiksSo0qbiXNmVW8mfQP-GM=w240-h480-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/Y4yB0iYXDTH3XtWxB9gEbRbV6AifRp1KpYrtLMSm8HGX0sjz3hRDAzbXH43tVBNXtaJU=s64-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/QBx-arbJ1aLnRz_LhY5JmeLRrD1hvljiNZ73MShZdTSKgkPI4EVnySC_Qy6uOPUcTUc=s64-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/a-/ALV-UjUUbkNyE3PaaH17Kuqf51kOJYDi8N58L3xMtxMYteoZ5qaz81_v=s32-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://play.google.com/store/apps/details?id=com.doublegood.nativeapp	false		unknown
https://play.google.com/_/PlayStoreUi/browserinfo?f.sid=6606219330935926145&bl=boq_playuiserver_20240716.01_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=1728&rt=j	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/N33Lq9SyPb_gs3x--sCVG8ccFr2ocSOO-uIZUrVddoLfXmCnJW_NZmHCrND9gFf5JQw=s64-rw	false	Avira URL Cloud: safe	unknown
https://dgpopup.app.link/hVidoedgAT	false		unknown
https://play-lh.googleusercontent.com/EGemoI2NTXmTsBVtJqk8jxF9rh8ApRWfsIMQSt2uE4OcpQqbFu7f7NbTK05lx80nuSijCz7sc3a277R67g=s32-rw	false	Avira URL Cloud: safe	unknown
https://cdn.branch.io/branch-assets/1659570097391-og_image.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=invisible&cb=yaxayboz60pm	false		unknown
https://play-lh.googleusercontent.com/0apCRgnn7rmfimpMKLWLoxIgZT38zy43viBiFEWrlBz78etDfabSeBuV9JIbxXRlIg=w526-h296-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/20JTuTxzqjXT2g9EWKqGLb8777WozXNGcXu9vl4L47jf7RjpXoI2DK3N8_QNSFEv_yE=w526-h296-rw	false	Avira URL Cloud: safe	unknown
https://dgpopup.app.link/favicon.ico	false	Avira URL Cloud: safe	unknown
https://play.google.com/_/PlayStoreUi/cspreport/fine-allowlist	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/ekBs763SFdG0zWgd3la3tYKqlUmt5VqJqVH-STUbVs1kMRX_TpoY5QMcWT48-yAOwtM=w526-h296-rw	false	Avira URL Cloud: safe	unknown
https://www.google.com/tools/feedback/chat_load.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/2lOS0z6kF8J2xo5dJjzcsbsf8MB4DFC1Aw71XwtM_GabHRTsnKevS6fID1kl6XiuZ64=w526-h296-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/a-/ALV-UjWuDlmlBYEPhLxKZUvX-UZkfsKyvu02TgJE-VZhnsYRbq-07T0jYg=s32-rw	false	Avira URL Cloud: safe	unknown
https://www.google.com/js/bg/M0PoUEJl_fnJYmgoY8FD-fJDrK0lRvgMNfUAwPWo__M.js	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw	false	Avira URL Cloud: safe	unknown
https://play-lh.googleusercontent.com/CrYvPjqqkd2SYDUA7wPHn63wrHJgZMNavwvFb-_t1DkE8pnmMWbH0EK_3DsXjdCILq4=s64-rw	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_529.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/	chromecache_393.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://myaccount.google.com/termsofservice	chromecache_556.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com	chromecache_302.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true&render=$	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://is2-ssl.mzstatic.com	chromecache_679.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple112/v4/a3/55/1b/a3551b0f-be17-5459-5fe1-80be760c77a1/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://www.doublegood.com	chromecache_679.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_428.2.dr, chromecache_624.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/user/Apple	chromecache_333.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/a9/87/84/a98784ca-b930-ca49-3f3a-edd89dd	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/terms	chromecache_302.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_529.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.youtube.com/iframe_api	chromecache_223.2.dr, chromecache_538.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/about/comment-posting-policy?hl=	chromecache_302.2.dr, chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/company/apple	chromecache_333.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/ef/8f/4b/ef8f4b61-961d-a364-92e2-f8c36b8d9c07/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/w3c/IntersectionObserver.	chromecache_311.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms;target;_blank;class;cOP9Jc	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://calleis.dgpopup.com/fundraising-platform/static/fb-share-kernel-chi-town-chow-down.png?o=%7B	chromecache_219.2.dr	false	Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/f0/7f/e9/f07fe907-86e5-d725-4d7a-8549f619150b/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/4b/e2/ef/4be2efef-e4b7-9df0-5ab5-804a537	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_624.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/googleplay/?p=report_content	chromecache_390.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_630.2.dr, chromecache_533.2.dr	false	URL Reputation: safe	unknown
https://www.twitter.com/Apple	chromecache_333.2.dr	false	Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/1c/ac/81/1cac81d8-ece3-8d4c-26ed-7e824bb5cc79/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://git.io/fxCyr	chromecache_385.2.dr	false	Avira URL Cloud: safe	unknown
https://git.io/fjule	chromecache_574.2.dr, chromecache_385.2.dr	false	Avira URL Cloud: safe	unknown
https://www.apache.org/licenses/	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://schema.org	chromecache_679.2.dr, chromecache_390.2.dr	false	URL Reputation: safe	unknown
https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.	chromecache_572.2.dr, chromecache_492.2.dr	false	Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_223.2.dr, chromecache_538.2.dr, chromecache_529.2.dr	false	URL Reputation: safe	unknown
https://raw.github.com/emberjs/ember.js/master/LICENSE	chromecache_572.2.dr, chromecache_492.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/googleplay/?p=remote_install_error	chromecache_393.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://is5-ssl.mzstatic.com	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org/LICENSE	chromecache_630.2.dr, chromecache_533.2.dr	false	URL Reputation: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/6e/5a/b1/6e5ab123-bce4-0801-c924-99d93b8	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_459.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/about/play-terms/index.html	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/4f/4b/b0/4f4bb01f-6496-dcee-2780-4384275	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.%/ads/ga-audiences	chromecache_428.2.dr, chromecache_624.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/googleplay/answer/10066529	chromecache_302.2.dr, chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://www.doublegood.com/privacy/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/privacy	chromecache_302.2.dr, chromecache_390.2.dr, chromecache_556.2.dr	false	URL Reputation: safe	unknown
https://npms.io/search?q=ponyfill.	chromecache_630.2.dr, chromecache_533.2.dr	false	URL Reputation: safe	unknown
https://payments.sandbox.google.com/payments/v4/js/integrator.js?rk=1	chromecache_393.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com	chromecache_302.2.dr	false	Avira URL Cloud: safe	unknown
http://www.wikidata.org/entity/Q312	chromecache_333.2.dr	false	Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://www.goldmansachs.com/terms-and-conditions/Apple-Card-Customer-Agreement.pdf	chromecache_333.2.dr	false	Avira URL Cloud: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/49/4c/bc/494cbcf1-b774-6b4c-dd73-e42982b9ebbc/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_459.2.dr	false	Avira URL Cloud: safe	unknown
https://www.wikidata.org/wiki/Q368215	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
http://schema.org	chromecache_216.2.dr	false	URL Reputation: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/34/c0/7d/34c07d29-920d-8256-85b2-eb06131c97a1/	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/googleplay/answer/6014972	chromecache_393.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/googleplay?p=eligibility_requirements	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://maps.google.com/?q=	chromecache_302.2.dr, chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.	chromecache_459.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_459.2.dr, chromecache_683.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/store/apps/details?id=com.apple.android.music&referrer=utm_source=$	chromecache_216.2.dr	false	Avira URL Cloud: safe	unknown
https://is3-ssl.mzstatic.com	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/AppStore	chromecache_679.2.dr	false	Avira URL Cloud: safe	unknown
http://jedwatson.github.io/classnames	chromecache_586.2.dr, chromecache_248.2.dr, chromecache_476.2.dr, chromecache_249.2.dr, chromecache_233.2.dr	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_302.2.dr	false	URL Reputation: safe	unknown

Source	URL
Screenshot	https://dgpopup.app.link/hVidoedgAT
Screenshot	https://dgpopup.app.link/hVidoedgAT
Screenshot	https://dgpopup.app.link/hVidoedgAT

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 18, 2024 06:28:09.594181061 CEST	53	53352	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:09.600723982 CEST	53	56205	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:10.636593103 CEST	53	55510	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:11.332231998 CEST	60626	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:11.332398891 CEST	62931	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:11.341414928 CEST	53	62931	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:11.341617107 CEST	53	60626	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:13.004385948 CEST	53	51810	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:13.006246090 CEST	53	62060	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:13.019373894 CEST	54447	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:13.019834042 CEST	60485	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:13.026299953 CEST	53	54447	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:13.026978970 CEST	53	60485	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:13.816906929 CEST	53193	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:13.817187071 CEST	49450	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:13.824244022 CEST	53	53193	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:13.824281931 CEST	53	49450	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:14.073851109 CEST	50644	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:14.074404001 CEST	52221	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:14.103991985 CEST	53	52221	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:14.104021072 CEST	53	50644	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:14.750561953 CEST	58106	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:14.750957966 CEST	57992	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:14.758483887 CEST	53	57992	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:14.758549929 CEST	53	58106	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:17.511583090 CEST	58824	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:17.511840105 CEST	57572	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:17.520951986 CEST	53	57572	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:17.521357059 CEST	53	58824	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:26.243710995 CEST	53603	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.243875980 CEST	57863	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.244671106 CEST	62157	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.244827986 CEST	61104	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.276822090 CEST	64692	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.277122974 CEST	53261	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.277455091 CEST	60265	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.277554989 CEST	49164	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.317025900 CEST	55282	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:26.317214012 CEST	60550	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:28.086946964 CEST	53	62249	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:28.714914083 CEST	138	138	192.168.2.4	192.168.2.255
Jul 18, 2024 06:28:28.985800028 CEST	51517	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:28.986246109 CEST	63522	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:37.973439932 CEST	52302	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:37.973647118 CEST	55253	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:37.982510090 CEST	53	52302	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:37.982923031 CEST	53	55253	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:38.990736961 CEST	53	64336	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:39.758228064 CEST	53	52865	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:39.820298910 CEST	49894	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:39.820473909 CEST	49556	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:39.827450991 CEST	53	49894	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:39.827775002 CEST	53	49556	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:40.364761114 CEST	53	59130	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:40.682372093 CEST	53	49657	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:40.774131060 CEST	56383	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:40.774287939 CEST	51361	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:40.780956984 CEST	53	56383	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:40.784193039 CEST	53	51361	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:42.437562943 CEST	53	56517	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:44.880934954 CEST	53	55010	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:45.596314907 CEST	53	61417	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:45.596327066 CEST	53	53729	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:46.826802015 CEST	61657	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:46.827599049 CEST	58086	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:46.840550900 CEST	53	61657	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:46.840950012 CEST	53	58086	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:46.977710962 CEST	53	61561	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:47.113276958 CEST	53	65443	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:47.116709948 CEST	53	65186	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:48.269136906 CEST	53	51752	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:50.084125042 CEST	62507	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:50.084427118 CEST	59436	53	192.168.2.4	1.1.1.1
Jul 18, 2024 06:28:50.090881109 CEST	53	62507	1.1.1.1	192.168.2.4
Jul 18, 2024 06:28:50.091013908 CEST	53	59436	1.1.1.1	192.168.2.4
Jul 18, 2024 06:29:08.740142107 CEST	53	51316	1.1.1.1	192.168.2.4
Jul 18, 2024 06:29:09.282650948 CEST	53	49226	1.1.1.1	192.168.2.4
Jul 18, 2024 06:29:09.586404085 CEST	53	60517	1.1.1.1	192.168.2.4
Jul 18, 2024 06:29:37.694339991 CEST	53	61410	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:12 UTC	669	OUT	GET /hVidoedgAT HTTP/1.1 Host: dgpopup.app.link Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-18 04:28:12 UTC	712	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html Transfer-Encoding: chunked Connection: close Server: openresty Date: Thu, 18 Jul 2024 04:28:12 GMT Critical-CH: Sec-CH-UA-Platform-Version,Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform-Version,Sec-CH-UA-Model Vary: Sec-CH-UA-Platform-Version,Sec-CH-UA-Model cache-control: no-cache location: https://dgpopup.app.link/hVidoedgAT Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Platform-Version,Sec-CH-UA-Model X-Cache: Miss from cloudfront Via: 1.1 25c6baf0a31a5ef699c1e219b25ce7b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: KoizQ20zbBbS0dm6ccfeLIvnjp3MXr9Cjkuyy_d_evrxkHyrU8QPhg==
2024-07-18 04:28:12 UTC	42	IN	Data Raw: 32 34 0d 0a 68 74 74 70 73 3a 2f 2f 64 67 70 6f 70 75 70 2e 61 70 70 2e 6c 69 6e 6b 2f 68 56 69 64 6f 65 64 67 41 54 0a 0d 0a Data Ascii: 24https://dgpopup.app.link/hVidoedgAT
2024-07-18 04:28:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:13 UTC	613	OUT	GET /branch-assets/1659570097391-og_image.png HTTP/1.1 Host: cdn.branch.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dgpopup.app.link/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-18 04:28:14 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8923 Connection: close Date: Tue, 09 Jul 2024 08:32:21 GMT Cache-Control: max-age=2592000 Last-Modified: Wed, 03 Aug 2022 23:41:38 GMT x-amz-version-id: qoz5zmD7ZdUDEZDw_kGDBzvI2k_ggVc5 ETag: "474c2a87c53bc53a3ac44dd143cc43c5" Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6e5ec1ef7875ec0751cb61200df7f212.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: Qzenu5hoEt01YeozFpoksrDkUmPaCmdCNT6we8SafpSCxGTJ3cx9vA== Age: 762952
2024-07-18 04:28:14 UTC	8923	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0a 00 00 00 50 08 06 00 00 00 e1 a9 3b ec 00 00 0c 6b 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 90 d0 02 11 90 12 7a 13 44 7a 91 12 42 8b 20 20 55 b0 11 92 40 42 89 31 21 a8 d8 10 5d 54 70 ed 22 8a 15 5d 05 51 70 75 05 c4 86 d8 cb a2 d8 fb 62 41 45 59 45 5d 14 45 e5 4d 48 40 97 7d e5 7b 27 df dc f9 73 e6 cc 7f ca 9d b9 f7 0e 00 9a 3d 5c 89 24 1b d5 02 20 47 9c 2b 8d 0d 0b 62 8e 4f 4e 61 92 9e 01 14 90 e0 cf 12 18 70 79 32 09 2b 26 26 12 40 19 e8 ff 2e 1f 6e 02 44 d1 5f 73 54 70 fd 73 fc bf 8a 0e 5f 20 e3 01 80 4c 84 38 8d 2f e3 e5 40 dc 04 00 be 91 27 91 e6 02 40 54 e8 2d a6 e7 4a 14 b8 00 62 5d 29 0c 10 e2 35 0a 9c a1 c4 95 0a 9c a6 c4 47 fa 6d e2 63 Data Ascii: PNGIHDRP;kiCCPICC ProfileHWXS[zDzB U@B1!]Tp"]QpubAEYE]EMH@}{'s=\$ G+bONapy2+&&@.nD_sTps_ L8/@'@T-Jb])5Gmc

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:13 UTC	613	OUT	GET /branch-assets/1659570137910-og_image.png HTTP/1.1 Host: cdn.branch.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dgpopup.app.link/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-18 04:28:14 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11010 Connection: close Date: Mon, 15 Jul 2024 03:27:04 GMT Cache-Control: max-age=2592000 Last-Modified: Wed, 03 Aug 2022 23:42:18 GMT x-amz-version-id: vj9Lvwir8gQ2mDxMKOcqQailOGJLX6k9 ETag: "3553ea24b08a515563932248548abaa5" Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 f3d57c6f1e03e389abd50b7f7535cee4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: Es8ePRuYLJTujGRIOtSCAj5juFnlLl5BbhKLM-Q5uJ59CKUm2A8_Fw== Age: 262870
2024-07-18 04:28:14 UTC	11010	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0a 00 00 00 50 08 06 00 00 00 e1 a9 3b ec 00 00 0c 6b 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 90 d0 02 11 90 12 7a 13 44 7a 91 12 42 8b 20 20 55 b0 11 92 40 42 89 31 21 a8 d8 10 5d 54 70 ed 22 8a 15 5d 05 51 70 75 05 c4 86 d8 cb a2 d8 fb 62 41 45 59 45 5d 14 45 e5 4d 48 40 97 7d e5 7b 27 df dc f9 73 e6 cc 7f ca 9d b9 f7 0e 00 9a 3d 5c 89 24 1b d5 02 20 47 9c 2b 8d 0d 0b 62 8e 4f 4e 61 92 9e 01 14 90 e0 cf 12 18 70 79 32 09 2b 26 26 12 40 19 e8 ff 2e 1f 6e 02 44 d1 5f 73 54 70 fd 73 fc bf 8a 0e 5f 20 e3 01 80 4c 84 38 8d 2f e3 e5 40 dc 04 00 be 91 27 91 e6 02 40 54 e8 2d a6 e7 4a 14 b8 00 62 5d 29 0c 10 e2 35 0a 9c a1 c4 95 0a 9c a6 c4 47 fa 6d e2 63 Data Ascii: PNGIHDRP;kiCCPICC ProfileHWXS[zDzB U@B1!]Tp"]QpubAEYE]EMH@}{'s=\$ G+bONapy2+&&@.nD_sTps_ L8/@'@T-Jb])5Gmc

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:15 UTC	724	OUT	GET /fundraising-platform/static/fb-share-kernel-chi-town-chow-down.png?o=%7B%22width%22%3A600%2C%22height%22%3A600%2C%22x%22%3A0.5%2C%22y%22%3A0.5%7D HTTP/1.1 Host: calleis.dgpopup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dgpopup.app.link/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-18 04:28:15 UTC	388	IN	HTTP/1.1 502 Bad Gateway Content-Type: text/html Content-Length: 507 Connection: close Server: CloudFront Date: Thu, 18 Jul 2024 04:28:15 GMT Expires: Thu, 18 Jul 2024 04:28:15 GMT X-Cache: Error from cloudfront Via: 1.1 851fdca2e1873274a995295ecd94732e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: f5F6djZs6wQps6Q6cjb0lu75pAXJRCE17juP-VE_lZ-yKZYpIhJMDg==
2024-07-18 04:28:15 UTC	507	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 3e 0a 3c 54 49 54 4c 45 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 61 74 69 73 66 69 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"><TITLE>ERROR: The request could not be satisfied</TITLE></HEAD><BO

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://dgpopup.app.link/hVidoedgAT

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Windows Analysis Report
https://dgpopup.app.link/hVidoedgAT

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-18 04:28:16 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=128503 Date: Thu, 18 Jul 2024 04:28:16 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:16 UTC	736	OUT	GET /favicon.ico HTTP/1.1 Host: dgpopup.app.link Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 sec-ch-ua-model: "" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dgpopup.app.link/hVidoedgAT Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _s=jXtpdG3QK5dgp3J9dqV1mXJkaDYLV3DWN0lbAHvS7auYm0Oj37yktRXDcY%2FFH8tl
2024-07-18 04:28:17 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 198 Connection: close Server: openresty Date: Thu, 18 Jul 2024 04:28:17 GMT Last-Modified: Fri, 01 Mar 2024 17:42:32 GMT ETag: "65e21388-c6" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Platform-Version,Sec-CH-UA-Model Accept-Ranges: bytes X-Cache: Miss from cloudfront Via: 1.1 f038e7175be9761825b2eefc2b0a832e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: ut9Af2OXci5jkG-77OaJCBxkbkf6yeoOQiwz9nythfKdoQZZ9cU66g==
2024-07-18 04:28:17 UTC	198	IN	Data Raw: 00 00 01 00 01 00 10 10 02 00 01 00 01 00 b0 00 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 01 00 00 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 Data Ascii: (

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-18 04:28:17 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=128455 Date: Thu, 18 Jul 2024 04:28:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-18 04:28:17 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:17 UTC	910	OUT	GET /hVidoedgAT HTTP/1.1 Host: dgpopup.app.link Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _s=jXtpdG3QK5dgp3J9dqV1mXJkaDYLV3DWN0lbAHvS7auYm0Oj37yktRXDcY%2FFH8tl If-None-Match: W/"1edd-J+skA0sn+6UVXoTmDmsbil2KZM0" If-Modified-Since: Thu, 18 Jul 2024 04:28:12 GMT
2024-07-18 04:28:18 UTC	822	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 7901 Connection: close Vary: Accept-Encoding Server: openresty Date: Thu, 18 Jul 2024 04:28:18 GMT Set-Cookie: _s=jXtpdG3QK5dgp3J9dqV1mXJkaDYLV3DWN0lbAHvS7auYm0Oj37yktRXDcY%2FFH8tl; Max-Age=15724800; Domain=.app.link; Path=/; Expires=Thu, 16 Jan 2025 04:28:18 GMT; Secure; SameSite=None Last-Modified: Thu, 18 Jul 2024 04:28:18 GMT Content-Security-Policy: frame-ancestors 'self' ETag: W/"1edd-J+skA0sn+6UVXoTmDmsbil2KZM0" Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Platform-Version,Sec-CH-UA-Model X-Cache: Miss from cloudfront Via: 1.1 1b412557b82dda96e078541f9ee8dfb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 X-Amz-Cf-Id: h3UTJQW99hR2dbhYUb_wYe8OKRoBtqqIhivqosANIzfNEWW5L_7W_A==
2024-07-18 04:28:18 UTC	7901	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 65 70 76 69 65 77 2d 73 65 72 76 69 63 65 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 65 70 76 69 65 77 2d 73 65 72 76 69 63 65 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f Data Ascii: <!DOCTYPE html><html><head> <meta name="deepview-service" content="deepview-service" /> <link rel="preconnect" href="https://fonts.googleapis.com" /> <link rel="preconnect" href="https://fonts.gstatic.com" /> <link href="https://fonts.goo

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:19 UTC	724	OUT	GET /fundraising-platform/static/fb-share-kernel-chi-town-chow-down.png?o=%7B%22width%22%3A600%2C%22height%22%3A600%2C%22x%22%3A0.5%2C%22y%22%3A0.5%7D HTTP/1.1 Host: calleis.dgpopup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dgpopup.app.link/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-18 04:28:19 UTC	388	IN	HTTP/1.1 502 Bad Gateway Content-Type: text/html Content-Length: 507 Connection: close Server: CloudFront Date: Thu, 18 Jul 2024 04:28:19 GMT Expires: Thu, 18 Jul 2024 04:28:19 GMT X-Cache: Error from cloudfront Via: 1.1 64c8688da1fd73389eb91af90ae83792.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: E50ttnVWshZSW6txRUp39MswYQR3rdxAh0xMdtSpG3QbFRi_M5xeOw==
2024-07-18 04:28:19 UTC	507	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 3e 0a 3c 54 49 54 4c 45 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 73 61 74 69 73 66 69 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 3c 42 4f Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"><TITLE>ERROR: The request could not be satisfied</TITLE></HEAD><BO

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:38 UTC	821	OUT	GET /store/apps/details?id=com.doublegood.nativeapp HTTP/1.1 Host: play.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-18 04:28:38 UTC	4288	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Jul 2024 04:28:38 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin-allow-popups Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-AUKPjunks8UsCdkbfhRJ8Q' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/PlayStoreUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsup [TRUNCATED] Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/main_light_binary.js https://www.google.com/tools/feedback/chat_load.js https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.myfyNWeWZ2g.2021.O/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/;report-uri /_/PlayStoreUi/cspreport/fine-allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: same-site reporting-endpoints: default="/_/PlayStoreUi/web-reports?context=eJzjytDikmJw1JBikPj6kkkNiC8-YmW-DsTfXrAy_wFip_QZrAFA7FM_gzUKiFtvnmOdDMRJ_86zFgDxkoiLrAcSL7IaKlxitQfi_JR7rKVAHJZ7jzUGiM_m32O9CsRCPBzfNj_awibw4vqsucxK8kn5hfEFOYmVpZnFqUVlqUXxRgZGJgbmhmZ6BobxBQYAi8E9Iw" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: NID=515=XhwPU9MAa4ll8xGRfwcUYoCYBb9yB8fBOSAuqc5WcBeZJYy0Aio41uLV3SBiDJk84xQIuelHSDssmtj-OWvNOtmDo_0GeozYWLofs7U__ufIUAtuujZR8-k0RHLuofmkShFg-21JorkNjrITHOU_Y1BwJPWVpQRU4uoTMeDjgfM; expires=Fri, 17-Jan-2025 04:28:38 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-18 04:28:38 UTC	4288	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 Data Ascii: 8000<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://play.google.com/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><meta name="viewport" content="width=device-width, initial-scale=1"><meta
2024-07-18 04:28:38 UTC	4288	IN	Data Raw: 35 5d 5d 5d 2c 5b 5b 37 2c 37 31 5d 2c 5b 5b 31 2c 37 33 2c 39 36 2c 31 30 33 2c 39 37 2c 35 38 2c 35 30 2c 39 32 2c 35 32 2c 31 31 32 2c 36 39 2c 31 39 2c 33 31 2c 31 30 31 2c 31 32 33 2c 37 34 2c 34 39 2c 38 30 2c 32 30 2c 31 30 2c 31 34 2c 37 39 2c 34 33 2c 34 32 2c 31 33 39 2c 36 33 2c 31 36 39 2c 31 35 35 5d 5d 5d 2c 5b 5b 37 2c 36 34 5d 2c 5b 5b 31 2c 37 33 2c 39 36 2c 31 30 33 2c 39 37 2c 35 38 2c 35 30 2c 39 32 2c 35 32 2c 31 31 32 2c 36 39 2c 31 39 2c 33 31 2c 31 30 31 2c 31 32 33 2c 37 34 2c 34 39 2c 38 30 2c 32 30 2c 31 30 2c 31 34 2c 37 39 2c 34 33 2c 34 32 2c 31 33 39 2c 36 33 2c 31 36 39 2c 31 35 35 5d 5d 5d 2c 5b 5b 37 2c 31 31 33 5d 2c 5b 5b 31 2c 37 33 2c 39 36 2c 31 30 33 2c 39 37 2c 35 38 2c 35 30 2c 39 32 2c 35 32 2c 31 31 32 2c 36 39 Data Ascii: 5]]],[[7,71],[[1,73,96,103,97,58,50,92,52,112,69,19,31,101,123,74,49,80,20,10,14,79,43,42,139,63,169,155]]],[[7,64],[[1,73,96,103,97,58,50,92,52,112,69,19,31,101,123,74,49,80,20,10,14,79,43,42,139,63,169,155]]],[[7,113],[[1,73,96,103,97,58,50,92,52,112,69
2024-07-18 04:28:38 UTC	4288	IN	Data Raw: 2c 32 35 2c 31 33 2c 33 31 2c 35 2c 34 31 2c 32 37 2c 38 2c 31 34 2c 31 30 5d 5d 5d 2c 5b 5b 31 37 2c 31 36 35 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 35 2c 31 33 2c 33 31 2c 35 2c 34 31 2c 32 37 2c 38 2c 31 34 2c 31 30 5d 5d 5d 2c 5b 5b 31 37 2c 31 35 31 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 35 2c 31 33 2c 33 31 2c 35 2c 34 31 2c 32 37 2c 38 2c 31 34 2c 31 30 5d 5d 5d 2c 5b 5b 31 37 2c 31 36 33 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 35 2c 31 33 2c 33 31 2c 35 2c 34 31 2c 32 37 2c 38 2c 31 34 2c 31 30 5d 5d 5d 2c 5b 5b 31 37 2c 33 32 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 35 2c 31 33 2c 33 31 2c 35 2c 34 31 2c 32 37 2c 38 2c 31 34 2c 31 30 5d 5d 5d 2c 5b 5b 31 37 2c 31 36 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 35 2c 31 33 2c 33 31 2c 35 2c 34 31 2c 32 37 2c 38 2c 31 34 2c 31 30 5d 5d Data Ascii: ,25,13,31,5,41,27,8,14,10]]],[[17,165],[[1,7,9,25,13,31,5,41,27,8,14,10]]],[[17,151],[[1,7,9,25,13,31,5,41,27,8,14,10]]],[[17,163],[[1,7,9,25,13,31,5,41,27,8,14,10]]],[[17,32],[[1,7,9,25,13,31,5,41,27,8,14,10]]],[[17,16],[[1,7,9,25,13,31,5,41,27,8,14,10]]
2024-07-18 04:28:39 UTC	4288	IN	Data Raw: 5b 34 34 2c 33 32 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c 38 2c 31 2c 31 30 2c 31 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 31 36 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c 38 2c 31 2c 31 30 2c 31 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 31 30 38 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c 38 2c 31 2c 31 30 2c 31 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 31 30 30 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c 38 2c 31 2c 31 30 2c 31 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 31 39 34 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c 38 2c 31 2c 31 30 2c 31 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 32 31 31 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c 38 2c 31 2c 31 30 2c 31 31 2c 35 5d 5d 5d 2c 5b 5b 34 34 2c 31 38 34 5d 2c 5b 5b 33 2c 34 2c 39 2c 36 2c 37 2c 32 2c Data Ascii: [44,32],[[3,4,9,6,7,2,8,1,10,11,5]]],[[44,16],[[3,4,9,6,7,2,8,1,10,11,5]]],[[44,108],[[3,4,9,6,7,2,8,1,10,11,5]]],[[44,100],[[3,4,9,6,7,2,8,1,10,11,5]]],[[44,194],[[3,4,9,6,7,2,8,1,10,11,5]]],[[44,211],[[3,4,9,6,7,2,8,1,10,11,5]]],[[44,184],[[3,4,9,6,7,2,
2024-07-18 04:28:39 UTC	4288	IN	Data Raw: 2c 31 34 2c 34 2c 31 30 2c 31 37 5d 5d 5d 2c 5b 5b 33 2c 31 32 5d 2c 5b 5b 31 2c 35 2c 31 34 2c 34 2c 31 30 2c 31 37 5d 5d 5d 2c 5b 5b 33 2c 36 35 5d 2c 5b 5b 31 2c 35 2c 31 34 2c 34 2c 31 30 2c 31 37 5d 5d 5d 2c 5b 5b 33 2c 31 31 30 5d 2c 5b 5b 31 2c 35 2c 31 34 2c 34 2c 31 30 2c 31 37 5d 5d 5d 2c 5b 5b 33 2c 31 31 5d 2c 5b 5b 31 2c 35 2c 31 34 2c 34 2c 31 30 2c 31 37 5d 5d 5d 2c 5b 5b 33 2c 35 36 5d 2c 5b 5b 31 2c 35 2c 31 34 2c 34 2c 31 30 2c 31 37 5d 5d 5d 2c 5b 5b 33 2c 35 35 5d 2c 5b 5b 31 2c 35 2c 31 34 2c 34 2c 31 30 2c 31 37 5d 5d 5d 2c 5b 5b 33 2c 39 36 5d 2c 5b 5b 31 2c 35 2c 31 34 2c 34 2c 31 30 2c 31 37 5d 5d 5d 2c 5b 5b 33 2c 31 30 5d 2c 5b 5b 31 2c 35 2c 31 34 2c 34 2c 31 30 2c 31 37 5d 5d 5d 2c 5b 5b 33 2c 31 32 32 5d 2c 5b 5b 31 2c 35 2c Data Ascii: ,14,4,10,17]]],[[3,12],[[1,5,14,4,10,17]]],[[3,65],[[1,5,14,4,10,17]]],[[3,110],[[1,5,14,4,10,17]]],[[3,11],[[1,5,14,4,10,17]]],[[3,56],[[1,5,14,4,10,17]]],[[3,55],[[1,5,14,4,10,17]]],[[3,96],[[1,5,14,4,10,17]]],[[3,10],[[1,5,14,4,10,17]]],[[3,122],[[1,5,
2024-07-18 04:28:39 UTC	4288	IN	Data Raw: 6c 2c 6e 75 6c 6c 2c 5c 22 62 31 52 63 64 63 5c 22 5d 2c 5b 34 35 35 38 35 35 38 33 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 4b 37 63 76 33 65 5c 22 5d 2c 5b 34 35 36 33 30 39 32 35 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 61 52 72 42 56 5c 22 5d 2c 5b 34 35 35 38 35 35 37 36 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 61 51 74 62 33 64 5c 22 5d 2c 5b 34 35 35 38 35 35 34 34 2c 36 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 4d 68 52 38 4b 63 5c 22 5d 2c 5b 34 35 35 38 35 35 37 30 2c 2d 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 51 72 6e 7a 66 62 5c 22 5d 2c 5b 34 35 Data Ascii: l,null,\"b1Rcdc\"],[45585583,null,false,null,null,null,\"K7cv3e\"],[45630925,null,false,null,null,null,\"aRrBV\"],[45585576,null,false,null,null,null,\"aQtb3d\"],[45585544,65,null,null,null,null,\"MhR8Kc\"],[45585570,-1,null,null,null,null,\"Qrnzfb\"],[45
2024-07-18 04:28:39 UTC	4288	IN	Data Raw: 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 66 4b 43 50 6e 5c 22 5d 2c 5b 34 35 36 31 33 39 30 33 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 52 57 58 4f 6a 64 5c 22 5d 2c 5b 34 35 35 38 35 35 38 32 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 36 4c 63 41 32 74 45 5a 41 41 41 41 41 4a 6a 37 46 54 59 54 46 39 63 5a 34 4e 4c 33 53 68 67 42 43 42 66 6b 57 6f 76 30 5c 22 2c 6e 75 6c 6c 2c 5c 22 4f 6a 61 6c 46 64 5c 22 5d 2c 5b 34 35 36 33 38 37 32 38 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5c 22 74 79 70 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 65 78 70 65 72 69 6d 65 6e 74 73 2e 70 72 6f 74 6f 2e 53 74 72 69 6e 67 4c 69 73 74 50 61 72 61 Data Ascii: ll,false,null,null,null,\"fKCPn\"],[45613903,null,false,null,null,null,\"RWXOjd\"],[45585582,null,null,null,\"6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0\",null,\"OjalFd\"],[45638728,null,null,null,null,[\"type.googleapis.com/experiments.proto.StringListPara
2024-07-18 04:28:39 UTC	2760	IN	Data Raw: 2c 31 30 31 2c 31 32 33 2c 37 34 2c 34 39 2c 38 30 2c 32 30 2c 31 30 2c 31 34 2c 37 39 2c 34 33 2c 34 32 2c 31 33 39 2c 36 33 2c 31 36 39 2c 31 35 35 5d 5d 5d 2c 5b 5b 37 2c 31 32 5d 2c 5b 5b 31 2c 37 33 2c 39 36 2c 31 30 33 2c 39 37 2c 35 38 2c 35 30 2c 39 32 2c 35 32 2c 31 31 32 2c 36 39 2c 31 39 2c 33 31 2c 31 30 31 2c 31 32 33 2c 37 34 2c 34 39 2c 38 30 2c 32 30 2c 31 30 2c 31 34 2c 37 39 2c 34 33 2c 34 32 2c 31 33 39 2c 36 33 2c 31 36 39 2c 31 35 35 5d 5d 5d 2c 5b 5b 37 2c 36 35 5d 2c 5b 5b 31 2c 37 33 2c 39 36 2c 31 30 33 2c 39 37 2c 35 38 2c 35 30 2c 39 32 2c 35 32 2c 31 31 32 2c 36 39 2c 31 39 2c 33 31 2c 31 30 31 2c 31 32 33 2c 37 34 2c 34 39 2c 38 30 2c 32 30 2c 31 30 2c 31 34 2c 37 39 2c 34 33 2c 34 32 2c 31 33 39 2c 36 33 2c 31 36 39 2c 31 35 Data Ascii: ,101,123,74,49,80,20,10,14,79,43,42,139,63,169,155]]],[[7,12],[[1,73,96,103,97,58,50,92,52,112,69,19,31,101,123,74,49,80,20,10,14,79,43,42,139,63,169,155]]],[[7,65],[[1,73,96,103,97,58,50,92,52,112,69,19,31,101,123,74,49,80,20,10,14,79,43,42,139,63,169,15
2024-07-18 04:28:39 UTC	817	IN	Data Raw: 33 32 61 0d 0a 2c 37 33 2c 39 36 2c 31 30 33 2c 39 37 2c 35 38 2c 35 30 2c 39 32 2c 35 32 2c 31 31 32 2c 36 39 2c 31 39 2c 33 31 2c 31 30 31 2c 31 32 33 2c 37 34 2c 34 39 2c 38 30 2c 32 30 2c 31 30 2c 31 34 2c 37 39 2c 34 33 2c 34 32 2c 31 33 39 2c 36 33 2c 31 36 39 2c 31 35 35 5d 5d 5d 2c 5b 5b 39 2c 36 38 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 31 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 33 31 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 31 30 34 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 Data Ascii: 32a,73,96,103,97,58,50,92,52,112,69,19,31,101,123,74,49,80,20,10,14,79,43,42,139,63,169,155]]],[[9,68],[[1,7,9,24,12,31,5,15,27,8,13,10]]],[[9,1],[[1,7,9,24,12,31,5,15,27,8,13,10]]],[[9,31],[[1,7,9,24,12,31,5,15,27,8,13,10]]],[[9,104],[[1,7,9,24,12,31,5
2024-07-18 04:28:39 UTC	1390	IN	Data Raw: 36 37 30 34 0d 0a 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 37 31 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 36 34 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 31 31 33 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 31 33 39 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 5d 5d 5d 2c 5b 5b 39 2c 31 35 30 5d 2c 5b 5b 31 2c 37 2c 39 2c 32 34 2c 31 32 2c 33 31 2c 35 2c 31 35 2c 32 37 2c 38 2c 31 33 2c 31 30 Data Ascii: 67049,24,12,31,5,15,27,8,13,10]]],[[9,71],[[1,7,9,24,12,31,5,15,27,8,13,10]]],[[9,64],[[1,7,9,24,12,31,5,15,27,8,13,10]]],[[9,113],[[1,7,9,24,12,31,5,15,27,8,13,10]]],[[9,139],[[1,7,9,24,12,31,5,15,27,8,13,10]]],[[9,150],[[1,7,9,24,12,31,5,15,27,8,13,10

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:40 UTC	1098	OUT	GET /ekBs763SFdG0zWgd3la3tYKqlUmt5VqJqVH-STUbVs1kMRX_TpoY5QMcWT48-yAOwtM=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-18 04:28:41 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 19 Jul 2024 04:28:41 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Thu, 18 Jul 2024 04:28:41 GMT Server: fife Content-Length: 28390 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-18 04:28:41 UTC	867	IN	Data Raw: 52 49 46 46 de 6e 00 00 57 45 42 50 56 50 38 4c d1 6e 00 00 2f a5 c0 49 00 4d 40 8c 24 39 6e 83 99 83 00 9f cf ce 3f 60 10 e7 37 80 88 fe 4f 00 ff a1 df e2 82 b8 4d 2f 64 c5 a7 ac 83 9b 95 b9 65 46 44 74 5e a9 83 11 25 0d f2 18 aa 11 f5 54 e8 11 5a 19 3e 7d 80 40 a4 5a 5e 04 17 90 c2 6a bc ad 7d 48 cf 15 91 85 13 68 ec 57 a6 05 08 34 b6 69 55 85 ce c6 fb ce 94 31 42 77 dd 58 07 91 5a 1d b2 40 75 f4 6a 02 5a bb 25 4c 08 61 78 73 be 45 4a 38 81 db 18 1c 55 d1 92 11 0a 11 76 36 86 0e 42 79 dd 40 ad a7 5d 0d 84 15 a9 e0 17 20 03 aa 35 0f 69 05 cf 05 70 f3 92 bc f0 36 2f e7 77 c5 d3 3f bc 80 5d db b6 aa 66 c6 5d 3e d3 7f 2d a9 21 9f ee 8e f3 80 33 d0 2b b1 02 20 dd b6 76 bc d9 b5 6d c7 c9 ff 1f 77 d4 b1 ed 36 56 15 7e 2b 5e 70 6b db 56 ad 4c 5c 22 77 89 88 68 Data Ascii: RIFFnWEBPVP8Ln/IM@$9n?`7OM/deFDt^%TZ>}@Z^j}HhW4iU1BwXZ@ujZ%LaxsEJ8Uv6By@] 5ip6/w?]f]>-!3+ vmw6V~+^pkVL\"wh
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: 62 a8 2e 39 b6 6d d5 56 c6 3a f7 09 ee 2e 01 50 24 46 1a 2f 00 42 20 04 ba 24 e3 d0 73 77 de 3d 8b 72 ad 6d c7 f6 6c 9f f7 fb c4 c6 d0 76 ea 49 1b 6c 22 9d 64 68 a7 01 fd 18 7a 64 5b 1f ee 33 1c da b6 52 45 b7 87 a8 68 54 0a 68 ce 7c 80 37 6a db 95 c9 a9 b6 ed 9c f3 d2 f2 ea 6a 97 b4 c5 d3 11 3a 8a 84 a0 61 11 25 b8 3d 70 43 6e 60 65 b9 e3 2c c5 b2 14 5d ac 10 b8 49 70 8f 41 88 27 c4 bd 93 b4 7b b5 55 57 57 97 cb 55 97 cd 39 c7 48 77 a7 d7 18 f0 fc af 68 a0 ad 6d d9 dc 36 3b f7 fd 3c 2f 7d 34 a4 d1 8c d8 72 2c 5b 76 98 94 86 9c bf cc 14 2a 33 33 33 85 93 32 73 eb 32 33 d7 ae a1 f1 1f bb 0e c7 20 a3 98 07 bf f9 f8 7b e1 79 6e 0c d8 b6 2d 96 13 e9 79 bf bf ea d4 f1 f6 4e 27 e9 28 24 90 21 4c 70 18 77 65 dd 67 5d 58 77 77 77 77 77 77 df 65 dc 35 30 61 02 19 Data Ascii: b.9mV:.P$F/B $sw=rmlvIl"dhzd[3REhTh\|7jj:a%=pCn`e,]IpA'{UWWU9Hwhm6;</}4r,[v*3332s23 {yn-yN'($!Lpweg]Xwwwwwwe50a
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: a2 51 d7 63 d7 76 45 2f cf b6 4e 6a 9b f6 1f dc f6 e7 1f af ce 72 28 cf 19 21 11 8f 88 d3 f2 c6 6c a9 dd aa 9d 55 c9 ed eb 5d 77 83 1b 2c 21 ce c2 9f 43 6f 93 79 9a 12 12 47 09 84 d8 a6 04 2c 4c a3 59 48 3a 95 29 2a 7c fd 54 6d 60 2b f7 9e 6d 25 bb 13 d2 6c 60 39 5c b2 40 fc a1 8e 70 e0 cf 51 67 b7 f5 a5 8f ca d9 cf a3 d3 1d f6 6c 88 3f d4 57 c7 b3 4a 35 8e ce 9a 3e ad 6c 77 07 3e fa bd 63 0b b2 dc 30 da 67 ed 4b c4 93 08 62 7a 13 85 2c 8c 40 7c 2a c3 7b 6d 74 b3 6c 49 d2 79 1a 5f c0 f3 d8 c2 1b cc 72 34 04 c4 36 35 39 0a ad 0c 45 d4 4a 67 7a d3 38 bd c5 d5 fb f4 c1 b9 50 9e c6 7d e3 f2 c0 63 07 1c bd f5 d8 99 ef 85 ce 2f 64 7d de 13 f2 29 4b 6d 7f 6f e4 ea 0f 07 2f 6f f9 9f fe 66 58 ee 44 46 b3 7d a5 fa ea f6 fa 7f fb e0 ad cb 1d cd 0c c0 0b ff 25 c2 11 Data Ascii: QcvE/Njr(!lU]w,!CoyG,LYH:)\|Tm`+m%l`9\@pQgl?WJ5>lw>c0gKbz,@\|{mtlIy_r4659EJgz8P}c/d})Kmo/ofXDF}%
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: cf aa 47 f2 74 56 35 a8 d1 69 1d 04 7d 67 c6 9c 56 49 53 15 cb b2 f4 f0 15 9c 7c df ce 9f 3f b2 fe bf 11 55 00 b5 ad a6 03 0e 6a 29 8a e3 b6 47 3a c3 25 be e0 42 25 df 28 44 8b 8c c9 41 f9 b5 ac 02 87 23 20 22 86 9b 66 46 c4 9f a6 d3 2a bb 66 37 9d f3 b5 fe 6a eb f4 6d b6 f9 40 18 fe 44 3a b7 fb 75 f0 dd 58 a8 4f f5 b6 da 40 26 3f eb 7b f5 47 bf 4e 7e f3 40 fe 4e bf bf a6 cb 98 17 51 9c 4a 09 f8 f7 46 05 16 6a 9f f2 34 f1 9e 11 a2 65 b2 58 3e 56 cb 6a 7e d5 cc ff 79 cf 8d 0f ff f3 c4 15 6b 67 4a 5b ab 7d c9 f1 d4 28 e5 93 3e 23 d7 fa 2d 2a 9f 30 77 7f dd 2a e3 27 6e df b1 0f 14 bc 4a 82 ed fc 10 99 78 03 85 c5 b2 87 93 8b af cf 6f 94 0e 26 32 38 92 c9 69 ab d4 c4 57 42 26 94 60 00 01 22 10 93 62 02 54 ee ca 95 b7 4e 6c 70 27 7e 14 7b b7 c7 e1 52 b7 09 f0 Data Ascii: GtV5i}gVIS\|?Uj)G:%B%(DA# "fFf7jm@D:uXO@&?{GN~@NQJFj4eX>Vj~ykgJ[}(>#-0w*'nJxo&28iWB&`"bTNlp'~{R
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: 43 ae 57 f5 1c 5b 0d 5d dd 9f f8 c4 2a 37 9a d3 11 03 5a d5 b8 16 b6 ba a3 6f 6f 49 6f 33 3b 30 08 55 d4 e5 38 33 3c be 4b 87 97 1b f5 66 bb b1 10 74 c3 0f e1 03 d0 4d ff e8 5c 7d 23 b9 b4 2e 5b 7f e8 45 ef be cf e9 57 07 8f df 5a dc bd aa 18 5e 7d e7 d3 37 9d 3a fd 33 4f 51 72 a3 57 e3 96 e9 02 4f 6f 2e 65 21 8c ae 29 18 80 49 40 12 dc 71 a7 43 66 4a 99 34 64 27 62 c0 e2 0a 0e 2d 9e 26 55 c9 8a a2 c2 22 03 a1 86 94 06 2d 58 2a 26 54 ad 22 ed cd ef 6c dc ab fa c7 6f 3f f0 bb df 1f 0f e4 81 61 0a 10 8f 3e c9 c4 d6 98 eb 64 fa ac 34 e6 d1 1c e6 ae 93 75 a3 32 b5 9f f2 d7 76 b0 c1 02 0c 77 a1 26 c9 3a b4 f2 f5 ed 0b 9c b8 88 40 41 9c bd 52 04 82 b4 b1 a5 3d 7c 4f 78 d3 f7 bc 92 33 38 08 8f 59 8c 43 2f fc cd 29 10 93 7e b4 59 c7 db a5 fb 87 de 7b 9f 5d 7c f6 Data Ascii: CW[]7ZooIo3;0U83<KftM\}#.[EWZ^}7:3OQrWOo.e!)I@qCfJ4d'b-&U"-X&T"lo?a>d4u2vw&:@AR=\|Ox38YC/)~Y{]\|
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: 97 88 f5 69 ee 10 9f b6 e9 09 38 05 11 d1 36 e7 6b 9d bf 10 58 b5 ef 1f 0f 6a ba 57 38 6b 32 d1 20 9c 82 1e 78 0a de 86 37 1e 6e ef 3a ba 72 89 a5 10 10 84 91 60 f1 18 20 14 f2 78 38 84 29 05 b1 94 3b 58 92 3e 1e 9f e3 77 d1 19 df 2b c7 75 95 65 93 5c 11 8b 7b 22 ce b0 88 73 26 6a 14 6c 90 26 55 cd d3 10 b7 34 15 28 b2 d3 f7 fe 7f 78 8c c4 8a 26 9e fa 80 fc 21 d0 a5 35 e9 d0 82 bc 26 ad ec 99 a3 d4 9d 1b d3 28 1d 6a e2 00 6a b7 78 90 56 1c 5c 8a 93 54 4b 84 24 0c f5 47 7c 31 1e 9f cb e1 41 bc 55 fb ef 68 82 1c b1 aa 2e 89 7d 58 e1 87 08 f4 c1 6b 10 87 53 f8 a7 f9 f8 ab 58 99 f3 ca 89 9f c8 cd 4f b2 7e 1d 76 0e 9d 83 db e1 2b 7c fb f4 53 0c 59 1c cf 4d 2d 5f 77 26 03 44 c3 7d 3a cb dd 67 92 a8 82 47 ee f7 24 79 c7 88 2c cb 0b dd 6b 1c a1 56 c1 cf 8b 72 98 Data Ascii: i86kXjW8k2 x7n:r` x8);X>w+ue\{"s&jl&U4(x&!5&(jjxV\TK$G\|1AUh.}XkSXO~v+\|SYM-_w&D}:gG$y,kVr
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: 10 b1 43 9a 1c a3 a4 04 1c 8b 50 24 3b f9 51 53 3c 22 0d 81 8e 95 37 d8 89 7e 92 f1 36 7f ca 12 ab f4 15 9b 8a d5 7f 9c 8c ce 97 42 2a 5d 80 a6 e7 ac 1f ca 63 91 e1 b9 88 c7 da 1e 03 52 c3 64 09 93 26 4a bc 04 86 4f e8 37 e8 40 00 55 62 3b d6 d3 90 b0 2c 36 2c e7 1c e6 9a e4 4a 5b f7 de c4 a8 df d9 a4 c1 d5 2d df 9d 9b b6 65 04 0b 58 40 99 90 a8 f8 27 12 f7 d7 26 14 07 90 8e 0e 0a da bc 00 8d 44 37 5b ea ac 32 c4 d1 0c 9d 47 c0 10 45 fc fb 04 69 49 62 7e bd 11 94 25 6f 98 21 3a e9 44 9a 56 73 a4 6f 6a b3 44 a7 12 12 20 3a 31 1c 96 8e d1 bc 3b b6 83 e1 80 30 73 13 81 77 6a 32 9a fe 38 5e 6f 75 53 4c 60 a4 46 50 a0 a0 26 c4 a9 31 e2 5d 01 aa d0 14 3c 1c 22 fe d8 9d 9a 24 db 24 89 06 ae 44 4b c4 24 19 2c 19 2d ba 37 7f dd cb 4f 4f d9 ed c7 8e be c0 fe fb 47 Data Ascii: CP$;QS<"7~6B*]cRd&JO7@Ub;,6,J[-eX@'&D7[2GEiIb~%o!:DVsojD :1;0swj28^ouSL`FP&1]<"$$DK$,-7OOG
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: f3 99 c9 d6 a9 ac 52 3b 30 00 f8 6e cf 4d 94 a7 9e 42 73 be c1 9a b7 76 51 7b a0 32 11 94 19 e3 49 3d 4b 1f 01 90 f2 88 0c 90 d2 b5 e2 40 87 bc 2b c8 df 72 2c 58 7c 05 fb d4 d7 3f 9b 0a a9 75 6e ee b2 a1 68 11 73 05 02 86 83 8c 78 99 33 25 e1 a4 43 34 11 24 35 70 ef de 72 38 9e 92 16 3e ae 66 1d bd 7b d9 d0 da c4 64 9e a1 f3 12 ce 77 1b 61 49 ed d9 4f 25 86 a8 32 f4 19 50 80 04 15 85 a1 80 32 ae 43 dc a5 3b f5 0e 63 c4 6e 34 6c a0 71 08 b1 c5 ad 36 fd 51 bb ce 19 52 97 5c 6c db dc 8a ee 8e ca 00 84 a0 1b 1b 18 27 06 98 89 71 22 51 04 6a 58 00 93 29 6e 36 e3 81 30 8a 8d 6b a9 7a 42 d0 9a e6 3e 9d 63 7b 2b 6d 4c f0 a1 1c 0a 49 0d c8 6c 8d db 8a 47 91 64 a8 91 c2 ce 70 41 80 6d 1c 06 e2 e2 23 cc 20 0e b2 a0 74 ba 3d c7 ff cb 88 39 b3 aa 51 0d db 37 c0 5b ca Data Ascii: R;0nMBsvQ{2I=K@+r,X\|?unhsx3%C4$5pr8>f{dwaIO%2P2C;cn4lq6QR\l'q"QjX)n60kzB>c{+mLIlGdpAm# t=9Q7[
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: fc 45 59 44 11 26 13 8c 73 03 fb 99 41 e7 45 2c 4e 62 70 4a 44 e8 02 5d 97 3a d3 82 38 c8 14 2a 2e 05 a6 40 3a dc 07 9a 97 28 62 40 04 0a ff cd 60 1a 72 0f 0a 3d a8 78 2c 84 c1 97 c7 3c 3d 31 8d e6 47 dc 7d c4 94 78 01 2f 61 1d cb 88 b2 91 0d 20 2a 2e 80 0e a2 30 85 4b 92 32 09 16 12 03 71 a9 53 54 46 70 cb 33 e0 45 cf ae c4 db ff a3 7c 70 64 33 55 45 40 30 82 53 d1 05 af 9d bc 03 28 f0 d9 05 35 a3 da de 45 7c 2e bc d2 89 36 9c 6a 41 30 a2 2c 67 11 2f 61 1e 39 10 85 06 71 5a d4 49 a1 22 98 8b 4a 04 0b 9b 12 1c c0 85 00 7c ab bb 00 13 3a 9c be 4c 06 cb fe 27 b5 f8 fa ca 01 77 cd 7c 3c 9e 03 c8 30 81 0a ff 05 7f 2f cf e1 f8 08 d4 a4 f1 81 f8 75 f3 03 28 20 55 0e 50 aa 28 0e 69 14 5a 38 58 44 40 4c 74 08 29 e0 44 68 80 00 5d 8e c0 c6 a1 fd f6 d4 e0 43 7e 3b Data Ascii: EYD&sAE,NbpJD]:8.@:(b@`r=x,<=1G}x/a .0K2qSTFp3E\|pd3UE@0S(5E\|.6jA0,g/a9qZI"J\|:L'w\|<0/u( UP(iZ8XD@Lt)Dh]C~;
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: f9 6d 9a bd 5f 50 04 00 b0 dd f7 7e 48 e5 3f f5 79 42 92 77 3d f7 e8 a9 3f f9 7c e1 ae 68 8a 88 24 16 0a 3b 79 9e 0c 9c 74 da 2c d9 b3 fa ca af 4f ef b2 f5 ac 63 f0 cf cc 3d 19 30 ba 29 a9 75 a5 f8 66 9b a5 cc 11 4c ec e4 8c aa 20 9f e1 ee 49 4d 36 c5 6a 16 92 27 c1 34 c0 14 39 14 90 24 24 01 84 46 c2 0a 0b 04 2a f2 4f 90 4f ae f5 ce 07 8e 17 7c a4 fb e0 48 9e cc f1 49 74 a5 bb 34 7d 8f 94 14 00 14 21 d4 7b e0 87 71 36 b6 b4 fb a1 ab 77 77 fe de 67 09 7f b4 8d 20 01 b9 88 8e b2 26 45 53 92 18 e8 c6 c1 d9 78 60 2c 2c 5c 98 eb 30 a0 78 1c e2 94 0a 05 81 f3 94 19 c1 f7 24 20 0f f1 28 0e 0b 59 4b 8c ed b5 96 b7 f3 67 36 c7 85 33 ef 6a 1f a2 54 f7 c7 0b 98 6d 05 0d 03 81 4d 14 50 2f c3 96 68 e1 2c a4 1e 13 62 77 ef 76 df bc ae 9f 3e 48 19 98 ed 27 91 2f f9 a4 Data Ascii: m_P~H?yBw=?\|h$;yt,Oc=0)ufL IM6j'49$$F*OO\|HIt4}!{q6wwg &ESx`,,\0x$ (YKg63jTmMP/h,bwv>H'/

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:40 UTC	1098	OUT	GET /2lOS0z6kF8J2xo5dJjzcsbsf8MB4DFC1Aw71XwtM_GabHRTsnKevS6fID1kl6XiuZ64=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-18 04:28:41 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 19 Jul 2024 04:28:40 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Thu, 18 Jul 2024 04:28:40 GMT Server: fife Content-Length: 6512 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-18 04:28:41 UTC	868	IN	Data Raw: 52 49 46 46 68 19 00 00 57 45 42 50 56 50 38 4c 5c 19 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 20 67 ee f5 6c ff 05 cf 38 bb f7 14 10 d1 ff 09 e0 5f 57 b5 86 76 5a 13 0d a8 cd 78 5a 0d 79 47 e1 06 ed c4 bd ae 98 44 23 27 01 43 80 90 7a 7c 51 d5 65 3a 07 bc ea 92 2a f0 a9 3a e3 96 1d 74 51 74 61 2b 01 18 b8 40 e0 de 5c 0c f6 b9 9c e2 28 c0 0d 56 33 61 9c da 0e 25 ba 76 3a 0e 25 48 c6 73 f5 9a ba e6 55 bb d5 5b 60 b6 7e 77 e1 38 92 6d 55 69 24 08 f2 8f ec db 1a 97 ef ab 67 1f 08 80 6d 6c db 36 d6 43 01 27 14 de fe 6b 11 2a 42 f4 c6 9f 90 4d 23 49 8e ea bd 23 f3 fc d1 0c 84 0d df 6c d0 ff 09 c0 bf 5d 29 53 9a 2e 61 e3 86 d4 9e 88 3e ea 92 be da 0e 80 5d 1e f3 0a 80 d1 9c 15 e4 29 f3 85 b3 11 02 22 74 06 0c 91 cc 59 e7 f4 00 33 ec c8 b4 9b 03 8c 48 a7 15 c0 4e Data Ascii: RIFFhWEBPVP8L\/IM8lF gl8_WvZxZyGD#'Cz\|Qe::tQta+@\(V3a%v:%HsU[`~w8mUi$gml6C'kBM#I#l])S.a>])"tY3HN
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: 10 89 0d 32 69 46 75 2a 14 74 dc d6 6b 15 7f b3 92 8e 33 6c 60 85 76 d2 e0 2c fb 0b c6 72 a7 98 e6 90 d5 67 0f 19 8c 17 2c 23 5c c2 45 3a 87 cb d8 c0 b9 30 02 61 51 18 0c a7 e9 a5 2c 32 c5 6e 5b 2f 42 a8 b0 42 d7 a0 1c 22 6f 8a 5f 5e 6e 75 06 36 e6 7c f7 e5 f7 55 af b8 7c 00 2c c0 00 0c 02 58 98 20 04 01 00 c6 02 00 b0 c0 04 d0 fe c4 d2 60 d3 d7 ee fe af f3 b0 db f3 c6 6b ce a1 9b 0d af f1 a6 9b bf de 8d df 31 3e f0 29 a1 98 83 59 0a 91 2e 35 17 bc ba b3 5f f4 ab d7 35 7b 4b 1d 40 91 bc 34 3b 84 07 08 86 00 04 b3 10 a1 30 30 44 46 8e 7e 64 df b4 df 9b b0 04 03 23 ba c7 75 bb 9e 9d fe 97 67 fb 35 fb 7c 57 3f 9c 61 f8 34 7d 07 f2 4f 24 1c b5 04 66 8e 63 66 61 00 21 90 c6 ec 7b dc 85 03 76 48 77 82 00 84 90 0b d2 69 fe c0 9d ac 5f 17 b3 04 0b 51 3e 3d e0 9a Data Ascii: 2iFu*tk3l`v,rg,#\E:0aQ,2n[/BB"o_^nu6\|U\|,X `k1>)Y.5_5{K@4;00DF~d#ug5\|W?a4}O$fcfa!{vHwi_Q>=
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: b4 47 c7 37 ab 21 10 c2 c4 dc 05 84 f0 30 32 13 44 d1 10 08 61 42 10 13 29 46 41 24 32 03 42 98 48 0d 04 71 06 70 0b 85 82 05 b4 5e c6 60 ca 9a 2d 55 44 10 40 32 42 6b 8c 32 b2 49 57 86 00 00 90 18 34 41 00 13 40 f3 22 43 72 69 94 1d 0b 80 08 00 00 20 08 10 80 01 81 e6 2d f5 d5 50 36 80 00 61 89 22 9a 4a 67 d6 69 0c 41 80 d0 64 48 a0 c9 84 19 a5 02 04 08 4e 25 d0 64 c6 6c 27 2d 02 84 a7 48 07 2c 5d 6a 4e 29 04 08 4f 41 51 58 60 e9 0d ea 80 10 85 0a 50 81 25 db 49 40 11 01 22 30 85 90 c0 92 2d a9 40 80 0a a0 9c 4a c0 d2 33 19 11 e1 21 60 8a a9 1c 0c 58 7a 36 34 20 38 05 22 aa 2e 57 15 68 d2 80 80 d0 14 40 31 a5 68 40 47 97 b4 81 20 e8 2a 79 2a 86 00 4d 4b b5 09 91 6f f0 64 00 c2 05 46 82 e8 89 ad 78 28 03 2d 24 40 9b 66 50 14 c9 1f 7a ce ec 96 ac 44 d6 ac Data Ascii: G7!02DaB)FA$2BHqp^`-UD@2Bk2IW4A@"Cri -P6a"JgiAdHN%dl'-H,]jN)OAQX`P%I@"0-@J3!`Xz64 8".Wh@1h@G yMKodFx(-$@fPzD
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: eb 97 3a 66 a7 3e 99 d1 d2 2a d1 a1 b1 06 98 b1 8e 41 70 09 45 56 ea 86 9d 21 94 2e 5a 97 70 22 e5 4d a9 87 2a ca 26 d4 83 a5 8f 13 20 dd 43 99 9a 0a 05 4e 31 c4 ac a5 00 86 c7 15 cf 0d 0c 97 17 28 c8 a4 83 b8 42 76 56 60 8a ac 82 20 2a 10 0c 10 04 02 10 02 10 18 20 00 42 00 ab b0 74 4b 00 1c 94 23 8a be f9 96 ca f0 42 ee 34 86 01 02 68 a1 05 08 00 30 64 8e 00 a5 fe d8 88 8e 21 42 40 cb 31 64 c0 39 02 ff 6a a4 cd 85 28 24 08 11 59 cb 10 d9 82 02 06 5a 6f 11 48 e1 40 01 0e 8d 23 80 70 54 b8 10 32 c5 b4 48 00 04 e1 09 83 52 fb b0 89 c8 5a 07 ab 4f 4f 9a 13 ac 00 10 7a 79 85 5e 66 60 51 58 de 0c 4c db b0 4a 0d 69 1d 86 2b 53 53 82 15 00 00 30 cf d3 ef 9d 9a 11 f3 a0 6f 39 d1 e4 0c 08 96 b6 91 42 40 eb e3 03 18 35 b5 b0 00 ae 82 00 f3 c9 6e bd a9 ca 5b 3b 63 Data Ascii: :f>ApEV!.Zp"M& CN1(BvV` * BtK#B4h0d!B@1d9j($YZoH@#pT2HRZOOzy^f`QXLJi+SS0o9B@5n[;c
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: e4 fa 69 c9 f0 00 19 3e 00 04 e1 3b 20 08 5e f8 1f f5 0a 86 21 08 42 61 89 00 0a 41 23 30 1a 46 13 24 c4 2e 60 55 0c c0 70 58 fd 6c b1 5e 9d b4 12 bb d4 c7 b4 6d b2 e3 6c 37 43 88 30 3b 6c 98 23 aa 31 8b b0 5c 47 99 61 39 07 59 03 44 ec e3 08 53 8c 93 41 04 08 a8 b0 42 a3 76 b6 f6 31 a2 13 b6 4a 33 68 0d aa 01 4b 19 e9 d6 ea 37 56 06 08 50 e1 02 19 ae 91 e5 16 12 08 8b c2 02 04 42 60 0c 2b b4 11 83 10 20 c0 00 32 40 06 58 aa 25 03 fc 2b 57 89 ad 45 33 a0 42 7a 32 fb ff ac 8c 00 20 62 d7 51 79 88 7c 11 96 1d 5e d5 ba 10 84 4d 02 00 44 00 5a a6 a5 06 ac d9 13 6d 02 1a 90 ed 6a d7 53 e3 bc b7 9f df db ba 55 75 76 44 f8 db 02 20 80 25 76 71 cf fd 6e 66 ef 3c 9c 04 f4 0e 40 dc e7 ba 77 05 0c 2b 1e 12 4d af 36 98 88 98 6b 9f 3a db 6b 0a 00 80 09 03 23 00 c0 20 Data Ascii: i>; ^!BaA#0F$.`UpXl^ml7C0;l#1\Ga9YDSABv1J3hK7VPB`+ 2@X%+WE3Bz2 bQy\|^MDZmjSUuvD %vqnf<@w+M6k:k#
2024-07-18 04:28:41 UTC	84	IN	Data Raw: 7b ec 3a ce de db f3 7a 6f 8c 9f d6 8f 4b fb ea 2f f8 c6 e5 c5 27 83 7f 5b f9 b4 3b ff fa 3d cf f6 90 03 02 be c6 42 c0 7c 8c 04 34 ff 18 07 06 92 f0 e2 0c 00 f2 18 06 2e 4d 13 fe 63 18 bc 82 d7 c0 f7 08 d1 02 00 01 66 2f 3d 9d 01 c0 01 af fc ff 9f b2 Data Ascii: {:zoK/'[;=B\|4.Mcf/=

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:40 UTC	1109	OUT	GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-18 04:28:40 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 170 X-XSS-Protection: 0 Date: Thu, 18 Jul 2024 04:25:47 GMT Expires: Fri, 19 Jul 2024 04:25:47 GMT Cache-Control: public, max-age=86400, no-transform Age: 173 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-18 04:28:40 UTC	170	IN	Data Raw: 52 49 46 46 a2 00 00 00 57 45 42 50 56 50 38 4c 95 00 00 00 2f 0f c0 03 10 05 d4 da b6 96 47 af 93 94 43 2d c4 c5 c5 c5 31 33 2b 4e dc 38 2e 81 99 14 33 db 71 8c 47 bc f7 4d 0d 11 47 fe 9f 00 d0 7e be 34 fc 32 49 50 5f 9e ea 29 a5 9c a4 fe bc bb 5a 3a d5 7d e9 f6 9e fe 95 24 ad e4 d5 af c9 bf aa d7 20 4f 8f cb c5 ea a4 11 2c a5 94 91 8a 86 fd 51 55 bb 8a b7 fe 54 07 8d c2 ab 24 cf 3f 25 f9 db e8 e6 fe 7a 29 3b 49 32 5a 39 d5 fa 7f 3d 24 f9 de d5 7b f8 2f 75 a8 94 32 70 e1 63 6a 90 5c 9a bd fd 25 6d 00 00 Data Ascii: RIFFWEBPVP8L/GC-13+N8.3qGMG~42IP_)Z:}$ O,QUT$?%z);I2Z9=${/u2pcj\%m

Timestamp	Bytes transferred	Direction	Data
2024-07-18 04:28:40 UTC	1097	OUT	GET /0apCRgnn7rmfimpMKLWLoxIgZT38zy43viBiFEWrlBz78etDfabSeBuV9JIbxXRlIg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-18 04:28:41 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 19 Jul 2024 04:28:40 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Thu, 18 Jul 2024 04:28:40 GMT Server: fife Content-Length: 6498 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-18 04:28:41 UTC	868	IN	Data Raw: 52 49 46 46 5a 19 00 00 57 45 42 50 56 50 38 4c 4d 19 00 00 2f a5 c0 49 00 b5 06 82 b6 6d d3 94 3f ed 47 fd 75 00 11 31 01 f9 61 4f 20 ea 4f eb 5a 64 73 8a ed c3 69 de 65 82 56 59 8e 82 15 90 29 e3 4c 6f b5 02 f1 20 23 2b 20 cb 51 b0 02 72 9b 63 c0 d8 d1 17 b1 b5 ad fd ff a2 46 52 9e 67 2f c4 f7 cc 0e f7 5e fc 12 f6 d0 dd dd c6 7d 26 ad e9 b8 10 c1 9d 04 27 ee 41 02 09 5e 38 54 41 58 a9 cc 50 c3 3f 35 3e 43 08 4d 42 23 d5 40 ea 07 03 a4 81 1b db b6 5b 65 5d 7d ef 31 b1 f7 10 53 02 fd 77 42 66 35 7a d2 81 1b 49 b6 6b a5 77 ef fb 1f 95 00 f9 c7 81 49 00 ca c6 c4 d6 1a de bd fd 87 e0 b6 8d 24 89 9e d9 33 b5 f7 6e 55 aa bb f7 01 b4 b0 6d 3f e7 46 bf c5 91 6d 5b b1 6d db b6 6d 4e cc da 8d 6d db b6 33 88 9d 4c d2 4c 15 3b 99 ae f7 74 fa 5b 5b bf e5 ec 55 b7 47 Data Ascii: RIFFZWEBPVP8LM/Im?Gu1aO OZdsieVY)Lo #+ QrcFRg/^}&'A^8TAXP?5>CMB#@[e]}1SwBf5zIkwI$3nUm?Fm[mmNm3LL;t[[UG
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: 4c f0 4d 9e 86 23 94 54 69 f2 4a f8 30 47 df e1 b8 e9 72 16 2c 2b c4 91 77 aa 02 4d 6d af d8 94 e4 79 24 c9 8c a9 b3 b3 64 ef 2f 45 ff aa 04 ea 0b 7e 53 88 23 95 c8 03 83 10 de 62 18 9c fd 76 72 51 15 d3 53 0e 69 ef 1c 5a 23 fe 0f bd 67 09 ed 2d a8 eb 02 6d 99 ea 05 92 7f fb a2 1d b8 e5 5d 67 e5 86 fb 40 5a ff a6 5e e4 95 8a 1d b7 56 64 dd 12 f7 1b a1 cf 8e c9 be 08 68 4e 97 a7 2f 80 55 e8 bc cc 83 3e 40 b6 39 35 5f 8d 85 1d 89 5b 01 5d f1 9a a1 cc 76 8d 54 f2 6e 0a fd 9a ea e0 0f 38 dc bd 60 7b ce ec 2d 10 e3 57 f8 32 25 3c 6a 53 f0 23 dd 66 53 e8 a8 e2 bc e3 36 7d af 0d f1 cf 2b 15 36 cf eb 1a ae af 47 83 e1 2e 3b 00 8e ec 61 b0 c4 3a f0 6c fb 06 3f 0a ae ef 94 a6 04 b2 cd 0d c4 67 60 ee 5e 19 8c df 32 d9 89 54 e2 fe 27 a3 05 da ba 0c 26 99 6b 9a 43 ec Data Ascii: LM#TiJ0Gr,+wMmy$d/E~S#bvrQSiZ#g-m]g@Z^VdhN/U>@95_[]vTn8`{-W2%<jS#fS6}+6G.;a:l?g`^2T'&kC
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: 3c 3b 78 bf 3e 01 00 92 0b 79 c1 dd 48 f3 7d 4a 12 23 8c 00 60 c6 81 f6 31 12 78 ec a2 66 1e 2d 4b 70 31 b2 88 98 27 a5 14 42 d2 d4 44 e8 d8 e0 3e 2a b6 58 e3 36 7d 0b 14 0c 32 42 9c be 8b 28 97 77 e8 68 30 f0 3a 4f 4e 40 c9 78 c0 c3 ff 9f 73 78 2e 4a 3a a9 9d df d7 26 5f 2e e8 25 95 20 c9 95 bb f4 73 4a c2 2e 10 02 e0 01 e0 46 8f 05 2d 5c 8a 53 c8 88 23 e1 05 0e 98 e7 3c 4d 12 01 30 47 0f 44 08 f1 d0 57 d3 69 e9 a1 60 8b 37 a8 28 71 41 70 1b 0c 3b 93 44 d9 47 c1 21 28 d9 8a 88 de 5f 33 a0 43 cc b0 3a f2 e0 64 f8 2b d5 7c 57 02 c0 03 21 3e 22 28 00 28 12 72 f7 59 db a0 0a 49 a6 a9 a6 28 98 48 c0 e7 00 0d 4f 1e e1 cc e3 c0 02 40 9f 47 02 27 33 84 c8 45 70 70 44 ae 79 41 c1 2e cf 00 c7 f0 31 b0 80 18 35 fd 43 74 88 40 ab 04 23 11 00 3c 67 7b a4 fd 3a 15 be Data Ascii: <;x>yH}J#`1xf-Kp1'BD>*X6}2B(wh0:ON@xsx.J:&_.% sJ.F-\S#<M0GDWi`7(qAp;DG!(_3C:d+\|W!>"((rYI(HO@G'3EppDyA.15Ct@#<g{:
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: f7 00 5f 85 9a 0c ae ef 41 3a 99 24 88 e7 bd cb d9 56 5b c2 54 c6 86 7d aa f1 57 21 25 ae cf 2b 16 7a cc db 1f e6 e3 bf d0 e7 83 85 81 9c d4 58 d1 d9 02 04 f7 c5 24 ed 49 2a 70 7f e5 f9 e8 2f b0 03 79 95 61 4b 12 7a b3 fc 7e 33 fd 79 cd f1 fb 37 a0 0c b2 4f 17 7a cb ff c3 5f fd ea 71 ff 6f ef 6a 1b b4 41 c7 cc db 80 00 00 ba 14 bf 18 44 44 c4 78 68 4f 19 fa 1b fb b3 a5 d3 54 69 48 8a a3 d9 87 9f f7 7f fb c9 eb f3 cf 6e 8b 7f 65 cc 02 fc 06 63 57 48 3c 8c b0 4a 1a 60 78 08 88 c1 10 a4 48 02 09 4a 80 03 35 01 0b 94 4a 04 7e ac 74 b7 80 9a 86 3d 80 a5 20 cc 0b ac 02 46 d2 28 79 95 20 f0 1a b9 19 ee 81 94 79 55 35 a6 db f4 e2 39 a9 ba 2b cf ef 4d 9f 2e 38 de 2c 1c 5e fd 21 37 5c 83 3f 00 fc 09 3f 7f 44 72 c8 04 ff 33 4f 9c 30 9d 02 07 1e 53 d8 58 a0 60 e0 36 Data Ascii: _A:$V[T}W!%+zX$I*p/yaKz~3y7Oz_qojADDxhOTiHnecWH<J`xHJ5J~t= F(y yU59+M.8,^!7\??Dr3O0SX`6
2024-07-18 04:28:41 UTC	1390	IN	Data Raw: 00 54 c8 e6 80 38 29 66 11 d3 52 b1 88 8f e6 df b1 33 88 0c 09 4b 78 79 bc 8a 99 a6 8d fa 16 51 0a 49 c6 99 a1 23 65 1e 1f 2a 94 88 c0 e8 66 cc cf d3 48 38 a2 3d 81 93 aa 86 97 f9 01 65 94 ac c4 06 ef e5 17 fb 8f ff 0d 9b ae e3 a6 1b bf 79 96 b8 cc 05 3a d5 a1 e1 46 ab 7c 02 80 05 00 00 20 86 19 d8 02 5a bb b8 70 b0 8c 8c 75 8a 26 8e 51 70 c4 01 21 f6 a8 b9 29 f5 6f bc 10 48 79 18 a6 2c 26 c8 45 c5 4c 71 87 08 76 32 76 c8 1f 71 e2 85 8b 87 3c 8f 38 29 96 40 ab a4 3d d7 24 9f 46 c9 b3 55 c6 24 d0 1d ae 43 1e ac 94 f6 f3 23 f3 85 4d b7 a2 0d 6d 00 5a 1b b6 ae 6b cc 60 b5 ef de 7f b9 a3 ed fe 87 41 ea 22 ce 38 3c 44 16 7b cc 83 7f 86 53 92 e6 66 93 f3 aa 39 bd 97 05 de bb 8a 5c 6e 73 26 69 c9 ee 61 56 23 73 29 05 bf 8e 30 9f 18 66 0a 72 ba 20 49 c9 e1 c6 97 Data Ascii: T8)fR3KxyQI#e*fH8=ey:F\| Zpu&Qp!)oHy,&ELqv2vq<8)@=$FU$C#MmZk`A"8<D{Sf9\ns&iaV#s)0fr I
2024-07-18 04:28:41 UTC	70	IN	Data Raw: db ae 40 76 e3 a5 8d 2b db 43 3e 6c af 7d 03 d9 4e 00 87 b2 2c 83 78 e2 06 0b 28 1c fa c5 b1 6b 40 e2 9a 14 a4 13 97 a0 d8 25 01 20 91 a8 85 e1 c2 83 0f 64 d3 2a 35 22 00 42 49 81 6c 80 26 f3 89 ff be 76 42 00 Data Ascii: @v+C>l}N,x(k@% d*5"BIl&vB